Info Image

Safeguarding ORAN Technology with FPGAs

Safeguarding ORAN Technology with FPGAs Image Credit: plahotya/BigStockPhoto.com

The rise of 5G has led to faster internet speeds [1], more IoT devices [2], and increased Edge computing [3] across the global telecommunications sector. As a key technology standard for broadband networks, 5G is driving the adoption of decentralized networks like Open Radio Access Network (ORAN). More than half of telecoms leaders (55%) [4] are considering ORAN to increase the flexibility and efficiency of the networks.

While pivoting away from centralized models can enhance flexibility and innovation, it also increases vulnerability to digital threats due to the increased attack surface. This raises the stakes for telecom organizations to prioritize the cyber resilience of the networks. In addition, each year, we see more firmware attacks [5], more IoT device connections expanding the attack surface, and more security standards [6] making it clear that the 5G ecosystem can pose a major cybersecurity risk.

In order to improve resilience in this new disaggregated environment, protection must come from both the software and hardware level. As a result, developers are turning to Field Programmable Gate Arrays (FPGAs) to secure and deploy ORAN architecture while driving technological transformation.

The ORAN framework

Unlike the proprietary architectures that have dominated cellular networks since their inception, ORAN-based networks offer the flexibility of creating best-of-breed solutions by combining elements from multiple vendors. These new open and disaggregated architectures, software, and hardware give operators the flexibility to extend 5G to more users and encourage innovation amongst the expanded set of vendors contributing solutions.

However, ORAN solutions don’t just give carriers a larger ecosystem of vendors to choose from — they also invite companies to be more innovative with 5G technology. With ORAN, operators simply have more options. They can add or create new services for network deployment that were once limited by the coupling of proprietary hardware and software.

Despite these benefits, as networks move away from a single-vendor solution and become more open, the attack surface is also becoming much larger and vulnerable to threat actors. To avoid these issues, network equipment vendors and service providers need to think through what elements are necessary to ensure that their networks and the data passing through them remain safe and secure.

Fortunately, low power FPGAs can be used for everything from hardware root of trust (HRoT) to network function acceleration, and secure communications in an ORAN environment.

How FPGAs secure ORAN architecture

FPGAs are critical for ORAN and 5G deployment because they give developers robust security features, accurate synchronization, and adaptability due to their reconfigurable nature.

Zero Trust and Hardware Root of Trust Security

Zero Trust and HRoT foundations are key to protecting, detecting, and recovering from attacks – the three key elements of any cyber resilience strategy. Secure FPGAs promote these foundations by establishing user and device identities that are connected to the network before permitting data exchanges or signals.

Further, secure FPGAs serve as HRoT devices as they contain dedicated security engines that can be proven as well as tested through unique IDs, ensuring that a system’s core functions and critical components can be verified at any point in time.

Timing and Synchronization

To ensure that disaggregated systems are functioning and secure, high precision timing and synchronization are required. Without high synchronization of timing controls, ORAN networks can experience increased vulnerability and attacks. Since all critical information within the 5G ORAN network relies on synchronization, without it, network infrastructure is jeopardized and it can even lead to the entire network coming down. Hence, there is a critical need for synchronization that is not only precise but also secure. By synchronizing clocks throughout a distributed system with integrated mutual authentication, FPGAs ensure precise timing and provide the necessary security to protect networks.

FPGAs also support different configurations of the Institute of Electrical and Electronics Engineers (IEEE) 1588 standards, including the Precision Timing Protocol (PTP) [7] and the International Telecommunication Union (ITU) to precisely synchronize clocks in a distributed system. This includes Ordinary Clock (OC), Boundary Clock (BC), and Transparent Clock (TC), as well as different ITU profiles for wireless networking such as ITU G8265.1, ITU G8275.1, and ITU G8275.2.

Flexibility and Power Consumption

As security risks continue to evolve, additional security standards – like IEEE 1588 – are being put into place. As such, network architects need solutions that can be easily adjusted post-deployment as new rules arise. FPGAs are “crypto agile” solutions designed for flexible implementation. They can be programmed and reprogrammed to align with new security standards without being removed from their host device. Even further, for 5G networks in particular, FPGAs are a useful tool as they can be utilized in a myriad of ways – for small cell applications, private networks, on-site, or at the Edge.

The telecommunications industry, and 5G networks in particular, carry an incredible amount of data. Advanced features often require more energy consumption, making power budget a critical concern when implementing the bandwidth-intensive applications that are enabled by 5G. In turn, the need for hardware acceleration to implement complex functions and use cases across the networks is only growing. With 5G networks, low power FPGAs are a great option as they are ideal for applications that are small cell or on a private network and can be utilized at the Edge or on-site directly, alongside lowering operational expenditure.

FPGAs and the future of 5G

The rapid rise of 5G has reshaped the global telecommunications sector, ushering in a decentralized era with ORAN at its forefront. Despite ORAN’s innovative potential, its vulnerabilities require an increased focus on cyber resilience.

FPGAs have emerged as a powerful tool for securing ORAN architecture by offering robust security, precise synchronization, and adaptability to evolving standards and trends. As the telecommunications industry continues to shift toward 5G and ORAN, FPGA adoption will play a critical role in fostering a safer future.

References

  • [1] https://www.allconnect.com/blog/internet-speeds-over-time  
  • [2] https://www.statista.com/statistics/1183457/iot-connected-devices-worldwide
  • [3] https://finance.yahoo.com/news/36-3-cagr-edge-computing-092500362.html
  • [4] https://investors.jabil.com/news/news-details/2022/Jabil-Announces-Results-of-Global-Survey-on-5G-Technology-Trends/default.aspx  
  • [5] https://www.microsoft.com/en-us/security/blog/2021/03/30/new-security-signals-study-shows-firmware-attacks-on-the-rise-heres-how-microsoft-is-working-to-help-eliminate-this-entire-class-of-threats
  • [6] https://www.whitehouse.gov/briefing-room/statements-releases/2023/03/02/fact-sheet-biden-harris-administration-announces-national-cybersecurity-strategy
  • [7] https://standards.ieee.org/ieee/1588/4355
NEW REPORT:
Next-Gen DPI for ZTNA: Advanced Traffic Detection for Real-Time Identity and Context Awareness
Author

Mamta Gupta is Director of Portfolio Management at Lattice Semiconductor. Mamta leads the Security Product Marketing and the Communications Segment Marketing Teams. She brings with her over 20 years of FPGA experience in product development with special focus on security, Aero-space and defense segments. Upon joining Lattice in 2019, Mamta has led various strategic initiatives to establish Lattice as the Trusted security solutions provider and to develop secure and flexible solutions for the telecom customers. Mamta holds a Master of Science degree in Quantum Physics from University Delhi, India and professional certifications in IC Engineering and Fabrication from UC Berkeley and Advanced Program Management from Stanford University.

PREVIOUS POST

Push to Eliminate 'Digital Poverty' to Drive Demand for Satellite-Powered Broadband Connectivity Post Pandemic