Wireless Carrier Network Data Protection via Slicing

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The protection of sensitive user data from unauthorized access and use is a significant concern, especially with the increasing exposure of personal information online and the prevalence of IoT devices, which can be exploited to construct digital identity profiles for malicious activities such as identity theft or financial fraud.

Innovation Solution

A wireless carrier network employs network slicing technology and a data protection engine to safeguard user data by allocating specific network slices based on data sensitivity levels and ownership, enforcing data protection policies that include encryption, access restrictions, and tracking data transactions using a decentralized distributed ledger.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If data is transmitted over networks to enable online services and IoT device functionality, then service accessibility and device utility are improved, but data becomes susceptible to interception and copying by malicious actors

Engineering Contradiction:
Improveservice accessibilityVSAvoiddata interception risk
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a wireless carrier network as an intermediary between IoT devices and service providers. This network acts as a trusted mediator that enforces data protection policies, controls data transmission, and prevents direct exposure of devices to untrusted networks, thereby maintaining service accessibility while mitigating interception risks

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent extracts sensitive data processing functions from the public internet environment and relocates them to a controlled wireless carrier network environment. By separating data transmission through a trusted carrier network from general internet access, the system maintains service functionality while removing data from vulnerable exposure to malicious actors

Inventive Principle:
Principle #2Taking out (Extraction)

2Reliability

If network slicing is implemented to allocate specific networks for high-value data, then data security is improved, but device complexity and network configuration complexity increase

Engineering Contradiction:
Improvedata securityVSAvoidnetwork configuration complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements self-service mechanisms where the wireless carrier network automatically performs network slicing, policy assignment, and data protection configuration without requiring manual device configuration. The network autonomously identifies high-value data, allocates appropriate network slices, and enforces protection policies, thereby maintaining high security while minimizing user-facing complexity

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The patent creates a universal data protection framework that works across multiple device types and service scenarios through standardized network slicing and policy enforcement mechanisms. This universal approach allows the same security infrastructure to protect diverse data types without requiring device-specific complex configurations

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS11375378B2Wireless carrier network-enabled protection of high value data
Publication Date: 2022.06.28 T MOBILE US INC
  • US11375378B2 patent drawing
  • US11375378B2 patent drawing
  • US11375378B2 patent drawing

AI summary

A request from a user device to register as a secure endpoint device of a secure local area network (LAN) is received by a wireless carrier network. A device type of the user device is identified by the network based on device identification information provided by the user device. A data protection policy that corresponds to the device type of the user device is sent to a secure endpoint application on the user device following a registration of the user device as a secure endpoint device by the network, in which the data protection policy includes an Access Point Name (APN). The user device allocated a network slice of the wireless carrier network that corresponds to the APN to the user device. Subsequently, a data file is transported from the user device to an additional secure endpoint device via the network slice that is allocated to the user device.