HABILITAÇÃO DE AUTENTICAÇÃO PRIMÁRIA ACIONADA POR REDE DOMÉSTICA EM CENÁRIO DE MÚLTIPLOS REGISTROS

Abstract

Systems, methods, and apparatus for wireless communication are described. A wireless communication method includes receiving, by a network node, multiple mobile network registrations. The method further includes determining, by the network node and based on the multiple mobile network registrations, an access and mobility management function (AMF) or a security anchor function (SEAF). The method further includes transmitting, by the network node, an authentication message to the AMF or the SEAF. The described techniques may be adopted by a network device or by a wireless device.

Description

1 / 17 Enabling primary authentication triggered by a home network in a multiple registration scenario. TECHNICAL FIELD

[0001] The present invention relates generally to wireless communications. BACKGROUND

[0002] Mobile telecommunications technologies are moving the world toward an increasingly connected and networked society. Compared to existing wireless networks, next-generation wireless communication systems and techniques will need to support a much wider range of usage characteristics and provide a more complex and sophisticated range of access requirements and flexibilities.

[0003] Long-Term Evolution (LTE) is a standard for wireless communication for mobile devices and data terminals developed by the 3rd Generation Partnership Project (3GPP). LTE Advanced (LTE-A) is a wireless communication standard that enhances the LTE standard. The 5th generation of wireless systems, known as 5G, advances the LTE and LTE-A standards and is committed to meeting higher data rates, a large number of connections, ultra-low latency, high reliability, and other emerging business needs. SUMMARY

[0004] Techniques are described for triggering primary authentication procedures from the Unified Data Management (UDM) node. The UDM node determines which Access and Mobility Management Function (AMF) or Security Anchor Function (SEAF) executes the primary authentication procedures based on the mobile network records that correspond to the AMF / SEAF. Petition 870250083952, dated 09 / 18 / 2025, page 8 / 45 2 / 17 AMF / SEAF then initiates the primary authentication procedures in accordance with the mobility management states of the user equipment (UEs) or authentication policies.

[0005] A first example of a wireless communication method includes receiving, by a network node, multiple mobile network registrations. The method also includes determining, by the network node and based on the multiple mobile network registrations, an Access and Mobility Management (AMF) function or a Security Anchor (SEAF) function. The method also includes transmitting, by the network node, an authentication message to the AMF or the SEAF.

[0006] A second example of a wireless communication method includes receiving an authentication message from an Access and Mobility Management (AMF) function or a Security Anchor (SEAF) function. The method further includes determining, by the AMF or SEAF and in response to the authentication message, a mobility management state of a user device (UE) or a local authentication policy for the AMF or SEAF. The method also includes determining, by the AMF or SEAF and based on the UE's mobility management state or authentication policy, the execution of a primary authentication procedure.

[0007] In another exemplary embodiment, a device configured or operable to execute the methods described above is described. The device may include a processor configured to implement the methods described above.

[0008] In another exemplary embodiment, the methods described above are incorporated in the form of processor-executable code and stored in a non-transient, computer-readable storage medium. The code included in the computer-readable storage medium, when executed by a processor, causes Petition 870250083952, dated 09 / 18 / 2025, page 9 / 45 3 / 17 that the processor implements the methods described in this patent document.

[0009] The above aspects and others and their implementations are described in more detail in the drawings, descriptions and claims. BRIEF DESCRIPTION OF THE DRAWINGS

[0010] Figure 1 illustrates an example authentication procedure.

[0011] Figure 2 illustrates another example authentication procedure.

[0012] Figure 3 illustrates yet another exemplary authentication procedure.

[0013] Figure 4 illustrates an example of a home network-triggered authentication procedure.

[0014] Figure 5 is an example flowchart for transmitting an authentication message.

[0015] Figure 6 is an example flowchart for determining whether to perform a primary authentication procedure.

[0016] Figure 7 illustrates an example block diagram of a hardware platform that may be part of a network device or a communication device.

[0017] Figure 8 illustrates an exemplary wireless communication that includes a Base Station (BS) and a User Equipment (UE) based on some implementations of the technology described. DETAILED DESCRIPTION

[0018] The illustrative headings for the various sections below are used to facilitate understanding of the subject matter described and in no way limit the scope of the subject matter claimed. Consequently Petition 870250083952, dated 09 / 18 / 2025, page 10 / 45 4 / 17 In fact, one or more features from an example section can be combined with one or more features from another example section. Furthermore, the terminology 5G is used for clarity of explanation; however, the techniques described in this document are not limited to 5G technology and can be used in wireless systems that implement other protocols. I. Introduction

[0019] In the fifth-generation (5G) system, the home network's control over the security of the user's equipment (UE) has been strengthened compared to previous generations through several new mechanisms, such as the privacy of the Subscription Permanent Identifier (SUPI), the termination of the authentication procedure on the home network, and provisions for greater control of the home network and linking to subsequent procedures. However, when it comes to triggering authentication, this is still under the control of the server network.

[0020] The home network uses the Authentication Server Function (AUSF) (Kausf) function key or Kausf-derived keys to provide protection for various services, for example, Long Term Evolution (LTE) interoperability for 5G, steering of roaming (SoR) / UE Parameter Update (UPU) and authentication and key management for applications (AKMA) services, and therefore the home network would benefit from having the ability to ensure that a new Kausf is available when triggering authentication, in particular to prevent counterattacks on SoR / UPU or after LTE interoperability when there may not be a Kausf available.

[0021] The text above describes the primary authentication requirement triggered by the home network in 3GPP TR 33.741. Petition 870250083952, dated 09 / 18 / 2025, page 11 / 45 5 / 17

[0022] Figure 1 shows the start of a primary authentication triggered by the UE as described in 3GPP TS 33.501. The start of primary authentication is triggered by the UE and the service network. The UDM in the home network then selects the authentication method from Extensible Authentication Protocol (EAP) and Key Agreement (EAP-AKA) and 5G AKA.

[0023] After the start of the UE-triggered authentication, the UDM initiates the EAP-AKA or 5G AKA authentication procedure according to the result of the authentication method selection.

[0024] Figure 2 and Figure 3 show the EAP-AKA and 5G AKA authentication procedures as described in 3GPP TS 33.501, respectively. The EAP-AKA and 5G AKA authentication procedures enable mutual authentication between the UE and the network and provide cryptographic key material that can be used between the UE and the service network in subsequent security procedures. The cryptographic key material generated by the primary authentication procedure and key agreement results in an anchor key called KSEAF provided by the home network AUSF to the service network SEAF.

[0025] The authentication procedures shown in Figures 1 to 3 are not described in detail in this patent document. However, some basic terms that appear in Figures 1 to 3 are presented below to facilitate understanding of these three authentication procedures. EU: User Equipment AMF: Access and Mobility Management Function SEAF: Security Anchor Function AUSF: Authentication Server Function UDM: Unified Data Management Petition 870250083952, dated 09 / 18 / 2025, page 12 / 45 6 / 17 AKMA: Authentication and Key Management for Applications SoR: Roaming Directions UPU: UE Parameter Update SUPI: Permanent Signature Identifier Kausf: Intermediate Authentication Key KSEAF: Safety Anchor Key KAKMA: AKMA Anchor Key

[0026] In Figures 1 to 3, the triggering of primary authentication is still under the control of the server network. However, if a re-authentication is triggered immediately after the Unified Data Management (UDM) authentication request, ongoing UE services may be interrupted.

[0027] This patent document proposes a mechanism that allows primary authentication triggered by the home network for UEs with different connection management modes in cases of multiple registrations. The proposed procedure is described in Embodiment 1. II. Mode 1: Multiple Record Scenarios

[0028] Figure 4 shows a proposed mechanism to enable primary authentication triggered by the home network for UEs with different connection management modes in cases of multiple registrations. The proposed procedure may include 8 steps.

[0029] 1. The UDM can be pre-configured with an operator policy to determine when to trigger a primary authentication procedure. The pre-configured operator policy can include the following conditions: a. The UDM determines that the previous primary authentication method of the UE is no longer secure; Petition 870250083952, dated 09 / 18 / 2025, page 13 / 45 7 / 17 b. The UDM discovers that a UE that provides AKMA service support does not have an AKMA Indicator; c. The UDM discovers that a UE that supports SoR / UPU services does not have a corresponding Kausf; d. When the UE is migrating from the Evolved Packet System (EPS) to the 5G (5GS) system for the first time, there is no Kausf available maintained in the AUSF and the UDM cannot find the AUSF ID / address; e. A third-party Network Function (NF) or Application Function (AF) sends a re-authentication request to the UDM, such as stating that the AKMA, KAKMA, or KAF services need to be updated.

[0030] 2. Depending on the event received or the local operator's policy, if there is no primary authentication in progress for the UE, the UDM determines whether to trigger primary authentication.

[0031] 3. If the destination EU has multiple records with different For Public Land Mobile Networks (PLMNs), the UDM defines the Access and Mobility Management (AMF) / Security Anchor Function (SEAF) as follows: a. The UDM first selects the AMF / SEAF that corresponds to the 3rd Generation Partnership Project (3GPP) record. If re-authentication fails, as indicated in Step 5, the UDM selects the AMF / SEAF that corresponds to the non-3GPP record; or b. The UDM first selects the AMF / SEAF that corresponds to the most recent record (3GPP / non-3GPP). If re-authentication fails, as indicated in Step 5, the UDM selects the AMF / SEAF that corresponds to the other record (non-3GPP / 3GPP).

[0032] 4. The UDM sends an authentication message to the Petition 870250083952, dated 09 / 18 / 2025, page 14 / 45 8 / 17 AMF / SEAF with the EU SUPI.

[0033] 5. After receiving the authentication message from the UDM, the AMF / SEAF will decide whether to execute the primary authentication procedure based on its own local authentication policy and the EU's Mobility Management (MM) status.

[0034] If the UE cannot be reached and the AMF / SEAF cannot perform primary authentication, the AMF / SEAF will send an authentication response message to the UDM with a result indicating the cause of the failure. The policy in the response message may be a timer after which authentication will be performed. If the UE accesses the network before the timer reaches zero, the AMF / SEAF will stop the timer and trigger primary authentication immediately.

[0035] If the UE is in 5G MM-CONNECTED mode and there are no services running on the UE, steps 6-7 will be skipped and the AMF / SEAF will trigger the authentication procedure as described in Step 8 without sending the authentication response message to the UDM.

[0036] If the UE is in 5G MM-CONNECTED mode and there are services running on the UE, AMF / SEAF will send an authentication response message back to the UDM. The response message includes the UE's mobility management mode and the policy used to trigger authentication. The policy may be a timer after which authentication will be executed or simply indicate that authentication will be triggered after the wait. The result in the message will indicate that primary authentication will be triggered after the completion of ongoing services. Then, steps 6 and 7 will be skipped, and AMF / SEAF will trigger the authentication procedure as described in Step 8 after the wait time. Petition 870250083952, dated 09 / 18 / 2025, page 15 / 45 9 / 17

[0037] If primary authentication is in progress triggered by the UE, the AMF / SEAF sends an authentication response message back to the UDM. The result in the response message indicates that primary authentication is in progress triggered by the UE.

[0038] If the UE is in 5G MM-IDLE mode, the AMF / SEAF will trigger paging / notification and primary authentication as described in Steps 6 to 8, and send an authentication response message back to the UDM. The response message includes the UE's mobility management mode and the policy used to trigger authentication. The policy in the response message may be a timer after which authentication will be executed or simply indicate that authentication will be triggered after the wait. The result in the message will indicate that primary authentication will be triggered after the UE connects.

[0039] 6. If the UE is in 5G MM-IDLE mode, AMF / SEAF will send a paging message in the case of 3GPP registration or a notification message in the case of non-3GPP registration to the UE.

[0040] 7. After receiving the paging or notification message, the UE in 5G MM-IDLE mode sends a service request to the AMF / SEAF to establish a service connection.

[0041] 8. When the UE is in 5G MM-CONNECTED mode, the AMF / SEAF initiates the primary authentication procedure as described in clause 6.1.2 of TS 33.501.

[0042] This patent document proposes a mechanism that allows primary authentication triggered by the home network for UEs of different connection management modes in cases of multiple registrations, specifically: - provides methods for selecting AMF / SEAF in multi-EU registry scenarios; Petition 870250083952, dated 09 / 18 / 2025, page 16 / 45 10 / 17 - the AMF / SEAF indicating the result, UE mobility management modes and policy for the UDM for different UE conditions, avoiding interruption of ongoing services in the UE.

[0043] Figure 5 is an illustrative flowchart for the transmission of an authentication message. Operation 502 includes receiving, by a network node, multiple mobile network records. Operation 504 includes determining, by the network node and based on the multiple mobile network records, an Access and Mobility Management (AMF) function or a Security Anchor (SEAF) function. Operation 506 includes transmitting, by the network node, an authentication message to the AMF or SEAF. In some modes, the method can be implemented according to Mode 1. In some modes, the execution of additional steps of the method may be based on better system performance than a legacy protocol.

[0044] In some embodiments, the network node includes a unified data management (UDM) node, and the multiple mobile network registrations include multiple public terrestrial mobile network (PLMN) registrations associated with a target user equipment (UE). In some embodiments, the determination of the AMF or SEAF includes selecting an AMF or SEAF that has a 3GPP Project 3PPP registration from among the multiple mobile network registrations. In some embodiments, the method also includes receiving an authentication failure message from the network node, where the determination of the AMF or SEAF also includes selecting an AMF or SEAF that corresponds to a non-3GPP registration from among the multiple mobile network registrations.

[0045] In some modalities, the determination of the AMF or the SEAF includes selecting an AMF or a SEAF that corresponds to a more recent record among multiple mobile network records, where Petition 870250083952, dated 09 / 18 / 2025, page 17 / 45 11 / 17 the most recent record is a 3GPP (3G Project Partnership) record or a non-3GPP record. In some embodiments, the method also includes receiving, by the network node, an authentication failure message, where the determination of the AMF or SEAF also includes selecting an AMF or SEAF that corresponds to another record among the multiple mobile network records and where the other record is different from the most recent record.

[0046] Figure 6 is an illustrative flowchart for determining whether a primary authentication procedure should be executed. Operation 602 involves receiving an authentication message from an Access and Mobility Management (AMF) function or a Security Anchor (SEAF) function. Operation 604 involves determining, by the AMF or SEAF and in response to the authentication message, a mobility management state of a user device (UE) or a local authentication policy for the AMF or SEAF. Operation 606 involves determining, by the AMF or SEAF and based on the UE's mobility management state or authentication policy, whether a primary authentication procedure should be executed. In some embodiments, the method may be implemented according to Embodiment 1. In some embodiments, the execution of additional steps of the method may be based on better system performance than a legacy protocol.

[0047] In some embodiments, if the UE cannot be reached and the AMF or SEAF cannot execute the primary authentication procedure, the method also includes sending, by the AMF or SEAF, an authentication response message, in which the authentication response message includes the inability to reach the UE as the cause of the failure to execute the primary authentication procedure. In some embodiments, the authentication response message also includes a timer, in which the AMF or SEAF initiates the Petition 870250083952, dated 09 / 18 / 2025, p. 18 / 45 12 / 17 primary authentication procedure after the timer expires or immediately if the UE is reached before the timer expires.

[0048] In some modes, the AMF or SEAF performs the primary authentication procedure if the UE is in a connected mode and there are no services running on the UE.

[0049] In some embodiments, if the UE is in a connected mode and there is a service running on the UE, the method also includes sending, by the AMF or SEAF, an authentication response message, wherein the authentication response message includes the UE's mobility management status. In some embodiments, the authentication response message also includes a timer, whereby the AMF or SEAF initiates the primary authentication procedure after the timer expires. In some embodiments, the authentication response message also includes an indication that the AMF or SEAF initiates the primary authentication procedure after the ongoing service terminates.

[0050] In some modes, if there is a primary authentication procedure in progress triggered by the EU, the method also includes sending, by the AMF or SEAF, an authentication reply message, where the authentication reply message includes an indication of the primary authentication procedure in progress triggered by the EU.

[0051] In some modes, if the UE is in an inactive mode, the method also includes initiating a paging or notification procedure by the AMF or SEAF and sending an authentication response message by the AMF or SEAF, where the authentication response message includes the UE's mobility management status. In some modes, the authentication response message also includes a timer, at which point the AMF or SEAF initiates the procedure. Petition 870250083952, dated 09 / 18 / 2025, p. 19 / 45 13 / 17 primary authentication after the timer expires. In some modes, the authentication response message also includes an indication that the AMF or SEAF initiates the primary authentication procedure after the UE connection.

[0052] Figure 7 shows an illustrative block diagram of a hardware platform 700 that may be part of a network device (e.g., base station, UDM, AMF, or SEAF) or a communication device (e.g., a user device (UE)). The hardware platform 700 includes at least one processor 710 and a memory 705 with stored instructions. The instructions, when executed by the processor 710, configure the hardware platform 700 to perform the operations described in Figures 1 to 6 and in the various embodiments described in this patent document. The transmitter 715 transmits or sends information or data to another device. For example, a transmitter in the network device may send a message to a user device. The receiver 720 receives information or data transmitted or sent by another device. For example, a user device may receive a message from a network device.For example, a UE or a network device, as described in this document, can be implemented using the 700 hardware platform.

[0053] The implementations as discussed above apply to wireless communication. Figure 8 shows an example of a wireless communication system (e.g., a 5G or NR cellular network) that includes a base station 820 and one or more user equipment (UE) 811, 812, and 813. In some embodiments, the UEs access the BS (e.g., the network) using a communication link with the network (sometimes referred to as the uplink direction, as represented by the dashed arrows 831, 832, 833) which then enables subsequent communication (e.g., shown in the network direction to Petition 870250083952, dated 09 / 18 / 2025, page 20 / 45 14 / 17 the UEs, sometimes referred to as the downlink direction, shown by arrows 841, 842, 843) from the BS to the UEs. In some embodiments, the BS sends information to the UEs (sometimes referred to as the downlink direction, as represented by arrows 841, 842, 843), which allows subsequent communication (e.g., shown in the direction from the UEs to the BS, sometimes referred to as the uplink direction, shown by dashed arrows 831, 832, 833) from the UEs to the BS. The UE can be, for example, a smartphone, a tablet, a mobile computer, a machine-to-machine (M2M) device, an Internet of Things (IoT) device, and so on. The UEs described in this document can be communicatively coupled to the base station 820 represented in Figure 8. The UEs can also communicate with the BS for CSI communications.

[0054] In some modes, the authentication message can be transmitted from the UDM to the AMF / SEAF. In some modes, the authentication message can be transmitted from the UDM to the AUSF. In some modes, the authentication message can be transmitted from the UDM to the UE. In some modes, the authentication message can be transmitted from the AUSF to the AMF / SEAF. In some modes, the authentication message can be transmitted from the AUSF to the UE. In some modes, the authentication message can be transmitted from the AMF / SEAF to the UE.

[0055] In some modes, the authentication response message can be transmitted from the AMF / SEAF to the UDM. In some modes, the authentication response message can be transmitted from the AMF / SEAF to the AUSF. In some modes, the authentication response message can be transmitted from the AUSF to the UDM. In some modes, the response message of Petition 870250083952, dated 09 / 18 / 2025, p. 21 / 45 15 / 17 Authentication can be transmitted from the UE to the UDM. In some embodiments, the authentication response message can be transmitted from the UE to the AMF / SEAF. In some embodiments, the authentication response message can be transmitted from the UE to the AUSF.

[0056] Those skilled in the art will understand that this document describes methods for initiating primary authentication procedures from home network nodes, such as the Unified Data Management (UDM) node. The UDM node determines which Access and Mobility Management (AMF) function or Security Anchor (SEAF) function executes the primary authentication procedures based on the mobile network records that correspond to the AMF / SEAF. The AMF / SEAF then initiates the primary authentication procedures according to the mobility management states of the user equipment (UEs) or authentication policies.

[0057] Some of the embodiments described in this document are described in the general context of methods or processes that can be implemented, in one embodiment, by a computer program product, embedded in a computer-readable medium that includes computer-executable instructions, such as program code, executed by computers in network environments. A computer-readable medium may include removable and non-removable storage devices including, but not limited to, Read Only Memory (ROM), Random Access Memory (RAM), compact discs (CDs), digital versatile discs (DVDs), etc. Therefore, the computer-readable medium may include a non-transient storage medium. In general, program modules may include routines, programs, objects, components, data structures, etc., that perform specific tasks or implement Petition 870250083952, dated 09 / 18 / 2025, page 22 / 45 16 / 17 Specific abstract data types. Computer or processor executable instructions, associated data structures, and program modules represent examples of program code for executing steps of the methods described in this document. The specific sequence of such executable instructions or associated data structures represents examples of corresponding acts for implementing the functions described in such steps or processes.

[0058] Some of the embodiments described may be implemented as devices or modules using hardware circuits, software, or combinations thereof. For example, a hardware circuit implementation may include distinct analog and / or digital components that are, for example, integrated as part of a printed circuit board. Alternatively, or in addition, the described components or modules may be implemented as an Application Specific Integrated Circuit (ASIC) and / or as a Field Programmable Gate Array (FPGA) device. Some implementations may, alternatively, or in addition, include a Digital Signal Processor (DSP), which is a specialized microprocessor that has an architecture optimized for the operational needs of digital signal processing associated with the functionalities described in this application.Similarly, the various components or subcomponents within each module can be implemented in software, hardware, or firmware. Connectivity between modules and / or components within modules can be provided using any of the connectivity methods and means known in the art, including, but not limited to, internet communications, wired or wireless networks using appropriate protocols.

[0059] Although this document contains many specifications, these should not be interpreted as limitations to the scope of Petition 870250083952, dated 09 / 18 / 2025, page 23 / 45 17 / 17 not a claimed invention or one that may be claimed, but rather as descriptions of specific features of particular embodiments. Certain features described herein in the context of separate embodiments may also be implemented in combination in a single embodiment. Conversely, several features described in the context of a single embodiment may also be implemented in multiple embodiments separately or in any suitable subcombination. Furthermore, although features may be described above as acting in certain combinations and even initially claimed as such, one or more features of a claimed combination may, in some cases, be excluded from the combination, and the claimed combination may be directed to a subcombination or a variation of a subcombination.Similarly, although the operations are represented in the drawings in a specific order, this should not be understood as a requirement that such operations be performed in the specific order shown or in a sequential order, or that all illustrated operations be performed to achieve the desired results.

[0060] Only a few implementations and examples are described, and other implementations, improvements, and variations may be made based on what is described and illustrated in this description. Petition 870250083952, dated 09 / 18 / 2025, page 24 / 45

Claims

1 / 3 CLAIMS 1. Wireless communication method, characterized in that it comprises: sending, to a first network node via a second network node, an authentication message, wherein a mobility management state of a user equipment (UE) is determined in response to the authentication message, wherein a primary authentication procedure is performed based on the mobility management state of the UE and a local authentication policy for the first network node, wherein, when the UE is in a connected mode and there is a service running on the UE, the method further comprises: receiving, from the first network node via the second network node, an authentication response message, wherein the authentication response message comprises the mobility management state of the UE.

2. Wireless communication method, characterized in that it comprises: receiving, by a first network node, an authentication message; determining, by the first network node and in response to the authentication message, a mobility management state of a user equipment (UE); and determining, by the first network node and based on the mobility management state of the UE and a local authentication policy for the first network node, whether a primary authentication procedure is performed, Petition 870250083952, dated 18 / 09 / 2025, page 31 / 45 2 / 3 wherein, when the UE is in a connected mode and there is a service running on the UE, the method further comprises: sending, by the first network node, an authentication response message, wherein the authentication response message comprises the mobility management state of the UE.

3. A method according to claim 1 or 2, characterized in that the UE cannot be reached and the first network node cannot execute the primary authentication procedure, further comprising sending, by the first network node, an authentication response message, wherein the authentication response message understands the inability to reach the UE as a cause of failure in the execution of the primary authentication procedure.

4. Method, according to claim 1 or 2, characterized in that, when the UE is in a connected mode and there is no service running on the UE, the first network node performs the primary authentication procedure.

5. A method according to claim 1 or 2, characterized in that the authentication response message further includes an indication that the first network node initiates the primary authentication procedure after the completion of the ongoing service.

6. A method according to claim 1 or 2, characterized in that there is an ongoing primary authentication procedure triggered by the UE, further comprising sending, through the first network node, an authentication response message, wherein the authentication response message comprises an indication of the ongoing primary authentication procedure triggered by the UE.

7. Method, according to claim 1 or 2, characterized in that the UE is in an idle mode, further comprising Petition 870250083952, dated 09 / 18 / 2025, page 32 / 45 3 / 3: initiating, by the first network node, a paging or notification procedure; and sending, by the first network node, an authentication response message, wherein the authentication response message comprises the mobility management state of the UE.

8. Method according to claim 7, characterized in that the authentication response message further includes an indication that the first network node initiates the primary authentication procedure after the UE is connected.

9. A method according to claim 1 or 2, characterized in that the first network node comprises an access and mobility management (AMF) function or a security anchor function (SEAF).

10. Method according to claim 1, characterized in that the second network node comprises a unified data management (UDM) node.

11. Wireless communication device, characterized in that it comprises at least one processor, wherein the at least one processor is configured to implement a method as defined in any one of claims 1 to 10.

12. A computer-readable program storage medium characterized in that it has code stored therein, the code, when executed by at least one processor, causing that at least one processor to implement a method as defined in any one of claims 1 to 10. Petition 870250083952, dated 09 / 18 / 2025, pp. 33 / 45

Images