5G Slice Selection for Secure Token Enrollment

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing token enrolment systems face security risks and network capacity issues during token enrolment, particularly in heavily trafficked networks, leading to potential data breaches and inconvenience.

Innovation Solution

A network selector server assesses the communication network and directs user devices to connect to a 5G network slice with enhanced security mechanisms, ensuring secure and efficient token enrolment by evaluating network features and capabilities.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If token enrolment is performed on the network the user is already connected to, then the enrolment process is simple and quick, but security risks increase and network capacity may be insufficient

Engineering Contradiction:
Improvetoken enrolment process simplicityVSAvoidsecurity and network capacity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

A network selector server is introduced as an intermediary between the user device and the token enrolment network. The server assesses the current network's suitability and redirects traffic to appropriate enrolment networks, resolving the contradiction by adding a mediation layer that evaluates both security and operational factors before routing enrolment requests

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The network selector server performs preliminary assessment of network conditions (security features, capacity, traffic) before directing token enrolment requests. This advance evaluation ensures that enrolment only proceeds on suitable networks, preventing security risks and capacity overload while maintaining operational simplicity for users

Inventive Principle:
Principle #10Preliminary action

2Reliability

If a 5G network slice is used for token enrolment, then security and service quality are enhanced, but network complexity increases

Engineering Contradiction:
Improvesecurity and service qualityVSAvoidnetwork architecture complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The 5G network is segmented into dedicated slices, with specific slices allocated for token enrolment functions. This segmentation isolates enrolment traffic from other network operations, enhancing security and service quality while managing complexity through functional separation rather than monolithic architecture

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The network selector server acts as an intermediary that manages complexity by handling slice selection and network routing automatically. Users interact with the simple enrolment process while the intermediary manages the underlying 5G slice complexity, shielding users from complexity while delivering enhanced security

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentEP4708172A15g secure token enrollment using slicing capabilities
Publication Date: 2026.03.11 MASTERCARD INT INC
  • EP4708172A1 patent drawingFigure 1
  • EP4708172A1 patent drawingFigure 2
  • EP4708172A1 patent drawingFigure 3

AI summary

The present invention relates to a computer-implemented method for providing secure token enrolment, the method comprising receiving over a communication network 104, at a network selector server 110 associated with a payment network 108, a first token enrolment request message from a user device 102, determining, at the network selector server 110, a feature of the communication network 104, sending a request message, from the network selector server 110 to the user device 102, based on the determined feature of the communication network 104, instructing the user device 102 to connect to a 5G network slice 106a-c associated with a 5G Network 106, receiving over the 5G network slice 106a-c, at the network selector server 110, a second token enrolment request message from the user device 102, determining, at the network selector server 110, a feature of the 5G network slice 106a-c, determining, at the network selector server 110, based on the determined feature of the 5G network slice 106a-c, whether to approve the second token enrolment request message.