Patent Application
20230388797
The present disclosure relates generally to wireless telecommunications, and, in particular embodiments, relates to handling of an authentication procedure when Xn handover takes place from one serving PLMN to another serving PLMN during the authentication procedure.
The purpose of the primary authentication and key agreement procedure is to enable mutual authentication between the UE and the network and to provide keying material that can be used between the UE and the network in subsequent security procedures, as specified in 3GPP TS 33.501 [5]. The keys KAUSF, KSEAF and KAMF are generated after successful authentication procedure.
Two methods are defined:
The UE and the AMF shall support the EAP based primary authentication and key agreement procedure and the 5G AKA based primary authentication and key agreement procedure. When the authentication procedure fails in the network then the AMF returns an Authentication Reject message to the UE. The serving network name is used to calculate the RES* and XRES* by the UE and the UDM respectively. If the RES* and HRES* verification is done successfully at the AUSF, the AUSF considers the authentication procedure as success. The serving network name is used in the derivation of the anchor key (KAUSF). It binds the anchor key to the serving network by including the serving network identifier (SN Id). It makes sure that the anchor key is specific for authentication between a 5G core network and a UE by including a service code set to “5G”. In 5G AKA, the serving network name has a similar purpose of binding the RES* and XRES* to the serving network. The SN Id identifies the serving PLMN. For the UE point of view it is the serving network that the network is authenticating to. For the UDM it is the serving network that is sent by the AUSF.
On the other hand,
NPL 1: 3GPP TR 21.905: “Vocabulary for 3GPP Specifications”. V16.0.0 (2019June)
NPL 2: 3GPP TS 23.501: “System architecture for the 5G System (5GS)”. V16.6.0 (2020September)
NPL 3: 3GPP TS 23.502: “Procedures for the 5G System (5G″S)” V16.6.0 (2020September)
NPL 4: GPP TS 24.501: “Non-Access-Stratum (NAS) protocol for 5G System (5GS); Stage 3” V16.6.0 (2020September)
NPL 5: 3GPP TS 33.501: “Security architecture and procedures for 5G system” V16.4.0 (2020September)
NPL 6: 3GPP TS 33.102: “3G Security; Security architecture” V16.0.0 (2020July)
NPL 7: 3GPP TS 24.301: “Non-Access-Stratum (NAS) protocol for Evolved Packet System (EPS)” V16.6.0 (2020September)
NPL 8: 3GPP TS 29.272: “Mobility Management Entity (MME) and Serving GPRS Support Node (SGSN) related interfaces based on Diameter protocol” V16.4.0 (2020September)
An authentication procedure can be initiated at any time by an AMF based on local policy. There can be a scenario that the Xn handover takes place from one serving PLMN to another serving PLMN during an ongoing authentication procedure. In this scenario, the UE and 5G core network (e.g. AUSF, UDM) are out of sync with regards to current serving PLMN. I.E. While the UE maintains the PLMN after the Xn handover procedure takes place, the 5G core network may maintain the PLMN before the Xn handover procedure takes place. This mismatch in the UE and 5G core network may lead to a failure in the authentication procedure and hence the user can no longer access services.
In a first aspect of the present disclosure, a method a communication apparatus, is provided, and the method comprises: performing a registration procedure to a first Public Land Mobile Network (PLMN) for a user equipment (UE); sending a first message to perform an authentication for the UE, wherein the first message includes an identifier of the first PLMN; performing a handover procedure with a change from the first PLMN to a second PLMN for the UE; receiving a second message, wherein the second message includes the identifier of the first PLMN; and sending an authentication request message to the UE, wherein the authentication request message includes the identifier of the first PLMN.
In a second aspect of the present disclosure, a method of a user equipment (UE) is provided, and the method comprises: performing a registration procedure to a first Public Land Mobile Network (PLMN); performing a handover procedure with a change from the first PLMN to a second PLMN; receiving an authentication request message, wherein the authentication request message includes an identifier of the first PLMN; and performing an authentication procedure based on the identifier of the first PLMN.
In a third aspect of the present disclosure, a communication apparatus comprises: means for performing a registration procedure to a first Public Land Mobile Network (PLMN) for a user equipment (UE), means for sending a first message to perform an authentication for the UE, wherein the first message includes an identifier of the first PLMN; means for performing a handover procedure with a change from the first PLMN to a second PLMN for the UE; means for receiving a second message, wherein the second message includes the identifier of the first PLMN; and means for sending an authentication request message to the UE, wherein the authentication request message includes the identifier of the first PLMN.
In a fourth aspect of the present disclosure, a user equipment (UE) comprises: means for performing a registration procedure to a first Public Land Mobile Network (PLMN); means for performing a handover procedure with a change from the first PLMN to a second PLMN; means for receiving an authentication request message, wherein the authentication request message includes an identifier of the first PLMN; and means for performing an authentication procedure based on the identifier of the first PLMN.
In a fifth aspect of the present disclosure, a method of a communication apparatus is provided, and the method comprises: performing a registration procedure to a first Public Land Mobile Network (PLMN) for a user equipment (UE); sending a first message to perform an authentication for the UE, wherein the first message includes an identifier of the first PLMN; performing a handover procedure with a change from the first PLMN to a second PLMN for the UE; receiving a second message, wherein the second message includes an identifier of a second PLMN; determining whether the handover procedure occurs while the authentication using the identifier of the first PLMN is ongoing; and sending an authentication request message to the UE in a case where the handover procedure occurs while the authentication using the identifier of the first PLMN is ongoing, wherein the authentication request message includes the identifier of the first PLMN.
In a sixth aspect of the present disclosure, a communication apparatus comprises: means for performing a registration procedure to a first Public Land Mobile Network (PLMN) for a user equipment (UE); means for sending a first message to perform an authentication for the UE, wherein the first message includes an identifier of the first PLMN; means for performing a handover procedure with a change from the first PLMN to a second PLMN for the UE; means for receiving a second message, wherein the second message includes an identifier of a second PLMN; means for determining whether the handover procedure occurs while the authentication using the identifier of the first PLMN is ongoing; and means for sending an authentication request message to the UE in a case where the handover procedure occurs while the authentication using the identifier of the first PLMN is ongoing, wherein the authentication request message includes the identifier of the first PLMN.
In a seventh aspect of the present disclosure, a method of a communication apparatus is provided, and the method comprises: performing a registration procedure to a Public Land Mobile Network (PLMN) for a user equipment (UE); storing an identifier of the PLMN; and using the identifier for an authentication procedure of the UE.
In an eighth aspect of the present disclosure, a method of a user equipment (UE) is provided, and the method comprises: performing a registration procedure to a Public Land Mobile Network (PLMN); storing an identifier of the PLMN; and using the identifier for an authentication procedure of the UE.
In a ninth aspect of the present disclosure, a communication apparatus comprises: means for performing a registration procedure to a Public Land Mobile Network (PLMN) for a user equipment (UE); means for storing an identifier of the PLMN; and means for using the identifier for an authentication procedure of the UE.
In a tenth aspect of the present disclosure, a user equipment (UE) comprises: means for performing a registration procedure to a Public Land Mobile Network (PLMN); means for storing an identifier of the PLMN; and means for using the identifier for an authentication procedure of the UE.
In an eleventh aspect of the present disclosure, a method of a communication apparatus is provided, and the method comprises: performing a registration procedure to a first Public Land Mobile Network (PLMN) for a user equipment (UE); receiving a first message during a handover procedure with a change from a first PLMN to a second PLMN, wherein the first message includes an identifier of the second PLMN; and sending a second message to a Unified Data Management (UDM), wherein the second message includes the identifier of the second PLMN.
In a twelfth aspect of the present disclosure, a communication apparatus comprises: means for performing a registration procedure to a first Public Land Mobile Network (PLMN) for a user equipment (UE); means for receiving a first message during a handover procedure with a change from a first PLMN to a second PLMN, wherein the first message includes an identifier of the second PLMN; and means for sending a second message to a Unified Data Management (UDM), wherein the second message includes the identifier of the second PLMN.
In a thirteenth aspect of the present disclosure, a method of a communication apparatus is provided, and the method comprises: performing a registration procedure to a first Public Land Mobile Network (PLMN) for a user equipment (UE); sending a first message to authenticate the UE, wherein the first message includes an identifier of the first PLMN; performing a handover procedure with a change from the first PLMN to a second PLMN; determining whether the handover is performed while the authentication is ongoing; and sending a second message to authenticate the UE, wherein the second message includes an identifier of the second PLMN.
In a fourteenth aspect of the present disclosure, a communication apparatus comprises: means for performing a registration procedure to a first Public Land Mobile Network (PLMN) for a user equipment (UE); means for sending a first message to authenticate the UE, wherein the first message includes an identifier of the first PLMN; means for performing a handover procedure with a change from the first PLMN to a second PLMN; means for determining whether the handover is performed while the authentication is ongoing; and means for sending a second message to authenticate the UE, wherein the second message includes an identifier of the second PLMN.
In a fifteenth aspect of the present disclosure, a method of a communication apparatus is provided, and the method comprises: performing a registration procedure to a first Public Land Mobile Network (PLMN) for a user equipment (UE); receiving a first message during a handover procedure with a change from a first PLMN to a second PLMN, wherein the first message includes an identifier of the second PLMN; and allocating a 5G Globally Unique Temporary Identifier (5G-GUTI) based on the identifier of the second PLMN in a case where the first message is received; and sending the 5G-GUTI to the UE.
In a sixteenth aspect of the present disclosure, a communication apparatus comprises: means for performing a registration procedure to a first Public Land Mobile Network (PLMN) for a user equipment (UE); means for receiving a first message during a handover procedure with a change from a first PLMN to a second PLMN, wherein the first message includes an identifier of the second PLMN; and means for allocating a 5G Globally Unique Temporary Identifier (5G-GUTI) based on the identifier of the second PLMN in a case where the first message is received; and means for sending the 5G-GUTI to the UE.
The present disclosure provides a procedure to handle authentication procedure during Xn handover. More specifically it defines handling of an authentication procedure when Xn handover takes place from one serving PLMN to another serving PLMN during the authentication procedure.
To further clarify the advantages and features of the present disclosure, a more particular description of the disclosure will follow by reference to specific embodiments thereof, which are illustrated in the appended figures. It is to be appreciated that these figures depict only typical embodiments of the disclosure and are therefore not to be considered limiting in scope.
The disclosure will be described and explained with additional specificity and detail with the appended figures.
Further, those skilled in the art will appreciate that elements in the figures are illustrated for simplicity and may not have necessarily been drawn to scale. Furthermore, in terms of the construction of the device, one or more components of the device may have been represented in the figures by conventional symbols, and the figures may show only those specific details that are pertinent to understanding the embodiments of the present disclosure so as not to obscure the figures with details that will be readily apparent to those skilled in the art having the benefit of the description herein.
For the purpose of promoting an understanding of the principles of the disclosure, reference will now be made to the embodiment illustrated in the figures and specific language will be used to describe them. It will nevertheless be understood that no limitation of the scope of the disclosure is thereby intended. Such alterations and further modifications in the illustrated system, and such further applications of the principles of the disclosure as would normally occur to those skilled in the art are to be construed as being within the scope of the present disclosure.
The service network is explained in this section.
The serving network name is used in the derivation of the anchor key. It serves a dual purpose, namely:
In the 5G AKA based primary authentication and key agreement procedure, the serving network name has a similar purpose of binding the RES* and XRES* to the serving network. The serving network name is the concatenation of the service code and the SN Id with a separation character “:” such that the service code prepends the SN Id.
NOTE: No parameter like ‘access network type’ is used for serving network name as it relates to a 5G core procedure that is access network agnostic. The SN Id identifies the serving PLMN and, except for standalone non-public networks, is defined as SNN-network-identifier in 3GPP TS 24.501 [4].
The UE shall construct the serving network name as follows:
The SEAF shall construct the serving network name as follows:
Note that the AUSF gets the serving network name from the SEAF. Before using the serving network name, AUSF checks that the SEAF is authorized to use it.
All the embodiments are also applicable to the EAP based primary authentication and agreement procedure.
In this disclosure, the primary “authentication and key agreement procedure” implies to either “the EAP based primary authentication and agreement procedure” or “the 5G AKA based primary authentication and key agreement procedure”, unless otherwise stated.
In this disclosure, the term “authentication procedure” implies to either “the EAP based primary authentication and agreement procedure” or “the 5G AKA based primary authentication and key agreement procedure”, unless otherwise stated.
In this disclosure, the term AMF can be interpreted as SEAF. The term KAUSF can be interpreted as Kausf or KAUSF. The term KSEAF can be interpreted as KSEAF. The term KAMF can be interpreted as KAMF. The following embodiments are not limited to 5GS, and the following embodiments are also applicable to communication system other than 5GS e.g. EPS AKA.
In case that following embodiments apply to the EPS, the following replacements are required:
Note that, other than the above example, the procedure, the node name, the message, and the parameter in 5GS also can be replaced with the corresponding procedure, the corresponding node name, the corresponding message, and the corresponding parameter in EPS respectively.
In the embodiments below, the UE calculates two KAUSF, first KAUSF based on PLMN ID=A and second KAUSF based on PLMN ID=B. The UE uses the first KAUSF in the security procedure, if the security procedure using the first KAUSF fails then the UE uses the second KAUSF in the security procedure and deletes the first KAUSF otherwise the UE deletes the second KAUSF. The same method is applied in case of EPS to calculate and use KASME.
Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by those skilled in the art to which this disclosure belongs. The system, methods, and examples provided herein are only illustrative and not intended to be limiting.
The terms “comprises”, “comprising”, or any other variations thereof, are intended to cover a non-exclusive inclusion, such that a process or method that comprises a list of steps does not include only those steps but may include other steps not expressly listed or inherent to such a process or method. Similarly, one or more devices or entities or sub-systems or elements or structures or components preceded by “comprises . . . a” does not, without more constraints, preclude the existence of other devices, sub-systems, elements, structures, components, additional devices, additional sub-systems, additional elements, additional structures or additional components. Appearances of the phrase “in an embodiment”, “in another embodiment” and similar language throughout this specification may, but not necessarily do, all refer to the same embodiment.
In the following specification and the claims, reference will be made to a number of terms, which shall be defined to have the following meanings. The singular forms “a”, “an”, and “the” include plural references unless the context clearly dictates otherwise.
As used herein, information is associated with data and knowledge, as data is meaningful information and represents the values attributed to parameters. Further knowledge signifies understanding of an abstract or concrete concept. Note that this example system is simplified to facilitate description of the disclosed subject matter and is not intended to limit the scope of this disclosure. Other devices, systems, and configurations may be used to implement the embodiments disclosed herein in addition to, or instead of, a system, and all such embodiments are contemplated as within the scope of the present disclosure.
The network will send a serving network name to the UE in an Authentication Request message to use the serving network name to calculate the security parameter (e.g. RES* or Anchor Key (e.g. KAUSF)).
The
Note that the
The detailed processes of the embodiment are described as below.
Note that the Service request message in step 1 can be any NAS message.
In one example, in step 1 the UE is in a connected mode and has at least on user plane bearer (Dedicated Radio Bearer) established. The AMF decides to perform authentication procedure as per the local policy. In this case the authentication procedure is started independent of receiving a NAS message from the UE.
In one example, when the AMF receives the N2 Path switch request message from the Target RAN with PLMN ID=B, the AMF can understand that while the latest PLMN ID=B, the Authentication procedure initiated in step 2 is associated with PLMN ID=A. For example, the AMF can determine and understand whether the Xn handover with a PLMN change occurs while the authentication procedure is ongoing based on sending the Nausf_UEAuthentication_Authenticate Request in step 2 and receiving the N2 Path switch request message from the Target RAN with PLMN ID=B in step 4-2. I.E. the AMF understands the mismatch of the PLMN ID, one is the latest and the other one that is used for the Authentication procedure. In this case, the AMF memorizes this mismatch and sets the PLMN ID=A to the SN for authentication when the AMF sends the Authentication Request message to the UE in step 10. And then, the AMF sends the Authentication Request message which contains the SN for authentication indicating the PLMN ID which is set to “A”. In this example, neither the UDM nor the AUSF have to deal with the SN for authentication.
In step 0, when the UE is registered first time to the AMF, the UE and the AMF store the serving PLMN ID to which the UE is registered. This serving PLMN ID will be stored as the SN for authentication in the UE and AMF while the UE is registered with the AMF. The UE and the AMF may update the SN for authentication when the UE is registered to a different registration area but served with the same AMF. The UE and AMF use the SN name based on this SN for authentication in the subsequent authentication procedure triggered by the AMF. In this embodiment, the SN for authentication is PLMN ID=A which is used by the UE and the AMF in the authentication procedure from step 2 to step 18. Note that this variant 2 does not require the SN for authentication parameter in step 7, 9 and 10.
In one example, regardless of whether or not the UE authentication procedure is ongoing, the AMF sends a message containing the new serving PLMN ID=B to the UDM during a Xn handover procedure with PLMN change or after the successful Xn handover procedure with PLMN change takes place. For example, the AMF may send, to the UDM, a message which contains information indicating that the new serving PLMN ID is “B” when the AMF receives the N2 Path switch request message containing a PLMN ID set to “B” during the Xn handover procedure with PLMN change. In addition, for example, the AMF may send, to the UDM, a message which contains information indicating that the new serving PLMN ID is “B” after the AMF sends a N2 Path switch request ack (acknowledgement) message in response to receive the N2 Path switch request message containing a PLMN ID set to “B”. Upon reception of the message the UDM updates the current serving PLMN of the UE to PLMN ID=B. The UDM may take some action when the serving PLMN of the UE changes to PLMN ID=B. That is, the UDM updates the serving PLMN ID of the UE to PLMN ID which is “B”. For example, the UDM may trigger the Steering of Roaming (SoR) procedure to towards the UE to send new preferred PLMN list to the UE or UE Parameter Update (UPU) procedure.
In one example, after the authentication procedure is completed successfully (after step 18), the AMF sends, to the UDM, a message (e.g. Nudm_UECM_Registration service) containing PLMN ID=B to update the UDM with new serving PLMN of the UE. That is, the AMF sends, to the UDM, a message which contains information indicating that the new serving PLMN ID is “B”. Upon reception of this message the UDM updates the serving PLMN ID of the UE to PLMN ID=B. That is, the UDM updates the serving PLMN ID of the UE to PLMN ID which is “B”.
In one example, when the UE receives the Authentication Request message from the AMF in step 10, the UE checks whether the MCC and MNC parts of the latest PLMN ID (for example, PLMN ID =B) that is sent in the RRC message (for example, the RRC Reconfiguration Complete message) to the target RAN in step 4-1 are the same as the MCC and MNC parts of 5G-GUTI if the UE has a valid 5G-GUTI. If the MCC and MNC parts are not the same, the UE constructs a Serving network name (that is, an SN for authentication) using the MCC and MNC parts of 5G-GUTI according to the 3GPP TS 33.501 [5] and performs, by using the Serving network name constructed based on the MCC and MNC parts of 5G-GUTI, calculation (or generation) for a RES* in step 11 and performs, by using the Serving network name constructed based on the MCC and MNC parts of 5G-GUTI, derivation (or generation) for a KAUSF in step 12.
In one example, when the UE receives the Authentication Request message from the MME in step 10 for the EPS AKA procedure in the EPS, the UE checks whether the MCC and MNC parts of the latest PLMN ID (for example, PLMN ID=B) that is sent in the RRC message (for example, the RRC Connection Reconfiguration Complete message) to the target RAN in step 4-1 are the same as the MCC and MNC parts of 4G-GUTI if the UE has a valid 4G-GUTI. If the MCC and MNC parts are not the same, the UE constructs a Serving Network Identity (that is, an SN for authentication) using the MCC and MNC parts of 4G-GUTI as illustrated in the
In one example, when the AMF receives the Nausf_UEAuthentication_Authenticate Response message from the AUSF in step 9, the AMF checks whether the MCC and MNC parts of the latest PLMN ID (for example, PLMN ID=B) that is received in the N2 Path switch request message in step 4-2 are the same as the MCC and MNC parts of 5G-GUTI if the AMF has a valid 5G-GUTI. If the MCC and MNC parts are not the same, the AMF sends the Nausf_UEAuthentication_Authenticate Request message (SUCI or SUPI, SN name=PLMN ID=B) to the AUSF for starting a new authentication procedure with SN name=PLMN ID=B. “SN name=PLMN ID=B” means that the SN name is a PLMN ID which is “B” or that the SN name is a PLMN ID which is set to “B”. In other words, “SN name=PLMN ID=B” means the SN name identifies a PLMN identified by a PLMN ID which is “B”, or a PLMN with a PLMN ID which is “B”. That is, the AMF informs, to the AUSF, that the SN name is a PLMN ID which is “B”.
The AMF does not proceed with authentication procedure started in the step 2. I.E. The AMF aborts the authentication procedure started in the step 2.
In one example, when the MME receives the Authentication Information Answer message from the HSS in step 9 or a combination of step 7 and step 9, the MME checks whether the MCC and MNC parts of the latest PLMN ID that is received in the Path switch request message in step 4-2 are the same as the MCC and MNC parts of 4G-GUTI if the MME has a valid 4G-GUTI. If the MCC and MNC parts are not the same, the MME sends the Authentication Information Request message (IMSI, SN id=PLMN ID=B) to the HSS for starting a new authentication procedure with SN id=PLMN ID=B. “SN id=PLMN ID=B” means that the SN id is a PLMN ID which is “B” or that the SN id is a PLMN ID which is set to “B”. In other words, “SN id=PLMN ID=B” means the SN id identifies a PLMN identified by a PLMN ID which is “B”, or a PLMN with a PLMN ID which is “B”. That is, the MME informs, to the HSS, that the SN id is a PLMN ID which is “B”.
The MME does not proceed with authentication procedure started in the step 2. I.E. The MME aborts the authentication procedure started in the step 2.
If the AMF detects that 1) Authentication is ongoing, 2) Xn handover with PLMN change has taken place, then the AMF initiate authentication procedure.
The
The detailed processes of the embodiment are described as below.
Note that the Service request message in step 1 can be any NAS message.
The AMF does not proceed with authentication procedure started in the step 2. I.E. The AMF aborts the authentication procedure started in the step 2.
In one example, the AMF will start the new authentication procedure when the AMF receives a response message (e.g. Nausf_UEAuthentication_Authenticate Response) from the AUSF as a response to the
Nausf_UEAuthentication_Authenticate Request (SUCI or SUPI, SN name=PLMN ID=A) message in step 2. In this case, the AMF will ignore and discard the Nausf_UEAuthentication_Authenticate Response message as a response to the Nausf_UEAuthentication_Authenticate Request (SUCI or SUPI, SN name=PLMN ID=A) message in step 2.
After step 6, the new authentication procedure based on the SN name=PLMN ID=B (that is, the PLMN ID which is “B”) proceeds between the UE and the network.
In one example, in step 5, when the AMF determines that serving PLMN has changed to PLMN ID=B when it receives the N2 PATH SWITCH REQUEST message, then after completion of the Xn handover procedure, the AMF allocates new 5G-GUTI based on the PLMN ID=B, (i.e. the MCC and MNC part of PLMN ID=B is allocated to MCC and MNC of the 5G-GUTI). For example, the AMF allocates new 5G-GUTI based on the PLMN ID=B after sending the N2 Path switch request ack (acknowledgement) message. Then the AMF sends the new 5G-GUTI to the UE in a CONFIGURATION UPDATE COMMAND message and after receiving the CONFIGURATION UPDATE COMPLETE message the AMF initiates a new authentication procedure by sending a Nausf_UEAuthentication_Authenticate Request message (SUCI or SUPI, SN name=PLMN ID=B) to the AUSF. The UE uses the MCC and MNC part of the GUTI to calculate the SN name for the calculation of KAUSF and RES* when the UE receives Authentication Request message after completion of the generic UE configuration update command procedure.
In one example, in step 5, when the MME determines that serving PLMN has changed to PLMN ID=B when it receives PATH SWITCH REQUEST message, then after completion of the X2 handover procedure, the MME allocates a new 4G-GUTI based on the PLMN ID=B, (i.e. the MCC and MNC part of PLMN ID=B is allocated to MCC and MNC of the 4G-GUTI). For example, the MME allocates new 4G-GUTI based on the PLMN ID=B after sending the Path switch request ack (acknowledgement) message. Then the MME sends the new 4G-GUTI to the UE in a GUTI reallocation command message and after receiving the GUTI reallocation complete message the AMF initiates a new authentication procedure by sending an authentication data request containing SN ID based on the PLMN ID=B to the HSS. The UE uses the MCC and MNC part of the 4G-GUTI to calculate the SN ID for the calculation of KASME when it receives Authentication
Request message after completion of the GUTI-reallocation procedure.
In one example, regardless of whether or not the UE authentication procedure is ongoing, when the AMF determines that serving PLMN has changed to PLMN ID=B when it receives the N2 PATH SWITCH REQUEST message, after completion of the Xn handover procedure, the AMF allocates new 5G-GUTI based on the PLMN ID=B, (i.e. the MCC and MNC part of PLMN ID=B is allocated to MCC and MNC of the 5G-GUTI). For example, the AMF allocates new 5G-GUTI based on the PLMN ID=B after sending the N2 Path switch request ack (acknowledgement) message. Then the AMF sends the new 5G-GUTI to the UE in the CONFIGURATION UPDATE COMMAND message in order to synchronize the latest PLMN ID and a 5G-GUTI that is associated with the latest PLMN ID.
In one example, regardless of whether or not the UE authentication procedure is ongoing, when the MME determines that serving PLMN has changed to PLMN ID=B when it receives the PATH SWITCH REQUEST message, after completion of the X2 handover procedure, the MME allocates new 4G-GUTI based on the PLMN ID=B, (i.e. the MCC and MNC part of PLMN ID=B is allocated to MCC and MNC of the 4G-GUTI). For example, the MME allocates new 4G-GUTI based on the PLMN ID=B after sending the Path switch request ack (acknowledgement) message. Then the MME sends the new 4G-GUTI to the UE in the GUTI reallocation command message in order to synchronize the latest PLMN ID and a 4G-GUTI that is associated with the latest PLMN ID.
A controller(804) controls the operation of the UE in accordance with software stored in a memory(805). The software includes, among other things, an operating system and a communications control module having at least a transceiver control module. The communications control module (using its transceiver control sub-module) is responsible for handling (generating/sending/receiving) signalling and uplink/downlink data packets between the UE and other nodes, such as the base station/(R)AN node, the MME, the AMF (and other core network nodes). Such signalling may include, for example, appropriately formatted signalling messages relating to connection establishment and maintenance (e.g. RRC connection establishment and other RRC messages), periodic location update related messages (e.g. tracking area update, paging area updates, location area update) etc. Such signalling may also include, for example, broadcast information (e.g. Master Information and System information) in a receiving case.
The communications control module (using its transceiver control sub-module) is responsible for handling (generating/sending/receiving) signalling between the (R)AN node and other nodes, such as the UE, the MME, the AMF(e.g. directly or indirectly). The signalling may include, for example, appropriately formatted signalling messages relating to a radio connection and location procedures (for a particular UE), and in particular, relating to connection establishment and maintenance (e.g. RRC connection establishment and other RRC messages), periodic location update related messages (e.g. tracking area update, paging area updates, location area update), S1 AP messages and NG AP messages (i.e. messages by N2 reference point), etc. Such signalling may also include, for example, broadcast information (e.g. Master Information and System information) in a sending case.
The controller (904) is also configured (by software or hardware) to handle related tasks such as, when implemented, UE mobility estimate and/or moving trajectory estimation.
The communications control module (using its transceiver control sub-module) is responsible for handling (generating/sending/receiving) signalling between the AMF and other nodes, such as the UE, base station/(R)AN node (e.g. “gNB” or “eNB”) (directly or indirectly). Such signalling may include, for example, appropriately formatted signalling messages relating to the procedures described herein, for example, NG AP message (i.e. a message by N2 reference point) to convey an NAS message from and to the UE, etc.
The User Equipment (or “UE”, “mobile station”, “mobile device” or “wireless device”) in the present disclosure is an entity connected to a network via a wireless interface. It should be noted that the UE in this specification is not limited to a dedicated communication device, and can be applied to any device, having a communication function as a UE described in this specification, as explained in the following paragraphs.
The terms “User Equipment” or “UE” (as the term is used by 3GPP), “mobile station”, “mobile device”, and “wireless device” are generally intended to be synonymous with one another, and include standalone mobile stations, such as terminals, cell phones, smart phones, tablets, cellular IoT devices, IoT devices, and machinery. It will be appreciated that the terms “UE” and “wireless device” also encompass devices that remain stationary for a long period of time.
A UE may, for example, be an item of equipment for production or manufacture and/or an item of energy related machinery (for example equipment or machinery such as: boilers; engines; turbines; solar panels; wind turbines; hydroelectric generators; thermal power generators; nuclear electricity generators; batteries; nuclear systems and/or associated equipment; heavy electrical machinery; pumps including vacuum pumps; compressors; fans; blowers; oil hydraulic equipment; pneumatic equipment; metal working machinery; manipulators; robots and/or their application systems; tools; molds or dies; rolls; conveying equipment; elevating equipment; materials handling equipment; textile machinery; sewing machines; printing and/or related machinery; paper converting machinery; chemical machinery; mining and/or construction machinery and/or related equipment; machinery and/or implements for agriculture, forestry and/or fisheries; safety and/or environment preservation equipment; tractors; precision bearings; chains; gears; power transmission equipment; lubricating equipment; valves; pipe fittings; and/or application systems for any of the previously mentioned equipment or machinery etc.).
A UE may, for example, be an item of transport equipment (for example transport equipment such as: rolling stocks; motor vehicles; motor cycles; bicycles; trains; buses; carts; rickshaws; ships and other watercraft; aircraft; rockets; satellites; drones; balloons etc.).
A UE may, for example, be an item of information and communication equipment (for example information and communication equipment such as: electronic computer and related equipment; communication and related equipment; electronic components etc.).
A UE may, for example, be a refrigerating machine, a refrigerating machine applied product, an item of trade and/or service industry equipment, a vending machine, an automatic service machine, an office machine or equipment, a consumer electronic and electronic appliance (for example a consumer electronic appliance such as: audio equipment; video equipment; a loud speaker; a radio; a television; a microwave oven; a rice cooker; a coffee machine; a dishwasher; a washing machine; a dryer; an electronic fan or related appliance; a cleaner etc.).
A UE may, for example, be an electrical application system or equipment (for example an electrical application system or equipment such as: an x-ray system; a particle accelerator; radio isotope equipment; sonic equipment; electromagnetic application equipment; electronic power application equipment etc.).
A UE may, for example, be an electronic lamp, a luminaire, a measuring instrument, an analyzer, a tester, or a surveying or sensing instrument (for example a surveying or sensing instrument such as: a smoke alarm; a human alarm sensor; a motion sensor; a wireless tag etc.), a watch or clock, a laboratory instrument, optical apparatus, medical equipment and/or system, a weapon, an item of cutlery, a hand tool, or the like.
A UE may, for example, be a wireless-equipped personal digital assistant or related equipment (such as a wireless card or module designed for attachment to or for insertion into another electronic device (for example a personal computer, electrical measuring machine)).
A UE may be a device or a part of a system that provides applications, services, and solutions described below, as to “internet of things (IoT)”, using a variety of wired and/or wireless communication technologies. Internet of Things devices (or “things”) may be equipped with appropriate electronics, software, sensors, network connectivity, and/or the like, which enable these devices to collect and exchange data with each other and with other communication devices. IoT devices may comprise automated equipment that follow software instructions stored in an internal memory. IoT devices may operate without requiring human supervision or interaction. IoT devices might also remain stationary and/or inactive for a long period of time. IoT devices may be implemented as a part of a (generally) stationary apparatus. IoT devices may also be embedded in non-stationary apparatus (e.g. vehicles) or attached to animals or persons to be monitored/tracked.
It will be appreciated that IoT technology can be implemented on any communication devices that can connect to a communications network for sending/receiving data, regardless of whether such communication devices are controlled by human input or software instructions stored in memory.
It will be appreciated that IoT devices are sometimes also referred to as Machine-Type Communication (MTC) devices or Machine-to-Machine (M2M) communication devices or Narrow Band-IoT UE (NB-IoT UE). It will be appreciated that a UE may support one or more IoT or MTC applications. Some examples of MTC applications are listed in the Table 3 (source: 3GPP TS 22.368, Annex B, the contents of which are incorporated herein by reference). This list is not exhaustive and is intended to be indicative of some examples of machine type communication applications.
Applications, services, and solutions may be an MVNO (Mobile Virtual Network Operator) service, an emergency radio communication system, a PBX (Private Branch eXchange) system, a PHS/Digital Cordless Telecommunications system, a POS (Point of sale) system, an advertise calling system, an MBMS (Multimedia Broadcast and Multicast Service), a V2X (Vehicle to Everything) system, a train radio system, a location related service, a Disaster/Emergency Wireless Communication Service, a community service, a video streaming service, a femto cell application service, a VoLTE (Voice over LTE) service, a charging service, a radio on demand service, a roaming service, an activity monitoring service, a telecom carrier/communication NW selection service, a functional restriction service, a PoC (Proof of Concept) service, a personal information management service, an ad-hoc network/DTN (Delay Tolerant Networking) service, etc.
Further, the above-described UE categories are merely examples of applications of the technical ideas and exemplary embodiments described in the present document. Needless to say, these technical ideas and embodiments are not limited to the above-described UE and various modifications can be made thereto.
The whole or part of the example embodiments disclosed above can be described as, but not limited to, the following.
EAP-AKA′ is specified in RFC 5448 [12]. The 3GPP 5G profile for EAP-AKA′ is specified in the normative Annex F.
Editor's Note: The reference to RFC 5448 will be superseded by the internet draft referred to in when it becomes an RFC.
The selection of using EAP-AKA′ is described in sub-clause 6.1.2 of the present document.
FIG. 6.1.3.1-1: Authentication procedure for EAP-AKA′ (See
The authentication procedure for EAP-AKA′ works as follows, cf. also FIG. 6.1.3.1-1 (See
NOTE: The exchange of a Nudm_UEAuthentication_Get Request message and an Nudm_UEAuthentication_Get Response message between the AUSF and the UDM/ARPF described in the preceding paragraph is the same as for trusted access using EAP-AKA′ described in TS 33.402 [11], sub-clause 6.2, step 10, except for the input parameter to the key derivation, which is the value of <network name>.
The “network name” is a concept from RFC 5448 [12]; it is carried in the AT_KDF_INPUT attribute in EAP-AKA′. The value of <network name>parameter is not defined in RFC 5448 [12], but rather in 3GPP specifications. For EPS, it is defined as “access network identity” in TS 24.302 [71], and for 5G, it is defined as “serving network name” in sub-clause 6.1.1.4 of the present document.
In case SUCI was included in the Nudm_UEAuthentication_Get Request, UDM will include the SUPI in the Nudm_UEAuthentication_Get Response.
The AUSF and the UE shall then proceed as described in RFC 5448 [12] until the AUSF is ready to send the EAP-Success.
If a subscriber has an AKMA subscription, the UDM shall include the AKMA indication in the Nudm_UEAuthentication_Get Response.
NOTE 1: The SEAF needs to understand that the authentication method used is an EAP method by evaluating the type of authentication method based on the Nausf_UEAuthentication_Authenticate Response message.
If the verification of the AUTN fails on the USIM, then the USIM and ME shall proceed as described in sub-clause 6.1.3. 3.
NOTE 2: EAP Notifications as described in RFC 3748 [27] and EAP-AKA Notifications as described in RFC 4187 [21] can be used at any time in the EAP-AKA exchange. These notifications can be used e.g. for protected result indications or when the EAP server detects an error in the received EAP-AKA response.
NOTE 3: For lawful interception, the AUSF sending SUPI to SEAF is necessary but not sufficient. By including the SUPI as input parameter to the key derivation of KAMF from KSEAF, additional assurance on the correctness of SUPI is achieved by the serving network from both, home network and UE side.
NOTE 4: Step 11 could be NAS Security Mode Command or Authentication Result.
NOTE 5: The ABBA parameter is included to enable the bidding down protection of security features that may be introduced later.
The key received in the Nausf_UEAuthentication_Authenticate Response message shall become the anchor key, KSEAF in the sense of the key hierarchy in sub-clause 6.2 of the present document. The SEAF shall then derive the KAMF from the KSEAF, the ABBA parameter and the SUPI according to Annex A.7 and send it to the AMF. On receiving the EAP-Success message, the UE derives EMSK from CK′ and IK′ as described in RFC 5448 and Annex F. The ME uses the most significant 256 bits of the EMSK as the KAUSF and then calculates KSEAF in the same way as the AUSF. The UE shall derive the KAMF from the KSEAF, the ABBA parameter and the SUPI according to Annex A.7.
NOTE 6: As an implementation option, the UE creates the temporary security context as described in step 11 after receiving the EAP message that allows EMSK to be calculated. The UE turns this temporary security context into a partial security context when it receives the EAP Success. The UE removes the temporary security context if the EAP authentication fails.
The further steps taken by the AUSF upon receiving a successfully verified EAP-Response/AKA′-Challenge message are described in sub-clause 6.1.4 of the present document.
If the EAP-Response/AKA′-Challenge message is not successfully verified, the subsequent AUSF behaviour is determined according to the home network's policy.
If AUSF and SEAF determine that the authentication was successful, then the SEAF provides the ngKSI and the KAMF to the AMF.
5G AKA enhances EPS AKA [10] by providing the home network with proof of successful authentication of the UE from the visited network. The proof is sent by the visited network in an Authentication Confirmation message.
The selection of using 5G AKA is described in sub-clause 6.1.2 of the present document.
NOTE 1: 5G AKA does not support requesting multiple 5G AVs, neither the SEAF pre-fetching 5G AVs from the home network for future use.
FIG. 6.1.3.2-1: Authentication procedure for 5G AKA (See
The authentication procedure for 5G AKA works as follows, cf. also FIG. 6.1.3.2-1 (See
If a subscriber has an AKMA subscription, the UDM shall include the AKMA indication in the Nudm_UEAuthentication_Get Response.
NOTE 2: The ABBA parameter is included to enable the bidding down protection of security features.
NOTE 3: This separation bit in the AMF field of AUTN cannot be used anymore for operator specific purposes as described by TS 33.102 [9], Annex F.
If the authentication was successful, the key KSEAF received in the Nausf_UEAuthentication_Authenticate Response message shall become the anchor key in the sense of the key hierarchy as specified in sub-clause 6.2 of the present document. Then the SEAF shall derive the KAMF from the KSEAF, the ABBA parameter and the SUPI according to Annex A.7. The SEAF shall provide the ngKSI and the KAMF to the AMF.
If a SUCI was used for this authentication, then the SEAF shall only provide ngKSI and KAMF to the AMF after it has received the Nausf_UEAuthentication_Authenticate Response message containing KSEAF and SUPI; no communication services will be provided to the UE until the SUPI is known to the serving network.
The further steps taken by the AUSF after the authentication procedure are described in sub-clause 6.1.4 of the present document.
EAP-AKA′ is specified in RFC 5448 [12]. The 3GPP 5G profile for EAP-AKA′ is specified in the normative Annex F.
Editor's Note: The reference to RFC 5448 will be superseded by the internet draft referred to in [67] when it becomes an RFC.
The selection of using EAP-AKA′ is described in sub-clause 6.1.2 of the present document.
FIG. 6.1.3.1-1: Authentication procedure for EAP-AKA′ (See
The authentication procedure for EAP-AKA′ works as follows, cf. also FIG. 6.1.3.1-1 (See
NOTE: The exchange of a Nudm_UEAuthentication_Get Request message and an Nudm_UEAuthentication_Get Response message between the AUSF and the UDM/ARPF described in the preceding paragraph is the same as for trusted access using EAP-AKA′ described in TS 33.402 [11], sub-clause 6.2, step 10, except for the input parameter to the key derivation, which is the value of <network name>. The “network name” is a concept from RFC 5448 [12]; it is carried in the AT_KDF_INPUT attribute in EAP-AKA′. The value of <network name> parameter is not defined in RFC 5448 [12], but rather in 3GPP specifications. For EPS, it is defined as “access network identity” in TS 24.302 [71], and for 5G, it is defined as “serving network name” in sub-clause 6.1.1.4 of the present document.
In case SUCI was included in the Nudm_UEAuthentication_Get Request, UDM will include the SUPI in the Nudm_UEAuthentication_Get Response.
The AUSF and the UE shall then proceed as described in RFC 5448 [12] until the AUSF is ready to send the EAP-Success.
If a subscriber has an AKMA subscription, the UDM shall include the AKMA indication in the Nudm_UEAuthentication_Get Response.
NOTE 1: The SEAF needs to understand that the authentication method used is an EAP method by evaluating the type of authentication method based on the Nausf_UEAuthentication_Authenticate Response message.
If the verification of the AUTN fails on the USIM, then the USIM and ME shall proceed as described in sub-clause 6.1.3. 3.
NOTE 2: EAP Notifications as described in RFC 3748 [27] and EAP-AKA Notifications as described in RFC 4187 [21] can be used at any time in the EAP-AKA exchange. These notifications can be used e.g. for protected result indications or when the EAP server detects an error in the received EAP-AKA response.
NOTE 3: For lawful interception, the AUSF sending SUPI to SEAF is necessary but not sufficient. By including the SUPI as input parameter to the key derivation of KAMF from KSEAF, additional assurance on the correctness of SUPI is achieved by the serving network from both, home network and UE side.
NOTE 4: Step 11 could be NAS Security Mode Command or Authentication Result.
NOTE 5: The ABBA parameter is included to enable the bidding down protection of security features that may be introduced later.
The key received in the Nausf_UEAuthentication_Authenticate Response message shall become the anchor key, KSEAF in the sense of the key hierarchy in sub-clause 6.2 of the present document. The SEAF shall then derive the KAMF from the KSEAF, the ABBA parameter and the SUPI according to Annex A.7 and send it to the AMF. On receiving the EAP-Success message, the UE derives EMSK from CK′ and IK′ as described in RFC 5448 and Annex F. The ME uses the most significant 256 bits of the EMSK as the KAUSF and then calculates KSEAF in the same way as the AUSF. The UE shall derive the KAMF from the KSEAF, the ABBA parameter and the SUPI according to Annex A.7.
NOTE 6: As an implementation option, the UE creates the temporary security context as described in step 11 after receiving the EAP message that allows EMSK to be calculated. The UE turns this temporary security context into a partial security context when it receives the EAP Success. The UE removes the temporary security context if the EAP authentication fails.
The further steps taken by the AUSF upon receiving a successfully verified EAP-Response/AKA′-Challenge message are described in sub-clause 6.1.4 of the present document.
If the EAP-Response/AKA′-Challenge message is not successfully verified, the subsequent AUSF behaviour is determined according to the home network's policy.
If AUSF and SEAF determine that the authentication was successful, then the SEAF provides the ngKSI and the KAMF to the AMF.
5G AKA enhances EPS AKA [10] by providing the home network with proof of successful authentication of the UE from the visited network. The proof is sent by the visited network in an Authentication Confirmation message.
The selection of using 5G AKA is described in sub-clause 6.1.2 of the present document.
NOTE 1: 5G AKA does not support requesting multiple 5G AVs, neither the SEAF pre-fetching 5G AVs from the home network for future use.
The authentication procedure for 5G AKA works as follows, cf. also FIG. 6.1.3.2-1 (See
NOTE 2: The ABBA parameter is included to enable the bidding down protection of security features.
NOTE 3: This separation bit in the AMF field of AUTN cannot be used anymore for operator specific purposes as described by TS 33.102 [9], Annex F.
If the authentication was successful, the key KSEAF received in the Nausf_UEAuthentication_Authenticate Response message shall become the anchor key in the sense of the key hierarchy as specified in sub-clause 6.2 of the present document. Then the SEAF shall derive the KAMF from the KSEAF, the ABBA parameter and the SUPI according to Annex A.7. The SEAF shall provide the ngKSI and the KAMF to the AMF.
If a SUCI was used for this authentication, then the SEAF shall only provide ngKSI and KAMF to the AMF after it has received the Nausf_UEAuthentication_Authenticate Response message containing KSEAF and SUPI; no communication services will be provided to the UE until the SUPI is known to the serving network.
The further steps taken by the AUSF after the authentication procedure are described in sub-clause 6.1.4 of the present document.
For the purposes of the present document, the abbreviations given in TR 21.905 [1] and the following apply. An abbreviation defined in the present document takes precedence over the definition of the same abbreviation, if any, in TR 21.905 [1].
4G-GUTI 4G Globally Unique Temporary UE Identity
5GC 5G Core Network
5GLAN 5G Local Area Network
5GS 5G System
5G-AN 5G Access Network
5G-AN PDB 5G Access Network Packet Delay Budget
5G-EIR 5G-Equipment Identity Register
5G-GUTI 5G Globally Unique Temporary Identifier
5G-BRG 5G Broadband Residential Gateway
5G-CRG 5G Cable Residential Gateway
5G GM 5G Grand Master
5G-RG 5G Residential Gateway
5G-S-TMSI 5G S-Temporary Mobile Subscription Identifier
5G VN 5G Virtual Network
5QI 5G QoS Identifier
AF Application Function
AMF Access and Mobility Management Function
AS Access Stratum
ATSSS Access Traffic Steering, Switching, Splitting
ATSSS-LL ATSSS Low-Layer
AUSF Authentication Server Function
AUTN Authentication token
BMCA Best Master Clock Algorithm
BSF Binding Support Function
CAG Closed Access Group
CAPIF Common API Framework for 3GPP northbound APIs
CHF Charging Function
CN PDB Core Network Packet Delay Budget
CP Control Plane
DAPS Dual Active Protocol Stacks
DL Downlink
DN Data Network
DNAI DN Access Identifier
DNN Data Network Name
DRX Discontinuous Reception
DS-TT Device-side TSN translator
ePDG evolved Packet Data Gateway
EBI EPS Bearer Identity
EPS Evolved Packet System
EUI Extended Unique Identifier
FAR Forwarding Action Rule
FN-BRG Fixed Network Broadband RG
FN-CRG Fixed Network Cable RG
FN-RG Fixed Network RG
FQDN Fully Qualified Domain Name
GFBR Guaranteed Flow Bit Rate
GMLC Gateway Mobile Location Centre
GPSI Generic Public Subscription Identifier
GUAMI Globally Unique AMF Identifier
GUTI Globally Unique Temporary UE Identity
HR Home Routed (roaming)
IAB Integrated access and backhaul
IMEI/TAC IMEI Type Allocation Code
IPUPS Inter PLMN UP Security
I-SMF Intermediate SMF
I-UPF Intermediate UPF
LADN Local Area Data Network
LBO Local Break Out (roaming)
LMF Location Management Function
LoA Level of Automation
LPP LTE Positioning Protocol
LRF Location Retrieval Function
MCC Mobile country code
MCX Mission Critical Service
MDBV Maximum Data Burst Volume
MFBR Maximum Flow Bit Rate
MICO Mobile Initiated Connection Only
MNC Mobile Network Code
MPS Multimedia Priority Service
MPTCP Multi-Path TCP Protocol
N3IWF Non-3GPP InterWorking Function
N5CW Non 5G-Capable over WLAN
NAI Network Access Identifier
NEF Network Exposure Function
NF Network Function
NGAP Next Generation Application Protocol
NID Network identifier
NPN Non-Public Network
NR New Radio
NRF Network Repository Function
NSI ID Network Slice Instance Identifier
NSSAA Network Slice-Specific Authentication and Authorization
NSSAAF Network Slice-Specific Authentication and Authorization Function
NSSAI Network Slice Selection Assistance Information
NSSF Network Slice Selection Function
NSSP Network Slice Selection Policy
NW-TT Network-side TSN translator
NWDAF Network Data Analytics Function
PCF Policy Control Function
PDB Packet Delay Budget
PDR Packet Detection Rule
PDU Protocol Data Unit
PEI Permanent Equipment Identifier
PER Packet Error Rate
PFD Packet Flow Description
PNI-NPN Public Network Integrated Non-Public Network
PPD Paging Policy Differentiation
PPF Paging Proceed Flag
PPI Paging Policy Indicator
PSA PDU Session Anchor
PTP Precision Time Protocol
QFI QoS Flow Identifier
QoE Quality of Experience
RACS Radio Capabilities Signalling optimisation
(R)AN (Radio) Access Network
RG Residential Gateway
RIM Remote Interference Management
RQA Reflective QoS Attribute
RQI Reflective QoS Indication
RSN Redundancy Sequence Number
SA NR Standalone New Radio
SBA Service Based Architecture
SBI Service Based Interface
SCP Service Communication Proxy
SD Slice Differentiator
SEAF Security Anchor Functionality
SEPP Security Edge Protection Proxy
SMF Session Management Function
SMSF Short Message Service Function
SN Sequence Number
SN name Serving Network Name
SNPN Stand-alone Non-Public Network
S-NSSAI Single Network Slice Selection Assistance Information
SSC Session and Service Continuity
SSCMSP Session and Service Continuity Mode Selection Policy
SST Slice/Service Type
SUCI Subscription Concealed Identifier
SUPI Subscription Permanent Identifier
SV Software Version
TNAN Trusted Non-3GPP Access Network
TNAP Trusted Non-3GPP Access Point
TNGF Trusted Non-3GPP Gateway Function
TNL Transport Network Layer
TNLA Transport Network Layer Association
TSC Time Sensitive Communication
TSCAI TSC Assistance Information
TSN Time Sensitive Networking
TSN GM TSN Grand Master
TSP Traffic Steering Policy
TT TSN Translator
TWIF Trusted WLAN Interworking Function
UCMF UE radio Capability Management Function
UDM Unified Data Management
UDR Unified Data Repository
UDSF Unstructured Data Storage Function
UL Uplink
UL CL Uplink Classifier
UPF User Plane Function
URLLC Ultra Reliable Low Latency Communication
URRP-AMF UE Reachability Request Parameter for AMF
URSP UE Route Selection Policy
VID VLAN Identifier
VLAN Virtual Local Area Network
W-5GAN Wireline 5G Access Network
W-5GBAN Wireline BBF Access Network
W-5GCAN Wireline 5G Cable Access Network
W-AGF Wireline Access Gateway Function
For the purposes of the present document, the terms and definitions given in 3GPP TR 21.905 [1] and the following apply. A term defined in the present document takes precedence over the definition of the same term, if any, in 3GPP TR 21.905 [1].
While the invention has been particularly shown and described with reference to example embodiments thereof, the invention is not limited to these embodiments. It will be understood by those of ordinary skill in the art that various changes in form and details may be made therein without departing from the spirit and scope of the present invention as defined by the claims.
This application is based upon and claims the benefit of priority from Indian patent application No. 202011047284, filed on Oct. 29, 2020, the disclosure of which is incorporated herein in its entirety by reference.
800 UE
801 antenna
802 transceiver circuit
803 user interface
804 controller
805 memory
900 (R)AN node
901 antenna
902 transceiver circuit
903 network interface
904 controller
905 memory
1000 AMF
1001 transceiver circuit
1002 controller
1003 memory
1004 network interface
| Number | Date | Country | Kind |
|---|---|---|---|
| 202011047284 | Oct 2020 | IN | national |
| Filing Document | Filing Date | Country | Kind |
|---|---|---|---|
| PCT/JP2021/039913 | 10/28/2021 | WO |
