Method and apparatus for searching and selecting a server for terminal authentication and subscriber data transfer - Patents.com

Abstract

The present invention relates to a communication method and system for fusing a 5G communication system for supporting higher data rates after the 4G system with IoT technology. The present invention can be applied to intelligent services (e.g., smart homes, smart buildings, smart cities, smart cars, connected cars, healthcare, digital training, retail, security, safety-related services, etc.) based on 5G communication technology and IoT-related technology. A terminal in a wireless communication system according to an embodiment of the present invention selects a server of a stand-alone non-public network (SNPN) during onboarding.

Description

[Technical field]

[0001] The present invention relates to a communication system, and more particularly to a method for searching and selecting a server for terminal authentication and subscriber information data transfer in order for a terminal to receive subscriber information in a non-public network (NPN). [Background technology]

[0002] Since the commercialization of 4G (4th generation) communication systems, efforts have been made to develop improved 5G (5th generation) or pre-5G (pre-5G) communication systems to meet the increasing demand for wireless data traffic. For this reason, 5G communication systems or pre-5G communication systems are also called Beyond 4G Network communication systems or systems after LTE (Long Term Evolution) systems.

[0003] It is considered that the 5G communication system will be implemented in the ultra-high frequency (mmWave) band (e.g., 60 GHz band, etc.) to achieve a higher data rate. In order to mitigate the propagation loss of radio waves in the ultra-high frequency band and increase the transmission distance of radio waves, beamforming, massive multiple-input multiple-output (massive MIMO), full dimensional MIMO (FD-MIMO), array antenna, analog beam forming, and large scale antenna technologies are being discussed for the 5G communication system.

[0004] In addition, to improve the system network, technologies being developed for the 5G communication system include advanced small cells, cloud Radio Access Networks (cloud RAN), ultra-dense networks, device to device communication (D2D), wireless backhaul, moving networks, cooperative communication, CoMP (Coordinated Multi-Points), and receiver interference cancellation.

[0005] In addition, for the 5G system, advanced coding modulation (ACM) such as FQAM (Hybrid Frequency Shift Keying and Quadrature Amplitude Modulation) and SWSC (Sliding Window Superposition Coding) and advanced access technologies such as FBMC (Filter Bank Multi Carrier), NOMA (Non Orthogonal Multiple Access), and SCMA (Sparse Code Multiple Access) are being developed.

[0006] In the 5G system, support for various services for the existing 4G system is being considered. For example, the most representative services may include enhanced mobile broadband (eMBB), ultra-reliable and low latency communication (URLLC), massive machine type communication (mMTC), evolved multimedia broadcast / multicast service (eMBMS), etc. A system providing the URLLC service may be called a URLLC system, and a system providing the eMBB service may be called an eMBB system. Furthermore, the terms service and system are used interchangeably.

[0007] Among these, URLLC service is a new service being considered for 5G system, which is different from conventional 4G system and requires ultra-high reliability (e.g., packet error rate of about 10-5) and low latency (e.g., about 0.5 msec) to be satisfied compared to other services. In order to meet these strict requirements, URLLC service may need to apply a transmission time interval (TTI) shorter than eMBB service, and various operation methods using them are being considered.

[0008] Meanwhile, the Internet is evolving from a human-centered connection network where humans generate and consume information to an IoT (Internet of Things) network where information is exchanged and processed between distributed components such as things. IoE (Internet of Everything) technology, which combines IoT technology with big data processing technology through connections to cloud servers, is also emerging. To realize IoT, technological elements such as sensing technology, wired and wireless communication, network infrastructure, service interface technology, and security technology are required, so recently, technologies such as sensor networks for connecting things, M2M (Machine to Machine) communication, and MTC (Machine Type Communication) are being researched.

[0009] In an IoT environment, intelligent IT (Internet technology) services that create new value in human life can be provided by collecting and analyzing data generated between connected things. Through the fusion and combination of existing IT (Information technology) with various industries, IoT has the potential to be applied to various fields such as smart homes, smart buildings, smart cities, smart cars or connected cars, smart grids, healthcare, smart appliances, and advanced medical services.

[0010] Accordingly, various attempts are being made to apply 5G communication systems to IoT networks. For example, technologies such as sensor networks, machine-to-machine (M2M), and machine-type communication (MTC) are being embodied by 5G communication technologies such as beamforming, MIMO, and array antennas. The application of cloud radio access network (cloud RAN) as the aforementioned big data processing technology is also considered as an example of the fusion of 5G technology and IoT technology. In accordance with the above explanation and the development of mobile communication systems, various services are being provided, and there is a demand for a method for efficiently using NPNs (Non-Public Networks) to provide such various services using unique networks in factories, schools, companies, etc. Summary of the Invention [Problem to be solved by the invention]

[0011] The present invention provides a method and apparatus for searching and selecting a server for terminal authentication and subscriber information data transfer in a non-public network (NPN). [Means for solving the problem]

[0012] A method for selecting a server by a first stand-alone non-public network (SNPN) in which a terminal is onboarding in a wireless communication system according to an embodiment of the present invention includes the steps of receiving a Network Access Identifier set as a unique identifier of the terminal from the terminal, selecting the default credential server based on address information of a default credential server included in the Network Access Identifier, and receiving, from the default credential server, address information of a provisioning server selected from the default credential server.

[0013] Preferably, the first SNPN server selection method further comprises the step of selecting a session management function (SMF) and a user plane function (UPF) corresponding to the provisioning server selected from the default credential information server. Preferably, the first SNPN server selection method further comprises the steps of forwarding an authentication request including authentication information of the terminal to the default credentials server, and receiving a response to successful authentication of the terminal from the default credentials server. Preferably, the method for selecting a server of the first SNPN further comprises the step of receiving, from the default credentials server, an identity of a second SNPN providing service to the terminal.

[0014] According to an embodiment of the present invention, an operation method of a terminal in a wireless communication system for selecting a server by a first SNPN (stand-alone non-public network) to which the terminal is onboarding includes the steps of transmitting a Network Access Identifier set as a unique identifier of the terminal to the first SNPN, and performing a terminal authentication procedure with a provisioning server selected by a Default Credential Server corresponding to address information included in the Network Access Identifier.

[0015] Preferably, the method of operating the terminal further comprises the step of receiving from the provisioning server information regarding a second SNPN providing service to the terminal. According to one embodiment, a session management function (SMF) and a user plane function (UPF) corresponding to the provisioning server selected from the default credential server may be selected.

[0016] In a wireless communication system according to an embodiment of the present invention, a terminal is onboarding, and an SNPN (stand-alone non-public network) that selects a server has a transceiver unit and a control unit that controls to receive from the terminal a Network Access Identifier set as a unique identifier of the terminal, selects the default credential server based on address information of a default credential server included in the network access identifier, and receives from the default credential server address information of a provisioning server selected from the default credential server.

[0017] According to an embodiment of the present invention, an operating method for a terminal being onboarded to an SNPN (stand-alone non-public network) for selecting a server in a wireless communication system includes a transceiver unit, and a control unit that controls a network access identifier (Network Access Identifier) ​​set as a unique identifier of the terminal to be transmitted to the first SNPN, and executes a terminal authentication procedure with a provisioning server (Provisioning Server) selected by a default credential server (Default Credential Server) corresponding to address information included in the network access identifier. Effect of the Invention

[0018] The method and apparatus according to the embodiments of the present invention can effectively select a server for terminal authentication and subscriber data transmission in a wireless communication system. [Brief description of the drawings]

[0019] [Figure 1] FIG. 1 is a diagram illustrating the structure of a 5G network according to an embodiment of the present invention. [Diagram 2] FIG. 2 illustrates an entity for sending user subscriptions to a terminal according to an embodiment of the present invention. [Figure 3a] 5 is a flowchart illustrating a procedure for a terminal to perform UE onboarding to transmit user subscription information according to an embodiment of the present invention. [Figure 3b] 5 is a flowchart illustrating a procedure for a terminal to perform UE onboarding to transmit user subscription information according to an embodiment of the present invention. [Figure 4] FIG. 2 is a block diagram illustrating the structure of a network entity or server according to an embodiment of the present invention. [Diagram 5] FIG. 2 is a block diagram illustrating a configuration of a terminal according to an embodiment of the present invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0020] Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. At this time, it should be noted that, wherever possible, the same components are designated by the same reference numerals in the accompanying drawings. In addition, detailed descriptions of known functions and configurations that may obscure the gist of the present invention will be omitted. In describing the embodiments in this specification, description of technical content that is well known in the technical field to which the present invention pertains and is not directly related to the present invention will be omitted. This is to more clearly convey the gist of the present invention without obscuring it by omitting unnecessary explanations. For the same reason, in the accompanying drawings, some components are exaggerated, omitted, or illustrated in a schematic manner, and the size of each component does not completely reflect the actual size. Identical or corresponding elements in the various drawings are designated by the same reference numbers.

[0021] The advantages and features of the present invention, as well as the methods of achieving them, will become apparent from the following detailed description of the embodiments taken in conjunction with the accompanying drawings. However, the present invention is not limited to the embodiments disclosed below, but may be embodied in various forms, and the embodiments are provided solely so that the disclosure of the present invention will be complete and will fully convey the scope of the invention to those skilled in the art to which the present invention pertains. The present invention is defined only by the scope of the claims. Like reference numbers refer to like elements throughout the specification.

[0022] At this time, it will be understood that each block of the process flowchart and combinations of the flowcharts can be implemented by computer program instructions. These computer program instructions can be implemented in a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus, such that the instructions executed by the processor of the computer or other programmable data processing apparatus create means for performing the functions described in the flowchart blocks.

[0023] These computer program instructions may be stored in a computer usable or computer readable memory that can direct a computer or other programmable data processing apparatus to perform functions in a particular manner, and thus the instructions stored in the computer usable or computer readable memory may produce an article of manufacture that includes instruction means for performing the functions recited in the blocks of the flowchart diagrams. The computer program instructions may be loaded onto a computer or other programmable data processing apparatus such that a sequence of operational steps are executed on the computer or other programmable data processing apparatus to generate a computer implemented process, such that the instructions executing on the computer or other programmable data processing apparatus provide steps for performing the functions described in the blocks of the flowchart diagrams. Furthermore, each block may represent a module, segment, or portion of code that includes one or more executable instructions for implementing a specified logical function. It should also be noted that in some alternative implementations, the functions noted in the blocks may occur out of order. For example, two blocks shown in succession may be executed substantially concurrently, or the blocks may sometimes be executed in reverse order according to corresponding functionality.

[0024] In this case, the term "unit" used in the present embodiment means software or hardware components such as FPGA or ASIC, and the "unit" plays a certain role. However, the "unit" is not limited to software or hardware. A "module" may be configured in an addressable storage medium and may be configured to execute one or more processors. Thus, by way of example, "part" includes components such as software components, object-oriented software components, class components, and task components, as well as processes, functions, attributes, procedures, subroutines, segments of program code, drivers, firmware, microcode, circuits, data, databases, data structures, tables, arrays, and variables. The functionality provided in the components and units may be combined into fewer components and units or may be further separated into additional components and units. Furthermore, the components and "units" may be implemented to execute one or more CPUs within a device or a secure multimedia card.

[0025] Hereinafter, a base station is an entity that allocates resources to terminals, and may be at least one of a Node B, a BS (Base Station), an eNB (eNode B), a gNB (gNode B), a radio access unit, a base station controller, or a node on a network.

[0026] The terminal may include a User Equipment (UE), a Mobile Station (MS), a mobile phone, a smart phone, a computer, or a multimedia system capable of performing communication functions. Furthermore, the embodiments of the present invention may be applied to other communication systems having the same technical background or channel configuration as the embodiments of the present invention described below. Furthermore, the embodiments of the present invention may be applied to other communication systems with some modifications at the discretion of a person skilled in the art without significantly departing from the scope of the present invention.

[0027] In the following description, terms for identifying connection nodes, terms for network objects (network entities) or network functions (NFs), terms for messages, terms for interfaces between network objects, terms for various identification information, etc. are illustrated as examples for the convenience of explanation. Therefore, the present invention is not limited to the terms described below, and other terms can be used to refer to objects having equivalent technical meanings.

[0028] For the sake of convenience, some of the terms and names defined in the 3GPP (registered trademark) (3rd generation partnership project) LTE (long term evolution) specifications and / or the 3GPP (registered trademark) NR (new radio) specifications may be used. However, the present invention is not limited to the above terms and names and may be similarly applied to systems conforming to other specifications.

[0029] Hereinafter, an embodiment of the present invention will be described with reference to the accompanying drawings. Figure 1 shows the structure of a 5G network according to an embodiment of the present invention. The description of the network entities or network nodes constituting the 5G network is as follows: Referring to FIG. 1, a wireless communication system constituting a 5G network may include a UE (User Equipment) 100 and multiple network entities 101 to 125.

[0030] The (R)AN (Radio) Access Network) 101 is an entity that allocates radio resources to the terminal 100, and may be at least one of an eNode B, a gNode B, a Node B, a BS (Base Station), an NG-RAN (Next Generation Radio Access Network), a 5G-AN, a radio access unit, a base station controller, or a node on the network. The terminal 100 may be at least one of a User Equipment (UE), a Next Generation UE (NG UE), a Mobile Station (MS), a mobile phone, a smartphone, or a computer. Terminal 100 may also include a multimedia system capable of performing communication functions.

[0031] Hereinafter, an embodiment of the present invention will be described using a 5G system as an example, but the embodiment of the present invention can also be applied to other communication systems having a similar technical background. Furthermore, the embodiments of the present invention may be applied to other communication systems with some modifications at the discretion of a person skilled in the art without significantly departing from the scope of the present invention.

[0032] As wireless communication systems evolve from 4G systems to 5G systems, they define a new core network, NextGen Core (NG Core) or 5GC (5G Core Network). The new core network virtualizes all of the existing network entities (NEs: Network Entities) and turns them into network functions (NFs: Network Functions). According to an embodiment of the present invention, a network function refers to a network entity, a network component, or a network resource. According to one embodiment of the present invention, the 5GC includes the NF shown in FIG. Of course, without being limited to the example of FIG. 1, a 5GC may include more NFs than those shown in FIG. 1, or may include a smaller number of NFs.

[0033] According to one embodiment of the present invention, the Access and Mobility Management Function (AMF) 109 is a network function that manages the mobility of terminals. According to one embodiment of the present invention, a Session Management Function (SMF) 111 is a network function that manages a Packet Data Network (PDN) connection provided to a terminal. Here, the PDN connection may be called a PDU (Protocol Data Unit) session.

[0034] According to one embodiment of the present invention, the Policy Control Function (PCF) 121 is a network function that applies the service policy, charging policy, and policy of the mobile communication operator of the terminal to the PDU session. According to one embodiment of the present invention, Unified Data Management (UDM) 123 is a network function that stores information about subscribers. According to an embodiment of the present invention, an Application Function (AF) is an application function operated by a terminal manufacturer, a service provider, or a PLMN operator. However, AF may not necessarily be an application function operated by a terminal manufacturer, but may refer to another application function that manages the terminal's wireless capabilities and wireless capability IDs.

[0035] According to one embodiment of the present invention, a Service Communication Proxy (SCP) 113 acts as a proxy server when transmitting 5G core services, and relays communications with appropriate NFs. According to one embodiment of the present invention, the NEF (Network Exposure Function) 117 is a function that provides information about the terminal to a server outside the 5G network. The NEF 117 also provides the 5G network with the ability to provide information required for services and store it in the Unified Data Repository (UDR).

[0036] According to an embodiment of the present invention, a User Plane Function (UPF) 103 is a function that serves as a gateway for transmitting user data (PDU) to a Data Network (DN) 105 . According to one embodiment of the present invention, a Network Repository Function (NRF) 119 performs a function of discovering a Network Function (NF). According to one embodiment of the present invention, an Authentication Server Function (AUSF) 107 performs terminal authentication in 3GPP access networks and non-3GPP access networks. According to one embodiment of the present invention, a Network Slice Selection Function (NSSF) 115 performs a function of selecting a Network Slice Instance to be provided to a terminal. According to an embodiment of the present invention, a Data Network (DN) 105 may be a data network through which the terminal 100 transmits and receives data to use a network operator's service or a third party service.

[0037] FIG. 2 is a diagram illustrating an entity for sending a user subscription to a terminal according to an embodiment of the present invention. Referring to FIG. 2, a wireless communication system for transmitting a user subscription to a terminal includes a UE 200, an Onboarding Standalone Non-Public Network (O-SNPN) 210, a Default Credential Server (DCS) 220, a Provisioning Server (PS) 230, and an SNPN network 240 that holds user subscription information.

[0038] First, it is assumed that the terminal (UE) 200 does not have user subscription data, and the terminal 200 has default UE credentials assigned by the DCS 220 . In addition, DCS 220 assigns terminal 200 a unique UE identifier that can uniquely identify the terminal. The O-SNPN 210 provides a user plane (UP)-based IP connectivity (UE Onboarding) or a control plane (CP)-based NAS (Non-Access Stratum) connectivity (UE Onboarding) to the terminal 200 so that the terminal 200 without subscription information (User Subscription Data) can download subscription information. To determine whether to provide onboarding services to the terminal 200, the DCS 220 is required to perform terminal authentication.

[0039] DCS 220 pre-configures terminal 200 with default UE credentials and a unique UE identifier and stores this information. When DCS 220 executes UE registration for onboarding from O-SNPN 210, it is requested to authenticate terminal 200. Here, the authentication of the terminal 200 is performed using default UE credential information. In addition, when the PS 230 transmits subscriber information to the terminal 200, the DCS 220 is requested by the PS 230 to perform authentication / authorization of the terminal 200 in order to determine whether the terminal 200 is a terminal that has the authority to receive the transmitted subscriber information. The DCS 220 may be the manufacturer of the terminal 200, or a third party associated with the manufacturer or the SNPN network operator.

[0040] The PS 230 receives user subscription information, such as network credentials and user configuration information, from the network operator and transmits it to the terminal 200 . The PS 230 can exist as one server together with the DCS 220, and like the DCS 220, may be a server owned by a third party associated with the terminal manufacturer or the SNPN network operator. The PS 230 communicates with the DCS 220 for authentication / authorization of the terminal 200 . The SNPN network 240 , which possesses the user subscription information, transmits the user subscription information to the terminal 200 via the PS 230 . At this time, the network operator may have UE identifier information of the terminal providing user subscription information.

[0041] 3a and 3b are flowcharts illustrating a procedure for a terminal to perform UE onboarding to receive transfer of user subscription information according to an embodiment of the present invention. Referring to FIG. 3a, a wireless communication system performing a UE onboarding procedure includes a UE 300, a 5G Access Network (5G-AN) 310, a 5G Core Network (5GC) 320, a Provisioning Server (PS) 330, a Default Credential Server (DCS) 340, and a serving network 350.

[0042] Here, 5G-AN310 performs radio resource allocation for UE300 and transmits system information to UE300. In addition, the 5GC 320 can be realized as a Stand-alone Non-Public Network (SNPN), and the serving network 350 can be realized as a network (NPN or PLMN) that holds user subscriber information (network credentials and configuration information).

[0043] In step S301, the terminal 300 is pre-configured with default UE credentials and a unique UE identifier assigned by the DCS 340. At this time, default UE credentials are configured in the terminal 300, but no network credentials are configured, which may be provided to the terminal 300 as part of the onboarding procedure.

[0044] According to one embodiment, if there is an agreement between the terminal manufacturer and the SNPN network, the terminal 300 may also retain an initial default configuration (e.g., PLMN ID and NIF of the SNPN, S-NSSAI, DNN, etc.). The terminal ID assigned by DCS 340 must uniquely identify terminal 300 . DCS340 will likely be managed by terminal manufacturers, primarily IoT device manufacturers, or a third party in collaboration with certain manufacturers.

[0045] In order to assign a unique ID to a terminal without a specific standards body, the terminal ID includes DCS340 information. In the present invention, we propose to use a UE ID in the form of a Network Access Identifier (NAI) containing information of the DCS 340 to assign a unique identity to the terminal 300 . The NAI has the form "user@realm", and by including DCS 340 information in the realm, the Onboarding Network knows which of multiple DCS servers to select for authenticating the terminal. In particular, since the realm information can include the address of the DCS server, the DCS discovery / addressing problems can be solved at once.

[0046] In step S303, at the time of initial access, the terminal 300 searches for and selects an Onboarding SNPN (O-SNPN) based on the received Broadcast System Information. In this case, the O-SNPN (Onboarding SNPN) does not necessarily have to be the same as the SNPN having the network credentials. Since the terminal 300 does not have subscriber information of the SNPN 320, the terminal 300 transmits a unique UE identity and default UE credential of the terminal 300 to the SNPN 320 at the time of initial connection.

[0047] The terminal 300 transmits additional information, such as an application identifier and a service provider identifier, to the SNPN 320 . In the present invention, the terminal 300 can use a Network Access Identifier (NAI) including information of the DCS 340 as the terminal 300's unique UE identity (ID). The terminal 300 transmits the NAI including the information of the DCS 340 to the SNPN 320 .

[0048] In step S305, the SNPN 320 receives a unique UE identifier in the form of an NAI of the terminal 300, and searches for and selects a DCS 340 using realm information included in the NAI. In particular, since the realm information includes the URL information of the DCS 340, the SNPN 320 transmits a UE Authentication message for terminal authentication to the DCS 340. Also, since DCS 340 may have a contract with a particular SNPN network for onboarding services for its terminals, SNPN 320 may also determine whether to provide connectivity for onboarding to the terminal via the realm information contained in the NAI information.

[0049] In step S307, the SNPN 320 requests authentication of whether the terminal 300 can connect to the network for onboarding purposes by sending the terminal's unique UE identification information and default UE credentials to the DCS 340 managing the terminal 300. Authentication is performed by selecting either primary authentication or NSSAA (Network Slice Specific Authentication and Authorisation).

[0050] In step S309, the DCS 340 performs authentication of the terminal 300, and if the authentication is successful, receives the subscriber information from the SNPN 350 having the subscriber information to be received by the terminal 300, and selects a provisioning server 330 to transmit the subscriber information to the terminal 300. This system has a list of SNPN networks to which terminal manufacturers have signed contracts and subscribed in advance, and selects the most appropriate network from among the contracted SNPN networks based on the type of terminal and the current location, and then selects a PS330 that can support this network. As with the SNPN network, the PS 330 selects a PS 300 capable of supporting the selected SNPN network from a list of PS servers that have contracts with the manufacturer. According to an embodiment, in case of multiple selected serving networks, priority information may also be included.

[0051] In step S311, the DCS 340 transfers to the onboarding network 320 a response to the successful authentication of the terminal, the address information of the selected PS 300, and the ID (PLMN ID or PLMN ID+NID) of the selected serving network 350. In step S313, the onboarding network 320 must select an SMF and a UPF to generate a PDU session that provides the terminal 300 with a restricted data connection that can only be connected to the selected PS 330. For this purpose, the onboarding network 320 utilizes the address of the selected PS transmitted from the DCS 340 .

[0052] Referring to FIG. 3b, in step S315, the onboarding network 320 transmits to the terminal 300 the address of the selected PS transmitted from the DCS 340 and S-NSSAI / DNN information for PDU session generation. The terminal 300 generates a PDU session using the received S-NSSAI / DNN information and transmits data to the PS 330 using the address information of the PS 330. The information regarding the PS may be updated in the terminal if it differs from the information stored at pre-configuration.

[0053] In step S317, the terminal 300 generates a configuration PDU session. The PDU session is created using a well-known or pre-configured S-NSSAI / DNN or S-NSSAI / DNN information received from DCS340.

[0054] In steps S319 to S323, subscriber information is requested from PS330 using information preset in terminal 300 at the application level, or subscriber information is requested using selected PS address information received from DCS340. The PS 330 looks at the realm part of the unique UE identifier information of the terminal 300, and sends the default UE credential of the terminal 300 to the DSC 340 to request terminal authentication. At this time, the terminal 300 also transmits the serving network ID (PLMN ID or PLMN ID+NID) and serving network priority information received from the DCS 340 .

[0055] In step S325, the PS 330 requests and receives from the serving network 350 network credentials for the future SNPN owning the subscription as well as other UE configuration parameters (e.g., PDU session parameters, such as SNSSAI, DNN, URSPs, QoS rules, and other required parameters to access the SNPN and establish a regular PDU session).

[0056] In step S327, the PS 330 transmits to the terminal 300 the data received from the serving network 350 in step S325. If the data is successfully received in step S327, in step S329, the terminal 300 terminates the configuration PDU session of the onboarding network 320 and performs deregistration of the onboarding network 320. In step S331, the terminal 300 uses the received subscriber information to register with the serving network 350 and receive network services. In this case, the onboarding network 320 and the serving network 350 may be the same or different.

[0057] FIG. 4 is a block diagram for illustrating the structure of a network entity or server according to an embodiment of the present invention. Each of the network entities or servers described with reference to FIGS. 1 to 3 includes the configuration of FIG. For example, structures such as SMF, NEF, and AF correspond to the structure illustrated in FIG. For example, the structures of a PS (Provisioning Server), a DCS (Default Credential Server), etc. correspond to the structure described in FIG.

[0058] Referring to FIG. 4, a network entity or server according to an embodiment of the present invention comprises a transceiver 410, a memory 420, and a processor 430. The transceiver 410, processor 430, and memory 420 of the network entity or server operate in accordance with the communication method of the network entity or server described above. However, the components of the network entity or server are not limited to the above examples. For example, a network entity or server may include more or fewer components than those listed above. Furthermore, the transceiver 410, the processor 430, and the memory 420 may be implemented in the form of a single chip. Further, the processor 430 may include one or more processors.

[0059] The transceiver 410, which is a collective term for a receiver and a transmitter, transmits and receives signals to and from a base station, a terminal, a network entity, or a server. Signals transmitted to and received from a base station, a terminal, a network entity, or a server include control information and data. To this end, the transceiver 410 may be comprised of an RF transmitter that up-converts and amplifies the frequency of a signal to be transmitted, and an RF receiver that low-noise amplifies a received signal and down-converts the frequency. However, this is merely one embodiment of the transceiver unit 410, and the components of the transceiver unit 410 are not limited to an RF transmitter and an RF receiver. Furthermore, the transceiver unit 410 receives a signal via a wireless channel and outputs the signal to the processor 430, and transmits the signal output from the processor 430 via a wireless channel.

[0060] The memory 420 stores programs and data necessary for the operation of the network entity or server. Additionally, the memory 420 stores control information or data contained in signals obtained at the network entity or server. The memory 420 may be comprised of a storage medium or a combination of storage media, such as ROM, RAM, a hard disk, a CD-ROM, and a DVD. Also, the memory 420 may not be separate, but may be configured as part of the processor 430 .

[0061] The processor 430 controls a series of processes to cause the network entity or server to operate in accordance with the previously described embodiments of the present invention. For example, the processor 430 receives control signals and data signals via the transceiver unit 410 and processes the received control signals and data signals. The processor 430 also transmits the processed control and data signals via the transceiver unit 410 . The processor 430, which may be multiple, executes programs stored in the memory 420 to perform component control operations of the network entity or server.

[0062] FIG. 5 is a block diagram illustrating a structure of a terminal according to an embodiment of the present invention. The terminal described with reference to FIGS. 1 to 3 corresponds to the terminal in FIG. Referring to FIG. 5, the terminal may comprise a transceiver 510, a memory 520, and a processor 530. The transceiver 510, processor 530, and memory 520 of the terminal operate according to the above-mentioned terminal communication method. However, the components of the terminal are not limited to the above examples.

[0063] For example, a terminal may include more or fewer components than those described above. Furthermore, the transceiver 510, the processor 530, and the memory 520 may be implemented in the form of a single chip. Further, the processor 530 may include one or more processors.

[0064] The transceiver 510 is a generic name for the receiver of the terminal and the transmitter of the terminal, and transmits and receives signals to and from a base station, an NF, a server, or other terminals. Signals transmitted to and received from a base station, a NF, a server, or other terminals include control information and data. To this end, the transceiver unit 510 may be comprised of an RF transmitter that up-converts and amplifies the frequency of a signal to be transmitted, and an RF receiver that low-noise amplifies and down-converts the frequency of a received signal. However, this is merely one embodiment of the transceiver unit 510, and the components of the transceiver unit 510 are not limited to an RF transmitter and an RF receiver. In addition, the transceiver unit 510 receives a signal via a wireless channel and outputs it to the processor 530, and transmits the signal output from the processor 530 via the wireless channel.

[0065] The memory 520 stores programs and data necessary for the operation of the terminal. The memory 520 also stores control information or data contained in signals acquired by the terminal. The memory 520 may be comprised of a storage medium or a combination of storage media, such as ROM, RAM, a hard disk, a CD-ROM, and a DVD. Also, the memory 520 may not be separate, but may be included in the processor 530 .

[0066] The processor 530 controls a series of processes that enable the terminal to operate in accordance with the previously described embodiments of the present invention. For example, the processor 530 receives control signals and data signals via the transceiver unit 510 and processes the received control signals and data signals. In addition, the processor 530 transmits the processed control and data signals via the transceiver unit 510. The processor 530, which may be multiple, executes programs stored in the memory 520 to control the components of the terminal.

[0067] The methods according to the embodiments described in the claims or specification of the present invention can be implemented in hardware, software, or a combination of hardware and software. When implemented in software, a computer-readable storage medium is provided that stores one or more programs (software modules). One or more programs stored on a computer-readable storage medium are configured for execution by one or more processors in an electronic device. The one or more programs contain instructions that cause an electronic device to perform a method according to an embodiment of the present invention as claimed or described herein.

[0068] Such programs (software modules, software) may be stored in random access memory, non-volatile memory including flash memory, Read Only Memory (ROM), Electrically Erasable Programmable Read Only Memory (EEPROM), magnetic disc storage devices, Compact Disc-ROMs (CD-ROMs), Digital Versatile Discs (DVDs) or other forms of optical storage devices, magnetic cassettes. Alternatively, it may be stored in memory consisting of a combination of some or all of them. Also, each configuration memory may be included in multiple units.

[0069] The program can also be stored in an attachable storage device that can be accessed via a communication network such as the Internet, an Intranet, a Local Area Network (LAN), a Wide LAN (WLAN), a Storage Area Network (SAN), or a combination thereof. Such a storage device may be connected via an external port to a device implementing an embodiment of the present invention. Additionally, separate storage devices over a communications network may be connected to devices implementing embodiments of the present invention.

[0070] In the specific embodiments of the invention described above, elements included in the invention are referred to as "a" or "an" in accordance with the particular embodiment presented. However, the expressions singular or plural have been selected to suit the circumstances presented for the convenience of explanation, and the present invention is not limited to singular or plural components, and components expressed in the plural may be configured in the singular, and components expressed in the singular may be configured in the plural.

[0071] On the other hand, the embodiments of the present invention disclosed in this specification and the drawings are merely specific examples presented to easily explain the technical contents of the present invention and to aid in understanding the present invention, and are not intended to limit the scope of the present invention. In other words, it is obvious to a person having ordinary skill in the art to which the present invention pertains that other modified examples based on the technical concept of the present invention can be implemented.

[0072] Furthermore, the above-described embodiments can be combined with each other as necessary. For example, a base station and a terminal can be operated by combining one embodiment of the present invention with a part of another embodiment. For example, a base station and a terminal can be operated by combining one embodiment of the present invention with a part of another embodiment. Furthermore, the embodiments of the present invention may be applied to other communication systems, and other modifications based on the technical ideas of the embodiments may also be implemented. [Explanation of symbols]

[0073] 100, 200, 300 terminals 101~125 Multiple Network Entities 210 O-SNPN(Onboarding Stand-alone Non-Public Network) 220, 340 DCS (Default Credential Server) 230, 330 PS (Provisioning Server) 240 SNPN Network 310 5G-AN (5G Access Network) 320 5GC(5G Core Network) 350 serving network 410, 510 Transmitter / receiver 420, 520 Memory 430, 530 processors

Claims

1. A method for operating a stand-alone non-public network (SNPN) in which a terminal in a wireless communication system is onboarding, comprising: receiving from the terminal a unique identifier for the terminal configured in the form of a network access identifier; selecting a default credential server based on information contained in a realm part of the network access identifier; receiving, during an authentication procedure of the terminal, address information of a provisioning server from the default credentials server.

2. 2. The method of claim 1, further comprising the step of selecting a session management function (SMF) and a user plane function (UPF) corresponding to the selected provisioning server from the default credential server.

3. sending an authentication request including authentication information of the terminal to the default credentials server; 2. The method of claim 1, further comprising the step of: receiving a response to successful authentication of the terminal from the default credentials server.

4. The method of claim 1, wherein the information contained in the realm part of the network access identifier corresponds to an address of the default credential server.

5. The method of claim 1, wherein the provisioning server is selected by the default credential server if the authentication procedure of the terminal is successful.

6. A method for operating a terminal that is being onboarded to a stand-alone non-public network (SNPN) in a wireless communication system, comprising: transmitting a unique identifier of the terminal configured in the form of a network access identifier to the SNPN; and performing an authentication procedure of the terminal with a provisioning server selected by a default credential server corresponding to information contained in the realm part of the network access identifier.

7. The method of claim 6, wherein the information contained in the realm part of the network access identifier corresponds to an address of the default credential server.

8. The method of claim 6, wherein the provisioning server is selected by the default credential server if the authentication procedure of the terminal is successful.

9. A terminal in a wireless communication system is onboarding in a stand-alone non-public network (SNPN), A transmitting / receiving unit; A control unit connected to the transmitting / receiving unit and controlling the transmitting / receiving unit, The control unit controls to receive a unique identifier of the terminal configured in the form of a network access identifier from the terminal, selects a default credential server based on information included in a realm part of the network access identifier, and controls to receive address information of a provisioning server from the default credential server during an authentication procedure of the terminal.

10. The SNPN according to claim 9, characterized in that the control unit selects a session management function (SMF) and a user plane function (UPF) corresponding to the provisioning server selected from the default credential information server.

11. The control unit controls to transmit an authentication request including authentication information of the terminal to the default credential information server; 10. The SNPN of claim 9, further comprising: controlling a response to successful authentication of the terminal to be received from the default credentials server.

12. The SNPN of claim 9, wherein the information contained in the realm part of the network access identifier corresponds to an address of the default credential server.

13. The SNPN of claim 9, characterized in that the provisioning server is selected by the default credential server if an authentication procedure for the terminal is successful.

14. A terminal that is onboarding to a stand-alone non-public network (SNPN) in a wireless communication system, A transmitting / receiving unit; A control unit connected to the transmitting / receiving unit and controlling the transmitting / receiving unit, The control unit controls a unique identifier of the terminal configured in the form of a network access identifier to be transmitted to the SNPN, and performs an authentication procedure of the terminal with a provisioning server selected by a default credential server corresponding to information included in a realm part of the network access identifier.

15. The terminal of claim 14, wherein the information contained in the realm part of the network access identifier corresponds to the address of the default credentials server.

16. The terminal of claim 14, wherein the provisioning server is selected by the default credentials server if an authentication procedure of the terminal is successful.

Images