Method and apparatus for UE and application function session protection for model transfer

Abstract

According to one example embodiment, a UE performs a maintenance AKMA context, the AKMA context comprising: a UE identifier, an AKMA anchor key, KAKMA, and a primary AKMA key identifier, A-KID; receiving a secondary AKMA key identifier A-KID'from an application function AF; and validating the AF for the UE using the AKMA key identifier A-KID. Verification includes obtaining an AKMA temporary UE identifier, A-TID, from a secondary AKMA key identifier, A-KID ', and verifying whether the A-TID is included in a primary AKMA key identifier, A-KID. If verification is positive, establishing an application session with the AF, and receiving an artificial intelligence, AI model, from the AF, or otherwise rejecting an application session with the AF.

Description

Technical Field

[0001] Various example embodiments relate to UE and Application Function (AF) session protection for model transfer. Background Art

[0002] This section provides useful background information, but no admission is made that any of the techniques described herein represent prior art.

[0003] Artificial Intelligence (AI) / Machine Learning (ML) is planned to be used for various tasks in the 5G System (5GS) for improving productivity. Specifically, it is desirable to share AI / ML models between the 5G Application Function (AF) and the UE at the initiation of the AF. Unless adequate measures are taken to protect the distribution of AI / ML models between the AF and the UE, the AI / ML models and their distributed use may cause the risk of redundant communication or security and privacy issues.

[0004] In this document, the term UE refers to a device that can be used to implement mobile communications. For the purpose of clarity, the term UE is used as a countable noun. In this document, an application session refers to a session between an AF and a UE for data exchange between the AF and the UE.

[0005] In this context, including a piece of information means including the information in such a way or in a derived form so that the information can be subsequently retrieved. The included piece of information may be encrypted, scrambled, compressed, plain text, or in any other form. Summary of the invention

[0006] The scope of protection sought by the various embodiments is set out by the independent claims. Embodiments and features described in this specification that do not fall within the scope of the independent claims, if any, are to be construed as examples that aid in understanding the various embodiments.

[0007] According to a first exemplary aspect, there is provided a method in a user equipment UE, comprising:

[0008] Maintain the authentication and key management AKMA context for the application, which includes: UE identifier, AKMA anchor key K AKMA , and the primary AKMA key identifier A-KID;

[0009] Receive the secondary AKMA key identifier A-KID' from the application function AF;

[0010] The AKMA key identifier A-KID is used to authenticate the AF for the UE. The authentication includes:

[0011] deriving the AKMA temporary UE identifier A-TID from the secondary AKMA key identifier A-KID'; and

[0012] verifying that the A-TID is included in the primary AKMA key identifier A-KID; and

[0013] If the verification is positive, then

[0014] Establishing an application session with AF; and

[0015] An artificial intelligence (AI) model is received from the AF, otherwise the application session with the AF is rejected. The AI ​​model may be a machine learning model. The method may include replacing the AI ​​model previously received from the AF with a newer AI model received from the AF.

[0016] The method may include: performing authentication and key management AKMA for the application based on 3GPP credentials in the 5G system 5GS.

[0017] Verification may include obtaining the secondary AKMA key identifier A-KID' from the non-access stratum NAS container. Verification may include obtaining the secondary AKMA key identifier A-KID' from the NAS container in a NAS message carrying a new cause value identifying the type of NAS container as including AKMA A-KID'.

[0018] The secondary AKMA key identifier A-KID' may include an AF identifier identifying the AF. The AF identifier may be embedded in the secondary AKMA key identifier A-KID'.

[0019] The secondary AKMA key identifier A-KID' may be obtained via the dedicated network application function interface Ua*. The secondary AKMA key identifier A-KID' may be obtained from a session establishment request sent by the AF to the UE. The secondary AKMA key identifier A-KID' may include a routing indicator RID. The secondary AKMA key identifier A-KID' may include an AKMA temporary UE identifier A-TID. The secondary AKMA key identifier A-KID' may include an identifier of the AF. The secondary AKMA key identifier A-KID' may include a fully qualified domain name of the AF. The secondary AKMA key identifier A-KID' may include a home network identifier.

[0020] The method may further include providing an access and mobility management function with an indication that the UE supports network based triggering capabilities for application session establishment.

[0021] The method may also include authenticating the UE with the home network operator and, prior to maintaining the AKMA context, responsively acquiring the AKMA context.

[0022] The AKMA context may include an identifier of the UE. The identifier of the UE may be a subscription permanent identifier SUPI. The identifier of the UE may be a 5G globally unique subscription permanent identifier.

[0023] The primary AKMA key identifier A-KID may be in the format of a network access identifier NAI. The NAI format may comply with clause 2.2 of IETF RFC 7542. The AKMA key identifier A-KID may include a username portion. The username portion may include a routing indicator RID. The username portion may include an AKMA temporary UE identifier A-TID. The username portion may identify the AF. The username portion may include a fully qualified domain name of the AF. The primary AKMA key identifier A-KID may include a domain portion. The domain portion may include a home network identifier.

[0024] Before maintaining the AKMA context, the UE can obtain the authentication server function key K AUSF Generate AKMA anchor key K AKMA and the primary AKMA key identifier A-KID.

[0025] The method may include using the AKMA application key K in encryption or decryption of data exchanged in the application session. AF The AKMA application key K AF The AKMA anchor key K AKMA It can be concluded.

[0026] According to a second example aspect, there is provided a method in an application function AF, comprising:

[0027] Identify the desire to transfer the artificial intelligence AI model to the user equipment UE;

[0028] Sending an AKMA application key request of AKMA to an authentication and key management AKMA anchor function AAnF for applications, the AKMA application key request including: a UE identifier indicating that the AI ​​model is to be transferred to the UE, and an indication of triggering the UE;

[0029] An AKMA application key response is received from the AKMA anchor function AAnF, the AKMA application key response including: an AKMA application key K AF , and the primary AKMA key identifier A-KID;

[0030] Establishing an application session with the UE; and

[0031] Using AKMA Application Key K AF The AI ​​model is transferred to the UE in an encrypted manner to protect the AI ​​model during transfer.

[0032] The method may include generating a secondary AKMA key identifier A-KID'. The secondary AKMA key identifier A-KID' may include a routing indicator RID. The secondary AKMA key identifier A-KID' may include an AKMA temporary UE identifier A-TID. The secondary AKMA key identifier A-KID' may include an identifier of the AF. The secondary AKMA key identifier A-KID' may include a fully qualified domain name of the AF. The secondary AKMA key identifier A-KID' may include a home network identifier.

[0033] The method may include providing an AKMA anchor function AAnF with a secondary AKMA key identifier A-KID'. Alternatively, the method may include providing a UE with a secondary AKMA key identifier A-KID'. The UE with the secondary AKMA key identifier A-KID' may be provided via a dedicated network application function interface Ua*. The UE with the secondary AKMA key identifier A-KID' may be provided via a dedicated network application function interface Ua* in an application session request. The AF may receive a success response from the UE and responsively perform a transfer of the AI ​​model via the dedicated network application function interface.

[0034] According to a third example aspect, there is provided a method in an authentication and key management AKMA anchor function AAnF for applications, comprising:

[0035] Maintain the authentication and key management AKMA context for the application. The AKMA context includes: UE identifier, AKMA anchor key K AKMA , and the primary AKMA key identifier A-KID;

[0036] receiving an authentication and key management AKMA application key request for an application from an application function AF, the AKMA application key request including: a UE identifier indicating that an artificial intelligence AI model is to be transferred to the UE, and an indication that a UE call based on a non-access stratum NAS is required;

[0037] Using the identifier of the UE to obtain the maintained AKMA context corresponding to the UE; and

[0038] Send an AKMA application key response to the application function AF, the AKMA application key response includes: the primary AKMA key identifier A-KID and the AKMA application key K AF .

[0039] The method may further include generating a secondary AKMA key identifier A-KID'. The method may further include: providing the UE with the secondary AKMA key identifier A-KID' via the NAS container. The UE with the secondary AKMA key identifier A-KID' may be provided through a dedicated network application function interface.

[0040] According to a fourth example aspect, there is provided an apparatus comprising means for performing the method of any one of the preceding example aspects.

[0041] According to a fifth example aspect, a device is provided, which includes at least one processor, at least one memory and program code, which are jointly configured to cause the device to perform any method in the aforementioned example aspects when the program code is executed by the at least one processor.

[0042] The apparatus of the fourth or fifth example aspect may be implemented by a single server computer. The apparatus of the fourth or fifth example aspect may be implemented by multiple server computers. The apparatus of the fourth or fifth example aspect may be implemented by a virtualized computer. The apparatus of the fourth or fifth example aspect may be implemented by cloud computing. The apparatus of the fourth or fifth example aspect may serve as, or include, a UE. The apparatus of the fourth or fifth example aspect may be composed of a UE. The apparatus of the fourth or fifth example aspect may serve as, or include, an AF. The apparatus of the fourth or fifth example aspect may be composed of an AF. The apparatus of the fourth or fifth example aspect may serve as, or include, an AAnF. The apparatus of the fourth or fifth example aspect may be composed of an AAnF. The apparatus of the fourth or fifth example aspect may be a controller. The apparatus of the fourth or fifth example aspect may be a chipset. The apparatus may be a cloud computing entity.

[0043] According to a sixth example aspect, a system is provided, the system comprising an apparatus configured to perform the fourth or fifth example aspect of the method of the first example aspect. The system may comprise an apparatus configured to perform the fourth or fifth example aspect of the method of the second example aspect. The system may comprise an apparatus configured to perform the fourth or fifth example aspect of the method of the third example aspect.

[0044] According to a seventh example aspect, there is provided a computer program comprising computer executable program code configured to perform any method of the first or second or third example aspect.

[0045] The computer program may be stored in a computer-readable storage medium.

[0046] Any of the foregoing storage media may include digital data storage, such as data disks or magnetic disks, optical memory, magnetic memory, holographic memory, magneto-optical memory, phase change memory, resistive random access memory, magnetic random access memory, solid electrolyte memory, ferroelectric random access memory, organic memory, or polymer memory. The memory medium may be formed as a device having no other substantial function besides storing memory, or it may be formed as part of a device having other functions, including but not limited to the memory of a computer, a chipset, and a subcomponent of an electronic device.

[0047] Different non-binding example aspects and embodiments have been described above. The previous embodiments are only used to explain selected aspects or steps that can be utilized in implementation. Some embodiments may only be presented with reference to certain example aspects of the present invention. It should be understood that the corresponding embodiments may also be applicable to other example aspects. BRIEF DESCRIPTION OF THE DRAWINGS

[0048] For a more complete understanding of example embodiments, reference is now made to the following description taken in conjunction with the accompanying drawings, in which:

[0049] Figure 1 A schematic signaling diagram of an example embodiment is shown;

[0050] Figure 2 A schematic signaling diagram of an example embodiment is shown;

[0051] Figure 3 A block diagram showing an apparatus of an example embodiment is shown;

[0052] Figure 4 A flowchart illustrating the operation of an example embodiment in a user device;

[0053] Figure 5 An operational flow chart illustrating an example embodiment in application functionality; and

[0054] Figure 6 An operational flow diagram of an example embodiment in authentication and key management anchor functionality for an application is shown. DETAILED DESCRIPTION

[0055] By referring to the accompanying drawings Figures 1 to 6 , you can understand the example embodiments and their potential advantages. In this document, the same reference numerals represent the same parts or steps.

[0056] Figure 1 A schematic signalling diagram of an example embodiment is shown. Figure 1A user equipment UE 110 , a radio access network 120 , an access and mobility management function / session management function AMF / SMF 130 , an authentication and key management anchor function for applications 140 , and an application function AF 150 are shown. Figure 1 Various steps are also shown, including:

[0057] Step 1a: UE 110 provides a new UE indication that UE 110 supports network-based triggering capabilities. AMF 130 stores the new UE capability for UE 110.

[0058] Step 1b: After UE 110 is authenticated, both UE 110 and AAnF 140 store the corresponding K in the AKMA context of UE 110. AKMA And mainly A-KID.

[0059] The AF 150 identifies at some point in time a desire to send the AI ​​model to the UE 110. Therefore, the AF requires a secure application session for communicating with the UE.

[0060] Step 2: AF 150 requests AAnF 140 to provide a primary AKMA key identifier A-KID, and an AKMA application key K based on a UE identifier (such as SUPI or UE ID of UE 110 available with AF 150). AF AF 150 also includes an indication that a 5G NAS based UE invocation is required.

[0061] Steps 3, 4: AAnF 140 retrieves the AKMA context of UE 110 using the UE identifier (eg, SUPI) and provides the requested primary AKMA key identifier A-KID, AKMA application key K to AF 150. AF , and AKMA application key K AF Expiration time.

[0062] Step 5.0, 5a: AAnF 140 generates a secondary AKMA key identifier A-KID'. In an example embodiment, A-KID' adopts the NAI format specified in IETF RFC 7542 section 2.2, such as username@realm. The username part may include the RID and the AKMA temporary UE identifier A-TID. The realm part may include an AF identifier, such as a fully qualified domain name FQDN. In an alternative example embodiment, the username part includes the RID, A-TID and AF identifier. The realm part may then include the home network identifier of UE 110. Since AF 150 has indicated to notify UE 110 via NAS, AAnF 140 sends a request to AMF / SMF 130 and requests AMF / SMF to provide A-KID' to UE 110 through a new NAS container. AAnF 140 may also include a new NAS message cause value: AKMA A-KID'.

[0063] In another example embodiment, the AF 150 provides the A-KID′ to the AAnF 140 after step 4 .

[0064] Steps 5b, 5c: SMF / AMF 130 provides NAS container to UE 110.

[0065] Step 6: UE 110 authenticates AF 150 based on the received A-KID'. For example, it checks whether A-TID is correct. If yes, AF 150 is found authenticated.

[0066] Steps 6a, 6b, 6c: If AF 150 is authenticated, UE 110 initiates an application session establishment request to AF 150 using A-KID (eg, using the address received in A-KID′). Note that AF has identified UE 110 based on A-KID received from AAnF 140.

[0067] Step 7: After verification is complete, the AF 150 can transfer the AI ​​model via the Ua* protocol.

[0068] Figure 2 A schematic signalling diagram of an example embodiment is shown.

[0069] Here, the process is similar to Figure 1 However, in step 5, AF 150 generates A-KID' through Ua* protocol and provides A-KID' to UE 110 (step 6a). UE 110 verifies AF 150 based on A-TID available in A-KID'. When verification is successful, UE 110 initiates communication with AF 150 (steps 7a, 7b, 7c).

[0070] If the authentication of AF 150 fails, UE 110 rejects the request (step 7).

[0071] As shown in step 6b and step 7b, AF 150 does not need to obtain an AF key when establishing an application session with UE 110.

[0072] Figure 3 A block diagram of an apparatus 300 according to an embodiment of the present invention is shown.

[0073] The device 300 includes a memory 340 including a persistent computer program code 350. The device 300 also includes a processor 320 for controlling the operation of the device 300 using the computer program code 340, and a communication unit 310 for communicating with other nodes. The communication unit 310 includes, for example, a local area network (LAN) port; a wireless local area network (WLAN) unit; a Bluetooth unit; a cellular data communication unit; or a satellite data communication unit. The processor 320 includes, for example, any one or more of the following: a main control unit (MCU); a microprocessor; a digital signal processor (DSP); an application specific integrated circuit (ASIC); a field programmable gate array; and a microcontroller.

[0074] Figure 4 An operation flow chart of an example embodiment in a UE is shown, including any one or more of the following steps:

[0075] 401. Maintain the authentication and key management AKMA context for the application, which includes: UE identifier, AKM anchor key K AKMA , and primary AKMA key identifier A-KID;

[0076] 402. Receive a secondary AKMA key identifier A-KID' from the application function AF;

[0077] 403. Use the AKMA key identifier A-KID to authenticate the AF for the UE;

[0078] 404. The verification includes obtaining the AKMA temporary UE identifier A-TID from the secondary AKMA key identifier A-KID';

[0079] 405. The verification includes verifying whether the A-TID is included in the primary AKMA key identifier A-KID;

[0080] 406. If the verification is positive, an application session is established with AF;

[0081] 407. If the verification is positive, receive the artificial intelligence AI model from AF, otherwise reject the application session with AF.

[0082] The method may include performing any one or more of the following steps: 408. Performing authentication and key management AKMA for applications based on 3GPP credentials in the 5G system 5GS;

[0083] 409. During authentication, obtain the secondary AKMA key identifier A-KID' from the non-access layer container;

[0084] 410. In verification, the NAS container may include a new cause value identifying the type of the NAS container as including AKMA A-KID';

[0085] 411. The secondary AKMA key identifier A-KID' includes an AF identifier identifying the AF, wherein the AF identifier may be embedded in the secondary AKMA key identifier A-KID'; 412. The secondary AKMA key identifier A-KID' is obtained through the dedicated network application function interface Ua*;

[0086] 413. Obtain the secondary AKMA key identifier A-KID' obtained from the session establishment request sent by the AF to the UE;

[0087] 414. Include the routing indicator RID in the secondary AKMA key identifier A-KID';

[0088] 415. Include the AKMA temporary UE identifier A-TID in the secondary AKMA key identifier A-KID′;

[0089] 416. Include the identifier of the AF in the secondary AKMA key identifier A-KID';

[0090] 417. Including the fully qualified domain name of the AF in the secondary AKMA key identifier A-KID'; 418. Including the home network identifier in the secondary AKMA key identifier A-KID'; 419. Providing access and mobility management functions with an indication that the UE supports network-based triggering capabilities for application session establishment;

[0091] 420. Authenticate the UE with the home network operator and responsively obtain the AKMA context before maintaining the AKMA context;

[0092] 421. Including an identifier of the UE in the AKMA context, wherein the identifier of the UE may include a subscription permanent identifier SUPI;

[0093] 422. Define the primary AKMA key identifier A-KID in the network access identifier NAI format;

[0094] 423. Before maintaining the AKMA context, the UE generates an AKMA anchor key KAKMA and a primary AKMA key identifier A-KID from the authentication server function key KAUSF;

[0095] 424. The AKMA application key K is used in the encryption or decryption of data exchanged in the application session. AF and / or

[0096] 425. Derive the AKMA application key K from the AKMA anchor key KAKMA AF .

[0097] Figure 5 An operational flow chart of an example embodiment in AF is shown, including any one or more of the following steps:

[0098] 501. Identify the desire to transfer the artificial intelligence AI model to the user equipment UE;

[0099] 502. Send an AKMA application key request of AKMA to an authentication and key management AKMA anchor function AAnF for applications, the AKMA application key request including: a UE identifier indicating that the AI ​​model is to be transferred to the UE, and an indication of triggering the UE, such as a page_UE indication;

[0100] 503. Receive AKMA application key response from AKMA anchor function AAnF, including AKMA application key K AF , and the primary AKMA key identifier A-KID;

[0101] 504. Establishing an application session with the UE; and / or

[0102] 505. Use AKMA application key K AF The AI ​​model is transferred to the UE in an encrypted manner to protect the AI ​​model during the transfer.

[0103] The method may include performing any one or more of the following steps:

[0104] 506. Generate a secondary AKMA key identifier A-KID';

[0105] 507. Include the routing indicator RID in the secondary AKMA key identifier A-KID';

[0106] 508. Include the AKMA temporary UE identifier A-TID in the secondary AKMA key identifier A-KID′;

[0107] 509. Include the identifier of the AF in the secondary AKMA key identifier A-KID';

[0108] 510. Including the fully qualified domain name of the AF in the secondary AKMA key identifier A-KID'; 511. Including the home network HN identifier in the secondary AKMA key identifier A-KID'; 512. Providing an AKMA anchor function AAnF with the secondary AKMA key identifier A-KID';

[0109] 513. Optionally, providing a UE with a secondary AKMA key identifier A-KID' via a dedicated network application function interface Ua* (e.g., in an application session request); and / or 514. The AF receives a success response from the UE and responsively performs a transfer of the AI ​​model via UA*.

[0110] Figure 6 An operational flow chart of an example embodiment in AAnF is shown, including any one or more of the following steps: 601. Maintaining an authentication and key management AKMA context for an application, the AKMA context including: a UE identifier, an AKMA anchor key KAKMA, and a primary AKMA key identifier A-KID;

[0111] 602. Receive an authentication and key management AKMA application key request for an application from an application function AF, the AKMA application key request including: a UE identifier indicating that an artificial intelligence AI model is to be transferred to the UE, and an indication that a UE call based on a non-access stratum NAS is required;

[0112] 603. Using the UE identifier to obtain the maintained AKMA context corresponding to the UE; and / or

[0113] 604. Send an AKMA application key response to the application function AF, the AKMA application key response including the primary AKMA key identifier A-KID and the AKMA application key KAF.

[0114] The method may include performing any one or more of the following steps:

[0115] 605. Generate a secondary AKMA key identifier A-KID'; and / or 606. Provision the UE with the secondary AKMA key identifier A-KID' via the NAS container (optionally through a dedicated network application function interface).

[0116] Without limiting in any way the scope, interpretation, or application of the claims appearing below, a technical effect of one or more of the example embodiments disclosed herein is that the UE can authenticate the AF for model transfer. Another technical effect of one or more of the example embodiments disclosed herein is that there is no need to establish a new secret between the UE and the AF for confidentiality of the model transfer.

[0117] Embodiments may be implemented in software, hardware, application logic, or a combination of software, hardware, and application logic. In example embodiments, the application logic, software, or instruction set is maintained on any of various conventional computer-readable media. In the context of this document, a "computer-readable medium" may be any non-transitory medium or component that can contain, store, communicate, propagate, or transfer instructions that are transmitted by an instruction execution system, apparatus, or device (such as a computer, an example of which is a computer). Figure 3 Computer-readable media may include computer-readable storage media, which may be any medium or component that can contain or store instructions for use by or in conjunction with an instruction execution system, apparatus, or device, such as a computer.

[0118] If desired, the different functions discussed herein may be performed in different orders and / or simultaneously with each other. In addition, if desired, one or more of the functions described above may be optional or may be combined.

[0119] Although various aspects of the invention are set out in the independent claims, further aspects of the invention comprise other combinations of features of the described embodiments and / or dependent claims with features of the independent claims and not just the combinations explicitly set out in the claims.

[0120] It is also noted herein that although the above describes example embodiments of the invention, these descriptions should not be viewed in a limiting sense. Rather, numerous variations and modifications may be made without departing from the scope of the invention as defined in the appended claims.

Claims

1. A method in a user equipment UE, comprising: Maintain the authentication and key management AKMA context for the application, the AKMA context includes: UE identifier, AKMA anchor key K AKMA , and the primary AKMA key identifier A-KID; Receive the secondary AKMA key identifier A-KID' from the application function AF; Using the AKMA key identifier A-KID to authenticate the AF for the UE, the authentication comprising: Obtaining an AKMA temporary UE identifier A-TID from the secondary AKMA key identifier A-KID'; and verifying whether the A-TID is included in the primary AKMA key identifier A-KID; and If the verification is positive, then Establishing an application session with the AF; and Receiving an artificial intelligence (AI) model from the AF; or Otherwise the application session with the AF is rejected.

2. The method according to claim 1, further comprising: Based on the 3GPP credentials in the 5G system 5GS, authentication and key management AKMA for applications is performed.

3. The method according to claim 1 or 2, wherein the verification comprises: Get the secondary AKMA key identifier A-KID' from the non-access stratum NAS.

4. The method according to any one of claims 1 to 3, wherein the secondary AKMA key identifier A-KID' comprises: An AF identifier identifying the AF.

5. The method according to any one of claims 1 to 4, wherein the secondary AKMA key identifier A-KID' is obtained through a dedicated network application function interface Ua*.

6. The method according to any one of claims 1 to 5, wherein the secondary AKMA key identifier A-KID' is obtained from a session establishment request sent by the AF to the UE.

7. The method according to any one of claims 1 to 6, wherein the method further comprises: The UE is authenticated with a home network operator and, prior to the maintaining of the AKMA context, responsively acquiring the AKMA context.

8. The method according to any one of claims 1 to 7, further comprising: The AKMA application key K is used in the encryption or decryption of data exchanged in the application session. AF .

9. A method in an application function AF, comprising: Identify the desire to transfer the artificial intelligence AI model to the user equipment UE; Sending an AKMA application key request of AKMA to an authentication and key management for application AKMA anchor function AAnF, the AKMA application key request including: the UE identifier indicating that the AI ​​model is to be transferred to the UE, and an indication of triggering the UE; An AKMA application key response is received from the AKMA anchor function AAnF, the AKMA application key response comprising: an AKMA application key K AF , and the primary AKMA key identifier A-KID; establishing an application session with the UE; and Use the AKMA application key K AF The AI ​​model is transferred to the UE in an encrypted manner to protect the AI ​​model during the transfer.

10. The method according to claim 9, further comprising: Generate a secondary AKMA key identifier A-KID'.

11. The method according to claim 9 or 10, further comprising: Said AKMA anchor function AAnF is provided with said secondary AKMA key identifier A-KID'.

12. The method according to claim 9 or 10, further comprising: The UE is provided with the secondary AKMA key identifier A-KID'.

13. A method for application authentication and key management (AKMA) anchor function (AAnF), comprising: Maintain the authentication and key management AKMA context for the application, the AKMA context includes: UE identifier, AKMA anchor key K AKMA , and the primary AKMA key identifier A-KID; receiving an authentication and key management AKMA application key request for an application from an application function AF, the AKMA application key request comprising: an indication that an artificial intelligence AI model is to be transferred to the UE, and an indication that a UE call based on a non-access stratum NAS is required; using the identifier of the UE to obtain the maintained AKMA context corresponding to the UE; and Send an AKMA application key response to the application function AF, the AKMA application key response including: a primary AKMA key identifier A-KID and an AKMA application key K AF .

14. The method according to claim 13, further comprising: Generate a secondary AKMA key identifier A-KID'.

15. The method according to claim 14, further comprising: Via a NAS container, the UE is provided with the secondary AKMA key identifier A-KID'.

16. An apparatus comprising means for performing, in a user equipment (UE), the following: Maintains the authentication and key management AKMA context for the application, which includes: UE identifier, AKMA anchor key K AKMA , and the primary AKMA key identifier A-KID; Receive the secondary AKMA key identifier A-KID' from the application function AF; Using the AKMA key identifier A-KID to authenticate the AF for the UE, the authentication comprising: Obtaining an AKMA temporary UE identifier A-TID from the secondary AKMA key identifier A-KID'; and verifying whether the A-TID is included in the primary AKMA key identifier A-KID; and If the verification is positive, then Establishing an application session with the AF; and Receiving an artificial intelligence (AI) model from the AF; or Otherwise the application session with the AF is rejected.

17. The apparatus according to claim 16, further comprising: Component for performing authentication and key management AKMA for applications based on 3GPP credentials in the 5G system 5GS.

18. The apparatus according to claim 16 or 17, wherein the verification comprises: Get the secondary AKMA key identifier A-KID' from the non-access stratum NAS.

19. The apparatus according to any one of claims 16 to 18, wherein the secondary AKMA key identifier A-KID' comprises: An AF identifier identifying the AF.

20. The device according to any one of claims 16 to 19, further comprising: Means for obtaining said secondary AKMA key identifier A-KID' through the dedicated network application function interface Ua*.

21. The apparatus according to any one of claims 16 to 20, further comprising: Means for obtaining the secondary AKMA key identifier A-KID' from a session establishment request sent by the AF to the UE.

22. The apparatus according to any one of claims 16 to 21, further comprising: Means for authenticating said UE with a home network operator and responsively acquiring said AKMA context prior to said maintaining of said AKMA context.

23. The apparatus according to any one of claims 16 to 19, further comprising: The AKMA application key K is used for encryption or decryption of data exchanged in the application session. AF parts.

24. The apparatus according to any one of claims 16 to 23, wherein the apparatus comprises the UE, serves as the UE, or consists of the UE.

25. An apparatus comprising means for performing, in an application function AF: Identify the desire to transfer the artificial intelligence AI model to the user equipment UE; Sending an AKMA application key request of AKMA to the authentication and key management AKMA anchor function AAnF for applications, the AKMA application key request comprising: an identifier of the UE to which the AI ​​model is to be transferred; An AKMA application key response is received from the AKMA anchor function AAnF, the AKMA application key response comprising: an AKMA application key K AF , and the primary AKMA key identifier A-KID; establishing an application session with the UE; and Use the AKMA application key K AF The AI ​​model is transferred to the UE in an encrypted manner to protect the AI ​​model during the transfer.

26. The apparatus according to claim 25, further comprising: Means for generating a secondary AKMA key identifier A-KID'.

27. The apparatus according to claim 25 or 26, further comprising: Means for providing said AKMA anchor function AAnF with said secondary AKMA key identifier A-KID'.

28. The apparatus according to claim 25 or 26, further comprising: Means of providing said UE with said secondary AKMA key identifier A-KID'.

29. The apparatus according to any one of claims 25 to 28, wherein the apparatus serves as, comprises, or consists of the AF.

30. An apparatus comprising means for performing, in an Authentication and Key Management for Applications (AKMA) Anchor Function (AAnF), the following: Maintains the authentication and key management AKMA context for the application, which includes: UE identifier, AKMA anchor key KAKMA, and primary AKMA key identifier A-KID; receiving an authentication and key management AKMA application key request for an application from an application function AF, the AKMA application key request comprising: an identifier of the UE indicating that an artificial intelligence AI model is to be transferred to the UE, and an indication that a UE call based on a non-access stratum NAS is required; using the identifier of the UE to obtain the maintained AKMA context corresponding to the UE; and Send an AKMA application key response to the application function AF, the AKMA application key response including: a primary AKMA key identifier A-KID and an AKMA application key K AF .

31. The apparatus of claim 30, further comprising: Means for generating a secondary AKMA key identifier A-KID'.

32. The apparatus of claim 31 , further comprising: Means for providing said UE with said secondary AKMA key identifier A-KID' via a NAS container.

33. The device according to any one of claims 30 to 32, wherein the device is, comprises or consists of the AAnF.

34. An apparatus according to any one of claims 16 to 33, wherein the components include at least one processor; and at least one memory including computer program code, wherein the at least one memory and computer program code, together with the at least one processor, are configured to enable the execution of the apparatus.

35. A system comprising at least two devices, wherein the at least two devices are configured to perform the method according to any one of claims 1 to 15 in different devices of a UE, an AF, and an AAnF.

36. A computer readable medium comprising program instructions for causing an apparatus to perform the method according to any one of claims 1 to 15.

37. A computer-readable medium comprising program instructions for causing an apparatus to perform at least the following in a user equipment UE: Maintains the authentication and key management AKMA context for the application, which includes: UE identifier, AKMA anchor key K AKMA , and the primary AKMA key identifier A-KID; Receive the secondary AKMA key identifier A-KID' from the application function AF; Using the AKMA key identifier A-KID to authenticate the AF for the UE, the authentication comprising: Obtaining an AKMA temporary UE identifier A-TID from the secondary AKMA key identifier A-KID'; and verifying whether the A-TID is included in the primary AKMA key identifier A-KID; and If the verification is positive, then Establishing an application session with the AF; and Receiving an artificial intelligence (AI) model from the AF; or Otherwise the application session with the AF is rejected.

38. A computer readable medium comprising program instructions for causing a device to perform at least the following in an application function AF: Identify the desire to transfer the artificial intelligence AI model to the user equipment UE; Sending an AKMA application key request of AKMA to an authentication and key management for application AKMA anchor function AAnF, the AKMA application key request including: the UE identifier indicating that the AI ​​model is to be transferred to the UE, and an indication of triggering the UE; An AKMA application key response is received from the AKMA anchor function AAnF, the AKMA application key response comprising: an AKMA application key K AF , and the primary AKMA key identifier A-KID; establishing an application session with the UE; and Use the AKMA application key K AF The AI ​​model is transferred to the UE in an encrypted manner to protect the AI ​​model during the transfer.

39. A computer-readable medium comprising program instructions for causing an apparatus to perform at least the following in an Authentication and Key Management for Applications (AKMA) Anchor Function (AAnF): Maintains the authentication and key management AKMA context for the application, which includes: UE identifier, AKMA anchor key KAKMA, and primary AKMA key identifier A-KID; Receiving an authentication and key management AKMA application key request for an application from an application function AF, the AKMA application key request comprising: an identifier of the UE indicating that an artificial intelligence AI model is to be transferred to the UE, and an indication that a UE call based on a non-access stratum NAS is required; using the identifier of the UE to obtain the maintained AKMA context corresponding to the UE; and Send an AKMA application key response to the application function AF, the AKMA application key response including: a primary AKMA key identifier A-KID and an AKMA application key K AF .

Images