Patent Application
20230074994
The present disclosure relates to emergency fallback, for example from 5th Generation (5G) networks.
Generally, all terms used herein are to be interpreted according to their ordinary meaning in the relevant technical field, unless a different meaning is clearly given and/or is implied from the context in which it is used. All references to a/an/the element, apparatus, component, means, step, etc. are to be interpreted openly as referring to at least one instance of the element, apparatus, component, means, step, etc., unless explicitly stated otherwise. The steps of any methods disclosed herein do not have to be performed in the exact order disclosed, unless a step is explicitly described as following or preceding another step and/or where it is implicit that a step must follow or precede another step. Any feature of any of the embodiments disclosed herein may be applied to any other embodiment, wherever appropriate. Likewise, any advantage of any of the embodiments may apply to any other embodiments, and vice versa. Other objectives, features and advantages of the enclosed embodiments will be apparent from the following description.
5G Network—The 3GPP standard TS 23.501 describes the 5G network architecture. A simplified version of a 5G network is shown in
The User Equipment (UE) 102 is a mobile device used by the user to wirelessly access the network. The radio access network function 104 or base station called gNB (Next Generation Node B that supports new radio, NR) is responsible for providing wireless radio communication to the UE 102 and connecting the UE 102 to the core network 106, 108. A core network function called the Access and Mobility Management Function (AMF) 106 is responsible for handling the mobility of the UE 102, among other responsibilities. Another core network function called the Session Management Function (SMF) 108 is responsible for handling the session and traffic steering of the UE 102, among other responsibilities.
The UE 102 interacts with the gNB 104 over-the-air using a radio interface. The gNB 104 in turn interacts with the AMF 106 using the interface called N2. The interface between the AMF 106 and the SMF 108 is called N11. The gNBs 104 interact with each other using the Xn interface. Similarly, the AMFs 106 interact with each other using the N14 interface.
AS (access stratum) re-keying—The logical aspects between the UE 102 and the AMF 106 are referred to as non-access stratum (NAS) and the logical aspects between the UE 102 and the gNB 104 are referred to as access stratum (AS). Correspondingly, the security of communication (in the control plane and user plane, if applicable) are referred to as NAS security and AS security, respectively. When a state of security is established between the UE 102 and the AMF 106, both of them store the relevant security data, e.g. a NAS security key, a security key identifier, security capabilities, various counters, etc. Such a state of security between the UE 102 and the AMF 106 including the security data is referred to as a NAS security context. Similarly, the AS security context refers to the state of security including security data between the UE 102 and the gNB 104. The AS security context is derived from the NAS security context.
Over time, the UE 102 and the AMF 106 may change the shared NAS security context, e.g. as a result of running an authentication procedure. However, since the AMF 106 and the gNB 104 are different network functions, the change in the NAS security context is not automatically known to the gNB 104, meaning that the security of the AS traffic between the UE 102 and the gNB 104 is based on the AS security context derived from the old NAS security context. Consequently, whenever the NAS security context has changed, there is a need to synchronize it with the AS security context (i.e. to make a corresponding change to the AS security context.
This synchronization is referred to as AS re-keying. The AS re-keying is done either via an explicit UE Context Modification procedure (for example see Clause 6.9.2.2 of 3GPP TS 33.501 v16.1.0 that defines key derivations for context modification procedure) or as a part of handover procedures (see Clause 6.9.2.3 of 3GPP TS 33.501 v16.1.0 that defines key derivations during handover).
UE Context Modification procedure—The UE Context Modification procedure belongs to the N2 interface and is specified in 3GPP TS 38.413 v16.0.0. It should be noted that 3GPP TS 38.413 uses the term “NG” instead of the “N2” and correspondingly, the protocol stack is referred as Next Generation Application Protocol (NGAP). The procedure is initiated by the AMF, in general to modify the established UE context. The modification could be related to security or other types of parameters (e.g. radio parameters). Therefore, including security data is optional in this message. The message sent by the AMF is called the UE Context Modification Request message. When the modification is related to security (i.e. to perform AS re-keying), the message, among other data, includes the new security key and the UE security capabilities. It is specified that the NG-RAN node stores the received Security Key and takes it into use (if the security is activated).
Emergency service fallback—Voice service in mobile networks has strict regulatory requirements to allow emergency calls (accessibility, location positioning, traceability, etc.). A subscriber UE connected to a 5G SA system needs the system to support emergency calls, or alternative ways to handle emergency service/calls in the case that only NR does not support Emergency Services or the 5G Core (5GC) does not support Emergency Services. For example:
There currently exist certain challenge(s). When the UE is in connected mode, the NGAP Initial Context Setup Procedure is performed and AS security is already activated.
As the AMF determines that a UE's attempt to perform an emergency fallback needs to be moved to E-UTRA network (EUTRAN), the AMF will then include information element (IE) Emergency Fallback Indicator in a NGAP UE CONTEXT MODIFICATION REQUEST message.
The NG-RAN node has mainly the options below:
1) release-with-redirect to EUTRAN; and
2) handover to EUTRAN
The EUTRAN can be connected to the EPC, or to the 5GC.
In 1) the NG-RAN will release the UE and also include some selected EUTRA carrier for the UE to search on for a suitable cell. If the UE finds a suitable cell that uses that carrier, the UE connects to that cell and performs the emergency call AS security needs to be activated for sending radio resource control (RRC) Release with redirection information.
In 2) the NG-RAN node will perform Handover to the EUTRAN. UE security also needs to be activated to perform the Inter-system Inter-RAT handover to EUTRA.
The gNB (AS) keys are cryptographically separated from the 5GC (NAS) keys. Separate AS and NAS level Security Mode Command (SMC) procedures are used. Security is more prioritized than ever. Security keys need to be fresh and re-keying procedures on-the-fly can be initiated in the 5G system.
It is a challenge where the UE requests the network for emergency service fallback while the network is preparing to perform AS re-keying with the UE. This is allowed by the current 3GPP specification in the same UE context modification procedure. However, performing re-keying in parallel with moving the UE to EUTRA will delay the emergency call, and also add an additional risk for call drop.
Certain aspects of the present disclosure and their embodiments may provide solutions to these or other challenges. The solutions in this disclosure provide for the robust handling of Emergency Fallback in 5G, when there is AS rekeying at the same time. Some solutions at the 5GC are to disallow the combination of the two information elements to be used, so as to prevent AS rekeying happening when the Emergency Fallback is requested. That is, some solutions at the 5GC disallow or prevent the two information elements being used at the same time. Some solutions at the NG-RAN side enable the RAN, upon the reception of a request to do an AS rekeying and Emergency Fallback, to only perform the Emergency Fallback. Solutions for 5GC nodes and NG-RAN nodes can be deployed independently or in combination. Also, some solutions relate to the UE operation. In short, the solutions can provide that the Emergency Fallback function is handled with robustness and/or high efficiency.
There are, proposed herein, various embodiments which address one or more of the issues disclosed herein.
According to a first aspect, there is provided a method performed by a first core network, CN, node in a telecommunication network. The telecommunication network comprises a first radio access network, RAN, node that operates according to a first radio access technology, RAT. An update to a first security configuration between a wireless device and the first RAN node is required. The method comprises, after receiving a request from the wireless device for an emergency session so that the wireless device can establish an emergency call, initiating an Emergency Service Fallback procedure to a second RAT.
According to a second aspect, there is provided a method performed by a first radio access network, RAN, node that operates according to a first radio access technology, RAT, in a telecommunication network. The method comprises, after receiving a first message from a core network, CN, node in the telecommunication network, the first message indicating an update to a first security configuration between a wireless device and the first RAN node is required and that an Emergency Service Fallback procedure to a second RAT is to be performed so that the wireless device can establish an emergency call via the second RAT, initiating the Emergency Service Fallback procedure to the second RAT.
According to a third aspect, there is provided a method performed by a first radio access network, RAN, node that operates according to a first radio access technology, RAT, in a telecommunication network. The method comprises, after receiving a first message from a core network, CN, node in the telecommunication network, the first message indicating an update to a first security configuration between a wireless device and the first RAN node is required and that an Emergency Service Fallback procedure to a second RAT is to be performed so that the wireless device can establish an emergency call via the second RAT, initiating the update to the first security configuration; and initiating the Emergency Service Fallback procedure to the second RAT.
According to a fourth aspect, there is provided a computer program product comprising a computer readable medium having computer readable code embodied therein. The computer readable code is configured such that, on execution by a suitable computer or processing unit, the computer or processing unit is caused to perform the according to the first aspect, the second aspect, the third aspect, or any embodiments thereof.
According to a fifth aspect, there is provided a first core network, CN, node for use in a telecommunication network. The telecommunication network comprises a first radio access network, RAN, node that operates according to a first radio access technology, RAT. An update to a first security configuration between a wireless device and the first RAN node is required. The first CN node is configured to, after receiving a request from the wireless device for an emergency session so that the wireless device can establish an emergency call, initiate an Emergency Service Fallback procedure to a second RAT.
According to a sixth aspect, there is provided a first radio access network, RAN, node that operates according to a first radio access technology, RAT, in a telecommunication network. The first RAN node is configured to, after receiving a first message from a core network, CN, node in the telecommunication network, the first message indicating an update to a first security configuration between a wireless device and the first RAN node is required and that an Emergency Service Fallback procedure to a second RAT is to be performed so that the wireless device can establish an emergency call via the second RAT, initiate the Emergency Service Fallback procedure to the second RAT.
According to a seventh aspect, there is provided a first radio access network, RAN, node that operates according to a first radio access technology, RAT, in a telecommunication network. The first RAN node is configured to, after receiving a first message from a core network, CN, node in the telecommunication network, the first message indicating an update to a first security configuration between a wireless device and the first RAN node is required and that an Emergency Service Fallback procedure to a second RAT is to be performed so that the wireless device can establish an emergency call via the second RAT, initiate the update to the first security configuration; and initiate the Emergency Service Fallback procedure to the second RAT.
According to an eighth aspect, there is provided a first core network, CN, node for use in a telecommunication network. The telecommunication network comprises a first radio access network, RAN, node that operates according to a first radio access technology, RAT. An update to a first security configuration between a wireless device and the first RAN node is required. The first CN node comprises a processor and a memory, said memory containing instructions executable by said processor whereby said first CN node is operative to, after receiving a request from the wireless device for an emergency session so that the wireless device can establish an emergency call, initiate an Emergency Service Fallback procedure to a second RAT.
According to a ninth aspect, there is provided a first radio access network, RAN, node that operates according to a first radio access technology, RAT, in a telecommunication network. The first RAN node comprises a processor and a memory, said memory containing instructions executable by said processor whereby said first RAN node is operative to, after receiving a first message from a core network, CN, node in the telecommunication network, the first message indicating an update to a first security configuration between a wireless device and the first RAN node is required and that an Emergency Service Fallback procedure to a second RAT is to be performed so that the wireless device can establish an emergency call via the second RAT, initiate the Emergency Service Fallback procedure to the second RAT.
According to a tenth aspect, there is provided a first radio access network, RAN, node that operates according to a first radio access technology, RAT, in a telecommunication network. The first RAN node comprises a processor and a memory, said memory containing instructions executable by said processor whereby said first RAN node is operative to, after receiving a first message from a core network, CN, node in the telecommunication network, the first message indicating an update to a first security configuration between a wireless device and the first RAN node is required and that an Emergency Service Fallback procedure to a second RAT is to be performed so that the wireless device can establish an emergency call via the second RAT, initiate the update to the first security configuration; and initiate the Emergency Service Fallback procedure to the second RAT.
Certain embodiments or aspects may provide one or more of the following technical advantage(s). In particular, certain embodiments provide that the emergency fallback is handled without further latency. Certain embodiments provide that the air interface is saved from unnecessary AS key update procedures. Certain embodiments provide that radio resources are conserved by avoiding intra-cell handover that does not add a significant security benefit. Certain embodiments offer resilience against poorly implemented or poorly configured core network functions (e.g. an AMF) that asks the radio network function (e.g. NG-RAN) to perform both AS re-keying and emergency fallback.
Some of the embodiments contemplated herein will now be described more fully with reference to the accompanying drawings, in which:
Some of the embodiments contemplated herein will now be described more fully with reference to the accompanying drawings. Other embodiments, however, are contained within the scope of the subject matter disclosed herein, the disclosed subject matter should not be construed as limited to only the embodiments set forth herein; rather, these embodiments are provided by way of example to convey the scope of the subject matter to those skilled in the art. Additional information may also be found in the document provided in the Appendix.
As discussed above, it a challenge when the UE requires emergency service fallback while the network was preparing to perform AS re-keying with the UE. In various embodiments, the emergency service fallback is Emergency Service Fallback as defined in 3GPP TS 23.501, section 5.16.4 v16.1.0, and/or 3GPP TS 23.502, section 4.14.3 v16.2.0. In the following, various solutions in different nodes are provided to solve this problem.
As used herein, a NAS security context can comprise any one or more of a NAS security key, a NAS security algorithm, a NAS uplink count, a NAS downlink count, security capabilities, and a key set identifier. Also as used herein, an AS security context can comprise any one or more of an AS security key, an AS security algorithm, an AS uplink count, an AS downlink count, security capabilities, a key chain counter, a user plane, and a security policy.
AMF Behavior and Solution
The signalling diagram in
NG-RAN Behavior and Solution
The signalling diagram in
In this section, reference to NG-RAN behaviour typically relates to behaviour of a gNB or ng-eNB. Steps 312 and 318 in the AMF 306 correspond generally to steps 212 and 218 in
This solution can be specified in NGAP, for example in section 8.3.4 UE Context Modification, 3GPP TS 38.413, v16.0.0, stating that if the Emergency Fallback Indicator IE is included, the Security Key and/or the UE Security Capability shall be ignored, if they are also present. This could be specified in the procedural text, or in the semantic description in the tabular (sections 9.2.2.7-9.2.2.9, 3GPP TS 38.413 v16.0.0.
In this case, the NG-RAN 304 could perform a RRC release procedure with a redirect indication towards the UE 302. The RRC release message could be protected using the old (i.e. the existing, non-updated) AS security keys. Doing so is acceptable from a security point of view since new AS keys resulting from AS re-keying would not be long lasting because of subsequent IDLE state mobility. Therefore keeping the old AS keys for a short period of time (to protect the RRC release message) is acceptable.
This solution could also prevent unexpected behavior from poorly implemented/configured AMFs when such AMFs include both the AS re-keying and the emergency fallback indications in the NGAP UE Context Modification Request message, despite the standards or policy not allowing it.
As a further part of this solution, in step 322, the NG-RAN node 304 acts upon the emergency fallback indicator but ignores the AS-rekeying. The UE context modification procedure is successful, and in the response message sent from the NG-RAN node 304 to the AMF 306 (signal 324), the NG-RAN 304 can indicate explicitly or implicitly that the AS-rekeying is not (or was not) performed. The AMF 306 may take this information into account and perform a new AS security re-keying. This solution handles problems with backwards compatibility.
The below Table 1 shows an example of how the new “Security Key Update not performed” can be included in Chapter 9.2.2.8 UE CONTEXT MODIFICATION RESPONSE in 3GPP TS 38.413, v16.0.0.
As noted above, the above 5GC (AMF) solution(s) can be used with a conventional NG-RAN. Likewise, as noted above, the above NG-RAN solution(s) can be used with a conventional 5GC (AMF). However, the above 5GC (AMF) solution(s) can be used at the same time as the above NG-RAN side solution(s) to gain robustness from different nodes.
UE Solutions
At the UE side, possible solutions include specifying that when the UE knows that AS re-keying is pending, and the UE has requested emergency fallback, the UE could:
Although the subject matter described herein may be implemented in any appropriate type of system using any suitable components, the embodiments disclosed herein are described in relation to a wireless network, such as the example wireless network illustrated in
The wireless network may comprise and/or interface with any type of communication, telecommunication, data, cellular, and/or radio network or other similar type of system. In some embodiments, the wireless network may be configured to operate according to specific standards or other types of predefined rules or procedures. Thus, particular embodiments of the wireless network may implement communication standards, such as Global System for Mobile Communications (GSM), Universal Mobile Telecommunications System (UMTS), Long Term Evolution (LTE), and/or other suitable 2G, 3G, 4G, or 5G standards; wireless local area network (WLAN) standards, such as the IEEE 802.11 standards; and/or any other appropriate wireless communication standard, such as the Worldwide Interoperability for Microwave Access (WiMax), Bluetooth, Z-Wave and/or ZigBee standards.
Network 406 may comprise one or more backhaul networks, core networks, IP networks, public switched telephone networks (PSTNs), packet data networks, optical networks, wide-area networks (WANs), local area networks (LANs), wireless local area networks (WLANs), wired networks, wireless networks, metropolitan area networks, and other networks to enable communication between devices. In particular, network 406 can include a core network that includes a core network node, such as an AMF.
Network node 460 and WD 410 comprise various components described in more detail below. These components work together in order to provide network node and/or wireless device functionality, such as providing wireless connections in a wireless network. In different embodiments, the wireless network may comprise any number of wired or wireless networks, network nodes, base stations, controllers, wireless devices, relay stations, and/or any other components or systems that may facilitate or participate in the communication of data and/or signals whether via wired or wireless connections.
As used herein, network node refers to equipment capable, configured, arranged and/or operable to communicate directly or indirectly with a wireless device and/or with other network nodes or equipment in the wireless network to enable and/or provide wireless access to the wireless device and/or to perform other functions (e.g., administration) in the wireless network. Examples of network nodes include, but are not limited to, access points (APs) (e.g., radio access points), base stations (BSs) (e.g., radio base stations, Node Bs, evolved Node Bs (eNBs) and NR NodeBs (gNBs)). Base stations may be categorized based on the amount of coverage they provide (or, stated differently, their transmit power level) and may then also be referred to as femto base stations, pico base stations, micro base stations, or macro base stations. A base station may be a relay node or a relay donor node controlling a relay. A network node may also include one or more (or all) parts of a distributed radio base station such as centralized digital units and/or remote radio units (RRUs), sometimes referred to as Remote Radio Heads (RRHs). Such remote radio units may or may not be integrated with an antenna as an antenna integrated radio. Parts of a distributed radio base station may also be referred to as nodes in a distributed antenna system (DAS). Yet further examples of network nodes include multi-standard radio (MSR) equipment such as MSR BSs, network controllers such as radio network controllers (RNCs) or base station controllers (BSCs), base transceiver stations (BTSs), transmission points, transmission nodes, multi-cell/multicast coordination entities (MCEs), core network nodes (e.g., MSCs, MMEs), O&M nodes, OSS nodes, SON nodes, positioning nodes (e.g., E-SMLCs), and/or MDTs. As another example, a network node may be a virtual network node as described in more detail below. More generally, however, network nodes may represent any suitable device (or group of devices) capable, configured, arranged, and/or operable to enable and/or provide a wireless device with access to the wireless network or to provide some service to a wireless device that has accessed the wireless network.
In
Similarly, network node 460 may be composed of multiple physically separate components (e.g., a NodeB component and a RNC component, or a BTS component and a BSC component, etc.), which may each have their own respective components. In certain scenarios in which network node 460 comprises multiple separate components (e.g., BTS and BSC components), one or more of the separate components may be shared among several network nodes. For example, a single RNC may control multiple NodeB's. In such a scenario, each unique NodeB and RNC pair, may in some instances be considered a single separate network node. In some embodiments, network node 460 may be configured to support multiple radio access technologies (RATs). In such embodiments, some components may be duplicated (e.g., separate device readable medium 480 for the different RATs) and some components may be reused (e.g., the same antenna 462 may be shared by the RATs). Network node 460 may also include multiple sets of the various illustrated components for different wireless technologies integrated into network node 460, such as, for example, GSM, WCDMA, LTE, NR, WiFi, or Bluetooth wireless technologies. These wireless technologies may be integrated into the same or different chip or set of chips and other components within network node 460. Processing circuitry 470 is configured to perform any determining, calculating, or similar operations (e.g., certain obtaining operations) described herein as being provided by a network node. These operations performed by processing circuitry 470 may include processing information obtained by processing circuitry 470 by, for example, converting the obtained information into other information, comparing the obtained information or converted information to information stored in the network node, and/or performing one or more operations based on the obtained information or converted information, and as a result of said processing making a determination.
Processing circuitry 470 may comprise a combination of one or more of a microprocessor, controller, microcontroller, central processing unit, digital signal processor, application-specific integrated circuit, field programmable gate array, or any other suitable computing device, resource, or combination of hardware, software and/or encoded logic operable to provide, either alone or in conjunction with other network node 460 components, such as device readable medium 480, network node 460 functionality. For example, processing circuitry 470 may execute instructions stored in device readable medium 480 or in memory within processing circuitry 470. Such functionality may include providing any of the various wireless features, functions, or benefits discussed herein. In some embodiments, processing circuitry 470 may include a system on a chip (SOC).
In some embodiments, processing circuitry 470 may include one or more of radio frequency (RF) transceiver circuitry 472 and baseband processing circuitry 474. In some embodiments, radio frequency (RF) transceiver circuitry 472 and baseband processing circuitry 474 may be on separate chips (or sets of chips), boards, or units, such as radio units and digital units. In alternative embodiments, part or all of RF transceiver circuitry 472 and baseband processing circuitry 474 may be on the same chip or set of chips, boards, or units
In certain embodiments, some or all of the functionality described herein as being provided by a network node, base station, eNB or other such network device may be performed by processing circuitry 470 executing instructions stored on device readable medium 480 or memory within processing circuitry 470. In alternative embodiments, some or all of the functionality may be provided by processing circuitry 470 without executing instructions stored on a separate or discrete device readable medium, such as in a hard-wired manner. In any of those embodiments, whether executing instructions stored on a device readable storage medium or not, processing circuitry 470 can be configured to perform the described functionality. The benefits provided by such functionality are not limited to processing circuitry 470 alone or to other components of network node 460, but are enjoyed by network node 460 as a whole, and/or by end users and the wireless network generally.
Device readable medium 480 may comprise any form of volatile or non-volatile computer readable memory including, without limitation, persistent storage, solid-state memory, remotely mounted memory, magnetic media, optical media, random access memory (RAM), read-only memory (ROM), mass storage media (for example, a hard disk), removable storage media (for example, a flash drive, a Compact Disk (CD) or a Digital Video Disk (DVD)), and/or any other volatile or non-volatile, non-transitory device readable and/or computer-executable memory devices that store information, data, and/or instructions that may be used by processing circuitry 470. Device readable medium 480 may store any suitable instructions, data or information, including a computer program, software, an application including one or more of logic, rules, code, tables, etc. and/or other instructions capable of being executed by processing circuitry 470 and, utilized by network node 460. Device readable medium 480 may be used to store any calculations made by processing circuitry 470 and/or any data received via interface 490. In some embodiments, processing circuitry 470 and device readable medium 480 may be considered to be integrated.
Interface 490 is used in the wired or wireless communication of signalling and/or data between network node 460, network 406, and/or WDs 410. As illustrated, interface 490 comprises port(s)/terminal(s) 494 to send and receive data, for example to and from network 406 over a wired connection. Interface 490 also includes radio front end circuitry 492 that may be coupled to, or in certain embodiments a part of, antenna 462. Radio front end circuitry 492 comprises filters 498 and amplifiers 496. Radio front end circuitry 492 may be connected to antenna 462 and processing circuitry 470. Radio front end circuitry may be configured to condition signals communicated between antenna 462 and processing circuitry 470. Radio front end circuitry 492 may receive digital data that is to be sent out to other network nodes or WDs via a wireless connection. Radio front end circuitry 492 may convert the digital data into a radio signal having the appropriate channel and bandwidth parameters using a combination of filters 498 and/or amplifiers 496. The radio signal may then be transmitted via antenna 462. Similarly, when receiving data, antenna 462 may collect radio signals which are then converted into digital data by radio front end circuitry 492. The digital data may be passed to processing circuitry 470. In other embodiments, the interface may comprise different components and/or different combinations of components.
In certain alternative embodiments, network node 460 may not include separate radio front end circuitry 492, instead, processing circuitry 470 may comprise radio front end circuitry and may be connected to antenna 462 without separate radio front end circuitry 492. Similarly, in some embodiments, all or some of RF transceiver circuitry 472 may be considered a part of interface 490. In still other embodiments, interface 490 may include one or more ports or terminals 494, radio front end circuitry 492, and RF transceiver circuitry 472, as part of a radio unit (not shown), and interface 490 may communicate with baseband processing circuitry 474, which is part of a digital unit (not shown).
Antenna 462 may include one or more antennas, or antenna arrays, configured to send and/or receive wireless signals. Antenna 462 may be coupled to radio front end circuitry 490 and may be any type of antenna capable of transmitting and receiving data and/or signals wirelessly. In some embodiments, antenna 462 may comprise one or more omni-directional, sector or panel antennas operable to transmit/receive radio signals between, for example, 2 GHz and 66 GHz. An omni-directional antenna may be used to transmit/receive radio signals in any direction, a sector antenna may be used to transmit/receive radio signals from devices within a particular area, and a panel antenna may be a line of sight antenna used to transmit/receive radio signals in a relatively straight line. In some instances, the use of more than one antenna may be referred to as MIMO. In certain embodiments, antenna 462 may be separate from network node 460 and may be connectable to network node 460 through an interface or port.
Antenna 462, interface 490, and/or processing circuitry 470 may be configured to perform any receiving operations and/or certain obtaining operations described herein as being performed by a network node. Any information, data and/or signals may be received from a wireless device, another network node and/or any other network equipment. Similarly, antenna 462, interface 490, and/or processing circuitry 470 may be configured to perform any transmitting operations described herein as being performed by a network node. Any information, data and/or signals may be transmitted to a wireless device, another network node and/or any other network equipment.
Power circuitry 487 may comprise, or be coupled to, power management circuitry and is configured to supply the components of network node 460 with power for performing the functionality described herein. Power circuitry 487 may receive power from power source 486. Power source 486 and/or power circuitry 487 may be configured to provide power to the various components of network node 460 in a form suitable for the respective components (e.g., at a voltage and current level needed for each respective component). Power source 486 may either be included in, or external to, power circuitry 487 and/or network node 460. For example, network node 460 may be connectable to an external power source (e.g., an electricity outlet) via an input circuitry or interface such as an electrical cable, whereby the external power source supplies power to power circuitry 487. As a further example, power source 486 may comprise a source of power in the form of a battery or battery pack which is connected to, or integrated in, power circuitry 487. The battery may provide backup power should the external power source fail. Other types of power sources, such as photovoltaic devices, may also be used.
Alternative embodiments of network node 460 may include additional components beyond those shown in
As used herein, wireless device (WD) refers to a device capable, configured, arranged and/or operable to communicate wirelessly with network nodes and/or other wireless devices. Unless otherwise noted, the term WD may be used interchangeably herein with user equipment (UE). Communicating wirelessly may involve transmitting and/or receiving wireless signals using electromagnetic waves, radio waves, infrared waves, and/or other types of signals suitable for conveying information through air. In some embodiments, a WD may be configured to transmit and/or receive information without direct human interaction. For instance, a WD may be designed to transmit information to a network on a predetermined schedule, when triggered by an internal or external event, or in response to requests from the network. Examples of a WD include, but are not limited to, a smart phone, a mobile phone, a cell phone, a voice over IP (VoIP) phone, a wireless local loop phone, a desktop computer, a personal digital assistant (PDA), a wireless cameras, a gaming console or device, a music storage device, a playback appliance, a wearable terminal device, a wireless endpoint, a mobile station, a tablet, a laptop, a laptop-embedded equipment (LEE), a laptop-mounted equipment (LME), a smart device, a wireless customer-premise equipment (CPE). a vehicle-mounted wireless terminal device, etc. A WD may support device-to-device (D2D) communication, for example by implementing a 3GPP standard for sidelink communication, vehicle-to-vehicle (V2V), vehicle-to-infrastructure (V2I), vehicle-to-everything (V2X) and may in this case be referred to as a D2D communication device. As yet another specific example, in an Internet of Things (IoT) scenario, a WD may represent a machine or other device that performs monitoring and/or measurements, and transmits the results of such monitoring and/or measurements to another WD and/or a network node. The WD may in this case be a machine-to-machine (M2M) device, which may in a 3GPP context be referred to as an MTC device. As one particular example, the WD may be a UE implementing the 3GPP narrow band internet of things (NB-IoT) standard. Particular examples of such machines or devices are sensors, metering devices such as power meters, industrial machinery, or home or personal appliances (e.g. refrigerators, televisions, etc.) personal wearables (e.g., watches, fitness trackers, etc.). In other scenarios, a WD may represent a vehicle or other equipment that is capable of monitoring and/or reporting on its operational status or other functions associated with its operation. A WD as described above may represent the endpoint of a wireless connection, in which case the device may be referred to as a wireless terminal. Furthermore, a WD as described above may be mobile, in which case it may also be referred to as a mobile device or a mobile terminal.
As illustrated, wireless device 410 includes antenna 411, interface 414, processing circuitry 420, device readable medium 430, user interface equipment 432, auxiliary equipment 434, power source 436 and power circuitry 437. WD 410 may include multiple sets of one or more of the illustrated components for different wireless technologies supported by WD 410, such as, for example, GSM, WCDMA, LTE, NR, WiFi, WiMAX, or Bluetooth wireless technologies, just to mention a few. These wireless technologies may be integrated into the same or different chips or set of chips as other components within WD 410.
Antenna 411 may include one or more antennas or antenna arrays, configured to send and/or receive wireless signals, and is connected to interface 414. In certain alternative embodiments, antenna 411 may be separate from WD 410 and be connectable to WD 410 through an interface or port. Antenna 411, interface 414, and/or processing circuitry 420 may be configured to perform any receiving or transmitting operations described herein as being performed by a WD. Any information, data and/or signals may be received from a network node and/or another WD. In some embodiments, radio front end circuitry and/or antenna 411 may be considered an interface.
As illustrated, interface 414 comprises radio front end circuitry 412 and antenna 411. Radio front end circuitry 412 comprise one or more filters 418 and amplifiers 416. Radio front end circuitry 414 is connected to antenna 411 and processing circuitry 420, and is configured to condition signals communicated between antenna 411 and processing circuitry 420. Radio front end circuitry 412 may be coupled to or a part of antenna 411. In some embodiments, WD 410 may not include separate radio front end circuitry 412; rather, processing circuitry 420 may comprise radio front end circuitry and may be connected to antenna 411. Similarly, in some embodiments, some or all of RF transceiver circuitry 422 may be considered a part of interface 414. Radio front end circuitry 412 may receive digital data that is to be sent out to other network nodes or WDs via a wireless connection. Radio front end circuitry 412 may convert the digital data into a radio signal having the appropriate channel and bandwidth parameters using a combination of filters 418 and/or amplifiers 416. The radio signal may then be transmitted via antenna 411. Similarly, when receiving data, antenna 411 may collect radio signals which are then converted into digital data by radio front end circuitry 412. The digital data may be passed to processing circuitry 420. In other embodiments, the interface may comprise different components and/or different combinations of components.
Processing circuitry 420 may comprise a combination of one or more of a microprocessor, controller, microcontroller, central processing unit, digital signal processor, application-specific integrated circuit, field programmable gate array, or any other suitable computing device, resource, or combination of hardware, software, and/or encoded logic operable to provide, either alone or in conjunction with other WD 410 components, such as device readable medium 430, WD 410 functionality. Such functionality may include providing any of the various wireless features or benefits discussed herein. For example, processing circuitry 420 may execute instructions stored in device readable medium 430 or in memory within processing circuitry 420 to provide the functionality disclosed herein.
As illustrated, processing circuitry 420 includes one or more of RF transceiver circuitry 422, baseband processing circuitry 424, and application processing circuitry 426. In other embodiments, the processing circuitry may comprise different components and/or different combinations of components. In certain embodiments processing circuitry 420 of WD 410 may comprise a SOC. In some embodiments, RF transceiver circuitry 422, baseband processing circuitry 424, and application processing circuitry 426 may be on separate chips or sets of chips. In alternative embodiments, part or all of baseband processing circuitry 424 and application processing circuitry 426 may be combined into one chip or set of chips, and RF transceiver circuitry 422 may be on a separate chip or set of chips. In still alternative embodiments, part or all of RF transceiver circuitry 422 and baseband processing circuitry 424 may be on the same chip or set of chips, and application processing circuitry 426 may be on a separate chip or set of chips. In yet other alternative embodiments, part or all of RF transceiver circuitry 422, baseband processing circuitry 424, and application processing circuitry 426 may be combined in the same chip or set of chips. In some embodiments, RF transceiver circuitry 422 may be a part of interface 414. RF transceiver circuitry 422 may condition RF signals for processing circuitry 420.
In certain embodiments, some or all of the functionality described herein as being performed by a WD may be provided by processing circuitry 420 executing instructions stored on device readable medium 430, which in certain embodiments may be a computer-readable storage medium. In alternative embodiments, some or all of the functionality may be provided by processing circuitry 420 without executing instructions stored on a separate or discrete device readable storage medium, such as in a hard-wired manner. In any of those particular embodiments, whether executing instructions stored on a device readable storage medium or not, processing circuitry 420 can be configured to perform the described functionality. The benefits provided by such functionality are not limited to processing circuitry 420 alone or to other components of WD 410, but are enjoyed by WD 410 as a whole, and/or by end users and the wireless network generally.
Processing circuitry 420 may be configured to perform any determining, calculating, or similar operations (e.g., certain obtaining operations) described herein as being performed by a WD. These operations, as performed by processing circuitry 420, may include processing information obtained by processing circuitry 420 by, for example, converting the obtained information into other information, comparing the obtained information or converted information to information stored by WD 410, and/or performing one or more operations based on the obtained information or converted information, and as a result of said processing making a determination.
Device readable medium 430 may be operable to store a computer program, software, an application including one or more of logic, rules, code, tables, etc. and/or other instructions capable of being executed by processing circuitry 420. Device readable medium 430 may include computer memory (e.g., Random Access Memory (RAM) or Read Only Memory (ROM)), mass storage media (e.g., a hard disk), removable storage media (e.g., a Compact Disk (CD) or a Digital Video Disk (DVD)), and/or any other volatile or non-volatile, non-transitory device readable and/or computer executable memory devices that store information, data, and/or instructions that may be used by processing circuitry 420. In some embodiments, processing circuitry 420 and device readable medium 430 may be considered to be integrated.
User interface equipment 432 may provide components that allow for a human user to interact with WD 410. Such interaction may be of many forms, such as visual, audial, tactile, etc. User interface equipment 432 may be operable to produce output to the user and to allow the user to provide input to WD 410. The type of interaction may vary depending on the type of user interface equipment 432 installed in WD 410. For example, if WD 410 is a smart phone, the interaction may be via a touch screen; if WD 410 is a smart meter, the interaction may be through a screen that provides usage (e.g., the number of gallons used) or a speaker that provides an audible alert (e.g., if smoke is detected). User interface equipment 432 may include input interfaces, devices and circuits, and output interfaces, devices and circuits. User interface equipment 432 is configured to allow input of information into WD 410, and is connected to processing circuitry 420 to allow processing circuitry 420 to process the input information. User interface equipment 432 may include, for example, a microphone, a proximity or other sensor, keys/buttons, a touch display, one or more cameras, a USB port, or other input circuitry. User interface equipment 432 is also configured to allow output of information from WD 410, and to allow processing circuitry 420 to output information from WD 410. User interface equipment 432 may include, for example, a speaker, a display, vibrating circuitry, a USB port, a headphone interface, or other output circuitry. Using one or more input and output interfaces, devices, and circuits, of user interface equipment 432, WD 410 may communicate with end users and/or the wireless network, and allow them to benefit from the functionality described herein.
Auxiliary equipment 434 is operable to provide more specific functionality which may not be generally performed by WDs. This may comprise specialized sensors for doing measurements for various purposes, interfaces for additional types of communication such as wired communications etc. The inclusion and type of components of auxiliary equipment 434 may vary depending on the embodiment and/or scenario.
Power source 436 may, in some embodiments, be in the form of a battery or battery pack. Other types of power sources, such as an external power source (e.g., an electricity outlet), photovoltaic devices or power cells, may also be used. WD 410 may further comprise power circuitry 437 for delivering power from power source 436 to the various parts of WD 410 which need power from power source 436 to carry out any functionality described or indicated herein. Power circuitry 437 may in certain embodiments comprise power management circuitry. Power circuitry 437 may additionally or alternatively be operable to receive power from an external power source; in which case WD 410 may be connectable to the external power source (such as an electricity outlet) via input circuitry or an interface such as an electrical power cable. Power circuitry 437 may also in certain embodiments be operable to deliver power from an external power source to power source 436. This may be, for example, for the charging of power source 436. Power circuitry 437 may perform any formatting, converting, or other modification to the power from power source 436 to make the power suitable for the respective components of WD 410 to which power is supplied.
Where network 406 includes a core network node, such as an AMF, the core network node can comprise various components similar to the components in the network node 460. These components work together in order to provide core network node functionality as described herein. For example, a core network node can include components similar to processing circuitry 470, device readable medium 480, interface 490, auxiliary equipment 484, power source 486 and/or power circuitry 487 described above.
In
In
In the depicted embodiment, input/output interface 505 may be configured to provide a communication interface to an input device, output device, or input and output device. UE 500 may be configured to use an output device via input/output interface 505. An output device may use the same type of interface port as an input device. For example, a USB port may be used to provide input to and output from UE 500. The output device may be a speaker, a sound card, a video card, a display, a monitor, a printer, an actuator, an emitter, a smartcard, another output device, or any combination thereof. UE 500 may be configured to use an input device via input/output interface 505 to allow a user to capture information into UE 500. The input device may include a touch-sensitive or presence-sensitive display, a camera (e.g., a digital camera, a digital video camera, a web camera, etc.), a microphone, a sensor, a mouse, a trackball, a directional pad, a trackpad, a scroll wheel, a smartcard, and the like. The presence-sensitive display may include a capacitive or resistive touch sensor to sense input from a user. A sensor may be, for instance, an accelerometer, a gyroscope, a tilt sensor, a force sensor, a magnetometer, an optical sensor, a proximity sensor, another like sensor, or any combination thereof. For example, the input device may be an accelerometer, a magnetometer, a digital camera, a microphone, and an optical sensor.
In
RAM 517 may be configured to interface via bus 502 to processing circuitry 501 to provide storage or caching of data or computer instructions during the execution of software programs such as the operating system, application programs, and device drivers. ROM 519 may be configured to provide computer instructions or data to processing circuitry 501. For example, ROM 519 may be configured to store invariant low-level system code or data for basic system functions such as basic input and output (I/O), startup, or reception of keystrokes from a keyboard that are stored in a non-volatile memory. Storage medium 521 may be configured to include memory such as RAM, ROM, programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), magnetic disks, optical disks, floppy disks, hard disks, removable cartridges, or flash drives. In one example, storage medium 521 may be configured to include operating system 523, application program 525 such as a web browser application, a widget or gadget engine or another application, and data file 527. Storage medium 521 may store, for use by UE 500, any of a variety of various operating systems or combinations of operating systems.
Storage medium 521 may be configured to include a number of physical drive units, such as redundant array of independent disks (RAID), floppy disk drive, flash memory, USB flash drive, external hard disk drive, thumb drive, pen drive, key drive, high-density digital versatile disc (HD-DVD) optical disc drive, internal hard disk drive, Blu-Ray optical disc drive, holographic digital data storage (HDDS) optical disc drive, external mini-dual in-line memory module (DIMM), synchronous dynamic random access memory (SDRAM), external micro-DIMM SDRAM, smartcard memory such as a subscriber identity module or a removable user identity (SIM/RUIM) module, other memory, or any combination thereof. Storage medium 521 may allow UE 500 to access computer-executable instructions, application programs or the like, stored on transitory or non-transitory memory media, to off-load data, or to upload data. An article of manufacture, such as one utilizing a communication system may be tangibly embodied in storage medium 521, which may comprise a device readable medium.
In
In the illustrated embodiment, the communication functions of communication subsystem 531 may include data communication, voice communication, multimedia communication, short-range communications such as Bluetooth, near-field communication, location-based communication such as the use of the global positioning system (GPS) to determine a location, another like communication function, or any combination thereof. For example, communication subsystem 531 may include cellular communication, Wi-Fi communication, Bluetooth communication, and GPS communication. Network 543b may encompass wired and/or wireless networks such as a local-area network (LAN), a wide-area network (WAN), a computer network, a wireless network, a telecommunications network, another like network or any combination thereof. For example, network 543b may be a cellular network, a Wi-Fi network, and/or a near-field network. Power source 513 may be configured to provide alternating current (AC) or direct current (DC) power to components of UE 500.
The features, benefits and/or functions described herein may be implemented in one of the components of UE 500 or partitioned across multiple components of UE 500. Further, the features, benefits, and/or functions described herein may be implemented in any combination of hardware, software or firmware. In one example, communication subsystem 531 may be configured to include any of the components described herein. Further, processing circuitry 501 may be configured to communicate with any of such components over bus 502. In another example, any of such components may be represented by program instructions stored in memory that when executed by processing circuitry 501 perform the corresponding functions described herein. In another example, the functionality of any of such components may be partitioned between processing circuitry 501 and communication subsystem 531. In another example, the non-computationally intensive functions of any of such components may be implemented in software or firmware and the computationally intensive functions may be implemented in hardware.
In some embodiments, some or all of the functions described herein may be implemented as virtual components executed by one or more virtual machines implemented in one or more virtual environments 600 hosted by one or more of hardware nodes 630. Further, in embodiments in which the virtual node is not a radio access node or does not require radio connectivity (e.g., a core network node), then the network node may be entirely virtualized.
The functions may be implemented by one or more applications 620 (which may alternatively be called software instances, virtual appliances, network functions, virtual nodes, virtual network functions, etc.) operative to implement some of the features, functions, and/or benefits of some of the embodiments disclosed herein. Applications 620 are run in virtualization environment 600 which provides hardware 630 comprising processing circuitry 660 and memory 690. Memory 690 contains instructions 695 executable by processing circuitry 660 whereby application 620 is operative to provide one or more of the features, benefits, and/or functions disclosed herein.
Virtualization environment 600, comprises general-purpose or special-purpose network hardware devices 630 comprising a set of one or more processors or processing circuitry 660, which may be commercial off-the-shelf (COTS) processors, dedicated Application Specific Integrated Circuits (ASICs), or any other type of processing circuitry including digital or analog hardware components or special purpose processors. Each hardware device may comprise memory 690-1 which may be non-persistent memory for temporarily storing instructions 695 or software executed by processing circuitry 660. Each hardware device may comprise one or more network interface controllers (NICs) 670, also known as network interface cards, which include physical network interface 680. Each hardware device may also include non-transitory, persistent, machine-readable storage media 690-2 having stored therein software 695 and/or instructions executable by processing circuitry 660. Software 695 may include any type of software including software for instantiating one or more virtualization layers 650 (also referred to as hypervisors), software to execute virtual machines 640 as well as software allowing it to execute functions, features and/or benefits described in relation with some embodiments described herein.
Virtual machines 640, comprise virtual processing, virtual memory, virtual networking or interface and virtual storage, and may be run by a corresponding virtualization layer 650 or hypervisor. Different embodiments of the instance of virtual appliance 620 may be implemented on one or more of virtual machines 640, and the implementations may be made in different ways.
During operation, processing circuitry 660 executes software 695 to instantiate the hypervisor or virtualization layer 650, which may sometimes be referred to as a virtual machine monitor (VMM). Virtualization layer 650 may present a virtual operating platform that appears like networking hardware to virtual machine 640.
As shown in
Virtualization of the hardware is in some contexts referred to as network function virtualization (NFV). NFV may be used to consolidate many network equipment types onto industry standard high volume server hardware, physical switches, and physical storage, which can be located in data centers, and customer premise equipment.
In the context of NFV, virtual machine 640 may be a software implementation of a physical machine that runs programs as if they were executing on a physical, non-virtualized machine. Each of virtual machines 640, and that part of hardware 630 that executes that virtual machine, be it hardware dedicated to that virtual machine and/or hardware shared by that virtual machine with others of the virtual machines 640, forms a separate virtual network elements (VNE).
Still in the context of NFV, Virtual Network Function (VNF) is responsible for handling specific network functions that run in one or more virtual machines 640 on top of hardware networking infrastructure 630 and corresponds to application 620 in
In some embodiments, one or more radio units 6200 that each include one or more transmitters 6220 and one or more receivers 6210 may be coupled to one or more antennas 6225. Radio units 6200 may communicate directly with hardware nodes 630 via one or more appropriate network interfaces and may be used in combination with the virtual components to provide a virtual node with radio capabilities, such as a radio access node or a base station.
In some embodiments, some signalling can be effected with the use of control system 6230 which may alternatively be used for communication between the hardware nodes 630 and radio units 6200.
Any appropriate steps, methods, features, functions, or benefits disclosed herein may be performed through one or more functional units or modules of one or more virtual apparatuses. Each virtual apparatus may comprise a number of these functional units. These functional units may be implemented via processing circuitry, which may include one or more microprocessor or microcontrollers, as well as other digital hardware, which may include digital signal processors (DSPs), special-purpose digital logic, and the like. The processing circuitry may be configured to execute program code stored in memory, which may include one or several types of memory such as read-only memory (ROM), random-access memory (RAM), cache memory, flash memory devices, optical storage devices, etc. Program code stored in memory includes program instructions for executing one or more telecommunications and/or data communications protocols as well as instructions for carrying out one or more of the techniques described herein. In some implementations, the processing circuitry may be used to cause the respective functional unit to perform corresponding functions according one or more embodiments of the present disclosure.
Virtual Apparatus 800 may comprise processing circuitry, which may include one or more microprocessor or microcontrollers, as well as other digital hardware, which may include digital signal processors (DSPs), special-purpose digital logic, and the like. The processing circuitry may be configured to execute program code stored in memory, which may include one or several types of memory such as read-only memory (ROM), random-access memory, cache memory, flash memory devices, optical storage devices, etc. Program code stored in memory includes program instructions for executing one or more telecommunications and/or data communications protocols as well as instructions for carrying out one or more of the techniques described herein, in several embodiments. In some implementations, the processing circuitry may be used to cause initiating unit 802, and any other suitable units of apparatus 800 to perform corresponding functions according one or more embodiments of the present disclosure.
As illustrated in
The term unit may have conventional meaning in the field of electronics, electrical devices and/or electronic devices and may include, for example, electrical and/or electronic circuitry, devices, modules, processors, memories, logic solid state and/or discrete devices, computer programs or instructions for carrying out respective tasks, procedures, computations, outputs, and/or displaying functions, and so on, as such as those that are described herein.
An update to a first security configuration between a wireless device (e.g. a UE) and the first RAN node is required, In step 901, which occurs after the first CN node receives a request from the wireless device for an emergency session so that the wireless device can establish an emergency call, the first CN node initiates an Emergency Service Fallback procedure to a second RAT. The second RAT may be Universal Terrestrial Radio Access Network (UTRAN) or Evolved UTRAN (E-UTRAN).
The emergency call may be an emergency voice call. In some embodiments, the emergency call may be a voice call to a designated emergency telephone number.
The update to the first security configuration can be an AS re-keying.
In some embodiments, step 901 comprises sending a first message to the first RAN node. The first message indicates that an Emergency Service Fallback procedure is required. In these embodiments, the first message may comprise an Emergency Fallback Indicator information element (IE) that indicates that an Emergency Service Fallback procedure is required. The first message may be a context modification message for the wireless device. The first message may be is a UE Context Modification Request message.
In some embodiments, the first message does not indicate that an update to the first security configuration is required. This can mean that the first message does not comprise a Security Key IE or a UE Security Capability IE. Alternatively this can mean that the first message comprises a Security Key IE or a UE Security Capability IE and a second IE indicating that the value of the Security Key IE or the UE Security Capability IE is to be ignored by the first RAN node.
In some embodiments, the method further comprises ignoring the update to the first security configuration.
In some embodiments, the method further comprises receiving the request from the wireless device for the emergency session. The received request may be a Service Request Non-Access-Stratum (NAS) message comprising a Service type value indicating fallback. The request for the emergency session may be a request for an Emergency Service or Emergency Service Fallback. The request for the emergency session may be a request for fallback to the second RAT.
In some embodiments, prior to initiating the Emergency Service Fallback procedure in step 901, the method further comprises, determining that an update to the first security configuration is required. The step of determining that an update to the first security configuration is required can comprise determining that the first CN node has not yet performed a context modification procedure following activation of a second security configuration between the wireless device and the first CN node. The second security configuration may comprise a NAS security context. The NAS security context may comprise at least one of: a NAS security key, NAS security algorithms, a NAS uplink count, a NAS downlink count, security capabilities, and a key set identifier.
In some embodiments, the method further comprises, after receiving the request, determining that the Emergency Service Fallback procedure to the second RAT is to be initiated. The step of determining that the Emergency Service Fallback procedure to the second RAT is to be initiated can be performed based on one or more of: information in a local policy or a policy stored at or by the first CN node; information stored in a database or memory; information received from another CN node in the telecommunication network; information received from the first RAN node, a second RAN node operating according to the second RAT, another RAN node in the telecommunication network, the wireless device or another wireless device; or information received from a network function (NF) or an application function (AF).
In some embodiments, the method further comprises receiving a second message from the first RAN node. The second message indicates that the update of the first security configuration was not performed.
In some embodiments, the first security configuration comprises an access-stratum (AS) security context. The AS security context may comprise at least one of: an AS security key, an AS security algorithm, an AS uplink count, an AS downlink count, security capabilities, a key chain counter, a user plane, and a security policy.
In step 1001, after receiving a request from the wireless device for an emergency session so that the wireless device can establish an emergency call, the first CN node initiates the update to the first security configuration. The update to the first security configuration can be an AS re-keying.
Step 1003 comprises initiating an Emergency Service Fallback procedure to a second RAT. The second RAT may be UTRAN or E-UTRAN.
The emergency call may be an emergency voice call. In some embodiments, the emergency call may be a voice call to a designated emergency telephone number.
In step 1101, which occurs after receiving a first message from a CN node in the telecommunication network (the first message indicating an update to a first security configuration between a wireless device and the first RAN node is required and that an Emergency Service Fallback procedure to a second RAT is to be performed so that the wireless device can establish an emergency call via the second RAT), the first RAN node initiates the Emergency Service Fallback procedure to the second RAT. The second RAT may be UTRAN or E-UTRAN. The wireless device may be a UE.
In some embodiments, step 1101 comprises initiating a release procedure with an indication that the wireless device is to redirect to the second RAT. The release procedure may be initiated using a third message that is protected using an AS security context comprised in the first security configuration.
In alternative embodiments, step 1101 comprises initiating handover to the second RAT. The handover to the second RAT may use an AS context comprised in the first security configuration.
The first message may comprise an Emergency Fallback Indicator IE that indicates that an Emergency Service Fallback procedure is required. The first message may be a context modification message for the wireless device, for example a UE Context Modification Request message.
The first message can indicate the update to the first security configuration is required using a Security Key IE or a UE Security Capability IE.
The first security configuration may comprise an AS security context. The AS security context can comprise at least one of: an AS security key, an AS security algorithm, an AS uplink count, an AS downlink count, security capabilities, and a key set identifier.
The update to the first security configuration may be an AS re-keying.
in some embodiments, the method further comprises ignoring the requirement to update to the first security configuration.
In some embodiments, the first message comprises a Security Key IE or a UE Security Capability IE and a second IE indicating that the value of the Security Key IE or the UE Security Capability IE is to be ignored by the first RAN node.
In some embodiments, prior to step 1101, the method further comprises receiving a request from the wireless device for an emergency session.
In some embodiments, prior to step 1101, the method further comprises determining that an update to the first security configuration is required.
In some embodiments, the method further comprises determining that the Emergency Service Fallback procedure to the second RAT is to be initiated after receiving the first message from the CN node. This step can be performed based on one or more of: information in a local policy or a policy stored at or by the first RAN node; information stored in a database or memory; information received from another RAN node in the telecommunication network; information received from the first CN node, a second RAN node operating according to the second RAT, another RAN node in the telecommunication network, the wireless device or another wireless device; or information received from a NF or an AF.
In some embodiments, the method further comprises sending a second message to the first CN node. The second message indicates that the update of the first security configuration was not performed. The second message may be a context modification message for the wireless device. The second message may be a UE Context Modification Response.
In step 1201, which occurs after receiving a first message from a CN node in the telecommunication network (the first message indicating an update to a first security configuration between a wireless device and the first RAN node is required and that an Emergency Service Fallback procedure to a second RAT is to be performed so that the wireless device can establish an emergency call via the second RAT), the first RAN node initiates the update to the first security configuration.
In step 1203, the first RAN node initiates the Emergency Service Fallback procedure to the second RAT. The second RAT may be UTRAN or E-UTRAN. The wireless device may be a UE.
In step 1301, the wireless device sends a request to a first CN node in a telecommunication network for an emergency session so that the wireless device can establish an emergency call.
In step 1303, the wireless device performs an Emergency Service Fallback procedure to a second RAT. The second RAT may be UTRAN or E-UTRAN.
In some embodiments, the method further comprises ignoring the required update to the first security configuration while performing the Emergency Service Fallback procedure.
Step 1303 may comprise disconnecting from the first RAT and attaching to the second RAT. Alternatively, step 1303 can comprise receiving a release message from the first RAN node, the release message indicating that the wireless device is to redirect to the second RAT.
Various exemplary embodiments of the techniques presented herein are described in the following numbered paragraphs.
1. A method performed by a first core network, CN, node in a telecommunication network, wherein the telecommunication network comprises a first radio access network, RAN, node that operates according to a first radio access technology, RAT, wherein an update to a first security configuration between a wireless device and the first RAN node is required; the method comprising:
after receiving a request from the wireless device for an emergency session so that the wireless device can establish an emergency call, initiating an Emergency Service Fallback procedure to a second RAT.
2. The method of embodiment 1, wherein the step of initiating the Emergency Service Fallback procedure comprises:
sending a first message to the first RAN node, wherein the first message indicates that an Emergency Service Fallback procedure is required.
3. The method of embodiment 2, wherein the first message comprises an Emergency Fallback Indicator information element, IE, that indicates that an Emergency Service Fallback procedure is required.
4. The method of embodiment 2 or 3, wherein the first message is a context modification message for the wireless device.
5. The method of embodiment 2, 3 or 4, wherein the first message is a user equipment, UE, Context Modification Request message.
6. The method of any preceding embodiment, wherein the method further comprises:
ignoring the update to the first security configuration.
7. The method of any of embodiments 2-6, when directly or indirectly dependent on embodiment 2, wherein the first message does not indicate that an update to the first security configuration is required.
8. The method of embodiment 7, wherein the first message does not comprise a Security Key, information element, IE or a UE Security Capability IE; or the first message comprises a Security Key IE or a UE Security Capability IE and a second IE indicating that the value of the Security Key IE or the UE Security Capability IE is to be ignored by the first RAN node.
9. The method of any preceding embodiment, wherein the method further comprises:
receiving the request from the wireless device for the emergency session.
10. The method of embodiment 9, wherein the received request is a Service Request Non-Access-Stratum, NAS, message comprising a Service type value indicating fallback.
11. The method of embodiment 9 or 10, wherein the request for the emergency session is a request for an Emergency Service or Emergency Service Fallback.
12. The method of any of embodiments 9-11, wherein the request for the emergency session is a request for fallback to the second RAT.
13. The method of any preceding embodiment, wherein the method further comprises, prior to initiating the Emergency Service Fallback procedure:
determining that an update to the first security configuration is required.
14. The method of embodiment 13, wherein the step of determining that an update to the first security configuration is required comprises:
determining that the first CN node has not yet performed a context modification procedure following activation of a second security configuration between the wireless device and the first CN node.
15. The method of embodiment 14, wherein the second security configuration comprises a non-access-stratum, NAS, security context.
16. The method of embodiment 15 wherein the NAS security context comprises of at least one of: a NAS security key, NAS security algorithms, a NAS uplink count, a NAS downlink count, security capabilities, and a key set identifier.
17. The method of any preceding embodiment, wherein the method further comprises:
after receiving the request, determining that the Emergency Service Fallback procedure to the second RAT is to be initiated.
18. The method of embodiment 17, wherein the step of determining that the Emergency Service Fallback procedure to the second RAT is to be initiated is performed based on one or more of: information in a local policy or a policy stored at or by the first CN node; information stored in a database or memory; information received from another CN node in the telecommunication network; information received from the first RAN node, a second RAN node operating according to the second RAT, another RAN node in the telecommunication network, the wireless device or another wireless device; or information received from a network function, NF, or an application function, AF.
19. The method of any preceding embodiment, wherein the method further comprises:
receiving a second message from the first RAN node, wherein the second message indicates that the update of the first security configuration was not performed.
20. The method of any preceding embodiment, wherein the first security configuration comprises an access-stratum, AS, security context.
21. The method of embodiment 20, wherein the AS security context comprises at least one of: an AS security key, an AS security algorithm, an AS uplink count, an AS downlink count, security capabilities, a key chain counter, a user plane, and a security policy.
22. The method of any preceding embodiment, wherein the update to the first security configuration is an AS re-keying.
23. The method of any preceding embodiment, wherein the emergency call is an emergency voice call.
24. The method of any preceding embodiment, wherein the emergency call is a voice call to a designated emergency telephone number.
25. The method of any preceding embodiment, wherein the first RAT is New Radio, NR.
26. The method of any preceding embodiment, wherein the second RAT is Universal Terrestrial Radio Access Network, UTRAN or Evolved UTRAN, E-UTRAN.
27. The method of any preceding embodiment, wherein the wireless device is a user equipment, UE.
28. The method of any preceding embodiment, wherein the first CN node is an Access and Mobility Management Function, AMF.
29. A method performed by a first core network, CN, node in a telecommunication network, wherein the telecommunication network comprises a first radio access network, RAN, node that operates according to a first radio access technology, RAT, wherein an update to a first security configuration between a wireless device and the first RAN node is required; the method comprising:
after receiving a request from the wireless device for an emergency session so that the wireless device can establish an emergency call, initiating the update to the first security configuration; and initiating an Emergency Service Fallback procedure to a second RAT.
30. A computer program product comprising a computer readable medium having computer readable code embodied therein, the computer readable code being configured such that, on execution by a suitable computer or processing unit, the computer or processing unit is caused to perform the method of any of embodiments 1-29.
31. A method performed by a first radio access network, RAN, node that operates according to a first radio access technology, RAT, in a telecommunication network, the method comprising:
after receiving a first message from a core network, CN, node in the telecommunication network, the first message indicating an update to a first security configuration between a wireless device and the first RAN node is required and that an Emergency Service Fallback procedure to a second RAT is to be performed so that the wireless device can establish an emergency call via the second RAT, initiating the Emergency Service Fallback procedure to the second RAT.
32. The method of embodiment 31, wherein the first message comprises an Emergency Fallback Indicator information element, IE, that indicates that an Emergency Service Fallback procedure is required.
33. The method of embodiment 31 or 32, wherein the first message is a context modification message for the wireless device.
34. The method of embodiment 31, 32 or 33, wherein the first message is a user equipment, UE, Context Modification Request message.
35. The method of any of embodiments 31-34, wherein the first message indicates the update to the first security configuration is required using a Security Key information element, IE or a UE Security Capability IE.
36. The method of any of embodiments 31-35, wherein the method further comprises:
ignoring the requirement to update to the first security configuration.
37. The method of any of embodiments 31-36, wherein the first message comprises a Security Key IE or a UE Security Capability IE and a second IE indicating that the value of the Security Key IE or the UE Security Capability IE is to be ignored by the first RAN node.
38. The method of any of embodiments 31-37, wherein the method further comprises, prior to initiating the Emergency Service Fallback procedure:
receiving a request from the wireless device for an emergency session.
39. The method of any of embodiments 31-38, wherein the method further comprises, prior to initiating the Emergency Service Fallback procedure:
determining that an update to the first security configuration is required.
40. The method of any of embodiments 31-39, wherein the method further comprises:
after receiving the first message from the CN node, determining that the Emergency Service Fallback procedure to the second RAT is to be initiated.
41. The method of embodiment 40, wherein the step of determining that the Emergency Service Fallback procedure to the second RAT is to be initiated is performed based on one or more of: information in a local policy or a policy stored at or by the first RAN node; information stored in a database or memory; information received from another RAN node in the telecommunication network; information received from the first CN node, a second RAN node operating according to the second RAT, another RAN node in the telecommunication network, the wireless device or another wireless device; or information received from a network function, NF, or an application function, AF.
42. The method of any of embodiments 31-41, wherein the method further comprises: sending a second message to the first CN node, wherein the second message indicates that the update of the first security configuration was not performed.
43. The method of embodiment 42, wherein the second message is a context modification message for the wireless device.
44. The method of embodiment 42 or 43 wherein the second message is a user equipment, UE, Context Modification Response.
45. The method of any of embodiments 31-44, wherein the first security configuration comprises access-stratum, AS, security context.
46. The method of any of embodiments 31-46, wherein the update to the first security configuration is an AS re-keying.
47. The method of embodiment 45 or 46, wherein the AS security context comprises at least one of: an AS security key, an AS security algorithm, an AS uplink count, an AS downlink count, security capabilities, and a key set identifier.
48. The method of any of embodiments 31-47, wherein the step of initiating the Emergency Service Fallback procedure comprises:
initiating a release procedure with an indication that the wireless device is to redirect to the second RAT.
49. The method of embodiment 48, wherein the release procedure is initiated using a third message that is protected using an access stratum, AS, security context comprised in the first security configuration.
50. The method of any of embodiments 31-47, wherein the step of initiating the Emergency Service Fallback procedure comprises:
initiating handover to the second RAT.
51. The method of embodiment 50, wherein the handover to the second RAT uses an access stratum, AS, context comprised in the first security configuration.
52. The method of any of embodiments 31-51, wherein the first RAT is New Radio, NR.
53. The method of any of embodiments 31-52, wherein the second RAT is Universal Terrestrial Radio Access Network, UTRAN or Evolved UTRAN, E-UTRAN.
54. The method of any of embodiments 31-53, wherein the wireless device is a user equipment, UE.
55. The method of any of embodiments 31-54, wherein the first RAN node is a Next Generation Node B, gNB, or a Next Generation evolved Node B, NG-eNB.
56. A method performed by a first radio access network, RAN, node that operates according to a first radio access technology, RAT, in a telecommunication network; the method comprising:
after receiving a first message from a core network, CN, node in the telecommunication network, the first message indicating an update to a first security configuration between a wireless device and the first RAN node is required and that an Emergency Service Fallback procedure to a second RAT is to be performed so that the wireless device can establish an emergency call via the second RAT, initiating the update to the first security configuration; and
initiating the Emergency Service Fallback procedure to the second RAT.
57. A computer program product comprising a computer readable medium having computer readable code embodied therein, the computer readable code being configured such that, on execution by a suitable computer or processing unit, the computer or processing unit is caused to perform the method of any of embodiments 31-56.
58. A method performed by a wireless device, wherein an update to a first security configuration between the wireless device and a first radio access network, RAN, node that operates according to a first radio access technology, RAT, is required, the method comprising:
sending a request to a first core network, CN, node in a telecommunication network for an emergency session so that the wireless device can establish an emergency call; and
performing an Emergency Service Fallback procedure to a second RAT.
59. The method of embodiment 58, wherein the method further comprises:
ignoring the required update to the first security configuration while performing the Emergency Service Fallback procedure.
60. The method of embodiment 58 or 59, wherein the step of performing the Emergency Service Fallback procedure comprises:
disconnecting from the first RAT and attaching to the second RAT.
61. The method of embodiment 58 or 59, wherein the step of performing the Emergency Service Fallback procedure comprises:
receiving a release message from the first RAN node, the release message indicating that the wireless device is to redirect to the second RAT.
62. A computer program product comprising a computer readable medium having computer readable code embodied therein, the computer readable code being configured such that, on execution by a suitable computer or processing unit, the computer or processing unit is caused to perform the method of any of embodiments 58-61.
63. A wireless device, the wireless device comprising:
The following Change Request document describes some further embodiments of the techniques presented herein.
At least some of the following abbreviations may be used in this disclosure. If there is an inconsistency between abbreviations, preference should be given to how it is used above. If listed multiple times below, the first listing should be preferred over any subsequent listing(s).
| Filing Document | Filing Date | Country | Kind |
|---|---|---|---|
| PCT/SE2020/051242 | 12/18/2020 | WO |
| Number | Date | Country | |
|---|---|---|---|
| 62968364 | Jan 2020 | US |
