Trust mode switching for wireless access points

A non-transitory computer-readable medium storing instructions which, when executed by a processor deployed in a telecommunication network, cause the processor to perform operations, the operations comprising:

• detecting an occurrence of a security event associated with a wireless access point that is in communication with a gateway device of the telecommunication network via a trusted link, wherein the security event comprises:
• an invalidity of a security certificate of the wireless access point;
• a detection of a physical tampering at the wireless access point;
• or
• a detection of a port opening at the wireless access point;
• establishing, responsive to the detecting, a secure tunnel between the gateway device and an endpoint device, wherein the endpoint device is accessing the telecommunication network via the wireless access point and the gateway device, wherein a path of the secure tunnel includes an untrusted link between the wireless access point and the gateway device;
• transporting payload traffic between the endpoint device and the gateway device via the secure tunnel, wherein the payload traffic that is transported via the secure tunnel is indecipherable by the wireless access point;
• releasing the trusted link, wherein the wireless access point remains in communication with the gateway device via the untrusted link;
• detecting a resolution of the security event;
• and
• reestablishing the trusted link between the gateway device and the wireless access point when the resolution of the security event is detected.

A method comprising:

• detecting, by a processor deployed in a telecommunication network, an occurrence of a security event associated with a wireless access point that is in communication with a gateway device of the telecommunication network via a trusted link, wherein the security event comprises:
• an invalidity of a security certificate of the wireless access point;
• a detection of a physical tampering at the wireless access point;
• or
• a detection of a port opening at the wireless access point;
• establishing, by the processor, responsive to the detecting, a secure tunnel between the gateway device and an endpoint device, wherein the endpoint device is accessing the telecommunication network via the wireless access point and the gateway device, wherein a path of the secure tunnel includes an untrusted link between the wireless access point and the gateway device;
• transporting, by the processor, payload traffic between the endpoint device and the gateway device via the secure tunnel, wherein the payload traffic that is transported via the secure tunnel is indecipherable by the wireless access;
• releasing, by the processor, the trusted link, wherein the wireless access point remains in communication with the gateway device via the untrusted link;
• detecting, by the processor, a resolution of the security event;
• and
• reestablishing, by the processor, the trusted link between the gateway device and the wireless access point when the resolution of the security event is detected.