Selection of access nodes in 5G networks for access outside 3GPP cellular and indication of regional requirements subject to lawful interception Interception-aware access node selection

Abstract

A method and apparatus for selecting an access node in a 5G network are provided. [Solution] The method includes obtaining information enabling selection of an access node for non-3GPP (registered trademark) access, querying a server to determine whether the country in which the access node is located requires lawful interception of communications, and selecting an access node for non-3GPP access based at least on the obtained information and / or a response to the query.

Description

Field

[0001] The subject matter described herein relates to access node selection in 5G networks.

[0002] As cellular systems, including 5G networks, support an increasing number of devices and services, including applications with a wide range of use cases and diverse needs with respect to bandwidth, latency, and reliability requirements, the cellular systems may need to prioritize resources across the wireless access network and core network (and / or, for example, across the control plane and user plane) to support differentiation between different service data flows (SDFs).

[0003] Methods and apparatuses for access node selection are provided, including computer program products. In some exemplary embodiments, an apparatus may be provided that includes at least one processor and at least one memory including computer program code, the at least one memory and the computer program code configured by the at least one processor to cause the apparatus to at least: obtain information enabling selection of an access node for non-3GPP access; query a server to determine whether a country in which the access node is located requires lawful interception of communications; and select an access node for non-3GPP access based at least on the obtained information and / or a response to the query. In another aspect of the invention, there is an apparatus capable of performing the steps of obtaining information enabling selection of an access node for non-cellular access or obtaining information enabling selection of an access node for non-cellular access. In another aspect of the invention, the querying the server is for determining an access node. The querying may determine whether a country in which the access node is located requires use of a particular type of node in the country, or even a particular node in the country. The access node may be at least one of a non-cellular interworking function and a gateway.

[0004] In some variations, one or more of the features disclosed herein, including the following features, may be optionally included in any workable combination. The apparatus may further be caused to select between at least a first access node comprising a non-3GPP interconnection function and a second access node comprising an evolved packet data gateway. The information may be obtained from the policy control function via the access management function, the N2 interface, and / or the N1 interface. The information may be obtained from the universal subscriber identity module. The information may include an identity of the at least one non-3GPP interconnection function, a preference for selecting the non-3GPP interconnection function, and / or a preference for selecting the evolved packet data gateway. The apparatus may further be caused to receive at least a response to the query, the response including an indication of whether a country in which the non-3GPP access network is located requires lawful interception of communications and / or a list of one or more non-3GPP interconnection function nodes that support lawful interception of communications. The apparatus may further be caused to perform at least an access to the non-3GPP access network via the selected access node.

[0005] The above aspects and features may be implemented into systems, devices, methods, and / or articles, depending on the desired configuration. Details of one or more variations of the subject matter described herein are set forth in the accompanying drawings and the description below. Features and advantages of the subject matter described herein will be apparent from the description and drawings, and from the claims. [Brief description of the drawings]

[0006] In the drawings,

[0007] [Figure 1] 1 illustrates an example configuration management object and data model 100 supporting selection of only the N3IWF according to an example embodiment.

[0008] [Figure 2A]1 illustrates an example of a portion of a network including user equipment having 3GPP and non-3GPP access in accordance with an example embodiment.

[0009] [Figure 2B] 1 illustrates an example of a process according to an example embodiment.

[0010] [Figure 3A] 1 illustrates a non-3GPP access network N3IWF node selection logic according to an example embodiment. [Figure 3B] 1 illustrates non-3GPP access network N3IWF node selection logic according to an example embodiment. [Figure 3C] 1 illustrates a non-3GPP access network N3IWF node selection logic according to an example embodiment.

[0011] [Figure 4] 1 illustrates an example of a portion of a network including user equipment having 3GPP and non-3GPP access in accordance with an example embodiment.

[0012] [Diagram 5] 1 illustrates a management object according to an example embodiment.

[0013] [Figure 6A] 1 illustrates a portion of a 5G-HPLMN and a portion of a 4G-HPLMN according to an exemplary embodiment. [Figure 6B] 1 illustrates a portion of a 5G-HPLMN and a portion of a 4G-HPLMN according to an exemplary embodiment.

[0014] [Figure 7A] 1 illustrates an example process when a UE supports a connection with an N3IWF and an ePDG according to an example embodiment. [Figure 7B] 1 illustrates an example process when a UE supports a connection with an N3IWF and an ePDG according to an example embodiment. [Figure 7C] 1 illustrates an example process when a UE supports a connection with an N3IWF and an ePDG according to an example embodiment.

[0015] [Figure 8A] 1 illustrates a UE connecting to a data network after establishment of an IKEv2 signaling security association and a user plane security association following N3IWF selection according to an example embodiment. [Figure 8B] 1 illustrates a UE connecting to a data network after establishment of an IKEv2 signaling security association and a user plane security association following N3IWF selection according to an example embodiment.

[0016] [Figure 9] 1 illustrates an example of a network node according to an example embodiment.

[0017] [Figure 10] 1 illustrates an example of an apparatus according to an example embodiment.

[0018] In the drawings, like labels are used to refer to the same or similar items.

[0019] In wireless networks, including 5G wireless networks, non-3GPP access networks, e.g., wireless local area networks, may be considered or treated as 5G access networks and thus treated as part of the 5G System (5GS). When untrusted non-3GPP accesses, e.g., untrusted wireless local area networks, are present, a non-3GPP interworking function (N3IWF) in a non-3GPP (N3G) access node may provide termination of the N2 interface for the control plane and the N3 interface for the user plane. The term "non-3GPP access" refers to access that is not via a 3rd Generation Partnership Project Cellular Radio Access Network. Examples of "non-3GPP" access include access via a wireless local area network, such as WiFi and / or the like. These examples may also be considered "non-cellular" access.

[0020] The N3IWF provides interconnection that allows UEs to connect to the 5G core via trusted or untrusted non-3GPP access. 5G-capable user equipment (UE) may access the 5G core network by connecting to the non-3GPP access network via the N3IWF. The N3IWF may relay uplink and downlink control plane network access stratum (NAS) signaling between the UE and the access management function (AMF) over the N1 interface, allowing the UE to have a direct NAS signaling connection to the AMF. The N3IWF may also provide user plane connection(s) between the UE and the user plane function (UPF) for protocol data unit (PDU) sessions over non-3GPP (N3G) access.

[0021] However, depending on the mobility status of the UE, there may be various different approaches for the UE to select an access function, e.g., an N3IWF, an evolved packet data gateway (ePDG), and / or a combination of the two. The selection of the N3IWF may affect both control plane signaling and user plane packet forwarding. Therefore, flexible access node selection mechanisms may be needed to enable the efficiency of 5G systems over non-3GPP accesses.

[0022] Wireless networks have various strategies for 4G to 5G transition for non-3GPP access such as wireless local area networks (e.g., WiFi and the like). The network may prioritize the UE to select an N3IWF or an evolved packet core gateway (ePDG) based on the upgrade or transition status of the network from 4G to 5G. For example, the network may be configured to prioritize the 5G-capable UE to select an N3IWF, but if the N3IWF is not available, the network may be configured to prioritize the 5G-capable UE to select an ePDG, so that the 5G-capable UE can still receive service.

[0023] Another consideration is due to the 5G network being a data-centric network, which may lack native support for voice services. For example, if 5GS voice over IMS ("VoIMS") is not supported, a 5G-capable UE may need to connect to other networks, such as a 4G network, and then behave like a non-5G UE to connect to the evolved packet core. In this example, the UE may not indicate to the mobility management entity (MME) that it is 5G-capable, and as part of the non-3GPP access, the UE may need to select an ePDG for handover support.

[0024] Additionally, the need for lawful interception of communications on the network may also be considered with respect to the selection of non-3GPP access nodes for a 5G system. Some countries consider 3GPP operators in their jurisdictions that offer non-3GPP access services, such as WIFI, to offer restricted services. In these jurisdictions, network operators may be required to configure their networks to provide lawful interception to roaming users. However, in light of the foregoing discussion, it will be appreciated that the need for lawful interception of communications applies to certain aspects of the present invention and is not relevant to other aspects of the present invention.

[0025] In networks including support for ePDG and N3IWF, the network may need to upgrade the ePDG(s) to a combined N3IWF / ePDG node. Therefore, it may be necessary to define an access node selection mechanism for 5G systems to enable the UE to select an appropriate access node both when in the home public land mobile network (HPLMN) and while roaming in a network including a visiting public land mobile network (VPLMN). This mechanism may need to be based on the UE's connectivity capabilities, e.g., whether the UE supports connectivity to the N3IWF, ePDG, or both. In addition, a configuration data model needs to be defined to enable flexibility in supporting access node selection in various deployment scenarios, including typical and unusual cases.

[0026] In some example embodiments, selection of a non-3GPP access network (N3AN) access node may be provided, and the selection of the N3AN access node may be performed in an intercept-aware manner such that the selection of an access node, such as an N3IWF, takes into account whether a jurisdiction requires lawful interception of communications for non-3GPP access, such as wireless local area networks, including WiFi and the like.

[0027] In some example embodiments, a non-3GPP access network node configuration data model and management objects (MOs) for N3IWF selection on an untrusted non-3GPP access network may be defined.

[0028] In some example embodiments, a non-3GPP access network node configuration data model and management objects for a combined N3IWF / ePDG node may be defined.

[0029] In some example embodiments, handling logic may be defined to enable interception-aware selection of an N3IWF, including cases where the UE supports connections only to an N3IWF and / or cases where the UE supports connections to both an N3IWF and an ePDG.

[0030] In some example embodiments, configuration management objects and data models may be provided for access node selection, such as N3IWF selection, over untrusted non-3GPP access networks. A network node, such as a policy control function (PCF) in a UE's Home Public Land Mobile Network (HPLMN), may provide this configuration information, including N3IWF selection information, to the UE. Also, a visited network, such as a Visited Public Land Mobile Network (VPLMN), may be configured to provide N3IWF configuration information to UEs roaming in the VPLMN.

[0031] In some example embodiments, the non-3GPP access network node configuration information may include a home N3IWF identifier and / or N3IWF node selection information. If available in a configuration management object, the non-3GPP access network node configuration information may be provisioned into the non-3GPP access network node. Also, if available in a universal subscriber identity module (USIM), the non-3GPP access network node configuration information may be provisioned into an elementary file (EF).

[0032] 1 illustrates an example N3AN node configuration management object and data model 100 supporting N3IWF-only selection according to an example embodiment. The object 100 may provide information to enable configuration of access node selection, such as selection of an N3IWF, an ePDG, or both. For example, the object may be provided by a PCF to a UE, enabling the UE to select a non-3GPP access node, an N3IWF, an ePDG, or both.

[0033] The object 100 may include N3AN_Node information 102. The N3AN_node information 102 may act as a node that provides a placeholder for access node configuration information for a non-3GPP access network.

[0034] Object 100 may further include a PLMN 104 leaf. PLMN 104 may include a Public Land Mobile Network (PLMN) code that identifies an operator or network, such as a network operator that created the policy corresponding to object 100. PLMN leaf 104 may have an occurrence of one, a format of character, and a support access type of get or replace, etc. In some example embodiments, the format of the PLMN leaf is defined by a standard, such as 3GPP TS 23.003. If the value of the PLMN leaf is equal to the UE's HPLMN (or an equivalent HPLMN), the rules represented by the policies of object 100 may be considered valid. However, if the value of the PLMN leaf is not the HPLMN (or an equivalent HPLMN), the rules represented by the policies of object 100 may be ignored.

[0035] The object 100 may further include a Home_N3IWF_Identifier 106. The Home_N3IWF_Identifier 106 represents a node within the object and may act as a placeholder for a list of N3IWF(s) within the UE's HPLMN.

[0036] The Home_N3IWF_Identifier node 106 is a <x>108. <x>108 represents a node within the object 100 and may serve as a placeholder for a fully qualified domain name (FQDN) or IP address configuration of the N3IWF within the UE's HPLMN.

[0037] <x>108 may be associated with an FQDN leaf 110. The FQDN leaf may indicate an FQDN of an N3IWF in the UE's HPLMN. The value of the FQDN leaf may be based on the N3IWF FQDN format for non-emergency bearer services defined in standards such as 3GPP TS23.003. In some example embodiments, the absence of an FQDN leaf 108 may indicate that an FQDN has not been configured (by the home operator) for this N3IWF in the UE's HPLMN by the home operator.

[0038] <x>FQDN IPAddr 108 may be associated with IPAddr 112. FQDN IPAddr 112 may act as a node that acts as a placeholder for a list of IP addresses of N3IWFs in the UE's HPLMN. In some example embodiments, the absence of this node 112 may indicate that no IP addresses have been configured (by the home operator) for this N3IWF in the UE's HPLMN.

[0039] IPAddr112 is <x>The UE may be associated with a node 114 that may act as a placeholder for the IP address of the N3IWF in the UE's HPLMN.

[0040] <x>The node 114 may be associated with an AddressType 116. The address type leaf 116 indicates the IP version, e.g., type, of the IP address of the N3IWF in the UE's HPLMN.

[0041] <x>The node 114 may be associated with an Address 118. The address leaf 118 indicates the IP address of the N3IWF in the UE's HPLMN. The value of this leaf is an IPv6 address of the type indicated by AddressType 116.

[0042] The N3AN Node 102 may further include NodeSelectionInformation 120. The NodeSelectionInformation 120 serves as a node that provides a placeholder for FQDN format and selection information for a list of Public Land Mobile Networks (PLMNs).

[0043] If the NodeSelectionInformation 120 node is present (and has a value and is therefore not empty), the UE may search for the PLMN's N3IWF selection policy and FQDN format setting(s). This search may be as follows: - If the configuration of the PLMN can be discovered, the UE may apply the corresponding configuration information of the PLMN for N3IWF selection. - The UE's PLMN ID configuration could not be found, but PLMN leaf 124 was set to the "Any_PLMN" value <x>If node 122 is present, the UE may apply configured information of the “Any PLMN” value for N3IWF selection. - In other cases, including when the NodeSelectionInformation node is not present or when the NodeSelectionInformation node is present but empty, the UE may assume that the UE's PLMN pre-configuration information does not exist. The UE may select the N3IWF of the HPLMN according to a standard such as 3GPP TS24.502.

[0044] In some example embodiments, only PLMNs that have a roaming agreement with the HPLMN for interconnection with untrusted non-3GPP accesses, such as WLANs, may be provisioned in the NodeSelectionInformation 120. The UE's HPLMN may also be included in the list of PLMNs.

[0045] NodeSelectionInformation120 is <x>It may be associated with node 122. <x>Node 122 may act as a placeholder for the N3IWF FQDN format, selection information, and PLMN priority settings for the PLMN.

[0046] <x>The node 122 may be associated with a PLMN leaf 124 that indicates a PLMN code. <plmn>or may have the value "Any_PLMN". The format of the PLMN may be defined according to a standard such as 3GPP TS23.003. If the UE's PLMN ID is the same as the PLMN value stored in the PLMN leaf, then the configuration for this PLMN from the home operator is available or discovered.

[0047] <x>The node 122 may be associated with a PLMN_Priority 126 leaf. The PLMN_Priority leaf represents a priority given to the N3IWF of a PLMN and is represented as a numeric value. The PLMN_Priority 126 may have a value of PLMN priority. For example, if there is more than one PLMN entry, the UE may treat the entry with the lowest PLMN Priority value as the entry with the highest priority among the valid entries. If the PLMN is the HPLMN of the UE, the PLMN_priority of the PLMN entry may be ignored even if provisioned.

[0048] <x>Node 122 may be associated with an FQDN_format 128. The FQDN_format leaf 128 indicates whether an operator identifier FQDN format or a location-based FQDN format is being used when an FQDN is being constructed by the UE. To further explain, a value of 0 may indicate that an operator identifier FQDN format is being used in accordance with a standard such as 3GPP TS 23.003, and a value of 1 may indicate that a tracking area identification FQDN format is being used in accordance with a standard such as 3GPP TS 23.003. In some example embodiments, if this leaf is not provisioned, a default value of 0 may be applied. The FQDN_format values ​​may be used by the UE as follows when constructing an FQDN: -If the tracking area identity FQDN format is used, the UE may construct a tracking area identity FQDN using the PLMN ID of the PLMN to which the UE is attached and the track area code (TAC) of the area in which the UE is located. Otherwise, the UE may construct the operator identifier FQDN using the PLMN ID of the PLMN to which the UE is attached.

[0049] 2A illustrates an example of a portion of a network 200 that includes a user equipment (UE) 250 that has 3GPP access 290 (e.g., via a cellular base station) to an HPLMN 296A and non-3GPP access 292 (untrusted in this example) to the HPLMN 296A. Although FIG. 2A illustrates an HPLMN 296A, a VPLMN may similarly be implemented to include one or more of the illustrated devices 254-266.

[0050] FIG. 2A also illustrates a HPLMN 296 including an access and mobility management function (AMF) 254, a session management function (SMF) 256, a policy control function (PCF) 260, a user plane function (UPF) 258, an N3IWF 266, and a data network 268. In the example of FIG. 1, the devices 254-266 may be associated with a home public land mobile network (HPLMN) 296A. FIG. 2A also illustrates service interfaces such as N1, N2, N3, N4, N6, N7, N11, and / or the like. The architecture, nodes (including the N3IWF, AMF, PCF, SMF, SMF, and other devices illustrated in FIG. 2A), and service interfaces may be defined according to a standard such as 3GPP TS 23.501, although other standards as well as proprietary interfaces may be used.

[0051] 2A illustrates a node in the home network of the UE 250, such as the PCF 260, that provides N3IWF node configuration information 299 (labeled N3AN_Node MO, e.g., object 100) to the UE via the N7 interface, the SMF 256, the N11 interface, the AMF 254, and / or the like. Alternatively, the N3IWF node configuration information may be provided to the UE 250 via user subscriber identity module (USIM) provisioning.

[0052] In some example embodiments, UE 250 may perform a query to determine whether a visiting country mandates the selection of an N3IWF in the visiting country. To determine whether a visiting country mandates the selection of an N3IWF in the visiting country, the UE may perform a DNS name authority pointer (NAPTR)_query using the visiting country FQDN as follows: n3iwf.5gc.mcc <mcc>.visited-country.pub.3gppnetwork.org.

[0053] The result of the query on the UE250 is "n3iwf.5gc.mnc <mnc>.mcc <mcc>If the visited country is a set of one or more records containing a service instance name of the form "visited_country.pub.3gppnetwork.org" (where the mobile country code (MCC) and mobile network code (MNC) pair in each record represents the PLMN Id of the visited country), then the UE may determine that the visited country mandates the selection of an N3IWF in the corresponding visited country.

[0054] However, if the query is "n3iwf.5gc.mnc <mnc>.mcc <mcc>If the UE does not return any records containing a service instance name of the form ".pub.3gppnetwork.org", the UE may determine that the visited country does not mandate the selection of an N3IWF in the corresponding visited country.

[0055] In some example embodiments, the UE 250 may select an N3IWF, such as N3IWF 266, if the UE supports a connection with an N3IWF but not with an ePDG. For example, the UE may perform the N3IWF selection based on non-3GPP access node configuration information 299 (which may be formatted as object 100) provided to the UE 250 by the PCF 260. The UE's selection of an N3IWF may also be based on the UE's knowledge of the country in which the UE is located and the PLMN to which the UE is attached.

[0056] If the UE supports only a connection with an N3IWF and not with an ePDG, the UE may ignore ePDG-related configuration parameters when selecting an N3IWF, if available in non-3GPP access node configuration information 299. For example, the UE may ignore the home ePDG identifier and ePDG preference parameters of object 100.

[0057] 2B illustrates an example process according to an example embodiment. The description of FIG. 2B also refers to FIG. 2A and FIG.

[0058] At 270, the UE 250 may obtain information for enabling selection of an access node during non-3GPP access according to certain example embodiments. For example, the UE may be attempting to access an untrusted non-3GPP access network, such as a WLAN, a WiFi network, and / or the like. To that end, the UE may access the obtained information to select an access node to select for the non-3GPP network access. In some example embodiments, the UE may obtain this information as an object, such as object 100, object 500 (described below), and / or the like. Also, the object may be received from the policy control function 260 via the N7 interface, the SMF 256, the AMF 254, the N2 interface, and / or the N1 interface. Also, the obtained information may identify a list of one or more selectable N3IWFs, N3IWF preference information, ePDG preference information, emergency services provided, voice support, and / or other information disclosed herein, including objects 100, 500, and / or the like. The UE 250 may obtain the information via the PCF, but the information may also be provided via USIM provisioning.

[0059] At 272, the UE 250 may perform a query to a server to determine whether the country in which the non-3GPP access network is located requires lawful interception (LI) of communications and / or to obtain a list of one or more N3IWF nodes (or a list of N3IWF identifiers) that support lawful interception of communications, according to some example embodiments. In response to the query, the UE may receive at 274 a response indicating whether the country in which the non-3GPP access network is located requires lawful interception (LI) of communications and / or a list of one or more N3IWF nodes (or a list of N3IWF identifiers) that support lawful interception of communications.

[0060] At 276, the UE 250 may select an access node for non-3GPP access based at least on the information obtained at 270 and / or 274, according to some example embodiments. For example, the UE may select between an N3IWF (supporting 5G compliant access) and an ePDG (supporting 4G compliant access) for accessing non-3GPP access networks and core networks. To further illustrate, if the ePDG is preferred in a particular location or network, the UE may select the ePDG. Alternatively or additionally, if the N3IWF is preferred in a particular location or network, the UE may select the N3IWF. Alternatively or additionally, the UE may select the N3IWF due to a need for lawful interception of communications in a jurisdiction. Alternatively or additionally, the UE may select the N3IWF or the ePDG based on the availability of services, such as emergency services, voice services, and / or the like.

[0061] At 278, the UE 250 may perform access to the non-3GPP access network via a selected node, such as an N3IWF or an ePDG, according to some example embodiments.

[0062] 3A illustrates non-3GPP access network N3IWF node selection logic according to an example embodiment. The process illustrated in FIG. 3A may use configuration and selection information from objects such as object 100 and / or the like provisioned to the UE. In this manner, the UE 250 may select an access node, such as an N3IWF, an ePDG, or both, for non-3GPP access (which may be untrusted).

[0063] If the UE 250 is determined to be in its home country (Y at 302 and 304), the N3AN node configuration information (Y at 306) is provisioned with N3AN node selection information (Y at 308), and an entry for the HPLMN is available in the N3AN node selection information (Y at 310), the UE may construct an N3IWF FQDN at 316 based on the configured FQDN format of the HPLMN.

[0064] However, if the N3AN node selection information is not provisioned in the N3AN node configuration information (N at 308), or the N3AN node selection information is provisioned and an entry for the HPLMN is not available in the N3AN node selection information (Y at 308 and N at 310), the UE may proceed as follows. a) If a home N3IWF identifier is provisioned in the N3AN node configuration information (Y at 318), the UE may select an N3IWF using the configured IP address at 320, but if the configured IP address is not available (N at 322), the UE may construct an N3IWF FQDN using the configured FQDN at 324. b) If the home N3IWF identifier is not provisioned in the N3AN node configuration information (N at 318), the UE may construct an N3IWF FQDN based on the operator identifier FQDN format using the PLMN ID of the HPLMN at 326. c) If the N3AN node configuration information is not configured on the UE (N in 306) or the N3AN node configuration information is configured but empty, the UE may construct an N3IWF FQDN based on the operator identifier FQDN format using the PLMN ID of the HPLMN stored in the USIM at 326.

[0065] In some example embodiments, the UE may use DNS server functionality to resolve the constructed N3IWF FQDN to the IP address(es) of the N3IWF(s) at 399A. The UE may select an IP address of the N3IWF that has the same IP version as its local IP address.

[0066] However, if the UE is not in its home country (N at 304), the N3AN node selection information is provisioned in the N3AN node configuration information (Y at 328 and Y at 330), the UE is registered with the VPLMN via 3GPP access (Y at 332), and an entry for the VPLMN is available in the N3AN node selection information (Y at 334), the UE may construct an N3IWF FQDN based on the configured FQDN format of the VPLMN at 334. In some example embodiments, the UE may use a DNS server function to resolve the constructed N3IWF FQDN to the IP address(es) of the N3IWF(s). The UE may select an IP address of the N3IWF that has the same IP version as its local IP address.

[0067] However, if the UE is not in its home country (N at 304), N3AN node selection information is provisioned in the N3AN node configuration information (Y at 328 and Y at 330), the UE is registered in the VPLMN via 3GPP access (Y at 332), an entry for the VPLMN is not available in the N3AN node selection information (N at 334), and an "Any_PLMN" entry is available in the N3AN node selection information (Y at 338), the UE may construct an N3IWF FQDN based on the configured FQDN format of the "Any_PLMN" entry at 340. In some example embodiments, the UE may resolve the constructed N3IWF FQDN to the IP address(es) of the N3IWF(s) using a DNS server function at 399B. The UE may select an IP address of the N3IWF that has the same IP version as its local IP address.

[0068] Returning to the UE not being in its home country (N in 304), the UE may perform a DNS query in 350 to determine whether the visited country mandates the selection of an N3IWF in this country if at least one of the following is true: - The UE is not registered to a PLMN via a 3GPP access and the UE uses WLAN (N in 332). - N3AN node configuration information is not available (N in 328). - N3AN node selection information is not provisioned in the N3AN node configuration information (N at 330); and / or - The UE is registered to a VPLMN via 3GPP access (Y in 332), no entry for the VPLMN is available in the N3AN node selection information (N in 334) and no “Any_PLMN” entry is available in the N3AN node selection information (N in 338).

[0069] If selection of an N3IWF in the visited country is mandatory (Y at 351 and 352), and the UE is registered in a VPLMN via 3GPP access and the PLMN ID of the VPLMN is included in one of the returned DNS records (Y at 354), the UE may select an N3IWF in this VPLMN in 356 by constructing an N3IWF FQDN based on the operator identifier FQDN format using the PLMN ID of the VPLMN.

[0070] If the selection of an N3IWF in the visited country is mandatory (Y in 351 and 352) and the UE is not registered in a PLMN via a 3GPP access or the UE is registered in a VPLMN via a 3GPP access and the PLMN ID of the VPLMN is not included in any of the DNS records (N in 354), - if the N3AN node selection information is provisioned (Y in 358), the UE may select 360 an N3IWF from the PLMN included in the DNS response with the highest PLMN priority in the N3AN node selection information and construct an N3IWF FQDN based on the configured FQDN format of the PLMN entry; or - If the N3AN node selection information is not provisioned (N in 358) or the N3AN node selection information does not include any of the PLMNs in the DNS response, the selection of the PLMN depends on the UE implementation. For example, the UE may select an N3IWF from the PLMNs included in the DNS response in 399C and construct an N3IWF FQDN based on the operator identifier FQDN format using the PLMN ID of the PLMN.

[0071] As described above, the UE may use the DNS server function to resolve the constructed N3IWF FQDN to the IP address(es) of the N3IWF(s). The UE may select an IP address of the N3IWF that has the same IP version as its local IP address.

[0072] If the DNS response does not contain any records (N at 351), then selection of an N3IWF in the visited country is not mandatory at 362. If the N3AN node selection information is provisioned and includes one or more PLMNs in the visited country (Y at 364), then the UE may select an N3IWF from the PLMN with the highest PLMN priority in the N3AN node selection information at 360. If the N3AN node selection information is not provisioned or if the N3AN node selection information is provisioned and does not include any PLMNs in the visited country (N at 364), then the UE may select an N3IWF according to FIG. 3C as follows: - If a home N3IWF identifier is provisioned in the N3AN node configuration information (Y in 318 and 320), the UE selects an N3IWF using the configured IP address, or if the configured IP address is not available, in 399A, uses the configured FQDN and performs a DNS query to obtain the IP address(es) of the N3IWF(s). - If the home N3IWF identifier is not provisioned in the N3AN node configuration information (N in 318), the UE may construct an N3IWF FQDN based on the operator identifier FQDN format using the PLMN ID of the HPLMN in 326.

[0073] The UE may use a DNS server function to resolve the constructed N3IWF FQDN to the IP address(es) of the N3IWF(s) at 399A. The UE may select an IP address of the N3IWF that has the same IP version as its local IP address.

[0074] In some example embodiments, if no DNS response is received at 351, the UE may terminate the N3IWF selection procedure.

[0075] If the UE may select an IP address of the N3IWF, the UE may initiate an Internet key exchange, such as an Internet Key Exchange Security Association (SA), at 390, that may conform to RFC 5996, Internet Key Exchange Protocol Version 2 (IKEv2).

[0076] If the selection of an N3IWF in the HPLMN fails, and the selection of an N3IWF in the HPLMN is performed using the home N3IWF identifier configuration and there are further pre-configured N3IWFs in the HPLMN, the UE may repeat the security association tunnel establishment attempt using the next FQDN or IP address of the N3IWF in the HPLMN.

[0077] Upon receiving the DNS response containing one or more IP addresses of the N3IWF, the UE may select an IP address of an N3IWF that has the same IP version as its local IP address. If the UE does not receive a response to an IKE_SA_INIT request message sent to any of the received IP addresses of the selected N3IWF, the UE may repeat the N3IWF selection procedure, excluding the N3IWF from which the UE did not receive a response to an IKE_SA_INIT request message.

[0078] Figure 4 illustrates an example of a portion of a network 400 that includes a user equipment (UE) 250 having 3GPP access 290 and non-3GPP access 292 (untrusted in this example). The UE also includes an object 100 provided by the PCF 260. Figure 4 illustrates the connection of the UE 250 to the data network 268 after establishment of an IKEv2 signaling security association and a user plane security association at 390, which occurs after N3IWF selection.

[0079] 5 illustrates a management object (also referred to as object) 500 according to an example embodiment. Object 500 is similar to object 100, but further includes ePDG aspects.

[0080] The non-3GPP access node configuration information may include a home N3IWF identifier, a home ePDG identifier, and / or N3IWF selection information. If the non-3GPP access node configuration information is available in a managed object such as object 100 (see, for example, Figures 1 and 4), the non-3GPP access node (N3AN) node configuration information may be provisioned in the N3AN node of object 500. However, if the N3AN node configuration information is available in the USIM, the N3AN node configuration information may be provisioned in the EF file.

[0081] NodeSelectionInformation 120 may be associated with an N3AN_ePDG_preferred 544 leaf. The N3AN_node_preferred leaf may indicate whether N3IWF or ePDG is preferred for a given PLMN. Leaf 544 may have a value of 0 or 1. For example, a value of 0 may indicate that N3IWF is preferred and ePDG is not preferred (per 3GPP TS 24.502), and a value of 1 may indicate that N3IWF is not preferred and ePDG is preferred (per 3GPP TS 24.502). If leaf 544 is not provisioned in object 500, a default value of 0 may be applied.

[0082] The N3AN node 102 may be associated with a Home_ePDG_Identifier 530. The Home_ePDG_Identifier node 530 may act as a placeholder for a list of ePDGs in the UE's HPLMN. The node 530 may have an occurrence of one, a format of node, and support access types such as get and replace.

[0083] Home_ePDG_Identifier530 is <x>The UE may be associated with a node 532, which may serve as a placeholder for the FQDN or IP address configuration of the ePDG in the UE's HPLMN.

[0084] <x>Node 532 may be associated with an FQDN leaf 534. This leaf 534 may indicate an FQDN of an ePDG in the UE's HPLMN. Leaf 534 may have a value that is an FQDN(s). The value of leaf 534 may be based on the ePDG FQDN format for non-emergency bearer services defined in 3GPP TS 23.003. The absence of leaf 534 may indicate that no FQDN has been configured for this ePDG in the UE's HPLMN by the home operator.

[0085] <x>Node 532 may be associated with an IPAddr node 536. This node 536 may act as a placeholder for a list of IP addresses of ePDGs in the UE's HPLMN. The absence of this leaf indicates that no IP addresses have been configured for this ePDG in the UE's HPLMN by the home operator.

[0086] IPAddr node 536 is the node <x>Node 538 may act as a placeholder for the IP address of the ePDG in the UE's HPLMN.

[0087] <x>The node 538 may be associated with an AddressType leaf 540. The AddressType leaf 540 may indicate a type or version of an IP address format of the IP address of the ePDG in the UE's HPLMN. The leaf 540 may have a value indicating an IPv4 format or an IPv6 format.

[0088] <x>The node 538 may be associated with an Address leaf 542. The Address leaf may indicate an IP address of an ePDG IP address in the HPLMN of the UE. The leaf 542 may have a value indicating an IP address. If the AddressType leaf value of the same rule is equal to IPv4, the value of this leaf is an IPv4 address. If the AddressType leaf value of the same rule is equal to IPv6, the value of this leaf is an IPv6 address.

[0089] The N3AN node configuration information represented by object 500 may be provided to the UE by a network node such as the UE's Home Policy Control Function (PCF) or may be provided to the UE via USIM provisioning. If the UE is both 5G and 4G capable, the UE may receive the N3AN_node managed object 500 from the PCF and an Access Network Discovery and Selection Function (ANDSF) managed object from a 4G ANDSF server.

[0090] Figure 6A shows a portion of a 5G-HPLMN 690 and a portion of a 4G-HPLMN, although VPLMN(s) may be implemented similarly. Figure 6A shows a combined N3IWF ePDG node 610 and a combined UPF packet gateway (P-GW) node 620. Figure 6A shows a 3GPP access, MME 604, and a serving gateway 606.

[0091] 6A shows that the UE 250 may receive, at 666A, an N3AN_node management object 500 from the PCF 260. Alternatively or additionally, the UE 250 may receive, at 666B, a management object such as an ANDSF management object from the 4G ANDSF server 618.

[0092] 6B illustrates an example of a non-co-located deployment where the ePDG 677A is not co-located with the N3IWF 266 and the P-GW 677B is not co-located with the UPF 258. As shown in FIG. 6B, the UE 250 may receive an N3AN_node management object 500 from the PCF 260 at 666A. Alternatively or additionally, the UE 250 may receive a management object, such as an ANDSF management object, from the 4G ANDSF server 618 at 666B.

[0093] If the UE supports connectivity to both the N3IWF and the ePDG, logic for handling "normal" and "non-normal" use cases for interception-aware access node selection may be provided.

[0094] If the visited country mandates the selection of a Non-3GPP Access Network (N3AN) node in the visited country and the 5G N3IWF is preferred, the UE may perform a DNS NAPTR query using the visited country FQDN as follows: n3iwf.5gc.mcc <mcc>.visited-country.pub.3gppnetwork.org.

[0095] The result of this query is "n3iwf.5gc.mnc <mnc>.mcc <mcc>A set of one or more records containing a service instance name of the form ".pub.3gppnetwork.org" (where ( <mcc> , <mnc>) pair represents the PLMN Id of the visited country), the UE may determine that the visited country mandates the selection of N3IWF in the visited country. However, if the query result is "n3iwf.5gc.mnc <mnc>.mcc <mcc>If the visited country FQDN does not contain a service instance name of the form ".pub.3gppnetwork.org", the UE may determine that the visited country does not mandate the selection of an N3IWF in the visited country, and if the ePDG is preferred over an N3IWF, the UE may perform a DNS NAPTR query using the visited country FQDN of the ePDG.

[0096] 7A illustrates an example process for a UE supporting a connection with an N3IWF and an ePDG according to an example embodiment. The process of FIG. 7A may provide selection logic for selecting the N3IWF, the ePDG, or both.

[0097] If the UE 250 can support a connection with the N3IWF 266 and the ePDG 677A, the UE may use the N3AN ePDG preferred parameter 544 in the N3AN node selection information 120 to determine whether selection of the N3IWF or the ePDG is preferred in a given PLMN. If the N3AN ePDG preferred parameter 544 is not configured for a given PLMN, such as an HPLMN or VPLMN, the UE may assume that the N3IWF 266 is preferred for the given PLMN.

[0098] If the UE 250 is located in its home country (Y at 702 and 704), the N3AN node selection information 120 is provisioned in the N3AN node configuration information (Y at 706 and Y at 708), an entry for the HPLMN is available in the N3AN node selection information (Y at 710), and the N3AN ePDG preferred parameter 594 of the HPLMN entry indicates that the N3IWF is preferred (N at 712), the UE may select the N3IWF at 713B and then construct an N3IWF FQDN based on the configured FQDN format of the HPLMN at 718.

[0099] If the UE is located in its home country (Y at 702 and 704), N3AN node selection information has been provisioned in the N3AN node configuration information (Y at 706 and Y at 708), an entry for the HPLMN is available in the N3AN node selection information (Y at 710), and the N3AN ePDG preferred parameter in the HPLMN entry indicates that the ePDG is preferred (Y at 712), the UE may select an ePDG at 713A and then construct an ePDG FQDN based on the configured FQDN format of the HPLMN at 716.

[0100] If the UE is located in its home country (Y in 702 and 704) and the N3AN node selection information is not provisioned in the N3AN node configuration information (N in 708) or the N3AN node selection information 120 is provisioned (Y in 708) and an entry for the HPLMN is not available in the N3AN node selection information in 710 (N in 710), i) if a home N3IWF identifier is provisioned in the N3AN node configuration information (Y in 792A), the UE selects an N3IWF using the configured IP address, in 792D, or if the configured IP address is not available (N in 792C), constructs an N3IWF FQDN using the configured FQDN, in 792D; ii) if the home N3IWF identifier is not provisioned (N in 792A) but the home ePDG identifier is provisioned in the N3AN node configuration information (Y in 792E), the UE may construct an ePDG FQDN based on the operator identifier FQDN format using the PLMN ID of the HPLMN in 792H; iii) If neither the home N3IWF identifier (N at 792A) nor the home ePDG identifier (N at 792E) is provisioned in the N3AN node configuration information, the UE may construct an N3IWF FQDN based on the operator identifier FQDN format using the PLMN ID of the HPLMN at 792I.

[0101] If the UE is in its home country (Y in 702 and 704) and N3AN node configuration information is not configured on the UE or N3AN node configuration information is configured but empty, the UE may construct an N3IWF FQDN based on the operator identifier FQDN format using the PLMN ID of the HPLMN stored in the USIM. In the case of a USIM, the UE may operate in a similar manner with respect to access node selection as in the object download example described herein, except that it provisions the USIM (rather than receiving it from a PCF). In the case of a USIM, the USIM may retrieve the first EF (e.g., EF N3IWFId ) and a second EF file that contains the N3IWF selection information (for example, EF nodeSelection ) may be provisioned.

[0102] The UE may use a DNS server function to resolve the configured N3IWF FQDN or ePDG FQDN to the IP address(es) of the N3IWF(s) or ePDG(s) at 760A-E. The UE may select an IP address of the N3IWF or ePDG that has the same IP version as its local IP address.

[0103] If the UE 250 is not in the home country (N at 704) and the N3AN node selection information 129 is provisioned in the N3AN node configuration information (Y at 720), the UE registers with the VPLMN via 3GPP access (Y at 724); i) if an entry for the VPLMN is available in the N3AN node selection information (722) in 726 (see, for example, 124 in FIG. 5 which shows a list of PLMN entries that can be HPLMN or VPLMN); A) If the N3AN ePDG preferred parameter in 728 of the VPLMN entry indicates that the N3IWF is preferred (N in 728), the UE may select the N3IWF in 713E and construct an N3IWF FQDN based on the VPLMN's configured FQDN format in 780A; B) If the N3AN ePDG preferred parameter of the HPLMN entry indicates that the ePDG is preferred (Y at 728), the UE may select an ePDG at 713D and then construct an ePDG FQDN based on the configured FQDN format of the VPLMN at 780B; ii) If an entry for VPLMN is not available in the N3AN node selection information (N in 726) and an "Any_PLMN" entry is not available in the N3AN node selection information (Y in 730), A) If the N3AN ePDG preferred parameter of the “Any_PLMN” entry indicates that N3IWF is preferred (N in 732), the UE may select an N3IWF at 713F and then construct an N3IWF FQDN based on the configured FQDN format for “Any_PLMN” at 780C; B) If the N3AN ePDG preferred parameter of the “Any_PLMN” entry indicates that the ePDG is preferred (Y at 732), the UE may select an ePDG at 713D and then construct an ePDG FQDN based on the configured FQDN format for “Any_PLMN” at 780B.

[0104] The UE uses the DNS server function in 760C / 760E to resolve the constructed N3IWF FQDN or ePDG FQDN to the IP address(es) of the N3IWF(s) or ePDG(s). The UE may select an IP address of the N3IWF or ePDG that has the same IP version as its local IP address.

[0105] The UE may perform a DNS query at 740 to determine whether the visited country mandates the selection of an N3IWF in this country if the UE is not in its home country (N at 704) and one or more of the following are true: - The UE is not registered to a PLMN via a 3GPP access (N in 724) and the UE uses WLAN. - The N3AN node configuration information (N in 720) is not configured. - N3AN node selection information is not provisioned in the N3AN node configuration information (N in 722), or - The UE is registered to a VPLMN via 3GPP access (Y in 724), no entry for the VPLMN is available in the N3AN node selection information (N in 726) and no “Any_PLMN” entry is available in the N3AN node selection information (N in 730).

[0106] If the query result of 770 indicates at 772 that selection of an N3IWF in the visited country is mandatory, and the UE is registered in a VPLMN via 3GPP access and the PLMN ID of the VPLMN is included in one of the returned DNS records (Y at 774), the UE may select an N3IWF in this VPLMN at 780D by constructing an N3IWF FQDN based on the operator identifier FQDN format using the PLMN ID of the VPLMN.

[0107] If the query result of 770 indicates at 772 that selection of an N3IWF in the visited country is mandatory and either the UE is not registered in a PLMN via 3GPP access or the UE is registered in a VPLMN via 3GPP access and the PLMN ID of the VPLMN is not included in any of the DNS records (N at 774), the UE may select at 778 an N3IWF from the PLMN included in the DNS response with the highest PLMN priority in the N3AN node selection information, and if the N3AN node selection information is provisioned at 776, construct an N3IWF FQDN based on the configured FQDN format of the PLMN entry.

[0108] However, if the N3AN node selection information is not provisioned at 776 or the N3AN node selection information does not include any of the PLMNs in the DNS response, the selection of the PLMN at 779 depends on the UE implementation. Thus, the UE may select an N3IWF from the PLMNs included in the DNS response and construct an N3IWF FQDN based on the operator identifier FQDN format using the PLMN ID of the PLMN.

[0109] As described above, the UE may use the DNS server function to resolve the constructed N3IWF FQDN to the IP address(es) of the N3IWF(s). The UE may select an IP address of the N3IWF that has the same IP version as its local IP address.

[0110] If the DNS response does not contain any records (N at 770), the selection of an N3IWF in the visited country is not mandatory (794), and the N3AN node selection information is provisioned and includes one or more PLMNs in the visited country (Y at 796), the UE may select an N3IWF from the PLMN with the highest PLMN priority in the N3AN node selection information at 778.

[0111] However, if the N3AN node selection information is not provisioned (N in 796), or if the N3AN node selection information is provisioned and does not include PLMNs in the visited country, the UE may select an N3IWF in the HPLMN according to FIG. 7C.

[0112] If no DNS response is received in response to the query at 7490, the UE may terminate the N3IWF selection procedure.

[0113] Once the IP address of the N3IWF or ePDG selected by the UE is determined, the UE may, if an N3IWF is selected: i) be able to initiate an IKEv2 SA establishment procedure; ii) if the selection of the N3IWF in the HPLMN fails, and the selection of the N3IWF in the HPLMN is performed using the home N3IWF identifier configuration and there are further pre-configured N3IWFs in the HPLMN, the UE may repeat the tunnel establishment attempt using the next FQDN or IP address(es) of the N3IWF in the HPLMN; iii) If the UE does not receive a response to the IKE_SA_INIT request message sent to any of the received IP addresses of the selected N3IWF, the UE may repeat the N3AN node selection, excluding the N3IWF from which the UE did not receive a response to the IKE_SA_INIT request message.

[0114] However, if ePDG is selected, the UE i) may initiate 4G tunnel establishment; ii) if the selection of an ePDG in the HPLMN fails, the selection of an ePDG in the HPLMN is performed using a home ePDG identifier configuration, and there are further pre-configured ePDGs in the HPLMN, the UE may repeat the tunnel establishment attempt using the next FQDN or IP address(es) of the ePDG in the HPLMN; iii) If the UE does not receive a response to the IKE_SA_INIT request message sent to any of the received IP addresses of the selected ePDGs, the UE may repeat the N3AN node selection, excluding those ePDGs from which the UE did not receive a response to the IKE_SA_INIT request message.

[0115] Figure 8A illustrates the connection of a UE to a data network 268 after establishment of IKEv2 signaling SA and user plane SA following N3IWF selection or after IKEv2 tunnel establishment following ePDG selection. Figure 8A illustrates a co-located N3IWF and ePDG 610, while Figure 8B illustrates a separate ePDG and P-GW. The PLMN-5G and PLMN-4G may be the UE's Home PLMN (HPLMN) or Visited PLMN (VPLMN), and the PLMN-5G and PLMN-4G may belong to the same operator or different operators.

[0116] 9 illustrates a block diagram of a network node 900 according to an example embodiment. The network node 900 may be configured to handle access node selection to the HPLMN and / or VPLMN as disclosed herein. The node 900 may also provide information to the UE, such as management objects 100, 500, and / or the like. For example, the network node 900 may be incorporated into one or more of a PCF, an ANDSF server, and / or the like.

[0117] The network node 900 may include a network interface 902, a processor 920, a memory 904, and a managed object store or generator 950 for providing managed objects to a UE to enable access node selection according to certain example embodiments. The network interface 902 may include a wired and / or wireless transceiver to enable access to other nodes, the Internet, and / or other nodes. The memory 904 may comprise volatile and / or non-volatile memory including program code that, when executed by the at least one processor 920, provides, among other things, the processes disclosed herein, including the processes in Figures 3A, 3B, 3C, 6A, 6B, 7A, 7B, 7C, and / or the like. For example, the node 900 may be implemented to provide a PCF, an N3IWF, an ePDG, and / or the like.

[0118] FIG. 10 illustrates a block diagram of an apparatus 10 according to an example embodiment.

[0119] Apparatus 10 may represent a user equipment, such as user equipment 250.

[0120] The device 10 may include at least one antenna 12 in communication with a transmitter 14 and a receiver 16. Alternatively, the transmitting and receiving antennas may be separate. The device 10 may also include a processor 20 configured to provide signals to the transmitter and receive signals from the receiver and control the functions of the device. The processor 20 may be configured to control the functions of the transmitter and receiver by causing control signaling via electrical leads to the transmitter and receiver. Similarly, the processor 20 may be configured to control other elements of the device 10 by causing control signaling via electrical leads connecting the processor 20 to other elements, such as a display or memory. Processor 20 may be embodied in a variety of ways, including, for example, as circuitry, at least one processing core, one or more microprocessors with digital signal processor(s), one or more processor(s) without digital signal processor(s), one or more co-processors, one or more multi-core processors, one or more controllers, processing circuitry, one or more computers, various other processing elements including integrated circuits (e.g., application specific integrated circuits (ASICs), field programmable gate arrays (FPGAs), and / or the like), or some combination thereof. Thus, although shown as a single processor in FIG. 10, in some exemplary embodiments processor 20 may comprise multiple processors or processing cores.

[0121] The device 10 may be capable of operating with one or more air interface standards, communication protocols, modulation types, access types, and / or the like. Signals transmitted and received by the processor 20 may include signaling information according to an applicable cellular system air interface standard, and / or any number of different wireline or wireless networking technologies, such as, but not limited to, Wi-Fi, wireless local access network (WLAN) technologies, such as, for example, Institute of Electrical and Electronics Engineers (IEEE) 802.11, 802.16, 802.3, ADSL, DOCSIS, and / or the like. Additionally, these signals may include speech data, user generated data, user requested data, and / or the like.

[0122] For example, device 10 and / or a cellular modem therein may be capable of operating according to various first generation (1G), second generation (2G or 2.5G), third generation (3G), fourth generation (4G), fifth generation (5G), Internet Protocol Multimedia Subsystem (IMS) communications protocols (e.g., session initiation protocol (SIP)), and / or the like. For example, device 10 may be capable of operating according to 2G wireless communications protocols IS-136, Time Division Multiple Access (TDMA), GSM, IS-95, Code Division Multiple Access (CDMA), and / or the like. Additionally, for example, device 10 may be capable of operating according to 2.5G wireless communications protocols General Packet Radio Service (GPRS), Enhanced Data GSM Environment (EDGE), and / or the like. Further, for example, device 10 may be capable of operating according to a 3G wireless communications protocol, such as Universal Mobile Telecommunications System (UMTS), Code Division Multiple Access 2000 (CDMA2000), WCDMA, Time Division-Synchronous Code Division Multiple Access (TD-SCDMA), and / or the like.Apparatus 10 may additionally be capable of operating according to a 3.9G wireless communication protocol, e.g., Long Term Evolution (LTE), Evolved Universal Terrestrial Radio Access Network (E-UTRAN), and / or the like. Additionally, for example, apparatus 10 may be capable of operating according to a 4G wireless communication protocol, e.g., LTE Advanced, 5G, and / or the like, as well as similar wireless communication protocols that may be developed in the future.

[0123] It will be understood that the processor 20 may include circuitry for implementing the audio / video and logic functions of the device 10. For example, the processor 20 may comprise a digital signal processor device, a microprocessor device, an analog-to-digital converter, a digital-to-analog converter, and / or the like. The control and signal processing functions of the device 10 may be allocated among these devices according to their respective capabilities. The processor 20 may additionally comprise an internal voice coder (VC) 20a, an internal data modem (DM) 20b, and / or the like. Furthermore, the processor 20 may include functionality for operating one or more software programs, which may be stored in memory. In general, the processor 20 and the stored software instructions may be configured to cause the device 10 to perform actions. For example, the processor 20 may be capable of operating a connectivity program, such as a web browser. The connectivity program may enable device 10 to send and receive web content, such as location-based content, according to protocols such as wireless application protocol WAP, hypertext transfer protocol HTTP, and / or the like.

[0124] The device 10 may also include a user interface including earphone or speaker 24, ringer 22, microphone 26, display 28, a user input interface, and / or the like, which may be operatively coupled to the processor 20. The display 28 may include a touch-sensitive display, as described above, where a user may touch and / or gesture to make selections, input values, and / or the like. The processor 20 may also include user interface circuitry configured to control at least some functionality of one or more elements of the user interface, such as the speaker 24, ringer 22, microphone 26, display 28, and / or the like. The processor 20 and / or user interface circuitry comprising the processor 20 may be configured to control one or more functionality of one or more elements of the user interface via computer program instructions, such as software and / or firmware, stored in memory accessible to the processor 20, such as volatile memory 40, non-volatile memory 42, and / or the like. The device 10 may include a battery for powering various circuitry associated with a mobile terminal, such as a circuit that provides mechanical vibration as a detectable output. The user input interface may include devices that allow the device 20 to receive data, such as a keypad 30 (which may be a virtual keyboard presented on the display 28 or an externally coupled keyboard) and / or other input devices.

[0125] As shown in FIG. 10, the device 10 may also include one or more mechanisms for sharing and / or obtaining data. For example, the device 10 may include a short-range radio frequency (RF) transceiver and / or interrogator 64, whereby data may be shared with and / or obtained from electronic devices according to RF technology. The device 10 may include other short-range transceivers, such as an infrared (IR) transceiver 66, a Bluetooth transceiver 68 operating using Bluetooth wireless technology, a wireless universal serial bus (USB) transceiver 70, a Bluetooth Low Energy transceiver, a ZigBee transceiver, an ANT transceiver, a cellular device-to-device transceiver, a wireless local area link transceiver, and / or any other short-range wireless technology. The device 10, particularly the short-range transceiver, may be capable of transmitting data to and / or receiving data from electronic devices that are in the vicinity of the device, for example within 10 meters. The apparatus 10, which includes a Wi-Fi or wireless local area networking modem, may also be capable of transmitting and / or receiving data to and from electronic devices according to various wireless networking technologies, e.g., 6LoWpan, Wi-Fi, Wi-Fi low power, WLAN technologies, e.g., IEEE 802.11 technologies, IEEE 802.15 technologies, IEEE 802.16 technologies, and / or the like.

[0126] The device 10 may include memory, such as a subscriber identity module (SIM) 38, a removable user identity module (R-UIM), an eUICC, a UICC, and / or the like, which may store information elements related to a mobile subscriber. In addition to the SIM, the device 10 may include other removable and / or fixed memory. The device 10 may include volatile memory 40 and / or non-volatile memory 42. For example, the volatile memory 40 may include random access memory (RAM), such as dynamic and / or static RAM, on-chip or off-chip cache memory, and / or the like. The non-volatile memory 42, which may be internal and / or removable, may include, for example, read-only memory, flash memory, magnetic storage devices, such as hard disks, floppy disk drives, magnetic tapes, optical disk drives and / or media, non-volatile random access memory (NVRAM), and / or the like. Like the volatile memory 40, the non-volatile memory 42 may include a cache area for temporary storage of data. At least a portion of the volatile and / or non-volatile memory may be embedded in the processor 20. The memory may store one or more software programs, instructions, information, data, and / or the like, which may be used by the device to perform the operations disclosed herein, including obtaining information enabling selection of an access node for non-3GPP access, querying a server to determine whether a country in which the access node is located requires lawful interception of communications, and selecting an access node for non-3GPP access based at least on the obtained information and / or the response to the query.

[0127] The memory may include an identifier, such as an international mobile equipment identification (IMEI) code, capable of uniquely identifying device 10. The memory may include an identifier, such as an international mobile equipment identification (IMEI) code, capable of uniquely identifying device 10. In an exemplary embodiment, processor 20 may be configured with computer code stored in memory 40 and / or 42 for obtaining information enabling selection of an access node for non-3GPP access, querying a server to determine whether a country in which the access node is located requires lawful interception of communications, and selecting an access node for non-3GPP access based at least on the obtained information and / or a response to the query.

[0128] Some of the embodiments disclosed herein may be implemented in software, hardware, application logic, or a combination of software, hardware, and application logic. The software, application logic, and / or hardware may reside, for example, on memory 40, controller 20, or electronic components. In some exemplary embodiments, the application logic, software, or instruction set is maintained on any one of a variety of conventional computer-readable media. In the context of this document, a "computer-readable medium" may be any non-transitory medium that can contain, store, communicate, propagate, or transport instructions for use by or in connection with an instruction execution system, apparatus, or device, such as a computer or data processor circuit, and in the example shown in FIG. 6, the computer-readable medium may comprise a non-transitory computer-readable storage medium, which may be any medium that can contain or store instructions for use by or in connection with an instruction execution system, apparatus, or device, such as a computer.

[0129] Without limiting in any manner the scope, interpretation, or application of the following claims, a technical effect of one or more of the example embodiments disclosed herein may be improved selection of access nodes.

[0130] The subject matter described herein may be embodied in systems, apparatus, methods, and / or articles, depending on the desired configuration. For example, the base station and user equipment (or one or more components therein) and / or the processes described herein may be implemented using one or more of a processor executing program code, an application specific integrated circuit (ASIC), a digital signal processor (DSP), an embedded processor, a field programmable gate array (FPGA), and / or combinations thereof. These various implementations may include implementations in one or more computer programs executable and / or interpretable on a programmable system including at least one programmable processor, which may be dedicated or general purpose, coupled to receive data and instructions from and transmit data and instructions to a storage system, at least one input device, and at least one output device. These computer programs (aka programs, software, software applications, applications, components, program code, or code) include machine instructions for a programmable processor and may be implemented in a high level procedural and / or object oriented programming language and / or in an assembly / machine language. As used herein, the term "computer-readable medium" refers to any computer program product, machine-readable medium, computer-readable storage medium, apparatus and / or device (e.g., magnetic disks, optical disks, memory, programmable logic devices (PLDs)) used to provide machine instructions and / or data to a programmable processor, including a machine-readable medium that receives machine instructions. Similarly, systems are described herein that may include a processor and a memory coupled to the processor. The memory may include one or more programs that cause the processor to perform one or more operations described herein.

[0131] Although a few variations have been described in detail above, other modifications or additions are possible. In particular, further features and / or variations may be provided in addition to those described herein. The above implementations may also be directed to various combinations and subcombinations of the disclosed features and / or combinations and subcombinations of some of the further features disclosed above. Other embodiments may be within the scope of the following claims.

[0132] If desired, the various functions discussed herein may be performed in different orders and / or simultaneously with each other. Furthermore, if desired, one or more of the above functions may be optional or combined. Various aspects of some of the embodiments are set forth in independent claims, while other aspects of some of the embodiments have other combinations of features from the described embodiments and / or dependent claims with features of the independent claims, and not just combinations explicitly set forth in the claims. It is also noted herein that while the above describes exemplary embodiments, these descriptions should not be construed in a limiting sense. Rather, there are several variations and modifications that may be made without departing from the scope of some of the embodiments as defined in the appended claims. Other embodiments may be within the scope of the following claims. The term "based on" includes "based at least on". The use of the phrase "such as" means "for example, such as" unless otherwise specified.

[0133] The original claims of the present application (Patent Application No. 2020-552398) included the following exemplary embodiments. [Example embodiment 1] means for obtaining information enabling selection of an access node for access; means for querying a server to determine said access nodes; means for selecting the access node for the access based at least on the obtained information and / or a response to the query; wherein the access is at least one of a non-3GPP access and a non-cellular access. [Exemplary embodiment 2] 2. The apparatus of example embodiment 1, further comprising: means for selecting between a first access node having an interconnection function, the interconnection function being at least one of a non-3GPP interconnection function and a non-cellular interconnection function, and a second access node having an evolved packet data gateway. [Exemplary embodiment 3] The apparatus of exemplary embodiment 1 or 2, wherein the information is obtained from a policy control function via an access management function, an N2 interface, and / or an N1 interface. Exemplary embodiment 4 The apparatus of any one of exemplary embodiments 1 to 3, wherein the information is obtained from a universal subscriber identity module. [Illustrative embodiment 5] The apparatus of any one of exemplary embodiments 1 to 4, wherein the information includes identification information of at least one interconnection function that is at least one of a non-3GPP interconnection function and a non-cellular interconnection function, a preference for selecting an interconnection function that is at least one of a non-3GPP interconnection function and a non-cellular interconnection function, and / or preference information for selecting an evolved packet data gateway. [Example 6] means for receiving a response to the query; The apparatus of any one of exemplary embodiments 1 to 5, wherein the response includes an indication of whether the country in which the access network providing the access is located requires lawful interception of communications, and / or a list of one or more interconnection function nodes, the interconnection function nodes being at least one of non-3GPP interconnection functions and non-cellular interconnection functions, that support lawful interception of the communications. Exemplary Embodiment 7 7. The apparatus of claim 1, further comprising: a first access node that is configured to access a first access node of the first access node and a second access node that is configured to access the first access node. Exemplary Embodiment 8 The apparatus of any one of exemplary embodiments 1 to 7, wherein the access node is at least one of a non-cellular interconnection function and a gateway. Exemplary Embodiment 9 obtaining information enabling selection of an access node for access; querying a server to determine said access nodes; selecting the access node for the access based at least on the obtained information and / or a response to the query; Including, The method, wherein the access is at least one of a non-3GPP access and a non-cellular access. Exemplary Embodiment 10 10. The method of example embodiment 9, wherein the selecting is performed between a first access node having an interconnect function that is at least one of a non-3GPP interconnect function and a non-cellular interconnect function, and a second access node having an evolved packet data gateway. [Exemplary embodiment 11] The method according to exemplary embodiment 9 or 10, wherein the information is obtained from a policy control function via an access management function, an N2 interface, and / or an N1 interface. Exemplary Embodiment 12 The method according to any one of exemplary embodiments 9 to 11, wherein the information is obtained from a universal subscriber identity module. [Exemplary embodiment 13] The method according to any one of exemplary embodiments 9 to 12, wherein the information includes identification information of at least one interconnection function that is at least one of a non-3GPP interconnection function and a non-cellular interconnection function, a preference for selecting an interconnection function that is at least one of a non-3GPP interconnection function and a non-cellular interconnection function, and / or preference information for selecting an evolved packet data gateway. Exemplary Embodiment 14 receiving a response to said query; 14. The method of any one of exemplary embodiments 9 to 13, further comprising: wherein the response includes an indication of whether a country in which an access network providing the access is located requires lawful interception of communications, and / or a list of one or more interconnection function nodes, the interconnection function nodes being at least one of non-3GPP interconnection functions and non-cellular interconnection functions, that support lawful interception of the communications. Exemplary Embodiment 15 performing said access to an access network that provides said access via said selected access node; The method of any one of exemplary embodiments 9 to 14, further comprising: Exemplary Embodiment 16 An apparatus comprising a processing means and a memory means, the memory means storing program instructions that, when executed by the processing means, are configured to cause the apparatus to perform a method according to any one of exemplary embodiments 9 to 15. Exemplary Embodiment 17 A computer program comprising program instructions configured, when executed by a processing means of an apparatus, to cause said apparatus to perform the method according to any one of exemplary embodiments 9 to 15. Exemplary Embodiment 18 means for obtaining information enabling selection of an access node for non-3GPP access; means for querying a server to determine whether the country in which said access node is located requires lawful interception of communications; means for selecting the access node for the non-3GPP access based at least on the obtained information and / or a response to the query; An apparatus comprising: Exemplary Embodiment 19 Obtaining information enabling selection of an access node for a non-3GPP access; Querying a server to determine whether the country in which the access node is located requires lawful interception of communications; selecting the access node for the non-3GPP access based at least on the obtained information and / or a response to the query; A method comprising:< / mcc> < / mnc> < / mnc> < / mcc> < / mcc> < / mnc> < / mcc> < / x> < / x> < / x> < / x> < / x> < / x> < / mcc> < / mnc> < / mcc> < / mnc> < / mcc> < / x> < / x> < / plmn> < / x> < / x> < / x> < / x> < / x> < / x> < / x> < / x> < / x> < / x> < / x>

Claims

1. 1. An apparatus comprising at least one processor and at least one memory storing computer program instructions, the computer program instructions, when executed by the at least one processor, causing the apparatus to perform at least: configured to cause provisioning information to be obtained from a home network to enable selection of an access node for access between the first access node and the second access node; wherein the first access node has at least one of a non-3GPP interconnection function or a non-cellular interconnection function for accessing a first core network via a non-3GPP access, and the second access node has an evolved packet data gateway for accessing a second core network via a non-3GPP access; The provisioning information includes at least non-3GPP access network node configuration information for enabling selection of the access node for the access, an Internet Protocol (IP) address of the first access node having the same IP version as a local IP address of the device, and the non-3GPP access network node configuration information includes: access node selection information having at least access node type preference information for a particular access node type among a plurality of access node types for a particular PLMN and a configuration in Fully Qualified Domain Name (FQDN) format of a list of PLMNs; A Home Network Non-3GPP Interworking Function (N3IWF) access node configuration of the HPLMN; - Home Network Evolved Packet Data Gateway Access Node (ePDG) configuration of the HPLMN; having The computer program instructions, when executed by the at least one processor, further cause the apparatus to: determining configuration information to be used to select an access node of the network to be accessed; selecting the access node for the access, the access being at least one of a non-3GPP access or a non-cellular access, based on at least one of the provisioning information or the determined configuration information; connecting the selected access node to access the first core network or the second core network; It is configured as follows: the first core network is accessed when the first access node is selected, and the second core network is accessed when the second access node is selected; said device is not located in its home country; To determine the configuration information, the device is adapted to query a server to determine whether a country in which the access node is located requires lawful interception, the response including a list of one or more interconnection function nodes that support the lawful interception of communications, the interconnection function nodes being at least one of a non-3GPP interconnection function or a non-cellular interconnection function. Device.

2. The apparatus of claim 1 , wherein the apparatus is adapted to support only one access node type, and home network access node configuration information of an HPLMN corresponding to the supported access node type is used to select an access node.

3. 3. The apparatus of claim 2, the access node type is a non-3GPP interworking function (N3IWF), and a home network non-3GPP interworking function access node configuration of the HPLMN is used to obtain N3IWF address information; the device connects to a selected N3IWF for access to a core network; Device.

4. 3. The apparatus of claim 2, The type of the access node is an evolved packet data gateway (ePDG), and a home network evolved packet data gateway access node configuration of the HPLMN is used to obtain ePDG address information; the device connects to a selected ePDG for access to a core network; Device.

5. 4. The apparatus of claim 3, The home N3IWF identifier contains only the FQDN instead of the IP address, the device is further adapted to initiate a DNS query to obtain an IP address of the N3IWF by constructing an N3IWF FQDN based on the configured FQDN of the home N3IWF identifier. Device.

6. 4. The apparatus of claim 3, The home N3IWF identifier information is not provisioned in the non-3GPP access network node configuration information, The device is further adapted to use the PLMN ID of the HPLMN stored in the universal subscriber identity module and based on the FQDN format of the HPLMN set in the access node selection information, construct an N3IWF FQDN and initiate a DNS query to obtain an IP address of the N3IWF. Device.

7. 2. The apparatus of claim 1, adapted to support only one access node type, and wherein access node selection information of a visited PLMN is used to obtain access node address information.

8. 2. The apparatus of claim 1, wherein the access node is adapted to support a plurality of access node types, and access node selection information of a visited PLMN is used to obtain the access node type preference information.

9. 2. The apparatus of claim 1, The access node is configured to support only one access node type, and access node configuration information of the HPLMN is not configured; The apparatus is further adapted to select a home N3 IWF node for access to a core network. Device.

10. 2. The apparatus of claim 1, The access node selection information is configured to support only one access node type, and does not include the access node selection information; The device is further adapted to perform a DNS query to determine whether selection of an N3IWF is mandatory. Device.

11. 2. The apparatus of claim 1, Supports only one access node type, uses WLAN, and is not registered to a PLMN via 3GPP access; The device is further adapted to perform a DNS query to determine whether selection of an N3IWF is mandatory. Device.

12. 2. The apparatus of claim 1, The access node is adapted to support a plurality of access node types, and does not have a configuration of the access node selection information; The device is further adapted to perform a DNS query to determine whether selection of an N3IWF is mandatory. Device.

13. 2. The apparatus of claim 1, Supports multiple access node types as an access node, uses WLAN, and is not registered to a PLMN via 3GPP access; The device is further adapted to perform a DNS query to determine whether selection of an N3IWF is mandatory. Device.

14. 9. An apparatus according to claim 8, comprising: the access node selection information of the visited PLMN indicates a preference for one access node type, and the device is further configured to construct an FQDN based on an FQDN format of the visited PLMN set in the access node selection information and using a PLMNID of the visited PLMN, and initiate a DNS query to obtain IP address information of the preferred access node type. Device.

15. 1. A method comprising: The method includes: a user equipment obtaining provisioning information from a home network of the user equipment so as to select an access node for access between a first access node and a second access node; wherein the first access node has at least one of a non-3GPP interconnection function or a non-cellular interconnection function for accessing a first core network via a non-3GPP access, and the second access node has an evolved packet data gateway for accessing a second core network via a non-3GPP access; The provisioning information includes at least non-3GPP access network node configuration information for enabling selection of the access node for the access, wherein an Internet Protocol (IP) address of the first access node has the same IP version as a local IP address of the user equipment, and the non-3GPP access network node configuration information includes: access node selection information having at least access node type preference information for a particular access node type among a plurality of access node types for a particular PLMN and a configuration in Fully Qualified Domain Name (FQDN) format of a list of PLMNs; A Home Network Non-3GPP Interworking Function (N3IWF) access node configuration of the HPLMN; - Home Network Evolved Packet Data Gateway Access Node (ePDG) configuration of the HPLMN; having The method further comprises: determining configuration information for use in selecting an access node of the network to access; selecting the access node for the access, the access being at least one of a non-3GPP access or a non-cellular access, based on at least one of the provisioning information or the determined configuration information; connecting to the selected access node to access the first core network or the second core network; Including, accessing the first core network when the first access node is selected, and accessing the second core network when the second access node is selected; the user equipment is not located in its home country; To determine the configuration information, the method includes querying a server to determine whether a country in which the access node is located requires lawful interception, the response including a list of one or more interconnection function nodes that support the lawful interception of communications, the interconnection function nodes being at least one of a non-3GPP interconnection function or a non-cellular interconnection function. method.

16. 16. The method of claim 15, the access node type is a non-3GPP interworking function (N3IWF), and a home network non-3GPP interworking function access node configuration of the HPLMN is used to obtain N3IWF address information; The user equipment connects to a selected N3IWF for access to a core network.

17. 16. The method of claim 15, The type of the access node is an evolved packet data gateway (ePDG), and a home network evolved packet data gateway access node configuration of the HPLMN is used to obtain ePDG address information; The method, wherein the user equipment connects to a selected ePDG for access to a core network.

18. The method of claim 15 , wherein the user equipment is not located in its home country.

19. 20. The method of claim 18, wherein the user equipment supports multiple access node types for the access node, and access node selection information of a visited PLMN is used to obtain the access node type preference information.

20. 20. The method of claim 18, wherein the user equipment is adapted to support only one access node type, and access node selection information of a visited PLMN is used to obtain access node address information.

21. the user equipment supports only one access node type and has no configuration of the access node selection information; The user equipment is further configured to perform a DNS query to determine whether selection of an N3IWF is mandatory.

20. The method of claim 18.

22. the user equipment supports only one access node type, uses WLAN and is not registered to a PLMN via a 3GPP access; The user equipment is further configured to perform a DNS query to determine whether selection of an N3IWF is mandatory.

20. The method of claim 18.

23. A computer program configured, when executed by a processing means of an apparatus, to cause said apparatus to perform a method according to any of claims 18 to 22.

24. 1. An apparatus comprising at least one processor and at least one memory storing computer program instructions, the computer program instructions, when executed by the at least one processor, causing the apparatus to perform at least: configured to cause the user equipment to be provided with provisioning information from a home network so as to enable the user equipment to select an access node for access between the first access node and the second access node; wherein the first access node has at least one of a non-3GPP interconnection function or a non-cellular interconnection function for accessing a first core network via a non-3GPP access, and the second access node has an evolved packet data gateway for accessing a second core network via a non-3GPP access; The provisioning information includes at least non-3GPP access network node configuration information for enabling selection of the access node for the access, wherein an Internet Protocol (IP) address of the first access node has the same IP version as a local IP address of the user equipment, and the non-3GPP access network node configuration information includes: access node selection information having at least access node type preference information for a particular access node type among a plurality of access node types for a particular PLMN and a configuration in Fully Qualified Domain Name (FQDN) format of a list of PLMNs; - a multiple home network access node configuration; each access node configuration representing configuration information for a particular access node type among a plurality of different access node types supported by the HPLMN; The computer program instructions, when executed by the at least one processor, further cause the apparatus to: receiving a query as to whether the country in which the access node is located requires lawful interception; providing a response to said query; wherein the response includes a list of one or more interconnection function nodes that support lawful interception of communications, the interconnection function nodes being at least one of a non-3GPP interconnection function or a non-cellular interconnection function.

25. 1. A method comprising: providing provisioning information from a home network to a user equipment so as to enable the user equipment to select an access node for access between a first access node and a second access node; wherein the first access node has at least one of a non-3GPP interconnection function or a non-cellular interconnection function for accessing a first core network via a non-3GPP access, and the second access node has an evolved packet data gateway for accessing a second core network via a non-3GPP access; The provisioning information includes at least non-3GPP access network node configuration information for enabling selection of the access node for the access, wherein an Internet Protocol (IP) address of the first access node has the same IP version as a local IP address of the user equipment, and the non-3GPP access network node configuration information includes: access node selection information having at least access node type preference information for a particular access node type among a plurality of access node types for a particular PLMN and a configuration in Fully Qualified Domain Name (FQDN) format of a list of PLMNs; - a multiple home network access node configuration; each access node configuration representing configuration information for a particular access node type among a plurality of different access node types supported by the HPLMN; The method further comprises: receiving a query as to whether the country in which the access node is located requires lawful interception; providing a response to said query; wherein the response includes a list of one or more interconnection function nodes that support lawful interception of communications, the interconnection function nodes being at least one of a non-3GPP interconnection function or a non-cellular interconnection function.

Images