Alignment of authentication parameters between network and user equipment

Abstract

A user equipment is provided that includes means for receiving, from an access and mobility management function, information indicating a size of one or more parameters associated with an authentication procedure; deriving the one or more parameters based on the information indicating the size of the one or more parameters; and sending, to the access and mobility management function, an authentication message including a first output parameter, wherein the first output parameter is one of the derived one or more parameters.

Description

Technical Field

[0001] Various exemplary embodiments of this disclosure relate to methods, apparatus, systems, and computer programs, and particularly, but not exclusively, to authenticating user equipment using a network. Background Technology

[0002] A communication network can be viewed as a facility that enables communication between two or more communication devices, or provides communication devices with access to a data network. Mobile communication networks or wireless communication networks are examples of communication networks. Application servers can provide services to communication devices.

[0003] This type of communication network operates according to standards developed by, for example, the 3rd Generation Partnership Project (3GPP) or the European Telecommunications Standards Institute (ETSI). Examples of standards provided by 3GPP are the so-called 3GPP standards used for various generations of cellular technologies, such as the 3GPP standards for 4G technology and the 3GPP standards for 5G technology. Summary of the Invention

[0004] Some exemplary embodiments of this disclosure will now be described with reference to certain aspects. These aspects are not intended to indicate key or essential features of embodiments of this disclosure, nor are they intended to limit the scope of this disclosure. In view of this disclosure, other features, aspects, and elements will be apparent to those skilled in the art. For example, it should be understood that additional aspects may be provided by a combination of any two or more of the following aspects.

[0005] According to one aspect, a user equipment is provided, comprising components for: determining the magnitude of one or more parameters associated with an authentication process; deriving one or more parameters based on the determined magnitude of the one or more parameters; and sending an authentication message including a first output parameter to an access and mobility management function, wherein the first output parameter is one of the derived one or more parameters.

[0006] One or more parameters may include a first output parameter and one or more intermediate parameters used to derive the first output parameter.

[0007] This component can also be used to: receive information from the access and mobility management function instructing a user equipment to use one or more key derivation algorithms when deriving one or more parameters, wherein deriving one or more parameters may include using the indicated one or more key derivation algorithms to derive one or more parameters.

[0008] The component can also be used to: receive information from a network node indicating the size of one or more different combinations of parameters, wherein the information indicating the size of one or more parameters may include an identifier of one of the multiple different combinations to be used in the authentication process, and determining the size of one or more parameters may include determining the size of one or more parameters based on the size of one or more parameters in the combination corresponding to the received identifier.

[0009] Determining the size of one or more parameters may include receiving information indicating the size of one or more parameters from the access and mobility management function.

[0010] This component can also be used to: specify the size of a request for one or more parameters sent to the access and mobility management function, wherein information indicating the size of one or more parameters may be based on the size of the request.

[0011] The size of one or more parameters can be selected from at least the first value or the second value.

[0012] The size of one or more parameters can vary between a first value and a second value.

[0013] The first value can be 128 bits, and the second value can be 256 bits.

[0014] The first output parameter can be the authentication response RES*.

[0015] According to one aspect, a network node is provided, comprising components for: determining the magnitude of one or more parameters associated with an authentication process; deriving one or more parameters based on the determined magnitude of the one or more parameters; and sending an authentication message including a second output parameter to an authentication server function, wherein the second output parameter is one of the derived one or more parameters.

[0016] The authentication message may include information indicating one or more key derivation algorithms to be used by the user equipment when deriving one or more parameters, wherein the indicated one or more key derivation algorithms may correspond to one or more key derivation algorithms used by the network node to derive one or more parameters.

[0017] The authentication message may also include information indicating the size of one or more parameters that have been determined.

[0018] The component can also be used to send information to a user equipment indicating the size of one or more parameters, wherein the information indicating the size of one or more parameters may include an identifier of one of the multiple different combinations of the size of one or more parameters, the identifier corresponding to the determined size of one or more parameters used to derive the size of one or more parameters.

[0019] Determining the size of one or more parameters may include: receiving information from an authentication server function indicating the size of a request for one or more parameters, wherein determining the size of one or more parameters may be based on the size of a request for one or more parameters.

[0020] The size of one or more parameters can be selected from at least the first value or the second value.

[0021] The size of one or more parameters can vary between a first value and a second value.

[0022] The first value can be 128 bits, and the second value can be 256 bits.

[0023] The second output parameter can be the expected authentication response XRES*.

[0024] A network node can be one of the following: a unified data management function, an authentication credential repository, or a subscriber identity de-hiding function.

[0025] According to one aspect, a user equipment is provided, comprising components for: receiving from an access and mobility management function information indicating the magnitude of one or more parameters associated with an authentication process; deriving one or more parameters based on the information indicating the magnitude of the one or more parameters; and sending to the access and mobility management function an authentication message including a first output parameter, wherein the first output parameter is one of the derived one or more parameters.

[0026] One or more parameters may include a first output parameter and one or more intermediate parameters used to derive the first output parameter.

[0027] This component can also be used to: receive information from the access and mobility management function instructing a user equipment to use one or more key derivation algorithms when deriving one or more parameters, wherein deriving one or more parameters may include deriving one or more parameters using the indicated one or more key derivation algorithms.

[0028] The component can also be used to: receive from a network node information indicating the size of one or more different combinations of parameters, wherein the information indicating the size of one or more parameters may include an identifier of one of the multiple different combinations to be used in the authentication process; and deriving one or more parameters may include deriving one or more parameters based on the size of one or more parameters in the combination corresponding to the received identifier.

[0029] The size of one or more parameters can be selected from at least the first value or the second value.

[0030] The size of one or more parameters can vary between a first value and a second value.

[0031] The first value can be 128 bits, and the second value can be 256 bits.

[0032] The first output parameter can be the authentication response RES*.

[0033] According to one aspect, a network node is provided, comprising components for: determining the magnitude of one or more parameters associated with an authentication process; deriving one or more parameters based on the determined magnitude of the one or more parameters; and sending an authentication message to an authentication server function, the authentication message including a second output parameter and information indicating the magnitude of the one or more parameters, wherein the second output parameter is one of the derived one or more parameters.

[0034] The authentication message may include information indicating one or more key derivation algorithms to be used by the user equipment when deriving one or more parameters, wherein the indicated one or more key derivation algorithms may correspond to one or more key derivation algorithms used by the network node to derive one or more parameters.

[0035] The component can also be used to send information to a user equipment indicating the size of one or more parameters, wherein the information indicating the size of one or more parameters may include an identifier of one of the multiple different combinations of the size of one or more parameters, the identifier corresponding to the determined size of one or more parameters used to derive the size of one or more parameters.

[0036] The size of one or more parameters can be selected from at least the first value or the second value.

[0037] The size of one or more parameters can vary between a first value and a second value.

[0038] The first value can be 128 bits, and the second value can be 256 bits.

[0039] The second output parameter can be the expected authentication response XRES*.

[0040] A network node can be one of the following: a unified data management function, an authentication credential repository, or a subscriber identity de-hiding function.

[0041] According to one aspect, a user equipment is provided, comprising components for: sending a request for the size of one or more parameters associated with an authentication process to an access and mobility management function; receiving information from the access and mobility management function indicating the size of one or more parameters; deriving one or more parameters based on the determined size of the one or more parameters; and sending an authentication message to the access and mobility management function including a first output parameter, wherein the first output parameter is one of the derived one or more parameters.

[0042] One or more parameters may include a first output parameter and one or more intermediate parameters used to derive the first output parameter.

[0043] This component can also be used to: receive information from the access and mobility management function instructing a user equipment to use one or more key derivation algorithms when deriving one or more parameters, wherein deriving one or more parameters may include using the indicated one or more key derivation algorithms to derive one or more parameters.

[0044] Information indicating the size of one or more parameters can be based on the size of the request for one or more parameters.

[0045] The size of the request for one or more parameters and the size of one or more parameters can be selected from at least the first value or the second value.

[0046] The size of the request for one or more parameters and the size of one or more parameters can vary between a first value and a second value.

[0047] The first value can be 128 bits, and the second value can be 256 bits.

[0048] The first output parameter can be the authentication response RES*.

[0049] According to one aspect, a network node is provided, comprising components for: receiving from an authentication server function information indicating the size of one or more parameters associated with an authentication process requested by a user equipment; determining the size of one or more parameters based on the requested size of the one or more parameters; deriving one or more parameters based on the determined size of the one or more parameters; and sending an authentication message to the authentication server function, the authentication message including a second output parameter and information indicating the size of the determined one or more parameters, wherein the second output parameter is one of the derived one or more parameters.

[0050] The authentication message may include information indicating one or more key derivation algorithms to be used by the user equipment when deriving one or more parameters, wherein the indicated one or more key derivation algorithms may correspond to one or more key derivation algorithms used by the network node to derive one or more parameters.

[0051] The size of one or more parameters can be selected from at least the first value or the second value.

[0052] The size of one or more parameters can vary between a first value and a second value.

[0053] The first value can be 128 bits, and the second value can be 256 bits.

[0054] The second output parameter can be the expected authentication response XRES*.

[0055] A network node can be one of the following: a unified data management function, an authentication credential repository, or a subscriber identity de-hiding function.

[0056] According to one aspect, a user equipment is provided, including at least one processor and at least one memory storing instructions, the instructions, when executed by the at least one processor, causing the user equipment to at least: determine the magnitude of one or more parameters associated with an authentication process; derive one or more parameters based on the determined magnitude of the one or more parameters; and send an authentication message including a first output parameter to an access and mobility management function, wherein the first output parameter is one of the derived one or more parameters.

[0057] One or more parameters may include a first output parameter and one or more intermediate parameters used to derive the first output parameter.

[0058] At least one processor may be configured to also enable the user equipment to: receive from the access and mobility management function information indicating one or more key derivation algorithms to be used by the user equipment when deriving one or more parameters; and derive one or more parameters using the indicated one or more key derivation algorithms.

[0059] At least one processor may be configured to further enable the user equipment to: receive from a network node information indicating the size of one or more different combinations of parameters, wherein the information indicating the size of one or more parameters may include an identifier of one of the multiple different combinations to be used in the authentication process, and at least one processor may be configured to further enable the user equipment to determine the size of one or more parameters based on the size of one or more parameters in the combination corresponding to the received identifier.

[0060] At least one processor can be configured to enable a user equipment to receive information from access and mobility management functions indicating the magnitude of one or more parameters.

[0061] At least one processor may be configured to also enable the user equipment to send a request for one or more parameters to the access and mobility management function, wherein information indicating the size of one or more parameters may be based on the size of the request.

[0062] The size of one or more parameters can be selected from at least the first value or the second value.

[0063] The size of one or more parameters can vary between a first value and a second value.

[0064] The first value can be 128 bits, and the second value can be 256 bits.

[0065] The first output parameter can be the authentication response RES*.

[0066] According to one aspect, a network node is provided, including at least one processor and at least one memory storing instructions, the instructions, when executed by the at least one processor, causing the network node to at least: determine the magnitude of one or more parameters associated with an authentication process; derive one or more parameters based on the determined magnitude of the one or more parameters; and send an authentication message including a second output parameter to an authentication server function, wherein the second output parameter is one of the derived one or more parameters.

[0067] The authentication message may include information indicating one or more key derivation algorithms to be used by the user equipment when deriving one or more parameters, wherein the indicated one or more key derivation algorithms may correspond to one or more key derivation algorithms used by the network node to derive one or more parameters.

[0068] The authentication message may also include information indicating the size of one or more parameters that have been determined.

[0069] At least one processor may be configured to further enable the network node to send information to the user equipment indicating the size of one or more parameters, wherein the information indicating the size of one or more parameters may include an identifier of one of the multiple different combinations of the size of one or more parameters, the identifier corresponding to the determined size of one or more parameters used to derive the size of one or more parameters.

[0070] At least one processor may be configured to also enable the network node to: receive information from the authentication server function indicating the size of a request for one or more parameters; and determine the size of one or more parameters based on the size of the request for one or more parameters.

[0071] The size of one or more parameters can be selected from at least the first value or the second value.

[0072] The magnitude of one or more parameters can vary between a first value and a second value.

[0073] The first value can be 128 bits, and the second value can be 256 bits.

[0074] The second output parameter can be the expected authentication response XRES*.

[0075] A network node can be one of the following: a unified data management function, an authentication credential repository, or a subscriber identity de-hiding function.

[0076] According to one aspect, a user equipment is provided, including at least one processor and at least one memory storing instructions, the instructions, when executed by the at least one processor, causing the user equipment to at least: receive from an access and mobility management function information indicating the size of one or more parameters associated with an authentication process; derive one or more parameters based on the information indicating the size of the one or more parameters; and send to the access and mobility management function an authentication message including a first output parameter, wherein the first output parameter is one of the derived one or more parameters.

[0077] One or more parameters may include a first output parameter and one or more intermediate parameters used to derive the first output parameter.

[0078] At least one processor may be configured to also enable the user equipment to: receive from the access and mobility management function information indicating one or more key derivation algorithms to be used by the user equipment when deriving one or more parameters; and derive one or more parameters using the indicated one or more key derivation algorithms.

[0079] At least one processor may be configured to also enable the user equipment to: receive from a network node information indicating the size of one or more different combinations of parameters, wherein the information indicating the size of one or more parameters may include an identifier of one of the multiple different combinations to be used in the authentication process; and derive one or more parameters based on the size of one or more parameters in the combination corresponding to the received identifier.

[0080] The size of one or more parameters can be selected from at least the first value or the second value.

[0081] The size of one or more parameters can vary between a first value and a second value.

[0082] The first value can be 128 bits, and the second value can be 256 bits.

[0083] The first output parameter can be the authentication response RES*.

[0084] According to one aspect, a network node is provided, including at least one processor and at least one memory storing instructions, the instructions, when executed by the at least one processor, causing the network node to at least: determine the size of one or more parameters associated with an authentication process; derive one or more parameters based on the determined size of the one or more parameters; and send an authentication message to an authentication server function, the authentication message including a second output parameter and information indicating the size of the one or more parameters, wherein the second output parameter is one of the derived one or more parameters.

[0085] The authentication message may include information indicating one or more key derivation algorithms to be used by the user equipment when deriving one or more parameters, wherein the indicated one or more key derivation algorithms may correspond to one or more key derivation algorithms used by the network node to derive one or more parameters.

[0086] At least one processor may be configured to further enable the network node to send information to the user equipment indicating the size of one or more parameters, wherein the information indicating the size of one or more parameters may include an identifier of one of the multiple different combinations of the size of one or more parameters, the identifier corresponding to the determined size of one or more parameters used to derive the size of one or more parameters.

[0087] The size of one or more parameters can be selected from at least the first value or the second value.

[0088] The size of one or more parameters can vary between a first value and a second value.

[0089] The first value can be 128 bits, and the second value can be 256 bits.

[0090] The second output parameter can be the expected authentication response XRES*.

[0091] A network node can be one of the following: a unified data management function, an authentication credential repository, or a subscriber identity de-hiding function.

[0092] According to one aspect, a user equipment is provided, including at least one processor and at least one memory storing instructions, the instructions, when executed by the at least one processor, causing the user equipment to at least: send a request to an access and mobility management function for the size of one or more parameters associated with an authentication process; receive information from the access and mobility management function indicating the size of one or more parameters; derive one or more parameters based on the determined size of the one or more parameters; and send an authentication message to the access and mobility management function including a first output parameter, wherein the first output parameter is one of the derived one or more parameters.

[0093] One or more parameters may include a first output parameter and one or more intermediate parameters used to derive the first output parameter.

[0094] At least one processor may be configured to also enable the user equipment to: receive from the access and mobility management function information indicating one or more key derivation algorithms to be used by the user equipment when deriving one or more parameters; and derive one or more parameters using the indicated one or more key derivation algorithms.

[0095] Information indicating the size of one or more parameters can be based on the size of one or more parameters requested.

[0096] The size of the request for one or more parameters and the size of one or more parameters can be selected from at least the first value or the second value.

[0097] The size of the request for one or more parameters and the size of one or more parameters can vary between a first value and a second value.

[0098] The first value can be 128 bits, and the second value can be 256 bits.

[0099] The first output parameter can be the authentication response RES*.

[0100] According to one aspect, a network node is provided, including at least one processor and at least one memory storing instructions, the instructions, when executed by the at least one processor, causing the network node to at least: receive from an authentication server function information indicating the size of one or more parameters associated with an authentication process requested by a user equipment; determine the size of one or more parameters based on the requested size of the one or more parameters; derive one or more parameters based on the determined size of the one or more parameters; and send an authentication message to the authentication server function, the authentication message including a second output parameter and information indicating the size of the determined one or more parameters, wherein the second output parameter is one of the derived one or more parameters.

[0101] The authentication message may include information indicating one or more key derivation algorithms to be used by the user equipment when deriving one or more parameters, wherein the indicated one or more key derivation algorithms may correspond to one or more key derivation algorithms used by the network node to derive one or more parameters.

[0102] The size of one or more parameters can be selected from at least the first value or the second value.

[0103] The size of one or more parameters can vary between a first value and a second value.

[0104] The first value can be 128 bits, and the second value can be 256 bits.

[0105] The second output parameter can be the expected authentication response XRES*.

[0106] A network node can be one of the following: a unified data management function, an authentication credential repository, or a subscriber identity de-hiding function.

[0107] According to one aspect, a method performed by a user equipment is provided, the method comprising: determining the magnitude of one or more parameters associated with an authentication process; deriving one or more parameters based on the determined magnitude of the one or more parameters; and sending an authentication message including a first output parameter to an access and mobility management function, wherein the first output parameter is one of the derived one or more parameters.

[0108] One or more parameters may include a first output parameter and one or more intermediate parameters used to derive the first output parameter.

[0109] The method may include: receiving information from an access and mobility management function instructing a user equipment to use one or more key derivation algorithms when deriving one or more parameters, wherein deriving one or more parameters may include using the indicated one or more key derivation algorithms to derive one or more parameters.

[0110] The method may include: receiving information from a network node indicating the size of one or more different combinations of parameters, wherein the information indicating the size of one or more parameters may include an identifier of one of the multiple different combinations to be used in the authentication process, and determining the size of one or more parameters may include determining the size of one or more parameters based on the size of one or more parameters in the combination corresponding to the received identifier.

[0111] Determining the size of one or more parameters may include receiving information indicating the size of one or more parameters from the access and mobility management function.

[0112] The method may include sending a request for the size of one or more parameters to an access and mobility management function, wherein information indicating the size of the one or more parameters may be based on the size of the request.

[0113] The size of one or more parameters can be selected from at least the first value or the second value.

[0114] The size of one or more parameters can vary between a first value and a second value.

[0115] The first value can be 128 bits, and the second value can be 256 bits.

[0116] The first output parameter can be the authentication response RES*.

[0117] According to one aspect, a method is provided performed by a network node, the method comprising: determining the magnitude of one or more parameters associated with an authentication process; deriving one or more parameters based on the determined magnitude of the one or more parameters; and sending an authentication message including a second output parameter to an authentication server function, wherein the second output parameter is one of the derived one or more parameters.

[0118] The authentication message may include information indicating one or more key derivation algorithms to be used by the user equipment when deriving one or more parameters, wherein the indicated one or more key derivation algorithms may correspond to one or more key derivation algorithms used by the network node to derive one or more parameters.

[0119] The authentication message may also include information indicating the size of one or more parameters that have been determined.

[0120] The method may include sending information to a user equipment indicating a plurality of different combinations of the size of one or more parameters, wherein the information indicating the size of one or more parameters may include an identifier of one of the plurality of different combinations of the size of one or more parameters, the identifier corresponding to a determined size of one or more parameters used to derive the size of one or more parameters.

[0121] Determining the size of one or more parameters may include: receiving information from an authentication server function indicating the size of a request for one or more parameters, wherein determining the size of one or more parameters may be based on the size of a request for one or more parameters.

[0122] The size of one or more parameters can be selected from at least the first value or the second value.

[0123] The size of one or more parameters can vary between a first value and a second value.

[0124] The first value can be 128 bits, and the second value can be 256 bits.

[0125] The second output parameter can be the expected authentication response XRES*.

[0126] A network node can be one of the following: a unified data management function, an authentication credential repository, or a subscriber identity de-hiding function.

[0127] According to one aspect, a method performed by a user equipment is provided, the method comprising: receiving from an access and mobility management function information indicating the magnitude of one or more parameters associated with an authentication process; deriving one or more parameters based on the information indicating the magnitude of the one or more parameters; and sending to the access and mobility management function an authentication message including a first output parameter, wherein the first output parameter is one of the derived one or more parameters.

[0128] One or more parameters may include a first output parameter and one or more intermediate parameters used to derive the first output parameter.

[0129] The method may include: receiving information from an access and mobility management function instructing a user equipment to use one or more key derivation algorithms when deriving one or more parameters, wherein deriving one or more parameters may include deriving one or more parameters using the indicated one or more key derivation algorithms.

[0130] The method may include: receiving from a network node information indicating the size of one or more different combinations of parameters, wherein the information indicating the size of one or more parameters may include an identifier of one of the multiple different combinations to be used in the authentication process; and deriving one or more parameters may include deriving one or more parameters based on the size of one or more parameters in the combination corresponding to the received identifier.

[0131] The size of one or more parameters can be selected from at least the first value or the second value.

[0132] The size of one or more parameters can vary between a first value and a second value.

[0133] The first value can be 128 bits, and the second value can be 256 bits.

[0134] The first output parameter can be the authentication response RES*.

[0135] According to one aspect, a method is provided performed by a network node, the method comprising: determining the magnitude of one or more parameters associated with an authentication process; deriving one or more parameters based on the determined magnitude of the one or more parameters; and sending an authentication message to an authentication server function, the authentication message including a second output parameter and information indicating the magnitude of the one or more parameters, wherein the second output parameter is one of the derived one or more parameters.

[0136] The authentication message may include information indicating one or more key derivation algorithms to be used by the user equipment when deriving one or more parameters, wherein the indicated one or more key derivation algorithms may correspond to one or more key derivation algorithms used by the network node to derive one or more parameters.

[0137] The method may include sending information to a user equipment indicating a plurality of different combinations of the size of one or more parameters, wherein the information indicating the size of one or more parameters may include an identifier of one of the plurality of different combinations of the size of one or more parameters, the identifier corresponding to a determined size of one or more parameters used to derive the size of one or more parameters.

[0138] The size of one or more parameters can be selected from at least the first value or the second value.

[0139] The size of one or more parameters can vary between a first value and a second value.

[0140] The first value can be 128 bits, and the second value can be 256 bits.

[0141] The second output parameter can be the expected authentication response XRES*.

[0142] A network node can be one of the following: a unified data management function, an authentication credential repository, or a subscriber identity de-hiding function.

[0143] According to one aspect, a method performed by a user equipment is provided, the method comprising: sending to an access and mobility management function the size of a request for one or more parameters associated with an authentication process; receiving from the access and mobility management function information indicating the size of one or more parameters; deriving one or more parameters based on the determined size of the one or more parameters; and sending to the access and mobility management function an authentication message including a first output parameter, wherein the first output parameter is one of the derived one or more parameters.

[0144] One or more parameters may include a first output parameter and one or more intermediate parameters used to derive the first output parameter.

[0145] The method may include: receiving information from an access and mobility management function instructing a user equipment to use one or more key derivation algorithms when deriving one or more parameters, wherein deriving one or more parameters may include using the indicated one or more key derivation algorithms to derive one or more parameters.

[0146] Information indicating the size of one or more parameters can be based on the size of the request for one or more parameters.

[0147] The size of the request for one or more parameters and the size of one or more parameters can be selected from at least the first value or the second value.

[0148] The size of the request for one or more parameters and the size of one or more parameters can vary between a first value and a second value.

[0149] The first value can be 128 bits, and the second value can be 256 bits.

[0150] The first output parameter can be the authentication response RES*.

[0151] According to one aspect, a method performed by a network node is provided, the method comprising: receiving from an authentication server function information indicating the size of one or more parameters associated with an authentication process requested by a user equipment; determining the size of one or more parameters based on the requested size of the one or more parameters; deriving one or more parameters based on the determined size of the one or more parameters; and sending an authentication message to the authentication server function, the authentication message including a second output parameter and information indicating the size of the determined one or more parameters, wherein the second output parameter is one of the derived one or more parameters.

[0152] The authentication message may include information indicating one or more key derivation algorithms to be used by the user equipment when deriving one or more parameters, wherein the indicated one or more key derivation algorithms may correspond to one or more key derivation algorithms used by the network node to derive one or more parameters.

[0153] The size of one or more parameters can be selected from at least the first value or the second value.

[0154] The size of one or more parameters can vary between a first value and a second value.

[0155] The first value can be 128 bits, and the second value can be 256 bits.

[0156] The second output parameter can be the expected authentication response XRES*.

[0157] A network node can be one of the following: a unified data management function, an authentication credential repository, or a subscriber identity de-hiding function.

[0158] According to one aspect, a computer-readable medium including instructions, when executed by a user equipment, causes the user equipment to perform at least the following: determining the magnitude of one or more parameters associated with an authentication process; deriving one or more parameters based on the determined magnitude of the one or more parameters; and sending an authentication message including a first output parameter to an access and mobility management function, wherein the first output parameter is one of the derived one or more parameters.

[0159] One or more parameters may include a first output parameter and one or more intermediate parameters used to derive the first output parameter.

[0160] When executed by the user equipment, the instruction may also cause the user equipment to perform: receiving information from the access and mobility management function instructing the user equipment to use one or more key derivation algorithms when deriving one or more parameters, wherein deriving one or more parameters may include using the indicated one or more key derivation algorithms to derive one or more parameters.

[0161] When executed by the user equipment, the instruction may also enable the user equipment to perform: receiving information from a network node indicating the size of one or more different combinations of parameters, wherein the information indicating the size of one or more parameters may include an identifier of one of the multiple different combinations to be used in the authentication process, and determining the size of one or more parameters may include determining the size of one or more parameters based on the size of one or more parameters in the combination corresponding to the received identifier.

[0162] Determining the size of one or more parameters may include receiving information indicating the size of one or more parameters from the access and mobility management function.

[0163] When executed by the user equipment, the instruction may also cause the user equipment to perform: send a request for the size of one or more parameters to the access and mobility management function, wherein information indicating the size of one or more parameters may be based on the size of the request.

[0164] The size of one or more parameters can be selected from at least the first value or the second value.

[0165] The size of one or more parameters can vary between a first value and a second value.

[0166] The first value can be 128 bits, and the second value can be 256 bits.

[0167] The first output parameter can be the authentication response RES*.

[0168] According to one aspect, a computer-readable medium including instructions is provided, which, when executed by a network node, cause the network node to perform at least the following: determining the magnitude of one or more parameters associated with an authentication process; deriving one or more parameters based on the determined magnitude of the one or more parameters; and sending an authentication message including a second output parameter to an authentication server function, wherein the second output parameter is one of the derived one or more parameters.

[0169] The authentication message may include information indicating one or more key derivation algorithms to be used by the user equipment when deriving one or more parameters, wherein the indicated one or more key derivation algorithms may correspond to one or more key derivation algorithms used by the network node to derive one or more parameters.

[0170] The authentication message may also include information indicating the size of one or more parameters that have been determined.

[0171] When executed by the network node, the instruction may also cause the network node to: send information to the user equipment indicating the size of one or more parameters, wherein the information indicating the size of one or more parameters may include an identifier of one of the multiple different combinations of the size of one or more parameters, the identifier corresponding to the determined size of one or more parameters used to derive the size of one or more parameters.

[0172] Determining the size of one or more parameters may include: receiving information from an authentication server function indicating the size of a request for one or more parameters, wherein determining the size of one or more parameters may be based on the size of a request for one or more parameters.

[0173] The size of one or more parameters can be selected from at least the first value or the second value.

[0174] The size of one or more parameters can vary between a first value and a second value.

[0175] The first value can be 128 bits, and the second value can be 256 bits.

[0176] The second output parameter can be the expected authentication response XRES*.

[0177] A network node can be one of the following: a unified data management function, an authentication credential repository, or a subscriber identity de-hiding function.

[0178] According to one aspect, a computer-readable medium including instructions is provided, which, when executed by a user equipment, cause the user equipment to perform at least the following: receiving from an access and mobility management function information indicating the magnitude of one or more parameters associated with an authentication process; deriving one or more parameters based on the information indicating the magnitude of the one or more parameters; and sending to the access and mobility management function an authentication message including a first output parameter, wherein the first output parameter is one of the derived one or more parameters.

[0179] One or more parameters may include a first output parameter and one or more intermediate parameters used to derive the first output parameter.

[0180] When executed by the user equipment, the instruction may also cause the user equipment to perform: receiving information from the access and mobility management function instructing the user equipment to use one or more key derivation algorithms when deriving one or more parameters, wherein deriving one or more parameters may include using the indicated one or more key derivation algorithms to derive one or more parameters.

[0181] When executed by the user equipment, the instruction may also enable the user equipment to: receive information from a network node indicating the magnitude of one or more different combinations of parameters, wherein the information indicating the magnitude of one or more parameters may include an identifier of one of the multiple different combinations to be used in the authentication process; and deriving one or more parameters may include deriving one or more parameters based on the magnitude of one or more parameters in the combination corresponding to the received identifier.

[0182] The size of one or more parameters can be selected from at least the first value or the second value.

[0183] The size of one or more parameters can vary between a first value and a second value.

[0184] The first value can be 128 bits, and the second value can be 256 bits.

[0185] The first output parameter can be the authentication response RES*.

[0186] According to one aspect, a computer-readable medium including instructions is provided that, when executed by a network node, causes the network node to perform at least the following: determining the magnitude of one or more parameters associated with an authentication process; deriving one or more parameters based on the determined magnitude of the one or more parameters; and sending an authentication message to an authentication server function, the authentication message including a second output parameter and information indicating the magnitude of the one or more parameters, wherein the second output parameter is one of the derived one or more parameters.

[0187] The authentication message may include information indicating one or more key derivation algorithms to be used by the user equipment when deriving one or more parameters, wherein the indicated one or more key derivation algorithms may correspond to one or more key derivation algorithms used by the network node to derive one or more parameters.

[0188] When executed by the network node, the instruction may also cause the network node to: send information to the user equipment indicating the size of one or more parameters, wherein the information indicating the size of one or more parameters may include an identifier of one of the multiple different combinations of the size of one or more parameters, the identifier corresponding to the determined size of one or more parameters used to derive the size of one or more parameters.

[0189] The size of one or more parameters can be selected from at least the first value or the second value.

[0190] The size of one or more parameters can vary between a first value and a second value.

[0191] The first value can be 128 bits, and the second value can be 256 bits.

[0192] The second output parameter can be the expected authentication response XRES*.

[0193] A network node can be one of the following: a unified data management function, an authentication credential repository, or a subscriber identity de-hiding function.

[0194] According to one aspect, a computer-readable medium including instructions, when executed by a user equipment, causes the user equipment to perform at least the following: sending to an access and mobility management function the size of a request for one or more parameters associated with an authentication process; receiving from the access and mobility management function information indicating the size of one or more parameters; deriving one or more parameters based on the determined size of the one or more parameters; and sending to the access and mobility management function an authentication message including a first output parameter, wherein the first output parameter is one of the derived one or more parameters.

[0195] One or more parameters may include a first output parameter and one or more intermediate parameters used to derive the first output parameter.

[0196] When executed by the user equipment, the instruction may also cause the user equipment to perform: receiving information from the access and mobility management function instructing the user equipment to use one or more key derivation algorithms when deriving one or more parameters, wherein deriving one or more parameters may include using the indicated one or more key derivation algorithms to derive one or more parameters.

[0197] Information indicating the size of one or more parameters can be based on the size of the request for one or more parameters.

[0198] The size of the request for one or more parameters and the size of one or more parameters can be selected from at least the first value or the second value.

[0199] The size of the request for one or more parameters and the size of one or more parameters can vary between a first value and a second value.

[0200] The first value can be 128 bits, and the second value can be 256 bits.

[0201] The first output parameter can be the authentication response RES*.

[0202] According to one aspect, a computer-readable medium including instructions, when executed by a network node, causes the network node to perform at least the following: receiving from an authentication server function information indicating the size of one or more parameters associated with an authentication process requested by a user equipment; determining the size of one or more parameters based on the requested size of the one or more parameters; deriving one or more parameters based on the determined size of the one or more parameters; and sending an authentication message to the authentication server function, the authentication message including a second output parameter and information indicating the size of the determined one or more parameters, wherein the second output parameter is one of the derived one or more parameters.

[0203] The authentication message may include information indicating one or more key derivation algorithms to be used by the user equipment when deriving one or more parameters, wherein the indicated one or more key derivation algorithms may correspond to one or more key derivation algorithms used by the network node to derive one or more parameters.

[0204] The size of one or more parameters can be selected from at least the first or the second value.

[0205] The size of one or more parameters can vary between a first value and a second value.

[0206] The first value can be 128 bits, and the second value can be 256 bits.

[0207] The second output parameter can be the expected authentication response XRES*.

[0208] A network node can be one of the following: a unified data management function, an authentication credential repository, or a subscriber identity de-hiding function.

[0209] According to one aspect, a non-transitory computer-readable medium is provided comprising program instructions that, when executed by a device, cause the device to perform at least the method according to any one of the foregoing aspects.

[0210] Many different aspects have been described above. As previously stated, it should be understood that additional aspects can be provided through any combination of two or more of the aforementioned aspects. Other features, aspects, and elements will become apparent in light of the following. Attached Figure Description

[0211] Some exemplary embodiments will now be described by way of non-limiting and illustrative example only, with reference to the accompanying drawings, in which: Figure 1 It shows a fifth-generation communication system; Figure 2 The illustration shows a method for using some example embodiments. Figure 1 The representation of a communication system device; Figure 3 A representation of an apparatus according to some example embodiments is shown; Figures 4a to 4f The methods are shown based on some examples; Figure 5 The methods are shown based on some examples; Figure 6a An example method is shown that a network node can be used to derive one or more parameters, including a second output parameter; Figure 6b An example method is shown that the UE can be used to derive one or more parameters, including a first output parameter; Figures 7 to 9 The methods shown are based on some examples; and Figure 10 A schematic diagram of a device based on some examples is shown. Detailed Implementation

[0212] The following description uses communication devices capable of communicating with a communication system to illustrate various exemplary embodiments. Before detailing the various exemplary embodiments of this disclosure, please refer to... Figure 1 , Figure 2 and Figure 3 Briefly describe the fifth-generation communication system (5GS), its access network and core network (5GC), and communication equipment.

[0213] Figure 1 A schematic diagram of a 5G communication system (5GS) is shown. The 5GS may include a user equipment (UE) or terminal 100, an access network such as a 5G radio access network (5G-RAN) 101 or a next-generation radio access network (NG-RAN), a 5G core network 102, and one or more application functions 103. Application functions 103 may be deployed as trusted application functions in the 5GS, or they may be deployed or hosted on one or more application servers in a data network (DN) 104. Such application functions are untrusted application functions. The 5GS connects the UE to the data network 104, the access network 101, and the 5GC 102 (e.g., the 5GC's UPF).

[0214] 5G-RAN101 may include one or more radio access nodes, such as gNodeBs (gNBs). A gNB may include one or more gNodeB (gNB) distribution units connected to one or more gNodeB (gNB) central units.

[0215] 5GC may include the following network functions: Network Slice Selection Function (NSSF); Network Exposure Function (NEF) 105; Network Repository Function (NRF); Policy Control Function (PCF); Unified Data Management (UDM) 106; Application Function (AF) 103; Authentication Server Function (AUSF) 107; Access and Mobility Management Function (AMF) 108; Session Management Function (SMF) 109; and User Plane Function (UPF) 110. Figure 1 It also shows the various interfaces (N1, N2, etc.) that can be implemented between the various elements of the system.

[0216] Figure 2 It shows the control Figure 1 The access network shown (e.g., Figure 1 An example of a control device 200 for the functions of 5G-RAN or NG-RAN is shown. The control device 200 may include at least one random access memory (RAM) 211a, at least one read-only memory (ROM) 211b, at least one processor 212, 213, and a network interface 214. At least one processor 212, 213 may be coupled to RAM 211a and ROM 211b. At least one processor 212, 213 may be configured to execute appropriate software code 215. Executing software code 215 may, for example, cause the device to perform operations for controlling access network functions. Software code 215 may be stored in ROM 211b. The control device 200 may interconnect with another control device 200 for controlling another function of 5G-RAN or NG-RAN. In some embodiments, each function of 5G-RAN or NG-RAN is deployed or hosted on the control device 200. In alternative embodiments, two or more functions of 5G-RAN or NG-RAN may share the control device.

[0217] Figure 3 A communication device 300 is shown (e.g.) Figure 1 The example shown is of a UE. Communication device 300 can be any device capable of transmitting and receiving radio signals. Non-limiting examples of communication device 300 include user equipment, mobile station (MS) or mobile device such as a mobile phone or so-called "smartphone," a computer provided with a wireless interface card or other wireless interface facilities (e.g., a USB dongle), a personal digital assistant (PDA) or tablet computer with wireless communication capabilities, machine-type communication (MTC) devices, Internet of Things (IoT) communication devices, or any combination of these devices. Communication device 300 may include a transceiver for transmitting and / or receiving, for example, wireless signals (e.g., radio signals) carrying communication. Communication may include one or more of voice, email, text messages, multimedia data, machine data, etc.

[0218] The communication device 300 can receive wireless signals (e.g., radio signals) via an air interface or radio interface 307 through a suitable receiving device, and can transmit wireless signals via a suitable means for transmitting radio signals. Figure 3 In the diagram, the transceiver is schematically represented by block 306. Transceiver 306 may include, for example, radio components and an associated antenna arrangement. The antenna arrangement may be located inside or outside the mobile device and may include one or more antenna elements. The antenna arrangement may be a multiple-input multiple-output (MIMO) antenna.

[0219] Communication device 300 may provide at least one processor 301, at least one ROM 302a, at least one RAM 302b, and other possible components 303 to perform, with software and hardware assistance, the tasks it is designed to perform, including controlling access to the network (e.g., Figure 1 This describes the access to and communication with 5G-RAN (or NG-RAN) and other communication devices. At least one processor 301 is coupled to RAM 302b and ROM 302a. At least one processor 301 can be configured to execute appropriate software code 308. The software code 308 can, for example, cause the communication device to perform one or more operations. The software code 308 can be stored in ROM 302a.

[0220] The processor, ROM, RAM, transceiver, and other circuitry (e.g., modem) of the communication device may be provided on a circuit board, in a chipset, or in a system-on-a-chip. The circuit board, chipset, or system-on-a-chip is indicated by reference numeral 304. The communication device 300 may optionally have a user interface, such as a keypad 305, a touch-sensitive screen or touchpad, or a combination thereof. Optionally, depending on the type of communication device, one or more of a display, speaker, and microphone may be provided.

[0221] In some networks, a UE may need to perform an Authentication and Key Agreement (AKA) procedure to access services provided by the network. The AKA procedure may involve the UE and its home network (e.g., at least one of the Home Network's Authentication Server Function (AUSF), Authentication Credentials Store (ARPF), Subscriber Identity De-Hidden Function (SIDF), or UDM) generating one or more cryptographic keys. These cryptographic keys may include a first output key (generated by the UE) and a second output key (generated by the home network). A network node (e.g., the AUSF) can compare the first and second output keys, and if they match, the UE is authenticated by the network.

[0222] 3GPP TS 33.501 describes an example of a known AKA process using a 128-bit cryptographic key. However, recent developments (such as 3GPP TR 33.841) have considered using a 256-bit cryptographic key, which provides enhanced security. However, introducing a 256-bit cryptographic key may present additional challenges to the normal functioning of the network.

[0223] Typically, it is necessary to consider and address the impact of increasing the cryptographic key size on the AKA process to ensure that the AKA process can adapt to the increased cryptographic key size. For example, if the UE and the network are not aligned in terms of cryptographic key size, the AKA process may fail due to a difference between the first and second output keys.

[0224] Some examples disclosed herein can solve one or more of these problems.

[0225] refer to Figures 4a to 4f It shows a method based on some examples.

[0226] refer to Figure 4a At 400, a method includes determining the magnitude of one or more parameters associated with the authentication process. At 402, the method includes deriving one or more parameters based on the determined magnitude of the one or more parameters. At 404, the method includes sending an authentication message to an access and mobility management function including a first output parameter, wherein the first output parameter is one of the derived one or more parameters. Figure 4a The method can be executed by the UE.

[0227] refer to Figure 4b At 406, a method includes determining the magnitude of one or more parameters associated with the authentication process. At 408, the method includes deriving one or more parameters based on the determined magnitude of the one or more parameters. At 410, the method includes sending an authentication message to an authentication server function that includes a second output parameter, wherein the second output parameter is one of the derived one or more parameters. Figure 4b The method can be executed by network nodes.

[0228] refer to Figure 4c At 412, a method includes sending a request to an access and mobility management function for the size of one or more parameters associated with an authentication process. At 414, the method includes receiving information from the access and mobility management function indicating the size of one or more parameters. At 416, the method includes deriving one or more parameters based on the determined size of the one or more parameters. At 418, the method includes sending an authentication message to the access and mobility management function including a first output parameter, wherein the first output parameter is one of the derived one or more parameters. Figure 4c The method can be executed by the UE.

[0229] refer to Figure 4d At 420, a method includes receiving from an authentication server function information indicating the size of one or more parameters associated with an authentication process requested by a user equipment. At 422, the method includes determining the size of one or more parameters based on the requested size of the one or more parameters. At 424, the method includes deriving one or more parameters based on the determined size of the one or more parameters. At 426, the method includes sending an authentication message to the authentication server function, the authentication message including a second output parameter and information indicating the size of the determined one or more parameters, wherein the second output parameter is one of the derived one or more parameters. Figure 4d The method can be executed by network nodes.

[0230] refer to Figure 4e At 428, a method includes receiving information from an access and mobility management function indicating the magnitude of one or more parameters associated with an authentication process. At 430, the method includes deriving one or more parameters based on the information indicating the magnitude of the one or more parameters. At 432, the method includes sending an authentication message to the access and mobility management function including a first output parameter, wherein the first output parameter is one of the derived one or more parameters. Figure 4e The method can be executed by the UE.

[0231] refer to Figure 4f At 434, a method includes determining the size of one or more parameters associated with an authentication process. At 436, the method includes deriving one or more parameters based on the determined size of the one or more parameters. At 438, the method includes sending an authentication message to an authentication server function, the authentication message including a second output parameter and information indicating the size of the determined one or more parameters, wherein the second output parameter is one of the derived one or more parameters. Figure 4f The method can be executed by network nodes.

[0232] In some examples, network nodes (such as UDM / ARPF / SIDF) may determine the magnitude of one or more parameters associated with the authentication process. As used herein, "one or more parameters" may refer to one or more parameters associated with the authentication process.

[0233] The network node can then derive one or more parameters based on the determined magnitudes of one or more parameters. These parameters may include a second output parameter. The network node can then send an authentication message to AUSF, which includes the second output parameter and information indicating the magnitudes of the one or more parameters.

[0234] The AUSF can send information to the UE (e.g., via the AMF) indicating the size of one or more parameters.

[0235] In some examples, the UE may receive information from the AMF indicating the magnitude of one or more parameters. For instance, this information may be received in an authentication request sent from the AMF to the UE. The UE may deduce one or more parameters based on this information. The one or more parameters may include a first output parameter. Subsequently, the UE may send an authentication message to the AMF that includes the first output parameter.

[0236] Therefore, the AUSF can receive a first output parameter from the UE and a second output parameter from the network node. Since the first and second output parameters are derived based on information indicating the magnitude of one or more parameters, their magnitudes should be aligned. Therefore, when the AUSF compares the first and second output parameters, they should match, and the UE can be authorized.

[0237] In some examples, the AMF can be included in the network serving the UE. The AUSF and network nodes can be included in the UE's home network. The home network and the network serving the UE can be the same or different.

[0238] In some examples, one or more parameters may include a first output parameter and one or more intermediate parameters used to derive the first output parameter.

[0239] In some examples, one or more parameters may include one or more cryptographic keys used in the authentication process and / or one or more input parameters and / or output parameters. In some examples, one or more parameters may include at least one of the following: Authorization key (AK); Encryption key (CK); Integrity key (IK); Long-term key (K); Message Authentication Code (MAC); Random Challenge (RAND); Authentication response (RES*); Expected certification response (XRES*); and Serial Number (SQN).

[0240] In some examples, the first output parameter can be RES*, and the second output parameter can be XRES*.

[0241] In some examples, one or more parameters may include additional information beyond what has been described above. For instance, one or more parameters may include an additional "entropy" value, which may be a random or pseudo-random value that changes between authentication processes, for example. Because this additional value changes each time authentication is performed, it provides extra security to the authentication process; even if a third party learns this value during one authentication process, the known value will be irrelevant to valid authentication in subsequent authentication attempts.

[0242] In some examples, the size of one or more parameters can be chosen from at least a first value or a second value. In some examples, the size of one or more parameters can be variable between two values. For example, the size of one or more parameters can be variable between a first value and a second value (that is, the size can be greater than or equal to the first value and less than or equal to the second value). In some examples, the cryptographic keys can have different sizes; for example, the first cryptographic key can have one size, and the second cryptographic key can have a different size than the first cryptographic key. In some examples, the first value can be 128 bits and the second value can be 256 bits.

[0243] In some examples, network nodes may determine the size of one or more parameters based on random selection. For example, a network node may randomly select between a first value and a second value, or a value between the first and second values. Using random selection avoids the formation of patterns in the selected size, making it harder for potential attackers to predict the size and helping to prevent the leakage of protected elements such as the SQN. In some examples, the network node may alternate between the first and second values ​​each time a key size determination is performed. In other examples, network nodes may employ mechanisms other than those described above suitable for determining the size of one or more parameters.

[0244] In some examples, a network node may use one or more key derivation functions (KDFs) when deriving one or more parameters. The network node may send information to the AUSF indicating the one or more KDFs used to derive the parameters. The AUSF, in turn, may send information indicating the one or more KDFs to the AMF, which in turn may send information indicating the one or more KDFs to the UE. The UE can then determine one or more parameters based on the information indicating the one or more KDFs. In this way, the magnitudes of the one or more parameters, and the one or more KDFs used to derive them, can be aligned between the UE and the network node.

[0245] In some examples, a network node can send information to the UE indicating multiple different combinations of the magnitudes of one or more parameters. The UE can store the received information. The information indicating multiple different combinations of the magnitudes of one or more parameters can be configured by the network node before performing the AKA procedure.

[0246] Information indicating the size of one or more parameters may include, for example, a table or list, where each row of the table or list includes the size of each of the one or more parameters. Table 1 below shows an example where each row in the table represents a different combination, and each column in the table indicates the size of one of the parameters (in bytes, one byte = 8 bits).

[0247]

[0248] Table 1 – Examples of different combinations of cryptographic key sizes In some examples, as shown in Table 1, each combination can be associated with a corresponding identifier. When a network node determines the size of one or more parameters, the network node can select the size of one or more parameters corresponding to one of the combinations of the sizes of the one or more parameters. The information indicating the size of one or more parameters sent from the network node to the AUSF (and then ultimately from the AUSF to the UE) may include the identifier of the corresponding combination.

[0249] For example, referring to Table 1, if a network node selects one or more parameters of size (in bytes): AK=12; CK=32; IK=32; K=32; MAC=32; RAND=32; RES=32; SQN=12, Corresponding to the third row in Table 1, the network node can then send ID#3 to AUSF to indicate the selected size of one or more parameters.

[0250] In some examples, the UE may indicate to the network node the requested size of one or more parameters. The network node may consider the requested size when determining the size of one or more parameters. For example, when the UE receives information indicating multiple different combinations of the size of one or more parameters, the UE may send an indication to the network including an identifier that requests one of the combinations.

[0251] refer to Figure 5 It illustrates methods based on some examples. Figure 5 In the example, the UE is configured with information indicating the magnitude of one or more parameters in multiple different combinations, such as the information provided in Table 1 above.

[0252] At point 500, the network node sends information to the UE, for example, in the form of Table 1 above, indicating multiple different combinations of the magnitude of one or more parameters.

[0253] At position 502, the UE can generate an encrypted identifier for itself. For example, the UE can generate a Subscriber Hidden Identifier (SUCI) based on its Subscriber Permanent Identifier (SUPI).

[0254] At position 504, the UE sends a registration request to the AMF of the network serving the UE. The registration request may include the UE's identifier, such as the UE's encrypted identifier (if it has already been generated at position 502). In some examples, the registration request may include the identifier of one of the items in the request combination.

[0255] At 506, the AMF sends an authentication request to the AUSF of the UE's home network. The authentication request may include the UE's identifier (e.g., an encrypted identifier) ​​and an identifier of one of the combined items (if received by the AMF at 504).

[0256] At 508, AUSF sends another authentication request to the network node. This other authentication request may include, for example, an authentication retrieval (GET) request. The authentication request may be used with a second output parameter (e.g., XRES*). The other authentication request may include an identifier of one of the request combinations (if received at 506).

[0257] At 510, the network node determines the magnitude of one or more parameters as previously described. For example, the network node may select one of the combinations of magnitudes included in the information sent to the UE in step 500. The selected combination may correspond to an identifier of one of the requested combinations (if received at 508).

[0258] At position 512, the network node derives one or more parameters, including the second output parameter, based on the magnitude of one or more determined parameters. Figure 6a An example method is shown that a network node can be used to derive one or more parameters, including a second output parameter.

[0259] At point 514, the network node may send an authentication message to the AUSF that includes a second output parameter and information indicating the size of one or more parameters. The information indicating the size of one or more parameters may include an identifier of the combination of sizes selected at step 510. The authentication message may also include information indicating one or more KDFs used to generate the second output parameter at step 512.

[0260] At position 516, the AUSF can send an authentication response message to the AMF. The authentication response message may include information indicating the size of one or more parameters, and optionally indicate one or more KDFs.

[0261] At point 518, the AMF may send an authentication request to the UE. The authentication request may include information indicating the magnitude of one or more parameters, and optionally, one or more KDFs.

[0262] At 520, the UE derives one or more parameters (including the first output parameter) based on information indicating the magnitude of one or more parameters and optionally indicating one or more KDFs. Figure 6b An example method is shown that a network node can be used to derive one or more parameters, including a first output parameter.

[0263] At position 522, the UE sends an authentication response to the AMF, including the first output parameter.

[0264] At position 524, the AMF sends an authentication request to the AUSF, including the first output parameter.

[0265] At point 526, AUSF determines whether to authenticate the UE based on a first output parameter and a second output parameter. For example, AUSF can authenticate the UE when the first and second output parameters match.

[0266] refer to Figure 6a It illustrates an example method that network nodes can be used to derive one or more parameters, including a second output parameter.

[0267] like Figure 6a As shown, K, RAND, AMF, and SQN can be provided as input to one or more cryptographic functions (f1…f5). The K, RAND, and AMF keys (K...) AMF The size of SQN can correspond to the size of one or more parameters that are determined.

[0268] One or more cryptographic functions can generate MAC, XRES, CK, IK, and AK as output parameters. These output parameters can be provided as input parameters to one or more KDFs.

[0269] For example, such as Figure 6a As shown, the service network name (SN name), RAND, CK, IK, and XRES can be provided as input to the first KDF to generate the expected authentication response XRES*. The SN name, CK, IK, and the authentication token (derived based on AK and SQN) can be provided as input to the second KDF to generate the AUSF key K. AUSF AUSF can be used in other AKA-related processes. AUSF .

[0270] refer to Figure 6b It shows an example method that the UE can use to derive one or more parameters, including the first output parameter.

[0271] like Figure 6bAs shown, K, RAND, and the authentication token (AUTN – which can be received from the AMF) can be provided as input to one or more cryptographic functions (f1…f5). The sizes of K and RAND can correspond to the sizes of one or more parameters received from the AMF.

[0272] One or more cryptographic functions can generate XMAC, RES, CK, and IK as output parameters. These output parameters can be provided as input parameters to one or more KDFs.

[0273] For example, such as Figure 6b As shown, RAND, CK, IK, and RES (along with the serving network name (SN name)) can be provided as input to the first KDF to generate the authentication response RES*. CK, IK, AK, and SQN (along with the SN name) can be provided as input to the second KDF to generate the AUSF key K. AUSF UE can use K in other AKA-related processes. AUSF For example, used to derive the Secure Anchor Function (SEAF) key K. SEAF .

[0274] refer to Figure 7 It illustrates a method based on some examples, where the network chooses between a first parameter size (e.g., 128 bits) or a second parameter size (e.g., 256 bits).

[0275] At 700, the UE can generate its encrypted identifier. For example, the UE can generate a Subscriber Hidden Identifier (SUCI) based on its Subscriber Permanent Identifier (SUPI). In some examples, the UE can also determine whether to request the AKA procedure based on a first parameter size or a second parameter size.

[0276] At 702, the UE sends a registration request to the AMF of the network serving the UE. The registration request may include the UE's identifier, such as the UE's encrypted identifier (if it has already been generated at 700). In some examples, the registration request may also include an indication of the size of the requested parameters, i.e., an indication of whether a first or second value of the requested parameters is being requested.

[0277] At position 704, the AMF sends an authentication request to the AFS of the UE's home network. The authentication request may include the UE's identifier (e.g., an encrypted identifier). In some examples, the authentication request may also include an indication of the size of the requested parameters.

[0278] At position 706, AUSF sends another authentication request to the network node. This other authentication request may include, for example, an authentication retrieval (GET) request. The authentication request may be used with a second output parameter (e.g., XRES*). The other authentication request may include an indication of the parameter size of the request.

[0279] At 708, the network node determines the size of one or more parameters as previously described. In some examples, the network node may determine the size of one or more parameters based on an indication of the requested parameter size. For example, the network node may determine the size of the requested parameters.

[0280] At point 710, the network node, for example, uses the previously mentioned... Figure 6a The described method derives one or more parameters, including a second output parameter, based on the magnitude of one or more determined parameters.

[0281] At point 712, the network node may send an authentication message to the AUSF that includes a second output parameter and information indicating the magnitude of one or more parameters. The authentication message may also include information indicating one or more KDFs used to generate the second output parameter at step 710.

[0282] At 714, the AUSF can send an authentication response message to the AMF. The authentication response message may include information indicating the size of one or more parameters, and optionally indicate one or more KDFs.

[0283] At 716, the AMF may send an authentication request to the UE. The authentication request may include information indicating the magnitude of one or more parameters, and optionally indicate one or more KDFs.

[0284] At 718, the UE uses, for example, a previous reference. Figure 6b The described method derives one or more parameters (including a first output parameter) based on information indicating the magnitude of one or more parameters and optionally indicating one or more KDFs.

[0285] At 720, the UE sends an authentication response to the AMF, including the first output parameters.

[0286] At position 722, AMF sends the first output parameter to AUSF.

[0287] At point 724, AUSF determines whether to authenticate the UE based on the first output parameter and the second output parameter. For example, AUSF can authenticate the UE when the first output parameter and the second output parameter match.

[0288] As previously mentioned, in some examples, the size of one or more parameters can vary between a first value and a second value. In some examples, the parameters can have different sizes and can have different possible ranges of sizes. Whenever a network node receives an authentication request, the network node can select a size for each of the one or more parameters and indicate the selected size for each of the one or more parameters when sending the authentication response.

[0289] Table 2 below shows examples of different possible ranges (in bytes) of values ​​that each of one or more parameters can have. It should be understood that the examples in Table 2 are for illustrative purposes only, and in some examples, different values ​​from the range of each parameter may be used.

[0290]

[0291] Table 2 – Examples of possible size ranges for different cryptographic keys refer to Figure 8 It illustrates methods based on some examples, where the network dynamically selects the size of one or more parameters from the range of values ​​for each parameter, as shown in Table 2 above.

[0292] At 800, the UE can generate its encrypted identifier. For example, the UE can generate a Subscriber Hidden Identifier (SUCI) based on its Subscriber Permanent Identifier (SUPI).

[0293] At 802, the UE sends a registration request to the AMF of the network serving the UE. The registration request may include the UE's identifier, such as the UE's encrypted identifier (if it has already been generated at 800).

[0294] At position 804, the AMF sends an authentication request to the AUSF of the UE's home network. The authentication request may include the UE's identifier (e.g., an encrypted identifier).

[0295] At position 806, AUSF sends another authentication request to the network node. This other authentication request may include, for example, an authentication retrieval (GET) request. The authentication request may be used with a second output parameter (e.g., XRES*).

[0296] At 808, the network node determines the size of one or more parameters as described above. In some examples, the network node can determine the size of each of the one or more parameters, within a range of values ​​for each parameter. For example, when the range of values ​​is as shown in Table 2 above, the network node can choose the following sizes (in bytes) for one or more parameters: AK=12; CK=32; IK=20; K=32; MAC=8; RAND=22; RES=5; SQN=18 At point 810, the network node, for example, uses the previously mentioned... Figure 6a The described method derives one or more parameters, including a second output parameter, based on the magnitude of one or more determined parameters.

[0297] At point 812, the network node may send an authentication message to the AUSF that includes a second output parameter and information indicating the magnitude of one or more parameters. The authentication message may also include information indicating one or more KDFs used to generate the second output parameter at step 810.

[0298] At 814, the AUSF can send an authentication response message to the AMF. The authentication response message may include information indicating the size of one or more parameters, and optionally indicate one or more KDFs.

[0299] At 816, the AMF may send an authentication request to the UE. The authentication request may include information indicating the size of one or more parameters, and optionally indicate one or more KDFs.

[0300] At 818, the UE uses, for example, a previous reference. Figure 6b The described method derives one or more parameters (including a first output parameter) based on information indicating the magnitude of one or more parameters and optionally information indicating one or more KDFs.

[0301] At 820, the UE sends an authentication response to the AMF, including the first output parameters.

[0302] At position 822, AMF sends the first output parameter to AUSF.

[0303] At point 824, AUSF determines whether to authenticate the UE based on the first output parameter and the second output parameter. For example, AUSF can authenticate the UE when the first output parameter and the second output parameter match.

[0304] In some examples, the size of one or more parameters can be static. The network node may send information indicating the (static) size of one or more parameters to the UE via the AMF before performing the authentication process. The UE and network node may use the indicated static size of one or more keys during authentication. The static size of one or more parameters can be any suitable value, such as 128 bits or 256 bits.

[0305] refer to Figure 9 It illustrates a method for configuring a static size for a UE with one or more parameters.

[0306] At 900, the network node sends information indicating the magnitude of one or more parameters to the UE via the AMF. The magnitude of the one or more parameters can be static. The information indicating the magnitude of one or more parameters can be sent by the network operator via an over-the-air update, or via a Roaming Boots-on (SoR) procedure or a UE Parameter Update (UPU) procedure.

[0307] At position 902, the UE can generate an encrypted identifier for itself. For example, the UE can generate a Subscriber Hidden Identifier (SUCI) based on its Subscriber Permanent Identifier (SUPI).

[0308] At 904, the UE sends a registration request to the AMF of the network serving the UE. The registration request may include the UE's identifier, such as the UE's encrypted identifier (if it has already been generated at 902).

[0309] At position 906, the AMF sends an authentication request to the AUSF of the UE's home network. The authentication request may include the UE's identifier (e.g., an encrypted identifier).

[0310] At position 908, AUSF sends another authentication request to the network node. This other authentication request may include, for example, an authentication retrieval (GET) request. The authentication request may be used with a second output parameter (e.g., XRES*).

[0311] At 910, the network node determines the size of one or more parameters based on the information sent to the UE in step 900.

[0312] At position 912, the network node, for example, uses the previously mentioned... Figure 6a The described method derives one or more parameters, including a second output parameter, based on the magnitude of one or more determined parameters.

[0313] At point 914, network nodes can send an authentication message to AUSF that includes a second output parameter.

[0314] At position 916, the AUSF can send an authentication response message to the AMF. At position 918, the AMF can send an authentication request to the UE.

[0315] At 920, the UE, for example, uses the previously mentioned... Figure 6b The described method derives one or more parameters (including a first output parameter) based on information received at step 900 indicating the magnitude of one or more parameters.

[0316] At position 922, the UE sends an authentication response to the AMF, including the first output parameter.

[0317] At position 924, AMF sends the first output parameter to AUSF.

[0318] At point 926, AUSF determines whether to authenticate the UE based on a first output parameter and a second output parameter. For example, AUSF can authenticate the UE when the first and second output parameters match.

[0319] In some examples, the above examples can be applied to different authentication processes. For instance, the examples described herein can be applied to 5G authentication and key negotiation processes, or to the Extensible Authentication Protocol (EAP) AKA revision (Prime) process. However, it should be understood that these authentication process examples are for illustrative purposes only, and the inventions and concepts disclosed herein are not limited to these authentication process examples.

[0320] By implementing some of the examples above, if an attacker modifies the information indicating the size of one or more parameters, the first and second output parameters will not match, and the UE will not be authenticated. This can help improve the security of the authentication process.

[0321] In some examples, a user equipment is provided, including components for: determining the magnitude of one or more parameters associated with an authentication process; deriving one or more parameters based on the determined magnitude of the one or more parameters; and sending an authentication message including a first output parameter to an access and mobility management function, wherein the first output parameter is one of the derived one or more parameters.

[0322] In some examples, a user equipment is provided, including at least one processor and at least one memory storing instructions, the instructions, when executed by the at least one processor, causing the user equipment to at least: determine the magnitude of one or more parameters associated with an authentication process; derive one or more parameters based on the determined magnitude of the one or more parameters; and send an authentication message including a first output parameter to an access and mobility management function, wherein the first output parameter is one of the derived one or more parameters.

[0323] In some examples, a network node is provided, including components for: determining the magnitude of one or more parameters associated with the authentication process; deriving one or more parameters based on the determined magnitude of the one or more parameters; and sending an authentication message to an authentication server function including a second output parameter, wherein the second output parameter is one of the derived one or more parameters.

[0324] In some examples, a network node is provided, including at least one processor and at least one memory storing instructions, the instructions, when executed by the at least one processor, causing the network node to at least: determine the size of one or more parameters associated with an authentication process; derive one or more parameters based on the determined size of the one or more parameters; and send an authentication message to an authentication server function including a second output parameter, wherein the second output parameter is one of the derived one or more parameters.

[0325] In some examples, a user equipment is provided, including components for: receiving from an access and mobility management function information indicating the magnitude of one or more parameters associated with an authentication process; deriving one or more parameters based on the information indicating the magnitude of the one or more parameters; and sending an authentication message to the access and mobility management function including a first output parameter, wherein the first output parameter is one of the derived one or more parameters.

[0326] In some examples, a user equipment is provided, including at least one processor and at least one memory storing instructions, the instructions, when executed by the at least one processor, causing the user equipment to at least: receive from an access and mobility management function information indicating the size of one or more parameters associated with an authentication process; derive one or more parameters based on the information indicating the size of the one or more parameters; and send to the access and mobility management function an authentication message including a first output parameter, wherein the first output parameter is one of the derived one or more parameters.

[0327] In some examples, a network node is provided, including components for: determining the size of one or more parameters associated with an authentication process; deriving one or more parameters based on the determined size of the one or more parameters; and sending an authentication message to an authentication server function, the authentication message including a second output parameter and information indicating the size of the determined one or more parameters, wherein the second output parameter is one of the derived one or more parameters.

[0328] In some examples, a network node is provided, including at least one processor and at least one memory storing instructions, which, when executed by the at least one processor, cause the network node to at least: determine the size of one or more parameters associated with an authentication process; derive one or more parameters based on the determined size of the one or more parameters; and send an authentication message to an authentication server function, the authentication message including a second output parameter and information indicating the size of the determined one or more parameters, wherein the second output parameter is one of the derived one or more parameters.

[0329] In some examples, a user equipment is provided, including components for: sending a request to an access and mobility management function for the size of one or more parameters associated with an authentication process; receiving information from the access and mobility management function indicating the size of one or more parameters; deriving one or more parameters based on the determined size of one or more parameters; and sending an authentication message to the access and mobility management function including a first output parameter, wherein the first output parameter is one of the derived one or more parameters.

[0330] In some examples, a user equipment is provided, including at least one processor and at least one memory storing instructions, the instructions, when executed by the at least one processor, cause the user equipment to at least: send a request to an access and mobility management function for the size of one or more parameters associated with an authentication process; receive information from the access and mobility management function indicating the size of one or more parameters; derive one or more parameters based on the determined size of one or more parameters; and send an authentication message to the access and mobility management function including a first output parameter, wherein the first output parameter is one of the derived one or more parameters.

[0331] In some examples, a network node is provided, including components for: receiving from an authentication server function information indicating the size of one or more parameters associated with an authentication process requested by a user equipment; determining the size of one or more parameters based on the requested size of the one or more parameters; deriving one or more parameters based on the determined size of the one or more parameters; and sending an authentication message to the authentication server function, the authentication message including a second output parameter and information indicating the size of the determined one or more parameters, wherein the second output parameter is one of the derived one or more parameters.

[0332] In some examples, a network node is provided, including at least one processor and at least one memory storing instructions, which, when executed by the at least one processor, cause the network node to at least: receive from an authentication server function information indicating the size of one or more parameters associated with an authentication process requested by a user equipment; determine the size of one or more parameters based on the requested size of the one or more parameters; derive one or more parameters based on the determined size of the one or more parameters; and send an authentication message to the authentication server function, the authentication message including a second output parameter and information indicating the size of the determined one or more parameters, wherein the second output parameter is one of the derived one or more parameters.

[0333] Figure 10 A schematic diagram of a non-volatile storage medium 1000a (e.g., a computer optical disc (CD) or digital multifunction optical disc (DVD)) and 1000b (e.g., a Universal Serial Bus (USB) memory stick) is shown, storing instructions and / or parameters 1002; when executed by a processor, the instructions and / or parameters 1002 allow the processor to perform one or more steps of the method of Figure 4.

[0334] It should be understood that the above references to various network functions (e.g., AMF, SMF, TNF, etc.) can be implemented by means of performing at least some of the functions associated with those network functions. Furthermore, means configured to implement network functions can also be configured as virtual network function instances that implement those network functions.

[0335] It should be understood that the device may include or be coupled to other units or modules, such as radio components or radio heads for transmission and / or reception. Although the device has been described as a single entity, different modules and memories may be implemented in one or more physical or logical entities.

[0336] It should be noted that while some example embodiments have been described for 5G networks, similar example embodiments can be applied to other networks and communication systems. Therefore, although some example embodiments have been described above by way of example with reference to certain example architectures of wireless networks, technologies, and standards, other example embodiments can be applied to any other suitable form of communication system besides the communication systems shown and described herein.

[0337] It should also be noted that various changes and modifications may be made to the various exemplary embodiments described herein without departing from the scope of this disclosure.

[0338] As used herein, “at least one of the following: ”, “at least one of ”, and similar expressions (where a list of two or more elements is connected by “and” or “or”) mean: any at least one element, any at least two or more elements, or at least all elements. As used herein, the expression “and / or” includes any and all combinations of the listed items, including any at least one element, any at least two or more elements, or at least all elements.

[0339] As used herein, unless otherwise stated (e.g., using "or otherwise" or "or alternative"), the term "or" means non-exclusive "or".

[0340] As used herein, unless explicitly stated otherwise, performing a step "in response to A" does not mean that the step is performed immediately after "A" occurs, and may include one or more intermediate steps. Similarly, performing a step or function "based on A" does not mean that the step or function is performed solely based on "A," as one or more additional conditions may also be included.

[0341] Generally, various embodiments can be implemented in hardware or special-purpose circuit systems, software, logic, or any combination thereof. Some aspects of this disclosure can be implemented in hardware, while others can be implemented in firmware or software that can be executed by a controller, microprocessor, or other computing device, but this disclosure is not limited thereto. Although various aspects of this disclosure may be shown and described as block diagrams, flowcharts, or using some other graphical representation, it should be understood that, as non-limiting and illustrative examples, these blocks, apparatuses, systems, techniques, or methods described herein can be implemented in hardware, software, firmware, special-purpose circuit systems or logic, general-purpose hardware or controllers or other computing devices, or some combination thereof.

[0342] As used herein, the term "circuit system" may refer to one, more, or all of the following: (a) Hardware circuit implementation only (e.g., analog and / or digital circuit implementation only) and (b) A combination of hardware circuitry and software, such as (if applicable): (i) A combination of (multiple) analog and / or digital hardware circuits with software / firmware; and (ii) Any part of the (multiple) hardware processors having software (including (multiple) digital signal processors), software, and (multiple) memories, which work together to enable a device such as a mobile phone or server to perform various functions; and (c) (a ...

[0343] The definition of "circuit system" applies to all uses of the term herein, including its use in any claim. As another example, as used herein, the term "circuit system" also encompasses only hardware circuitry or a processor (or processors), a portion of hardware circuitry or a processor, and an implementation of its accompanying software and / or firmware. The term "circuit system" also encompasses, for example (and as applicable to specific claim elements), baseband integrated circuits or processor integrated circuits used in mobile devices, or similar integrated circuits in servers, cellular network devices, or other computing or network devices.

[0344] Embodiments of this disclosure may be implemented by computer software executable by a data processor of a mobile device (e.g., a data processor in a processor entity), by hardware, or by a combination of software and hardware. The computer software or program (also known as a program product, including software routines, applets, and / or macros) may be stored in any device-readable data storage medium and includes program instructions for performing a specific task. The computer program product may include one or more computer-executable components that, when the program is run, are configured to implement the various embodiments. The one or more computer-executable components may be at least one piece of software code or a portion thereof.

[0345] Furthermore, it should be noted that any box in the logical flow diagram may represent a program step, interconnected logic circuits, boxes and functions, or a combination of program steps and logic circuits, boxes and functions. Software may be stored on physical media, such as memory chips, memory blocks implemented within a processor, magnetic media such as hard disks or floppy disks, and optical media such as DVDs and their data variants and CDs. Physical media are non-transitory media.

[0346] As used herein, the term “non-transient” refers to a limitation on the medium itself (e.g., tangible rather than signaling), rather than a limitation on the persistence of data storage (e.g., RAM vs. ROM).

[0347] The memory can be of any type suitable for the local technical environment and can be implemented using any suitable data storage technology, such as semiconductor-based memory devices, magnetic memory devices and systems, optical memory devices and systems, fixed memory, and removable memory. The data processor can be of any type suitable for the local technical environment and, by way of non-limiting example, can include one or more of the following: general-purpose computers, special-purpose computers, microprocessors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), FPGAs, gate-level circuits, and processors based on multi-core processor architectures.

[0348] The various example embodiments of this disclosure can be implemented in a variety of components, such as integrated circuit modules. Integrated circuit design is generally a highly automated process. Complex and powerful software tools can be used to transform logic-level designs into semiconductor circuit designs that can be etched and formed on semiconductor substrates.

[0349] The scope of protection sought by the various exemplary embodiments of this disclosure is defined by the independent claims. Exemplary embodiments and features (if any) described in this disclosure that do not fall within the scope of the independent claims should be interpreted as examples that aid in understanding the various exemplary embodiments of this disclosure.

[0350] The foregoing description provides a complete and informative description of various exemplary embodiments of the present disclosure by way of non-limiting and illustrative examples. However, various modifications and adjustments may occur to those skilled in the art upon reading this disclosure in conjunction with the accompanying drawings and claims. Nevertheless, all such modifications and similar alterations to the teachings will still fall within the various exemplary embodiments of the present disclosure. As a non-limiting and illustrative example, another exemplary embodiment may include a combination of one or more exemplary embodiments with any other exemplary embodiments discussed above.

Claims

1. A user equipment comprising components for: Receive information from the access and mobility management function indicating the magnitude of one or more parameters associated with the authentication process; The one or more parameters are derived based on the information indicating the magnitude of the one or more parameters; and Send an authentication message to the access and mobility management function, including a first output parameter, wherein the first output parameter is one of the derived parameters.

2. The user equipment according to claim 1, wherein the one or more parameters include the first output parameter and one or more intermediate parameters for deriving the first output parameter.

3. The user equipment according to claim 1 or 2, wherein the component is further configured to: The user equipment receives information from the access and mobility management function instructing it to use one or more key derivation algorithms when deriving the one or more parameters. The derivation of the one or more parameters includes deriving the one or more parameters using the indicated one or more key derivation algorithms.

4. The user equipment according to any one of the preceding claims, wherein the component is further configured to: Receive information from network nodes indicating multiple different combinations of the magnitudes of the one or more parameters. The information indicating the size of the one or more parameters includes an identifier for one of a plurality of different combinations to be used in the authentication process; and Derivation of the one or more parameters includes deriving the one or more parameters based on the magnitude of the one or more parameters in the combination corresponding to the received identifier.

5. The user equipment according to any one of the preceding claims, wherein the magnitude of said one or more parameters is selected from at least a first value or a second value.

6. The user equipment according to any one of claims 1 to 4, wherein the magnitude of said one or more parameters is variable between a first value and a second value.

7. The user equipment according to claim 5 or 6, wherein the first value is 128 bits and the second value is 256 bits.

8. The user equipment according to any one of the preceding claims, wherein the first output parameter is an authentication response RES*.

9. A network node comprising components for: Determine the size of one or more parameters associated with the certification process; The one or more parameters are derived based on the determined magnitude of the one or more parameters; and Send an authentication message to the authentication server function, the authentication message including a second output parameter and information indicating the size of the one or more parameters, wherein the second output parameter is one of the derived one or more parameters.

10. The network node of claim 9, wherein the authentication message includes information indicating one or more key derivation algorithms to be used by the user equipment when deriving the one or more parameters, wherein the indicated one or more key derivation algorithms correspond to one or more key derivation algorithms used by the network node to derive the one or more parameters.

11. The network node according to claim 9 or 10, wherein the component is further configured to: Send information to the user equipment indicating multiple different combinations of the magnitudes of the one or more parameters. The information indicating the size of the one or more parameters includes an identifier for one of the plurality of different combinations of the sizes of the one or more parameters, the identifier corresponding to a determined size of the one or more parameters used to derive the size of the one or more parameters.

12. The network node according to any one of claims 9 to 11, wherein the size of said one or more parameters is selected from at least a first value or a second value.

13. The network node according to any one of claims 9 to 11, wherein the size of said one or more parameters is variable between a first value and a second value.

14. The network node according to claim 12 or 13, wherein the first value is 128 bits and the second value is 256 bits.

15. The network node according to any one of claims 9 to 14, wherein the second output parameter is the expected authentication response XRES*.

16. The network node according to any one of claims 9 to 15, wherein the network node is one of the following: Unified data management functionality; Authentication credential repository; or Subscriber ID hiding function.

17. A user equipment comprising at least one processor and at least one memory storing instructions, the instructions, when executed by the at least one processor, causing the user equipment to at least: Receive information from the access and mobility management function indicating the magnitude of one or more parameters associated with the authentication process; The one or more parameters are derived based on the information indicating the magnitude of the one or more parameters; as well as Send an authentication message to the access and mobility management function, including a first output parameter, wherein the first output parameter is one of the derived parameters.

18. A network node comprising at least one processor and at least one memory storing instructions, the instructions, when executed by the at least one processor, causing the network node to at least: Determine the size of one or more parameters associated with the certification process; The one or more parameters are derived based on the determined magnitude of the one or more parameters; as well as Send an authentication message to the authentication server function, the authentication message including a second output parameter and information indicating the size of the one or more parameters, wherein the second output parameter is one of the derived one or more parameters.

19. A method performed by a user equipment, the method comprising: Receive information from the access and mobility management function indicating the magnitude of one or more parameters associated with the authentication process; The one or more parameters are derived based on the information indicating the magnitude of the one or more parameters; as well as Send an authentication message to the access and mobility management function, including a first output parameter, wherein the first output parameter is one of the derived parameters.

20. A method performed by a network node, the method comprising: Determine the size of one or more parameters associated with the certification process; The one or more parameters are derived based on the determined magnitude of the one or more parameters; as well as Send an authentication message to the authentication server function, the authentication message including a second output parameter and information indicating the size of the determined one or more parameters, wherein the second output parameter is one of the derived one or more parameters.

Images