Network Slice Connection Grading for Dual-System 5G Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing technologies lack a solution for implementing network slice grading in dual-system or multi-system environments without interference between network slices, particularly in 5G network slicing, where a dual-Android system with shared SIM cards requires secure and reliable methods to manage slice requests without modifying applications.

Innovation Solution

A method and apparatus that distinguish between different system applications using unique user identities (UIDs) to determine appropriate slice levels and establish connections, employing a slice request grading module to authenticate and encrypt data, ensuring non-interference and security in dual-system environments.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If network slicing is implemented in dual-system environments without slice grading, then system complexity is reduced and ease of operation is improved, but network slice interference occurs and security is compromised

Engineering Contradiction:
Improvenetwork slice securityVSAvoidslice management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments network slices by introducing slice level ranges (first slice level range for working system, second slice level range for living system) to separate and manage different network slices independently, preventing interference while maintaining security

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces a slice request grading module as an intermediary component that automatically authenticates applications and determines appropriate slice levels, managing the complexity of slice differentiation without requiring application modifications

Inventive Principle:
Principle #24Intermediary (Mediator)

2Measurement precision

If applications are modified to support network slice grading, then slice level control precision is improved, but ease of manufacture and deployment deteriorate

Engineering Contradiction:
Improveslice level control precisionVSAvoiddeployment ease
Core Design Contradiction:
Measurement precisionVSEase of manufacture

Solution Approach 1:

The patent enables applications to self-identify their slice levels through automatic authentication using unique user identities (UIDs), eliminating the need for manual application modifications while maintaining precise slice level control

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The patent performs preliminary authentication and slice level determination through the slice request grading module before network slice connection is established, ensuring precise control without requiring application changes during deployment

Inventive Principle:
Principle #10Preliminary action

3Loss of information

If unique user identities are used to distinguish system applications, then slice request differentiation is improved, but information processing complexity increases

Engineering Contradiction:
Improveslice request identification accuracyVSAvoididentity management complexity
Core Design Contradiction:
Loss of informationVSDevice complexity

Solution Approach 1:

The slice request grading module acts as an intermediary that automatically processes unique user identities (UIDs) to determine slice levels, improving identification accuracy while managing the complexity of identity processing centrally rather than in each application

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS12452783B2Network slice connection method and apparatus, storage medium, and electronic apparatus
Publication Date: 2025.10.21 ZTE CORP
  • US12452783B2 patent drawing
  • US12452783B2 patent drawing
  • US12452783B2 patent drawing

AI summary

A network slice connection method includes: acquiring a network slice activation request of an application, where the network slice activation request carries an application user identity (UID) and a slice traffic descriptor identity; determining a system to which the application belongs according to the UID, and acquiring a target application package name corresponding to the UID from the system to which the application belongs; determining a first slice level range that corresponds to the target application package name and is allowed to be used by the application; and establishing a network slice connection according to the first slice level range and the slice traffic descriptor identity.