Encryption key transmission method and device for roaming user in communication network

Abstract

The present disclosure generally relates to transmitting an encryption key to a VPLMN in wireless communications. The method is performed by a first network element, comprising: transmitting a query message to a second network element to request an identification of an NF entity, where the query message comprises an identifier of a wireless device, and where the network function is an entity in a VPLMN for storing an encryption key; receiving a response to the query message from the second network element, wherein the response comprises an identifier of the NF entity; and transmitting a first message including an encryption key to the NF entity based on the identification of the NF entity, where the AF entity is located in the HPLMN or in a DN external to the HPLMN and the VPLMN.

Description

Technical Field

[0001] The present disclosure relates to wireless communications, and more particularly to transmitting encryption keys of a wireless device to a Visited Public Land Mobile Network (VPLMN). Background Art

[0002] In a communication network, mutual authentication of a user equipment (UE) and a communication network can be performed to allow only authenticated UEs and authenticated communication networks to communicate with each other. Once authenticated, an application function (AF) entity can provide various application services to the UE. An efficient and robust authentication mechanism involving various network elements is essential to provide secure communication between the application function entity and the UE and to protect the credentials of the UE and the application function entity. Summary of the invention

[0003] The present disclosure discloses methods, systems, devices, and storage media related to wireless communications, and more particularly, to transmitting application keys for application services of wireless devices to a VPLMN.

[0004] In one embodiment, the present disclosure describes a method for wireless communication. The method is performed by a first network element in a HPLMN (Home Public Land Mobile Network) of a wireless device, the wireless device being served by a VPLMN, the method comprising: transmitting a query message to a second network element to request an identifier of a network function (NF) entity, wherein the query message includes an identifier of the wireless device, and wherein the network function is an entity in the VPLMN for storing encryption keys; receiving a response to the query message from the second network element, the response including an identifier of the NF entity; and transmitting a first message to the NF entity based on the identifier of the NF entity, the first message including a target encryption key, the target encryption key including one of the following: an AKMA (Authentication and Key Management for Applications) application key (K) associated with the wireless device and an application function (AF) entity accessed by the wireless device for application services. AF ), an encryption key derived from the application key, or an encryption key independent of the application key, wherein the AF entity is located in the HPLMN or in a data network (DN) outside the HPLMN and the VPLMN.

[0005] In another embodiment, a network element or wireless device including a processor and a memory is disclosed. The processor may be configured to read computer code from the memory to implement any of the above methods.

[0006] In yet another embodiment, a computer program product is disclosed that includes a non-transitory computer readable program medium having computer code stored thereon.

[0007] Other aspects and alternatives of the above-described embodiments and their implementations are described in more detail below in the drawings, detailed description, and claims. BRIEF DESCRIPTION OF THE DRAWINGS

[0008] Figure 1 An exemplary communication network including various terminal devices, carrier networks, data networks, and service applications is shown.

[0009] Figure 2 Exemplary network functions or network nodes in a communication network are shown.

[0010] Figure 3 Exemplary network functions or network nodes in a wireless communication network are shown.

[0011] Figure 4 An exemplary network model for an Application Authentication and Key Management (AKMA) framework is shown.

[0012] Figure 5 An example wireless network node (or network element, network entity, entity) is shown.

[0013] Figure 6 An example user device is shown.

[0014] Figure 7 An exemplary key hierarchy under the AKMA framework is shown.

[0015] Figures 8 to 11 Various exemplary logic flows are shown for transmitting application keys to a network function in a VPLMN.

[0016] Fig.12 A high-level system architecture for transporting application keys to network functions in a VPLMN is shown. DETAILED DESCRIPTION

[0017] Figure 1The exemplary communication network shown as 100 in the figure may include terminal devices 110 and terminal devices 112, carrier networks 102, various service applications 140 and other data networks 150. The carrier network 102 may include, for example, an access network 120 and a core network 130. The carrier network 102 may be configured to transmit voice, data and other information (collectively referred to as data services) between the terminal devices 110 and 112, between the terminal devices 110 and 112 and the service applications 140, or between the terminal devices 110 and 112 and other data networks 150. A communication session and a corresponding data path may be established and configured for such data transmission. The access network 120 may be configured to provide network access to the core network 130 to the terminal devices 110 and 112. The access network 120 may, for example, support wireless access via wireless resources, or may support wired access. The core network 130 may include various network nodes or network functions that are configured to control communication sessions and perform network access management and data service routing. The service applications 140 may be hosted by various application servers that may be accessed by the terminal devices 110 and 112 via the core network 130 of the carrier network 102. The service applications 140 may be deployed as data networks outside of the core network 130. Similarly, other data networks 150 may be accessed by the terminal devices 110 and 112 via the core network 130 and may appear as a data destination or data source for a particular communication session instantiated in the carrier network 102.

[0018] Figure 1 The core network 130 in the embodiment may include various network nodes or functions that are geographically distributed and interconnected to provide network coverage for the service area of ​​the carrier network 102. These network nodes or functions may be implemented as dedicated hardware network elements. Alternatively, these network nodes or functions may be virtualized and implemented as virtual machines or software entities. Each network node may be configured with one or more types of network functions. These network nodes or network functions may jointly provide configuration and routing functions of the core network 130. The terms "network node" and "network function" may be used interchangeably in the present disclosure.

[0019] Figure 2 Also shown is an exemplary division of network functions in the core network 130 of the communication network 200. Figure 2 Only a single instance of a network node or function is shown in FIG. 1 , but a person skilled in the art will readily appreciate that each of these network nodes may be instantiated as multiple instances of the network node distributed throughout the core network 130. Figure 2As shown, the core network 130 may include, but is not limited to, network nodes such as: access management network node (AMNN) 230, authentication network node (AUNN) 260, network data management network node (NDMNN) 270, session management network node (SMNN) 240, data routing network node (DRNN) 250, policy control network node (PCNN) 220, and application data management network node (ADMNN) 210. Exemplary signaling and data exchange between various types of network nodes through various communication interfaces are shown in FIG. Figure 2 Such signaling and data exchanges may be carried by signaling or data messages that follow a predetermined format or protocol.

[0020] Above Figure 1 and Figure 2 The embodiments described in the present invention may be applied to both wireless communication systems and wired communication systems. Figure 3 Shown based on Figure 2 An exemplary cellular wireless communication network 300 is shown as a general implementation of the communication network 200 . Figure 3 The wireless communication network 300 may include a user equipment (UE) 310 (used as Figure 2 terminal device 110), radio access network (RAN) 320 (used as Figure 2 The access network 120 of the data network (DN) 150 and the core network 130, the core network 130 includes an access management function (AMF) 330 (used as Figure 2 AMNN 230), session management function (SMF) 340 (used as Figure 2 SMNN240), application function (AF) 390 (used as Figure 2 ADMNN 210), user plane function (UPF) 350 (used as Figure 2DRNN 250), policy control function (PCF, policy control function) 322 (used as Figure 2 PCNN 220), authentication server function (AUSF) 360 (used as Figure 2 AUNN 260), and universal data management (UDM) function 370 (used as Figure 2 270). Similarly, although Figure 3 Only a single instance of some network functions or nodes of the wireless communication network 300 (especially the core network 130) is shown in the figure, but it is easy for a person skilled in the art to understand that each of these network nodes or functions may have multiple instances distributed throughout the wireless communication network 300. Figure 3 130, but it can be considered to be associated with a specific service application 140 and can be considered to be outside the core network 140. In the present disclosure, various functions deployed in the wireless network as described above can also be referred to as functional entities, which can be implemented as network nodes, network elements, logical functions through hardware, software or a combination thereof.

[0021] exist Figure 3 In the present invention, UE 310 can be implemented as various types of mobile devices configured to access the core network 130 via RAN 320. UE 310 may include but is not limited to mobile phones, laptops, tablets, Internet of Things (IoT) devices, distributed sensor network nodes, and wearable devices. UE can also be a UE with multi-access edge computing (MEC) capabilities that supports edge computing. RAN 320 may include, for example, multiple wireless base stations distributed in the service area of ​​a carrier network. The communication between UE 310 and RAN 320 may be carried on a carrier network such as Figure 3 In the over-the-air (OTA) wireless interface indicated by 311 .

[0022] Continue to refer to Figure 3 , UDM 370 may form a permanent storage device or database for user contract and subscription data. UDM may also include an authentication credential repository and processing function (ARPF, such as Figure 3), for storing long-term security credentials for user authentication, and for using such long-term security credentials as input to perform calculations of encryption keys as described in more detail below. To prevent unauthorized opening of UDM / ARPF data, UDM / ARPF 370 may be located in a secure network environment of a network operator or a third party.

[0023] The AMF / SEAF 330 may communicate with the RAN 320, SMF 340, AUSF 360, UDM / ARPF 370, and Policy Control Function (PCF) 322 via communication interfaces indicated by various solid lines connecting these network nodes or functions. The AMF / SEAF 330 may be responsible for UE to non-access stratum (NAS) signaling management, and for configuring the registration and access of the UE 310 to the core network 130, and the allocation of the SMF 340 to support the communication needs of a specific UE. The AMF / SEAF 330 may also be responsible for UE mobility management. The AMF may also include a security anchor function (SEAF), as described in more detail below. Figure 3 The AUSF 360 may terminate user registration / authentication / key generation requests from the AMF / SEAF 330 and interact with the UDM / ARPF 370 to complete such user registration / authentication / key generation.

[0024] The SMF 340 may be assigned by the AMF / SEAF 330 to a specific communication session instantiated in the wireless communication network 300. The SMF 340 may be responsible for assigning the UPF 350 to support the communication session in the user data plane and the data stream in the communication session, and for configuring / adjusting the assigned UPF 350 (e.g., formulating packet detection and forwarding rules for the assigned UPF 350). In addition to being assigned by the SMF 340, the UPF 350 may also be assigned by the AMF / SEAF 330 to a specific communication session and data stream. The UPF 350 assigned and configured by the SMF 340 and the AMF / SEAF 330 may be responsible for data routing and forwarding, and for reporting network usage of a specific communication session. For example, the UPF 350 may be responsible for routing end-to-end data streams between the UE 310 and the DN 150, and between the UE 310 and the service application 140. The DN 150 and service applications 140 may include, but are not limited to, data networks and services provided by an operator of the wireless communication network 300 or by third-party data network and service providers.

[0025] The PCF 322 may be responsible for managing various levels of policies and rules applicable to communication sessions associated with the UE 310, and providing various levels of policies and rules applicable to communication sessions associated with the UE 310 to the AMF / SEAF 330 and the SMF 340. Therefore, the AMF / SEAF 330 may, for example, allocate the SMF 340 for the communication session based on the policies and rules associated with the UE 310 obtained from the PCF 322. Similarly, the SMF 340 may allocate the UPF 350 based on the policies and rules obtained from the PCF 322 to handle data routing and forwarding for the communication session.

[0026] Although Figures 1 to 3 Various exemplary embodiments described below are based on a cellular wireless communication network, but the scope of the present disclosure is not limited thereto, and its basic principles are applicable to other types of wireless communication networks and wired communication networks.

[0027] Figure 3 The network identity and data security in the wireless communication network 300 of the present invention may be managed through the user authentication process provided by AMF / SEAF 330, AUSF 360 and UDM / ARPF 370. Specifically, the UE 310 may first communicate with the AMF / SEAF 330 for network registration, and then the UE 310 may be authenticated by the AUSF 360 according to the user contract and subscription data in the UDM / ARPF 370. The communication session established for the UE 310 after user authentication to the wireless communication network 300 may then be protected by various levels of encryption keys / decryption keys. The generation and management of the various keys may be coordinated by the AUSF 360 and other network functions in the communication network.

[0028] AKMA FRAME

[0029] In a wireless communication network, an application function (AF or application function entity) can provide application services to the UE. The AF can be deployed in various locations, such as the UE's Home Public Land Mobile Network (HPLMN), the UE's Visited Public Land Mobile Network (VPLMN) (for example, when the UE roams to the VPLMN), or a data network (DN) outside the HPLMN and VPLMN. Secure data communication or encrypted data communication between the AF and the UE can be implemented under the Application Authentication and Key Management (AKMA) framework. The AKMA framework can be based on various authentication processes, such as the 5G Authentication and Key Agreement (5G-AKA) method, the Extensible Authentication Protocol Method for 3rd Generation Authentication and Key Agreement (EAP-AKA') method, or the Extensible Authentication Protocol-Transport Layer Security (EAP-TLS) method, etc.

[0030] Figure 4 An exemplary network model 400 for implementing the AKMA framework is shown. The model includes various network elements. Each network element can be implemented as a physical entity or a logical entity that provides a specific set of network functions. The logical entity can be based on software, hardware, firmware, or any combination thereof. For example, the logical entity may include a server that provides the functionality. For another example, the logical entity may be implemented based on a cloud-based service or platform (such as Software as a Service (SaaS), Platform as a Service (PaaS), etc.).

[0031] AKMA Anchor Function (AAnF) 412 provides a security anchor function in the HPLMN. AAnF stores the AKMA anchor key (K AKMA), which is received from the Authentication Server Function (AUSF) 416 after the UE 424 completes a successful primary authentication. The AAnF may also generate key material to be used between the UE and the Application Function (AF) 420, and maintain the UE AKMA context (also referred to as the AKMA security context).

[0032] AF 420 can provide application services to UE. Under the AKMA framework, AF can use K AKMA The identifier requests the AAnF for its AKMA application key, which is denoted as K AF The identifier may include an AKMA key identifier (A-KID). A-KID can only provide the AF with the KID after the operator network authenticates and authorizes the AF. AF AF can be located inside or outside the operator network. In this disclosure, for simplicity, AKMA application key (K AF ) can also be called AF key.

[0033] The Network Exposure Function (NEF) 410 may be configured to enable and authorize external AFs to access AKMA services and forward AKMA service requests to AAnFs. In the case where there are multiple AAnFs, the NEF may also perform AAnF selection.

[0034] AUSF 416 may provide the UE's subscription permanent identifier (SUPI) and AKMA key materials (eg, A-KID, K AKMA ). AUSF can also perform AAnF selection.

[0035] The UDM may store AKMA subscription data of a subscriber (or a UE subscribed to a wireless communication network).

[0036] Reference Figure 4, various interfaces may be involved in the AKMA framework. These interfaces may include Nnef, Naanf, Nudm, Uausf, and Namf, and because each interface corresponds to a service provided by a network element, it can be called a service-based interface (SBI). For example, Nnef represents the SBI utilized by NEF; Naanf represents the SBI utilized by AAnF; and Nudm represents the SBI utilized by UDM. Network elements can interact with each other via various SBIs. SBI can provide security protection. For example, SBI can be confidentiality protected, integrity protected, and replay protected.

[0037] Figure 4 An embodiment is shown in which the AAnF is deployed as a standalone function. Other deployment options may be selected. For example, the AAnF may be co-located with the AUSF, or the AAnF may be co-located with the NEF.

[0038] Figure 5 An example of an electronic device 500 is shown, which is used to implement various network nodes, network elements, network entities, such as network base stations (e.g., radio access network nodes), core networks (CNs), core network elements / entities (e.g., AMFs, UDMs, AAnFs, etc.), and operations and maintenance (OAM), etc. Optionally, in one embodiment, the example electronic device 500 may include a wireless transmission / reception (transmitting / receiving, Tx / Rx) circuit 508 to transmit / receive communications with UEs and / or other base stations. Optionally, in one embodiment, the electronic device 500 may also include a network interface circuit 509 (e.g., optical or wired interconnection, Ethernet, and / or other data transmission media / protocols) for communicating the base station with other base stations and / or the core network. The electronic device 500 may optionally include an input / output (I / O) interface 506 to communicate with an operator, etc.

[0039] The electronic device 500 may also include a system circuit 504. The system circuit 504 may include (one or more) processors 521 and / or a memory 522. The memory 522 may include an operating system 524, instructions 526, and parameters 528. The instructions 526 may be configured for one or more processors 521 to perform the functions of a network node. The parameters 528 may include parameters that support the execution of the instructions 526. For example, the parameters may include network protocol settings, bandwidth parameters, radio frequency mapping allocations, and / or other parameters.

[0040] In the present disclosure, network functions / network entities / entities (such as AMF, AUSF, UDM, AAnF, NEF, AF, etc.) may be implemented by hardware, software, or a combination of hardware and software, and may be implemented or integrated in the electronic device 500. They may also be implemented as logical entities hosted by the electronic device 500.

[0041] Figure 6 An example of an electronic device implementing a terminal device (e.g., UE) 600 is shown. UE 600 may be a mobile device, such as a smart phone or a mobile communication module provided in a vehicle. UE 600 may include part or all of the following items: a communication interface 602, a system circuit 604, an input / output (I / O) interface 606, a display circuit 608, and a storage device 609. The display circuit may include a user interface 610. The system circuit 604 may include any combination of hardware, software, firmware, or other logic / circuits. The system circuit 604 may be implemented, for example, with one or more systems on a chip (Systems on aChip, SoC), application specific integrated circuits (application specific integrated circuit, ASIC), discrete analog and digital circuits, and other circuits. The system circuit 604 may be part of an implementation of any desired function in UE 600. In this regard, the system circuit 604 may include logic that facilitates the following operations: for example, decoding and playing music and video (e.g., MP3, MP4, MPEG, AVI, FLAC, AC3 or WAV decoding and playback); running applications; accepting user input; saving and retrieving application data; establishing, maintaining and terminating cellular phone calls or data connections (as an example, for Internet connections); establishing, maintaining and terminating wireless network connections, Bluetooth connections, or other connections; and displaying relevant information on the user interface 610. The user interface 610 and the input / output (I / O) interface 606 may include a graphical user interface, a touch-sensitive display, tactile feedback or other tactile output, voice or facial recognition input, buttons, switches, speakers, and other user interface elements. Additional examples of the I / O interface 606 may include microphones, video and still image cameras, temperature sensors, vibration sensors, rotation and orientation sensors, headphone and microphone input / output jacks, Universal Serial Bus (USB) connectors, memory card slots, radiation sensors (e.g., IR (infrared) sensors), and other types of inputs.

[0042] Reference Figure 6, the communication interface 602 may include Radio Frequency (RF) transmission (Tx) and reception (Rx) circuits 616 that process transmission and reception of signals through one or more antennas 614. The communication interface 602 may include one or more transceivers. The transceiver may be a wireless transceiver that includes modulation / demodulation circuitry, digital to analog converters (DAC), shaping tables, analog to digital converters (ADC), filters, waveform shapers, filters, preamplifiers, power amplifiers, and / or other logic for transmission and reception through one or more antennas or (for some devices) through a physical (e.g., wired) medium. The transmitted and received signals may conform to any of a variety of the following: format, protocol, modulation (e.g., QPSK, 16-QAM, 64-QAM, or 256-QAM), frequency channel, bit rate, and encoding. As a specific example, the communication interface 602 may include a transceiver that supports transmission and reception under the following standards: 2G, 3G, BT (Bluetooth), WiFi (Wireless Fidelity), Universal Mobile Telecommunications System (UMTS), High Speed ​​Packet Access (HSPA) +, 4G / Long Term Evolution (LTE), and 5G standards. However, whether it is from the 3rd Generation Partnership Project (3GPP), GSM Association, 3GPP2, IEEE, or other partners or standards bodies, the technology described below is applicable to other wireless communication technologies.

[0043] Reference Figure 6 , the system circuit 604 may include one or more processors 621 and a memory 622. The memory 622 stores, for example, an operating system 624, instructions 626, and parameters 628. The processor 621 is configured to execute the instructions 626 to implement the desired functions of the UE 600. The parameters 628 may provide and specify configuration and operating options for the instructions 626. The memory 622 may also store any BT, WiFi, 3G, 4G, 5G, or other data that the UE 300 will send or has received through the communication interface 602. In various embodiments, the system power for the UE 600 may be supplied by a power storage device such as a battery or a transformer.

[0044] Under the AKMA framework, various keys may be involved, and these keys may be used as follows Figure 7 The hierarchical structure shown is organized. Figure 7 An example key hierarchy may include the following keys at different levels: K AUSF , K AKMA and K AF These keys can be derived and stored in parallel on both the network side and the Mobile Equipment (ME) side. ME refers to a part of the UE and other parts of the UE, such as the Universal Subscriber Identity Module (USIM).

[0045] After a successful primary authentication between the UE and the wireless communication network (e.g., the UE is authenticated by the operator), the AUSF and / or the UE may derive K based on the UE's integrity key (IK) and the UE's cipher key (CK). AUSF Alternatively, the AUSF may derive K based on a transformation of the UE's integrity key (denoted as IK') and a transformation of the UE's cipher key (denoted as CK'). AUSF .

[0046] Based on K AUSF , ME and AUSF can use the Key Derivation Function (KDF) based on K AUSF and UE’s SUPI to derive K AKMA .

[0047] Then based on K AKMA , ME and AAnF can also use KDF similarly to calculate K AKMA and AF's identifier derivation K AF It should be noted that the UE can store multiple K AF , each K AF Corresponds to one AF. Similarly, AF can store multiple K AF , each K AF Corresponds to one UE.

[0048] The various keys described in this article can have a lifetime. For example, K AKMA Until the next successful primary authentication. For another example, AAnF can be K AF Configuring the Lifetime. In some embodiments, the lifetime of a key may be associated with a timer, such that once use of the key begins, the timer is started, and once the timer expires, the key is refreshed.

[0049] In a wireless communication network, UE can subscribe to various application services from AF. When invoking services provided by AF, a secure communication link needs to be established and maintained. Encryption keys can be used to encrypt the data flow between UE and AF. Different keys can be selected depending on the use case scenario.

[0050] In one scenario, the UE is roaming in a VPLMN and needs to invoke an application service from the AF in its HPLMN. The AKMA application key (K AF ) for encryption. Alternatively, one can use AF The derived encryption key.

[0051] In another scenario, the UE is roaming in a VPLMN and needs to invoke an application service from an AF in a data network other than the HPLMN and VPLMN. In this case, the AF can be used to invoke an application service from the K AF The derived encryption key K AF AF can also be selected to be independent of K AF its own encryption key.

[0052] The above scenarios bring special challenges to the specification control in HPLMN. For example, the encryption key may not be transparent because the type of encryption key needs to be identified. AF In the case of encryption keys, the external AF may not even share the keys with the VPLMN, however this information needs to be passed to the regulatory control point. As another example, a key storage mechanism needs to be implemented so that encryption can be used for the VPLMN.

[0053] In the present disclosure, various embodiments of pushing encryption keys to a VPLMN are disclosed. These embodiments at least address the above challenges and improve wireless communications. A large amount of details including interactions between various network elements are described below.

[0054] Example 1: Using HPLMNAF for key transmission for roaming UE

[0055] In this embodiment, the UE roams in the VPLMN and needs to request application services from the AF in its HPLMN. The HPLMN AF determines the NF in the VPLMN responsible for storing application keys by querying the NRF (Network Repository Function) and pushes the application keys to the VPLMN NF. Figure 8 Exemplary steps are described in detail.

[0056] Step 0

[0057] This step is a prerequisite. The UE is roaming in a VPLMN and has successfully performed a primary authentication with the core network (eg, AAnF, AUSF, etc.), for example, under the AKMA framework.

[0058] Step 1

[0059] Before initiating communication with AF, UE can AUSF Generate / derive the AKMA anchor key (K AKMA ) and the corresponding AKMA key identifier A-KID. In this embodiment, the UE invokes an application service from the AF in the HPLMN (HPLMN AF) and may start sending messages, such as an application session establishment request message, to the HPLMN AF. The application session establishment request message may include the derived A-KID. The UE may derive the KID before or after sending the application session establishment request message. AF UE can also be based on K AF Derive the encryption key K AF The encryption key derived from the encryption key may be referred to as an application key, which may be used to encrypt the data flow between the HPLMN AF and the UE.

[0060] As mentioned above, A-KID identifies the K AKMA Key. A-KID can be in the format of Network Access Identifier (NAI), that is, username@realm. Specifically, the username part can include the UE's Routing Identifier (RID) and AKMA Temporary UE Identifier (A-TID), and the realm part can include the home network identifier.

[0061] A-TID can be derived from UE's SUPI and K AUSF For example, A-TID = KDF("A-TID",SUPI,K AUSF ), where KDF is the key derivation function.

[0062] Step 2

[0063] If the HPLMN AF does not have an activation context associated with the A-KID, the HPLMN AF may select an AAnF based on its local policy or the UE's RID and send a message with the A-KID, such as a Naanf_AKMA_ApplicationKey_Get request message, to the selected AAnF to request the KID for the UE. AF The HPLMNAF may also include its identity (AF_ID) in the request message.

[0064] AF_ID may include the fully qualified domain name (Qualified Domain Name, FQDN) of the AF and the security protocol identifier that the AF will use with the UE. For example, the security protocol may include the Ua* security protocol.

[0065] In an example embodiment, the AAnF may check whether the AAnF can provide services to the AF based on, for example, configured local policies or authorization information available in signaling (eg, Oauth2.0 tokens). If the check fails, the AAnF may reject the request.

[0066] If the check is successful, the AAnF may then AKMA The presence of the key is used to further verify whether the UE (subscriber) is authorized to use AKMA.

[0067] If there is K in AAnF AKMA , then AAnF can proceed to step 3.

[0068] If K does not exist in AAnF AKMA , then AAnF can continue with step 4 with an error response.

[0069] Step 3

[0070] If AAnF does not have readily available K AF , then AAnF from K AKMA Derivation of the AKMA application key (K AF ).

[0071] The derivation can be based on a KDF, for example, K AF =KDF(AF_ID, K AKMA ), where AF_ID = (AF's FQDN || Ua*security protocol identifier), and “||” is a cascade operation.

[0072] Step 4

[0073] The AAnF sends a response message to the HPLMN AF, such as a Naanf_AKMA_ApplicationKey_Get response message, and the response may include at least one of the following: SUPI, K AF and K AF Expiration time.

[0074] If the situation is that there is no K in AAnF AKMA , as described in step 2, the AAnF may reply with an error response. The HPLMN AF may proceed directly to step 10 upon receiving an error indication.

[0075] Step 5

[0076] In a wireless network, depending on the location of the UE, the UE may be served by different PLMNs (such as its HPLMN, or VPLMN if the UE is roaming). The HPLMN AF may need to determine which PLMN is serving the UE. In an example embodiment, the HPLMN AF may subscribe to the PCF to be informed of the PLMN ID of the PLMN to which the UE is currently registered (i.e., the PLMN serving the UE). The PCF may choose to send the PLMN ID to the HPLMN AF immediately after receiving the subscription.

[0077] In an example implementation, the subscription may be triggered when the PLMN ID is updated. For example, due to UE roaming, the PCF may send an updated PLMN ID to the HPLMN AF.

[0078] In an example embodiment, the PCF may additionally or alternatively send periodic notifications regarding the PLMN ID.

[0079] Step 6

[0080] When the UE is roaming in a VPLMN, the PCF forwards the PLMN ID of the VPLMN serving the UE to the HPLMN AF. The HPLMN AF stores the PLMN ID.

[0081] Step 7

[0082] Before the HPLMN AF can push / transmit the application key to the VPLMN, the HPLMN AF needs to first identify and locate the specific network function (NF) in the VPLMN responsible for storing the application key. The HPLMN AF may send a query message to the HPLMN network routing function (NRF) to retrieve a specific VPLMN NF. In an example embodiment, the query message may carry the PLMN ID received in the previous step and the query rule (e.g., for querying the NF storing the application key). The query may be sent to the VPLMN NRF via the HPLMN NRF. The VPLMN NRF may return the VPLMN NF (e.g., AMF, AAnF, SMF) storing the application key to the HPLMN NAF in the form of an identifier or address of the VPLMN NF. The VPLMN NF for storing the application key may include an AMF, an AAnF, or an SMF.

[0083] Step 8

[0084] After receiving the VPLMN NF storing the application key, the HPLMN AF may send a push application key request message to the VPLMN NF. The message may carry the application key, which may include K AF Or from K AF The derived encryption key. The application key may be used to encrypt the data flow between the UE and the HPLMN AF. The message may also include an identifier of the UE, such as the SUPI or GPSI (Generic Public Subscription Identifier) ​​of the UE.

[0085] The message may also include a key indicator indicating that the application key included in the message is K AF Or from K AF The derived encryption key.

[0086] In some example embodiments, the HPLMN AF may obtain the application key (K AF Or from K AF The message may further include an indicator indicating one of: i) whether the carried key is the data flow encryption / decryption key between the UE and the HPLMN AF; or ii) whether the carried key is the data flow encryption / decryption key between the UE and the HPLMN AF.

[0087] Step 9

[0088] The VPLMN NF receives the message sent in the previous step and stores the application key carried in the message. The VPLMN NF may also establish a corresponding relationship between the application key and the UE.

[0089] In response, the VPLMN NF may send a Push Application Key Response message to the HPLMN AF.

[0090] According to this step, the VPLMN maintains a local copy of the application key.

[0091] Step 10

[0092] The HPLMN AF sends an application session establishment response to the UE. If the information in step 4 indicates that the AKMA application key request failed, the AF can reject the application session establishment by including the failure reason. Afterwards, the UE can trigger a new application session establishment request with the latest A-KID to the AKMA AF.

[0093] Embodiment 2: Using HPLMN AF for key transmission for roaming UE

[0094] In this embodiment, the UE roams in the VPLMN and needs to request an application service from the AF in its HPLMN. The HPLMN AF determines the NF in the VPLMN responsible for storing the application key via the UDM and pushes the application key to the VPLMN NF. Figure 8 Exemplary steps are described in detail.

[0095] Step 0

[0096] This step is a prerequisite and is optional. The UE is roaming in a VPLMN and has successfully performed a primary authentication with the core network (eg AAnF, AUSF, etc.) under the AKMA framework, for example.

[0097] Step 1

[0098] Before initiating communication with AF, UE can AUSF Generate / derive the AKMA anchor key (K AKMA ) and the corresponding AKMA key identifier A-KID. In this embodiment, the UE invokes the application service from the HPLMN AF and may start sending messages, such as an application session establishment request message, to the HPLMN AF. The application session establishment request message may include the derived A-KID in the application session establishment request message. The UE may derive the KID before or after sending the application session establishment request message. AF UE can also be based on K AF Derive the encryption key K AFThe encryption key derived from the encryption key may be referred to as an application key, which may be used to encrypt the data flow between the HPLMN AF and the UE.

[0099] As mentioned above, A-KID identifies the K AKMA A-KID can be in the format of Network Access Identifier (NAI), that is, username@realm.

[0100] A-TID can be derived from UE's SUPI and K AUSF For example, A-TID = KDF("A-TID",SUPI,K AUSF ), where KDF is the key derivation function.

[0101] Step 2

[0102] If the HPLMN AF does not have an activation context associated with the A-KID, the HPLMN AF may select an AAnF based on its local policy or the UE's RID and send a message with the A-KID, such as a Naanf_AKMA_ApplicationKey_Get request message, to the selected AAnF to request the KID for the UE. AF The HPLMN AF may also include its identity (AF_ID) in the request message.

[0103] AF_ID may include the FQDN of the AF and a security protocol identifier that the AF will use with the UE. For example, the security protocol may include the Ua* security protocol.

[0104] In an example embodiment, the AAnF may check whether the AAnF can provide services to the AF based on, for example, configured local policies or authorization information available in signaling (eg, Oauth2.0 tokens). If the check fails, the AAnF may reject the request.

[0105] If the check is successful, the AAnF may then AKMA The presence of the key is used to further verify whether the UE (subscriber) is authorized to use AKMA.

[0106] If there is K in AAnF AKMA , then AAnF can proceed to step 3.

[0107] If K does not exist in AAnF AKMA , then AAnF can continue with step 4 with an error response.

[0108] Step 3

[0109] If AAnF has no readily available K AF , then AAnF from K AKMA Derivation of the AKMA application key (K AF ).

[0110] The derivation can be based on a KDF, for example, K AF =KDF(AF_ID, K AKMA ), where AF_ID = (AF's FQDN || Ua*security protocol identifier), and “||” is a cascade operation.

[0111] Step 4

[0112] The AAnF sends a response message to the HPLMN AF, such as a Naanf_AKMA_ApplicationKey_Get response message, and the response may include at least one of the following: SUPI, K AF and K AF Expiration time.

[0113] If the situation is that there is no K in AAnF AKMA , as described in step 2, the AAnF may reply with an error response. The HPLMN AF may proceed directly to step 10 upon receiving an error indication.

[0114] Step 5

[0115] Before the HPLMN AF can push / transfer the application key to the VPLMN, the HPLMN AF may need to first identify and locate the specific network function (NF) in the VPLMN responsible for storing the application key. The HPLMN AF may send a message with a UE ID to the UDM, such as a Nudm_Get_Roaming_NFid request message, to query a specific NF in the VPLMN. The UE ID may include at least one of the following: a SUPI of the UE or a GPSI of the UE.

[0116] Step 6

[0117] In response, the UDM sends a response message, such as a Nudm_Get_Roaming_NFid response message, to the HPLMN AF with VPLMN NF identification information that identifies a specific NF in the VPLMN. The VPLMN NF identification information may include one of the following: i) the AMF ID or AMF address of the AMF to which the UE is currently registered in the VPLMN network, or ii) the SMF ID or SMF address of the SMF used in the local breakout mode. Note that in the local breakout mode, when a PDU session is established for the UE, data traffic is routed directly from the VPLMN to the data network. The local breakout mode utilizes the SMF and UPF in the VPLMN.

[0118] Step 7

[0119] After receiving the VPLMN NF storing the application key, the HPLMN AF may send a push application key request message to the VPLMN NF. The message may carry the application key, which may include K AF Or from K AF The derived encryption key. The application key may be used to encrypt the data flow between the UE and the HPLMN AF. The message may also include an identifier of the UE, for example, the SUPI or GPSI of the UE.

[0120] The message may also include a key indicator indicating that the application key included in the message is K AF Or from K AF The derived encryption key.

[0121] In some example embodiments, the HPLMN AF may obtain the application key (K AF Or from K AF The message may further include an indicator indicating one of: i) whether the carried key is the data flow encryption / decryption key between the UE and the HPLMN AF; or ii) whether the carried key is the data flow encryption / decryption key between the UE and the HPLMN AF.

[0122] Step 8

[0123] The VPLMN NF receives the message sent in the previous step and stores the application key carried in the message. The VPLMN NF may also establish a corresponding relationship between the application key and the UE.

[0124] In response, the VPLMN NF may send a Push Application Key Response message to the HPLMN AF.

[0125] According to this step, the VPLMN maintains a local copy of the application key.

[0126] Step 9

[0127] The HPLMN AF sends an application session establishment response to the UE. If the information in step 4 indicates that the AKMA application key request failed, the AF can reject the application session establishment by including the failure reason. Afterwards, the UE can trigger a new application session establishment request with the latest A-KID to the AKMA AF.

[0128] Embodiment 3: Using AAnF for key transmission for roaming UE (AF in data network)

[0129] In this embodiment, the UE is roaming in a VPLMN and needs to request an application service from an AF in a data network that belongs to a third party and is outside the HPLMN and PLMN of the UE.

[0130] Fig.10 The exemplary steps of AAnF pushing the application key to the NF responsible for storing the application key in the VPLMN are shown. The details are described as follows.

[0131] Step 0

[0132] This step is a prerequisite. The UE initiates an application session establishment request to establish an application service with the AF in the data network.

[0133] Step 1

[0134] AF needs to request the AKMA application key (K AF ). In this case, the AF first discovers the HPLMN of the UE based on the A-KID associated with the UE, and then sends a key request message, such as a Nnef_AKMA_ApplicationKey_Get request message, to the AAnF in the HPLMN. The key request message may include the A-KID and an identifier of the AF (AF ID), which may be sent to the AF in step 0. Optionally, the key request message may also include an indicator indicating that the UE ID is not required (the indicator may be referred to as a "UE ID not required indicator"). In an example embodiment, the key request message may be sent via an NEF service application program interface (Application ProgramInterface, API) to delegate the key request to the NEF.

[0135] Step 2

[0136] If NEF authorizes AF to request K AF , the NEF discovers and selects the AAnF based on its local policy or the UE's RID.

[0137] Step 3

[0138] NEF sends or forwards K to the selected AAnF AF Request to request K for UE AF The request may include at least one of: an A-KID or an AF identifier of the AF. The request may be sent via, for example, a Naanf_AKMA_ApplicationKey_Get request message.

[0139] AAnF can handle this request in the following ways:

[0140] If there is K in AAnF AKMA , then AAnF can proceed to step 4.

[0141] If K does not exist in AAnF AKMA , then AAnF can continue with step 8 with an error response.

[0142] Step 4

[0143] After receiving K in step 3 AF When requested, AAnF can process the request in the following ways:

[0144] If K does not exist in AAnF AKMA , then AAnF may proceed to step 8 by sending a response indicating an error to NEF.

[0145] If there is K in AAnF AKMA , then AAnF generates K AF In this embodiment, the AAnF is responsible for pushing the application key to the specific VPLMN NF responsible for storing the application key. The AAnF may query the UDM to retrieve the specific VPLMN NF. For example, Fig.10 As shown, the AAnF may send a Nudm_Get_Roaming_NFid request message with a UE ID to the UDM. The UE ID may be, for example, the SUPI of the user.

[0146] Step 5

[0147] In response, the UDM sends a response message, e.g., Nudm_Get_Roaming_NFid response message, with VPLMN NF identification information to the AAnF, which identifies the specific VPLMN NF responsible for storing the application key. The VPLMN NF identification information may include one of the following: i) the AMF ID or AMF address of the AMF to which the UE is currently registered in the VPLMN network, or ii) the SMF ID or SMF address of the SMF used in local breakout mode.

[0148] Step 6

[0149] After receiving the identification information of the VPLMN NF storing the application key, the AAnF may push the application key to the VPLMN NF via, for example, a Push Application Key Request message. This message may carry K AF The message may also include an identifier of the UE, such as the SUPI of the UE.

[0150] As an AF in a third-party data network, according to the agreement between the third party and the HPLMN / VPLMN, the AF can use K AF Or you can not use K AF , to encrypt the data flow between the UE and the AF. In some example embodiments, the AAnF can determine K AF is used to encrypt the data stream. However, in some other implementations, AAnF may not be able to determine K AF Whether the key carried is used to encrypt the data flow. Therefore, the push application key request message may also include an indicator indicating one of the following scenarios: i) the key carried is the encryption / decryption key of the data flow between the UE and the AF; or ii) it is not determined whether the key carried is the encryption / decryption key of the data flow between the UE and the AF. Note that the second scenario can be understood as a best-effort implementation, because it is up to the VPLMN to decide whether to try to send the application key sent in the push application key request message. In an example implementation, the indicator may further indicate that the key carried is K AF .

[0151] Step 7

[0152] The VPLMN NF receives the message sent in the previous step and stores the application key carried in the message. The VPLMN NF may also establish a corresponding relationship between the application key and the UE.

[0153] In response, the VPLMN NF may send a Push Application Key Response message to the AAnF.

[0154] Step 8

[0155] AAnF sends a message with K to NEF AF , K AF Expiration time (K AF The response may be sent via, for example, a Naanf_AKMA_ApplicationKey_Get response message.

[0156] Note that if K does not exist in AAnF AKMA , then AAnF may send a response to NEF indicating an error condition.

[0157] Step 9

[0158] NEF will have K AF , K AF The NEF forwards the response with the expiry time and optionally the UE's GPSI (UE's External ID) to the AF. Based on local policy, the NEF may use the Nudm_SubscriberDataManagement service to convert the SUPI to GPSI and optionally include the GPSI (External ID) in the response. If the UE ID Not Required indicator was included in the Key Request message in step 1, the NEF will not provide the GPSI to the AF. Also note that the NEF will not send the UE's SUPI to the AF.

[0159] Note that if step 8 indicates an error condition, the NEF will forward the error condition to the AF.

[0160] Embodiment 4: Using NEF for key transmission for roaming UE (AF in data network)

[0161] In this embodiment, the UE is roaming in a VPLMN and needs to request an application service from the AF in the data network. The data network belongs to a third party and is outside the HPLMN and PLMN of the UE. The NEF is used to transfer the application key to a specific VPLMN NF responsible for storing the key.

[0162] Fig.11 The exemplary steps of NEF pushing application keys to VPLMN NF are shown. The details are described as follows.

[0163] Step 0

[0164] This step is a prerequisite. The UE initiates an application session establishment request to establish an application service with the AF in the data network.

[0165] Step 1

[0166] AF needs to request the AKMA application key (K AF ). In this case, the AF first discovers the HPLMN of the UE based on the A-KID associated with the UE, and then sends a key request message, such as a Nnef_AKMA_Naanf_AKMA_ApplicationKey_Get request message, to the AAnF in the HPLMN. The key request message may include the A-KID and an identifier of the AF (AF ID), which may be sent to the AF in step 0. Optionally, the key request message may also include an indicator indicating that the UE ID is not required in the response (the indicator may be referred to as a "UE ID not required indicator"). In an example embodiment, the key request message may be sent via the NEF service API, thereby delegating the key request to the NEF.

[0167] Step 2

[0168] If NEF authorizes AF to request K AF , the NEF discovers and selects the AAnF based on its local policy or the UE's RID.

[0169] Step 3

[0170] NEF sends or forwards K to the selected AAnF AF Request to request K for UE AF The request may include at least one of: an A-KID or an AF identifier of the AF. The request may be sent via, for example, a Naanf_AKMA_ApplicationKey_Get request message.

[0171] Step 4

[0172] After receiving K in step 3 AF When requested, AAnF can process the request in the following ways:

[0173] If there is K in AAnF AKMA , then AAnF generates K AF And send a message with K to NEF AF , K AF Expiration time (K AF The response may be sent, for example, via a Naanf_AKMA_ApplicationKey_Get response message.

[0174] If K does not exist in AAnF AKMA , Fig.11If not shown in FIG. 1 , the AAnF may send a response with an error indication to the NEF. The NEF will proceed to step 9 by sending an error indication to the AF.

[0175] Step 5

[0176] In this embodiment, the NEF is responsible for pushing the application key to the specific VPLMN NF responsible for storing the application key. Assuming that the response message in step 4 indicates success, the NEF can query the UDM to retrieve the specific VPLMN NF. For example, the NEF can send a Nudm_Get_Roaming_NFid request message with the UE ID to the UDM. The UE ID can be, for example, the user's SUPI or GPSI.

[0177] Step 6

[0178] In response, the UDM sends a response message, e.g., Nudm_Get_Roaming_NFid response message, with VPLMN NF identification information to the NEF, which identifies the specific VPLMN NF responsible for storing the application key. The VPLMN NF identification information may include one of the following: i) the AMF ID or AMF address of the AMF to which the UE is currently registered in the VPLMN network, or ii) the SMF ID or SMF address of the SMF used in local breakout mode.

[0179] Step 7

[0180] After receiving the identification information of the VPLMN NF storing the application key, the NEF may push the application key to the VPLMN NF via, for example, a Push Application Key Request message. This message may carry K AF The message may also include an identifier of the UE, such as the SUPI of the UE.

[0181] As an AF in a third-party data network, according to the agreement between the third party and the HPLMN / VPLMN, the AF can use K AF Or you can not use K AF , to encrypt the data flow between the UE and the AF. In some example embodiments, the NEF can determine K AFis used to encrypt the data flow. However, in some other embodiments, the NEF may not be able to determine whether the KAF is used to encrypt the data flow. Therefore, the push application key request message may also include an indicator indicating one of the following scenarios: i) the key carried is the encryption / decryption key of the data flow between the UE and the AF; or ii) it is not determined whether the key carried is the encryption / decryption key of the data flow between the UE and the AF. Note that the second scenario can be understood as a best-effort implementation, because it will be up to the VPLMN to decide whether to attempt to send the application key sent in the push application key request message. In an example embodiment, the indicator may further indicate that the key carried is K AF .

[0182] Step 8

[0183] The VPLMN NF receives the message sent in the previous step and stores the application key carried in the message. The VPLMN NF may also establish a corresponding relationship between the application key and the UE.

[0184] In response, the VPLMN NF may send a Push Application Key Response message to the NEF.

[0185] Step 9

[0186] NEF will have K AF , K AF The NEF forwards the response with the expiry time and optionally the UE's GPSI (UE's external ID) to the AF. The response may be sent, for example, via the Nnef__AKMA_ApplicationKey_Get response message. Based on local policy, the NEF may convert the SUPI to GPSI using the Nudm_SubscriberDataManagement service and optionally include the GPSI (UE's external ID) in the response. If the UE ID Not Required indicator is included in the Key Request message in step 1, the NEF shall not provide the GPSI to the AF. Note also that the NEF will not send the UE's SUPI to the AF.

[0187] Note that if the response message in step 4 indicates an error, the NEF may send a response indicating the error to the AF.

[0188] High-level system diagram

[0189] Fig.12 An exemplary high-level system diagram for transmitting encryption keys to a VPLMN in which a UE is roaming is shown.

[0190] like Fig.12As shown, the UE is roaming in the VPLMN and invokes an application service with the AF in the HPLMN or an external data network. The data flow between the UE and the AF is encrypted by one of the following keys: i) K AF ii) from K AF Derived encryption key; iii) independent of K AF The encryption key.

[0191] The encryption keys may be pushed to the NF in the VPLMN for storage and future retrieval. Various network functions / network entities including the HPLMN AF, AAnF or NEF may be used to push the keys.

[0192] In addition, when the encryption key is pushed to the VPLMN NF, various indicators may be sent. For example, there may be an indicator indicating what key is pushed, indicating that the key is K AF , from K AF The derived encryption key is still independent of K AF There may also be an indicator indicating whether the pushed key is used to encrypt the data flow between the UE and the AF, or whether it is not determined whether the pushed key is used for encryption.

[0193] In an example embodiment, these indications may be made using a single indicator, rather than using multiple indicators as described above.

[0194] In an example embodiment, when the AF is within the HPLMN, the encryption key pushed to the VPLMN NF may include one of the following: K AF , from K AF Derived encryption key, or independent of K AF The encryption key is used to encrypt the data flow between the UE and the AF.

[0195] In an example embodiment, when the AF is in an external data network, even if the actual encryption key used to encrypt the data flow between the UE and the AF is independent of K AF and may be unknown to the HPLMN / VPLMN. The encryption key pushed to the VPLMN NF may also be K AF .

[0196] In an example embodiment, when the AF is in an external data network, if the agreement between the external AF and the HPLMN (or VPLMN) allows encryption key sharing, the real encryption key used to encrypt the data flow between the UE and the external AF can be pushed to the VPLMN NF.

[0197] Once local storage of encryption keys exists, authority control can be supported. For example, the stored encryption keys can be sent to an authority control point when needed.

[0198] In this disclosure, K AF This is for exemplary purposes only. The same concept for push encryption keys can be applied to other types of keys, such as K AKMA .

[0199] In the present disclosure, message types and / or message names (e.g., Figures 8 to 11 The message types and / or message names shown in the figure are for exemplary purposes only. Different message types and / or message names may be selected in the implementation, and as long as the basic principle is the same, for example, if the message is used for the same purpose, different message types and / or message names should still be included in the present disclosure.

[0200] In the present disclosure, a single message can be split into multiple sub-messages. Multiple messages can also be combined into one message and sent as one message.

[0201] In the present disclosure, a single information element in a message may be split into multiple information elements. Multiple information elements may also be combined into a single information element.

[0202] The present disclosure describes methods, apparatus, and computer-readable media for wireless communications. The present disclosure solves the problem of pushing encryption keys to a VPLMN. The methods, apparatus, and computer-readable media described in the present disclosure can facilitate regulatory control requirements. The methods, apparatus, and computer-readable media described in the present disclosure can improve the overall performance of a wireless communication system.

[0203] In the present disclosure, various embodiments for updating / refreshing security configurations in various network entities (such as AF) and UE are disclosed. The AF can detect security configurations that are about to expire, out of sync or out of sync with other network elements. Various mechanisms are described for the AF to refresh its security configuration and synchronize the security configuration updates to the UE. In an exemplary embodiment, the AAnF can further check whether a valid UE security context is locally configured in the AAnF via various methods. Based on the inspection results, the AAnF can bypass the process of requesting the UE security context from the core network, thereby saving signaling overhead and improving efficiency.

[0204] In the present disclosure, the steps in each embodiment are for illustrative purposes only, and other alternatives can be derived based on the disclosed embodiments as needed. For example, only some of the steps in the multiple steps may need to be performed. For another example, the order of the multiple steps can be adjusted. For another example, multiple steps can be combined (for example, multiple messages can be combined in one message). For another example, a single step can be split (for example, a message can be sent via two sub-messages).

[0205] The above figures and descriptions provide specific example embodiments and implementations. However, the described subject matter may be embodied in a variety of different forms, and therefore, the subject matter covered or claimed is intended to be interpreted as not being limited to any example embodiment set forth herein. The subject matter claimed or covered is intended to have a reasonably broad scope. In particular, for example, the subject matter may be embodied as a method, device, component, system, or non-transitory computer-readable medium for storing computer code. Accordingly, the embodiments may, for example, take the form of hardware, software, firmware, storage media, or any combination thereof. For example, the above method embodiments may be implemented by a component, device, or system including a memory and a processor by executing a computer code stored in a memory.

[0206] Throughout the specification and claims, terms may have nuanced meanings that are suggested or implied by the context, beyond those explicitly stated. Similarly, the phrase "in one embodiment / implementation" as used herein does not necessarily refer to the same embodiment, and the phrase "in another embodiment / implementation" as used herein does not necessarily refer to a different embodiment. For example, the claimed subject matter is intended to include, in whole or in part, a combination of the example embodiments.

[0207] Generally, terms can be understood at least in part according to the usage in the context. For example, terms such as "and", "or", or "and / or" used in this article can include various meanings, which can depend at least in part on the context in which these terms are used. Typically, "or" is intended to represent A, B and C (here for inclusive meanings) and A, B or C (here for exclusive meanings) if used to associate a list such as A, B or C. In addition, at least in part depending on the context, the term "one or more" as used in this article can be used to describe any feature, structure or characteristic in the singular sense, or can be used to describe a combination of features, structures or characteristics in the plural sense. Similarly, at least in part depending on the context, terms such as "a", "an" or "the" can be understood to convey singular usage or to convey plural usage. In addition, the term "based on" can be understood to not necessarily be intended to convey a set of exclusive factors, but alternatively, also at least in part depending on the context, the presence of additional factors that may not be clearly described can be allowed.

[0208] References to features, advantages, or similar language throughout the specification do not mean that all features and advantages that can be achieved using the present solution should be or are included in any single embodiment thereof. Rather, language referencing the features and advantages is understood to mean that a particular feature, advantage, or characteristic described in connection with an embodiment is included in at least one embodiment of the present solution. Thus, discussion of features and advantages and similar language throughout the specification may, but does not necessarily, refer to the same embodiment.

[0209] In addition, the described features, advantages or characteristics of the present solution may be combined in one or more embodiments in any suitable manner. A person of ordinary skill in the relevant art will recognize from the description herein that the present solution may be practiced without one or more of the specific features or advantages of a particular embodiment. In other examples, additional features and advantages may be recognized in certain embodiments that may not be present in all embodiments of the present solution.

Claims

1. A method for wireless communication, performed by a first network element in a Home Public Land Mobile Network (HPLMN) of a wireless device, the wireless device being served by a Visited Public Land Mobile Network (VPLMN), and comprising: transmitting a query message to a second network element to request an identification of a network function (NF) entity, wherein the query message includes an identifier of the wireless device, and wherein the network function is an entity in the VPLMN for storing encryption keys; receiving a response to the query message from the second network element, the response including an identifier of the NF entity; and transmitting a first message to the NF entity based on the identifier of the NF entity, the first message including a target encryption key, The target encryption key includes one of: an application key associated with the wireless device and an application function (AF) entity accessed by the wireless device for an application service, an encryption key derived from the application key, or an encryption key independent of the application key, wherein the AF entity is located in the HPLMN or in a data network (DN) external to the HPLMN and the VPLMN.

2. The method according to claim 1, wherein: The first message also includes an identifier of the wireless device.

3. The method according to claim 1, wherein: The application keys include application authentication and key management (AKMA) application keys.

4. The method according to claim 1, wherein: The wireless device comprises a user equipment (UE), and wherein the identifier of the wireless device comprises at least one of: the Subscription Permanent Identifier (SUPI) of the UE; or A Universal Public Subscription Identifier (GPSI) of the UE.

5. The method according to claim 1, wherein: The target encryption key is used to encrypt data flow between the wireless device and the AF entity.

6. The method according to claim 1, wherein: The AF entity is located in the DN outside the HPLMN and the VPLMN; and It is not determined whether the target encryption key is used to encrypt data flow between the wireless device and the AF entity.

7. The method according to claim 1, wherein: The first message further includes at least one of: a first indicator, or a second indicator; the first indicator indicating whether the target encryption key is the application key, an encryption key derived from the application key, or an encryption key independent of the application key; The second indicator indicates one of: The target encryption key is used to encrypt the data flow between the wireless device and the AF entity; or It is not determined whether the target encryption key is used to encrypt data flow between the wireless device and the AF entity.

8. The method according to claim 1, wherein: The first message also includes a first indicator; and The first indicator indicates whether the target encryption key is the application key, an encryption key derived from the application key, or an encryption key independent of the application key.

9. The method according to claim 8, wherein: The first indicator also indicates one of: The target encryption key is used to encrypt a data flow between the wireless device and the AF entity; or It is not determined whether the target encryption key is used to encrypt data flow between the wireless device and the AF entity.

10. The method according to claim 1, wherein: The query message includes a Nudm_Get_Roaming_NFid request message.

11. The method according to claim 1, wherein: The response to the query message includes a Nudm_Get_Roaming_NFid response message.

12. The method of claim 1, wherein: The first message includes a push application key request message; as well as The method further comprises: Receive a push application key response message from the NF entity as a response to the first message.

13. The method according to claim 1, wherein: The NF entity includes at least one of the following: an access and mobility management function (AMF) with which the wireless device is registered, the AMF being located in the VPLMN; a session management function (SMF) associated with a protocol data unit (PDU) session established by the wireless device in the VPLMN in local breakout mode, the SMF being located in the VPLMN; or The AKMA Anchor Function (AAnF) in the VPLMN.

14. The method according to claim 13, wherein: The first network element is the AF entity; The second network element comprises a network storage function (NRF) in the VPLMN; and Before transmitting the query message, the method further includes: subscribing with a policy control function (PCF) to receive a public land mobile network (PLMN) identifier of a PLMN to which the wireless device is currently registered; as well as A PLMN identifier of the VPLMN currently serving the wireless device is received from the PCF.

15. The method according to claim 14, wherein: Transmitting the query message includes: According to the PLMN identifier of the VPLMN, the query message is transmitted to the NRF in the VPLMN via the NRF in the HPLMN to request the identification of the NF entity.

16. The method according to claim 13, wherein: The identification of the NF entity includes at least one of the following: The identifier of the AMF; The address of the AMF; an identifier of the SMF; or The address of the SMF.

17. The method of claim 1, 3 or 16, wherein: The first network element is the AF entity located in the HPLMN; and The second network element includes a unified data management (UDM).

18. The method of claim 1, 3 or 16, wherein: The first network element includes an AAnF; The second network element includes a UDM; The AF entity is located in the DN outside the HPLMN and the VPLMN; The application key is an AKMA application key associated with the wireless device; and Before transmitting the query message to the second network element, the method further includes: A first application key request message for requesting the application key is received from a network opening function (NEF), wherein the transmission of the first application key request message by the NEF is triggered by receiving a second application key request message for requesting the application key from the AF entity.

19. The method according to claim 18, wherein: The first application key request message and the second application key request message include a Naanf_AKMA_ApplicationKey_Get request message.

20. The method of claim 18, further comprising: In response to the first application key request message, the AKMA application key associated with the wireless device is generated.

21. The method according to claim 18, wherein: The target encryption key is the application key.

22. The method according to claim 21, wherein: The first message also includes an indicator indicating that it is not determined whether the target encryption key is used to encrypt a data flow between the wireless device and the AF entity.

23. The method of claim 1, 3 or 16, wherein: The first network element includes a NEF; The second network element includes a UDM; The AF entity is located in the DN outside the HPLMN and the VPLMN; The application key is an AKMA application key associated with the wireless device; and Before transmitting the query message to the second network element, the method further includes: A first application key request message for requesting the application key is received from the AF entity.

24. The method according to claim 23, further comprising: Transmitting a second application key request message for requesting the application key to the AAnF in the VPLMN, wherein the second application key request message includes at least one of the following: an AKMA key identifier associated with the wireless device; or The identifier of the AF entity.

25. The method according to claim 24, further comprising: receiving a response message to the second application key request message from the AAnF, the response message comprising at least one of the following: the application key; an indication of the expiry time of the application key; or an identifier of the wireless device.

26. An apparatus comprising a memory for storing computer instructions and a processor in communication with the memory, wherein: The processor is configured to implement the method according to any one of claims 1 to 25 when executing the computer instructions.

27. A computer program product, comprising a non-transitory computer-readable program medium on which a computer code is stored, and when the computer code is executed by one or more processors, the one or more processors are prompted to implement the method according to any one of claims 1 to 25.

Images