Method and related apparatus for extending expiration period of telecommunications access token

Abstract

Embodiments of the present disclosure provide a method for extending an expiration period of a telecommunications access token. A method includes receiving, at a network resource function (NRF) element of a ground station, a first message from an AMF element of a satellite, where the first message includes at least a first information element (IE) indicating that the satellite includes the AMF element, and an enhanced transport layer security indication (TLS) certificate indicating that the satellite includes the AMF element, the enhanced transport layer security indication (TLS) certificate further comprises at least one satellite indication; determining, by the NRF element based on the at least one satellite indication in the TLS certificate, that a feature of the AMF element can be allowed at the satellite and can be used by the ground station; receiving, at the NRF element, a second message from the satellite, where the second message includes a second IE indicating that a feature of the AMF element is deployed at the satellite; generating, by the NRF element, an authorization message; and sending an authorization message from the NRF element to the AMF element.

Description

Technical Field

[0001] The present disclosure relates to the field of mobile communication networks, and in particular, to a mobile network comprising a low-density constellation, a Low Earth Orbit (LEO) satellite constellation. Background Art

[0002] This section introduces aspects that may help to better understand the present disclosure. Therefore, the statements in this section should be read in this light and should not be construed as an admission of what is or is not prior art.

[0003] Reference now Figure 1 , which depicts an exemplary mobile communication network 1. The network 1 may include one or more low-density LEO satellites 2a to 2n, which may form a constellation 3. The network 1 may also include one or more ground stations 4a to 4n, which may be connected to one or more mobile network operators (MNOs), a core network 5a to 5n, and one or more user equipment (UE) 6a to 6n.

[0004] To illustrate the problem solved by the present disclosure, we will (now) discuss a single core network 5a, a single ground station 4a, and a single UE 6a, but this is merely exemplary. It should be understood that our discussion applies to each core network 5a to 5n, ground station 4a to 4n, and UE 6a to 6n.

[0005] In an embodiment, the UE 6a may include an Internet of Things (IoT) compatible device, such as a mobile phone, a laptop computer, a personal computer, an electronic server, a home appliance, and an industrial device, to name just a few non-limiting examples of the UE 6a. In addition, the UE 6a may include a plurality of electronic components 11a to 11n (where "n" indicates the last component), such as (i) a front-end electronic circuit system 11a, which is operable to complete a narrowband Internet of Things (NB IoT) compatible process in order to connect to the constellation 3; (ii) a connection management component 11b, which is operable to manage the connection, idle and (extended) sleep cycles of the UE 6a based on the calculated position and velocity (and / or various derived quantities, such as right ascension and declination) of the satellites 2a to 2n at a particular time (i.e., the satellite ephemeris); and (iii) an IoT application component, which is operable to generate and receive "use case" specific user data messages.

[0006] In an embodiment, the ground station 4a may include an independent core network including a plurality of elements 12a to 12n, which may (or may not) have a roaming relationship with the MNO core network 5a. The ground station 4a may act as a network interface between the constellation 3 and the MNO core network 5a. In an embodiment, 12a to 12n may include a network resource function (NRF) element 12a, and one or more network function (NF) circuits 12b compatible with the fifth generation core network (5GC) function of the mobile telecommunications network (e.g., selected from at least a unified data management (UDM) element, an authentication server function (AUSF) element, and a session mobility function (SMF) element).

[0007] The MNO core network 5a may include one or more types of elements 7a to 7n, 13a to 13n, and 14 that enable the UE 2a to perform mobile communications within a specific geographic area. Figure 1 In the core network 5a, these elements are a packet data network gateway (PGW) 7a, a home subscriber server (HSS) 7b, an IoT service platform 7c, and one or more network resource function (NRF) elements 13a to 13n (where "n" indicates the last NRF element) and one or more network function (NF) elements 14 of one or more public land mobile networks (PLMNs), although it should be understood that the core network 5a may include multiple additional telecommunication equipment.

[0008] Turning to the low-density LEO satellite constellation 3, in an embodiment, the satellites 2a to 2n may pass through the geographic location where the UE 6a and the ground station 4a are located every few hours or days (the so-called "revisit time"). However, the duration that the satellites 2a to 2n can be visible to a particular UE or ground location (e.g., visible to the UE 6a or the ground station 4a) may be relatively short. In an embodiment, the duration that the satellites 2a to 2n can be visible to the UE 6a or the ground station 4a before the satellites 2a to 2n move out of the line of sight of the UE 6a and / or the ground station 4a may be on the order of a few minutes (i.e., a few minutes to several minutes). Therefore, in an embodiment, the time window in which the UE 6a and / or the ground station 4a can establish communication with the satellites 2a to 2n is relatively short compared to the revisit time (the so-called "visibility window"). Such exemplary revisit times and visibility windows may be advantageous for applications that require frequent monitoring, data collection, or communication services (such as earth observation, remote sensing, Internet of Things (IoT) connectivity, or real-time data transmission). However, such a short visibility window provides certain challenges for establishing and maintaining mobile communications between the UE 6a and the MNO 5a.

[0009] For example, during such a short visibility window, the components of the network 1 must establish and maintain communications, for example, to exchange both mobile originated (MO), delay tolerant services via a service telecommunication link 9 (a service link, e.g., an NTN, wireless, narrowband Internet of Things (NB-IoT) service link for providing NTN, NB-IoT communications), and to exchange mobile terminated (MT), delay tolerant services via a discontinuous feed telecommunication link 10 (a feeder link). Although such a link 10 may be useful for optimizing utilization of resources of the satellites 2a to 2n and / or improving efficiency, as the name implies, communications on the discontinuous feed telecommunication link 10 may not be continuous, i.e., transmission or reception of data may be interrupted (e.g., periodically).

[0010] Recognizing that the mobile network 1 may include discontinuous feeder links 10 and may be subject to limited visibility windows, some satellites 2a to 2n may include non-terrestrial network (NTN) communication equipment 8 to address some of the challenges.

[0011] For example, the device 8 may include: (i) an electronic interface element 8a (e.g., an evolved Node B (eNB) element for a 4G Long Term Evolution (LTE) network, or a "next generation Node B" or "gNB" element for a 5G network); (ii) a signal processing element 8b; (iii) an electronic regeneration element (not shown); and (iv) an electronic storage and forwarding element 8c. Specifically, the electronic signal processing element 8b may include an element that performs an access and mobility management function (AMF) (hereinafter referred to as an "AMF element"), and the electronic storage and forwarding element may temporarily store received signals (e.g., non-real-time communication signals including delay-tolerant services), and then send or forward non-real-time communication signals including delay-tolerant services (e.g., data) to the ground station 4a at a higher power (e.g., or at a specific interval).

[0012] Although these features overcome some challenges, other challenges still need to be addressed. For example, in order to complete certain processes required to establish and maintain communications between UE 2a and ground station 4a or MNO 5a (e.g., AMF-based processes), the NRF element at ground station 4a and / or MNO 5a must generate a digital "access token" that can be exchanged with the AMF element on satellite 2a. The access token serves as evidence or "proof" of the identity and authority of a particular network element as they relate to network 1. In order to establish and / or maintain communications with other elements of network 1, the access token associated with the particular element must be included in subsequent messages exchanged between the particular element and other elements of network 1.

[0013] However, existing telecommunications networks designed according to industry standards (e.g., TS29.510) generate digital "access tokens" with short expiration periods (5-10 minutes). Such short expiration periods do not allow satellites 2a with onboard components for completing AMF features and functions to complete these features and functions before the access token expires. Therefore, new access tokens must be repeatedly generated, and these access tokens expire before the AMF features and functions are completed.

[0014] It is therefore desirable to provide a solution that mitigates the challenges just described by providing for an extension or expansion of the expiration period (collectively referred to as an "extension" or extension) of access tokens used in such mobile networks. Summary of the invention

[0015] The present disclosure sets forth exemplary methods and related apparatus for extending the expiration period of an access token used in a mobile network, the mobile network including a satellite having an onboard store and forward element and an element that implements AMF features and functions (i.e., an AMF element). Specifically, exemplary methods and related apparatus for extending the expiration period of an access token to a period that is typically used are described.

[0016] In an exemplary embodiment, a method for extending an expiration period of a telecommunication access token may include: receiving, at a network resource function (NRF) element of a ground station, a first message from an AMF element of a satellite, wherein the first message includes at least a first information element (IE), the first information element (IE) indicating that the satellite includes the AMF element and an enhanced transport layer security indication (TLS) certificate, the enhanced transport layer security indication (TLS) certificate also including at least one satellite indication; determining, by the NRF element based on the at least one satellite indication in the TLS certificate, that a feature of the AMF element can be allowed at the satellite and can be used by the ground station; at the NR At the AMF element, a second message is received from the satellite, wherein the second message includes a second IE, and the second IE indicates that: the characteristics of the AMF element are deployed at the satellite; an authorization message is generated by the NRF element, the authorization message includes the generated digitally signed access token, the generated digitally signed access token has at least one extended expiration time period and at least one second satellite indication, and the at least one second satellite indication confirms that the satellite includes the AMF element; and an authorization message is sent from the NRF element to the AMF element, the authorization message includes the generated digitally signed access token, and the generated digitally signed access token includes at least one extended expiration time period and at least one second satellite indication.

[0017] The exemplary method may also include: receiving, at a network function (NF) element of the ground station, a request message, a generated digitally signed access token, the generated digitally signed access token including at least one extended expiration time period and at least one second satellite indication, the request message requesting the NF element to utilize the generated digitally signed access token including the at least one extended expiration time period and the at least one second satellite indication; and verifying the request message at the NF element.

[0018] In this embodiment, the at least one extended expiration period may include: an extended expiration period of up to 48 hours, and the NF element may include one or more NF elements of a fifth generation core network (5GC) of the mobile telecommunications network (e.g., one or more elements selected from at least a unified data management (UDM) element, an authentication server function (AUSF) element, and a session mobility function (SMF) element).

[0019] Additionally, the exemplary method may include sending data from the NF element to the AMF element.

[0020] In a second embodiment, a method for extending the expiration period of a telecommunications access token may include: sending a first message from an AMF element of a satellite to an NRF element of a ground station, wherein the first message includes at least a first IE, the first IE indicating that the satellite includes the AMF element and an enhanced TLS certificate, and the enhanced TLS certificate also includes at least one satellite indication; sending a second message from the AMF element to the NRF element, wherein the second message includes a second IE, and the second IE indicates that the characteristics of the AMF element are deployed at the satellite; at the AMF element, receiving an authorization message from the NRF element, the authorization message including a generated digitally signed access token, the generated digitally signed access token including at least one extended expiration period and at least one second satellite indication, the at least one second satellite indication confirming that the satellite includes the AMF element; and sending a request message from the AMF element to the NF element of the ground station, the generated digitally signed access token, the generated digitally signed access token including at least one extended expiration period and at least one second satellite indication, the request message including: a request by the NF element to utilize the generated digitally signed access token including the at least one extended expiration period and the at least one second satellite indication.

[0021] Similarly, in this embodiment, the at least one extended expiration period may include an extended expiration period of up to 48 hours, and the NF element may include one or more NF elements of the 5GC of the mobile telecommunication network (e.g., one or more elements selected from at least a UDM element, an AUSF element, and an SMF element).

[0022] Furthermore, in this embodiment, the method may further include: at the AMF element, receiving data from the NF element.

[0023] In a third embodiment, a method for extending an expiration period of a telecommunication access token may include: receiving a first message at a first NRF element of a first public land mobile network (PLMN) from an AMF element of a satellite, wherein the first message includes at least a first IE, the first IE indicating that the satellite includes the AMF element and an enhanced TLS certificate, and the enhanced TLS certificate also includes at least one satellite indication; determining by the first NRF element based on at least one satellite indication in the TLS certificate that features of the AMF element can be allowed at the satellite and can be used by the first PLMN; receiving a second message from the AMF element at the first NRF element, wherein the second message includes a second IE, the second IE indicating that features of the AMF element are deployed at the satellite; generating a first authorization message by the first NRF element, the first authorization message including a first indication that the AMF element is authorized to use a generated digitally signed access token, the generated digitally signed access token including at least one extended expiration period and at least one satellite indication; and sending a second authorization message to a second NRF element of a second PLMN. The RF component sends a first authorization message and at least one satellite indication; the second NRF component determines, based on the at least one satellite indication, that the features of the AMF component can be allowed at the satellite and can be used by the second PLMN; the second NRF component generates a second authorization message, the second authorization message includes a second indication that the AMF component is authorized to use the generated digitally signed access token, the generated digitally signed access token includes at least one extended expiration time period and at least one second satellite indication; the second authorization message is sent from the second NRF component to the first NRF component, the second authorization message includes the generated digitally signed access token, the generated digitally signed access token includes at least one extended expiration time period and at least one second satellite indication; a third authorization message is sent from the first NRF component to the AMF component, the third authorization message authorizing the AMF component to utilize the generated digitally signed access token including the at least one extended expiration time period and the at least one second satellite indication; and optionally, data is sent from the NF component to the AMF element of the second PLMN.

[0024] The exemplary method may also include: at the NF element, receiving a request message, a generated digitally signed access token, the generated digitally signed access token including at least one extended expiration time period and at least one second satellite indication, the request message requesting the NF element to utilize the generated digitally signed access token including the at least one extended expiration time period and the at least one second satellite indication; and verifying the request message at the NF element.

[0025] In addition, it should be noted that the at least one extended expiration period mentioned above may include an extended expiration period of up to 48 hours, and the NF element may include one or more NF elements of the 5GC of the mobile telecommunication network (e.g., one or more elements selected from at least a UDM element, an AUSF element, and an SMF element).

[0026] In a fourth embodiment, a method for extending an expiration period of a telecommunication access token may include: sending a first message from an AMF element of a satellite to a first NRF element of a first PLMN, wherein the first message includes at least a first IE, the first IE indicating that the satellite includes an AMF element and an enhanced TLS certificate, and the enhanced TLS certificate also includes at least one satellite indication; sending a second message from the AMF element to the first NRF element, wherein the second message includes a second IE, and the second IE indicates that features of the AMF element are deployed at the satellite; at the AMF element, receiving an authorization message from the first NRF element, the authorization message including a generated digitally signed access token, the generated digitally signed access token including at least one extended expiration period and at least one second satellite indication; and sending a request message from the AMF element to a NF element of a second PLMN, the generated digitally signed access token, the generated digitally signed access token including at least one extended expiration period and at least one second satellite indication, the request message requesting the NF element to utilize the generated digitally signed access token including the at least one extended expiration period and the at least one second satellite indication.

[0027] As before, in this embodiment, the at least one extended expiration period may include an extended expiration period of up to 48 hours.

[0028] In addition, the NF element may include one or more NF elements of the 5GC of the mobile telecommunication network (e.g., one or more elements selected from at least a UDM element, an AUSF element, and an SMF element).

[0029] The fourth embodiment may further include: receiving, at the AMF element, data from the NF element.

[0030]

[0013] In addition to the exemplary methods described herein, the present disclosure also provides an apparatus (eg, system, device) that can include one or more telecommunications elements for extending an expiration period of a telecommunications access token. For example, in one embodiment, one of the telecommunication elements may include an NRF element of a ground station, the NRF element including: at least one processor; and at least one memory storing instructions that, when executed by the at least one processor, cause the NRF element to: receive a first message from an AMF element of a satellite, wherein the first message includes at least a first IE, the first IE indicating that the satellite includes the AMF element and an enhanced TLS certificate, the enhanced TLS certificate also including at least one satellite indication; determine, based on the at least one satellite indication in the TLS certificate, that features of the AMF element can be allowed at the satellite and can be used by the ground station; receive a second message from the satellite, wherein the second message includes a second IE, the second IE indicating that features of the AMF element are deployed at the satellite; generate an authorization message including a generated digitally signed access token, the generated digitally signed access token having at least one extended expiration time period and at least one second satellite indication, the at least one second satellite indication confirming that the satellite includes the AMF element; and send an authorization message to the AMF element, the authorization message including the generated digitally signed access token, the generated digitally signed access token including at least one extended expiration time period and at least one second satellite indication.

[0031] In addition, one or more telecommunication elements may include a NF element, the NF element including: at least one processor; and at least one memory, the at least one memory storing instructions, which when executed by the at least one processor, cause the NF element to: receive a request message from the AMF element, wherein the request message includes a generated digitally signed access token, the generated digitally signed access token includes at least one extended expiration time period and at least one second satellite indication, the request message requesting the NF element to utilize the generated digitally signed access token including the at least one extended expiration time period and the at least one second satellite indication; and verify the request message.

[0032] In this embodiment, the at least one extended expiration period may include: an extended expiration period of up to 48 hours, and the NF element may include one or more NF elements of the 5GC of the mobile telecommunication network (for example, one or more NF elements selected from at least a UDM element, an AUSF element, and an SMF element).

[0033] In another embodiment, an apparatus (eg, system, device) may include a telecommunication element for extending the expiration period of a telecommunication access token. For example, the telecommunication element may include an AMF element at a satellite. In an embodiment, the AMF element may include: at least one processor; and at least one memory storing instructions, which, when executed by the at least one processor, cause the AMF element to: send a first message to an NRF element of a ground station, wherein the first message includes at least a first IE, the first IE indicating that the satellite includes the AMF element and an enhanced TLS certificate, and the enhanced TLS certificate also includes at least one satellite indication; send a second message to the NRF element, wherein the second message includes a second IE, the second IE indicating that the features of the AMF element are deployed at the satellite; receive an authorization message from the NRF element, the authorization message including a generated digitally signed access token, the generated digitally signed access token including at least one extended expiration time period and at least one second satellite indication, the at least one second satellite indication confirming that the satellite includes the AMF element; and send a request message to the NF element of the ground station, the request message including the generated digitally signed access token, the generated digitally signed access token including at least one extended expiration time period and at least one second satellite indication; and optionally, receive data from the NF element.

[0034] In this embodiment, the request message includes a request for the NF element to utilize an access token including the generated digital signature of the at least one extended expiration time period and the at least one second satellite indication.

[0035] Similar to the above embodiment, in this embodiment, the at least one extended expiration period may include an extended expiration period of up to 48 hours, and the NF element may include one or more NF elements of the 5GC of the mobile telecommunication network (for example, the one or more NF elements may be selected from at least a UDM element, an AUSF element, and an SMF element).

[0036] Another embodiment may include an apparatus (e.g., a system, a device) comprising one or more telecommunication elements for extending an expiration period of a telecommunication access token, wherein one of the elements may include a first NRF element of a first PLMN. In an embodiment, the first NRF element may include: at least one processor; and at least one memory storing instructions that, when executed by the at least one processor, cause the first NRF element to: receive a first message from an AMF element of a satellite, wherein the first message includes at least a first IE, the first IE indicating that the satellite includes the AMF element and an enhanced TLS certificate, the enhanced TLS certificate also including at least one satellite indication; determine, based on at least one satellite indication in the TLS certificate, that features of the AMF element can be allowed at the satellite and can be used by the first PLMN; receive a second message from the AMF element, wherein the second message includes a second IE, the second IE indicating that features of the AMF element are deployed at the satellite; generate a first authorization message, the first authorization message including a first indication that the AMF element is authorized to use a generated digitally signed access token, the generated digitally signed access token including at least one extended expiration period and at least one satellite indication; send the first authorization message and the at least one satellite indication to a second NRF element of the second PLMN.

[0037] As will be discussed further herein, ultimately, the first NRF component will generate and send a third authorization message to the AMF component. In one embodiment, the third authorization message authorizes the AMF component to use the generated digitally signed access token, the generated digitally signed access token including at least one extended expiration period and at least one second satellite indication.

[0038] In addition, in this embodiment, one or more telecommunication elements may include a second NRF element, wherein the second NRF element may include: at least one processor; and at least one memory, the at least one memory storing instructions, which when executed by the at least one processor, causes the second NRF element to: determine, based on at least one satellite indication, that features of the AMF element can be allowed at the satellite and can be used by the second PLMN; generate a second authorization message, the second authorization message including a second indication that the AMF element is authorized to use the generated digitally signed access token, the generated digitally signed access token including at least one extended expiration time period and at least one second satellite indication; send a second authorization message to the first NRF element, the second authorization message including the generated digitally signed access token, the generated digitally signed access token including at least one extended expiration time period and at least one second satellite indication.

[0039] In addition, the one or more telecommunication elements may include a NF element of a second PLMN. In one embodiment, the NF element may include: at least one processor; and at least one memory storing instructions that, when executed by the at least one processor, cause the NF element to: receive a request message from an AMF element, wherein the request message includes a generated digitally signed access token, the generated digitally signed access token including at least one extended expiration time period and at least one second satellite indication. In one embodiment, the request message requests the NF element to utilize the generated digitally signed access token including the at least one extended expiration time period and the at least one second satellite indication. The processor may also cause the NF element to verify the request message, and optionally, to send data to the AMF element.

[0040] In this embodiment, the at least one extended expiration period may include an extended expiration period of up to 48 hours, and the NF element may include one or more NF elements of the 5GC mobile telecommunication network (e.g., one or more NF elements selected from at least a UDM element, an AUSF element, and an SMF element).

[0041] In another embodiment, an apparatus (e.g., system, device) may include an exemplary telecommunication element for extending the expiration period of a telecommunication access token. For example, the telecommunication element may include an AMF element at a satellite, wherein the AMF element may include: at least one processor; and at least one memory, the at least one memory storing instructions, which, when executed by the at least one processor, cause the AMF element to: send a first message to a first NRF element of a first PLMN, wherein the first message includes a first IE, the first IE indicating that the satellite includes the AMF element and an enhanced TLS certificate, and the enhanced TLS certificate also includes at least one satellite indication; send a second message to the first NRF element, wherein the second message may include a second IE, the second IE indicating that the features of the AMF element are deployed at the satellite; receive an authorization message from the first NRF element, the authorization message including the generated digitally signed access token, the generated digitally signed access token including at least one extended expiration period and at least one second satellite indication; send a request message to a NF element of a second PLMN; and optionally, receive data from the NF element.

[0042] In this embodiment, the request message may include a generated digitally signed access token, the generated digitally signed access token including at least one extended expiration time period and at least one second satellite indication. In addition, the request message may request the NF element to utilize the generated digitally signed access token including the at least one extended expiration time period and the at least one second satellite indication.

[0043] Similar to other embodiments, in this embodiment, the at least one extended expiration period may include an extended expiration period of up to 48 hours, and the NF element may include one or more NF elements of the 5GC mobile telecommunication network (for example, the one or more NF elements may be selected from at least a UDM element, an AUSF element, and an SMF element). BRIEF DESCRIPTION OF THE DRAWINGS

[0044] The present invention is illustrated by way of example and not limitation in the accompanying figures, in which like references indicate similar elements and in which:

[0045] Figure 1 An exemplary mobile communication network according to the present disclosure is depicted.

[0046] Figures 2A to 2F An exemplary list of Information Elements (IEs) including some of the innovative, inventive IEs provided by the present disclosure is depicted.

[0047] Figure 3 An exemplary message flow of an exemplary non-roaming method provided by the present disclosure is depicted.

[0048] Figure 4 An exemplary message flow according to an exemplary roaming method provided by the present disclosure is depicted.

[0049] Figure 5 Exemplary means are depicted for accomplishing one or more features, functions and / or process steps of the present disclosure.

[0050] The following disclosure discloses specific embodiments of the present invention with reference to various drawings and schematic diagrams. Both the description and the illustration are written to enhance understanding. For example, Figure 1 The block diagrams in the drawings do not represent actual devices or apparatuses, but rather are set forth for the purpose of explaining the features of the methods and apparatuses of the present invention.

[0051] Strive for simplicity and clarity in both illustration and description to effectively enable those skilled in the art to make, use, and best practice the exemplary embodiments described herein based on knowledge known in the art. Those skilled in the art will appreciate that various modifications and changes may be made to the specific embodiments described herein without departing from the spirit and scope of the present disclosure. Therefore, the text and drawings should be regarded as illustrative and exemplary rather than restrictive or comprehensive, and all such modifications to the specific embodiments described herein are intended to be included within the scope of the present disclosure. DETAILED DESCRIPTION

[0052] The following detailed description describes exemplary embodiments and is not intended to be limited to the explicitly disclosed combinations (multiples). Therefore, unless otherwise stated, the features disclosed herein may be combined together to form additional combinations that are not otherwise shown for the sake of brevity.

[0053] As used herein and in the appended claims, the terms “comprises,” “comprising,” or variations thereof, are intended to mean non-exclusive inclusion, such that a process, method, article, or apparatus that includes a list of elements may include not only those elements in the list but may include other elements not expressly listed or inherent to such process, method, article, or apparatus.

[0054] As used herein, the terms "a" or "an" are defined as one, or more than one. As used herein, the term "plurality" is defined as two, or more than two. As used herein, the term "another" is defined as at least a second, or more.

[0055] Unless otherwise stated herein, the use of relational terms, if any, such as "first" and "second," etc., are used solely to distinguish one function, process, or executable instruction set from another function, process, or executable instruction set without necessarily requiring or implying any such actual relationship, order, or importance between these functions, processes, or executable instruction sets.

[0056] As used herein, the terms "including" and / or "having" are defined as comprising (ie, open language).

[0057] In the drawings, like reference numerals denote like features consistently throughout.

[0058] Unless stated otherwise, the term "or" is used herein in both the alternative and conjunctive senses.

[0059] The terms “illustrative” and “exemplary” are used as examples, not to indicate a level of quality.

[0060] As used herein, the term "data" and similar terms mean information capable of being sent, received, and / or stored in accordance with certain embodiments of the present disclosure.

[0061] As used herein, the term "user equipment" or "UE" refers to a device that includes electronic components (e.g., a modem), etc., which act as a radio frequency transceiver to wirelessly: (i) send signals, messages, and data to one or more elements (e.g., devices, equipment) of a mobile telecommunications network using an air interface; and (ii) receive signals, messages, and data from one or more elements of the network using an air interface.

[0062] As used herein, the term "telecommunications element", "element" or the plural form "telecommunications elements", "elements" refers to: (a) an electronic hardware circuit implementation only (e.g., an implementation in analog circuitry and / or digital circuitry); and / or (b) a combination of electronic circuitry and (multiple) computer program products, including software and / or firmware instructions stored on one or more electronic memories, which instructions work together to cause the device to perform one or more functions or processing steps described herein; and / or (c) an electronic circuit, such as (multiple) electronic microprocessors, a portion of (multiple) microprocessors, a processor, a portion of a processor, an electronic integrated circuit, or an electronic application processor (collectively referred to herein as a "processor"), which executes stored instructions (e.g., software or firmware) retrieved from at least one electronic memory, which instructions, when executed by the processor, cause the device or element itself to perform one or more features, functions or steps in the process or method. As used herein, the terms "telecommunications element" and "element" may be used interchangeably herein.

[0063] As used herein, the phrase electronic "memory" (referred to herein as "memory") refers to a non-transitory electronic storage medium (e.g., a volatile or non-volatile memory device). Examples of non-transitory electronic storage media include, but are not limited to: random access memory (RAM); programmable read-only memory (PROM); erasable programmable read-only memory (EPROM); FLASH-EPROM; magnetic computer-readable media (e.g., floppy disk, hard disk, magnetic tape, any other magnetic media); optical computer-readable media (e.g., compact disk read-only memory (CD-ROM); digital versatile disk (DVD); Blu-ray disk (BD), etc., or a combination thereof; or any other non-transitory medium from which an electronic processor can retrieve stored instructions that, when executed, cause the device to perform one or more functions or steps in a process.

[0064] As will be described in greater detail herein, in order to extend (ie, increase) the expiration period of access tokens used in a mobile network that includes satellites with onboard store-and-forward and AMF elements, a number of creative innovations are required.

[0065] In particular, the telecommunication standards governing such mobile networks should be revised. Such a standard is known as TS29.510. In general, the standard focuses on the requirements for 5G mobile telecommunication networks (e.g. Figure 1 Policy and charging control architecture and interfaces of network 1).

[0066] More specifically, the standard describes a list of messages (referred to as "information elements" or "IEs") that can be exchanged between elements of a mobile network, such as elements of Network 1. Some of the IEs that make up the standard are Figures 2A to 2F In an embodiment, innovative, inventive IEs 1 to IE N (where "N" indicates the last innovative message; hereinafter referred to as "IE 1 to IEN") are included in Figures 2A to 2F As will be described in more detail herein, IEs 1 to IE N should be added to an innovative, inventive message flow exchanged between elements of a mobile network, such as elements of network 1.

[0067] As pointed out above, the electronic signal processing element 8b on the satellite 2a may include an AMF telecommunication element (for example, where the "telecommunication element" also includes: at least one processor; and at least one memory for storing instructions which, when executed by the at least one processor, cause the device or element itself to at least perform one or more functions or steps in the process or method), while the ground station 4a may include an NRF telecommunication element 12a and a NF telecommunication element 12b.

[0068] We will now discuss one embodiment of the present disclosure with respect to messages and data exchanged primarily between the AMF element 8b, the NRF element 12a and the NF element 12b (and other elements of the network 1) with respect to the message flow 100 of the present invention in order to set the expiration period of the telecommunication access token, although again this is merely exemplary and similar methods apply to (multiple) AMF elements on one or more satellites 2a to 2n, as well as NRF elements and NF elements that may be part of one or more ground stations 4a to 4n. In one embodiment, Figure 3 The message flow 100 in FIG. 1 represents a scenario assuming that there is no inter-PLMN signaling.

[0069] According to exemplary method 100, Figure 3 During step 101 shown, the AMF component 8b may generate a first message and send the first message to the NRF component 12a via the feeder link 10, wherein the first message includes at least one first IE (eg, Figure 2AIE 1 in the at least one first IE indicates that the satellite includes an AMF element capable of completing one or more AMF processes and / or an enhanced transport layer security (TLS) certificate (e.g., an indication specified in the enhanced standard TS 33310). In an embodiment, the TLS certificate may include at least one satellite indication.

[0070] After receiving the first message, during step 102, the NRF component 12a may generate and send a response to the AMF component 8b via the feeder link 10, the response indicating in particular that the NRF component 12a has received the first message from the AMF component 8b, wherein the first message also includes at least the first IE indicating that the satellite includes an AMF component and an enhanced TLS certificate. The response may also include a "heartbeat timer" containing the number of seconds expected between two consecutive heartbeat messages from the NF component 12b to the NRF component 12a.

[0071] Alternatively, or in addition to step 102, in an embodiment, the NRF component 12a may determine whether the features of the AMF component 8b will be allowed (e.g., among other requirements of standard TS29510, the AMF component 8b is allowed to provide 5GS services to UE 6a to UE 6n; see Figure 2A Assuming these features are allowed and can be used by ground station 4a, method 100 continues.

[0072] In step 103, upon receiving a message (e.g., a subscriber registration request) from the UE 6a at the satellite 2a via the service link 9, the AMF element 8b may then generate a second message during step 104 and send the second message to the NRF element 12a. In an embodiment, the second message may include a second IE indicating that the features of the AMF element are deployed at the satellite (e.g., Figure 2C IE 2).

[0073] In response, upon receiving the second message indicating that the features of the AMF element are deployed at the satellite, the NRF element 12a may generate an authorization message during step 105. In an embodiment, the authorization message may include the generated digitally signed access token, the generated digitally signed access token having at least one extended expiration period and at least one second satellite indication confirming that the satellite 2a includes an onboard AMF element (e.g., Figure 2D3 in ). For example, during step 106, the NRF component 12a may generate a digitally signed access token including at least one extended expiration time period, wherein the expiration time period may include an extended expiration time period of two to three minutes up to 48 hours. Thereafter, the NRF component 12a may send an authorization message to the AMF component 8b during step 107, the authorization message including the generated digitally signed access token, the generated digitally signed access token including at least one extended expiration time period and at least one second satellite indication.

[0074] After receiving an authorization message from the NRF component 12b, the authorization message including the generated digitally signed access token including at least one extended expiration time period and at least one second satellite indication confirming that the satellite 2a includes an onboard AMF component, during step 108, the AMF component 8b may generate and send to the NF component 12b (e.g. Figure 2F The NF element 12a may include a request message, a generated digitally signed access token, and a second satellite indication. In an embodiment, the request message may include a request for the NF element 12b to utilize the generated digitally signed access token including the at least one extended expiration time period and the at least one second satellite indication.

[0075] In an embodiment, the NF element 12b may include one or more NF circuits of a fifth generation core network (5GC) of a mobile telecommunication network. For example, the one or more NF circuits may be selected from a non-limiting list of telecommunication elements such as at least a unified data management (UDM) telecommunication element, an authentication server function (AUSF) telecommunication element, and a session mobility function (SMF) telecommunication element, to name just a few types of NF telecommunication elements 12b.

[0076] Continuing, upon receiving the request message, the generated digitally signed access token (the generated digitally signed access token includes at least one extended expiration time period and at least one second satellite indication) at the NL element 12b (where, again, the request message requests the NF element 12b to utilize the generated digitally signed access token including the at least one extended expiration time period and the at least one second satellite indication), during step 109, the NL element 12b may verify the request (i.e., for example, the NF element 12b (such as AUSF or UDM) verifies the request using a public key).

[0077] Thereafter, the NL element 12b may send data (eg, subscriber data stored in the UDM element) to the AMF element 8b, and the AMF element may receive such data during step 110.

[0078] We will now discuss another embodiment of the present disclosure. Our discussion will mainly include the exchange of information between the AMF telecommunication element 8b, the NRF telecommunication element which may be part of the PLMN, and the NF telecommunication element which may be part of the second PLMN (and other elements of the network 1), regarding Figure 4 The messages and data of the inventive message flow 200 in order to set the expiration period of the telecommunication access token. Again, this is merely exemplary, and similar methods may be applied to AMF elements on one or more satellites 2a to 2n, as well as NRF and NF elements that may be part of one or more additional PLMNs. In one embodiment, Figure 4 The message flow 200 in FIG. 2 represents a scenario involving inter-PLMN signaling.

[0079] According to exemplary method 200, Figure 4 During step 201 shown, the AMF element 8b may generate a first message and send the first message to the first NRF element 13a of the first PLMN via the feeder link 10, wherein the first message includes at least one first IE (eg, Figure 2A IE 1 in the first IE indicates that satellite 2a includes an AMF element capable of completing one or more AMF processes and / or an enhanced TLS certificate (for example, an indication specified in the enhanced standard TS 33310). In an embodiment, the TLS certificate may include at least one satellite indication.

[0080] After receiving the first message, the first NRF component 13a may generate a response during step 202 and send the response to the AMF component 8b via the feeder link 10, the response particularly indicating that the first NRF component 13a has received the first message from the AMF component 8b, wherein the first message also includes at least one first IE indicating that the satellite includes an AMF component and an enhanced TLS certificate. The response may also include a "heartbeat timer" containing the expected number of seconds between two consecutive heartbeat messages from the NF component 14 of the second PLMN and the first NRF component 13a of the first PLMN.

[0081] Alternatively, or in addition to step 202, in one embodiment, the first NRF component 13a may determine whether features of the AMF component 8b are to be allowed (e.g., whether the AMF component 8b is permitted to provide 5GS services to the UEs 6a to 6n, and other requirements of standard TS29510; see Figures 2A to 2F ) and whether they can be used by the first PLMN. Assuming that these features are allowed and can be used by the first PLMN, method 200 continues.

[0082] In step 203, upon receiving a message (e.g., a subscriber registration request) from the UE 6a at the satellite 2a via the service link 9, the AMF component 8b may then generate a second message during step 204 and send the second message to the first NRF component 13a. In one embodiment, the second message may include a second IE indicating that the features of the AMF component 8b are deployed at the satellite (e.g., Figure 2C IE 2).

[0083] In response, upon receiving the second message indicating that the features of the AMF component are deployed at the satellite, the first NRF component 13a may generate a first authorization message during step 205, the first authorization message comprising a first indication that the AMF component 8b is authorized to use the generated digitally signed access token, the generated digitally signed access token comprising at least one extended expiration time period, and at least one satellite indication. Thereafter, the first NRF component 13a may send the authorization message to the second NRF component 13b of the second PLMN during step 206.

[0084] Alternatively, or as part of step 207, after receiving the first authorization message, the second NRF component 13b may determine, based on the at least one satellite indication, that features of the AMF component 8b may be allowed on the satellite and may be used by the second PLMN.

[0085] Continuing, after receiving the authorization message from the first NRF component 13a, the second NRF component 13b may generate a second authorization message. In an embodiment, the second authorization message may include a second indication that the AMF component 8b is authorized to use the generated access token, the generated access token including at least one extended expiration time period and at least one second satellite indication (e.g., Figure 2F In more detail, during step 208, the second NRF component 13b may generate a digitally signed access token comprising at least one extended expiration time period, wherein the expiration time period may comprise an extended expiration time period of two to three minutes up to 48 hours.

[0086] Thereafter, during a step 209, the second NRF component 13b may send a second authorization message to the first NRF component 13a, the second authorization message comprising the generated digitally signed access token comprising at least one extended expiration time period and at least one second satellite indication.

[0087] After receiving the second authorization message from the second NRF component 13b, the first NRF component 13a may generate and send a third authorization message to the AMF component 8b during step 210. In an embodiment, the third authorization message authorizes the AMF component 8b to utilize the generated digitally signed access token including the at least one extended expiration time period and the at least one second satellite indication.

[0088] After receiving the authorization message including the generated digitally signed access token including at least one extended expiration time period and at least one second satellite indication from the first NRF element 13a, the AMF element 8b may generate and send a request message to the NF element 14 of the second PLMN during step 211. In an embodiment, the request message may include the generated digitally signed access token including at least one extended expiration time period and at least one second satellite indication (e.g. Figure 2F In one embodiment, the request message requests the NF element 14 to utilize an access token including the generated digital signature of the at least one extended expiration time period and the at least one second satellite indication.

[0089] Similar to method 100, in method 200, the NF element 14 may include one or more NF circuits of a 5GC network that is part of a mobile telecommunication network (for example, the one or more NF circuits may be selected from at least one UDM telecommunication element, AUSF telecommunication element, and SMF telecommunication element).

[0090] After receiving the request message from the AMF element 8b (the request message requests the NF element 14 to utilize the access token including the generated digital signature of the at least one extended expiration time period and the at least one second satellite indication), the NF element 14 can verify the request in step 212 and send data to the AMF element 8b in step 213, which can then be received by the AMF element 8b (i.e., for example, the NF element 14 (such as an AUSF or UDM element) uses a public key to verify the request).

[0091] As previously discussed, each of the telecommunications elements described herein may include an electronic processor that executes stored instructions (e.g., software or firmware) retrieved from at least one electronic memory that, when executed by the processor, causes the device (or the element itself) to perform one or more features, functions, or steps of the exemplary processes or methods described herein.

[0092] For example, Figure 5An exemplary apparatus 15 is depicted. The apparatus 15 may include one or more telecommunication elements 16a to 16n. Each element 16a to 16n may in turn include one or more electronic processors 17a to 17n, and one or more electronic memories 18a to 18n, each of which may electronically store instructions and / or data. For ease of illustration, only a single element 16a, a single processor 17a, and two memories 18a, 18n will be discussed herein, but it should be understood that the apparatus 15 may include multiple telecommunication elements, and each element may include multiple processors and multiple memories.

[0093] In an embodiment, upon receiving a signal (e.g., message) and / or data via input 19a to 19n via input / output (I / O) circuitry 22a to 22n, the telecommunication element 16a of the device 15 may forward the received signal and / or data to the processor 17a. In an embodiment, the processor 17a may electronically retrieve one or more stored instructions and / or data from the memory 18a, 18n. Upon receiving and executing the instructions by the processor 17a, the device 15 (or the element 16a itself) may be caused to perform one or more of the features, functions and / or process steps described herein and / or shown in the figures, including but not limited to: generating or receiving a signal (message) and / or data, which may be sent to or received from another element via the electronic bus 20a to 20n, or sent to / received from another device via the output 21a to 21n.

[0094] In some embodiments, some of the methods, steps, processes, telecommunication elements and functions may be modified or further amplified. In addition, in some embodiments, additional optional methods, steps, processes, telecommunication elements, hardware, etc. may be included.

[0095] Many modifications and other embodiments of the disclosure set forth herein will occur to those skilled in the art with the benefit of the teachings presented in the foregoing description and the associated drawings. Therefore, it should be understood that the disclosure is not limited to the particular embodiments disclosed herein, and modifications and other embodiments are intended to be included within the scope of the appended claims.

[0096] In addition, although the foregoing description and the associated drawings describe certain example embodiments in the context of certain example combinations of elements, functions or steps, it should be understood that different combinations of elements, functions and / or steps can be provided by alternative embodiments without departing from the scope of the appended claims. In this regard, for example, as can be set forth in some of the appended claims, combinations of elements, functions and / or steps different from the above-mentioned elements, functions and / or steps are also considered. Although specific terms can be adopted in this article, they are only used in a general and descriptive sense, not for the purpose of limitation.

[0097] The following claim language is incorporated herein by reference in expanded form, i.e., arranged in a hierarchy from broadest to narrowest, with every possible combination indicated by multiple dependent claim references being described as a unique, independent embodiment.

[0098] The benefits, other advantages and solutions to challenges have been described above with respect to specific embodiments of the present invention. However, these benefits, advantages, solutions to challenges, and any (multiple) elements, functions and / or steps that may cause or produce such benefits, advantages or solutions or cause such benefits, advantages or solutions to become more obvious should not be construed as key, required or essential features or elements of any or all claims.

Claims

1. A method for extending an expiration period of a telecommunications access token, comprising: At a network resource function (NRF) element of a ground station, a first message is received from an access and mobility management function (AMF) element of a satellite, wherein the first message comprises at least a first information element (IE), wherein the first information element (IE) indicates that the satellite comprises the AMF element and an enhanced transport layer security indication (TLS) certificate, wherein the enhanced transport layer security indication (TLS) certificate further comprises at least one satellite indication; Determining, by the NRF component based on the at least one satellite indication in the TLS certificate, that features of the AMF component are allowed at the satellite and can be used by the ground station; receiving, at the NRF element, a second message from the satellite, wherein the second message includes a second IE, the second IE indicating that the features of the AMF element are deployed at the satellite; generating, by the NRF component, an authorization message, the authorization message comprising the generated digitally signed access token, the generated digitally signed access token having at least one extended expiration period and at least one second satellite indication, the at least one second satellite indication confirming that the satellite includes the AMF component; as well as The authorization message is sent from the NRF component to the AMF component, the authorization message including the generated digitally signed access token, the generated digitally signed access token including the at least one extended expiration time period and the at least one second satellite indication.

2. The method according to claim 1, further comprising: receiving, at a network function (NF) element of the ground station, a request message, the generated digitally signed access token including the at least one extended expiration time period and the at least one second satellite indication, the request message requesting the NF element to utilize the generated digitally signed access token including the at least one extended expiration time period and the at least one second satellite indication; as well as At the NF element, the request message is verified.

3. The method of claim 1 , wherein the at least one extended expiration period comprises: Extended expiry period of up to 48 hours.

4. The method according to claim 2, wherein the NF element comprises: One or more NF elements of the fifth generation core network of a mobile telecommunications network.

5. The method according to claim 4, wherein the one or more NF elements are selected from at least a unified data management element, an authentication server functional element, and a session mobility functional element.

6. The method according to claim 2, further comprising: Data is sent from the NF element to the AMF element.

7. A method for extending an expiration period of a telecommunications access token, comprising: Sending a first message from an access and mobility management function (AMF) element of a satellite to a network resource function (NRF) element of a ground station, wherein the first message includes at least a first information element (IE), the first information element (IE) indicating that the satellite includes the AMF element and an enhanced transport layer security indication (TLS) certificate, the enhanced transport layer security indication (TLS) certificate also including at least one satellite indication; sending a second message from the AMF component to the NRF component, wherein the second message includes a second IE, the second IE indicating that a feature of the AMF component is deployed at the satellite; receiving, at the AMF element, an authorization message from the NRF element, the authorization message comprising the generated digitally signed access token, the generated digitally signed access token comprising at least one extended expiration time period and at least one second satellite indication, the at least one second satellite indication confirming that the satellite comprises the AMF element; as well as A request message and the generated digitally signed access token are sent from the AMF element to a network function (NF) element of the ground station, wherein the generated digitally signed access token includes the at least one extended expiration time period and the at least one second satellite indication, and the request message includes: a request by the NF element to utilize the generated digitally signed access token including the at least one extended expiration time period and the at least one second satellite indication.

8. The method of claim 7, wherein the at least one extended expiration period comprises: Extended expiry period of up to 48 hours.

9. The method of claim 7, wherein the NF element comprises: One or more NF elements of the fifth generation core network of a mobile telecommunications network.

10. The method according to claim 9, wherein the one or more NF elements are selected from at least a unified data management element, an authentication server functional element, and a session mobility functional element.

11. A method for extending an expiration period of a telecommunications access token, comprising: At a first network resource function (NRF) element of a first public land mobile network (PLMN), a first message is received from an access and mobility management function (AMF) element of a satellite, wherein the first message comprises at least a first information element (IE), the first information element (IE) indicating that the satellite comprises the AMF element and an enhanced transport layer security indication (TLS) certificate, the enhanced transport layer security indication (TLS) certificate further comprising at least one satellite indication; determining, by the first NRF component based on the at least one satellite indication in the TLS certificate, that features of the AMF component can be allowed at the satellite and can be used by the first PLMN; receiving, at the first NRF element, a second message from the AMF element, wherein the second message includes a second IE, the second IE indicating that a feature of the AMF element is deployed at the satellite; generating, by the first NRF element, a first authorization message comprising a first indication that the AMF element is authorized to use the generated digitally signed access token, the generated digitally signed access token comprising at least one extended expiration time period and the at least one satellite indication; sending the first authorization message and the at least one satellite indication to a second NRF element of a second PLMN; determining, by the second NRF component based on the at least one satellite indication, that a feature of the AMF component can be allowed at the satellite and can be used by the second PLMN; generating, by the second NRF element, a second authorization message comprising a second indication that the AMF element is authorized to use the generated digitally signed access token, the generated digitally signed access token comprising the at least one extended expiration time period and at least one second satellite indication; sending, from the second NRF component to the first NRF component, the second authorization message including the generated digitally signed access token, the generated digitally signed access token including the at least one extended expiration time period and the at least one second satellite indication; as well as A third authorization message is sent from the first NRF element to the AMF element, the third authorization message authorizing the AMF element to utilize the generated digitally signed access token including the at least one extended expiration time period and the at least one second satellite indication.

12. The method according to claim 11, further comprising: receiving, at a network function (NF) element of the second PLMN, a request message, the generated digitally signed access token including the at least one extended expiration time period and the at least one second satellite indication, the request message requesting the NF element to utilize the generated digitally signed access token including the at least one extended expiration time period and the at least one second satellite indication; as well as At the NF element, the request message is verified.

13. The method of claim 11, wherein the at least one extended expiration period comprises: Extended expiry period of up to 48 hours.

14. The method of claim 12, wherein the NF element comprises: One or more NF units of the fifth generation core network of a mobile telecommunications network.

15. The method according to claim 14, wherein the one or more NF elements are selected from at least a unified data management element, an authentication server functional element, and a session mobility functional element.

16. A method for extending an expiration period of a telecommunications access token, comprising: Sending a first message from an access and mobility management function (AMF) element of a satellite to a first network resource function (NRF) element of a first public land mobile network (PLMN), wherein the first message includes at least a first information element (IE), the first information element (IE) indicating that the satellite includes an access and mobility management function (AMF) element and an enhanced transport layer security indication (TLS) certificate, the enhanced transport layer security indication (TLS) certificate also including at least one satellite indication; sending a second message from the AMF element to the first NRF element, wherein the second message includes a second IE, the second IE indicating that a feature of the AMF element is deployed at the satellite; receiving, at the AMF element, from the first NRF element, an authorization message, the authorization message comprising the generated digitally signed access token, the generated digitally signed access token comprising at least one extended expiration time period and at least one second satellite indication; as well as A request message, the generated digitally signed access token including the at least one extended expiration time period and the at least one second satellite indication, is sent from the AMF element to a network function (NF) element of the second PLMN, the request message requesting the NF element to utilize the generated digitally signed access token including the at least one extended expiration time period and the at least one second satellite indication.

17. The method of claim 16, wherein the at least one extended expiration period comprises: Extended expiry period of up to 48 hours.

18. The method of claim 16, wherein the NF element comprises: One or more NF elements of the fifth generation core network of a mobile telecommunications network.

19. The method according to claim 18, wherein the one or more NF elements are selected from at least a unified data management element, an authentication server functional element, and a session mobility functional element.

20. The method of claim 16, further comprising: At the AMF element, data is received from the NF element.

Images