Access control method performed by a user device, user device, method performed by a network node, and network node.

Abstract

A method of access control performed by a user device (UD) is described. The method comprises being triggered to perform an access request and evaluating whether one or more access category rules are satisfied by the trigger. The method further comprises determining, based on the evaluation, the access category to apply. The method further comprises performing a barrier check, applying the access category determined based on the evaluation.

Description

/ 37 Access control method performed by a user device, user device, method performed by a network node, and network node. Technical Field

[001] The present description refers, in general, to wireless communication systems and, more particularly, to methods and devices for managing messages related to access control mechanisms. Fundamentals of the Invention

[002] During the process of accessing a wireless communication system, a user device (UE) must signal to the network that it wishes to acquire communication opportunities. There are many schemes for how this can be done. For example, a UE can utilize specific air interface resources (e.g., timings, frequencies, etc.) to send a short message that will indicate to the network that a UE wishes to communicate. Additional details regarding a certain communication need can then occur in subsequent communication(s).

[003] For wireless communication systems according to the 3GPP EUTRAN / LTE standard specifications, an example of this process can be seen in the flowchart in Figure 1, which shows the establishment of the random access connection and Radio Resource Control (RRC). A communication request can begin with the transmission of a random access preamble (401) on specifically allocated channels or resources. This random access preamble is, when received by a base station or an eNB, followed by a random access reply (402) that includes an allocation of resources for continued signaling (403-405). For the sake of brevity, these signals are not explained in detail here.

[004] As can be recognized, an access attempt will consume the air interface resources for subsequent required signaling, for example, to configure and set up communication resources for the Petition 870230040132, dated 12 / 05 / 2023, page 8 / 122 / 37 user data transfer. It should be noted that further communication with network entities is still required before any communication can occur. For the sake of brevity, these additional details are omitted from Figure 1.

[005] Under certain circumstances, it is desirable to prevent UEs from making these access attempts. For example, in the case of an overload situation, such as radio resource congestion or a shortage of processing capabilities, a network may wish to reduce the overload by denying access to a cell or part of it. The network may also need to prioritize between specific users and / or services during overload situations. For example, the network may prioritize emergency calls compared to ordinary calls.

[006] To this end, the network can employ what is referred to in 3GPP as access control. The Access Class Barrier (ACB) is an example of such control. In short, the access barrier is about preventing or making it less likely that an UE will attempt access, and in this way, reducing the overall load caused by access requests from UEs. For example, a given UE may belong to a certain access class, and the network may communicate, through broadcast system information, that certain classes in certain instances are blocked (i.e., not allowed to access) or are allowed to access with a lower probability than not blocked overall. When an UE receives this broadcast system information, if it belongs to a blocked access class, this may result in the UE not sending an access request.There are multiple variants of access barrier mechanisms specified for LTE, some of which are listed and described in great detail below.

[007] 1. Access Class Barrier according to 3GPP Rel-8: In this mechanism, it is possible to block all access requests. Petition 870230040132, dated 12 / 05 / 2023, page 9 / 122 / 37 originating from an UE. Normal UEs in Access Class (AC) 0-9 ranges are barred with a probability factor, also referred to as a barrier factor, and a timer, also referred to as a barrier duration, while specific classes can be controlled separately. In addition to the normal classes 0-9, additional classes have been specified to control access for other types of users, for example, emergency services, public utilities, security services, etc.

[008] 2. Service-Specific Access Control (SSAC): The SSAC mechanism allows a network to prohibit Multimedia Telephony (MMTel) voice and MMTel video access from a UE. The network broadcasts barrier parameters (similar to ACB parameters) and a barrier algorithm that is similar to ACB (barrier factor and random timer). The actual decision on whether access is allowed is made at the IP Multimedia Subsystem (IMS) layer of a UE.

[009] 3. Circuit-Switched Backoff Access Control (CSFB): The CSFB mechanism allows a network to prohibit CSFB users. A barrier algorithm used in this case is similar to ACB.

[0010] 4. Extended Access Barrier (EAB): The EAB mechanism allows a network to block low-priority UEs. The barrier is based on a bitmap in which each access class (AC 0-9) can be either blocked or allowed.

[0011] 5. Bypassing the Access Class Barrier: This mechanism ACB allows bypassing the Access Class Barrier for IMS voice and video users.

[0012] 6. Application-Specific Congestion Control for Data Communication Barrier (ACDC): ACDC enables traffic barrier to / from certain application(s). In this solution, applications are categorized based on a global application ID (on Android or iOS). The network broadcasts the barrier parameters (factor of Petition 870230040132, dated 12 / 05 / 2023, page 10 / 122 / 37 barrier and timer) for each category.

[0013] Thus, different LTE UEs of different editions, and depending on their capabilities, support or do not support one or more of the defined barrier schemes. Most barrier schemes introduced after Rel-8 targeted very specific use cases and made certain considerations about why the barrier was necessary. For example, SSAC was introduced to protect operators on an IMS network from too many IMS requests. On the other hand, the “Bypass Access Barrier” feature should allow IMS traffic (such as voice) but block other services under the consideration that the bottleneck is in the RAN.

[0014] For LTE, some access barrier features were introduced because a problem in the field had already been observed, while others were proposed because specific problems were expected to occur.

[0015] Some of the problems disappeared over time and others hardly occurred. The introduction of each of these access barrier variants required substantial efforts both to standardize and design the products, as well as to maintain them.

[0016] For LTE, the use of multiple access barrier mechanisms results in the system information broadcast to control the access barrier becoming very large. This consumes radio resources, but also prolongs the time a given UE needs to spend reading this system information before it can access the system. Summary of the Invention

[0017] To address these issues and avoid future problems with potentially even greater additions to the currently specified access barrier mechanisms, there is now a desire in the industry to replace the solutions with a more generic and unified solution that can both Petition 870230040132, dated 12 / 05 / 2023, page 11 / 122 / 37, consider both old requirements and being better prepared for new demands. Thus, it is an objective of this description to address the shortcomings of old access barrier solutions.

[0018] According to certain embodiments, a method of access control performed by a user device (UD) is described. The method comprises the UD being triggered to perform an access request and evaluating whether one or more access category rules are satisfied by the trigger. The method further comprises determining, based on the evaluation, an access category to apply. The method further comprises performing a barrier check, applying the access category determined based on the evaluation.

[0019] In certain modes, when no access category rule is satisfied by the drive, a default access category rule is selected. In certain modes, when a plurality of access category rules is satisfied by the drive, one of the plurality of access category rules is selected based on a priority scheme. In certain modes, the determined access category is determined based on the selected access category rule.

[0020] Also described is a user equipment (UE) configured to perform access control. The UE comprises a wireless interface and a processing circuit system coupled to the wireless interface. The processing circuit system is configured to be triggered to perform an access request and evaluate whether one or more access category rules are satisfied by the trigger. The processing circuit system is further configured to determine, based on the evaluation, an access category to apply. The processing circuit system is further configured to perform a barrier check, applying the determined access category based on Petition 870230040132, dated 12 / 05 / 2023, page 12 / 122 / 37 in the evaluation.

[0021] In certain modes, when no access category rule is satisfied by the drive, a default access category rule is selected. In certain modes, when a plurality of access category rules is satisfied by the drive, one of the plurality of access category rules is selected based on a priority scheme. In certain modes, the determined access category is determined based on the selected access category rule.

[0022] A method implemented by a network node is also described. The method comprises providing a UE with barrier information regarding one or more access categories, wherein one of the one or more access categories is used by the UE to perform a barrier check. The method further comprises receiving an access request from the UE when the barrier check passes.

[0023] In certain modes, barrier information comprises barrier factors and barrier time. In certain modes, the access category used by the EU to perform a barrier check is selected based on a standard access category rule. In certain modes, the access category used by the EU to perform a barrier check is selected based on a priority scheme. In certain modes, the access category used by the EU to perform a barrier check is a predetermined access category.

[0024] A network node is also described. The network node comprises the processing circuit system and a wireless interface coupled to the processing circuit system. The wireless interface is configured to provide, to an UE, barrier information regarding one or more access categories, wherein one or more access categories is used by the UE to perform a barrier check. The wireless interface is Petition 870230040132, dated 12 / 05 / 2023, page 13 / 122 / 37 additionally configured to receive an access request from the EU when the barrier verification passes.

[0025] In certain modes, barrier information comprises barrier factors and barrier time. In certain modes, the access category used by the EU to perform a barrier check is selected based on a standard access category rule. In certain modes, the access category used by the EU to perform a barrier check is selected based on a priority scheme. In certain modes, the access category used by the EU to perform a barrier check is a predetermined access category.

[0026] Certain embodiments of this description may provide one or more technical advantages. For example, certain embodiments allow both the upper layers and the radio layers to control the access categories used by an UE. Furthermore, the description also addresses special cases where, for example, the rules provided from the upper layers are inconsistent in themselves or inconsistent with the rules received from the lower layers (e.g., radio). In situations where the UE has not received the rules, it will somehow be able to select an access category to access the network. Certain embodiments also limit the amount of information that must be broadcast over the RAN. According to certain embodiments, a single set of access categories may be broadcast instead of several.All aspects, present and future, are instead included in the rules for determining an access category, rather than generating additional access categories to which information is disseminated. Other advantages may readily become apparent to those skilled in the art. Certain modalities may have none, some, or all of the advantages cited. Brief Description of the Drawings

[0027] For a more complete understanding of the modalities Petition 870230040132, dated 12 / 05 / 2023, p. 14 / 122 / 37 described and its features and advantages, reference is now made to the following description, taken together with the attached drawings, in which: Figure 1 illustrates a signaling diagram related to an RRC connection; Figure 2 illustrates a wireless communications network according to the embodiments of the present description; Figure 3 illustrates a user device (UE) according to the embodiments of this description; Figure 4 illustrates a network node according to the modalities of the present description; Figure 5 illustrates a signaling diagram according to the modalities of the present description; Figure 6 illustrates a table with access categories mapped to a set of rules according to the modalities of this description; Figure 7 illustrates a flowchart according to the modalities of the present description; Figure 8 illustrates a flowchart according to the modalities of the present description; and Figure 9 illustrates a flowchart according to the modalities of the present description. Detailed Description

[0028] The technology described here can be used in various wireless systems and is not restricted to EUTRA / LTE 3GPP systems and Next Generation 3GPP systems (also known as the 5G - 5GS system), which implement New Radio (NR), even though such systems serve as examples. Access control is a mechanism that can be applied to any system where user, service, and / or other access differentiation and load management are required. Other examples may be Petition 870230040132, dated 12 / 05 / 2023, page 15 / 122 / 37 wireless access in accordance with IEEE 802 standards, such as the IEEE 802.11 WLAN standard or the IEEE 802.16 standard, but also the GSM 3GPP evolutions.

[0029] Now, with regard to Figure 2, a wireless access network is illustrated, for example, according to the LTE / EUTRA 3GPP specifications. The figure is greatly simplified to focus on the important entities for explaining the described modalities. In the wireless access network, 100, a UE (102) is illustrated. The UE (102) can request access and communicate with an access node (104). The access node (104) is, in turn, connected to a node (106) which, for example, can provide internet access. In LTE, the access node is commonly referred to as eNB, while in other standards, it may be referred to as Node B, Base Station, or simply Access Point. In the evolution of the next generation of radio, in 3GPP, the access node is sometimes referred to as “gNB”.It should be noted that the illustration in Figure 2 is traditional in that it provides a view of “physical entities,” but those skilled in the art will understand that, for example, an access node (104) or a node (106) can be implemented using distributed or cloud-based processing capabilities. Similarly, they can also be implemented in the same physical entity. For the purposes of this example, the description will associate the nodes with certain functionality, rather than restricting them to certain implementations.

[0030] The access node (104) communicates user information and signaling to and from the network node to the UE. Wireless access network 100 is illustrated as a circle and contains, in this figure, only one “cell” area and one access node (104). It is understood that any access network usually contains several access nodes and thus several areas and / or cells are served.

[0031] Node (106) can be one of many nodes. For example, it can be a control node (e.g., an MME, Management Entity). Petition 870230040132, dated 12 / 05 / 2023, page 16 / 122 / 37 of Mobility, or an AMF, Access and Mobility Management Function), to communicate control information with the UE, or it may be a node in the user plane (SGW, Service Communication Port, or a UPF, User Plane Function), to communicate user data information to the UE. Additionally, the node may be connected to other nodes and work as a relay for information from these nodes to the UE. Such other nodes may be, for example, a Packet Communication Port (PGW), a Data Network (DN) or similar. The node (106) and other similar nodes will be referred to as belonging to the upper layers in this description.

[0032] Figure 3 is a schematic diagram of a user equipment 300 as an example of a wireless device, according to certain embodiments. The UE 300 includes an antenna 305, a radio initial interface circuit system 310, a processing circuit system 315, and a computer-readable storage medium 330. The antenna 305 may include one or more antennas or antenna arrays, and is configured to send and / or receive wireless signals, and is connected to the radio initial interface circuit system 310. In certain alternative embodiments, the wireless device 300 may not include the antenna 305, and the antenna 305 may instead be separate from the wireless device 300 and be connectable to the wireless device 300 via an interface or port.

[0033] The initial radio interface circuit system 310 may comprise several filters and amplifiers, is connected to antenna 305 and processing circuit system 315, and is configured to condition the signals communicated between antenna 305 and processing circuit system 315. In certain alternative embodiments, the wireless device 300 may not include the initial radio interface circuit system 310, and processing circuit system 315 may instead be connected to antenna 305 without the initial radio interface circuit system. Petition 870230040132, dated 12 / 05 / 2023, page 17 / 122 / 37 radio 310.

[0034] The processing circuit system 315 may include one or more of the radio frequency (RF) transceiver circuit system, the baseband processing circuit system, and the application processing circuit system. In some embodiments, the RF transceiver circuit system, the baseband processing circuit system, and the application processing circuit system may be on separate chip sets. In alternative embodiments, parts of, or all of, the baseband processing circuit system and the application processing circuit system may be combined on a chip set, and the RF transceiver circuit system may be on a separate chip set.In further alternative embodiments, parts of, or all of, the RF transceiver circuit system and the baseband processing circuit system may be on the same chip set, and the application processing circuit system may be on a separate chip set. In still other alternative embodiments, parts of, or all of, the RF transceiver circuit system, the baseband processing circuit system, and the application processing circuit system may be combined on the same chip set. The processing circuit system 315 may include, for example, one or more central processing units (CPUs), one or more microprocessors, one or more application-specific integrated circuits (ASICs), and / or one or more field-programmable gate arrays (FPGAs).

[0035] In particular embodiments, parts of, or all of, the functionality described herein as being provided by a wireless device may be provided by the processing circuit system 315 that executes instructions stored on a computer-readable storage medium 330. In alternative embodiments, parts of, or all of, the functionality may be provided by the circuit system of Petition 870230040132, dated 12 / 05 / 2023, page 18 / 122 / 37 processing 315 without executing instructions stored on a computer-readable medium, such as in a wired manner. In either of these particular modes, whether executing instructions stored on a computer-readable storage medium or not, the processing circuit system can be said to be configured to perform the described functionality. The benefits provided by such functionality are not limited to the processing circuit system 315 alone or to other components of the UE 300, but are enjoyed by the wireless device as a whole and / or by end users and the wireless network in general.

[0036] Antenna 305, initial radio interface circuit system 310 and / or processing circuit system 315 can be configured to perform all reception operations described herein as being performed by a wireless device. Any information, data and / or signals can be received from a network node and / or another wireless device.

[0037] The processing circuit system 315 can be configured to perform all the determination operations described herein as being performed by a wireless device. The determination performed by the processing circuit system 315 may include processing the information obtained by the processing circuit system 315, for example, by converting the obtained information into other information, comparing the obtained information or the converted information with the information stored in the wireless device and / or performing one or more operations based on the obtained information or the converted information and, as a result of said processing, performing a determination.

[0038] Antenna 305, initial radio interface circuit system 310 and / or processing circuit system 315 can be configured to perform all transmission operations described herein. Petition 870230040132, dated 12 / 05 / 2023, page 19 / 122 / 37 as being carried out by a wireless device. All information, data and / or signals can be transmitted to a network node and / or another wireless device.

[0039] Computer-readable storage media 330 is generally operable for storing instructions, such as a computer program, software, an application that includes one or more logic, rules, code, tables, etc., and / or other instructions capable of being executed by a processor. Examples of computer-readable storage media 330 include computer memory (e.g., random access memory (RAM) or read-only memory (ROM)), mass storage media (e.g., a hard disk), removable storage media, and / or any other computer-readable and / or computer-executable memory devices, volatile or non-volatile and non-transient, that store information, data, and / or instructions that can be used by the processing circuit system 315.In some embodiments, the processing circuit system 315 and the computer-readable storage media 330 may be considered integrated.

[0040] Alternative embodiments of the UE 300 may include additional components, beyond those shown in Figure 3, which may be responsible for providing certain aspects of the UE's functionality, including any of the functionalities described herein and / or any functionality necessary to support the solution described above. By way of example only, the UE 300 may include input interfaces, devices, and circuits, and output interfaces, devices, and circuits. The input interfaces, devices, and circuits are configured to allow information to be entered into the UE 300, and are connected to the processing circuit system 315 to allow the processing circuit system 315 to process the entered information. For example, the Petition 870230040132, dated 12 / 05 / 2023, page 20 / 122 / 37. Input interfaces, devices, and circuits may include a microphone, a proximity sensor or other sensor, keys / buttons, a touch-sensitive display, one or more cameras, a USB port, or other input elements. Output interfaces, devices, and circuits are configured to allow information to be output from the UE 300 and are connected to the processing circuit system 315 to allow the processing circuit system 315 to transmit information from the UE 300. For example, output interfaces, devices, or circuits may include a speaker, a display, a vibration circuit system, a USB port, a headphone interface, or other output elements.Using one or more of the interfaces, devices, and input / output circuits, the UE 300 can communicate with end users and / or the wireless network, allowing them to benefit from the functionality described herein.

[0041] As another example, the UE 300 may include the power source 335. The power source 335 may comprise the power management circuit system. The power source 335 may receive power from a power supply, which may be either contained within, or external to, the power source 335. For example, the UE 300 may comprise a power supply in the form of a battery or battery pack that is connected to, or integrated into, the power source 335. Other types of power sources, such as photovoltaic devices, may also be used. As a further example, the UE 300 may be connectable to an external power supply (such as an electrical outlet) via a circuit system or input interface, such as an electrical cable, whereby the external power supply provides power to the power source 335.The power source 335 can be connected to the initial radio interface circuit system 310, the processing circuit system 315, and / or the readable storage media. Petition 870230040132, dated 12 / 05 / 2023, page 21 / 122 / 37 by computer 330 and be configured to supply power to UE 300, including the processing circuit system 315, to perform the functionality described herein.

[0042] The UE 300 may also include multiple sets of processing circuit systems 315, computer-readable storage media 330, radio circuit systems 310 and / or antenna 305 for different wireless technologies integrated into the wireless device 300, such as, for example, GSM, WCDMA, LTE, NR, WiFi or Bluetooth wireless technologies. These wireless technologies may be integrated into the same or different sets of chips and other components in the wireless device 300.

[0043] Figure 4 is a schematic diagram of a network node 400. In certain embodiments, network node 400 may correspond to access node 104 and / or node 106 of Figure 1, or any other suitable node operating in a wireless communications network. Network node 400 comprises interface 401, processor 402, storage 403, and antenna 404. These components may work together to provide the functionality of the network node, such as providing wireless connections in a wireless network. In different embodiments, the wireless network may comprise any number of wired or wireless networks, network nodes, base stations, controllers, wireless devices, relay stations, and / or any other components that may facilitate or participate in the communication of data and / or signals, whether by means of wired or wireless connections.

[0044] As used herein, a “network node” refers to equipment capable, configured, arranged, and / or operable to communicate directly or indirectly with a wireless device and / or with other equipment or nodes in the wireless communication network that enable and / or provide wireless access to the wireless device. Examples of network nodes include, but are not limited to, access points (APs), in particular, points Petition 870230040132, dated 12 / 05 / 2023, p. 22 / 122 / 37 of radio access. A network node can represent base stations (BSs), such as radio base stations. Examples of radio base stations include B-Nodes and evolved B-Nodes (eNBs). Base stations can be categorized based on the amount of coverage they provide (or, stated differently, their transmission power level) and can therefore also be referred to as femto base stations, pico base stations, micro base stations, or macro base stations. The “network node” also includes one or more (or all) parts of a distributed radio base station, such as centralized digital units and / or remote radio units (RRUs), sometimes referred to as Remote Radio Heads (RRHs). Such remote radio units may or may not be integrated with an antenna as an antenna-integrated radio.The components of distributed radio base stations can also be referred to as the nodes in a distributed antenna system (DAS).

[0045] As a particular non-limiting example, a base station can be a relay node or a relay donor node that controls a relay.

[0046] Further examples of network nodes include multi-standard radio equipment (MSR), such as MSR BSs, network controllers, such as radio network controllers (RNCs) or base station controllers (BSCs), base transceiver stations (BTSs), transmission points, transmission nodes, Multicell Coordination / Selective Broadcast Entities (MCEs), core network nodes (e.g., MSCs, MMEs, AMFs), O&M nodes, OSS nodes, SON nodes, positioning nodes (e.g., E-SMLCs) and / or MDTs. More generally, however, network nodes can represent any suitable device (or group of devices) capable, configured, arranged and / or operable to enable and / or provide access from a wireless device to the wireless communication network or to provide some service to a wireless device. Petition 870230040132, dated 12 / 05 / 2023, p. 23 / 122 / 37, which accessed the wireless communication network.

[0047] As used here, the term “radio node” is used generically to refer to both wireless devices and network nodes, as each is respectively described above.

[0048] In Figure 4, network node 400 comprises processor 402, storage 403, interface 401, and antenna 404. These components are represented as individual boxes located within a single larger box. In practice, however, a network node may comprise multiple different physical components that constitute a single illustrated component (for example, interface 401 may comprise terminals for cable coupling for a wired connection and a radio transceiver for a wireless connection). As another example, network node 400 may be a virtual network node in which multiple different physically separate components interact to provide the functionality of network node 400 (for example, processor 402 may comprise three separate processors located in three separate enclosures, where each processor is responsible for a different function for a particular instance of network node 400).Similarly, the 400 network node can be composed of multiple physically separate components (e.g., a NodeB component and an RNC component, a BTS component and a BSC component, etc.), each of which may have its own respective processor, storage, and interface components. In certain scenarios where the 400 network node comprises multiple separate components (e.g., the BTS and BSC components), one or more of the separate components may be shared among several network nodes. For example, a single RNC may control multiple NodeBs. In such a scenario, each unique NodeB and BSC pair may be a separate network node. In some embodiments, the 200 network node can be configured to support multiple radio access technologies (RATs). Petition 870230040132, dated 12 / 05 / 2023, page 24 / 122 / 37 In such configurations, some components can be duplicated (for example, separate storage 403 for different RATs) and some components can be reused (for example, the same antenna 4004 can be shared by the RATs).

[0049] Processor 402 may be a combination of one or more microprocessors, controllers, microcontrollers, central processing units, digital signal processors, application-specific integrated circuits, field-programmable gate arrays, or any other suitable device, resource, or combination of hardware, software, and / or coded computing logic operable to provide, either individually or in conjunction with other network node components 400, such as storage functionalities 403, of network node 400. For example, processor 402 may execute instructions stored in storage 403. Such functionality may include providing various wireless features discussed herein to a wireless device, such as the UE 300, which includes any of the features or benefits described herein.

[0050] Storage 403 may comprise any form of volatile or non-volatile computer-readable memory including, but not limited to, persistent storage, solid-state memory, remotely mounted memory, magnetic media, optical media, random access memory (RAM), read-only memory (ROM), removable media, or any other suitable local or remote memory component. Storage 403 may store any suitable instructions, data, or information, including software and encoded logic, used by network node 400. Storage 403 may be used to store any calculations performed by processor 402 and / or any data received through interface 401.

[0051] Network node 400 also includes interface 401 which can be used for wired or wireless signaling and / or communication. Petition 870230040132, dated 12 / 05 / 2023, page 25 / 122 / 37 data between network node 400, network 100 and / or UE 300. For example, interface 401 may perform any formatting, encoding or translation that may be necessary to allow network node 400 to send and receive data from network 100 via a wired connection. Interface 401 may also include a radio transmitter and / or receiver that may be coupled to or part of antenna 404. The radio may receive the digital data that must be sent to the other network nodes or wireless devices via a wireless connection. The radio may convert the digital data into a radio signal that has the appropriate channel and bandwidth parameters. The radio signal may then be transmitted via antenna 404 to the appropriate recipient (e.g., UE 300).

[0052] A 404 antenna can be any type of antenna capable of transmitting and receiving wireless data and / or signals. In some embodiments, the 404 antenna may comprise one or more omnidirectional, sector, or panel antennas operable to transmit / receive radio signals between, for example, 2 GHz and 66 GHz. An omnidirectional antenna can be used to transmit / receive radio signals in any direction, a sector antenna can be used to transmit / receive radio signals from devices in a particular area, and a panel antenna can be a line-of-sight antenna used to transmit / receive radio signals in a relatively straight line.

[0053] During the evolution of the 5G system, a novel concept was introduced, denoted slicing. A slice, also known as a network slice, is a new concept in 3GPP and refers to an end-to-end network realization or a set of network functions and resources that form a complete instantiated logical network to satisfy a certain network characteristic. It can be compared to a way of visualizing a “virtual” network, rather than a physical network. A slice can have various characteristics, such as ultra-low latency. For example, a slice can provide its Petition 870230040132, dated 12 / 05 / 2023, page 26 / 122 / 37 users the functionality that guarantees latency aspects, in such a way that latency is never higher than a certain requirement. To satisfy this, a set of network functions may be necessary, for example, the functionality that guarantees very short interruptions or delays in the transfer. Other slices, which can be implemented using the same access nodes (104, 400) and network nodes (106, 400), or even others, may have other characteristics. There may be, for example, slices that do not even include a mobility function, since all users served through the slice may be stationary. These two examples show that, to provide a service for different types of users, different functionalities may be necessary, and each of these sets of functionalities is related to a slice implementation.Slicing can also be viewed as a method for isolating resources and performing separate management. For example, if a certain slice realization is of very high priority, certain processing resources can be reserved in such a way that lower priority slices cannot utilize them. The concept of slicing is currently under development. An individual slice is identified by its Slice ID, in 3GPP also known as S-NSSAI (Individual Network Slice Selection Assistance Information).

[0054] According to one embodiment of the present description, before an UE performs access towards an access node, it is necessary to read certain system information. The system information describes how access should be performed to initiate communication between the UE (102) and the access node (104, 400). Part of this system information may be information related to the access barrier. This barrier information is usually broadcast on the access network 100 and there may be different barrier information in different cells or areas. Usually, an access node (104, 400) will transmit its own barrier information. A Petition 870230040132, dated 12 / 05 / 2023, page 27 / 122 / 37 barrier information can be arranged in such a way that it includes a set of access categories [1...m] and, for each category, the information elements that contain a barrier factor and a barrier time, for example, in the form specified in 3GPP TS 36.331 v.14.1.0, 2016-12 (see the following table). This barrier information per access category will be used by the UE attempting access and it is a way for the access node to limit and prioritize certain accesses over others. Table 1: Example of barrier time and barrier factors by access category.

[0055] Before an access is attempted by an UE (102), it is necessary to apply an access category from the [1...m] access categories. According to certain modalities, to determine which access category to use, the UE is provided with instructions or network rules. Figure 5 illustrates a signaling diagram for an exemplary procedure.

[0056] In a first step 202, a node provides the rules for which access category to use, based on considerations relating to the upper layers. In Figure 5, this information is illustrated as originating from node (106), but it may well also originate from other network nodes and be transmitted to the UE via node (106). If the network includes a higher-level controller or policy functionality, it may originate from another node that hosts such controller or policy functionality. The upper-layer rules may be signaled to the UE via Accessless Stratum (NAS) signaling, or they may be signaled using other protocols. For example, UE (102) may include an entity that can be configured with and host the access category rules signaled using a Petition 870230040132, dated 12 / 05 / 2023, page 28 / 122 / 37 OMA-DM device management protocol.

[0057] Related information may be included in the node rules (106), for example, how a UE should select the access category if access is triggered by a particular service. Examples of such services may be, for example, an emergency service or an MMTel Service. Additionally, the rules may include information related to how a UE should select the access category if access is triggered by a certain application, such as, for example, a certain game or a certain social media application. The rules may also include information related to access to various slices. For example, a small device / IoT UE (102) may wish to access, for example, an IoT-optimized slice. Additionally, it is not uncommon for radio networks to be shared between different operators or for the same operator to be using different Public Terrestrial Mobile Network (PLMN) codes.There may be different rules for selecting the access category depending on whether access is needed for different PLMNs.

[0058] It should be noted that step 202 may also include signaling from the access node (104). Signaling of the rules for selecting an access category may also be sent from the access node (104), for example, in particular when it comes to selecting the access category for accesses that are triggered, for example, by signaling with the access node. This may be referred to as Radio Access Network (RAN) signaling and may be communicated, for example, using a Radio Resource Control (RRC) communications protocol.

[0059] It should be noted that the rules for determining a certain access category for an access may take into account one or several aspects simultaneously. This is illustrated in Figure 6. Figure 6 illustrates an illustrative set of aspects considered, for which the rules were received from the network (node ​​(106) and / or access node (104)) and the Petition 870230040132, dated 12 / 05 / 2023, p. 29 / 122 / 37, illustrates this example. Each line corresponds to a rule that may have been received from the network. Before the UE makes an access request, the UE evaluates these rules in order to determine which access control category this access attempt will correspond to and, in this way, be able to perform a barrier check.

[0060] For each rule, there are columns with conditions that need to be met in order for this rule to be satisfied, as well as the resulting access control category when the rule is satisfied. Looking at the first row in the table, it is illustrated that Access Control Category 3 should be used if this rule is satisfied. The conditions that must be met are that a UE is accessing PLMN 4 and Slice ID 7, but it is irrelevant which application and which service is accessed as a wildcard (*) is present in these columns. The second row illustrates a second rule where the conditions that must be met are that all slices and all services (since both slice and service are marked with wildcards) with application 3 in PLMN 4 should use access category 5 if this rule is satisfied.

[0061] From access node (102), it can be seen that rules were provided in step 202, which indicates that access category 2 should be used for RAN signaling. It should be noted that the table in Figure 6 may result in an inconsistent outcome if multiple rules are met. For example, the rules in the first and second rows are both met if access is made with application 3 on slice 7 in PLMN 4. If two rules are met, this may therefore result in two different access control categories (3 and 5). This should be avoided or accounted for.

[0062] According to another aspect of the present description, ambiguous situations such as this, and others, are resolved simply by specifying that, for example, the categories of the access category Petition 870230040132, dated 12 / 05 / 2023, page 30 / 122 / 37. Rules with the highest rank are always selected in case of ambiguity. In the example shown, when both the first and second rules (lines) are satisfied, access control category 3 has a higher rank than 5, and therefore the first resulting rule in access control category 3 will be selected. Alternatively, each rule itself is associated with a priority, which can be received by the network, and the rule with the highest priority will be selected when multiple rules are satisfied. As another alternative, the UE itself selects which rule takes precedence by random selection, using a hash-type spread of the UE's identity (such as IMSI) or some other suitable method.If certain accesses that are triggered cannot find a rule that is satisfied and therefore would not result in the determination of an access control category, there may also be a flagged “Default” category, which can be stored as part of a “default” rule in the table that is satisfied in the case where no other rule is satisfied.

[0063] Returning now to figure 5, in step 204, there is an event that triggers an access. This can be an event received by the UE, as shown in figure 5. Alternatively, event 204 can also include any event, decision or trigger that occurs in the UE that triggers an access. Regardless, the UE (102) will evaluate the event using the rules and information received in step 202 and determine an access category to use in step 206. Based on the access category, it will read the information broadcast (208) by the access node (104) including, for example, the barrier factors and barrier time for the selected category and then perform a barrier check (210), executing on the barrier factors and barrier times indicated for its selected access category.

[0064] It should be noted that there may be a case where, by EU (102), the selected access category is not represented in the information. Petition 870230040132, dated 12 / 05 / 2023, page 31 / 122 / 37 disseminated from access node (104). For example, the disseminated information may only include: Access Category 1: Barrier Factor n Barrier Time tn Access Category 3: Barrier Factor x Time Barrier tx Access Category 7: Barrier Factor z Time of Tz Barrier

[0065] If an UE, in step 206, has concluded that an access category other than 1, 3, or 7 should be used, there is a need for a rule on how to handle such UEs. With a predetermined rule, there is no need to create additional mechanisms that would require the coordination of all information broadcast by the access node (104) and, for example, multiple nodes (106). An exemplary rule according to one aspect of the present description is, instead, to apply the closest access category to which the information is broadcast, with a higher probability of access, or, if no such access category is broadcast, to select the access category with the highest probability of having access allowed. With such a rule, in situations where there is no need to limit the number of accesses, there will be no need for node (106) to broadcast information over more than very few access categories and thus save broadcasting resources.For example, broadcasting information about 1, 3, and 7 will, in fact, create 3 different access categories, instead of m access categories [1...m].

[0066] According to this particular example, the mapping will thus be that access category 1 and 2 is mapped to access category 1 Access category 3-6 is mapped to access category 3. Petition 870230040132, dated 12 / 05 / 2023, page 32 / 122 / 37 Access category 7-m is mapped to access category 7.

[0067] This will significantly save broadcast resources. In step 212, the UE will send an access request (e.g., in the manner described for exposed LTE) if the barrier check (210) passes.

[0068] A predetermined rule, including the default access category, can also be declared in the specification.

[0069] Certain modalities discussed here are based on the UE (102) which, at some point in time, had a communication channel with the network and where rules are available in the UE, according to the signaling in step 202. If this is not the case, as, for example, before an initial communication, when the UE, for example, may be newly sold, undergoing (initial) attachment or has moved to another area with other rules, there must also be a specified access category for very initial access. This may, for example, be rigidly coded, for example, in the UE Subscriber Identity Module (SIM / USIM), stated in the specification, or this may be broadcast as part of the access category information coming from the access node (106).

[0070] According to certain modalities, an UE can perform a method 700, as illustrated in Figure 7. In step 702, the UE receives or experiences an event, or trigger, to perform an access request. This trigger can be received or experienced from an application in the UE or from a signaling protocol entity, such as RRC or a layer of the Accessless Stratum protocol, or by a radio signal received from the network. As used here, it will be understood that these or any other occurrence that prompts the UE to perform an access request can be considered as an “event” or a “trigger”. In step 704, the UE (102) checks if it has valid rules stored. If the UE does, it moves to step Petition 870230040132, dated 12 / 05 / 2023, page 33 / 122 / 37 708 where it evaluates one or more valid stored rules; otherwise, it moves to step 706, where it uses the “default” or predetermined access control category, for example, as shown.

[0071] In step 710, if none of the stored valid rules are satisfied, the UE may use a default or predetermined access control category or rule (712). Alternatively, if at least one rule is satisfied, and if prioritization among a set of possible access categories can be used, prioritization must be performed in such a way that an access control category is selected (714).

[0072] Regardless of how the access control category or access control rules are selected, in step 718, the UE performs a check against the valid values ​​for the selected access control category to determine if the check results in “barred” (720). If the barrier check results in not barred, in step 722, access should be granted, and if the barrier check results in barred, in step 724, no access should be granted.

[0073] According to additional embodiments, an UE can perform an 800 method of access control, as illustrated in Figure 8. The method begins at step 802, where the UE is triggered to perform an access request. This can include any event, trigger, or occurrence that prompts the UE to perform an access request. According to certain embodiments, the trigger may be received or experienced from an application on the UE or from a signaling protocol entity, such as RRC, or a layer of the Accessless Stratum protocol, or by a radio signal received from the network. As used herein, these or any other occurrences that prompt the UE to perform an access request may be referred to as an “event” or a “trigger”. Petition 870230040132, dated 12 / 05 / 2023, page 34 / 122 / 37

[0074] In step 804, the UE evaluates whether one or more access category rules are satisfied by the trigger. Several non-limiting examples of these access category rules were discussed earlier in relation to Figure 6. According to this illustrated modality, the rules may be based on one or more of PLMN, slice, application, and service. According to the additional modalities, the rules may be based on one or more of signaling, emergency communications, UE, frequency, and subscription type. This list is not exhaustive, and it will be understood that access category rules may be based on additional criteria or any combination of the criteria discussed here. An access category rule (e.g., rows in Figure 6) may be considered satisfied by the trigger if all the criteria required by the rule (e.g., columns in Figure 6) are met.

[0075] Under certain embodiments, in step 804, it may be determined that no access category rule is satisfied by the drive. This can occur for several reasons - the UE may not have a stored access category rule; the UE may have stored access category rules, but none of them are satisfied by the drive; etc. Under certain embodiments, when this occurs, a default access category rule is selected by the UE. This default access category rule may be something defined by the network or by the UE.

[0076] Under certain embodiments, in step 804, it may be determined that more than one access category rule is satisfied by the drive. Since this may result in different access categories being applied, the situation should be avoided.Therefore, according to certain modalities, when more than one rule is satisfied, one of the plurality of satisfied access category rules is selected by the EU. According to certain modalities, this selection may be based on a priority scheme. In some modalities, this priority scheme may provide... Petition 870230040132, dated 12 / 05 / 2023, p. 35 / 122 / 37, states that the access categories associated with each rule have a ranking, and the category with the highest ranking is selected. In some embodiments, the rules themselves have an assigned priority or ranking, and the satisfied rule with the highest priority or ranking is selected. These various priority schemes may be assigned by the network or by the UE. As yet another alternative embodiment, if multiple access category rules are satisfied by the trigger, the UE may select a rule based on a random selection (e.g., using a hash-type scatter of the UE identity, or any other appropriate random selection method).

[0077] According to certain modalities, the various access category rules may be the rule(s) stored in the UE, the rule(s) received from a network node, a standard access category rule, or some combination of the above.

[0078] In step 806, the EU determines, based on the assessment in step 804, an access category to apply. According to certain modalities, the access category is determined based on the selected access category rule. For example, as seen in the example in Figure 6, each of the rules specifies a corresponding access category. This is only one example, and other relationships between access category rules and access categories can be used to determine the access category to apply.

[0079] Under certain modes, when no access category rule is stored by the UE, a predetermined access category may be applied. Under certain modes, when access category rules are stored by the UE, but none of them are valid, a predetermined access category may be applied. In each mode, the predetermined access category may be chosen by the network or by the UE. Petition 870230040132, dated 12 / 05 / 2023, page 36 / 122 / 37

[0080] In step 808, the UE performs a barrier check, applying the access category determined in step 806. If the UE determines that access is barred, it does not attempt to access. If the UE determines that access is not barred, it proceeds to attempt access.

[0081] According to certain embodiments, method 800 may include the optional step 803 of receiving one or more access category rules from a network node. These rules may be received via Stratum No Access (NAS) signaling, or they may be received via other signaling protocols. Although step 803 is shown as occurring after step 802 and before 804, it will be understood that step 803 may occur at any point during method 800. Similarly, it will be understood that the various steps of method 800 may be reordered, as appropriate, within the scope of method 800, and certain steps may be performed substantially concurrently with one another.

[0082] According to additional embodiments, a network node can perform a 900 method, as illustrated in Figure 9. The method begins at step 902, where the network node provides a UE with barrier information regarding one or more access categories. One of these access categories must be used by the UE to perform a barrier check. According to certain embodiments, the barrier information may include barrier factors and barrier time. According to certain embodiments, additional information or criteria may be included in the barrier information. As discussed earlier in relation to Figure 8, the access category used by the UE to perform a barrier check can be selected in a variety of ways. According to certain embodiments, the selection may be based on a standard access category rule, a priority scheme among rules and / or access categories, etc.According to the additional options, the category itself. Petition 870230040132, dated 12 / 05 / 2023, page 37 / 122 / 37 of access may be a predetermined access category. Furthermore, as detailed above, the various access categories may be based on numerous criteria, including, but not limited to, signaling, emergency communications, UE type, slice, frequency, application, subscription type, and any combination thereof. In step 904, the network node receives an access request from the UE when a barrier check passes.

[0083] According to certain embodiments, method 900 may include the optional step 903 of providing one or more access category rules for the UE. These rules may be provided via Non-Accessible Stratum (NAS) signaling from a core network node, such as an MME or an AMF, or they may be provided via other signaling protocols. Although step 903 is shown to occur after step 902 and before 904, it will be understood that step 903 may occur at any point during method 900. Similarly, it will be understood that the various steps of method 900 may be reordered, as appropriate, within the scope of method 900, and certain steps may be performed substantially concurrently with one another.

[0084] It should be noted that the description is made considering that there is an order in which the probability of access increases, the lower the value of the access category. Certainly, it is possible to reverse this, in such a way that a higher access category value provides a higher probability of allowing access, and this is something that only needs to be agreed upon, to avoid coordination in other circumstances necessary between, for example, access nodes (104) and nodes (106) in the meaning of an access category.

[0085] It should also be noted that, in some places, it should be permitted to change the rules for determining the access category, i.e., the content of the signage in step 202 of Figure 5, in step 803 of Figure 8, or in step 903 of Figure 9. In one example, when the UE changes the area of Petition 870230040132, dated 12 / 05 / 2023, p. 38 / 122 / 37 record, a Tracking Area like this, typically performs a registration procedure, or a Tracking Area Update procedure, with the network, such as with node (106). As part of, or in conjunction with, this registration procedure, the network may provide a new set of rules, which may also partially or totally replace the previous set of rules stored in the UE. It should be noted that, in this example, the network must consider that the same set of rules that is used by a given UE is valid in all cells in a registration area.

[0086] In another example, the network broadcasts system information indicating whether a set of rules is valid in cell (510). For example, using a mechanism similar to the value label used in system information in LTE. In this case, the set of rules provided for an UE is associated with a value label (which is typically a number). In the system information broadcast in each cell, the network indicates the value label. If this value label differs from the value label associated with the stored rules of a given UE, the UE requests new rules from the network.

[0087] According to another aspect of the present description, as the rules are communicated through both the access node (104) and the node (106), it may be perfectly possible to define how the access categories should apply and be used, also, when in different modes, such as if connected with a signaling connection in at least one access node, if in idle mode with no signaling connection or if in any other, for example, sleeping or inactive states.

[0088] According to the additional embodiments, a method on a wireless device (WD) to attempt access on a second wireless device (WD) or network node (AP, gNB, eNB, etc.) is described. The method comprises receiving, on a first wireless device, the access category barrier information that refers to access to Petition 870230040132, dated 12 / 05 / 2023, page 39 / 122 / 37 second wireless device or network node, said access category barrier information including barrier information for at least one access category. The method further comprises determining a given access category, at least partially based on the cause for the access attempt, an access category that is applicable to said access attempt. The method further comprises evaluating, based on the determined access for the access attempt and the received access category barrier information, which barrier information is applicable to said access attempt. The method further comprises performing an access attempt, based on said evaluation.

[0089] According to the additional embodiments of the above-described method, the step of determining a given access category is preceded by a step of receiving NAS Access Category rules via the No Access Stratum signaling, and wherein the determination step includes determining a given access category at least partially based on the received NAS Access Category rules. According to the additional embodiments, the step of determining a given access category is preceded by a step of receiving RRC Access Category rules via RRC signaling, and wherein the determination step includes determining a given access category at least partially based on received RRC Access Category rules.

[0090] According to the additional modalities, the evaluation stage further includes a first check in which the determined access category is represented in the barrier information of the received access category and, if applicable, an access attempt is made with the determined access category; and a second check in which, if the determined access category is not represented in the barrier information of the received access category, an access attempt is made with a Petition 870230040132, dated 12 / 05 / 2023, page 40 / 122 / 37 access category different from the determined access category. According to the additional modalities, said second verification includes selecting a second access category for said access attempt, wherein said second access category is selected based on predetermined rules available in the EU. According to the additional modalities, said predetermined rules include at least selecting an access category with a higher probability of access than said determined access category.

[0091] According to the additional embodiments, the determination step includes, in situations where the rules received through the No Access Stratum and Radio Resource Control signals are inconsistent, selecting one of at least two access categories based on predetermined rules available in the UE. Said predetermined rules may include at least selecting one of at least two access categories with the highest probability of access, according to said access category barrier information received. According to the additional embodiments, said predetermined rules available in the UE are received through NAS signaling. According to the additional embodiments, said predetermined rules available in the UE are provided through a SIM / USIM. According to the additional embodiments, said predetermined rules available in the UE are encoded in UE SW.

[0092] According to the additional embodiments, a method is described on a network for providing access category rules for an UE, comprising providing rules on how to select the access category based on at least one of the following: Service, Slice, PLMN, Frequency, Application, RRC Signaling, MM Signaling, Voice Emergency Calls, Emergency Communication - packet data, subscription type, and UE type. According to the additional embodiments, this method on a network Petition 870230040132, dated 12 / 05 / 2023, page 41 / 122 / 37 further includes providing access category rules for a UE on how to determine the access category when considering simultaneously more than one Service, Slice, PLMN, Frequency, Application, RRC Signaling, MM Signaling, Voice Emergency Calls, Emergency Communication - packet data, subscription type, UE type. According to the additional provisions, said received rules are applicable throughout a registration area. According to the additional provisions, updates to the NAS Access Category rules or RRC Access Category rules are updated in connection with a registration update procedure.

[0093] All steps or features described herein are merely illustrative of certain modalities. It is not required that all modalities incorporate all steps or features described, nor that the steps be performed in the exact order represented or described herein. Furthermore, some modalities may include steps or features not illustrated or described herein, including steps inherent to one or more of the steps described herein.

[0094] Any appropriate steps, methods, or functions may be performed through a computer program product that may, for example, be executed by the components and equipment illustrated in one or more of the figures shown. For example, storage may comprise computer-readable media on which a computer program may be stored. The computer program may include instructions that cause the processor (and any operatively coupled entities and devices, such as the interface and storage) to execute the methods according to the embodiments described herein. The computer program and / or the computer program product may thus provide a means to perform any steps described herein. Petition 870230040132, dated 12 / 05 / 2023, page 42 / 122 / 37

[0095] Any appropriate steps, methods, or functions may be performed through one or more functional modules. Each functional module may comprise software, computer programs, subroutines, libraries, source code, or any other form of executable instructions that are executed, for example, by a processor. In some embodiments, each functional module may be implemented in hardware and / or software. For example, one or more or all functional modules may be implemented by processors, possibly in cooperation with storage. The processors and storage may thus be arranged to enable the processors to locate and load instructions from storage and execute the located and loaded instructions to enable the respective functional module to perform all the steps or functions described herein.

[0096] Certain aspects of the inventive concept have been mainly described above in relation to a few embodiments. However, as is readily apparent to those skilled in the art, embodiments other than those previously described are equally possible and fall within the scope of the inventive concept. Similarly, although numerous different combinations have been discussed, not all possible combinations have been described. Those skilled in the art will realize that other combinations exist and fall within the scope of the inventive concept. Furthermore, as is understood by those skilled in the art, the embodiments described herein are, as such, also applicable in other communication patterns and systems, and any feature derived from a particular figure described in connection with other features may be applicable in any other figure and / or combined with different features.

[0097] Modifications, additions, or omissions may be made to the systems and apparatus described herein without departing from the scope of the description. The components of the systems and apparatus may be integrated or Petition 870230040132, dated 12 / 05 / 2023, page 43 / 122 / 37 separate. Furthermore, the operations of systems and devices may be performed by more, less, or other components. Additionally, the operations of systems and devices may be performed using any suitable logic comprising software, hardware, and / or other logic. As used in this document, "each" refers to each element of a set or each element of a subset of a set.

[0098] Modifications, additions, or omissions may be made to the methods described herein without departing from the scope of the description. The methods may include more, fewer, or different steps. Additionally, the steps may be performed in any suitable order.

[0099] Although this description has been given in terms of certain embodiments, changes and substitutions of embodiments will be apparent to those skilled in the art. In this way, the set forth description of embodiments does not restrict this description. Other changes, substitutions and alterations are possible without departing from the spirit and scope of this description, in the manner defined by the following claims. Petition 870230040132, dated 12 / 05 / 2023, p. 44 / 122

Claims

1 / 4 CLAIMS 1. A method (800) for access control performed by a user equipment, UE (102, 300), characterized in that the method comprises: being triggered (802) to perform an access request; evaluating (804) whether one or more access category rules are satisfied by the trigger; determining (806), based on the evaluation, an access category to apply; and performing (808) a barrier check, applying the access category determined based on the evaluation, wherein the method further comprises receiving, from a network node, instructions to: when no access category rule is stored, perform a barrier check, applying a predetermined access category, or when no stored access category rule is valid, perform a barrier check, applying a predetermined access category.

2. User equipment, UE (102, 300) configured to perform access control, characterized in that the UE comprises: a processing circuit system (315) configured to: be triggered (802) to perform an access request; evaluate (804) whether one or more access category rules are satisfied by the triggering; determine (806), based on the evaluation, an access category to apply; and perform (808) a barrier check, applying Petition 870230040132, dated 12 / 05 / 2023, page 1.45 / 122 2 / 4 access category determined based on the evaluation, wherein the processing circuit system (315) is additionally configured to receive, from a network node, instructions to: when no access category rule is stored, perform a barrier check, applying a predetermined access category; or when no stored access category rule is valid, perform a barrier check, applying a predetermined access category.

3. User equipment according to claim 2, characterized in that, when no access category rule is satisfied by the drive, a default access category rule is selected, and / or when a plurality of access category rules is satisfied by the drive, one of the plurality of access category rules is selected based on a priority scheme.

4. User equipment according to claim 3, characterized in that the determined access category is determined based on the selected access category rule.

5. User equipment according to claim 2, characterized in that one or more access category rules comprise one or more of the following: access category rules stored in the UE (102, 300); access category rules received from a network node (104, 106, 400); and a standard access category rule.

6. User equipment according to any of claims 2 to 5, characterized in that the wireless interface is additionally configured to receive (803) one or more access category rules from a network node, optionally wherein the one or more access category rules received from the network node are received by means of the Stratum No Access (NAS) signaling.

7. User equipment according to any one of claims 2 to 6, characterized in that the access category rules are based on one or more of the service, signaling, emergency communications and EU type, and / or in that the access category rules are based on one or more of the slice, frequency, application and subscription type.

8. Method (900) implemented by a network node (104, 106, 400), characterized in that the method comprises: providing (902), to a user equipment, UE (102, 300), barrier information and access category rules in relation to one or more access categories, wherein one of the one or more access categories is used by UE (102, 300) to perform a barrier check; and receiving (903) an access request from UE when the barrier check is passed, wherein the network node instructs UE that, when no access category rule provided to UE is valid, a predetermined access category is used to perform the barrier check.

9. Network node (104, 106, 400), characterized in that it comprises: a processing circuit system (402); and a wireless interface (401) coupled to the processing circuit system, the wireless interface configured to: provide, to a user equipment, UE (102, 300), barrier information and access category rules in relation to one or more access categories, wherein one of the one or more access categories is used by UE (102, 300) to perform a barrier check; and receive an access request from UE (102, 300) when the barrier check is passed, Petition 870230040132, dated 12 / 05 / 2023, p. 47 / 122 4 / 4 where the network node (104, 106, 400) is additionally configured to instruct the UE (102, 300) that, when no access category rule provided for the UE (102, 300) is valid, a predetermined access category should be used to perform the barrier check.

10. Network node according to claim 9, characterized in that the barrier information comprises barrier factors and barrier time.

11. Network node according to claim 9 or 10, characterized in that the access category used by UE (102, 300) to perform a barrier check is selected based on a standard access category rule or in that the access category used by UE (102, 300) to perform a barrier check is selected based on a priority scheme.

12. Network node according to claim 9, characterized in that one or more access category rules provided for UE (102, 300) are provided through No Access Stratum (NAS) signaling.

13. Network node according to any one of claims 9 to 12, characterized in that the access category rules are based on one or more of the service, signaling, emergency communications and EU type and / or in that the access category rules are based on one or more of the slice, frequency, application and subscription type. Petition 870230040132, dated 12 / 05 / 2023, p. 48 / 122

Images