Connection to WLAN access network using 3GPP-based authentication

Abstract

There is provided a wireless communication device comprising a receiver arranged to receive a network information message identifying a list of PLMNs wherein the PLMNs support authentication of 5GC using 3GPP 5G credentials.

Description

Technical Field

[0001] The subject matter disclosed herein generally relates to the field of enabling connection to a WLAN access network using 3GPP based authentication.This document defines a wireless communication device, a method in a wireless communication device, a wireless communication network and a method in a wireless communication network. Background Art

[0002] 3GPP TS 23.402 v17.0.0 specifies the Stage 2 service description for providing IP connectivity to the evolved 3GPP Packet Switched domain using non-3GPP access. In addition, for E-UTRAN and non-3GPP access, the specification describes the evolved 3GPPPS domain, where the protocols between its core network elements are based on IETF. Clause 4.8.2b specifies that when the UE has valid 3GPP subscription credentials (i.e. a valid USIM) and WLANSP policies, the UE shall make WLAN selection based on these policies, applicable user preferences and the corresponding procedures specified in this document. User preferences take precedence over WLANSP policies.

[0003] 3GPP TS 23.502 v17.5.0 describes the 5G system architecture and the Phase 2 procedures and network function services of the policy and charging control framework. Clause 4.12a.2.2 describes 5G registration via trusted non-3GPP access, which specifies that the UE is connected to a trusted non-3GPP access network (TNAN) and it also registers with the 5GC via the TNAN using an EAP-based procedure. The link between the UE and the TNAN can be any data link (L2) that supports EAP encapsulation, such as PPP, PANA, Ethernet, IEEE 802.3, IEEE 802.11, etc. The interface between the TNAN and the TNGF is the AAA interface.

[0004] 3GPP TS 23.501 v17.5.0 describes the stage 2 system architecture of the 5G system and covers all aspects of roaming and non-roaming scenarios, including interworking between 5GS and EPS, mobility within 5GS, QoS, policy control and charging, authentication, and general 5G system-wide features such as SMS, location services, emergency services. Clause 6.3.12 specifies how a UE that wants to establish a connection via a trusted non-3GPP access selects a PLMN and a trusted non-3GPP access network (TNAN) to connect to.

[0005] 3GPP TS 33.402 v17.0.0 specifies the security architecture, i.e. the set of security features and security mechanisms performed during interworking between non-3GPP accesses and the Evolved Packet System (EPS). Summary of the invention

[0006] The problem with existing methods of connecting to a WLAN access network using 3GPP-based authentication is that the UE may attempt to use an authentication method that is not properly supported by the selected WLAN / PLMN combination. Such an attempt will fail, resulting in wasted signaling bandwidth and delays in the UE establishing a connection.

[0007] Disclosed herein is a process of connecting to a WLAN access network using 3GPP-based authentication. The process may be implemented by a wireless communication device, a method in a wireless communication device, a wireless communication network, and a method in a wireless communication network.

[0008] Accordingly, a wireless communication device is provided, comprising a receiver arranged to receive a network information message identifying a list of PLMNs that support authentication of an EPC using 3GPP 5G credentials.

[0009] A method in a wireless communication device is also provided. The method includes receiving a network information message that identifies a list of PLMNs that support authentication of an EPC using 3GPP 5G credentials.

[0010] A wireless communication network is also provided, comprising a transmitter arranged to send a network information message comprising a list of PLMNs, wherein the PLMNs support authentication of an EPC using 3GPP 5G credentials.

[0011] A method in a wireless communication network is also provided, the method comprising sending a network information message comprising a list of PLMNs, wherein the PLMNs support authentication of the EPC using 3GPP 5G credentials.

[0012] A method in a wireless communication device is also provided, the method comprising: receiving a network information message that identifies a list of PLMNs, wherein the PLMNs support authentication of the EPC using 3GPP 5G credentials; creating a first list of PLMNs that can be used, wherein the first list includes authentication modes supported by each PLMN in the first list; selecting a first PLMN from the first list of PLMNs that can be used; creating a second list of available WLAN access networks, wherein the second list includes authentication modes supported by each WLAN access network; selecting a first WLAN access network from the second list of available WLAN access networks; and initiating an authentication process using the first WLAN access network and the first PLMN, wherein the mode of the authentication process is selected based on the authentication capabilities of the first WLAN access network and the first PLMN.

[0013] A wireless communication device is also provided, comprising a receiver, a processor and a transmitter, the wireless communication device being arranged to execute the above method. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] In order to describe the manner in which the advantages and features of the present disclosure can be obtained, the description of the present disclosure is presented by reference to certain devices and methods shown in the accompanying drawings. Each of these drawings depicts only certain aspects of the present disclosure and is not to be considered as limiting the scope thereof. The drawings may have been simplified for clarity and are not necessarily drawn to scale.

[0015] A method and apparatus for connecting to a WLAN access network using 3GPP based authentication will now be described, by way of example only, with reference to the accompanying drawings, in which:

[0016] Figure 1 An embodiment of a wireless communication system for connecting to a WLAN access network using 3GPP-based authentication is illustrated;

[0017] Figure 2 An example deployment scenario of two UEs connected to a WLAN network using 3GPP based authentication is shown;

[0018] Figure 3 A user equipment device is shown;

[0019] Figure 4 Network nodes are shown;

[0020] Figure 5 A method in a wireless communication device is shown;

[0021] Figure 6 A method in a wireless communication network is shown;

[0022] Figure 7 Another method in a wireless communication device is shown;

[0023] Figure 8 It illustrates an issue discussed in this article; and

[0024] Fig. 9 Deployment scenarios using the network information described herein are shown. DETAILED DESCRIPTION

[0025] As will be appreciated by those skilled in the art, aspects of the present disclosure may be implemented as systems, devices, methods or program products. Therefore, the arrangements described herein may be implemented in full hardware form, full software form (including firmware, resident software, microcode, etc.) or a combination of hardware and software.

[0026] For example, the disclosed methods and apparatus may be implemented as a hardware circuit comprising a custom very large scale integrated ("VLSI") circuit or gate array, an off-the-shelf semiconductor such as a logic chip, a transistor, or other discrete components. The disclosed methods and apparatus may also be implemented in a programmable hardware device, such as a field programmable gate array, a programmable array logic, a programmable logic device, etc. As another example, the disclosed methods and apparatus may include one or more physical or logical blocks of executable code, which may be organized, for example, as an object, procedure, or function.

[0027] In addition, the method and apparatus may take the form of a program product contained in one or more computer-readable storage devices storing machine-readable code, computer-readable code and / or program code, hereinafter referred to as code. The storage device may be tangible, non-transient and / or non-transmitting. The storage device may not contain signals. In some arrangements, the storage device uses only signals for accessing the code.

[0028] Any combination of one or more computer readable media may be utilized. The computer readable medium may be a computer readable storage medium. The computer readable storage medium may be a storage device storing code. The storage device may be, for example but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, holographic, micromechanical or semiconductor system, apparatus or device, or any suitable combination of the foregoing.

[0029] More specific examples of storage devices (a non-exhaustive list) would include the following: an electrical connection having one or more conductors, a portable computer diskette, a hard disk, a random access memory ("RAM"), a read-only memory ("ROM"), an erasable programmable read-only memory ("EPROM" or flash memory), a portable compact disk read-only memory ("CD-ROM"), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the context of this document, a computer-readable storage medium may be any tangible medium that can contain or store a program for use by or in conjunction with an instruction execution system, apparatus, or device.

[0030] Throughout the specification, references to examples or similar language of a particular method or apparatus mean that the specific features, structures, or characteristics described in conjunction with the example are included in at least one implementation of the methods and apparatus described herein. Therefore, references to features of examples of a particular method or apparatus or similar language may, but do not necessarily, all refer to the same example, but unless otherwise expressly provided, refer to "one or more but not all examples". Unless otherwise expressly stated, the terms "include", "comprise", "have", and their variations mean "including but not limited to". Unless otherwise expressly provided, a list of enumerated items does not mean that any or all items are mutually exclusive. Unless otherwise expressly provided, the terms "one" and "the" also refer to "one or more".

[0031] As used herein, a list with the conjunction "and / or" includes any single item in the list or a combination of items in the list. For example, a list of A, B, and / or C includes only A, only B, only C, a combination of A and B, a combination of B and C, a combination of A and C, or a combination of A, B, and C. As used herein, a list using the term "one or more" includes any single item in the list or a combination of items in the list. For example, one or more of A, B, and C includes only A, only B, only C, a combination of A and B, a combination of B and C, a combination of A and C, or a combination of A, B, and C. As used herein, a list using the term "one of" includes one and only one of any single item in the list. For example, "one of A, B, and C" includes only A, only B, or only C, and does not include a combination of A, B, and C. As used herein, "a member selected from the group including A, B, and C" includes one and only one of A, B, or C, and does not include a combination of A, B, and C. As used herein, “a member selected from the group consisting of A, B and C and combinations thereof” includes only A, only B, only C, a combination of A and B, a combination of B and C, a combination of A and C, or a combination of A, B and C.

[0032] In addition, the features, structures, or characteristics described herein may be combined in any appropriate manner. In the following description, many specific details are provided, such as examples of programming, software modules, user selections, network transactions, database queries, database structures, hardware modules, hardware circuits, hardware chips, etc., to provide a thorough understanding of the present disclosure. However, those skilled in the relevant art will recognize that the disclosed methods and apparatus may be implemented without one or more of the specific details, or may be implemented using other methods, components, materials, etc. In other cases, well-known structures, materials, or operations are not shown or described in detail to avoid confusing aspects of the present disclosure.

[0033] The following is a description of various aspects of the disclosed methods and devices with reference to schematic flow charts and / or schematic block diagrams of methods, devices, systems, and program products. It should be understood that each block of the schematic flow charts and / or schematic block diagrams, and the combination of blocks in the schematic flow charts and / or schematic block diagrams, can be implemented by code. The code can be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device to produce a machine, so that instructions executed by the processor of the computer or other programmable data processing device create a device for implementing the functions / actions specified in the schematic flow charts and / or schematic block diagrams.

[0034] The code may also be stored in a storage device that can instruct a computer, other programmable data processing apparatus, or other device to operate in a specific manner so that the instructions stored in the storage device produce a product including instructions for implementing the functions / actions specified in the schematic flowchart and / or schematic block diagram.

[0035] The code may also be loaded onto a computer, other programmable data processing apparatus, or other device so that a series of operational steps are performed on the computer, other programmable apparatus, or other device to produce a computer-implemented process, so that the code executed on the computer or other programmable apparatus provides a process for implementing the functions / actions specified in the schematic flowchart and / or schematic block diagram.

[0036] The schematic flow charts and / or schematic block diagrams in the accompanying drawings illustrate possible implementation architectures, functions, and operations of devices, systems, methods, and program products. In this regard, each block in the schematic flow charts and / or schematic block diagrams may represent a module, segment, or portion of a code, which includes one or more executable instructions of a code for implementing (multiple) specified logical functions.

[0037] It should also be noted that in some alternative implementations, the functions noted in the blocks may occur in the order noted in the drawings. For example, two blocks shown in succession may actually be performed substantially simultaneously, or the blocks may sometimes be performed in reverse order, depending on the functions involved. Other steps and methods may be envisioned that are equivalent in function, logic, or effect to one or more blocks, or portions thereof, of the drawings shown.

[0038] The description of the elements in each figure may refer to the elements of the previous figure. The same numbers refer to the same elements in all figures.

[0039] Figure 1 An embodiment of a wireless communication system 100 for connecting to a WLAN using 3GPP-based authentication is shown. In one embodiment, the wireless communication system 100 includes a remote unit 102 and a network unit 104. Although in Figure 1A specific number of remote units 102 and network units 104 are shown in the figure, but those skilled in the art will recognize that any number of remote units 102 and network units 104 may be included in the wireless communication system 100. The remote unit 102 may be a UE 210, 211, a user equipment device 300, or a UE 814, 815, 910 as described herein. The base unit 104 may be a PLMN 230, a network node 400, or a PLMN 830, 930 as described herein.

[0040] In one embodiment, the remote unit 102 may include a computing device such as a desktop computer, a laptop computer, a personal digital assistant (“PDA”), a tablet computer, a smart phone, a smart TV (e.g., a TV connected to the Internet), a set-top box, a game console, a security system (including a security camera), a vehicle-mounted computer, a network device (e.g., a router, a switch, a modem), an aerial vehicle, a drone, etc. In some embodiments, the remote unit 102 includes a wearable device such as a smart watch, a fitness band, an optical helmet display, etc. In addition, the remote unit 102 may be referred to as a subscriber unit, a mobile device, a mobile station, a user, a terminal, a mobile terminal, a fixed terminal, a subscriber station, a UE, a user terminal, a device, or other terms used in the art. The remote unit 102 may communicate directly with one or more network units 104 via UL communication signals. In some embodiments, the remote unit 102 may communicate directly with other remote units 102 via side link communications.

[0041] The network elements 104 may be distributed over a geographical area. In some embodiments, the network elements 104 may also be referred to as access points, access terminals, base stations, base stations, Node-Bs, eNBs, gNBs, home Node-Bs, relay nodes, devices, core networks, air servers, radio access nodes, APs, NRs, network entities, access and mobility management functions (“AMFs”), unified data management functions (“UDMs”), unified data repositories (“UDRs”), UDM / UDRs, policy control functions (“PCFs”), radio access networks (“RANs”), network slice selection functions (“NSSFs”), operations, management, and administration (“OAs”). M"), session management function ("SMF"), user plane function ("UPF"), application function, authentication server function ("AUSF"), security anchor function ("SEAF"), trusted non-3GPP gateway function ("TNGF"), application function, service enabling architecture layer ("SEAL") function, vertical application enabling server, edge enabling server, edge configuration server, mobile edge computing platform function, mobile edge computing application, application data analysis enabling server, SEAL data delivery server, middleware entity, network slice capability management server or any other term used in the art. The network unit 104 is typically part of a radio access network and includes one or more controllers communicatively coupled to one or more corresponding network units 104. The radio access network is typically communicatively coupled to one or more core networks, which can be coupled to other networks, such as the Internet and the public switched telephone network, as well as other networks. These and other elements of the radio access and core networks are not shown, but are well known to those of ordinary skill in the art.

[0042] In one implementation, the wireless communication system 100 complies with the New Radio (NR) protocol standardized in 3GPP, wherein the network unit 104 transmits on the downlink (DL) using an orthogonal frequency division multiplexing ("OFDM") modulation scheme, and the remote unit 102 transmits on the uplink (UL) using a single carrier frequency division multiple access ("SC-FDMA") scheme or an OFDM scheme. More generally, however, the wireless communication system 100 may implement some other open or proprietary communication protocol, such as WiMAX, IEEE 802.11 variants, GSM, GPRS, UMTS, LTE variants, CDMA2000, ZigBee, Sigfoxx, and other protocols. The present disclosure is not intended to be limited to any particular wireless communication system architecture or protocol implementation.

[0043] The network unit 104 can serve multiple remote units 102 within a service area, such as a cell or cell sector, via wireless communication links. The network unit 104 sends DL communication signals to serve the remote units 102 in the time, frequency, and / or spatial domains.

[0044] As defined in the 3GPP specifications, the UE can connect to the WLAN access network using 3GPP-based authentication and its credentials associated with the Evolved Packet Core (EPC) in the PLMN. The UE can determine the PLMNs for which the WLAN can support 3GPP-based authentication (also known as AAA interworking) by requesting and receiving "3GPP Cellular Network" information from the WLAN before connecting. Part of this information indicates that the PLMNs for which 3GPP-based authentication is supported by the WLAN.

[0045] Figure 2 An example deployment scenario is shown in which UE 210 and UE 211 are connected to WLAN network 220 via multiple PLMNs 230 using 3GPP-based authentication using EPC. Available WLANs 220 include WLAN access network 1 221 and WLAN access network 2 222. WLAN access network 1 221 has a first service set identifier (SSID) SSID-1. WLAN access network 2 222 has a second SSID SSID-2. Available PLMNs 230 include PLMN-a 231, PLMN-b 232, PLMN-c 233, and PLMN-d 234.

[0046] UE 210 receives a list of PLMNs from WLAN access network 1 221. UE 210 may determine from the list of PLMNs provided by WLAN access network 221 with SSID-1 (as part of the "3GPP Cellular Network" information) that the access network supports 3GPP-based authentication (or "AAA interworking") for PLMN-a 231 and PLMN-b 232. If UE 210 holds EPC / 4G credentials for one of these PLMNs, UE 210 may attempt to connect to WLAN access network 221 with SSID-1 using these credentials. This is accomplished by initiating an EAP-AKA' authentication procedure, which is specified in TS 33.402 v17.0.0, clause 6.2, "Authentication and Key Agreement for Trusted Access". UE 210 sends a Network Access Identifier (NAI) to WLAN access network 221 with SSID-1 containing a username equal to its IMSI and a domain containing the identity of the PLMN, which should be used to authenticate and authorize UE 210 to connect to WLAN 221 .

[0047] In summary, the UE 210 determines that the WLAN access network 221 with SSID-1 supports AAA interworking for the EPCs of the PLMN-a 231 and PLMN-b 232 based on the received PLMN list provided by the WLAN access network 221 with SSID-1. The UE 210 may decide to connect to the WLAN access network 221 with SSID-1 using 3GPP-based authentication for the PLMN-a 231 or PLMN-b 232.

[0048] Similarly, another UE 211 may determine from the list of PLMNs provided by the WLAN access network 222 with SSID-2 (as part of the "3GPP cellular network") that the access network supports 3GPP-based authentication (or "AAA interworking") for PLMN-c 233 and PLMN-d 234. If the UE 211 holds EPC / 4G credentials for one of these PLMNs, the UE 211 may attempt to connect to the WLAN access network 222 with SSID-2 using these credentials.

[0049] In summary, UE 211 determines that WLAN access network 222 with SSID-2 supports AAA interworking with EPCs in PLMN-c 233 and PLMN-d 234 based on the received PLMN list provided by WLAN access network 222 with SSID-2. UE 211 may decide to connect to WLAN access network 222 with SSID-2 using 3GPP authentication for PLMN-c 233 or PLMN-d 234.

[0050] Note that the PLMN list provided by the WLAN access network only contains a list of PLMNs for which AAA interworking is supported. It does not indicate whether AAA interworking to the EPC or to the 5GC is supported in each of these PLMNs. This has not been a problem until Rel-16, because only AAA interworking with the EPC was supported, and it was implicitly assumed that each PLMN in the PLMN list supported AAA interworking with the EPC. However, the situation changed in Rel-17 with the introduction of a new solution in the specification that supports AAA interworking between the WLAN access network and the 5GC. This solution is generally referred to as 5G "Non-Seamless WLAN Offload" (NSWO), and it is specified in 3GPP TS 33.501 v17.6.0 Annex S. The introduction of this solution makes it unclear whether each PLMN in the PLMN list supports AAA interworking with the EPC and / or with the 5GC.

[0051] The present application proposes a solution to this problem.

[0052] Figure 3 A user equipment device 300 is shown that can be used to implement the methods described herein. The user equipment device 300 is used to implement one or more solutions described herein. The user equipment device 300 is according to one or more user equipment devices described in the embodiments herein. The user equipment device 300 can be a remote unit 102, a UE 210, 211 or a UE 814, 815, 910 described herein. The user equipment device 300 includes a processor 305, a memory 310, an input device 315, an output device 320 and a transceiver 325.

[0053] The input device 315 and the output device 320 may be combined into a single device, such as a touch screen. In some implementations, the user equipment apparatus 300 does not include any input device 315 and / or output device 320. The user equipment apparatus 300 may include one or more of a processor 305, a memory 310, and a transceiver 325, and may not include an input device 315 and / or an output device 320.

[0054] As shown, the transceiver 325 includes at least one transmitter 330 and at least one receiver 335. The transceiver 325 can communicate with one or more cells (or wireless coverage areas) supported by one or more base units. The transceiver 325 can operate on an unlicensed spectrum. In addition, the transceiver 325 can include multiple UE panels supporting one or more beams. In addition, the transceiver 325 can support at least one network interface 340 and / or application interface 345. (Multiple) application interface 345 can support one or more APIs. (Multiple) network interface 340 can support 3GPP reference points, such as Uu, N1, PC5, etc. As understood by those of ordinary skill in the art, other network interfaces 340 can be supported.

[0055] Processor 305 may include any known controller capable of executing computer-readable instructions and / or capable of performing logical operations. For example, processor 305 may be a microcontroller, a microprocessor, a central processing unit (“CPU”), a graphics processing unit (“GPU”), an auxiliary processing unit, a field programmable gate array (“FPGA”), or a similar programmable controller. Processor 305 may execute instructions stored in memory 310 to perform the methods and routines described herein. Processor 305 is communicatively coupled to memory 310, input device 315, output device 320, and transceiver 325.

[0056] Processor 305 may control user equipment device 300 to implement the user equipment device behaviors described herein. Processor 305 may include an application processor (also referred to as a "main processor") that manages application domain and operating system ("OS") functions and a baseband processor (also referred to as a "baseband radio processor") that manages radio functions.

[0057] Memory 310 may be a computer-readable storage medium. Memory 310 may include volatile computer storage media. For example, memory 310 may include RAM, including dynamic RAM ("DRAM"), synchronous dynamic RAM ("SDRAM"), and / or static RAM ("SRAM"). Memory 310 may include non-volatile computer storage media. For example, memory 310 may include a hard drive, flash memory, or any other suitable non-volatile computer storage device. Memory 310 may include both volatile and non-volatile computer storage media.

[0058] The memory 310 may store data related to the traffic class domain as described herein. The memory 310 may also store program code and related data, such as an operating system or other controller algorithms running on the device 300.

[0059] Input device 315 may include any known computer input device, including a touch panel, buttons, keyboard, stylus, microphone, etc. Input device 315 may be integrated with output device 320, such as a touch screen or similar touch-sensitive display. Input device 315 may include a touch screen, so that text can be entered using a virtual keyboard displayed on the touch screen and / or by handwriting on the touch screen. Input device 315 may include two or more different devices, such as a keyboard and a touch pad.

[0060] Output device 320 may be designed to output visual, auditory and / or tactile signals. Output device 320 may include an electronically controllable display or display device capable of outputting visual data to a user. For example, output device 320 may include, but is not limited to, a liquid crystal display ("LCD"), a light emitting diode ("LED") display, an organic LED ("OLED") display, a projector, or a similar display device capable of outputting images, text, etc. to a user. As another non-limiting example, output device 320 may include a wearable display that is separate from the rest of network node 300 but communicatively coupled to the rest of user device apparatus 300, such as a smart watch, smart glasses, a head-up display, etc. In addition, output device 320 may be a component of a smart phone, a personal digital assistant, a television, a desktop computer, a notebook (laptop) computer, a personal computer, a vehicle dashboard, etc.

[0061] Output device 320 may include one or more speakers for producing sound. For example, output device 320 may produce an audible alarm or notification (e.g., a beep or chime). Output device 320 may include one or more tactile devices for producing vibration, motion, or other tactile feedback. All or part of output device 320 may be integrated with input device 315. For example, input device 315 and output device 320 may form a touch screen or similar touch-sensitive display. Output device 320 may be located near input device 315.

[0062] The transceiver 325 communicates with one or more network functions of the mobile communication network through one or more access networks. The transceiver 325 operates under the control of the processor 305 to send and also receive messages, data, and other signals. For example, the processor 305 can selectively activate the transceiver 325 (or part thereof) at a particular time to send and receive messages.

[0063] The transceiver 325 includes at least one transmitter 330 and at least one receiver 335. As described herein, one or more transmitters 330 can be used to provide uplink communication signals to a base unit of a wireless communication network. Similarly, one or more receivers 335 can be used to receive downlink communication signals from the base unit. Although only one transmitter 330 and one receiver 335 are shown, the user equipment device 300 can have any appropriate number of transmitters 330 and receivers 335. In addition, (multiple) transmitters 330 and (multiple) receivers 335 can be any appropriate type of transmitter and receiver. The transceiver 325 may include a first transmitter / receiver pair for communicating with a mobile communication network on a licensed radio spectrum and a second transmitter / receiver pair for communicating with a mobile communication network on an unlicensed radio spectrum.

[0064] A first transmitter / receiver pair that can be used to communicate with a mobile communication network on a licensed radio spectrum, and a second transmitter / receiver pair that can be used to communicate with a mobile communication network on an unlicensed radio spectrum can be combined into a single transceiver unit, such as a single chip that performs functions for use with licensed and unlicensed radio spectrums. The first transmitter / receiver pair and the second transmitter / receiver pair can share one or more hardware components. For example, some transceivers 325, transmitters 330, and receivers 335 can be implemented as physically separated components that access shared hardware resources and / or software resources (e.g., network interface 340).

[0065] One or more transmitters 330 and / or one or more receivers 335 may be implemented and / or integrated into a single hardware component, such as a multi-transceiver chip, a system on a chip, an application specific integrated circuit ("ASIC"), or other type of hardware component. One or more transmitters 330 and / or one or more receivers 335 may be implemented and / or integrated into a multi-chip module. Other components such as a network interface 340 or other hardware components / circuits may be integrated into a single chip with any number of transmitters 330 and / or receivers 335. Transmitters 330 and receivers 335 may be logically configured as transceivers 325 using one or more common control signals, or may be configured as modular transmitters 330 and receivers 335 implemented in the same hardware chip or multi-chip module.

[0066] Figure 4 Further details of a network node 400 that can be used to implement the methods described herein are shown. The network node 400 may be a base unit 104, a PLMN 230 or a PLMN 830, 930 as described herein. The network node 400 comprises a processor 405, a memory 410, an input device 415, an output device 420 and a transceiver 425.

[0067] Input device 415 and output device 420 may be combined into a single device, such as a touch screen. In some implementations, network node 400 does not include any input device 415 and / or output device 420. Network node 400 may include one or more of processor 405, memory 410, and transceiver 425, and may not include input device 415 and / or output device 420.

[0068] As shown, the transceiver 425 includes at least one transmitter 430 and at least one receiver 435. Here, the transceiver 425 communicates with one or more remote units 200. In addition, the transceiver 425 can support at least one network interface 440 and / or application interface 445. (Multiple) application interface 445 can support one or more APIs. (Multiple) network interface 440 can support 3GPP reference points, such as Uu, N1, N2, and N3. As understood by those of ordinary skill in the art, other network interfaces 440 can be supported.

[0069] The processor 405 may include any known controller capable of executing computer-readable instructions and / or capable of performing logical operations. For example, the processor 405 may be a microcontroller, a microprocessor, a CPU, a GPU, an auxiliary processing unit, an FPGA, or a similar programmable controller. The processor 405 may execute instructions stored in the memory 410 to perform the methods and routines described herein. The processor 405 is communicatively coupled to the memory 410, the input device 415, the output device 420, and the transceiver 425.

[0070] Memory 410 may be a computer-readable storage medium. Memory 410 may include volatile computer storage media. For example, memory 410 may include RAM, including dynamic RAM ("DRAM"), synchronous dynamic RAM ("SDRAM"), and / or static RAM ("SRAM"). Memory 410 may include non-volatile computer storage media. For example, memory 410 may include a hard drive, flash memory, or any other suitable non-volatile computer storage device. Memory 410 may include volatile and non-volatile computer storage media.

[0071] The memory 410 may store data related to establishing a multipath unicast link and / or mobile operation. For example, the memory 410 may store parameters, configurations, resource allocations, policies, etc., as described herein. The memory 410 may also store program code and related data, such as an operating system or other controller algorithms running on the network node 400.

[0072] Input device 415 may include any known computer input device, including a touch panel, buttons, keyboard, stylus, microphone, etc. Input device 415 may be integrated with output device 420, for example, as a touch screen or similar touch-sensitive display. Input device 415 may include a touch screen so that text can be entered using a virtual keyboard displayed on the touch screen and / or by handwriting on the touch screen. Input device 415 may include two or more different devices, such as a keyboard and a touch screen.

[0073] Output device 420 may be designed to output visual, auditory and / or tactile signals. Output device 420 may include an electronically controllable display or display device capable of outputting visual data to a user. For example, output device 420 may include, but is not limited to, an LCD display, an LED display, an OLED display, a projector, or a similar display device capable of outputting images, text, etc. to a user. As another non-limiting example, output device 420 may include a wearable display that is separate from the rest of network node 400 but communicatively coupled to the rest of network node 400, such as a smart watch, smart glasses, a head-up display, etc. In addition, output device 420 may be a component of a smart phone, a personal digital assistant, a television, a desktop computer, a notebook (laptop) computer, a personal computer, a vehicle dashboard, etc.

[0074] Output device 420 may include one or more speakers for producing sound. For example, output device 420 may produce an audible alarm or notification (e.g., a beep or chime). Output device 420 may include one or more tactile devices for producing vibration, motion, or other tactile feedback. All or part of output device 420 may be integrated with input device 415. For example, input device 415 and output device 420 may form a touch screen or similar touch-sensitive display. Output device 420 may be located near input device 415.

[0075] The transceiver 425 includes at least one transmitter 430 and at least one receiver 435. The one or more transmitters 430 may be used to communicate with the UE as described herein. Similarly, the one or more receivers 435 may be used to communicate with network functions in the PLMN and / or RAN as described herein. Although only one transmitter 430 and one receiver 435 are shown, the network node 400 may have any suitable number of transmitters 430 and receivers 435. In addition, the transmitter(s) 430 and the receiver(s) 435 may be any suitable type of transmitter and receiver.

[0076] Accordingly, a wireless communication device is provided, the wireless communication device comprising a receiver arranged to receive a network information message, the network information message identifying a list of PLMNs, wherein the PLMNs support authentication of a 5GC using 3GPP 5G credentials.

[0077] This device solves the problem of uncertainty about whether each PLMN in the PLMN list supports 3GPP-based authentication for EPC and / or for 5GC. It is intended to solve this problem by extending the definition of network information so that the UE can determine whether the WLAN access network and the associated PLMN support 3GPP-based authentication for EPC and / or NSWO authentication for 5GC in the PLMN.

[0078] Therefore, the network information message information may indicate a list of PLMNs for which 3GPP-based authentication is supported, and also indicate whether 3GPP-based authentication for EPC and / or for 5GC is supported in each of these PLMNs. 3GPP-based authentication may include AAA interworking. The network information may include 3GPP cellular network information.

[0079] The wireless communication device may further comprise a transmitter which may be arranged to transmit an authentication request for requesting a mode of authentication selected based on the network information message.

[0080] Authentication of 5GC using 3GPP 5G credentials may include non-seamless WLAN offload (NSWO). NSWO authentication is defined in 3GPP TS33.501 v17.6.0 Annex S.

[0081] The wireless communication device may further include a processor. The processor may be arranged to: create a first list of usable PLMNs, wherein the first list includes an authenticated mode supported by each PLMN in the first list; and select a first PLMN from the first list of usable PLMNs.

[0082] The authentication modes supported by the PLMN may include: using EPC-based authentication to authenticate the wireless communication device; and / or using 5GC-based authentication to authenticate the wireless communication device.

[0083] The processor may be further arranged to: create a second list of available WLAN access networks, wherein the second list comprises a mode of authentication supported by each WLAN access network; and select the first WLAN access network from the second list of available WLAN access networks.

[0084] The authentication modes supported by the WLAN access network may include: using EPC-based authentication to authenticate the wireless communication device; and / or using 5GC-based authentication to authenticate the wireless communication device.

[0085] The processor may be further arranged to initiate an authentication procedure using the first WLAN access network and the first PLMN, wherein a mode of the authentication procedure is selected according to authentication capabilities of the first WLAN access network and the first PLMN.

[0086] The processor may be configured to initiate a 5GC-based authentication process or an EPC-based authentication process using a first WLAN access network and a first PLMN, wherein the 5GC-based authentication process or the EPC-based authentication is selected based on authentication capabilities of the first WLAN access network and the first PLMN.

[0087] Authentication to the EPC using 3GPP 4G credentials may include 3GPP based authentication. 3GPP based authentication is defined in TS 33.402 v17.0.0.

[0088] Figure 5 A method 500 in a wireless communication device is shown. The method 500 includes receiving 510 a network information message identifying a list of PLMNs that support authentication of a 5GC using 3GPP 5G credentials.

[0089] This process solves the problem of uncertainty about whether each PLMN in the PLMN list supports 3GPP-based authentication for EPC and / or for 5GC. It is intended to solve this problem by extending the definition of network information so that the UE can determine whether the WLAN access network and the associated PLMN support 3GPP-based authentication for EPC and / or NSWO authentication for 5GC in the PLMN.

[0090] Therefore, the network information message information may indicate a list of PLMNs for which 3GPP-based authentication is supported, and also indicate whether 3GPP-based authentication for EPC and / or for 5GC is supported in each of these PLMNs. 3GPP-based authentication may include AAA interworking. The network information may include 3GPP cellular network information.

[0091] The method may further include sending an authentication request for requesting a mode of authentication selected based on the network information message.

[0092] Authentication of 5GC using 3GPP 5G credentials may include non-seamless WLAN offload (NSWO). NSWO authentication is defined in 3GPP TS33.501 v17.6.0 Annex S.

[0093] The method may further include: creating a first list of usable PLMNs, wherein the first list includes a mode of authentication supported by each PLMN in the first list; and selecting a first PLMN from the first list of usable PLMNs.

[0094] The authentication modes supported by the PLMN may include: using EPC-based authentication to authenticate the wireless communication device; and / or using 5GC-based authentication to authenticate the wireless communication device.

[0095] The method may further include: creating a second list of available WLAN access networks, wherein the second list includes a mode of authentication supported by each WLAN access network; and selecting the first WLAN access network from the second list of available WLAN access networks.

[0096] The authentication modes supported by the WLAN access network may include: using EPC-based authentication to authenticate the wireless communication device; and / or using 5GC-based authentication to authenticate the wireless communication device.

[0097] The method may further include initiating an authentication process using the first WLAN access network and the first PLMN, wherein a mode of the authentication process is selected according to authentication capabilities of the first WLAN access network and the first PLMN.

[0098] A 5GC-based authentication process or an EPC-based authentication process may be initiated using the first WLAN access network and the first PLMN, wherein the 5GC-based authentication process or the EPC-based authentication is selected based on the authentication capabilities of the first WLAN access network and the first PLMN. Authentication of the EPC using 3GPP 4G credentials may include 3GPP-based authentication. 3GPP-based authentication is defined in TS33.402 v17.0.0.

[0099] A wireless communication network is also provided, the wireless communication network comprising a transmitter arranged to send a network information message, the network information message comprising a list of PLMNs, wherein the PLMNs support authentication of the EPC using 3GPP 5G credentials. Authentication of the EPC using the 3GPP 5G credentials may include non-seamless WLAN offload (NSWO). NSWO authentication is defined in 3GPP TS33.501v17.6.0 Appendix S.

[0100] Figure 6 A method 600 in a wireless communication network is shown, the method comprising sending a network information message including a list of PLMNs, wherein the PLMNs support authentication of the EPC using 3GPP 5G credentials. Authentication of the EPC using the 3GPP 5G credentials may include non-seamless WLAN offload (NSWO). NSWO authentication is defined in 3GPP TS 33.501 v17.6.0 Annex S.

[0101] Figure 7 Another method 700 in a wireless communication device is shown. The method 700 includes: receiving 710 a network information message that identifies a list of PLMNs that support authentication of an EPC using 3GPP 5G credentials; and creating 720 a first list of PLMNs that can be used, wherein the first list includes a mode of authentication supported by each PLMN in the first list. The method 700 also includes: selecting 730 a first PLMN from the first list of PLMNs that can be used; and creating 740 a second list of available WLAN access networks, wherein the second list includes a mode of authentication supported by each WLAN access network. The method 700 further includes: selecting 750 a first WLAN access network from the second list of available WLAN access networks; and initiating 760 an authentication process using the first WLAN access network and the first PLMN, wherein the mode of the authentication process is selected based on the authentication capabilities of the first WLAN access network and the first PLMN.

[0102] There is further provided a wireless communication device, comprising a receiver, a processor and a transmitter, the wireless communication device being arranged to execute the above method.

[0103] This process solves the problem of uncertainty about whether each PLMN in the PLMN list supports 3GPP-based authentication for EPC and / or for 5GC. It is intended to solve this problem by extending the definition of network information so that the UE can determine whether the WLAN access network and the associated PLMN support 3GPP-based authentication for EPC and / or NSWO authentication for 5GC in the PLMN.

[0104] Therefore, the network information message information may indicate a list of PLMNs for which 3GPP-based authentication is supported, and also indicate whether 3GPP-based authentication for EPC and / or for 5GC is supported in each of these PLMNs. 3GPP-based authentication may include AAA interworking. The network information may include 3GPP cellular network information.

[0105] The authentication modes supported by the PLMN may include: using EPC-based authentication to authenticate the wireless communication device; and / or using 5GC-based authentication to authenticate the wireless communication device.

[0106] As described above, in known systems, the PLMN list provided by the WLAN access network only contains a list of PLMNs for which AAA interworking is supported. It does not indicate whether AAA interworking to EPC or to 5GC is supported in each of these PLMNs. The known definition of network information cannot distinguish whether each PLMN in the PLMN list supports AAA interworking to EPC and / or to 5GC.

[0107] Figure 8 The problem solved in this paper is shown through an example deployment scenario with two WLAN access networks, each supporting AAA interworking for EPC and 5GC in several PLMNs. Figure 8 5G UE 815, 4G UE 814, multiple WLAN networks 820, and multiple PLMNs 830 are shown. Available WLANs 820 include WLAN access network 1 821 and WLAN access network 2 822. WLAN access network 1 821 has a first SSID SSID-1. WLAN access network 2 822 has a second SSID SSID-2. Available PLMNs 830 include PLMN-a 831, PLMN-b 832, PLMN-c 833, and PLMN-d 834.

[0108] WLAN access network 1 821 (SSID-1) supports AAA interworking for 5GC in PLMN-a 831 and AAA interworking for EPC in PLMN-b 832, while WLAN access network 2 822 (SSID-2) supports AAA interworking for EPC and 5GC in PLMN-c 833 and AAA interworking for 5GC in PLMN-d 834. However, note that the PLMN list provided by WLAN access network 821 with SSID-1 (as part of the "3GPP Cellular Network" information) contains the identities of PLMN-a 831 and PLMN-b 832, but does not indicate whether AAA interworking for EPC and / or 5GC is supported in each of these PLMNs. Similarly, the PLMN list provided by the WLAN access network 822 with SSID-2 (as part of the “3GPP Cellular Network” information) contains the identities of PLMN-c 833 and PLMN-d 834, but does not indicate whether AAA interworking to the EPC and / or 5GC is supported in each of these PLMNs.

[0109] Since the PLMN list does not indicate whether AAA interworking to the EPC and / or 5GC is supported in each PLMN in the list, the UEs 814, 815 lack the necessary information to determine whether they can connect to the WLAN using their 3GPP credentials. For example, a 5G UE 815 is a 5G subscriber to PLMN-b 832. The UE 815 determines that the WLAN access network 821 with SSID-1 supports AAA interworking to PLMN-b 832, and therefore initiates the NSWO authentication procedure specified in 3GPP TS 33.501 v17.6.0, Annex S, in order to connect to that SSID using its 3GPP credentials. As part of this procedure, the UE 815 provides a NAI that includes its Subscriber Hidden Identifier (NAI=SUCI= <username>@realm), which hides the real identity of UE 815 for privacy reasons. However, since the domain part of the NAI contains the "5gc" tag, the AAA proxy in WLAN access network 1 will reject the authentication request because it does not support interworking with 5GC in PLMN-b 832. Even if the AAA proxy does not reject the authentication request, and if it sends an access request message to the EPC in PLMN-b 832, the AAA server in PLMN-b 832 will reject the message because it does not contain the expected IMSI as part of the username. Therefore, the attempt of UE 815 to connect to WLAN access network 1 821 using its 3GPP credentials will fail.

[0110] In other words, UE 815 knows that WLAN access network 821 with SSID-1 supports AAA interworking with PLMN-b 832, but does not know whether it supports interworking with EPC and / or 5GC in PLMN-b 832. UE 815 cannot use PLMN-b 832 for NSWO authentication.

[0111] 4G UE 814 will encounter corresponding problems. UE 814 is a 4G subscriber of PLMN-d 834 and determines that WLAN access network 822 with SSID-2 supports AAA interworking to PLMN-d 834. Therefore, it initiates the 3GPP-based authentication process specified in 3GPP TS 33.402v17.0.0 to connect to WLAN access network 822 using its 3GPP credentials. As part of this process, UE 814 provides a NAI that includes the IMSI of UE 814 in the username portion of the NAI (NAI=6 <imsi>@realm). However, since the domain portion of the NAI contains the "epc" tag, the AAA proxy in the WLAN access network 822 will reject the authentication request because it does not support interworking with the EPC in the PLMN-d 834. Even if the AAA proxy does not reject the authentication request, and if it sends an Access Request message to the 5GC in the PLMN-d 834, the NSWOF in the PLMN-d 834 will reject the message because it does not contain the expected SUCI. Therefore, the attempt by the UE 814 to connect to the WLAN access network 822 using its 3GPP credentials will fail.

[0112] In other words, UE 814 knows that WLAN access network 822 SSID-2 supports AAA interworking with PLMN-d 834, but does not know whether it supports interworking with EPC and / or 5GC in PLMN-d 834. UE 814 cannot use PLMN-d 834 for 3GPP-based authentication.

[0113] This paper proposes a solution that solves the above problem by extending the definition of "3GPP cellular network" information and by enabling the UE to determine which authentication mode the WLAN access network supports. That is, whether the WLAN access network supports 3GPP-based authentication (or AAA interworking) and / or NSWO 5GC authentication for EPC in PLMN.

[0114] This document gives specific examples with reference to 3GPP-based authentication (or AAA interworking) of EPC and / or NSWO authentication of 5GC in PLMN. However, it should be noted that the concepts proposed herein can be applied to any wireless communication network in which different authentication modes are available. For the examples given herein, it can be noted that authentication of EPC using 3GPP 4G credentials is called 3GPP-based authentication and is defined in 3GPP TS 33.402 v17.0.0, while authentication of 5GC using 3GPP 5G credentials is called NSWO authentication and is defined in 3GPP TS 33.501 v17.6.0 Appendix S.

[0115] As presented herein, the definition of "3GPP Cellular Network" information is extended to include not only a list of PLMNs for which AAA interworking is supported, but also an indication of which authentication modes are supported for each PLMN. Specifically, this may be whether AAA interworking to EPC and / or to 5GC is supported in each of these PLMNs.

[0116] Currently, the "3GPP Cellular Network" information defined in 3GPP TS 24.302 v17.0.0 Annex H may contain one or more of the following lists:

[0117] PLMN list: Contains the list of PLMNs for which WLAN supports AAA interworking (but does not indicate whether interworking with EPC and / or 5GC is supported).

[0118] • PLMN list with S2a connection: Contains the list of PLMNs for which the WLAN supports S2a connection to the EPC.

[0119] · List of PLMNs with trusted 5G connections: Contains the list of PLMNs for which the WLAN supports 5G connections to the 5GC.

[0120] · List of PLMNs with trusted 5G NAS-free connections: Contains the list of PLMNs for which WLAN supports 5G NAS-free connections to 5GC.

[0121] Instead of extending the above PLMN list (which would create backward compatibility issues (i.e. it would not be parsable by existing UEs)), we introduce an additional list:

[0122] List of PLMNs with AAA connection to 5GC: Contains the list of PLMNs for which the WLAN supports AAA connection to 5GC, i.e., it supports 5G NSWO to these PLMNs.

[0123] Then, the existing PLMN list (item 1 of the above list reproduced from 3GPP TS 24.302 v17.0.0 Annex H) is used to include only the PLMNs for which the WLAN supports AAA interworking (or 3GPP based authentication) to the EPC.

[0124] As an example, Figure 8 The WLAN access network 821 with SSID-1 in the example will provide the following PLMN list in the network information:

[0125] PLMN list: PLMN-b

[0126] List of PLMNs with AAA connection to 5GC: PLMN-a

[0127] Similarly, Figure 8 The WLAN access network 822 with SSID-2 in the example will provide the following PLMN list in the network information:

[0128] PLMN list: PLMN-c

[0129] List of PLMNs with AAA connection to 5GC: PLMN-c, PLMN-d

[0130] The WLAN selection method given below uses the enhanced "3GPP Cellular Network" information specified above. The 5G UE uses this to select the WLAN access network to connect to and the PLMN to use for authentication.

[0131] Fig. 9 Deployment scenarios using the network information described herein are shown. Fig. 9 UE 910, multiple WLAN networks 920, and multiple PLMNs 930 are shown. Available WLANs 920 include WLAN access network 1 921, WLAN access network 2 922, and WLAN access network 3 923. WLAN access network 1 921 has a first SSID SSID-1. WLAN access network 2 922 has a second SSID SSID-2. WLAN access network 3 923 has a third SSID SSID-3. Available PLMNs 930 include PLMN-a 931, PLMN-b 932, PLMN-c 933, and PLMN-d 934. Note that the interface for connecting the WLAN access network with the AAA server in the EPC and the interface for connecting the WLAN access network with the NSWO NF in the 5GC are the same (SWa / STa), that is, they use the same procedures and protocols. However, there are some significant differences in the 3GPP-based authentication between the UE and the EPC and the NSWO authentication between the UE and the 5GC, including the value of the NAI provided by the UE 910. Also note that if Fig. 9 If the AAA servers in the UE 910 are deployed in a PLMN 930 that is different from the HPLMN of the UE 910, they may be AAA proxies.

[0132] The UE decides to connect to the WLAN access network using its 3GPP credentials in step 0. This may be decided, for example, when the user activates the WLAN radio interface, or when the UE applies a URSP rule indicating that some data traffic should be offloaded to the WLAN access, or for any other implementation-dependent reason.

[0133] In step 1, UE 910 discovers available WLANs, and for each WLAN, it identifies: the PLMNs for which "AAA connection to EPC" is supported; and the PLMNs for which "AAA connection to 5GC" is supported.

[0134] The PLMN 930 for which AAA connection to the EPC is supported is also the PLMN for which 3GPP-based authentication (as defined in 3GPPTS 33.402 v17.0.0) is supported. Similarly, the PLMN 930 for which AAA connection to the 5GC is supported is also the PLMN for which NSWO authentication (as defined in 3GPP TS 33.501 v17.6.0) is supported.

[0135] The UE 910 identifies the above PLMN by sending an ANQP request message to each WLAN 920 to request the "3GPP cellular network" information and receiving an ANQP response message containing the "3GPP cellular network" information. The "3GPP cellular network" information in the ANQP response contains one or more of the following PLMN lists:

[0136] PLMN List

[0137] List of PLMNs with S2a connections

[0138] List of PLMNs with trusted 5G connections

[0139] List of PLMNs with trusted 5G NAS-free connections

[0140] List of PLMNs with AAA connection to 5GC

[0141] The content in the "PLMN List" indicates the PLMNs that support AAA connection to EPC, while the content in the "PLMN List with AAA Connection to 5GC" indicates the PLMNs that support AAA connection to 5GC.

[0142] It should be noted that when the WLAN supports AAA connection to the 5GC of a PLMN, it means that the WLAN supports 5GC-based authentication for the PLMN. Therefore, the terms "AAA connection to the 5GC" and "5GC-based authentication" are used interchangeably and have the same meaning. The same is true for the terms "AAA connection to the EPC" and "EPC-based authentication".

[0143] exist Fig. 9 In the example shown, the UE 910 discovers the following three WLANs 920 and identifies the modes of authentication supported by each PLMN, as listed in Table 1 below.

[0144]

[0145] Table 1: Example of mode of PLMN authentication discovered by UE.

[0146] In step 2, UE 910 uses a 3GPP-based authentication process supported by EPC or a NSWO authentication process supported by 5GC to create a first list of PLMNs that can be used, i.e., a list of PLMNs that can be used to authenticate UE 910. The first list of PLMNs that can be used is usually a subset of available PLMNs, i.e., a subset of all PLMNs for which AAA connections are supported by any available WLAN. In the above example, the available PLMNs are PLMN-a 931, PLMN-b 932, PLMN-c 933, and PLMN-d 934.

[0147] An available PLMN is "usable" for UE 910 (i.e., usable for authenticating UE 910) when (a) the available PLMN is the HPLMN of UE 910, or (b) it is a PLMN equivalent to the HPLMN, or (c) it is a PLMN that supports roaming using the HPLMN. UE 910 may identify whether the PLMN is "usable" by using information stored in the USIM module and other information locally in UE 910. For example, UE 910 determines that the first list of usable PLMNs includes:

[0148] • A first list of PLMNs that can be used = PLMN-a 931 , PLMN-b 932 and PLMN-c 933 .

[0149] PLMN-d 934 is excluded from the first list of PLMNs that can be used, for example, because it is not a HPLMN or a PLMN equivalent to the HPLMN, and it does not support roaming using the HPLMN. Therefore, it cannot be used to authenticate the UE 910.

[0150] In step 3, from the first list of available PLMNs, UE 910 selects a first PLMN to be used for authenticating UE 910. The first PLMN may be selected as follows:

[0151] If the first list of usable PLMNs contains the HPLMN, the UE 910 selects the HPLMN.

[0152] 1. Otherwise, if the first list of usable PLMNs contains a PLMN that is equivalent to the HPLMN, the UE 910 selects that PLMN.

[0153] Otherwise, the UE 910 selects the PLMN with the highest priority in the operator-controlled PLMN selector list configured in the USIM module.

[0154] In the above example, it is assumed that UE 910 selects PLMN-c 933 as the first PLMN.

[0155] In step 4, the UE 910 creates a second WLAN list containing WLANs that support AAA connection to 5GC for the first (selected) PLMN. If no WLAN supports AAA connection to 5GC for the first PLMN, the second WLAN list contains WLANs that support AAA connection to EPC for the first PLMN. In the above example, the second WLAN list contains:

[0156] Second WLAN list: SSID-2, SSID-3

[0157] In step 5, the UE 910 selects a WLAN from the second WLAN list. If the second WLAN list contains more than one WLAN, the UE 910 selects one of them using an implementation-based criterion or using the WLAN selection policy of the first PLMN if the policy exists in the UE 910.

[0158] In step 6, if the selected WLAN supports AAA connection to 5GC for the first (selected) PLMN, the UE 910 initiates the NSWO authentication process using the selected WLAN and the 5GC in the first (selected) PLMN. Otherwise, the UE 910 initiates a 3GPP-based authentication process using the selected WLAN and the EPC in the first (selected) PLMN.

[0159] After a successful authentication process, the UE is connected to the selected WLAN using the AAA service provided by the EPC or 5GC in the first PLMN.

[0160] The above method can be applied by UEs that select WLAN and PLMN to initiate 5GC-based authentication or EPC-based authentication.

[0161] An optional and simplified method is also provided, which can be applied by a UE that wants to select a WLAN and a PLMN to initiate 5GC based authentication (5G NSWO).

[0162] The WLAN access network may also advertise the following PLMN list:

[0163] · List of PLMNs with AAA connection to 5GC: It includes PLMNs for which "AAA connection to 5GC" is available. When the WLAN access network deploys an AAA function that can connect with the NSWOF in that PLMN, it supports "AAA connection to 5GC" in the PLMN. NSWOF supports "WLAN connection using 5G credentials without 5G registration".

[0164] It should be noted that the "PLMN list with AAA connection to 5GC" may also be referred to as "PLMN List-5"; the latter term is used, for example, in 3GPP TS 23.501 v17.6.0.

[0165] When the UE determines the need to connect to the WLAN access network using the "WLAN connection using 5G credentials without 5G registration" procedure, the UE performs the following steps:

[0166] In step 1, the UE builds a list of available PLMNs for which "AAA connection to 5GC" is supported. The list contains the PLMNs included in the PLMN list-5 advertised by all discovered WLAN access networks.

[0167] In step 2, the UE selects a PLMN from the list of available PLMNs. The selected PLMN should be able to authenticate the UE using 5G credentials, for example, it can be the HPLMN, a PLMN equivalent to the HPLMN, or another PLMN. How the UE selects this PLMN depends on the UE implementation.

[0168] In step 3, the UE creates a list of WLANs that support "AAA connection to 5GC" for the selected PLMN.

[0169] In step 4, the UE selects a WLAN from the above WLAN list. If there are multiple WLANs that support "AAA connection to 5GC" for the selected PLMN, the UE selects one of them using an implementation-based standard or using the WLAN selection policy (WLANSP) of the selected PLMN, if such a policy exists in the UE.

[0170] In step 5, the UE initiates the "WLAN connection using 5G credentials without 5G registration" procedure using the selected WLAN and the selected PLMN.

[0171] A device (e.g., UE) including a transceiver and a processor is also provided. The transceiver is configured to communicate with one or more WLAN access networks. The processor is coupled to the transceiver, and the processor is configured to cause the device to: discover available WLANs; identify, for each available WLAN, PLMNs for which EPC-based authentication is supported and PLMNs for which 5GC-based authentication is supported; select a first PLMN from a first list of available PLMNs; create a second list of available WLAN access networks, the second list containing all available WLAN access networks that support 5GC-based authentication for the first PLMN or EPC-based authentication for the first PLMN; select a first WLAN access network from the second list of available WLAN access networks; and initiate a 5GC-based authentication process or an EPC-based authentication process using the first WLAN access network and the first PLMN.

[0172] The processor may be arranged to identify, for each available WLAN, PLMNs for which EPC-based authentication is supported and PLMNs for which 5GC-based authentication is supported, using the extension to the "3GPP Cellular Network" information described herein.

[0173] It should be noted that the above methods and apparatus illustrate rather than limit the present invention, and that those skilled in the art will be able to design many alternative arrangements without departing from the scope of the appended claims. The word "comprising" does not exclude the presence of elements or steps other than those listed in the claims, "a" does not exclude a plurality, and a single processor or other unit may perform the functions of several units recited in the claims. Any reference signs in the claims shall not be construed as limiting their scope.

[0174] Furthermore, although examples have been given in the context of specific communication standards, these examples are not limitations of the communication standards to which the disclosed methods and apparatus may be applied. For example, although specific examples have been given in the context of 3GPP, the principles disclosed herein may also be applied to another wireless communication system, and indeed to any communication system that uses routing rules.

[0175] The method may also be embodied in an instruction set stored on a computer readable medium, which, when loaded into a computer processor, a digital signal processor (DSP) or the like, causes the processor to perform the above method.

[0176] The described methods and apparatus may be implemented in other specific forms. The described methods and apparatus are to be considered in all respects only as illustrative and not restrictive. Therefore, the scope of the present invention is indicated by the appended claims rather than by the foregoing description. All changes within the meaning and equivalent range of the claims are to be included within their scope.< / imsi> < / username>

Claims

1. A wireless communication device comprising a receiver, the receiver being arranged to receive a network information message, the network information message identifying a list of PLMNs that support authentication of a 5GC using a 3GPP 5G credential.

2. The wireless communication device according to claim 1, further comprising a transmitter, the transmitter being arranged to transmit an authentication request for requesting a mode of authentication selected based on the network information message.

3. A wireless communication device according to claim 1 or 2, wherein the authentication of 5GC using 3GPP 5G credentials includes non-seamless WLAN offload (NSWO).

4. The wireless communication device according to claim 1, 2 or 3, further comprising a processor, the processor being arranged to: creating a first list of usable PLMNs, wherein the first list includes a mode of authentication supported by each PLMN in the first list; A first PLMN is selected from the first list of usable PLMNs.

5. The wireless communication device of claim 4, wherein the processor is further arranged to: creating a second list of available WLAN access networks, wherein the second list includes a mode of authentication supported by each WLAN access network; A first WLAN access network is selected from the second list of available WLAN access networks.

6. The wireless communication device of claim 5, wherein the processor is further arranged to: An authentication process is initiated using the first WLAN access network and the first PLMN, wherein the mode of the authentication process is selected based on authentication capabilities of the first WLAN access network and the first PLMN.

7. A wireless communication device according to any preceding claim, wherein authentication of the EPC using 3GPP 4G credentials comprises 3GPP based authentication.

8. A method in a wireless communication device, the method comprising receiving a network information message, the network information message identifying a list of PLMNs that support authentication of 5GC using 3GPP 5G credentials.

9. The method of claim 8, further comprising sending an authentication request for requesting a mode of authentication selected based on the network information message.

10. The method of claim 8 or 9, wherein the authentication of the 5GC using 3GPP 5G credentials includes non-seamless WLAN offload (NSWO).

11. The method according to claim 8, 9 or 10, further comprising: creating a first list of usable PLMNs, wherein the first list includes a mode of authentication supported by each PLMN in the first list; A first PLMN is selected from the first list of usable PLMNs.

12. The method according to claim 11, further comprising: creating a second list of available WLAN access networks, wherein the second list includes a mode of authentication supported by each WLAN access network; A first WLAN access network is selected from the second list of available WLAN access networks.

13. The method of claim 12, further comprising initiating an authentication process using the first WLAN access network and the first PLMN, wherein the mode of the authentication process is selected based on authentication capabilities of the first WLAN access network and the first PLMN.

14. A method as claimed in any preceding claim, wherein authentication of the EPC using 3GPP 4G credentials comprises 3GPP based authentication.

15. A wireless communication network, comprising a transmitter, the transmitter being arranged to send a network information message, the network information message comprising a list of PLMNs, the PLMNs supporting authentication of 5GC using 3GPP 5G credentials.

16. The wireless communication network of claim 13, wherein the authentication of the 5GC using 3GPP 5G credentials comprises non-seamless WLAN offload (NSWO).

17. A method in a wireless communication network, the method comprising sending a network information message, the network information message comprising a list of PLMNs that support authentication of 5GC using 3GPP 5G credentials.

18. The method of claim 17, wherein the authentication of the 5GC using 3GPP 5G credentials comprises non-seamless WLAN offload (NSWO).

Images