Software defined perimeter integration for software defined cellular telecommunications networks

A data processing system adapted for integration of a software defined perimeter (SDP) for network applications in a 5G/6G telecommunications network, the system comprising:

• a host computing platform comprising one or more computers, each with memory and one or processing units including one or more processing cores;
• and,
• an SDP integration module comprising computer program instructions enabled while executing in the memory of at least one of the processing units of the host computing platform to perform:
• receiving a registration request from a radio access network (RAN) component of a telecommunications network, into a core access and mobility management function (AMF) of a core network component of the telecommunications network;
• routing the request to an SDP controller in the core network component;
• transmitting an authentication request, over a virtual private network (VPN) coupling between a main controller and the SDP controller, on behalf of the user equipment (UE) and an end user associated with the UE;
• and,
• responsive to an authentication by the main controller, generating by the SDP controller both an SDP encapsulating a set of network resources of the telecommunications network within the SDP supporting microservices accessible by the UE, and a secure tunnel over which no other device is granted access between the UE and a gateway in a data plane of the telecommunications network,
• wherein the gateway moderates subsequent data flows between the UE and the microservices.

A computing device comprising a non-transitory computer readable storage medium having program instructions stored therein, the instructions being executable by at least one processing core of a processing unit to cause the processing unit to perform integration of a software defined perimeter (SDP) for network applications in a 5G/6G telecommunications network, by:

• receiving a registration request from a radio access network (RAN) component of a telecommunications network, into a core access and mobility management function (AMF) of a core network component of the telecommunications network;
• routing the request to an SDP controller in the core network component;
• transmitting an authentication request, over a virtual private network (VPN) coupling between a main controller and the SDP controller, on behalf of the user equipment (UE) and an end user associated with the UE;
• and,
• responsive to an authentication by the main controller, generating by the SDP controller both an SDP encapsulating a set of network resources of the telecommunications network within the SDP supporting microservices accessible by the UE, and a secure tunnel over which no other device is granted access between the UE and a gateway in a data plane of the telecommunications network,
• wherein the gateway moderates subsequent data flows between the UE and the microservices.