On-demand wireless device centric security for a 5G wireless network

A network access node of a 5G wireless network, the network access node comprising:

• a processor;
• and
• memory containing instructions that, when executed by the processor, cause the network access node to:
• maintain multiple security resources and multiple nominal resources for the 5G wireless network,
• wherein the multiple security resources and the multiple nominal resources are deployable on-demand based on contextual scenarios of wireless user equipment (UEs) on the 5G wireless network;
• monitor UE-originated and UE-terminated application-layer transactions of multiple wireless UEs on the 5G wireless network,
• wherein the UE-originated and the UE-terminated application-layer transactions are for different application-layer transaction types and are monitored for contextual scenarios associated with the multiple wireless UEs on the 5G wireless network;
• detect a relative security risk to the 5G wireless network based on a particular contextual scenario of a particular wireless UE,
• wherein the particular contextual scenario is based on a location of the particular wireless UE and is associated with a particular application-layer transaction on the 5G wireless network;
• upon detecting an increase in the relative security risk, trigger deployment of a security resource of the multiple security resources to support the particular application-layer transaction associated with the particular wireless UE while safeguarding the 5G wireless network;
• and
• upon detecting a decrease in the relative security risk, trigger deployment of a nominal resource of the multiple nominal resources to continue support of the particular application-layer transaction associated with the particular wireless UE.

A non-transitory computer-readable medium with instructions stored thereon that, when executed by a system, cause the system to perform operations comprising:

• monitoring application-layer communications and associated contextual scenarios of a wireless device (WD) on a wireless network;
• detecting a security risk based on a particular application-layer communication that occurs while the WD is in a particular contextual scenario,
• wherein the particular contextual scenario includes a location of the WD, a time when the particular application-layer communication occurs, and an identity of a user engaging in the particular application-layer communication;
• in response to detecting the security risk, activating a security resource to support the particular application-layer communication to safeguard the wireless network while the WD is in the particular contextual scenario;
• detecting a change in the particular contextual scenario as a change in the location of the WD while the application-layer communication is ongoing,
• wherein the change in the contextual scenario is associated with a reduction in the security risk;
• and
• in response to detecting the reduction in the security risk, activating a nominal resource to replace the security resource and support the particular application-layer communication on the wireless network.