Network slicing with edge security services in communication networks

A communication network comprising:

• a control plane configured to:
• in response to a session request for a user device, select a network slice for the user device wherein the session request identifies the network slice;
• indicate the network slice to the user device;
• determine the user device qualifies for enhanced slice security;
• and
• in response to determining the user device qualifies for the enhanced slice security, update the network slice to route user data for a session of the user device on the network slice to an edge security service;
• and
• a user plane configured to:
• exchange the user data with the user device over the network slice;
• and
• route the user data to the edge security service wherein the edge security service enforces security policies on the user data and delivers the user data to a data network.

One or more non-transitory computer readable storage media having program instructions stored thereon, wherein the program instruction, when executed by a computing system, direct the computing system to perform operations, the operations comprising:

• responsive to registration authentication of a user device, retrieving subscriber attributes for the user device that indicate the user device is subscribed for secondary authentication and enhanced slice security;
• performing the secondary authentication of the user device to enable the enhanced slice security;
• selecting a network slice for the user device;
• indicating the network slice to the user device;
• exchanging user data with the user device over the network slice;
• and
• routing the user data to an edge security service based on the secondary authentication wherein the edge security service enforces security policies on the user data and delivers the user data to an enterprise network.