AMF reallocation handling using UE exceptions to security context rules

    公开(公告)号:US11917412B2

    公开(公告)日:2024-02-27

    申请号:US17619874

    申请日:2020-06-17

    CPC classification number: H04W12/37 H04W12/037 H04W60/00

    Abstract: A UE having a security context with an Initial AMF is able to accept an unprotected AUTHRQ, under certain circumstances, for a limited time. In one embodiment, a UE considers the security context to be temporary, which invokes rules or exceptions different than a permanent security context, such as the acceptance of an unprotected AUTHRQ from a Target AMF. The network may indicate to the UE the temporary status, or the UE may assume it. Alternatively, the UE may enable exceptions to the defined rules associated with the security context. In one embodiment, the UE receives a plurality of partial registration acceptance messages, each indicating a specific task or aspect of the overall registration has been completed. The UE may mark its security context temporary, or enable exceptions to the rules 10 associated with it, until a partial registration acceptance messages indicates AMF re-allocation is complete or is not required. In another embodiment, the UE accepts unprotected authentication messages from the network until the Registration procedure is completed, enabling a Target AMF to successfully send it an unprotected AUTHRQ.

    User plane model for non-3GPP access to fifth generation core network

    公开(公告)号:US11463527B2

    公开(公告)日:2022-10-04

    申请号:US16348554

    申请日:2017-11-09

    Abstract: Systems and methods relating to establishment of a Packet Data Unit, PDU, session over a Non 3GPP Access to a 3GPP network and transmitting IP data and non-IP data are provided. A method of operation of a wireless device is provided and comprises sending to an AMF over an N3IWF a PDU session request to establish a PDU session to transport one of IP data or non-IP data over an established first IPsec, Security Association, SA, establishing an IPSec Child SA, for the PDU session and associating the IPSec Child SA to a PDU session then encapsulating the data using ESP encapsulation or GRE encapsulation associated with the IPSec Child SA and indicating the type of data that is being transmitted (e.g., non-IP data that comprises raw application data). In this manner, an IoT device is able to securely transmit to the 3GPP network IP data/non-IP data/raw application data over an unsecure non 3GPP access network such as Wireless Local Area Network. Methods and apparatus describing the NAS signalling and the PDU session as each using their respective IPSec SA are provided. Similarly, methods and apparatus describing the NAS signalling and the PDU sessions sharing a common IPSec SA are provided. GRE encapsulation of the data within the ESP frame is described for both NAS signalling and PDU session in the case of multiple IPSec/Child SAs or common IPSec SA. Similarly, methods and apparatus are provided for the N3IWF which provides for the UE secure access to the network.

    AMF REALLOCATION HANDLING USING UE EXCEPTIONS TO SECURITY CONTEXT RULES

    公开(公告)号:US20220312217A1

    公开(公告)日:2022-09-29

    申请号:US17619874

    申请日:2020-06-17

    Abstract: A UE having a security context with an Initial AMF is able to accept an unprotected AUTHRQ, under certain circumstances, for a limited time. In one embodiment, a UE considers the security context to be temporary, which invokes rules or exceptions different than a permanent security context, such as the acceptance of an unprotected AUTHRQ from a Target AMF. The network may indicate to the UE the temporary status, or the UE may assume it. Alternatively, the UE may enable exceptions to the defined rules associated with the security context. In one embodiment, the UE receives a plurality of partial registration acceptance messages, each indicating a specific task or aspect of the overall registration has been completed. The UE may mark its security context temporary, or enable exceptions to the rules 10 associated with it, until a partial registration acceptance messages indicates AMF re-allocation is complete or is not required. In another embodiment, the UE accepts unprotected authentication messages from the network until the Registration procedure is completed, enabling a Target AMF to successfully send it an unprotected AUTHRQ.

    PDN and PDU session type mapping and capability discovery

    公开(公告)号:US11432215B2

    公开(公告)日:2022-08-30

    申请号:US16756724

    申请日:2018-10-17

    Abstract: Access and Mobility Management Function, AMF, adapted for taking part in handover from a 5G system, 5GS, to an Evolved Packet System, EPS, an interface being provided between a Mobility Management Entity, MME, of the EPS and the AMF. The AMF being adapted for signalling with a Session Management Function and Packet Data Network, PDN, Gateway-Control plane, SMF and PGW-C, entity, the AMF being adapted for—providing a request (102d, 2-2a) to the SMF and PGW-C entity to provide a Session Management, SM, Context that also includes mapped EPS, Bearer Contexts (102d); —wherein for PDU Sessions with PDU Session type Ethernet or Unstructured, providing (102e1) a capability of a target MME of supporting a Non-IP PDN type to the PGW-C and SMF entity in the request (2-2a) to allow the PGW-C and SMF entity to determine whether or not to include an EPS Bearer context for non-IP PDN type; —transmitting the request (2-2a) to the SMF.

Patent Agency Ranking