Engineering cryptographic edge gateways for 5G inter-PLMN roaming conforming to 3GPP TS 33.501 and GSMA FS.34.
In 5G networks, the Security Edge Protection Proxy (SEPP) acts as the boundary gateway between different public land mobile networks (PLMNs). Communication across the N32 interface is divided into N32-c (control plane) and N32-f (application plane). TeleHSM executes N32-f PRINS encryption at wire speed, ensuring roaming data remains confidential across third-party IPX transit networks.
Rather than encrypting the entire HTTP/2 message and blinding IPX transit routers, TeleHSM selectively encrypts sensitive JSON attributes (subscriber IMSI, location) using JSON Web Encryption, while leaving routing headers clear for intermediate network steering.