Optimization of key material generation for application authentication and key management

Abstract

A method performed by a wireless device (110) includes: determining whether a first message received from a network node (160) includes an Application Authentication and Key Management (AKMA) key indicator, and determining whether to generate AKMA key material for use in an authentication process with the network based on whether the first message includes the AKMA indicator.

Description

Technical Field

[0001] This disclosure generally relates to wireless communications, and more particularly to systems and methods for optimizing key material generation for application authentication and key management (AKMA). Background Technology

[0002] Release 16 of the 3rd Generation Partnership Project (3GPP) introduced a new feature called Application Authentication and Key Management (AKMA) to support authentication and key management for applications and 3GPP services based on 3GPP credentials in 5G, including Internet of Things (IoT) use cases. The latest TS is 3GPP TS 33.535 v.0.2.0, which is currently undergoing revision.

[0003] It aims to leverage Authentication and Key Protocol (AKA) credentials to bootstrap security between User Equipment (UE) and Application Function (AF), allowing the UE to securely exchange data with the application server. This can be viewed as an evolution of the Generic Bootstrap Architecture (GBA) for 5G. In this article, the term AF can also be referred to as AKMA AF.

[0004] Figure 1 A typical network architecture for AKMA, as disclosed in 3GPP TS 35.535 v. 0.2.0, is shown.

[0005] The AKMA Anchor Function (AAnF) is a new logical entity introduced by AKMA. Specifically, similar to the Bootstrap Server Function (BSF) in GBA, AAnF is an anchor function in the Home Public Land Mobile Network (HPLMN) used for key material generation between the UE and AF. AAnF maintains the UE's AKMA context for subsequent bootstrap requests.

[0006] AKMA reuses the results of the 5G master authentication process performed during UE registration to authenticate the UE. This is known as implicit bootstrapping. In this process, the Authentication Server Function (AUSF) is responsible for generating and storing key materials (such as K... AUSF and K AKMA Network functions (NFs) are as described below. As used herein, the term NF may include (for example) AUSF, AAnF, Network Open Function (NEF), Access and Mobility Management Function (AMF), AF, or any other network function.

[0007] Figure 2 The AKMA key hierarchy is shown, which includes the following keys: K AUSF K AKMA K AFAs disclosed in 3GPP TS33.535 v. 0.2.0. The terminology may be defined as follows:

[0008] · K AUSF The root key, as an output of the main authentication process, is stored in both the UE and the AUSF; furthermore, the AUSF can report the results and generate the K. AUSF The AUSF instance, as the output of the primary authentication, results in Unified Data Management (UDM), as defined in 3GPP TS 33.501 v. 16.0.0.

[0009] · K AKMA Anchor key, which is obtained from K by the mobile device (ME) and AUSF. AUSF Exported and generated by AAnF for further key material used in AKMA; K AKMA Key identifier K AKMA The key, and also the derived value.

[0010] · K AF The AF-specific key (also known as the application key) is obtained from K by ME and AAnF. AKMA Exported and used by the UE and AKMA AF for secure data exchange.

[0011] Figure 3 The establishment of a secure session between the UE and the application is illustrated. As depicted, the prerequisites for establishing a communication session are master authentication and K. AKMA Identifier (K) AKMA The UE establishes its ID. Then, to initiate communication with the AKMA AF, the UE sends a session establishment request, which includes the derived K ID in the message. AKMA Then, AF provides at least K in the session establishment request. AKMA The ID and AF identifier are used to request an application-specific key from the AAnF. Further, the AAnF sends a request to the AUSF to obtain a UE-specific key. AKMA Then, AAnF from K AKMA Export K AF And respond to AKMA AF via a key response, the key response including K AF The expiration time (also known as KAF_exptime) and the freshness parameter used by AAnF to derive the freshness of KAF. AF AF in response message ( Figure 3 In the application session establishment response, KAF_exptime and freshness parameters are forwarded to the UE. Optionally, AF uses K... AFThe Message Authentication Code (MAC) is calculated to protect the integrity of the response. The UE receives this response and uses the freshness parameter and other parameters commonly used in AAnF to derive the same K as in AAnF. AF (and the same K provided to AF) AF If the response message includes a MAC address, then it uses the newly derived K. AF To verify the integrity of the response message.

[0012] Then, based on K AF Establish secure communication between the UE and the application.

[0013] Prior to initiating standardization work, AKMA was examined in 3GPP TR 33.835 v. 16.0.0, which recommended using the ideas of implicit bootstrapping solutions #15, #19, and #23 as the basis for the AKMA certification process. Specifically, it recommended reusing (as described in the sub-options of solutions #19, #23, and #15) K AUSF As the basis for standardizing work.

[0014] Solution #15 in 3GPP TR 33.835 v. 16.0.0 also includes the following aspects as potential impacts on Unified Data Management (UDM):

[0015] - New parameters for tracking the AKMA key will be exported by AUSF;

[0016] - Potentially pass AKMA usage to AUSF and UE (unless it is statically configured).

[0017] Finally, the details regarding whether AKMA keys are generated on demand (when needed by AAnF) or pre-generated (just after each master authentication) are left to the specification work. This area is not yet covered in 3GPP TS 33.535 v.0.2.0.

[0018] Generic Boot Architecture (GBA)

[0019] The GBA was introduced in 3GPP TS 33.220 v. 16.0.0 to guide authentication and key protocols for application security, such as enabling application functions in the network and establishing shared keys on the user side.

[0020] Figure 4 A simple network model for the GBA is shown.

[0021] Mutual authentication is performed between the UE and the BSF. Therefore, boot key material is exported between the UE and the BSF. Furthermore, the BSF generates a boot transaction identifier (B-TID). The B-TID provides a reference to the boot transaction and its exported GBA key material. The booted GBA key material is further used to protect the UE's access to Network Application Functions (NAF).

[0022] When the UE initiates communication with an application function, it includes the B-TID in the message. The application function then requests an application-specific key from the BSF, using the B-TID as input. Further, the BSF locates the GBA key material corresponding to the B-TID, derives the AF-specific key from it, and responds to the AF.

[0023] Then, secure communication is enabled between the UE and the application based on the AF-specific key.

[0024] UE parameter update via UDM control plane process

[0025] UE parameter update via UDM control plane procedure (referred to as UPU in this document for brevity) is a feature introduced in 3GPPTS 23.502 v. 16.2.0 to support the delivery of UE parameter update data from UDM to UE via NAS signaling after the UE has been successfully registered to the 5G network.

[0026] UDM update data delivered from the UDM to the UE may include:

[0027] - One or more UE parameters, including:

[0028] - Updated default NSSAI configuration (the end user of this parameter is ME).

[0029] - Updated routing indicator data (the end user of this parameter is the Universal User Identification Module (USIM)).

[0030] - "Request UE confirmation" instruction.

[0031] - "Request re-registration" instruction.

[0032] Figure 5 The UPU procedure, as disclosed in 3GPP TS 23.502 v. 16.2.0, is shown. Note that another function called “Steering for Roaming Security Mechanisms” is defined in 3GPP TS 33.501 v. 16.2.0 to support similar information delivery from the HPLMN to the UE (i.e., Steering Information List).

[0033] There are some issues. For example, as mentioned above, AKMA is an implicit bootstrapping mechanism for security between the UE and the network. More precisely, it reuses the results of the 5G master authentication process performed during UE registration to generate key material for the AKMA process. This implies that the AKMA process generates new AKMA key material for each master authentication process, even if the UE or AF does not require AKMA functionality. On the other hand, recalling GBA, key material is generated only on demand, i.e., based on requests from the UE or AF. Therefore, the key material generation process in AKMA is inefficient when compared to how it is done in GBA. This is a waste of resources. For example, it may be a waste of computing and storage resources in the UE and network. This may be especially true for UEs that are not allowed or do not need to use AKMA. Summary of the Invention

[0034] Certain aspects of this disclosure and its embodiments may provide solutions to these or other challenges. For example, according to certain embodiments, methods and systems are provided that include using contractual data to control AKMA key generation. More specifically, certain embodiments may optimize the generation of AKMA key material in the AUSF and UE only when authorized by contractual information in the UDM and / or only when it is needed (such as, for example, on demand). Thus, certain embodiments may avoid unnecessary key material generation for implicit AKMA bootstrapping.

[0035] According to some embodiments, a method by a network node operating as a UDM node includes: receiving a first message associated with an authentication request message from a wireless device; generating a second message including an authentication response message based on subscription information associated with the wireless device; the second message including an AKMA key indicator to trigger the wireless device to generate AKMA key material; and the network node sending the second message including the authentication response message to trigger the wireless device to generate AKMA key material.

[0036] According to some embodiments, a method performed by a first network node operating as an AUSF includes: determining whether a second message received from a second network node includes an AKMA key indicator. Based on whether the second message includes the AKMA indicator, the first network node determines whether to generate AKMA key material.

[0037] According to some embodiments, a method performed by a wireless device includes: in response to determining that a communication session with an AF needs to be initiated, generating an application authentication and key management anchor key (K). AKMA The wireless device sends a request to the AF to initiate a communication session.

[0038] According to some embodiments, a network node operating as a UDM node includes processing circuitry configured to receive a first message associated with an authentication request message from a wireless device. Based on subscription information associated with the wireless device, the processing circuitry is configured to generate a second message including an authentication response message. The second message includes an AKMA key indicator to trigger the wireless device to generate AKMA key material. The processing circuitry is configured to send the second message including the authentication response message to trigger the wireless device to generate AKMA key material.

[0039] According to some embodiments, a first network node operating as an AUSF includes processing circuitry configured to determine whether a second message received from a second network node includes an AKMA key indicator. The processing circuitry is configured to determine whether to generate AKMA key material based on whether the second message includes the AKMA indicator.

[0040] According to some embodiments, a wireless device includes processing circuitry configured to generate K in response to determining that a communication session with AF needs to be initiated. AKMA The processing circuitry is configured to send a request to the AF to initiate a communication session.

[0041] Certain embodiments may provide one or more of the following technical advantages. For example, one technical advantage may be that certain embodiments enable flexible settings for AKMA key material generation. As another example, another technical advantage may be that certain embodiments avoid unnecessary AKMA key generation. As yet another example, a technical advantage may be that certain embodiments provide means for handling upgraded UEs (such as, for example, UEs that support AKMA functionality) and legacy UEs.

[0042] Other advantages will be apparent to those skilled in the art. Some embodiments may lack, have some, or all of the advantages described. Attached Figure Description

[0043] To gain a more complete understanding of the disclosed embodiments and their features and advantages, reference is now made to the following description in conjunction with the accompanying drawings, wherein:

[0044] Figure 1 This illustrates a typical network architecture used for Application Authentication and Key Management (AKMA);

[0045] Figure 2 This illustrates the AKMA key hierarchy.

[0046] Figure 3 This demonstrates the establishment of a secure session between the user equipment (UE) and the application.

[0047] Figure 4 Showing the use of General Bootstrap ArchitectureA simple network model of (GBA);

[0048] Figure 5 The Unified Data Management Control Plane (UPU) procedure is shown.

[0049] Figure 6 This illustrates AKMA key material generated based on contract information according to certain embodiments;

[0050] Figure 7 This illustrates key materials generated on demand according to certain embodiments;

[0051] Figure 8 An example wireless network according to certain embodiments is shown;

[0052] Figure 9 Example network nodes are shown according to certain embodiments;

[0053] Figure 10 An example wireless device according to certain embodiments is shown;

[0054] Figure 11 An example user equipment according to certain embodiments is shown;

[0055] Figure 12 A virtualized environment is shown, illustrating a functionality implemented in some embodiments of a certain embodiment that can be virtualized;

[0056] Figure 13 A telecommunications network is shown, according to certain embodiments, connected to a host computer via an intermediate network;

[0057] Figure 14 A generalized block diagram is shown, illustrating communication between a host computer and a user equipment via a base station through a partial wireless connection according to certain embodiments;

[0058] Figure 15 This illustrates a method implemented in a communication system according to one embodiment;

[0059] Figure 16 Another method implemented in a communication system according to one embodiment is shown;

[0060] Figure 17 Another method implemented in a communication system according to one embodiment is shown;

[0061] Figure 18 Another method implemented in a communication system according to one embodiment is shown;

[0062] Figure 19 Example methods performed by a wireless device according to certain embodiments are shown;

[0063] Figure 20An exemplary virtual computing device is shown according to certain embodiments;

[0064] Figure 21 Example methods performed by network nodes according to certain embodiments are shown;

[0065] Figure 22 Another exemplary virtual computing device is shown according to certain embodiments;

[0066] Figure 23 This illustrates another example method performed by a network node according to certain embodiments;

[0067] Figure 24 Another exemplary virtual computing device is shown according to certain embodiments;

[0068] Figure 25 This illustrates another example method performed by a network node according to certain embodiments;

[0069] Figure 26 Another exemplary virtual computing device is shown according to certain embodiments;

[0070] Figure 27 This illustrates another example method performed by a network node according to certain embodiments; and

[0071] Figure 28 Another exemplary virtual computing device is shown according to certain embodiments. Detailed Implementation

[0072] Some embodiments contemplated herein will now be described more fully with reference to the accompanying drawings. However, other embodiments are included within the scope of the subject matter disclosed herein, and the disclosed subject matter should not be construed as limited to the embodiments set forth herein; rather, these embodiments are provided merely as examples to convey the scope of the subject matter to those skilled in the art.

[0073] Generally, all terms used herein will be interpreted according to their common meaning in the relevant art, unless a different meaning is explicitly given and / or implied in the context of their use. Unless otherwise expressly stated, all references to elements, devices, components, methods, steps, etc., will be openly interpreted as referring to at least one instance of that element, device, component, method, step, etc. The steps of any method disclosed herein are not necessarily to be performed in the exact order disclosed, unless a step is explicitly described as occurring after or before another step and / or it is implied that a step must occur after or before another step. Any feature of any embodiment disclosed herein may be applied to any other embodiment, where appropriate. Similarly, any advantage of any embodiment may be applied to any other embodiment, and vice versa. Other objects, features, and advantages of the disclosed embodiments will be apparent from the following description.

[0074] In some embodiments, the more general term “network node” may be used, and “network node” may correspond to any type of radio network node or any network node that communicates with the UE (directly or via another node) and / or with another network node. Examples of network nodes include Node B, primary eNodeB (MeNB), eNodeB (eNB), network nodes belonging to the primary cell group (MCG) or secondary cell group (SCG), base station (BS), multi-standard radio (MSR) radio nodes (such as MSRBS), gNodeB (gNB), network controller, radio network controller (RNC), base station controller (BSC), relay, donor node of control relay, base transceiver station (BTS), access point (AP), transmission point, transmission node, remote radio unit (RRU), remote radio head (RRH), nodes in distributed antenna system (DAS), core network nodes (e.g., mobile switching center (MSC), mobility management entity (MME), etc.), operation and maintenance (O&M), operations support system (OSS), self-optimizing network (SON), location nodes (e.g., evolved servicing mobile location center (E-SMLC)), minimized drive test (MDT), test equipment (physical node or software), etc.

[0075] In some embodiments, the terms User Equipment (UE) or Wireless Device may be used without limitation, and a User Equipment (UE) or Wireless Device may refer to any type of wireless device that communicates with a network node and / or another UE in a cellular or mobile communication system. Examples of UEs are target devices, device-to-device (D2D) UEs, machine-type UEs or UEs capable of machine-to-machine (M2M) communication, PDAs, PADs, tablets, mobile terminals, smartphones, LEEs (Laptop embedded devices), LMEs (Laptop installed devices), USB dongles, UE class M1, UE class M2, ProSe UEs, V2V UEs, V2X UEs, etc.

[0076] Furthermore, terms such as base station / gNodeB and UE should be considered non-restrictive and, in particular, do not imply any hierarchical relationship between the two; generally, "gNodeB" can be considered device 1, "UE" can be considered device 2, and the two devices communicate with each other via some radio channel. In the following, the transmitter or receiver can be either a gNB or a UE.

[0077] According to certain embodiments, methods and systems are provided that include using contractual data to control AKMA key generation. More specifically, certain embodiments can optimize the generation of AKMA key material in the AUSF and UE only when authorized by contractual information in the UDM and / or only when it is needed (such as, for example, on demand). Thus, certain embodiments can avoid unnecessary key material generation for implicit AKMA bootstrapping.

[0078] Generate AKMA key material based on contract information.

[0079] Figure 6 Signaling diagram 50 for generating AKMA key material based on contract information, according to certain embodiments, is shown. In the depicted example, the steps for generating AKMA key material based on contract information may include the following:

[0080] 0. The mobile network operator (MNO) sets the AKMA key material generation flag in the UE's subscription data, for example, by using an operation and management (O&M) system;

[0081] Alternatively, this flag can be provided by a third-party AF via the existing Nudm_ParameterProvision service.

[0082] UDM determines this flag in the updated UE based on the MNO policy, for example, via an existing UPU process or other similar process (e.g., as part of NAS signaling during the primary authentication exchange, as proposed in steps 6-7).

[0083] The default or configuration value of this flag exists in the UE and the UDM's subscription data if it is not updated using the methods mentioned above.

[0084] 1-3. The UE initiates the authentication process with the network, as defined in 3GPP TS 33.501 v. 16.0.0.

[0085] 4. Once a request for an authentication vector is received, such as Nudm_UEAuthentication_Get, the UDM prepares the authentication vector as defined in 3GPP TS 33.501 v. 16.0.0.

[0086] At the same time, based on the signing data of the AKMA key material generation flag, UDM determines whether AKMA key material needs to be generated.

[0087] 5. The UDM returns the authentication vector via the Nudm_UEAuthentication_Get response, along with the AKMA key indication included in the message.

[0088] 6-7. Authentication and AS / NAS security procedures are performed as defined in 3GPP TS 33.501 v. 16.0.0.

[0089] AUSF may optionally be included in the AKMA indicator carried during the authentication signaling process with the UE.

[0090] The UE generates key material for the authentication process. Simultaneously, based on the AKMA key material generation flag stored in the UE (or received via the authentication process), the UE generates key material for AKMA, such as K... AKMA K AKMA ID.

[0091] 8-9. AUSF receives the authentication result and calls the existing service operation Nudm_UEAuthentication_ResultConfirmation to notify UDM of the authentication result.

[0092] Based on the AKMA key material generation flags stored in AUSF and / or received from UDM, AUSF generates key material for AKMA, such as K AKMA K AKMA ID.

[0093] Then, both the UE and AUSF generate key material for AKMA and implement it implicitly.

[0094] Generate AKMA key materials on demand

[0095] According to certain other embodiments, the management of AKMA support indications can be implemented dynamically or on demand. For example, the network (including the AF and core units such as, for example, UDM and AUSF) does not need to be provided with this UE-specific information in advance. According to some embodiments, this may be because the fact that the UE supports AKMA functionality can be inferred from the UE initiating an AKMA procedure to the AF. UEs that do not support AKMA will not initiate any such procedure.

[0096] Figure 7 Signaling diagram 60 for on-demand generation of key material is shown according to some embodiments. Some steps may be similar to... Figure 6 The steps are shown in the figure.

[0097] As depicted, according to certain embodiments, the UE and AUSF may not pre-generate AKMA key material after the main authentication process (step 2). Instead, the UE generates the AKMA key on demand before the application session with the AF is established, requiring the AKMA key. AKMA and K AKMA ID (Step 4).

[0098] UE will use the generated K AKMA The ID requests session establishment from the AF (step 5). Then, the AF will send a request for the AF key to the AAnF (step 6), and the AAnF will then send a request for the corresponding AKMA key to the AUSF (step 7).

[0099] Upon receiving an AKMA key request, AUSF generates the corresponding key as needed. AKMA (Step 8).

[0100] According to some embodiments, in this scenario, AAnF and AUSF may require additional information such as, for example, the UE ID to select the AUSF and generate AKMA key material for a specific UE. Those skilled in the art will recognize that different types of UE IDs, SUPI / SUCI or GPSI, and / or other types of additional information can be provided by the UE to assist in this process.

[0101] Generate K on demand AKMA The AKMA process is then completed in steps 9-10, which is similar to that disclosed above.

[0102] According to certain embodiments, regarding Figure 7 The described on-demand method can be related to the above regarding Figure 6 The generation phase combination of AKMA key materials based on the contract information is described. For example, when AAnF is in Figure 7When requesting the AKMA key from the AUSF at step 7, the UDM can determine and / or authorize whether the UE is allowed to use the AKMA service. This can be done via a query from the AUSF or directly from the AAnF to the UDM.

[0103] According to some embodiments, AF / NEF can trigger the UDM parameter supply process in step 0a, including an indication that the UE supports AKMA. In this case, it can be skipped. Figure 6 Step 0c in the above. Alternatively, the AF / NEF may not provide any additional instructions; however, upon receiving a key request from the AF, these instructions may be used by the ANF. Figure 6 The same process as step 0a is set in the UDM. In yet another specific embodiment, AAnF may not set an indicator, but AUSF may set an indicator.

[0104] Figure 8 Wireless networks according to some embodiments are illustrated. While the subject matter described herein can be implemented in any suitable type of system using any suitable components, the embodiments disclosed herein are relative to wireless networks (such as...). Figure 8 The example wireless network shown is used for description. For simplicity, Figure 8 The wireless network depicted only includes network 106, network nodes 160 and 160b, and wireless devices 110, 110b, and 110c. In practice, the wireless network may also include any additional elements suitable for supporting communication between wireless devices or between a wireless device and another communication device (such as a landline telephone, service provider, or any other network node or terminal device). Among the components shown, network node 160 and wireless device 110 are shown in additional detail. The wireless network can provide communication and other types of services to one or more wireless devices to facilitate wireless device access to the wireless network and / or use of services provided by or via the wireless network.

[0105] Wireless networks may include or interface with any type of communications, telecommunications, data, cellular, and / or radio network or other similar system. In some embodiments, a wireless network may be configured to operate according to a specific standard or other type of predefined rules or procedures. Thus, specific embodiments of a wireless network may implement communication standards such as Global System for Mobile Communications (GSM), Universal Mobile Telecommunications System (UMTS), Long Term Evolution (LTE), and / or other suitable 2G, 3G, 4G, or 5G standards; wireless local area network (WLAN) standards such as the IEEE 802.11 standard; and / or any other suitable wireless communication standards such as WiMax, Bluetooth, Z-Wave, and / or ZigBee standards.

[0106] Network 106 may include one or more backhaul networks, core networks, IP networks, public switched telephone networks (PSTN), packet data networks, optical networks, wide area networks (WAN), local area networks (LAN), wireless local area networks (WLAN), wired networks, wireless networks, metropolitan area networks, and other networks that enable communication between devices.

[0107] Network node 160 and wireless device 110 include various components described in more detail below. These components work together to provide network node and / or wireless device functionality, such as providing wireless connectivity in a wireless network. In various embodiments, the wireless network may include any number of wired or wireless networks, network nodes, base stations, controllers, wireless devices, relay stations, and / or any other components or systems that may facilitate or participate in communication of data and / or signals via wired or wireless connections.

[0108] Figure 9An example network node 160 according to certain embodiments is shown. As used herein, a network node refers to a device that is capable of, configured, arranged, and / or operable to communicate directly or indirectly with wireless devices and / or with other network nodes or devices in a wireless network to enable and / or provide wireless access to wireless devices and / or perform other functions (e.g., management) in a wireless network. Examples of network nodes include, but are not limited to, access points (APs) (e.g., radio access points), base stations (BSs) (e.g., radio base stations, Node Bs, evolved Node Bs (eNBs), and new radio (NR) Node Bs (gNBs)). Base stations can be classified based on the coverage they provide (or, in other words, their transmit power levels) and may also be referred to as femtobases, picobases, microbases, or macrobases. A base station can be a relay node or a relay donor node that controls a relay. A network node may also include one or more (or all) portions of a distributed radio base station, such as a centralized digital unit and / or a remote radio unit (RRU), sometimes referred to as a remote radio head (RRH). Such a remote radio unit may or may not be integrated with an antenna as an antenna-integrated radio. A portion of a distributed radio base station can also be referred to as a node in a distributed antenna system (DAS). Further examples of network nodes include multi-standard radio (MSR) equipment (such as an MSR BS), network controllers (such as a radio network controller (RNC) or base station controller (BSC)), base transceiver stations (BTS), transport points, transport nodes, multi-cell / multicast coordination entities (MCEs), core network nodes (e.g., MSCs, mobility management entities (MMEs)), O&M nodes, OSS nodes, SON nodes, location nodes (e.g., E-SMLCs), and / or MDTs. As another example, a network node can be a virtual network node, as described in more detail below. However, more generally, a network node can represent any suitable device (or group of devices) capable of, configured, deployed, and / or operable to enable and / or provide access to a wireless network to wireless devices or to provide some service to wireless devices already connected to the wireless network.

[0109] exist Figure 9 In the network node 160, processing circuitry 170, device-readable medium 180, interface 190, auxiliary equipment 184, power supply 186, power circuitry 187, and antenna 162 are included. Although in Figure 9The network node 160 shown in the example wireless network can represent a device including the illustrated combination of hardware components; however, other embodiments may include network nodes with different combinations of components. It should be understood that a network node includes any suitable combination of hardware and / or software required to perform the tasks, features, functions, and methods disclosed herein. Furthermore, while the components of network node 160 are depicted as single boxes located within larger boxes or nested within multiple boxes, in practice, a network node may include multiple different physical components that make up a single illustrated component (e.g., device-readable medium 180 may include multiple separate hard disk drives and multiple RAM modules).

[0110] Similarly, network node 160 may include multiple physically separate components (e.g., node B components and RNC components, or BTS components and BSC components, etc.), each of which may have its own corresponding components. In some scenarios where network node 160 includes multiple separate components (e.g., BTS and BSC components), one or more separate components may be shared among several network nodes. For example, a single RNC may control multiple node Bs. In such scenarios, each unique node B and RNC pair may be considered a single, separate network node in some instances. In some embodiments, network node 160 may be configured to support multiple radio access technologies (RATs). In such embodiments, some components may be duplicated (e.g., separate device-readable media 180 for different RATs), and some components may be reused (e.g., the same antenna 162 may be shared by RATs). Network node 160 may also include multiple sets of illustrated components for various wireless technologies integrated into network node 160, such as, for example, GSM, Wideband Code Division Multiple Access (WCDMA), LTE, NR, WiFi, or Bluetooth wireless technologies. These wireless technologies can be integrated into the same or different chips or chip sets within network node 160.

[0111] Processing circuitry 170 is configured to perform any determination, calculation, or similar operation (e.g., certain acquisition operations) described herein as being provided by a network node. These operations performed by processing circuitry 170 may include processing information acquired by processing circuitry 170 (e.g., by converting the acquired information into other information, comparing the acquired or converted information with information stored in the network node, and / or performing one or more operations based on the acquired or converted information), and making a determination as a result of said processing.

[0112] Processing circuitry 170 may include one or more of the following: a microprocessor, a controller, a central processing unit, a digital signal processor, an application-specific integrated circuit, a field-programmable gate array, or any other suitable computing device or resource; or it may include a combination of hardware, software, and / or coded logic operable to provide network node 160 functionality, alone or in combination with other network node 160 components, such as device-readable medium 180. For example, processing circuitry 170 may execute instructions stored in device-readable medium 180 or in memory within processing circuitry 170. Such functionality may include providing any of the various wireless features, functions, or benefits discussed herein. In some embodiments, processing circuitry 170 may include a system-on-a-chip (SoC).

[0113] In some embodiments, processing circuitry 170 may include one or more of radio frequency (RF) transceiver circuitry 172 and baseband processing circuitry 174. In some embodiments, RF transceiver circuitry 172 and baseband processing circuitry 174 may be on separate chips (or chipsets), boards, or units (such as radio units and digital units). In other alternative embodiments, some or all of RF transceiver circuitry 172 and baseband processing circuitry 174 may be on the same chip or chipset, board, or unit.

[0114] In some embodiments, some or all of the functions described herein as provided by a network node, base station, eNB, or other such network device may be performed by processing circuitry 170 executing instructions stored in memory within device-readable medium 180 or processing circuitry 170. In alternative embodiments, some or all of the functions may be provided by processing circuitry 170 without executing instructions stored on a separate or independent device-readable medium, such as in a hard-wired manner. In any of those embodiments, processing circuitry 170 may be configured to perform the described functions regardless of whether instructions stored on a device-readable storage medium are executed. The benefits provided by such functions are not limited solely to processing circuitry 170 or other components of network node 160, but are enjoyed by network node 160 as a whole and / or generally by end users and the wireless network.

[0115] Device-readable medium 180 may include any form of volatile or non-volatile computer-readable memory, including but not limited to persistent storage devices, solid-state memory, remotely mounted memory, magnetic media, optical media, random access memory (RAM), read-only memory (ROM), mass storage media (e.g., hard disk), removable storage media (e.g., flash drives, optical discs (CDs), or digital video discs (DVDs)), and / or any other volatile or non-volatile non-transitory device-readable memory device and / or computer-executable memory device that stores information, data, and / or instructions usable by processing circuitry 170. Device-readable medium 180 may store any suitable instructions, data, or information, including computer programs, software, applications including one or more of logic, rules, code, tables, etc., and / or other instructions executable by processing circuitry 170 and utilized by network node 160. Device-readable medium 180 may be used to store any calculations performed by processing circuitry 170 and / or any data received via interface 190. In some embodiments, processing circuitry 170 and device-readable medium 180 may be considered integrated.

[0116] Interface 190 is used in wired or wireless communication of signaling and / or data between network node 160, network 106, and / or wireless device 110. As shown, interface 190 includes, for example, one or more ports / terminals 194 for sending and receiving data to and from network 106 via a wired connection. Interface 190 also includes radio front-end circuitry 192, which may be coupled to antenna 162 or, in some embodiments, is part of antenna 162. Radio front-end circuitry 192 includes filter 198 and amplifier 196. Radio front-end circuitry 192 may be connected to antenna 162 and processing circuitry 170. Radio front-end circuitry 192 may be configured to modulate the signal transmitted between antenna 162 and processing circuitry 170. Radio front-end circuitry 192 may receive digital data to be transmitted to other network nodes or wireless devices via a wireless connection. Radio front-end circuitry 192 may use a combination of filter 198 and / or amplifier 196 to convert digital data into radio signals with appropriate channel and bandwidth parameters. The radio signals can then be transmitted via antenna 162. Similarly, when receiving data, antenna 162 can collect radio signals, which are then converted into digital data by radio front-end circuitry 192. The digital data can then be passed to processing circuitry 170. In other embodiments, the interface may include different components and / or different combinations of components.

[0117] In some alternative embodiments, network node 160 may not include a separate radio front-end circuitry 192. Instead, processing circuitry 170 may include radio front-end circuitry and be connectable to antenna 162 without a separate radio front-end circuitry 192. Similarly, in some embodiments, all or part of RF transceiver circuitry 172 may be considered part of interface 190. In other embodiments, interface 190 may include one or more ports or terminals 194, radio front-end circuitry 192, and RF transceiver circuitry 172 as part of a radio unit (not shown), and interface 190 may communicate with baseband processing circuitry 174, which is part of a digital unit (not shown).

[0118] Antenna 162 may include one or more antennas or an antenna array configured to transmit and / or receive wireless signals. Antenna 162 may be coupled to radio front-end circuitry 192 and may be any type of antenna capable of wirelessly transmitting and receiving data and / or signals. In some embodiments, antenna 162 may include one or more omnidirectional, sector, or planar antennas operable to transmit / receive radio signals, for example, between 2 GHz and 66 GHz. Omnidirectional antennas can be used to transmit / receive radio signals in any direction, sector antennas can be used to transmit / receive radio signals from devices within a specific area, and planar antennas can be line-of-sight antennas for transmitting / receiving radio signals along a relatively straight line. In some instances, the use of more than one antenna may be referred to as MIMO. In some embodiments, antenna 162 may be detachable from network node 160 and may be connected to network node 160 via an interface or port.

[0119] Antenna 162, interface 190, and / or processing circuitry 170 can be configured to perform any receive operation and / or certain acquisition operation described herein as being performed by a network node. Any information, data, and / or signals can be received from a wireless device, another network node, and / or any other network device. Similarly, antenna 162, interface 190, and / or processing circuitry 170 can be configured to perform any transmit operation described herein as being performed by a network node. Any information, data, and / or signals can be transmitted to a wireless device, another network node, and / or any other network device.

[0120] Power supply circuit 187 may include or be coupled to power management circuitry and is configured to supply power to components of network node 160 for performing the functions described herein. Power supply circuit 187 may receive power from power source 186. Power source 186 and / or power supply circuit 187 may be configured to supply power to various components of network node 160 in a manner suitable for the respective components (e.g., at the voltage and current levels required by each respective component). Power source 186 may be included in power supply circuit 187 and / or network node 160, or may be external to power supply circuit 187 and / or network node 160. For example, network node 160 may be connected to an external power source (e.g., an electrical outlet) via input circuitry or an interface (such as a cable), whereby the external power source supplies power to power supply circuit 187. As another example, power source 186 may include a power source in the form of a battery or battery pack, which is connected to or integrated into power supply circuit 187. The battery can provide backup power in the event of an external power failure. Other types of power sources, such as photovoltaic devices, may also be used.

[0121] Alternative embodiments of network node 160 may include, in addition to Figure 9 Additional components, other than those shown, may be responsible for providing certain aspects of the functionality of the network node (including any of the functions described herein and / or any functionality required to support the subject matter described herein). For example, network node 160 may include a user interface device that allows information to be input into and output from network node 160. This can allow users to perform diagnostic, maintenance, repair, and other management functions for network node 160.

[0122] Figure 10An example wireless device 110 according to certain embodiments is illustrated. As used herein, a wireless device means a device capable of, configured, arranged, and / or operable to communicate wirelessly with network nodes and / or other wireless devices. Unless otherwise stated, the term wireless device may be used interchangeably with user equipment (UE) herein. Wireless communication may involve transmitting and / or receiving wireless signals using electromagnetic waves, radio waves, infrared waves, and / or other types of signals suitable for transmitting information through the air. In some embodiments, a wireless device may be configured to transmit and / or receive information without direct human interaction. For example, a wireless device may be designed to transmit information to the network according to a predetermined schedule when triggered by an internal or external event or in response to a request from the network. Examples of wireless devices include, but are not limited to, smartphones, mobile phones, cellular phones, Voice over IP (VoIP) phones, wireless local loop phones, desktop computers, personal digital assistants (PDAs), wireless cameras, game consoles or devices, music storage devices, playback devices, wearable terminal devices, wireless endpoints, mobile stations, tablets, laptops, laptop embedded devices (LEEs), laptop-mounted devices (LMEs), smart devices, wireless client terminal equipment (CPEs), and in-vehicle wireless terminal equipment. Wireless devices can support device-to-device (D2D) communication, for example, by implementing 3GPP standards for secondary link communication, vehicle-to-vehicle (V2V), vehicle-to-infrastructure (V2I), and vehicle-to-everything (V2X), and in this case, can be referred to as D2D communication devices. As another specific example, in the Internet of Things (IoT) scenario, a wireless device can represent a machine or other device that performs monitoring and / or measurement and sends the results of such monitoring and / or measurement to another wireless device and / or network node. In this case, the wireless device can be a machine-to-machine (M2M) device, which can be referred to as an MTC device in the 3GPP context. As a specific example, a wireless device can be a UE implementing the 3GPP Narrowband Internet of Things (NB-IoT) standard. Specific examples of such machines or devices are sensors, metering devices (such as power meters), industrial machinery, or home or personal appliances (e.g., refrigerators, televisions, etc.), and personal wearable devices (e.g., watches, fitness trackers, etc.). In other scenarios, a wireless device can refer to a vehicle-mounted or other device capable of monitoring and / or reporting its operational status or other functions associated with its operation. A wireless device as described above can refer to an endpoint of a wireless connection; in this case, the device can be referred to as a wireless terminal. Furthermore, a wireless device as described above can be mobile; in this case, the wireless device can also be referred to as a mobile device or mobile terminal.

[0123] As shown in the figure, wireless device 110 includes an antenna 111, an interface 114, processing circuitry 120, a device-readable medium 130, a user interface device 132, auxiliary devices 134, a power supply 136, and a power circuit 137. Wireless device 110 may include multiple sets of components supporting one or more of the different wireless technologies supported by wireless device 110, such as, for example, GSM, WCDMA, LTE, NR, WiFi, WiMAX, or Bluetooth wireless technologies, to name just a few. These wireless technologies may be integrated into the same or different chips or chipsets within wireless device 110.

[0124] Antenna 111 may include one or more antennas or an antenna array, configured to transmit and / or receive wireless signals, and connected to interface 114. In some alternative embodiments, antenna 111 may be detachable from wireless device 110 and may be connected to wireless device 110 via an interface or port. Antenna 111, interface 114, and / or processing circuitry 120 may be configured to perform any receive or transmit operations described herein as performed by a wireless device. Any information, data, and / or signals may be received from a network node and / or another wireless device. In some embodiments, radio front-end circuitry and / or antenna 111 may be considered as an interface.

[0125] As shown, interface 114 includes radio front-end circuitry 112 and antenna 111. Radio front-end circuitry 112 includes one or more filters 118 and amplifiers 116. Radio front-end circuitry 112 is connected to antenna 111 and processing circuitry 120 and is configured to modulate the signal transmitted between antenna 111 and processing circuitry 120. Radio front-end circuitry 112 may be coupled to antenna 111 or a portion thereof. In some embodiments, wireless device 110 may not include a separate radio front-end circuitry 112; instead, processing circuitry 120 may include radio front-end circuitry and may be connected to antenna 111. Similarly, in some embodiments, some or all of RF transceiver circuitry 122 may be considered part of interface 114. Radio front-end circuitry 112 can receive digital data to be transmitted via a wireless connection to other network nodes or wireless devices. Radio front-end circuitry 112 may use a combination of filters 118 and / or amplifiers 116 to convert the digital data into radio signals with appropriate channel and bandwidth parameters. The radio signals may then be transmitted via antenna 111. Similarly, when receiving data, antenna 111 can collect radio signals, which are then converted into digital data by radio front-end circuitry 112. The digital data can then be passed to processing circuitry 120. In other embodiments, the interface may include different components and / or different combinations of components.

[0126] Processing circuitry 120 may include one or more of the following: a microprocessor, a controller, a central processing unit, a digital signal processor, an application-specific integrated circuit, a field-programmable gate array, or any other suitable computing device or resource; or it may include a combination of hardware, software, and / or coded logic operable to provide the functionality of wireless device 110, alone or in combination with other components of wireless device 110, such as device-readable medium 130. Such functionality may include providing any of the various wireless features or benefits discussed herein. For example, processing circuitry 120 may execute instructions stored in device-readable medium 130 or in memory within processing circuitry 120 to provide the functionality disclosed herein.

[0127] As shown in the figure, the processing circuit 120 includes one or more of an RF transceiver circuit 122, a baseband processing circuit 124, and an application processing circuit 126. In other embodiments, the processing circuit may include different components and / or different combinations of components. In some embodiments, the processing circuit 120 of the wireless device 110 may include a System-on-a-Chip (SoC). In some embodiments, the RF transceiver circuit 122, the baseband processing circuit 124, and the application processing circuit 126 may be on a separate chip or chipset. In alternative embodiments, a portion or all of the baseband processing circuit 124 and the application processing circuit 126 may be combined into a single chip or chipset, and the RF transceiver circuit 122 may be on a separate chip or chipset. In other alternative embodiments, a portion or all of the RF transceiver circuit 122 and the baseband processing circuit 124 may be on the same chip or chipset, and the application processing circuit 126 may be on a separate chip or chipset. In other alternative embodiments, a portion or all of the RF transceiver circuit 122, the baseband processing circuit 124, and the application processing circuit 126 may be combined into a single chip or chipset. In some embodiments, the RF transceiver circuit 122 may be part of the interface 114. The RF transceiver circuit 122 may regulate the RF signals used for processing the circuit 120.

[0128] In some embodiments, some or all of the functions described herein as being performed by a wireless device may be provided by processing circuitry 120 executing instructions stored on device-readable medium 130, which in some embodiments may be a computer-readable storage medium. In alternative embodiments, some or all of the functions may be provided by processing circuitry 120 without executing instructions stored on a separate or independent device-readable storage medium, such as in a hard-wired manner. In any of those particular embodiments, processing circuitry 120 may be configured to perform the described functions regardless of whether instructions stored on a device-readable storage medium are executed. The benefits provided by such functions are not limited solely to processing circuitry 120 or other components of wireless device 110, but are enjoyed by wireless device 110 as a whole and / or generally by the end user and the wireless network.

[0129] Processing circuitry 120 may be configured to perform any determination, calculation, or similar operation (e.g., certain acquisition operations) described herein as being performed by a wireless device. Such operations performed by processing circuitry 120 may include processing information acquired by processing circuitry 120 (e.g., by converting the acquired information into other information, comparing the acquired or converted information with information stored by wireless device 110, and / or performing one or more operations based on the acquired or converted information), and making a determination as a result of the processing.

[0130] Device-readable medium 130 may be operable to store computer programs, software, applications including one or more of logic, rules, code, tables, etc., and / or other instructions executable by processing circuitry 120. Device-readable medium 130 may include computer memory (e.g., random access memory (RAM) or read-only memory (ROM)), mass storage media (e.g., hard disk), removable storage media (e.g., optical disc (CD) or digital video disc (DVD)), and / or any other volatile or non-volatile, non-transitory computer-readable and / or computer-executable memory device that stores information, data, and / or instructions that can be used by processing circuitry 120. In some embodiments, processing circuitry 120 and device-readable medium 130 may be considered integrated.

[0131] User interface device 132 can provide components that allow a human user to interact with wireless device 110. Such interaction can take many forms, such as visual, auditory, tactile, etc. User interface device 132 can be operable to produce output to a user and allow the user to provide input to wireless device 110. The type of interaction can vary depending on the type of user interface device 132 installed in wireless device 110. For example, if wireless device 110 is a smartphone, the interaction can be via a touchscreen; if wireless device 110 is a smart meter, the interaction can be via a screen providing usage (e.g., the number of gallons used) or a speaker providing an audible alarm (e.g., if smoke is detected). User interface device 132 may include input interfaces, devices and circuitry, and output interfaces, devices and circuitry. User interface device 132 is configured to allow information to be input into wireless device 110 and is connected to processing circuitry 120 to allow processing circuitry 120 to process the input information. User interface device 132 may include, for example, a microphone, proximity or other sensors, keys / buttons, a touch display, one or more cameras, a USB port, or other input circuitry. User interface device 132 is also configured to allow output of information from wireless device 110, and to allow processing circuitry 120 to output information from wireless device 110. User interface device 132 may include, for example, a speaker, display, vibration circuitry, USB port, headphone jack, or other output circuitry. Using one or more input and output interfaces, devices, and circuitry of user interface device 132, wireless device 110 can communicate with end users and / or wireless networks, allowing them to benefit from the functionality described herein.

[0132] The auxiliary device 134 is operable to provide more specific functions that may not typically be performed by a wireless device. This may include specialized sensors for measurements for various purposes, interfaces for additional types of communication (such as wired communication), etc. The inclusion and type of components of the auxiliary device 134 may vary depending on the embodiment and / or scenario.

[0133] In some embodiments, power source 136 may be in the form of a battery or battery pack. Other types of power sources may also be used, such as an external power source (e.g., an electrical outlet), a photovoltaic device, or a battery. Wireless device 110 may also include power circuitry 137 for supplying power from power source 136 to various parts of the wireless device that require power from power source 136 to perform any of the functions described or indicated herein. In some embodiments, power circuitry 137 may include power management circuitry. Power circuitry 137 may additionally or alternatively be operable to receive power from an external power source; in this case, wireless device 110 may be connected to an external power source (such as an electrical outlet) via input circuitry or an interface such as a power cable. In some embodiments, power circuitry 137 may also be operable to supply power from an external power source to power source 136. This may be used, for example, for charging power source 136. Power circuitry 137 may perform any formatting, conversion, or other modification on the power from power source 136 to produce power suitable for the respective components of the powered wireless device 110.

[0134] Figure 11 An embodiment of a UE according to the aspects described herein is illustrated. As used herein, a user equipment or UE may not necessarily have to be a user in the sense of a human user who owns and / or operates the associated equipment. Instead, a UE may represent a device intended for sale to a human user or operated by a human user but which may not or initially may not be associated with a particular human user (e.g., a smart sprinkler controller). Alternatively, a UE may represent a device not intended for sale to an end user or operated by an end user but which may be associated with or operated for the benefit of a user (e.g., a smart power meter). UE 2200 may be a UE identified by the 3rd Generation Partnership Project (3GPP), including NB-IoT UEs, Machine-Type Communication (MTC) UEs, and / or Enhanced MTC (eMTC) UEs. Figure 9 As shown, UE 200 is an example of a wireless device configured to communicate according to one or more communication standards (such as 3GPP's GSM, UMTS, LTE, and / or 5G standards) issued by the 3rd Generation Partnership Project (3GPP). As previously mentioned, the terms wireless device and UE can be used interchangeably. Therefore, although... Figure 11 This is for UEs, but the components discussed in this article also apply to wireless devices, and vice versa.

[0135] exist Figure 11In this embodiment, UE 200 includes processing circuitry 201 operatively coupled to an input / output interface 205, a radio frequency (RF) interface 209, a network connectivity interface 211, a memory 215 (including random access memory (RAM) 217, read-only memory (ROM) 219, and storage medium 221, etc.), a communication subsystem 231, a power supply 233, and / or any other component, or any combination thereof. Storage medium 221 includes an operating system 223, application programs 225, and data 227. In other embodiments, storage medium 221 may include other similar types of information. Some UEs may utilize... Figure 11 The components shown may be all or only a subset of the components. The degree of integration between components may vary depending on the UE. Furthermore, some UEs may contain multiple instances of components, such as multiple processors, memories, transceivers, transmitters, receivers, etc.

[0136] exist Figure 11 In this embodiment, processing circuitry 201 can be configured to process computer instructions and data. Processing circuitry 201 can be configured to implement any sequential state machine operable to execute machine instructions stored in memory as a machine-readable computer program, such as one or more hardware-implemented state machines (e.g., discrete logic, FPGA, ASIC, etc.); programmable logic along with appropriate firmware; one or more stored programs, a general-purpose processor, such as a microprocessor or digital signal processor (DSP), along with appropriate software; or any combination of the foregoing. For example, processing circuitry 201 may include two central processing units (CPUs). Data may be information in a form suitable for use by a computer.

[0137] In the depicted embodiments, the input / output interface 205 can be configured to provide a communication interface to an input device, an output device, or both. The UE 200 can be configured to use an output device via the input / output interface 205. The output device can use an interface port of the same type as the input device. For example, a USB port can be used to provide input to and output from the UE 200. The output device can be a speaker, sound card, video card, display, monitor, printer, actuator, transmitter, smart card, another output device, or any combination thereof. The UE 200 can be configured to use an input device via the input / output interface 205 to allow a user to capture information into the UE 200. The input device may include a touch-sensitive or presence-sensitive display, a camera (e.g., a digital camera, digital video camera, webcam, etc.), a microphone, a sensor, a mouse, a trackball, a steering wheel, a scroll wheel, a smart card, etc. A presence-sensitive display may include a capacitive or resistive touch sensor that senses input from the user. Sensors can be, for example, accelerometers, gyroscopes, tilt sensors, force sensors, magnetometers, optical sensors, proximity sensors, other similar sensors, or any combination thereof. Input devices can be, for example, accelerometers, magnetometers, digital cameras, microphones, and optical sensors.

[0138] exist Figure 11 In this configuration, RF interface 209 can be configured to provide a communication interface to RF components such as transmitters, receivers, and antennas. Network connectivity interface 211 can be configured to provide a communication interface to network 243a. Network 243a may encompass wired and / or wireless networks, such as local area networks (LANs), wide area networks (WANs), computer networks, wireless networks, telecommunications networks, another similar network, or any combination thereof. For example, network 243a may include a Wi-Fi network. Network connectivity interface 211 can be configured to include receiver and transmitter interfaces for communicating with one or more other devices over the communication network according to one or more communication protocols such as Ethernet, TCP / IP, SONET, ATM, etc. Network connectivity interface 211 can implement receiver and transmitter functions suitable for communication network links (e.g., optical, electrical, etc.). Transmitter and receiver functions may share circuit components, software, or firmware, or alternatively, may be implemented separately.

[0139] RAM 217 can be configured to interface to processing circuitry 201 via bus 202 to provide storage or cache of data or computer instructions during the execution of software programs (such as operating systems, application programs, and device drivers). ROM 219 can be configured to provide computer instructions or data to processing circuitry 201. For example, ROM 219 can be configured to store immutable low-level system code or data for basic system functions (such as basic input and output (I / O), booting, or receiving keystrokes from a keyboard stored in non-volatile memory). Storage medium 221 can be configured to include memory such as RAM, ROM, programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), disk, optical disk, floppy disk, hard disk, removable disk, or flash drive. In one example, storage medium 221 can be configured to include operating system 223, application program 225 (such as a web browser application, widget or accessory engine, or another application), and data file 227. Storage medium 221 can store any of a variety of different operating systems or combinations of operating systems for use by UE 200.

[0140] Storage medium 221 can be configured to include multiple physical drive units, such as a redundant array of independent disks (RAID), a floppy disk drive, flash memory, a USB flash drive, an external hard disk drive, a thumb drive, a pen drive, a key drive, a high-density digital universal optical disc (HD-DVD) drive, an internal hard disk drive, a Blu-ray disc drive, a holographic digital data storage (HDDS) disc drive, an external mini dual in-line memory module (DIMM), synchronous dynamic random access memory (SDRAM), external micro DIMM SDRAM, smart card memory (such as a user identity module or a removable user identity (SIM / RUIM) module), other memory, or any combination thereof. Storage medium 221 can allow UE 200 to access computer-executable instructions, applications, etc., stored on transient or non-transient storage media to unload or upload data. Articles of manufacture (such as articles utilizing communication systems) can be tangibly implemented in storage medium 221, which may include device-readable media.

[0141] exist Figure 11In this configuration, processing circuitry 201 can be configured to communicate with network 243b using communication subsystem 231. Networks 243a and 243b can be the same one or more networks or different one or more networks. Communication subsystem 231 can be configured to include one or more transceivers for communicating with network 243b. For example, communication subsystem 231 can be configured to include one or more remote transceivers for communicating wirelessly with another device (such as another wireless device, UE, or a base station of a radio access network (RAN)) according to one or more communication protocols (such as IEEE 802.11, CDMA, WCDMA, GSM, LTE, Universal Terrestrial Radio Access Network (UTRAN), WiMax, etc.). Each transceiver can include transmitter 233 and / or receiver 235, respectively implementing transmitter or receiver functions suitable for the RAN link (e.g., frequency allocation, etc.). Further, transmitter 233 and receiver 235 of each transceiver can share circuit components, software, or firmware, or alternatively can be implemented separately.

[0142] In the illustrated embodiment, the communication functions of the communication subsystem 231 may include data communication, voice communication, multimedia communication, short-range communication (such as Bluetooth, near-field communication), location-based communication (such as using a Global Positioning System (GPS) to determine location), another similar communication function, or any combination thereof. For example, the communication subsystem 231 may include cellular communication, Wi-Fi communication, Bluetooth communication, and GPS communication. Network 243a may encompass wired and / or wireless networks, such as a local area network (LAN), a wide area network (WAN), a computer network, a wireless network, a telecommunications network, another similar network, or any combination thereof. For example, network 243b may be a cellular network, a Wi-Fi network, and / or a near-field network. Power supply 213 may be configured to provide alternating current (AC) or direct current (DC) power to the components of the UE 200.

[0143] The features, benefits, and / or functions described herein may be implemented in one of the components of UE 200 or distributed across multiple components of UE 200. Further, the features, benefits, and / or functions described herein may be implemented in any combination of hardware, software, or firmware. In one example, communication subsystem 231 may be configured to include any of the components described herein. Further, processing circuitry 201 may be configured to communicate with any of such components via bus 202. In another example, any such component may be represented by program instructions stored in memory that, when executed by processing circuitry 201, perform the corresponding functions described herein. In another example, the functionality of any such component may be distributed between processing circuitry 201 and communication subsystem 231. In another example, the non-computationally intensive functions of any such component may be implemented in software or firmware, and the computationally intensive functions may be implemented in hardware.

[0144] Figure 12 This is a schematic block diagram illustrating a virtualized environment 300 that can virtualize functionality implemented by some embodiments. In this context, virtualization means creating virtual versions of apparatuses or devices that may include virtualized hardware platforms, storage devices, and network resources. As used herein, virtualization can be applied to nodes (e.g., virtualized base stations or virtualized radio access nodes) or devices (e.g., UEs, wireless devices, or any other type of communication device) or components thereof, and at least a portion of the functionality is implemented as an implementation of one or more virtual components (e.g., via one or more applications, components, functions, virtual machines, or containers executed on one or more physical processing nodes in one or more networks).

[0145] In some embodiments, some or all of the functionality described herein may be implemented as virtual components executed by one or more virtual machines implemented in one or more virtual environments 300 hosted in one or more hardware nodes 330. Further, in embodiments where the virtual node is not a radio access node or does not require a radio connection (e.g., a core network node), the network node may be fully virtualized.

[0146] The functionality may be implemented by one or more applications 320 (which may alternatively be referred to as software instances, virtual devices, network functions, virtual nodes, virtual network functions, etc.), which are operable to implement some of the features, functions, and / or benefits of the embodiments disclosed herein. Applications 320 run in a virtualization environment 300 that provides hardware 330 including processing circuitry 360 and memory 390. Memory 390 contains instructions 395 executable by the processing circuitry 360, thereby enabling application 320 to provide one or more of the features, benefits, and / or functions disclosed herein.

[0147] The virtualization environment 300 includes general-purpose or special-purpose network hardware devices 330, which include one or more processors or processing circuitry 360, which may be commercial off-the-shelf (COTS) processors, application-specific integrated circuits (ASICs), or any other type of processing circuitry including digital or analog hardware components or special-purpose processors. Each hardware device may include a memory 390-1, which may be a non-persistent memory for temporarily storing instructions 395 or software executed by the processing circuitry 360. Each hardware device may include one or more network interface controllers (NICs) 370 (also referred to as network interface cards), which include physical network interfaces 380. Each hardware device may also include a non-transitory persistent machine-readable storage medium 390-2 in which software 395 and / or instructions executable by the processing circuitry 360 are stored. Software 395 may include any type of software, including software for instantiating one or more virtualization layers 350 (also referred to as a hypervisor), software for executing virtual machine 340, and software that allows the execution of the functions, features, and / or benefits described in connection with some of the embodiments described herein.

[0148] Virtual machine 340 includes virtual processing, virtual memory, virtual networking or interfaces, and virtual storage, and can be run by a corresponding virtualization layer 350 or hypervisor. Different embodiments of instances of virtual device 320 may be implemented on one or more virtual machines 340, and these implementations may be carried out in different ways.

[0149] During operation, the processing circuitry 360 executes software 395 to instantiate a hypervisor or virtualization layer 350, which may sometimes be referred to as a virtual machine monitor (VMM). The virtualization layer 350 can present a virtual operating platform that appears to be network hardware to the virtual machine 340.

[0150] like Figure 12As shown, hardware 330 can be a standalone network node with general or specific components. Hardware 330 may include antenna 3225 and may implement some functions via virtualization. Alternatively, hardware 330 may be part of a larger hardware cluster (e.g., in a data center or customer premises equipment (CPE)) in which many hardware nodes work together and are managed via management and orchestration (MANO) 3100, which in particular oversees the lifecycle management of application 320.

[0151] Hardware virtualization is sometimes referred to as Network Functions Virtualization (NFV). NFV can be used to consolidate many types of network devices into industry-standard high-capacity server hardware, physical switches, and physical storage devices, which can reside in data centers and client terminal devices.

[0152] In the context of NFV, virtual machine 340 can be a software implementation of a physical machine, and its running programs are as if they were executed on a physical, non-virtualized machine. Each virtual machine 340 and the portion of hardware 330 that executes that virtual machine (i.e., hardware dedicated to that virtual machine and / or hardware shared by that virtual machine and other virtual machines 340) form a separate virtual network element (VNE).

[0153] Still within the context of NFV, a Virtual Network Function (VNF) is responsible for handling specific network functions running in one or more virtual machines 340 on top of the hardware network infrastructure 330, and corresponds to Figure 12 Application 320.

[0154] In some embodiments, one or more radio units 3200, each including one or more transmitters 3220 and one or more receivers 3210, may be coupled to one or more antennas 3225. The radio unit 3200 may communicate directly with the hardware node 330 via one or more suitable network interfaces and may be combined with virtual components to provide a radio-capable virtual node, such as a radio access node or base station.

[0155] In some embodiments, some signaling may be implemented using the control system 3230, which may alternatively be used for communication between the hardware node 330 and the radio unit 3200.

[0156] Figure 13 A telecommunications network connected to a host computer via an intermediate network is shown according to some embodiments.

[0157] refer to Figure 13According to an embodiment, the communication system includes a telecommunications network 410, such as a 3GPP-type cellular network, which includes an access network 411 (such as a radio access network) and a core network 414. The access network 411 includes multiple base stations 412a, 412b, and 412c, such as NB, eNB, GNB, or other types of wireless access points, each base station 412a, 412b, and 412c defining a corresponding coverage area 413a, 413b, and 413c. Each base station 412a, 412b, and 412c can be connected to the core network 414 via a wired or wireless connection 415. A first UE 491 located in coverage area 413c is configured to wirelessly connect to or be called by the corresponding base station 412c. A second UE 492 located in coverage area 413a can wirelessly connect to the corresponding base station 412a. Although multiple UEs 491 and 492 are shown in this example, the disclosed embodiments are equally applicable to individual UEs in the coverage area or individual UEs connected to the corresponding base station 412.

[0158] Telecommunications network 410 connects itself to host computer 430, which may be embodied in the hardware and / or software of a standalone server, a cloud-implemented server, a distributed server, or as a processing resource in a server cluster. Host computer 430 may be owned or controlled by a service provider, or may be operated by or on behalf of the service provider. Connections 421 and 422 between telecommunications network 410 and host computer 430 may extend directly from core network 414 to host computer 430 or may be made via optional intermediate network 420. Intermediate network 420 may be one or a combination of more than one public, private, or hosted network; if any, intermediate network 420 may be a backbone network or the Internet; in particular, intermediate network 420 may include two or more subnetworks (not shown).

[0159] Figure 13The communication system as a whole enables connectivity between the connected UEs 491 and 492 and the host computer 430. This connectivity can be described as an over-the-top (OTT) connection 450. The host computer 430 and the connected UEs 491 and 492 are configured to use access network 411, core network 414, any intermediate network 420, and possibly further infrastructure (not shown) as intermediaries to transmit data and / or signaling via OTT connection 450. OTT connection 450 can be transparent in the sense that the participating communication devices traversing OTT connection 450 are unaware of the routing of uplink and downlink communications. For example, base station 412 may not be informed, or need not be informed, of past routes of incoming downlink communications originating from host computer 430 that are to be forwarded (e.g., handed over) to connected UE 491. Similarly, base station 412 does not need to know the future routes of outgoing uplink communications originating from UE 491 toward host computer 430.

[0160] Figure 14 A host computer is shown communicating with a user equipment via a base station through a partial wireless connection, according to some embodiments.

[0161] Now refer to Figure 14 Example implementations of the UE, base station, and host computer discussed in the preceding paragraphs according to embodiments are described. In the communication system 500, the host computer 510 includes hardware 515 including a communication interface 516 configured to establish and maintain wired or wireless connections with different communication devices of the communication system 500. The host computer 510 also includes processing circuitry 518, which may have storage and / or processing capabilities. In particular, the processing circuitry 518 may include one or more programmable processors, application-specific integrated circuits, field-programmable gate arrays, or combinations of these suitable for executing instructions (not shown). The host computer 510 also includes software 511, which is stored in or accessible by the host computer 510 and executable by the processing circuitry 518. The software 511 includes a host application 512. The host application 512 may be operable to provide services to remote users, such as UE 530 connected via an OTT connection 550 terminated at UE 530 and host computer 510. When providing services to remote users, host application 512 can provide user data sent using OTT connection 550.

[0162] The communication system 500 also includes a base station 520, which is provided in the telecommunications system and includes hardware 525 enabling the base station 520 to communicate with the host computer 510 and the UE 530. Hardware 525 may include a communication interface 526 for establishing and maintaining wired or wireless connections with different communication devices of the communication system 500, and for establishing and maintaining connections at least with areas within the coverage area served by the base station 520 (in... Figure 14 The radio interface 527 of the UE 530 (not shown) is the wireless connection 570. The communication interface 526 can be configured to facilitate a connection 560 to the host computer 510. The connection 560 can be direct, or it can traverse the core network of the telecommunications system (in...). Figure 14 (Not shown) and / or one or more intermediate networks outside the telecommunications system. In the illustrated embodiment, the hardware 525 of base station 520 also includes processing circuitry 528, which may include one or more programmable processors, application-specific integrated circuits, field-programmable gate arrays, or combinations thereof (not shown) adapted to execute instructions. Base station 520 also includes software 521 stored internally or accessible via an external connection.

[0163] The communication system 500 also includes the previously mentioned UE 530. Its hardware 535 may include a radio interface 537 configured to establish and maintain a wireless connection 570 with a base station serving the coverage area where the UE 530 is currently located. The hardware 535 of the UE 530 also includes processing circuitry 538, which may include one or more programmable processors, application-specific integrated circuits, field-programmable gate arrays, or combinations thereof (not shown) suitable for executing instructions. The UE 530 also includes software 531, which is stored in or accessible by the UE 530 and executable by the processing circuitry 538. The software 531 includes a client application 532. The client application 532 may be operable to provide services to human or non-human users via the UE 530 with the support of a host computer 510. In the host computer 510, a host application 512 executing may communicate with the executing client application 532 via an OTT connection 550 terminated at both the UE 530 and the host computer 510. When providing services to a user, client application 532 can receive request data from host application 512 and provide user data in response to the request data. OTT connection 550 can transmit both the request data and the user data. Client application 532 can interact with the user to generate the user data it provides.

[0164] It should be noted that Figure 14 The host computer 10, base station 520, and UE 530 shown can be respectively connected to... Figure 13One of the host computer 430, base stations 412a, 412b, and 412c, and one of the UEs 491 and 492 are similar to or the same. That is to say, the internal workings of these entities can be as follows: Figure 14 As shown, and independently, the surrounding network topology can be Figure 13 The network topology.

[0165] exist Figure 14 In this diagram, the OTT connection 550 is abstractly depicted to illustrate communication between host computer 510 and UE 530 via base station 520, without explicitly referencing any intermediate devices and the precise routes of messages via these devices. The network infrastructure can determine the route, which can be configured to be hidden from the UE 530, the service provider operating host computer 510, or both. While the OTT connection 550 is active, the network infrastructure can also make decisions to dynamically change the route (e.g., based on network load balancing considerations or reconfiguration).

[0166] The wireless connection 570 between UE 530 and base station 520 is based on the teachings of the embodiments described throughout this disclosure. One or more improvements in various embodiments utilize the wireless connection 570 to form the final segment of the OTT connection 550, providing performance for the OTT services offered to UE 530. More precisely, the teachings of these embodiments can improve data rates, latency, and / or power consumption, thereby providing benefits such as reduced user latency, relaxed file size limits, better responsiveness, and / or extended battery life.

[0167] The measurement process may be provided for the purpose of monitoring data rates, latency, and other factors improved in one or more embodiments. Optional network functions may also exist for reconfiguring the OTT connection 550 between the host computer 510 and the UE 530 in response to changes in the measurement results. The measurement process and / or the network functions for reconfiguring the OTT connection 550 may be implemented in the software 511 and hardware 515 of the host computer 510, or in the software 531 and hardware 535 of the UE 530, or both. In embodiments, sensors (not shown) may be deployed in or associated with communication equipment through which the OTT connection 550 traverses; the sensors may participate in the measurement process by supplying values ​​of the monitored quantities illustrated above, or by supplying values ​​of other physical quantities from which the software 511, 531 can calculate or estimate the monitored quantities. Reconfiguration of the OTT connection 550 may include message formats, retransmission settings, preferred routing, etc.; reconfiguration does not need to affect the base station 5520, and the reconfiguration may be unknown or imperceptible to the base station 520. Such processes and functions may be known and practiced in the art. In some embodiments, the measurement results may involve proprietary UE signaling that facilitates measurements of throughput, propagation time, latency, etc., of the host computer 510. Measurements can be implemented because software 511 and 531 enables messages (particularly empty or "dummy" messages) to be sent using OTT connection 550 while simultaneously monitoring propagation time, errors, etc.

[0168] Figure 15 This is a flowchart illustrating a method implemented in a communication system according to one embodiment. The communication system includes a host computer, a base station, and a UE, which may be referenced... Figure 13 and Figure 14 The host computer, base station, and UE described herein. For the sake of simplicity in this disclosure, only [the specific components] will be included in this section. Figure 15 Reference numerals are used in the accompanying drawings. In step 610, the host computer provides user data. In sub-step 611 of step 610 (which may be optional), the host computer provides user data by executing a host application. In step 620, the host computer initiates a transmission carrying user data to the UE. In step 630 (which may be optional), in accordance with the teachings of the embodiments described throughout this disclosure, the base station sends the user data carried in the transmission initiated by the host computer to the UE. In step 640 (which may also be optional), the UE executes a client application associated with the host application executed by the host computer.

[0169] Figure 16 This is a flowchart illustrating a method implemented in a communication system according to one embodiment. The communication system includes a host computer, a base station, and a UE, which may be referenced... Figure 13 and Figure 14 The host computer, base station, and UE described herein. For the sake of simplicity in this disclosure, only [the specific components] are included in this section. Figure 16 Reference numerals are used in the accompanying drawings. In step 710 of the method, the host computer provides user data. In an optional sub-step (not shown), the host computer provides user data by executing a host application. In step 720, the host computer initiates a transmission carrying user data to the UE. Based on the teachings of the embodiments described throughout this disclosure, the transmission may be carried out via a base station. In step 730 (which may be optional), the UE receives the user data carried in the transmission.

[0170] Figure 17 This is a flowchart illustrating a method implemented in a communication system according to one embodiment. The communication system includes a host computer, a base station, and a UE, which may be referenced... Figure 13 and Figure 14 The host computer, base station, and UE described herein. For the sake of simplicity in this disclosure, only [the specific components] are included in this section. Figure 17 Reference numerals are used in the accompanying drawings. In step 810 (which may be optional), the UE receives input data provided by the host computer. Additionally or alternatively, in step 820, the UE provides user data. In sub-step 821 of step 820 (which may be optional), the UE provides user data by executing a client application. In sub-step 811 of step 810 (which may be optional), the UE executes a client application that provides user data as a response to the received input data provided by the host computer. When providing user data, the executed client application may also consider user input received from the user. Regardless of the specific manner in which user data is provided, in sub-step 830 (which may be optional), the UE initiates the transmission of user data to the host computer. In step 840 of the method, in accordance with the teachings of the embodiments described throughout this disclosure, the host computer receives user data sent from the UE.

[0171] Figure 18 This is a flowchart illustrating a method implemented in a communication system according to one embodiment. The communication system includes a host computer, a base station, and a UE, which may be referenced... Figure 13 and Figure 14 The host computer, base station, and UE described herein. For the sake of simplicity in this disclosure, only [the specific components] are included in this section. Figure 18 Reference numerals are used in the accompanying drawings. In step 910 (which may be optional), the base station receives user data from the UE in accordance with the teachings of the embodiments described throughout this disclosure. In step 920 (which may be optional), the base station initiates a transmission of the received user data to the host computer. In step 930 (which may be optional), the host computer receives the user data carried in the transmission initiated by the base station.

[0172] Figure 19 A method 1000 performed by a wireless device 110 according to certain embodiments is described. At step 1002, the wireless device 110 determines whether a second message received from a network node 160 includes an AKMA key indicator. At step 1004, based on whether the second message includes an AKMA indicator, the wireless device 110 determines whether to generate AKMA key material for use in the authentication process with the network.

[0173] Figure 20 A wireless network (e.g.) is shown. Figure 8 The diagram shows a schematic block diagram of a virtual device 1100 in a wireless network. This device can be implemented in a wireless device or network node (e.g., Figure 8 In the wireless device 110 or network node 160 shown. Device 1100 is operable to perform reference Figure 19 The example methods described herein and any other processes or methods optionally disclosed herein. It should also be understood that... Figure 19 The method need not be performed solely by device 1100. At least some operations of the method may be performed by one or more other entities.

[0174] The virtual device 1100 may include processing circuitry (which may include one or more microprocessors or microcontrollers) and other digital hardware (which may include digital signal processors (DSPs), application-specific digital logic, etc.). The processing circuitry may be configured to execute program code stored in memory, which may include one or more types of memory, such as read-only memory (ROM), random access memory, cache memory, flash memory devices, optical storage devices, etc. In several embodiments, the program code stored in the memory includes program instructions for executing one or more telecommunications and / or data communication protocols and instructions for executing one or more of the techniques described herein. In some embodiments, the processing circuitry may be used to cause any suitable unit of the first determining module 1110, the second determining module 1120, and the device 1100 to perform corresponding functions according to one or more embodiments of this disclosure.

[0175] According to some embodiments, the first determining module 1110 may perform certain determining functions of the device 1100. For example, the determining module 1110 may determine whether a second message received from the network node 160 includes an AKMA key indicator.

[0176] According to some embodiments, the second determining module 1120 may perform certain other determining functions of the device 1100. For example, based on whether the second message includes an AKMA indicator, the second determining module 1120 may determine whether to generate AKMA key material for use in the authentication process with the network.

[0177] The term "unit" may have the conventional meaning in the fields of electronic devices, electrical equipment, and / or electronic equipment, and may include, for example, electrical and / or electronic circuits, devices, modules, processors, memories, logic solid-state and / or discrete devices, computer programs or instructions for performing corresponding tasks, processes, calculations, outputs, and / or display functions, such as those described herein.

[0178] Figure 21 A method 1200 performed by a wireless device 110 according to certain embodiments is described. At step 1202, in response to determining that a communication session with an application function (AF) needs to be initiated, the wireless device 110 generates K. AKMA In step 1204, the wireless device 110 sends a request to the AF to initiate a communication session.

[0179] In a particular embodiment, after performing the main authentication process with the network, it is determined that a communication session with the AF needs to be initiated.

[0180] In a particular embodiment, during the execution of the master authentication process, the wireless device 110 generates the root key K. AUSF .

[0181] In a particular embodiment, wireless device 110 is based on K... AUSF Generate K AKMA and K AKMA Identifier K AKMA ID.

[0182] In a particular embodiment, wireless device 110 determines the generation of K based on subscription information stored in or at wireless device 110. AKMA . Figure 22 A wireless network (e.g.) is shown. Figure 8 The diagram shows a schematic block diagram of a virtual device 1300 in a wireless network. This device can be implemented in a wireless device or network node (e.g., Figure 8 In the wireless device 110 or network node 160 shown. Device 1300 is operable to perform reference Figure 21 The example methods described herein and any other processes or methods optionally disclosed herein. It should also be understood that... Figure 21 The method need not be performed solely by device 1300. At least some operations of the method may be performed by one or more other entities.

[0183] The virtual device 1300 may include processing circuitry (which may include one or more microprocessors or microcontrollers) and other digital hardware (which may include digital signal processors (DSPs), application-specific digital logic, etc.). The processing circuitry may be configured to execute program code stored in memory, which may include one or more types of memory, such as read-only memory (ROM), random access memory, cache memory, flash memory devices, optical storage devices, etc. In several embodiments, the program code stored in the memory includes program instructions for executing one or more telecommunications and / or data communication protocols and instructions for executing one or more of the techniques described herein. In some embodiments, the processing circuitry may be used to cause any suitable unit of the generation module 1310, the transmission module 1320, and the device 1300 to perform corresponding functions according to one or more embodiments of this disclosure.

[0184] According to some embodiments, generation module 1310 may perform certain generation functions of device 1300. For example, in response to determining that a communication session with application function (AF) needs to be initiated, generation module 1310 may generate K. AKMA .

[0185] According to some embodiments, the sending module 1320 may perform certain sending functions of the device 1300. For example, the sending module 1320 may send a request to the AF to initiate a communication session.

[0186] The term "unit" may have the conventional meaning in the fields of electronic devices, electrical equipment, and / or electronic equipment, and may include, for example, electrical and / or electronic circuits, devices, modules, processors, memories, logic solid-state and / or discrete devices, computer programs or instructions for performing corresponding tasks, processes, calculations, outputs, and / or display functions, such as those described herein.

[0187] Figure 23 A method 1400, performed by a network node 160 operating as a UDM, according to certain embodiments, is described. At step 1402, the network node 160 receives a first message associated with an authentication request message from a wireless device 110. At step 1404, based on subscription information associated with the wireless device 110, the network node 160 generates a second message including an authentication response message. The second message includes an AKMA key indicator to trigger the wireless device 110 to generate AKMA key material. At step 1406, the network node 160 sends the second message including the authentication response message to trigger the wireless device 110 to generate AKMA key material.

[0188] In a particular embodiment, the first message initiates the authentication process between the wireless device 110 and the network.

[0189] In a particular embodiment, the authentication process includes a main authentication process for the wireless device 110.

[0190] In a particular embodiment, the AKMA key indicator includes an AKMA key material generation flag for triggering the wireless device to generate AKMA key material.

[0191] In a particular embodiment, the AKMA key material includes K AKMA .

[0192] In a further specific embodiment, the AKMA key material includes K AKMA Identifier K AKMA ID, and K AKMA and K AKMA ID is based on K AUSF Exported.

[0193] In a particular embodiment, a first message is received from a second network node 160 operating as an AUSF, and a second message is sent to the second network node 160 operating as an AUSF.

[0194] In a particular embodiment, before receiving the first message from the wireless device 110, the network node 160 receives a third message from the NF. The third message includes subscription information associated with the wireless device 110.

[0195] Figure 24 A wireless network (e.g.) is shown. Figure 8 The diagram shows a schematic block diagram of a virtual device 1500 in a wireless network. This device can be implemented in a wireless device or network node (e.g., Figure 8 In the wireless device 110 or network node 160 shown. Device 1500 is operable to perform reference Figure 23 The example methods described herein and any other processes or methods optionally disclosed herein. It should also be understood that... Figure 23 The method need not be performed solely by device 1500. At least some operations of the method may be performed by one or more other entities.

[0196] The virtual device 1500 may include processing circuitry (which may include one or more microprocessors or microcontrollers) and other digital hardware (which may include digital signal processors (DSPs), application-specific digital logic, etc.). The processing circuitry may be configured to execute program code stored in memory, which may include one or more types of memory, such as read-only memory (ROM), random access memory, cache memory, flash memory devices, optical storage devices, etc. In several embodiments, the program code stored in the memory includes program instructions for executing one or more telecommunications and / or data communication protocols and instructions for executing one or more of the techniques described herein. In some embodiments, the processing circuitry may be configured to cause the receiving module 1510, the generating module 1520, the transmitting module 1530, and any other suitable unit of the device 1500 to perform corresponding functions according to one or more embodiments of this disclosure.

[0197] According to some embodiments, the receiving module 1510 may perform certain receiving functions of the device 1500. For example, the receiving module 1510 may receive a first message associated with an authentication request message from a wireless device.

[0198] According to some embodiments, generation module 1520 may perform certain generation functions of apparatus 1500. For example, at step Q04, generation module 1520 may generate a second message including an authentication response message. The second message includes an AKMA key indicator to trigger the wireless device to generate AKMA key material.

[0199] According to some embodiments, the sending module 1530 may perform certain sending functions of the device 1500. For example, the sending module 1520 may send a second message including an authentication response message to trigger the wireless device to generate AKMA key material.

[0200] The term "unit" may have the conventional meaning in the fields of electronic devices, electrical equipment, and / or electronic equipment, and may include, for example, electrical and / or electronic circuits, devices, modules, processors, memories, logic solid-state and / or discrete devices, computer programs or instructions for performing corresponding tasks, processes, calculations, outputs, and / or display functions, such as those described herein.

[0201] Figure 25 A method 1600, performed by a network node 160 operating as a UDM, is described according to certain embodiments. At step 1602, the network node 160 determines whether a second message received from the network node 160 includes an AKMA key indicator. At step 1604, based on whether the second message includes the AKMA indicator, the network node 160 determines whether to generate AKMA key material.

[0202] In a particular embodiment, when determining whether the second message includes an AKMA key indicator, network node 160 determines that the second message includes an AKMA key indicator. Then, network node 160 generates AKMA key material based on the AKMA key indicator in the second message.

[0203] In another specific embodiment, when determining whether the second message includes an AKMA key indicator, network node 160 determines that the second message does not include an AKMA key indicator. Then, network node 160 determines, based on the absence of an AKMA key indicator in the second message, not to generate AKMA key material for use in the authentication process with the network.

[0204] In a particular embodiment, the second network node 160 includes a unified data management (UDM) node.

[0205] In a particular embodiment, network node 160 sends a second message including an AKMA key indicator to wireless device 110 to trigger wireless device 110 to generate AKMA key material.

[0206] In a specific embodiment, the AKMA key material includes the application authentication and key management anchor key K. AKMA .

[0207] In a further specific embodiment, the AKMA key material includes a K key associated with the wireless device 110. AKMA ID, and K AKMA and K AKMA ID is based on K AUSF Exported.

[0208] In a particular embodiment, the AKMA key indicator includes an AKMA key material generation flag.

[0209] Figure 26 A wireless network (e.g.) is shown. Figure 8 The diagram shows a schematic block diagram of a virtual device 1700 in a wireless network. This device can be implemented in a wireless device or network node (e.g., Figure 8 In the wireless device 110 or network node 160 shown. Device 1700 is operable to perform reference Figure 25 The example methods described herein and any other processes or methods optionally disclosed herein. It should also be understood that... Figure 25 The method need not be performed solely by device 1700. At least some operations of the method may be performed by one or more other entities.

[0210] The virtual device 1700 may include processing circuitry (which may include one or more microprocessors or microcontrollers) and other digital hardware (which may include digital signal processors (DSPs), application-specific digital logic, etc.). The processing circuitry may be configured to execute program code stored in memory, which may include one or more types of memory, such as read-only memory (ROM), random access memory, cache memory, flash memory devices, optical storage devices, etc. In several embodiments, the program code stored in the memory includes program instructions for executing one or more telecommunications and / or data communication protocols and instructions for executing one or more of the techniques described herein. In some embodiments, the processing circuitry may be used to cause any suitable unit of the first determining module 1710, the second determining module 1720, and the device 1700 to perform corresponding functions according to one or more embodiments of this disclosure.

[0211] According to some embodiments, the first determining module 1710 may perform certain determining functions of the device 1700. For example, the first determining module 1710 may determine whether a second message received from a network node includes an AKMA key indicator.

[0212] According to some embodiments, the second determining module 1720 may perform certain other determining functions of the device 1700. For example, based on whether the second message includes an AKMA indicator, the second determining module 1720 may determine whether to generate AKMA key material.

[0213] The term "unit" may have the conventional meaning in the fields of electronic devices, electrical equipment, and / or electronic equipment, and may include, for example, electrical and / or electronic circuits, devices, modules, processors, memories, logic solid-state and / or discrete devices, computer programs or instructions for performing corresponding tasks, processes, calculations, outputs, and / or display functions, such as those described herein.

[0214] Figure 27 A method 1800, performed by a network node 160 operating as an AUSF, is described according to certain embodiments. At step 1802, network node 160 receives a first message from AAnF requesting AKMA key material associated with wireless device 110. At step 1804, network node 160 sends a second message to UDM to determine whether AKMA key material has been generated.

[0215] Figure 28 A wireless network (e.g.) is shown. Figure 8 The diagram shows a schematic block diagram of a virtual device 1900 in a wireless network. This device can be implemented in a wireless device or network node (e.g., Figure 8In the wireless device 110 or network node 160 shown. Device 1900 is operable to perform reference Figure 27 The example methods described herein and any other processes or methods optionally disclosed herein. It should also be understood that... Figure 27 The method need not be performed solely by device 1900. At least some operations of the method may be performed by one or more other entities.

[0216] The virtual device 1900 may include processing circuitry (which may include one or more microprocessors or microcontrollers) and other digital hardware (which may include digital signal processors (DSPs), application-specific digital logic, etc.). The processing circuitry may be configured to execute program code stored in memory, which may include one or more types of memory, such as read-only memory (ROM), random access memory, cache memory, flash memory devices, optical storage devices, etc. In several embodiments, the program code stored in the memory includes program instructions for executing one or more telecommunications and / or data communication protocols and instructions for executing one or more of the techniques described herein. In some embodiments, the processing circuitry may be used to cause any suitable unit of the receiving module 1910, the transmitting module 1920, and the device 1900 to perform corresponding functions according to one or more embodiments of this disclosure.

[0217] According to some embodiments, the receiving module 1910 may perform certain receiving functions of the device 1900. For example, the receiving module 1910 may receive a first message from ANF requesting AKMA key material associated with a wireless device.

[0218] According to some embodiments, the sending module 1920 may perform certain sending functions of the device 1900. For example, the sending module 1920 may send a second message to the UDM to determine whether to generate AKMA key material.

[0219] The term "unit" may have the conventional meaning in the fields of electronic devices, electrical equipment, and / or electronic equipment, and may include, for example, electrical and / or electronic circuits, devices, modules, processors, memories, logic solid-state and / or discrete devices, computer programs or instructions for performing corresponding tasks, processes, calculations, outputs, and / or display functions, such as those described herein.

[0220] Further examples:

[0221] Example 1. A method performed by a wireless device, the method comprising: determining whether a second message received from a network node includes an Application Authentication and Key Management (AKMA) key indicator; and determining, based on whether the second message includes the AKMA indicator, whether to generate AKMA key material for use in an authentication process with the network.

[0222] Example 2. The method according to Example 1 further includes: sending a first message to the network node before receiving the second message from the network node, the first message initiating an authentication process with the network, and wherein the second message includes an authentication response message.

[0223] Example 3. The method according to Example 2, wherein the authentication process includes a main authentication process.

[0224] Example 4. The method according to Example 1, wherein the second message is associated with the UE Parameter Update (UPU) procedure.

[0225] Example 5. The method according to any one of Example 1 to 4, wherein the AKMA key indicator includes an AKMA key material generation flag.

[0226] Example 6. The method according to any one of Example 1 to 5, wherein determining whether the second message includes the AKMA key indicator includes: determining that the second message includes the AKMA key indicator; and generating the AKMA key material based on the AKMA key indicator in the second message.

[0227] Example 7. The method according to any one of Example 1 to 6, wherein determining whether the second message includes the AKMA key indicator includes: determining that the second message does not include the AKMA key indicator; and determining, based on the fact that the second message does not include the AKMA key indicator, not to generate the AKMA key material for the authentication process with the network.

[0228] Example 8. The method according to any one of Example 1 to 7, wherein the wireless device determines whether to generate the AKMA key material based on subscription information stored in or at the wireless device.

[0229] Example 9. The method according to any one of Example 1 to 8, wherein the network node includes a Unified Data Management (UDM) node.

[0230] Example 10. The method according to any one of Example Examples 1 to 8, wherein the network node includes an Authentication Server Function (AUSF).

[0231] Example 11. The method according to any one of Example 1 to 10, wherein the AKMA key material includes an anchor key (KAKMA ) and K AKMA Identifier (K) AKMA At least one of the following: (ID).

[0232] Example 12. A computer program including instructions that, when executed on a computer, perform any one of the methods described in Example 1 to 11.

[0233] Example 13. A computer program product including a computer program, the computer program including instructions that, when executed on a computer, perform any one of the methods described in Example 1 to 11.

[0234] Example 14. A non-transitory computer-readable medium storing instructions that, when executed by a computer, perform any one of the methods described in Example 1 to 11.

[0235] Example 15. A wireless device including processing circuitry configured to perform any one of the methods described in Example 1 to 11.

[0236] Example 16. A method performed by a wireless device, the method comprising: generating K in response to determining that a communication session with an application function (AF) needs to be initiated. AKMA ; and send a request to the AF to initiate the communication session.

[0237] Example 17. The method according to Example 16, wherein, after performing the main authentication process with the network, it is determined that a communication session with the AF needs to be initiated.

[0238] Example 18. The method according to Example 17 further includes: generating K during the execution of the master authentication process. AUSF .

[0239] Example 19. A computer program including instructions that, when executed on a computer, perform any one of the methods described in Example 16 to 18.

[0240] Example 20. A computer program product including a computer program, the computer program including instructions that, when executed on a computer, perform any one of the methods described in Example 16 to 18.

[0241] Example 21. A non-transitory computer-readable medium storing instructions that, when executed by a computer, perform any one of the methods described in Example Examples 16 to 18.

[0242] Example 22. A wireless device including processing circuitry configured to perform any one of the methods described in Example Examples 16 to 18.

[0243] Example 23. A method performed by a network node operating as a Unified Data Management (UDM) node, the method comprising: receiving a first message associated with an authentication request message of a wireless device; generating a second message including an authentication response message based on subscription information associated with the wireless device, the second message including an Application Authentication and Key Management (AKMA) key indicator to trigger the wireless device to generate AKMA key material; and sending the second message including the authentication response message to trigger the wireless device to generate the AKMA key material.

[0244] Example 24. The method according to Example 23, wherein the first message initiates an authentication process with the network.

[0245] Example 25. The method according to Example 24, wherein the authentication process includes a master authentication process.

[0246] Example 26. The method according to any one of Example 23 to 25 further includes: receiving a third message from the NF before receiving the first message from the wireless device, the third message including subscription information associated with the wireless device.

[0247] Example 27. The method according to any one of Example Examples 23 to 26, wherein the AKMA key indicator includes an AKMA key material generation flag for triggering the wireless device to generate the AKMA key material.

[0248] Example 28. The method according to any one of Example Examples 23 to 27, wherein the AKMA key material includes an anchor key (K AKMA ).

[0249] Example 29. A computer program including instructions that, when executed on a computer, perform any one of the methods described in Example Examples 23 to 28.

[0250] Example 30. A computer program product including a computer program, the computer program including instructions that, when executed on a computer, perform any one of the methods described in Example 23 to 28.

[0251] Example 31. A network node including processing circuitry configured to perform any one of the methods described in Example 23 to 28.

[0252] Example 32. A method performed by a network node, the method comprising: determining whether a second message received from the network node includes an Application Authentication and Key Management (AKMA) key indicator; and determining whether to generate AKMA key material based on whether the second message includes the AKMA indicator.

[0253] Example 33. The method according to Example 33, wherein the AKMA key indicator includes an AKMA key material generation flag.

[0254] Example 34. The method according to any one of Example 32 to 33, wherein determining whether the second message includes the AKMA key indicator includes: determining that the second message includes the AKMA key indicator; and generating the AKMA key material based on the AKMA key indicator in the second message.

[0255] Example 35. The method according to any one of Example Examples 32 to 33, wherein determining whether the second message includes the AKMA key indicator includes: determining that the second message does not include the AKMA key indicator; and determining, based on the fact that the second message does not include the AKMA key indicator, not to generate AKMA key material for the authentication process with the network.

[0256] Example 36. The method according to any one of Example Examples 32 to 35, wherein the network node includes a Unified Data Management (UDM) node.

[0257] Example 37. The method according to any one of Example Examples 32 to 35, wherein the network node includes an Authentication Server Function (AUSF).

[0258] Example 38. A method performed by a network node operating as an AUSF, the method comprising: receiving from an Application Authentication and Key Management Application Function (AAnF) requesting Application Authentication and Key Management (AKMA) key material associated with a wireless device; and sending a second message to Unified Data Management (UDM) to determine whether to generate the AKMA key material.

[0259] Example 39. The method according to Example 38, wherein the first message includes K associated with the wireless device. AKMA Identifier (K) AKMA ID).

[0260] Example 40. The method according to any one of Example Examples 38 to 39, wherein the KAKMA ID is based on the K AKMA Exported.

[0261] Example 41. The method according to any one of Example 38 to 40 further includes: receiving a third message from the UDM, the third message including an AKMA key indicator; and generating the AKMA key material based on receiving the third message including the AKMA key indicator.

[0262] Example 42. The method according to any one of Example Examples 38 to 40 further includes: receiving a third message from the UDM, the third message indicating that the AUSF does not generate the AKMA key material; and determining, based on receiving the third message, that the AKMA key material is not generated.

[0263] Example 43. The method according to any one of Example Examples 38 to 40 further includes: receiving a third message from the UDM; determining that the third message from the UDM does not include an AKMA key indicator; and determining, based on the fact that the third message does not include the AKMA key indicator, not to generate the AKMA key material.

[0264] Example 44. The method according to any one of Example 38 to 40 further includes: receiving a third message from the UDM, the third message including the AKMA key material.

[0265] Example 45. The method according to any one of Example Examples 38 to 44, wherein the determination of whether to generate the AKMA key material is based at least in part on the subscription information associated with the wireless device.

[0266] Example 46. The method according to any one of Example Examples 38 to 45 further includes: generating K during the master authentication process with the wireless device. AUSF .

[0267] Example 47. A computer program including instructions that, when executed on a computer, perform any one of the methods described in Example 38 to 46.

[0268] Example 48. A computer program product including a computer program, the computer program including instructions that, when executed on a computer, perform any one of the methods described in Example 38 to 46.

[0269] Example 49. A non-transitory computer-readable medium storing instructions that, when executed by a computer, perform any one of the methods described in Example 38 to 46.

[0270] Example 50. A wireless device including processing circuitry configured to perform any one of the methods described in Example 38 to 46.

[0271] Example 51. A wireless device comprising: processing circuitry configured to perform any of the steps described in any of Example 1 to 22; and power supply circuitry configured to supply power to the wireless device.

[0272] Example 52. A network node comprising: processing circuitry configured to perform any of the steps described in any of Example 23 to 50; and power supply circuitry configured to supply power to the wireless device.

[0273] Example 53. A wireless device comprising: an antenna configured to transmit and receive wireless signals; a radio front-end circuit connected to the antenna and a processing circuit, configured to modulate signals transmitted between the antenna and the processing circuit; the processing circuit being configured to perform any of the steps described in any of Example 1 to 22; an input interface connected to the processing circuit and configured to allow information to be input into the wireless device for processing by the processing circuit; an output interface connected to the processing circuit and configured to output information already processed by the processing circuit from the wireless device; and a battery connected to the processing circuit and configured to power the wireless device.

[0274] Example 54. A communication system including a host computer, the host computer including: processing circuitry configured to provide user data; and a communication interface configured to forward the user data to a cellular network for transmission to a wireless device, wherein the cellular network includes network nodes having a radio interface and processing circuitry, the processing circuitry of the network nodes being configured to perform any of the steps described in any of Example 23 to 50.

[0275] Example 55. The communication system according to the foregoing example embodiment further includes the network node.

[0276] Example 56. The communication system according to the foregoing two example embodiments further includes the wireless device, wherein the wireless device is configured to communicate with the network node.

[0277] Example 57. A communication system according to the foregoing three example embodiments, wherein: the processing circuitry of the host computer is configured to execute a host application to provide the user data; and the wireless device includes processing circuitry configured to execute a client application associated with the host application.

[0278] Example 58. A method implemented in a communication system including a host computer, a network node, and a wireless device, the method comprising: providing user data at the host computer; and initiating a transmission carrying the user data to the wireless device via a cellular network including the network node at the host computer, wherein the network node performs any of the steps described in any of Example 23 to 50.

[0279] Example 59. The method according to the foregoing example embodiment further includes: sending the user data at the network node.

[0280] Example 60. The method according to the foregoing two example embodiments, wherein user data is provided at a host computer by executing a host application, the method further includes: at the wireless device, executing a client application associated with the host application.

[0281] Example 61. A wireless device configured to communicate with a network node, the wireless device including a radio interface and processing circuitry configured to perform the methods described in the preceding three example embodiments.

[0282] Example 62. A communication system including a host computer, the host computer including: processing circuitry configured to provide user data; and a communication interface configured to forward the user data to a cellular network for transmission to a wireless device, wherein the wireless device includes a radio interface and processing circuitry, and components of the wireless device are configured to perform any of the steps described in any of Example 1 to 22.

[0283] Example 63. A communication system according to the foregoing example embodiments, wherein the cellular network further includes a network node configured to communicate with the wireless device.

[0284] Example 64. A communication system according to the foregoing two example embodiments, wherein the processing circuitry of the host computer is configured to execute a host application to provide the user data; and the processing circuitry of the wireless device is configured to execute a client application associated with the host application.

[0285] Example 65. A method implemented in a communication system including a host computer, a network node, and a wireless device, the method comprising: providing user data at the host computer; and initiating a transmission carrying the user data to the wireless device via a cellular network including the network node at the host computer, wherein the wireless device performs any of the steps described in any of Example 1 to 22.

[0286] Example 66. The method according to the foregoing example embodiment further includes: receiving the user data from the network node at the wireless device.

[0287] Example 67. A communication system including a host computer, the host computer including: a communication interface configured to receive user data originating from a transmission from a wireless device to a network node, wherein the wireless device includes a radio interface and processing circuitry, the processing circuitry of the wireless device being configured to perform any of the steps described in any of Example 1 to 22.

[0288] Example 68. The communication system according to the foregoing example embodiment further includes the wireless device.

[0289] Example 69. The communication system according to the foregoing two example embodiments further includes the network node, wherein the network node includes a radio interface configured to communicate with the wireless device and a communication interface configured to forward user data carried by transmissions from the wireless device to the network node to the host computer.

[0290] Example 70. A communication system according to the foregoing three example embodiments, wherein the processing circuitry of the host computer is configured to execute a host application; and the processing circuitry of the wireless device is configured to execute a client application associated with the host application, thereby providing the user data.

[0291] Example 71. A communication system according to the foregoing four example embodiments, wherein the processing circuitry of the host computer is configured to execute a host application to provide requested data; and the processing circuitry of the wireless device is configured to execute a client application associated with the host application to provide the user data in response to the requested data.

[0292] Example 72. A method implemented in a communication system including a host computer, a network node, and a wireless device, the method comprising: at the host computer, receiving user data transmitted from the wireless device to the network node, wherein the wireless device performs any of the steps described in any of Example 1 to 22.

[0293] Example 73. The method according to the foregoing example embodiment further includes: providing the user data to the network node at the wireless device.

[0294] Example 74. The method according to the foregoing two example embodiments further includes: executing a client application at the wireless device to provide user data to be sent; and executing a host application associated with the client application at the host computer.

[0295] Example 75. The method according to the foregoing three example embodiments further includes: executing a client application at the wireless device; and receiving input data to the client application at the wireless device, the input data being provided at the host computer by executing a host application associated with the client application, wherein the user data to be sent is provided by the client application in response to the input data.

[0296] Example 76. A communication system including a host computer, the host computer including: a communication interface configured to receive user data originating from a wireless device to a network node, wherein the network node includes a radio interface and processing circuitry configured to perform any of the steps described in any of Example 23 to 50.

[0297] Example 77. The communication system according to the foregoing example embodiment further includes the network node.

[0298] Example 78. The communication system according to the foregoing two example embodiments further includes the wireless device, wherein the wireless device is configured to communicate with the network node.

[0299] Example 79. A communication system according to the foregoing three example embodiments, wherein the processing circuitry of the host computer is configured to execute a host application; and the wireless device is configured to execute a client application associated with the host application, thereby providing user data to be received by the host computer.

[0300] Example 80. A method implemented in a communication system including a host computer, a network node, and a wireless device, the method comprising: at the host computer, receiving from a base station user data transmitted from the network node that has been received from the wireless device, wherein the wireless device performs any of the steps described in any of Example 1 to 22.

[0301] Example 81. The method according to the foregoing example embodiment further includes: receiving user data from the wireless device at the network node.

[0302] Example 82. The method according to the foregoing two example embodiments further includes: at the network node, initiating the transmission of the received user data to the host computer.

[0303] Example 83. The method according to any of the foregoing example embodiments, wherein the network node includes a base station.

[0304] Example 84. The method according to any of the foregoing example embodiments, wherein the wireless device includes a user equipment (UE).

[0305] Modifications, additions, or omissions may be made to the systems and apparatus described herein without departing from the scope of this disclosure. Components of the systems and apparatus may be integrated or separated. Moreover, the operation of the systems and apparatus may be performed by more, fewer, or other components. Furthermore, the operation of the systems and apparatus may be performed using any suitable logic, including software, hardware, and / or other logic. As used in this document, "each" means each member of a set or each member of a subset of a set.

[0306] Modifications, additions, or omissions may be made to the method described herein without departing from the scope of this disclosure. The method may include more, fewer, or other steps. Furthermore, the steps may be performed in any suitable order.

[0307] Although this disclosure has been described with reference to certain embodiments, changes and arrangements of the embodiments will be apparent to those skilled in the art. Therefore, the above description of the embodiments does not limit this disclosure. Other changes, substitutions, and modifications are possible without departing from the spirit and scope of this disclosure.

Claims

1. A method performed by a network node operating as a Unified Data Management (UDM) node, the method comprising: Receive the first message associated with the authentication request message from the wireless device; Based on the subscription information associated with the wireless device, a second message is generated, including an authentication response message. The second message includes an application authentication and key management AKMA key indicator, wherein the AKMA key indicator includes an AKMA key material generation flag for triggering the wireless device to generate AKMA key material. as well as Sending the second message, which includes the authentication response message, triggers the wireless device to generate the AKMA key material.

2. The method according to claim 1, wherein, The first message initiates the authentication process between the wireless device and the network.

3. The method according to claim 2, wherein, The authentication process includes the main authentication process for the wireless device.

4. The method according to claim 1, wherein, The AKMA key material includes an application authentication and key management anchor key K AKMA .

5. The method according to claim 4, wherein, The AKMA key material includes K AKMA An identifier K AKMA ID, and wherein the K AKMA ID is derived based on K AKMA ID is derived based on K AUSF ID.

6. The method according to claim 1, wherein, The first message is received from a second network node operating as an authentication server function (AUSF), and the second message is sent to the second network node operating as the AUSF function.

7. The method according to claim 1, further comprising: Before receiving the first message from the wireless device, a third message is received from the network function, the third message including the subscription information associated with the wireless device.

8. A method performed by a first network node operating as an authentication server (AUSF) function, the method comprising: Determine whether the second message received from the second network node includes an application authentication and key management AKMA key indicator, wherein the AKMA key indicator includes an AKMA key material generation flag; and Based on whether the second message includes the AKMA key indicator, it is determined whether to generate AKMA key material.

9. The method according to claim 8, wherein: Determining whether the second message includes the AKMA key indicator includes: determining that the second message includes the AKMA key indicator; and The method further includes: generating the AKMA key material based on the AKMA key indicator in the second message.

10. The method according to claim 8, wherein: Determining whether the second message includes the AKMA key indicator includes: determining that the second message does not include the AKMA key indicator; and The method further includes: determining, based on the fact that the second message does not include the AKMA key indicator, that the AKMA key material will not be generated for the authentication process with the network.

11. The method according to claim 8, wherein, The second network node includes a Unified Data Management (UDM) node.

12. The method according to claim 8, further comprising: Send a message including the AKMA key indicator to the wireless device to trigger the wireless device to generate the AKMA key material.

13. The method according to claim 8, wherein, The AKMA key material includes an application authentication and key management anchor key K AKMA .

14. The method of claim 13, wherein: The AKMA key material includes a K AKMA identifier K AKMA ID, and The K AKMA and the K AKMA ID is derived based on the K AUSF derived.

15. A method performed by a wireless device, the method comprising: In response to the determination that a communication session with application function AF needs to be initiated, an application authentication and key management anchor key K is generated. AKMA ; Send a request to the AF to initiate the communication session; as well as Receive an authentication response message, the authentication response message including an application authentication and key management AKMA key indicator, wherein the AKMA key indicator includes an AKMA key material generation flag for triggering the wireless device to generate AKMA key material.

16. The method according to claim 15, wherein, After performing the main authentication process with the network, it is determined that a communication session with the AF needs to be initiated.

17. The method of claim 16, further comprising: During the execution of the master authentication process, the root key K is generated. AUSF .

18. The method of claim 17, further comprising: Based on the K AUSF Generate the K AKMA and K AKMA Identifier K AKMA ID.

19. The method of claim 15, further comprising: Based on the subscription information stored in or at the wireless device, determine the generation of K. AKMA .

20. A network node operating as a Unified Data Management (UDM) node, the network node comprising: The processing circuit is configured as follows: Receive the first message associated with the authentication request message from the wireless device; Based on the subscription information associated with the wireless device, a second message is generated, including an authentication response message. The second message includes an application authentication and key management AKMA key indicator, wherein the AKMA key indicator includes an AKMA key material generation flag for triggering the wireless device to generate AKMA key material. as well as Sending the second message, which includes the authentication response message, triggers the wireless device to generate the AKMA key material.

21. The network node according to claim 20, wherein, The first message initiates the authentication process between the wireless device and the network.

22. The network node according to claim 21, wherein, The authentication process includes the main authentication process for the wireless device.

23. The network node according to claim 20, wherein, The AKMA key material includes the application authentication and key management anchor key K. AKMA .

24. The network node according to claim 23, wherein, The AKMA key material includes K AKMA Identifier K AKMA ID, and wherein, the K AKMA and the K AKMA ID is based on K AUSF Exported.

25. The network node according to claim 20, wherein, The first message is received from a second network node operating as an authentication server function (AUSF), and the second message is sent to the second network node operating as the AUSF function.

26. The network node according to claim 20, wherein, The processing circuit is configured as follows: Before receiving the first message from the wireless device, a third message is received from the network function, the third message including the subscription information associated with the wireless device.

27. A first network node operating as an authentication server in AUSF operations, comprising: The processing circuit is configured as follows: Determine whether the second message received from the second network node includes an application authentication and key management AKMA key indicator, wherein the AKMA key indicator includes an AKMA key material generation flag; and Based on whether the second message includes the AKMA key indicator, it is determined whether to generate AKMA key material.

28. The first network node according to claim 27, wherein, When the processing circuit determines that the second message includes the AKMA key indicator, the processing circuit is also configured to generate the AKMA key material.

29. The first network node according to claim 28, wherein, When the processing circuit determines that the second message does not include the AKMA key indicator, the processing circuit is also configured to determine not to generate the AKMA key material for use in the authentication process with the network.

30. The first network node according to claim 27, wherein, The second network node includes a Unified Data Management (UDM) node.

31. The first network node according to claim 27, wherein, The processing circuit is configured to send a message including the AKMA key indicator to the wireless device to trigger the wireless device to generate the AKMA key material.

32. The first network node according to claim 27, wherein, The AKMA key material includes the application authentication and key management anchor key K. AKMA .

33. The first network node according to claim 32, wherein: The AKMA key material includes K associated with the wireless device. AKMA Identifier K AKMA ID, and The K AKMA and the K AKMA ID is based on K AUSF Exported.

34. A wireless device, comprising: The processing circuit is configured as follows: In response to the determination that a communication session with application function AF needs to be initiated, an application authentication and key management anchor key K is generated. AKMA ; Send a request to the AF to initiate the communication session; as well as Receive an authentication response message, the authentication response message including an application authentication and key management AKMA key indicator, wherein the AKMA key indicator includes an AKMA key material generation flag for triggering the wireless device to generate AKMA key material.

35. The wireless device according to claim 34, wherein, After performing the main authentication process with the network, it is determined that a communication session with the AF needs to be initiated.

36. The wireless device according to claim 35, wherein, During the execution of the master authentication process, the processing circuit is configured to generate the root key K. AUSF .

37. The wireless device according to claim 36, wherein, The processing circuit is configured based on K. AUSF Generate the K AKMA and K AKMA Identifier K AKMA ID.

38. The wireless device according to claim 34, wherein, The processing circuit is configured to determine the generation of K based on the subscription information stored in or at the wireless device. AKMA .

Images