Secure remote access to a 5G private network through a private network slice

A network node for use in a mobile network, the network node comprising:

• one or more processors;
• one or more network interfaces;
• the one or more processors being configured to:
• receive, from a user equipment (UE) in the mobile network, a message indicating a token authorization request for access to a private network slice in the mobile network for communications, the message including a token provided to the UE by an enterprise server of an enterprise private network that requested creation of the private network slice of the mobile network, the token having a claim which is set to a network slice identifier of the private network slice or an indication representing the network slice identifier;
• perform a token validation procedure in response to the token authorization request, the token validation procedure being performed based on the token having the claim and stored credentials that are mapped to the network slice identifier that is set or indicated in the claim;
• and
• based on a successful token validation of the token having the claim, send a message for causing a provisioning of one or more rules in a forwarding entity, for causing user plane (UP) traffic of the UE to be forwarded to an anchor user plane function (UPF) of the private network slice.

A computer program product, comprising:

• a non-transitory computer readable medium;
• computer instructions stored in the non-transitory computer readable medium;
• the computer instructions being executable by one or more processors of a network node of a mobile network for:
• receiving, from a user equipment (UE) in the mobile network, a message indicating a token authorization request for access to a private network slice of an enterprise for communications, the message including a token provided to the UE by an enterprise server of an enterprise private network of the enterprise, the token having a claim which is set to a network slice identifier of the private network slice or an indication representing the network slice identifier;
• performing a token validation procedure in response to the token authorization request, the token validation procedure being performed based on the token having the claim and stored credentials that are mapped to the network slice identifier that is set or indicated in the claim;
• and
• based on a successful token validation of the token having the claim, sending a message for causing a provisioning of one or more rules in a forwarding entity, for causing user plane (UP) traffic of the UE to be forwarded to an anchor user plane function (UPF) of the private network slice.