Network slice-specific authentication and authorization integration with cloud identity providers

Abstract

A computer system implements network slice-specific authentication and authorization by integrating cloud identity providers with 5G network slices. After a user equipment completes primary authentication using subscription credentials, the system determines whether additional slice-specific authentication is required for network slices. Through a Network Slice-Specific Authentication and Authorization Function (NSSAAF), the system selects an appropriate cloud identity provider based on both the slice identifier and subscription identifier. The system establishes a backchannel authentication session with the selected provider and provisions a default network slice specifically for handling authentication traffic. This enables out-of-band multi-factor authentication between the user equipment and provider through various notification methods. Upon successful authentication, the system receives an access token and enables access to both the network slice and its associated services such as edge computing and software-defined networking. The system supports multiple authentication modes, revocation capabilities, and can maintain multiple simultaneous network slices with different security requirements.