Dynamic re-constitution of a software defined perimeter (sdp) for micro-services network applications in a 5g/6g network

A data processing system adapted for the dynamic re-constitution of a software defined perimeter (SDP) for network applications in a 5G/6G telecommunications network, the system comprising:

• a host computing platform hosting in memory a multiplicity of central units (CUs) of the 5G/6G telecommunications network, the CU comprising a communicative coupling to a multiplicity of different distributed units (DUs), at least one of the DUs comprising an antenna transmitting over millimeter wave frequencies, the platform comprising one or more computers, each comprising memory and at least one processor;
• and,
• an SDP dynamic re-constitution module operating in concert with a network controller and disposed within the host computing platform, the module comprising computer program instructions enabled while executing in the memory of the host computing platform to perform:
• authenticating both a device and also a user of the device seeking access to an initial set of network resources defining an initial SDP;
• directing the network controller to generate an individual network communications link over which no other device is granted access between the authenticated device and a northbound application programming interface (API) to one or more micro-services network applications of the initial SDP provisioned for use by the authenticated device;
• monitoring data traffic from the micro-services network applications over the individual network communications link and submitting the monitored data traffic to a predictor, the predictor predicting a traffic pattern necessitating a change in the initial set of the network resources of the initial SDP;
• and,
• responsive to the predictor, defining a new SDP with a different set of the network resources, terminating the network communications link, establishing a new communications link between the authenticated device and the new SDP.

A computing device comprising a non-transitory computer readable storage medium having program instructions stored therein, the instructions being executable by at least one processing core of a processing unit to cause the processing unit to perform the dynamic re-constitution of a software defined perimeter (SDP) for network applications in a 5G/6G telecommunications network, the dynamic re-constitution including:

• authenticating both a device and also a user of the device seeking access to an initial set of network resources defining an initial SDP;
• generating an individual network communications link over which no other device is granted access between the authenticated device and a northbound application programming interface (API) to one or more micro-services network applications of the initial SDP provisioned for use by the authenticated device;
• monitoring data traffic from the micro-services network applications over the individual network communications link and submitting the monitored data traffic to a predictor, the predictor predicting a traffic pattern necessitating a change in the initial set of the network resources of the initial SDP;
• and,
• responsive to the predictor, defining a new SDP with a different set of the network resources, terminating the network communications link, establishing a new communications link between the authenticated device and the new SDP.