Secure enclave of UE route selection policy rules in the 5G device or network slicing

A method for User Equipment (UE) Route Selection Policy (URSP) rule security, comprising:

• receiving a set of URSP rules into the UE;
• protecting an integrity of URSP rules associated with an application or network slices in a mobile communication network;
• validating a digital signature of the URSP rules;
• and
• when the digital signature does not match, accessing a new set of URSP rules from a policy control function (PCF) in the mobile communication network or, when the PCF does not provision the set of URSP rules and the UE has pre-configured URSP rules in both the USIM and a mobile equipment (ME), then accessing the set of URSP rules from the USIM.

A system for User Equipment (UE) route selection policy (URSP) rule security, comprising:

• a UE configured to receive a set of URSP rules with traffic descriptors with criteria for matching the URSP rules to a packet sent by the UE;
• the criteria is set based on at least one of a data network name (DNN), Application Identity (ID), fully qualified domain name (FQDN), or internet protocol (IP)-Tuple;
• every time a packet is prepared for transmission, the UE validates the URSP rules before a match of the URSP rules is made to a protocol data unit (PDU) session;
• the system verifies a content and signature of the URSP rules have not been altered;
• when the URSP rules cannot be verified, the UE accesses a core network to request an update to the URSP rules;
• and
• when the URSP rules can be verified, the UE matches the URSP rules to the PDU session.