Apparatus and method for supporting authentication management in a wireless communication system

Abstract

The disclosure relates to a fifth generation (5G) or pre-5G communication system to support a data transmission rate higher than that of a post fourth generation (4G) communication system such as long term evolution (LTE). According to embodiments of the disclosure, a method of operating a terminal in a wireless communication system is provided. The method includes transmitting a first registration request message to a network node based on information of a first network slice, receiving an authentication command message related to the first network slice from the network node, transmitting an authentication complete message related to the first network slice to the network node, receiving an authentication result message related to the first network slice from the network node, configuring a timer to have a specific timer value if the authentication result message indicates that the first network slice authentication fails, and transmitting a second registration request message to the network node based on information of a second network slice after the timer expires.

Description

TECHNICAL FIELD

[0001] The disclosure relates generally to a wireless communication system, and more particularly, to an apparatus and method for supporting authentication management in a wireless communication system. BACKGROUND

[0002] To meet the demand for wireless data traffic that has increased since the fourth generation (4G) communication systems were commercialized, efforts are being made to develop an improved fifth generation (5G) communication system or a pre-5G communication system. Therefore, the 5G communication system or the pre-5G communication system is also called a beyond 4G network communication system or a post long term evolution (LTE) system.

[0003] To achieve a high data transmission rate, the 5G communication system is considered to be implemented in a mmWave band (e.g., 60 GHz band). To reduce path loss of a propagation path and increase a propagation transmission distance in the mmWave band, beamforming, massive multiple-input multiple-output (MIMO), full dimensional MIMO (FD-MIMO), array antenna, analog beam forming, and large scale antenna techniques are discussed in the 5G communication system.

[0004] In addition, to improve the network of the system, technologies such as evolved small cell, advanced small cell, cloud radio access network (RAN), ultra-dense network, device to device (D2D) communication, wireless backhaul, mobile network, cooperative communication, coordinated multi-point (CoMP), and reception interference cancellation are being developed in the 5G communication system.

[0005] In addition to this, hybrid frequency shift keying and quadrature amplitude modulation (FQAM) and sliding window superposition coding (SWSC), which are advanced coding modulation (ACM) techniques, and filter bank multi-carrier (FBMC), non-orthogonal multiple access (NOMA), and sparse code multiple access (SCMA), which are advanced access techniques, are being developed in the 5G system. SUMMARY

[0006] [PROBLEMS]

[0007] Based on the above discussion, the disclosure provides an apparatus and method for supporting authentication management in a wireless communication system.

[0008] [TECHNICAL SOLUTION]

[0009] According to the embodiments of the disclosure, a method of operating a terminal in a wireless communication system is provided. The method includes transmitting a first registration request message to a network node based on information of a first network slice, receiving an authentication command message related to the first network slice from the network node, transmitting an authentication complete message related to the first network slice to the network node, receiving an authentication result message related to the first network slice from the network node, configuring a timer to have a specific timer value if the authentication result message indicates that the first network slice authentication fails, and transmitting a second registration request message to the network node based on information of a second network slice after the timer expires.

[0010] According to the embodiments of the disclosure, a terminal in a wireless communication system is provided. The terminal includes a transceiver, and at least one processor operably coupled to the transceiver. The at least one processor can be configured to transmit a first registration request message to a network node based on information of a first network slice, receive an authentication command message related to the first network slice from the network node, transmit an authentication complete message related to the first network slice to the network node, receive an authentication result message related to the first network slice from the network node, configure a timer to have a specific timer value if the authentication result message indicates that the first network slice authentication fails, and transmit a second registration request message to the network node based on information of a second network slice after the timer expires.

[0011] [Advantageous Effects]

[0012] The apparatuses and methods according to the embodiments of the disclosure can be used for supporting authentication management in a wireless communication system.

[0013] Advantages obtained from the disclosure are not limited to the above-mentioned advantages, and other advantages which are not mentioned herein will become clearly understood from the following description by persons skilled in the art to which the disclosure pertains. BRIEF DESCRIPTION OF DRAWINGS

[0014] Figure 1 The structure of a wireless communication system according to the embodiments of the disclosure is illustrated;

[0015] Figure 2 A procedure for performing authentication and registration in a wireless communication system according to the embodiments of the disclosure is illustrated;

[0016] Figure 3 A procedure for performing authentication and registration in a wireless communication system according to the embodiments of the disclosure is illustrated;

[0017] Figure 4 The state transition and operation of a terminal for performing authentication and registration in a wireless communication system according to the embodiments of the disclosure are illustrated;

[0018] Figure 5 A configuration of a terminal in a wireless communication system according to embodiments of the disclosure is illustrated;

[0019] Figure 6 A structure of a network entity in a wireless communication system according to embodiments of the disclosure is illustrated; and

[0020] Figure 7 A flowchart of a method of operating a terminal according to embodiments of the disclosure is illustrated. DETAILED DESCRIPTION

[0021] The terms used in the present disclosure are merely used to describe particular embodiments, and are not intended to limit other embodiments. A singular expression can include a plural expression, unless it is clear from the context. All of the terms used herein, including technical and scientific terms, have the same meanings as those generally understood by those of ordinary skill in the art to which the present disclosure pertains. It should also be understood that the terms such as those defined in a generally used dictionary have meanings identical to those in the context of the relevant art, and should not be interpreted in an idealized or overly formal sense unless explicitly so defined herein. Optionally, the terms defined in the present disclosure should not be interpreted as excluding embodiments of the present disclosure.

[0022] For example, a hardware-based method is described in the embodiments of the disclosure described below. However, since the embodiments of the disclosure include a technology in which hardware and software are simultaneously used, a software-based method is not excluded in the embodiments of the disclosure.

[0023] For ease of explanation, terms related to signals, channels, control information, messages, network entities, device components, etc. used hereinafter are exemplified. Accordingly, the present disclosure is not limited to the terms described below, and thus other terms having the same technical meanings can also be used.

[0024] Further, although the present disclosure describes the embodiments by using terms used in some communication standards (e.g., the 3rd Generation Partnership Project (3GPP)), this is for exemplary purposes only. The embodiments of the present disclosure can be easily modified and applied to other communication systems.

[0025] Hereinafter, the present disclosure relates to an apparatus and a method for supporting authentication management in a wireless communication system.

[0026] In a 5G or New Radio (NR) system, an Access and Mobility Management Function (AMF) that is a management entity for managing terminal mobility is separated from a Session Management Function (SMF) that is an entity for managing a session. Accordingly, unlike a fourth generation (4G) Long Term Evolution (LTE) communication system in which a Mobility Management Entity (MME) performs both mobility management and session management, the 5G or NR system has separate entities for performing mobility management and session management, which results in a change in a communication method and a communication management method between a terminal and a network entity.

[0027] In the 5G or NR system, for non-3GPP access, mobility management is performed using an AMF via a Non-3GPP Interworking Function (N3IWF), and session management is performed using an SMF. In addition, the AMF is also used to process information related to security, which is an important factor in mobility management.

[0028] As described above, in the 4G LTE system, the MME is responsible for mobility management and session management. In the 5G or NR system, a non-standalone architecture (NSA) for performing communication by using network entities of the 4G LTE system together can be supported.

[0029] The disclosure relates to an apparatus and method for authentication and registration in a wireless communication system. Specifically, the disclosure relates to a method, procedure, and apparatus for registering a terminal when applying authentication and security procedures to a network slice in an environment following a network slice concept that differentiates network entities or networks to be accessed, such as 5G communication, according to specific data characteristics.

[0030] According to the embodiments of the disclosure, authentication and registration can be effectively performed in a wireless communication system. According to the embodiments of the disclosure, when applying authentication and security procedures to a network slice in an environment following a network slice concept that differentiates network entities or networks to be accessed, such as 5G communication, according to specific data characteristics, procedures related to registration and authentication of a terminal can be effectively performed.

[0031] According to the embodiments of the disclosure, a method and procedure for solving a time delay problem in terminal registration and a method, procedure, and apparatus for effectively performing communication when applying authentication and security procedures to a network slice in an environment following a network slice concept that differentiates network entities or networks to be accessed, such as 5G communication, are provided.

[0032] Figure 1 The structure of a wireless communication system according to the embodiments of the disclosure is shown.

[0033] Specifically, Figure 1A network environment and a structure of a terminal for performing communication for communication performance improvement in a 5G network according to embodiments of the disclosure are illustrated.

[0034] Referring to Figure 1 , a 5G or NR core network can be composed of network functions (NFs) such as a user plane function (UPF) 131, a session management function (SMF) 121, an access and mobility management function (AMF) 111, a 5G radio access network (RAN) 103, a user data management (UDM) 151, a policy control function (PCF) 161, etc. In addition, in order to authenticate these entities, entities such as an authentication server function (AUSF) 141, an authentication, authorization, and accounting (AAA) 171, etc. can be included. A user equipment (UE) (or terminal) 101 can access a 5G core network through a base station (BS) (or 5G radio access network (RAN)) 103.

[0035] Meanwhile, for the case where the UE 101 performs communication through non-3GPP access, there is an N3 interworking function (N3IWF). When the UE 101 communicates through non-3GPP access, session management is controlled through the UE 101, non-3GPP access, N3IWF, and SMF, and mobility management is controlled through the UE 101, non-3GPP access, N3IWF, and AMF.

[0036] In the 5G or NR system, entities performing mobility management and session management are divided into the AMF 111 and the SMF 121. Meanwhile, in the 5G or NR system, a standalone deployment structure in which communication is performed using only 5G or NR entities and a non-standalone deployment structure in which 5G or NR entities are used together with 4G entities are considered.

[0037] Although it is assumed that a 5G network is a communication network based on the embodiments of the disclosure, it can also be applied to the case where the same concept is applied to other systems within the scope that can be understood by one of ordinary skill in the art.

[0038] Figure 2 A procedure for performing authentication and registration in a wireless communication system according to embodiments of the disclosure is illustrated.

[0039] In detail, Figure 2 A procedure for performing authentication and registration in a 5G network environment according to embodiments of the disclosure is illustrated.

[0040] Referring to Figure 2 In step 201, the UE 210 transmits a registration request message to the AMF 230.

[0041] In step 211, the AMF 230 transmits a network slice-specific authentication command message to the UE 210.

[0042] In step 213, the UE 210 transmits a network slice dedicated authentication completion message to the AMF 230.

[0043] In step 215, the AMF 230 transmits a network slice dedicated authentication result message to the UE 210.

[0044] In this case, when the network slice authentication fails, the network or the AMF 230 transmits mobility management (MM) cause information about the authentication failure to the UE 210.

[0045] Table 1 below shows a configuration of the network slice dedicated authentication result message according to the embodiments of the disclosure.

[0046] [Table 1]

[0047]

[0048] Referring to Table 1, the network slice dedicated authentication result message can include an MM cause information element (IE).

[0049] The MM cause IE can be encoded as shown in Table 2 below.

[0050] According to the embodiments of the disclosure, the MM cause can include information about the occurrence of the network slice authentication failure or information related to the failure cause.

[0051] Table 2 below shows a configuration of the MM cause IE according to the embodiments of the disclosure.

[0052] [Table 2]

[0053]

[0054] When the MM cause information is received together at the same time as the network slice dedicated authentication result message is received due to the occurrence of the authentication failure, the UE 210 configures a timer T35xx in step 221.

[0055] In step 231, the UE 210 back off the timer T35xx configuration value, and transmits a registration request message to the AMF 230 after the timer T35xx expires. In this case, the UE 210 attempts to register with another network slice information.

[0056] Figure 3 A procedure for performing authentication and registration in a wireless communication system according to the embodiments of the disclosure is illustrated.

[0057] Specifically, Figure 3 A procedure for performing authentication and registration in a 5G network environment according to the embodiments of the disclosure is illustrated.

[0058] Referring to Figure 3 In step 301, the UE 310 transmits a registration request message to the AMF 330.

[0059] In step 311, the AMF 330 transmits a network slice-specific authentication command message to the UE 310.

[0060] In step 313, the UE 310 transmits a network slice-specific authentication complete message to the AMF 330.

[0061] In step 315, the AMF 330 transmits a network slice-specific authentication result message to the UE 310.

[0062] In this case, when the network slice authentication fails, the network or the AMF 330 transmits MM cause information related to the authentication failure and network slice information to the UE 310. According to embodiments, the network slice information can include single network slice selection assistance information (SNSSAI).

[0063] Table 3 below illustrates a configuration of a network slice-specific authentication result message according to embodiments of the disclosure.

[0064] [Table 3]

[0065]

[0066]

[0067] Referring to Table 3, the network slice-specific authentication result message can include an MM cause and network slice information IE. According to embodiments, the network slice information can include single network slice selection assistance information (SNSSAI).

[0068] The MM cause and network slice information IE can be encoded as shown in Table 4 below.

[0069] According to embodiments of the disclosure, the MM cause can include information related to the network slice authentication failure or information related to the failure cause.

[0070] According to embodiments, the network slice information can include information that the authentication of the network slice has failed. Upon receiving the information that the authentication of the network slice has failed, the UE 310 can request registration to another network slice other than the corresponding network slice.

[0071] According to another embodiment, the network slice information can include information of a recommended network slice that can be authenticated. Upon receiving the information of the recommended network slice that can be authenticated, the UE 310 can request registration to the network or the AMF 330 by using the information of the corresponding network slice.

[0072] Table 4 below shows a configuration of MM cause with SNSSAI IE according to the embodiments of the disclosure.

[0073] [Table 4]

[0074]

[0075] Referring to Table 4, the information about the corresponding network slice can be transmitted by using slice / service type (SST) and slice differentiator (SD) information.

[0076] In step 321, when the MM cause and the network slice information are received together at the same time as the authentication result message specific to the network slice is received due to occurrence of authentication failure, the UE 310 configures a timer T35xx.

[0077] In step 331, the UE 310 back-off configures a value of the timer T35xx, and transmits a registration request message to the AMF 330 after the timer T35xx expires. In this case, the UE 310 attempts registration with another network slice information.

[0078] Figure 4 A state transition and operation of a terminal for performing authentication and registration in a wireless communication system according to the embodiments of the disclosure are shown.

[0079] Specifically, Figure 4 A state transition and operation of a terminal for performing authentication and registration in a 5G network environment according to the embodiments of the disclosure are shown.

[0080] Referring to Figure 4 , before transmitting the registration request message, the UE is in a 5G mobility management (5GMM)-DEREGISTERED.ATTEMPTING-REGISTRATION state 401 or a 5GMM-REGISTERED.ATTEMPTING-REGISTRATION-UPDATE state 403.

[0081] When the registration request message is transmitted, the UE transitions from the 5GMM-DEREGISTERED.ATTEMPTING-REGISTRATION state 401 or the 5GMM-REGISTERED.ATTEMPTING-REGISTRATION-UPDATE state 403 to the 5GMM-REGISTERED-INITIATED state 411.

[0082] However, when the network slice-specific authentication has failed, the UE transitions from the 5GMM-REGISTERED-INITIATED state 411 to the 5GMM-DEREGISTERED.ATTEMPTING-REGISTRATION state 401 or the 5GMM-REGISTERED.ATTEMPTING-REGISTRATION-UPDATE state 403.

[0083] Figure 5 A configuration of a terminal in a wireless communication system according to various embodiments of the present disclosure is illustrated.

[0084] Reference Figure 5 The terminal (i.e., UE) 500 according to various embodiments of the present disclosure can include a transceiver 510, a memory 520, and a processor 530. The processor 530, the transceiver 510, and the memory 520 of the UE 500 can operate according to the above-described communication method of the UE 500. However, components of the UE 500 are not limited to the above-described examples. For example, the UE 500 can include more or less components than the above-described components. In addition, the processor 530, the transceiver 510, and the memory 520 can be implemented in the form of a single chip.

[0085] The transmission / reception unit 510 cooperates with the receiver of the UE 500 and the transmitter of the UE 500, and can transmit / receive a signal with respect to a base station or a network entity. The signal transmitted / received with respect to the base station can include control information and data. To this end, the transmission / reception unit 510 can be composed of an RF transmitter that up-converts and amplifies the frequency of a signal to be transmitted, and an RF receiver that performs low-noise amplification on a signal to be received and down-converts the frequency of the signal. However, this is merely an implementation of the transmission / reception unit 510, and the components of the transmission / reception unit 510 are not limited to the RF transmitter and the RF receiver. The transmission / reception unit 510 can include at least one transmitter / receiver or at least one transceiver. Furthermore, the transmission / reception unit 510 can include a wired / wireless transmission / reception unit, and can include various configurations for transmitting / receiving a signal. Furthermore, the transmission / reception unit 510 can receive a signal through a wireless channel and output the signal to the processor 530, and can transmit a signal output from the processor 530 through a wireless channel. Furthermore, the transmission / reception unit 510 can receive a communication signal and output the signal to the processor, and can transmit a signal output from the processor to a network entity through a wired / wireless network.

[0086] The memory 520 can store programs and data required in the operation of the UE 500. Furthermore, the memory 520 can store control information or data included in a signal obtained from the UE 500. The memory 520 can be composed of a storage medium such as a read-only memory (ROM), a random access memory (RAM), a hard disk, a compact disk ROM (CD-ROM), a digital versatile disk (DVD), etc., or a combination of storage media.

[0087] The processor 530 can control a series of processes so that the UE 500 operates according to the embodiments of the disclosure as described above. The processor 530 can include at least one processor. For example, the processor 530 can include a communication processor (CP) for controlling communication and an application processor (AP) for controlling a higher layer such as an application program, etc.

[0088] Figure 6 The structure of a network entity in a wireless communication system according to the embodiments of the disclosure is illustrated.

[0089] Referring to Figure 5According to the embodiments of the disclosure, the network entity 600 can include a transceiver 610, a memory 620, and a processor 630. The processor 630, the transceiver 610, and the memory 620 of the network entity 600 can operate according to the above-described communication method of the network entity 600. However, the components of the network entity 600 are not limited to the above-described examples. For example, the network entity 600 can include more or less components than the above-described components. In addition, the processor 630, the transceiver 610, and the memory 620 can be implemented in the form of a single chip. The network entity 600 can include a network function (NF) as described above, such as an access and mobility function (AMF), a session management function (SMF), a policy and charging function (PCF), a network exposure function (NEF), a unified data management (UDM), a user plane function (UPF), etc. The network entity 600 can also include a base station.

[0090] The transceiver 610 collectively refers to a receiver of the network entity 600 and a transmitter of the network entity 600, and can transmit / receive a signal with respect to a terminal or another network entity. The signal transmitted / received in this case can include control information and data. To this end, the transceiver 610 can be composed of an RF transmitter that up-converts and amplifies the frequency of a signal to be transmitted, and an RF receiver that performs low-noise amplification on a signal to be received and down-converts the frequency of the signal. However, this is merely an embodiment of the transceiver 610, and the components of the transceiver 610 are not limited to the RF transmitter and the RF receiver. The transceiver 610 can include at least one transmitter / receiver or at least one transceiver. The transceiver 610 can include a wired / wireless transceiver, and can include various configurations for transmitting / receiving a signal. In addition, the transceiver 610 can receive a signal through a communication channel (for example, a wireless channel) and output the signal to the processor 630, and can transmit a signal output from the processor 630 through a wireless channel. In addition, the transceiver 610 can receive a communication signal and output the signal to the processor 630, and can transmit a signal output from the processor 630 to a UE or a network entity through a wired / wireless network.

[0091] The memory 620 can store programs and data required in the operation of the network entity 600. In addition, the memory 620 can store control information or data included in a signal obtained from the network entity 600. The memory 620 can be composed of a storage medium such as a ROM, a RAM, a hard disk, a CD-ROM, a DVD, etc., or a combination of storage media.

[0092] The processor 630 can control a series of processes so that the network entity 600 operates according to the embodiments of the disclosure as described above. The processor 630 can include at least one processor. The method based on the embodiments disclosed in the claims and / or the specification of the disclosure can be implemented in hardware, software, or a combination of both.

[0093] When implemented in software, a computer readable recording medium for storing one or more programs (i.e., software modules) can be provided. The one or more programs stored in the computer readable recording medium are configured to be executed by one or more processors in the electronic device. The one or more programs include instructions for allowing the electronic device to perform the described method based on the embodiments disclosed in the claims and / or the specification of the disclosure.

[0094] Figure 7 A flowchart of a method of operating a terminal according to the embodiments of the disclosure is illustrated.

[0095] Referring to Figure 7 In step 701, the terminal (i.e., UE) transmits a registration request message to a network node. According to the embodiments of the disclosure, the network node includes an access and mobility management function (AMF). According to the embodiments of the disclosure, the UE transmits the registration request message based on information of a first network slice.

[0096] In step 702, the UE receives a network slice-specific authentication command message from the network node.

[0097] In step 703, the UE transmits a network slice-specific authentication complete message to the network node.

[0098] In step 704, the UE receives a network slice-specific authentication result message from the network node.

[0099] According to the embodiments of the disclosure, when the network slice-specific authentication fails, the network slice-specific authentication result message can include MM cause information. According to the embodiments of the disclosure, the MM cause information can include information related to the failure of the network slice-specific authentication or information related to the cause of the failure.

[0100] According to the embodiments of the disclosure, when the network slice-specific authentication fails, the network slice-specific authentication result message can include MM cause and network slice information. According to the embodiments of the disclosure, the MM cause information can include information related to the failure of the network slice-specific authentication or information related to the cause of the failure. According to the embodiments of the disclosure, the network slice information can include information that the network slice authentication has failed. According to the embodiments of the disclosure, the network slice information can include information of a recommended network slice that can be authenticated.

[0101] In step 705, the UE configures a timer. According to embodiments of the disclosure, the UE configures the timer upon receiving the network slice-specific authentication result message including the MM cause. According to embodiments of the disclosure, the UE configures the timer to have a specific timer value.

[0102] In step 706, the UE transmits a registration request message to the network node. According to embodiments of the disclosure, the UE transmits the registration request message after the timer configured in step 705 expires in step 705. According to embodiments of the disclosure, the UE transmits the registration request message based on information of a second network slice different from the first network slice.

[0103] The method based on the embodiments disclosed in the claims and / or the specification of the disclosure can be implemented in hardware, software, or a combination of both.

[0104] When implemented in software, a computer-readable recording medium for storing one or more programs (i.e., software modules) can be provided. The one or more programs stored in the computer-readable recording medium are configured to be executed by one or more processors in the electronic device. The one or more programs include instructions for allowing the electronic device to perform the described method based on the embodiments disclosed in the claims and / or the specification of the disclosure.

[0105] The program (i.e., software module or software) can be stored in a random access memory, a non-volatile memory including a flash memory, a read-only memory (ROM), an electrically erasable programmable read-only memory (EEPROM), a magnetic disc storage device, an optical disc ROM (CD-ROM), a digital versatile disc (DVD), or other forms of optical storage device, and a magnetic cassette. Alternatively, the program can be stored in a memory configured in a combination of all or some of the above-mentioned storage media. In addition, the number of configured memories can be plural.

[0106] In addition, the program can be stored in an attachable storage device that can access the electronic device through a communication network such as the Internet, an intranet, a local area network (LAN), a wide area network (WAN), or a storage area network (SAN), or through a communication network configured by combining the above-mentioned networks. The storage device can access the device for performing the embodiments of the disclosure via an external port. In addition, the additional storage device on the communication network can access the device for performing the embodiments of the disclosure.

[0107] In the above-described specific embodiments of the present disclosure, components included in the present disclosure are expressed in singular or plural form according to the specific embodiments presented herein. However, the cases presented for the convenience of explanation are appropriately selected as singular or plural expressions, and thus the embodiments of the present disclosure are not limited to a single or multiple components. Therefore, components expressed in plural form can also be expressed in singular form, and vice versa.

[0108] While the present disclosure has been shown and described with reference to certain preferred embodiments thereof, it will be understood by those skilled in the art that various changes in form and details can be made therein without departing from the spirit and scope of the present disclosure as defined by the appended claims. Therefore, the scope of the present disclosure is not limited to the detailed description thereof but is defined by the appended claims, and all differences within the scope of equivalents are to be interpreted as included in the present disclosure.

[0109] [Industrial applicability]

[0110] The present disclosure relates generally to a wireless communication system, and more particularly, to an apparatus and method for supporting authentication management in a wireless communication system.

Claims

1. A method performed by a terminal in a wireless communication system, the method comprising: Send a first registration request message associated with the first network slice to the network node; Receive authentication command messages related to the first network slice from the network node; Send an authentication completion message related to the first network slice to the network node; Receive authentication result messages related to the first network slice from the network node; If the authentication result message related to the first network slice includes Mobility Management (MM) reason information, then the timer is configured to a specific timer value, wherein the MM reason information includes information related to authentication failure of the first network slice or information related to the reason for failure; and After the timer expires, a second registration request message associated with the second network slice is sent to the network node. The second network slice is different from the first network slice.

2. The method according to claim 1, in, The authentication result message related to the first network slice also includes information about the authenticable recommended network slice, and The second network slice is the recommended network slice.

3. The method according to claim 2, wherein, Information related to the authenticable recommended network slice includes the single network slice selection assistance information (SNSSAI) for the second network slice.

4. The method according to claim 1, wherein, The timer configured to include the specific timer value includes rolling back the timer configuration value.

5. The method according to claim 1, in, Before sending the first registration request message, the terminal is in either the 5G Mobility Management (5GMM-DEREGISTERED.ATTEMPTING-REGISTRATION) state or the 5GMM-REGISTERED.ATTEMPTING-REGISTRATION-UPDATE state, and After sending the first registration request message, the terminal transitions from the 5GMM-DEREGISTERED.ATTEMPTING-REGISTRATION state or the 5GMM-REGISTERED.ATTEMPTING-REGISTRATION-UPDATE state to the 5GMM-REGISTERED-INITIATED state.

6. The method according to claim 5, wherein, When the authentication result message related to the first network slice indicates that the first network slice authentication has failed, the terminal transitions from the 5GMM-REGISTERED-INITIATED state to the 5GMM-DEREGISTERED.ATTEMPTING-REGISTRATION state or the 5GMM-REGISTERED.ATTEMPTING-REGISTRATION-UPDATE state.

7. A terminal in a wireless communication system, the terminal comprising: transceiver; as well as A controller, connected to the transceiver, is configured to: Send a first registration request message associated with the first network slice to the network node; Receive authentication command messages related to the first network slice from the network node; Send an authentication completion message related to the first network slice to the network node; Receive authentication result messages related to the first network slice from the network node; If the authentication result message related to the first network slice includes Mobility Management (MM) reason information, then the timer is configured to a specific timer value, wherein the MM reason information includes information related to authentication failure of the first network slice or information related to the reason for failure; and After the timer expires, a second registration request message associated with the second network slice is sent to the network node. The second network slice is different from the first network slice.

8. The terminal according to claim 7, in, The authentication result message related to the first network slice also includes information about the authenticable recommended network slice, and The second network slice is the recommended network slice.

9. The terminal according to claim 8, wherein, Information related to the authenticable recommended network slice includes the single network slice selection assistance information (SNSSAI) for the second network slice.

10. The terminal according to claim 7, wherein, In order to configure the timer including the specific timer value, the controller is configured to roll back the timer to the configured value.

11. The terminal according to claim 7, in, Before sending the first registration request message, the terminal is in either the 5G Mobility Management (5GMM-DEREGISTERED.ATTEMPTING-REGISTRATION) state or the 5GMM-REGISTERED.ATTEMPTING-REGISTRATION-UPDATE state, and After sending the first registration request message, the terminal transitions from the 5GMM-DEREGISTERED.ATTEMPTING-REGISTRATION state or the 5GMM-REGISTERED.ATTEMPTING-REGISTRATION-UPDATE state to the 5GMM-REGISTERED-INITIATED state.

12. The terminal according to claim 11, wherein, When the authentication result message related to the first network slice indicates that the first network slice authentication has failed, the terminal transitions from the 5GMM-REGISTERED-INITIATED state to the 5GMM-DEREGISTERED.ATTEMPTING-REGISTRATION state or the 5GMM-REGISTERED.ATTEMPTING-REGISTRATION-UPDATE state.

Images