Providing cybersecurity services by a network and automated provisioning thereof

A system, comprising:

• an Access Control Function, ACF, configured to:
• receive a request to establish a data connection from a user equipment, UE, said request comprising a requested cybersecurity control service identifier, CSC-ID, corresponding to a first security service of a plurality of security services, and to send the message (304) to the CCF (114);
• interact with a Cybersecurity control, CSC, function, to determine, based on the requested CSC-ID, an allowed CSC-ID corresponding to an allowed security service for the user equipment;
• and
• send a registration accept message to the user equipment comprising the allowed cybersecurity control service identifier, CSC-ID.

A method implemented on a computer device for providing cybersecurity services by a network, comprising:

• receiving a message in response to a request to establish a data connection from a user equipment, UE, the message including a requested cybersecurity control service identifier, CSC-ID, corresponding to a first security service of a plurality of security services, the first security service being requested by the UE to be provisioned for the data connection;
• interacting with a CyberSecurity Control, CSC, function to determine, based on the requested CSC-ID, an allowed CSC-ID for the data connection, the allowed CSC-ID corresponding to a second security service of the plurality of security services;
• retrieving from a database storing respective operator security policies corresponding to a plurality of security services provided by the network, based on the allowed CSC-ID, an operator security policy associated with the second security service corresponding to the allowed CSC-ID;
• and
• selecting and configuring a network function in accordance with the retrieved operator security policy associated with the second security service.

A method implemented on a computer device for providing cybersecurity services by a network, comprising:

• receiving a request to establish the data connection from a user equipment, UE, said request comprising a requested cybersecurity control service identifier, CSC-ID, corresponding to a first security service of a plurality of security services;
• interacting with a Cybersecurity control, CSC, function, to determine, based on the requested CSC-ID, an allowed CSC-ID corresponding to an allowed security service for the user equipment;
• and
• sending a registration accept message to the user equipment comprising the allowed cybersecurity control service identifier, CSC-ID.