Trust architecture for telecommunication network slice security

A system for telecommunication network slice security, the system comprising:

• a user equipment (UE) configured to couple to a telecommunications network, the UE comprising one or more processors and one or more tangible computer-readable media storing non-transitory computer-usable instructions that, when executed by the one or more processors, cause the one or more processors to:
• execute a local policy decision point and a local policy enforcement point that regulate access to service resources directed to or originating from the UE within a network slice instance of the telecommunications network, the network slice instance comprising a plurality of slice network functions configured by a slice trust manager of the telecommunications network, wherein the slice trust manager configures at least one slice protection point corresponding to the local policy decision point and the local policy enforcement point;
• apply the local policy enforcement point to regulate service requests directed to or originating from the UE based on a local security policy defined by the local policy decision point based on a slice security policy communicated from the slice trust manager;
• and
• deny, by the local policy enforcement point, a service request from the telecommunications network directed to the UE from an entity not identified as an authorized interconnect in the slice security policy.

A system for telecommunication network slice security, the system comprising:

• a user equipment (UE) configured to couple to a telecommunications network, the UE comprising one or more processors and one or more tangible computer-readable media storing non-transitory computer-usable instructions that, when executed by the one or more processors, cause the one or more processors to:
• execute a local policy decision point and a local policy enforcement point that regulate access to service resources directed to or originating from the UE within a network slice instance of the telecommunications network, the network slice instance comprising a plurality of slice network functions configured by a slice trust manager of the telecommunications network, wherein the slice trust manager configures at least one slice protection point corresponding to the local policy decision point and the local policy enforcement point;
• apply the local policy enforcement point to regulate service requests directed to or originating from the UE based on a local security policy defined by the local policy decision point based on a slice security policy communicated from the slice trust manager, wherein the local security policy regulates a type of radio access technology (RAT) permitted for the UE to connect to the network slice instance via a radio access network (RAN) of the telecommunications network;
• and
• deny, by the local policy enforcement point, a service request originating from the UE to connect to the network slice instance using a RAT type not permitted by the local security policy.