SUPPORTING REMOTE UNIT REAUTHENTICATION
    2.
    发明申请

    公开(公告)号:WO2021244758A1

    公开(公告)日:2021-12-09

    申请号:PCT/EP2020/065682

    申请日:2020-06-05

    摘要: Apparatuses, methods, and systems are disclosed for supporting remote unit reauthentication. One apparatus (600) apparatus includes a processor (605) and a transceiver (625) that sends (805) a first authentication message to a network function in a mobile communication network and receives (810) a second authentication message from the network function in response to the first authentication message. Here, the first authentication message contains an indicator that the apparatus supports EAP Reauthentication Protocol and the second authentication message contains a key management domain name indicating a group of network functions that can share reauthentication security context. The processor (605) derives (815) reauthentication security context in response to successful authentication with the mobile communication network and locally stores (820) the received key management domain name and the derived reauthentication security context for subsequent reauthentication with the mobile communication network.

    GATEWAY FUNCTION REAUTHENTICATION
    5.
    发明申请

    公开(公告)号:WO2021223861A1

    公开(公告)日:2021-11-11

    申请号:PCT/EP2020/062505

    申请日:2020-05-06

    摘要: Apparatuses, methods, and systems are disclosed for supporting TNGF reauthentication. One apparatus 700 apparatus includes a processor 705 that establishes 905 connectivity with a first access point in a non-3GPP access network. The processor 705 sends 910 a first EAP message containing a NAI. If the NAI indicates a request to reauthenticate with a gateway function in the non-3GPP access network, then the processor 705 receives 915 a first EAP challenge packet used to authenticate the gateway function. If the NAI indicates a request to initiate a NAS signaling procedure with a mobile communication network, then the processor 705 receives 920 an EAP start packet. Here, the EAP start packet triggers the processor to send a first NAS message to the mobile communication network. The processor 705 completes 925 an EAP session initiated by one of the first EAP challenge packet and the EAP start packet.

    KEY-BASED AUTHENTICATION FOR A MOBILE EDGE COMPUTING NETWORK

    公开(公告)号:WO2022067654A1

    公开(公告)日:2022-04-07

    申请号:PCT/CN2020/119365

    申请日:2020-09-30

    IPC分类号: H04L9/08 H04W12/04 H04W12/041

    摘要: Apparatuses, methods, and systems are disclosed for key-based authentication for a mobile edge computing network. One method (800) includes deriving (805), at a user equipment, a first network key after authentication with a network function of a wireless core network, deriving (810) a second network key based on the first network key, the second network key for a first network function of a mobile edge computing network, sending (815) a registration request message to the first network function of the mobile edge computing network, the registration request message integrity protected with the second network key, receiving (820) a registration response message from the first network function, and, in response to verifying the integrity of the registration response message using the second network key, establishing (825) a secure communication with the first network function of the mobile edge computing network based on the second network key.

    PROVIDING SUBSCRIPTION DATA OF AN EXTERNAL SUBSCRIBER

    公开(公告)号:WO2021233554A1

    公开(公告)日:2021-11-25

    申请号:PCT/EP2020/064328

    申请日:2020-05-22

    IPC分类号: H04W8/20

    摘要: Apparatuses, methods, and systems are disclosed for providing subscription data for an external subscriber. One apparatus (600) includes a processor (605) and a network interface (640) that receives (805) a registration request message from a remote unit and receives (810) a subscription retrieval information. Here, the registration request message contains an external subscriber identifier and the subscription retrieval information is different than the external subscriber identifier of the remote unit. The processor (605) controls the network interface (640) to transmit (815) to a network function in a mobile communication network a first request for subscription data retrieval using the subscription retrieval information and receive (820) a response message from the network function that contains the UE subscription data. Here, the subscription retrieval information indicates that the subscription data is stored in a subscription owner outside the mobile communication network.

    AUTHENTICATION USING A DIGITAL IDENTIFIER FOR UE ACCESS

    公开(公告)号:WO2022096125A1

    公开(公告)日:2022-05-12

    申请号:PCT/EP2020/081366

    申请日:2020-11-06

    IPC分类号: H04W12/72 H04W12/75

    摘要: Apparatuses, methods, and systems are disclosed for Digital Identifier-based authentication for network access. One apparatus (600) includes a network interface (640) that receives (805) a first authentication request message from a network function and receives (810) subscription information from a service provider, the message containing a UE identifier that is based on a Digital Identifier ("DIG-ID"), said DIG-ID comprising a verifiably secure identity, said service provider identified using the DIG-ID. The apparatus (600) includes a processor (605) that stores (815) the subscription information and UE security context in response to successful authentication of the UE using the DIG-ID. Here, the UE security context contains at least one security key derived using the DIG-ID. The network interface (610) transmits (820) the at least one security key to the network function, where the at least one security key is used to protect traffic of the UE.