Optimizing key material generation for authentication and key management for applications

Abstract

A method performed by a wireless device (110) includes determining whether a first message received from a network node (160) includes an authentication and key management (AKMA) for application key indicator, and determining whether to generate AKMA key material for an authentication procedure with the network based on whether the first message includes the AKMA indicator.

Description

[Technical field]

[0001] The present disclosure relates generally to wireless communications, and more particularly to a system and method for optimizing keying material generation for Authentication and Key Management for Applications (AKMA). [Background technology]

[0002] The 3rd Generation Partnership Project (3GPP) Release 16 introduced a new feature called Authentication and Key Management for Applications (AKMA) to support authentication and key management aspects for 3GPP certificate-based applications and 3GPP services in the fifth generation (5G), including Internet of Things (IoT) use cases. The latest TS is 3GPP TS33.535 v.0.2.0 with ongoing revisions.

[0003] Leveraging authentication and key agreement (AKA) certification to bootstrap security between user equipment (UE) and application functions (AF) is addressed, which allows the UE to securely exchange data with application servers. This may be considered an evolution of the Generic Bootstrapping Architecture (GBA) for 5G. In this specification, the term AF may also be referred to as AKMA AF.

[0004] FIG. 1 shows the general network architecture for AKMA, as disclosed in 3GPP TS35.535 v.0.2.0.

[0005] The AKMA Anchor Function (AAnF) is a new logical entity introduced by AKMA. In particular, like the Bootstrapping Server Function (BSF) in the GBA, the AAnF is an anchor function in the Home Public Land Mobile Network (HPLMN) for keying material generation used between the UE and the AF. The AAnF maintains the UE AKMA context to be used for subsequent bootstrapping requests.

[0006] The AKMA reuses the result of the 5G primary authentication procedure performed during UE registration to authenticate the UE. This is called implicit bootstrapping. In this procedure, the Authentication Server Function (AUSF) uses the K AUSF and K. AKMA A Network Function (NF) responsible for generating and storing keying material such as the ANF, the AAnF, the NEF, the AMF, the AF, or any other network function.

[0007] FIG. 2 illustrates the following key, K AUSF , K AKMA , K AF The terminology may be defined as follows: ·K AUSF : A root key as the output of the primary authentication procedure and stored in the UE and the AUSF. Furthermore, as specified in 3GPP TS33.501 v.16.0.0, the AUSF stores the result and K as the output of the primary authentication result in the Unified Data Management (UDM). AUSF It is possible to report the AUSF instance that generates the ·K AKMA : K AUSFK is an anchor key derived by the mobile equipment (ME) and the AUSF from the AKMA and used by the AAnF to generate further keying material used in the AKMA. AKMA The key identifier is K AKMA It identifies the key and is also the derived value. ·K AF : Sometimes simply called the application key, K is generated by ME and AAnF. AKMA The AF-specific key derived from and used by the UE and the AKMA AF to securely exchange data.

[0008] FIG. 3 illustrates a secure session setup between a UE and an application. As shown, the prerequisites for establishing a communication session are primary authentication and AKMA Identifier (K AKMA Then, to initiate communication with the AKMA AF, the UE uses the derived K AKMA The AF then sends a session establishment request including the ID of at least the K AKMA By providing the ID and AF identifier, the AAnF requests an application specific key. In addition, the AAnF receives a K AKMA The AAnF then sends a request to the AUSF to obtain AKMA From K AF and responds to AKMA AF via a key response, AF and the expiration time, also known as KAF_exptime, and the fresh K AF The AF forwards the KAF_exptime and the freshness parameter to the UE in a response message (Application Session Establishment Response in FIG. 3). Optionally, the AF forwards the KAF_exptime and the freshness parameter to the UE in a response message (Application Session Establishment Response in FIG. 3). AF The UE receives the response and integrity protects it with a message authentication code (MAC) calculated using the same K AF (and the same K provided to AF AF) to derive the freshness parameter and other parameters normally used by the AAnF. If the response message contains a MAC, the UE uses the newly derived K AF Use.

[0009] Then, the secure communication is AF Based on this, a communication link is established between the UE and the application.

[0010] Before starting the normative specification work, AKMA was studied in 3GPP TR33.835 v.16.0.0, which recommended using the ideas of solutions #15, #19 and #23 of implicit bootstrapping as the basis for the AKMA certification procedure. In detail, the K AUSF It is recommended that reuse of the above should be the basis for any normative work.

[0011] Solution #15 in 3GPP TR33.835 v.16.0.0 also includes the following aspects as possible impacts to Unified Data Management (UDM): - New parameters that track the AKMA key should be derived by the AUSF. - Potentially communicates AKMA usage to the AUSF and UE (unless it is statically configured)

[0012] Ultimately, the details as to whether AKMA keys are generated on-demand (when needed by the AAnF) or are pre-generated keys (immediately after each primary authentication run) are left to normative work; 3GPP TS33.535 v.0.2.0 does not yet cover this area.

[0013] Generic Bootstrapping Architecture (GBA) GBA was introduced in 3GPP TS33.220 v.16.0.0 to bootstrap authentication and key agreement for application security, e.g., to enable application functionality in the network and on the user side to establish shared keys.

[0014] Figure 4 shows a simple network model for the GBA.

[0015] Mutual authentication is performed between the UE and the BSF. Thus, bootstrapping keying material is derived between the UE and the BSF. Also, a bootstrapping transaction identifier (B-TID) is generated by the BSF. The B-TID provides a reference to the bootstrapping transaction and its derived GBA keying material. The bootstrapped GBA keying material is further used to protect access from the UE to the Network Application Function (NAF).

[0016] When the UE initiates communication with the application function, the UE includes the B-TID in a message. The application function then requests an application specific key from the BSF using the B-TID as input. The BSF then locates the GBA keying material corresponding to the B-TID, and the BSF derives an AF specific key from the GBA keying material and responds to the AF.

[0017] Secure communications are then enabled between the UE and the application based on the AF unique key.

[0018] UE parameter updates via UDM control plane procedures UE parameter update via UDM control plane procedure (referred to as UPU for brevity in this specification) is a feature introduced in 3GPP TS 23.502 v.16.2.0 to support delivery of UE parameter update data from UDM to the UE via NAS signaling after the UE has successfully registered in a 5G network.

[0019] The UDM update data delivered by the UDM to the UE may include: - One or more UE parameters, including: - Updated default configured NSSAI (the ultimate consumer of the parameters is the ME). - Updated routing indicator data (the ultimate consumer of the parameters is the Universal Subscriber Identity Module (USIM)). - "UE Acknowledgement Requested" indication. - "Re-enrollment Requested" indication.

[0020] Figure 5 shows the UPU procedure disclosed in 3GPP TS23.502 v.16.2.0. It should be noted that there is another feature called "Steering of roaming security mechanism" specified in 3GPP TS33.501 v.16.2.0 to support a similar function of information delivery (i.e., steering information list) from the HPLMN to the UE.

[0021] There are several problems. For example, as mentioned above, AKMA is based on implicit bootstrapping of security between the UE and the network. More precisely, AKMA reuses the result of the 5G primary authentication procedure performed during UE registration to generate the keying material used for the AKMA procedure. This implies that the AKMA procedure generates new AKMA keying material for every primary authentication procedure, even if the AKMA feature is not required for the UE or the AF. On the other hand, looking back at GBA, the keying material is only generated on demand, i.e., based on either a request from the UE or a request from the AF. Thus, the keying material generation procedure in AKMA is inefficient compared to how the keying material generation procedure is done in GBA. This is a waste of resources. For example, it may be a waste of computing and storage resources in the UE and the network. This may be especially true for UEs that are not enabled to use AKMA or do not need to use AKMA. Summary of the Invention

[0022] Some aspects of the present disclosure and their embodiments may provide solutions to these or other problems. For example, according to some embodiments, methods and systems are provided that include the use of subscription data to control AKMA key generation. More specifically, some embodiments may optimize the generation of AKMA keying material in the AUSF and UE only when subscription information in the UDM allows it and / or only when it needs to be used, such as, for example, on-demand. Thus, some embodiments may avoid unnecessary keying material generation for AKMA implicit bootstrapping.

[0023] According to some embodiments, a method by a network node operating as a UDM node includes receiving a first message associated with an authentication request message of a wireless device. Based on subscription information associated with the wireless device, the network node generates a second message including an authentication response message. The second message includes an AKMA key indicator for triggering the wireless device to generate AKMA keying material. The network node transmits the second message including the authentication response message to trigger the wireless device to generate AKMA keying material.

[0024] According to some embodiments, a method implemented by a first network node operating as an AUSF includes determining whether a first message received from a second network node includes an AKMA key indicator. Based on whether the first message includes an AKMA indicator, the first network node determines whether to generate AKMA keying material.

[0025] According to some embodiments, a method implemented by a wireless device includes, in response to determining a need to initiate a communication session with an AF, determining an authentication and key management anchor key (K ) for the application. AKMA The wireless device sends a request to the AF to initiate a communication session.

[0026] According to some embodiments, a network node operating as a UDM node includes a processing circuit configured to receive a first message associated with an authentication request message of a wireless device. Based on subscription information associated with the wireless device, the processing circuit is configured to generate a second message including an authentication response message. The second message includes an AKMA key indicator for triggering the wireless device to generate AKMA keying material. The processing circuit is configured to transmit the second message including the authentication response message to trigger the wireless device to generate AKMA keying material.

[0027] According to some embodiments, a first network node operating as an AUSF includes processing circuitry configured to determine whether a first message received from a second network node includes an AKMA key indicator, the processing circuitry being configured to determine whether to generate AKMA keying material based on whether the first message includes the AKMA indicator.

[0028] According to some embodiments, in response to the wireless device determining a need to initiate a communication session with the AF, AKMA The processing circuitry is configured to generate a request to initiate a communication session to the AF.

[0029] Some embodiments may provide one or more of the following technical advantages. For example, a technical advantage may be that some embodiments enable flexible settings for AKMA keying material generation. As another example, another technical advantage may be that some embodiments avoid unnecessary generation of AKMA keys. As yet another example, a technical advantage may be that some embodiments provide a means for handling upgraded UEs, e.g., UEs that support AKMA features, and legacy UEs.

[0030] Other advantages may be readily apparent to those skilled in the art. Some embodiments may have none, some, or all of the listed advantages.

[0031] For a more complete understanding of the disclosed embodiments and their features and advantages, reference is now made to the following descriptions taken in conjunction with the accompanying drawings, in which: [Brief description of the drawings]

[0032] [Figure 1]FIG. 1 illustrates a general network architecture for authentication and key management for applications (AKMA). [Diagram 2] A diagram showing the AKMA key hierarchy. [Diagram 3] FIG. 1 illustrates a secure session setup between a user equipment (UE) and an application. [Figure 4] FIG. 1 illustrates a simple network model for the Generic Bootstrapping Architecture (GBA). [Diagram 5] A diagram showing the unified data management control plane procedure (UPU procedure). [Figure 6] FIG. 2 illustrates AKMA keying material generated based on subscription information according to some embodiments. [Figure 7] FIG. 2 illustrates keying material generated on demand, according to some embodiments. [Figure 8] FIG. 1 illustrates an exemplary wireless network, according to some embodiments. [Figure 9] FIG. 1 illustrates an exemplary network node, according to some embodiments. [Figure 10] 1 illustrates an exemplary wireless device in accordance with some embodiments. [Figure 11] FIG. 2 illustrates an exemplary user equipment, according to some embodiments. [Figure 12] FIG. 2 illustrates a virtualization environment in which functionality implemented by some embodiments may be virtualized, according to some embodiments. [Figure 13] FIG. 1 illustrates a communications network connected to a host computer through an intermediate network, according to some embodiments. [Figure 14] FIG. 2 is a generalized block diagram of a host computer communicating with user equipment via a base station over a partially wireless connection in accordance with some embodiments. [Figure 15] FIG. 1 illustrates a method implemented in a communication system according to one embodiment. [Figure 16] FIG. 1 illustrates another method implemented in a communication system according to one embodiment. [Figure 17] FIG. 1 illustrates another method implemented in a communication system according to one embodiment. [Figure 18] FIG. 1 illustrates another method implemented in a communication system according to one embodiment. [Figure 19] 1 illustrates an exemplary method by a wireless device according to some embodiments. [Figure 20] FIG. 1 illustrates an exemplary virtual computing device, according to some embodiments. [Figure 21] FIG. 1 illustrates an exemplary method by a network node, according to some embodiments. [Figure 22] FIG. 2 illustrates another exemplary virtual computing device, according to some embodiments. [Figure 23] FIG. 1 illustrates another exemplary method by a network node, according to some embodiments. [Figure 24] FIG. 2 illustrates another exemplary virtual computing device, according to some embodiments. [Diagram 25] FIG. 1 illustrates another exemplary method by a network node, according to some embodiments. [Figure 26] FIG. 2 illustrates another exemplary virtual computing device, according to some embodiments. [Figure 27] FIG. 1 illustrates another exemplary method by a network node, according to some embodiments. [Figure 28] FIG. 2 illustrates another exemplary virtual computing device, according to some embodiments. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0033] Some of the embodiments contemplated herein will now be described more fully with reference to the accompanying drawings, in which: However, other embodiments are included within the scope of the subject matter disclosed herein, and the disclosed subject matter should not be construed as being limited to only the embodiments described herein, but rather, these embodiments are provided as examples to convey the scope of the subject matter to those skilled in the art.

[0034] Generally, all terms used herein should be interpreted according to the ordinary meaning of those terms in the relevant technical field, unless a different meaning is expressly given and / or implied from the context in which the term is used. All references to a / an / the element, apparatus, component, means, step, etc. should be openly interpreted as referring to at least one instance of that element, apparatus, component, means, step, etc., unless expressly stated otherwise. The steps of any method disclosed herein need not be performed in the exact order disclosed, unless a step is expressly described as following or preceding another step, and / or it is implicit that a step must follow or precede another step. Any feature of any of the embodiments disclosed herein may be applied to any other embodiment, wherever appropriate. Similarly, any advantage of any of the embodiments may be applied to any other embodiment, and vice versa. Other objects, features, and advantages of the enclosed embodiments will become apparent from the following description.

[0035] In some embodiments, the more general term "network node" may be used and may correspond to any type of radio network node or any network node that communicates with a UE (user equipment) and / or with another network node (directly or via another node). Examples of network nodes are Node B, Master eNodeB (MeNB), eNodeB (eNB), network nodes belonging to a Master Cell Group (MCG) or a Secondary Cell Group (SCG), base station (BS), MSR radio node such as a Multi-Standard Radio (MSR) BS, gNode B (gNB), network controller, Radio Network Controller (RNC), Base Station Controller (BSC), relay, donor node controlled relay, base transceiver station (BTS), access point (AP), transmission point, transmitting node, remote radio unit (RRU), remote radio head (RRH), node in a distributed antenna system (DAS), core network node (e.g. Mobile Switching Center (MSC), Mobility Management Entity (MME), etc.), Operations & Maintenance (O&M), Operation Support System (OSS), Self-Optimizing Network (SON), positioning node (e.g. Evolved Serving Mobile Location Center (E-SMLC)), Minimize Drive Test (MDT), test equipment (physical node or software), etc.

[0036] In some embodiments, the non-limiting terms user equipment (UE) or wireless device may be used and may refer to any type of wireless device that communicates with a network node and / or another UE in a cellular or mobile communication system. Examples of UEs are target devices, D2D (device to device) UEs, machine type UEs or UEs capable of machine-to-machine (M2M) communication, PDAs, PADs, tablets, mobile terminals, smartphones, laptop embedded equipment (LEE), laptop mounted equipment (LME), USB dongles, UE category M1, UE category M2, ProSe UEs, V2V UEs, V2X UEs, etc.

[0037] Furthermore, terminology such as base station / gNodeB and UE should be considered non-limiting and do not specifically imply any hierarchical relationship between the two; generally, a "gNodeB" may be considered device 1 and a "UE" may be considered device 2, with these two devices communicating with each other via some wireless channel. Also, hereinafter, a transmitter or receiver may be either a gNB or a UE.

[0038] According to some embodiments, methods and systems are provided that include the use of subscription data to control Authentication and Key Management for Applications (AKMA) key generation. More specifically, some embodiments may optimize the generation of AKMA keying material in the Authentication Server Function (AUSF) and the UE only when subscription information in Unified Data Management (UDM) allows it and / or only when it needs to be used, e.g., on-demand. Thus, some embodiments may avoid unnecessary keying material generation for AKMA implicit bootstrapping.

[0039] Generation of AKMA keying material based on subscription information 6 shows a signaling diagram 50 for AKMA keying material generated based on subscription information according to some embodiments. In the illustrated example, the steps for AKMA keying material generation based on subscription information may include: 0. The Mobile Network Operator (MNO) sets the AKMA keying material generation flag in the UE's subscription data, for example by using an Operations & Management (O&M) system. Optionally, this flag can be provided by a third party AF via the existing Nudm_ParameterProvision service. The UDM decides based on MNO policy to update this flag in the UE, e.g. via existing UPU procedures or other similar procedures (e.g. as part of NAS signaling during the primary authentication exchange, proposed in steps 6-7 below). The default or configured value of this flag is present in the subscription data of the UE and UDM unless the value is updated by the methods described above. 1-3. The UE initiates the authentication procedure with the network as specified in 3GPP TS33.501 v.16.0.0. 4. Upon receiving a request for an authentication vector, for example Nudm_UEAuthentication_Get, the UDM prepares the authentication vector as specified in 3GPP TS33.501 v.16.0.0. Meanwhile, based on the subscription data of the AKMA keying material generation flag, the UDM determines whether AKMA keying material needs to be generated. 5. The UDM response authentication vector back via Nudm_UEAuthentication_Get response, with the AKMA key indication included in the message. 6-7. Authentication and AS / NAS security procedures proceed as specified in 3GPP TS33.501 v.16.0.0. The AUSF may optionally include an AKMA indicator piggybacked onto the authentication signaling procedure with the UE. The UE generates keying material for the authentication procedure. Meanwhile, based on the AKMA keying material generation flag stored in the UE (or received through the authentication procedure), the UE generates keying material for AKMA, for example, K AKMA , K AKMA Generate an ID. 8-9. The AUSF receives the authentication result and invokes the existing service action Nudm_UEAuthentication_ResultConfirmation to inform the UDM about the authentication result. Based on the AKMA keying material generation flags stored in the AUSF and / or received from the UDM, the AUSF generates keying material for the AKMA, e.g., K AKMA , K AKMA Generate an ID. Therefore, both the UE and the AUSF generate and implicitly commit the keying material for the AKMA.

[0040] On-demand generation of AKMA keying material According to some other embodiments, the management of the AKMA support indication may be realized in a dynamic manner or on-demand. For example, the network (including the AF (Application Function) and core elements, e.g., UDM and AUSF) does not need to be pre-provisioned with such UE-specific information. This may be because, according to some embodiments, the UE's support of the AKMA feature may be inferred from the initiation of an AKMA procedure by the UE towards the AF. A UE that does not support AKMA will not initiate such a procedure.

[0041] 7 shows a signaling diagram 60 for on-demand generated keying material according to some embodiments. Some of the steps may be similar to those shown in FIG.

[0042] As shown, according to some embodiments, the UE and AUSF may not pre-generate AKMA keying material after the primary authentication procedure (step 2). Rather, prior to the initiation of an application session establishment with the AF that requires an AKMA key, the UE may pre-generate AKMA keying material. AKMA and K. AKMA Generate IDs on demand (step 4).

[0043] UE is the generated K AKMAUsing the ID, the AF will request session establishment from the AF (step 5). The AF will then send a request for an AF key to the AAnF (step 6), and the AAnF will send a request for the corresponding AKMA key to the AUSF (step 7).

[0044] Upon receiving an AKMA key request, the AUSF AKMA on demand (step 8).

[0045] According to some embodiments, in this scenario, the AAnF and AUSF may require additional information, such as a UE id, to select the AUSF and to generate AKMA keying material for a particular UE. Those skilled in the art may recognize that different types of UE id, SUPI / SUCI or GPSI, and / or other types of additional information may be provided by the UE to assist in this process.

[0046] K on Demand AKMA After generation of , the AKMA procedure is completed as in steps 9-10, which may be similar to that disclosed above.

[0047] According to some embodiments, the on-demand approach described with respect to Fig. 7 may be combined with the generation of AKMA keying material based on subscription information, described above with respect to Fig. 6. For example, when the AAnF requests an AKMA key from the AUSF in step 7 in Fig. 7, the UDM may determine and / or authorize whether the UE is enabled to use the AKMA service. This may be done via a query to the UDM from the AUSF or directly from the AAnF.

[0048] According to some embodiments, the AF / NEF may trigger the UDM parameter provisioning procedure in step 0a, including an indication that the UE supports AKMA. In this case, step 0c in Fig. 6 may be skipped. Alternatively, the AF / NEF may not provide an additional indication, but the indication may be set in the UDM by the AAnF upon receiving the key request from the AF, using the same procedure as in step 0a in Fig. 6. In yet another particular embodiment, the AAnF may not set the indication, rather the AUSF may set the indication.

[0049] FIG. 8 illustrates a wireless network, according to some embodiments. Although the subject matter described herein may be implemented in any suitable type of system using any suitable components, the embodiments disclosed herein are described with respect to a wireless network, such as the exemplary wireless network illustrated in FIG. 8. For simplicity, the wireless network of FIG. 8 illustrates only network 106, network nodes 160 and 160b, and wireless devices 110, 110b, and 110c. In practice, the wireless network may further include any additional elements suitable for supporting communication between wireless devices, or between a wireless device and another communication device, such as a landline, a service provider, or any other network node or end device. Of the components shown, network node 160 and wireless device 110 are illustrated with additional details. The wireless network may provide communication and other types of services to one or more wireless devices to facilitate the wireless device's access to the wireless network and / or use of services provided by or via the wireless network.

[0050] A wireless network may comprise and / or interface with any type of communication, telecommunication, data, cellular, and / or radio network, or other similar type of system. In some embodiments, a wireless network may be configured to operate according to a particular standard or other type of predefined rules or procedures. Thus, particular embodiments of a wireless network may implement a communications standard, such as Global System for Mobile Communications (GSM), Universal Mobile Telecommunications System (UMTS), Long Term Evolution (LTE), and / or other suitable 2G, 3G, 4G, or 5G standard, a wireless local area network (wireless local area network (WLAN)) standard, such as the IEEE 802.11 standard, and / or any other suitable wireless communication standard, such as Worldwide Interoperability for Microwave Access (WiMax), Bluetooth, Z-Wave, and / or ZigBee standards.

[0051] The network 106 may comprise one or more backhaul networks, core networks, IP networks, public switched telephone networks (PSTN), packet data networks, optical networks, wide area networks (WANs), local area networks (LANs), wireless local area networks (WLANs), wired networks, wireless networks, metropolitan area networks, and other networks for enabling communication between devices.

[0052] The network node 160 and the wireless device 110 comprise various components, which are described in more detail below. These components cooperate to provide network node and / or wireless device functionality, such as providing wireless connectivity in a wireless network. In different embodiments, a wireless network may comprise any number of wired or wireless networks, network nodes, base stations, controllers, wireless devices, relay stations, and / or any other components or systems that may facilitate or participate in the communication of data and / or signals, whether via wired or wireless connections.

[0053] FIG. 9 illustrates an exemplary network node 160, according to some embodiments. A network node, as used herein, refers to a device capable of, set up, configured, and / or operable to communicate, directly or indirectly, with wireless devices and / or with other network nodes or devices in a wireless network to enable and / or provide wireless access to the wireless devices and / or to perform other functions (e.g., administration) in the wireless network. Examples of network nodes include, but are not limited to, access points (APs) (e.g., wireless access points), base stations (BSs) (e.g., radio base stations, Node Bs, evolved Node Bs (eNBs) and New Radio (NR) Node Bs (gNBs)). Base stations may be categorized based on the amount of coverage they provide (or, stated another way, the transmit power level of the base station), in which case they may be referred to as femto, pico, micro, or macro base stations. A base station may be a relay node or a relay donor node, which controls a relay. A network node may also include one or more (or all) parts of a distributed radio base station, such as a centralized digital unit and / or a remote radio unit (RRU), sometimes referred to as a remote radio head (RRH). Such a remote radio unit may or may not be integrated with an antenna as an antenna-integrated radio. A part of a distributed radio base station may also be referred to as a node in a distributed antenna system (DAS). Still further examples of network nodes include MSR equipment, such as a multi-standard radio (MSR) BS, a network controller, such as a radio network controller (RNC) or a base station controller (BSC), a base transceiver station (BTS), a transmission point, a transmission node, a multi-cell / multicast coordination entity (MCE), a core network node (e.g., MSC, mobility management entity (MME)), an O&M node, an OSS node, a SON node, a positioning node (e.g., E-SMLC), and / or an MDT.As another example, a network node may be a virtual network node, as described in more detail below, but more generally, a network node may represent any suitable device (or group of devices) capable of, configured to, and / or operable to enable and / or provide wireless devices with access to a wireless network or to provide some service to wireless devices that have accessed the wireless network.

[0054] In FIG. 9, network node 160 includes processing circuitry 170, device readable medium 180, interface 190, auxiliary equipment 184, power source 186, power circuitry 187, and antenna 162. Although network node 160 shown in the example wireless network of FIG. 9 may represent a device including the shown combination of hardware components, other embodiments may comprise network nodes with different combinations of components. It should be understood that a network node comprises any suitable combination of hardware and / or software required to perform the tasks, features, functions, and methods disclosed herein. Moreover, although the components of network node 160 are illustrated as a single box located within a larger box or nested within multiple boxes, in reality the network node may comprise multiple different physical components that make up a single shown component (e.g., device readable medium 180 may comprise multiple separate hard drives as well as multiple RAM modules).

[0055] Similarly, the network node 160 may be assembled from multiple physically separate components (e.g., a Node B component and an RNC component, or a BTS component and a BSC component, etc.), each of which may have their own respective components. In some scenarios in which the network node 160 comprises multiple separate components (e.g., a BTS component and a BSC component), one or more of the separate components may be shared among several network nodes. For example, a single RNC may control several Node Bs. In such scenarios, each unique Node B and RNC pair may be considered as a single separate network node in some instances. In some embodiments, the network node 160 may be configured to support several radio access technologies (RATs). In such embodiments, some components may be duplicated (e.g., separate device-readable media 180 for different RATs) and some components may be reused (e.g., the same antenna 162 may be shared by the RATs). Network node 160 may also include multiple sets of the various shown components for different wireless technologies, such as, for example, GSM, Wideband Code Division Multiple Access (WCDMA), LTE, NR, WiFi, or Bluetooth wireless technologies, integrated into network node 160. These wireless technologies may be integrated in the same or different chips or sets of chips and other components within network node 160.

[0056] The processing circuitry 170 is configured to perform any decision, computation, or similar operations (e.g., some acquisition operations) described herein as being provided by a network node. These operations performed by the processing circuitry 170 may include processing information acquired by the processing circuitry 170, for example, by converting the acquired information into other information, comparing the acquired or converted information with information stored in the network node, and / or performing one or more operations based on the acquired or converted information and as a result of the processing making a decision.

[0057] Processing circuitry 170 may comprise one or more combinations of a microprocessor, controller, microcontroller, central processing unit, digital signal processor, application specific integrated circuit, field programmable gate array, or any other suitable computing device, resource, or combination of hardware, software, and / or coded logic operable to provide network node 160 functionality, either alone or in conjunction with other network node 160 components, such as device readable medium 180. For example, processing circuitry 170 may execute instructions stored on device readable medium 180 or in memory within processing circuitry 170. Such functionality may include providing any of the various wireless features, functions, or benefits described herein. In some embodiments, processing circuitry 170 may include a system on a chip (SOC).

[0058] In some embodiments, the processing circuitry 170 may include one or more of a radio frequency (RF) transceiver circuitry 172 and a baseband processing circuitry 174. In some embodiments, the radio frequency (RF) transceiver circuitry 172 and the baseband processing circuitry 174 may be on separate chips (or sets of chips), boards, or units, such as a radio unit and a digital unit. In alternative embodiments, some or all of the RF transceiver circuitry 172 and the baseband processing circuitry 174 may be on the same chip or set of chips, board, or unit.

[0059] In some embodiments, some or all of the functionality described herein as being provided by a network node, base station, eNB, or other such network device may be performed by the processing circuitry 170 executing instructions stored in the device-readable medium 180, or in memory within the processing circuitry 170. In alternative embodiments, some or all of the functionality may be provided by the processing circuitry 170 without executing instructions stored in a separate or distinct device-readable medium, such as in a hardwired manner. In any of those embodiments, the processing circuitry 170 may be configured to perform the described functionality, whether or not it executes instructions stored in a device-readable storage medium. Benefits provided by such functionality are enjoyed by the processing circuitry 170 alone, or by other components of the network node 160, but by the network node 160 as a whole, and / or by end users and wireless networks generally.

[0060] The device readable medium 180 may comprise any form of volatile or non-volatile computer readable memory, including, but not limited to, persistent storage, solid state memory, remotely mounted memory, magnetic media, optical media, random access memory (RAM), read only memory (ROM), mass storage media (e.g., hard disk), removable storage media (e.g., flash drive, compact disk (CD) or digital video disk (DVD)), and / or any other volatile or non-volatile, non-transitory device readable and / or computer executable memory device that stores information, data, and / or instructions that may be used by the processing circuit 170. The device readable medium 180 may store any suitable instructions, data or information, including applications including one or more of computer programs, software, logic, rules, codes, tables, etc., and / or other instructions that may be executed by the processing circuit 170 and utilized by the network node 160. The device readable medium 180 may be used to store calculations performed by the processing circuit 170 and / or data received via the interface 190. In some embodiments, the processing circuit 170 and the device-readable medium 180 may be considered to be integrated.

[0061] The interface 190 is used in wired or wireless communication of signaling and / or data between the network node 160, the network 106, and / or the wireless device 110. As shown, the interface 190 comprises a port(s) / terminal(s) 194 for sending and receiving data to and from the network 106, for example over a wired connection. The interface 190 also includes a radio front-end circuit 192 that is coupled to the antenna 162 or, in some embodiments, may be part of the antenna 162. The radio front-end circuit 192 comprises a filter 198 and an amplifier 196. The radio front-end circuit 192 may be connected to the antenna 162 and the processing circuit 170. The radio front-end circuit may be configured to condition signals communicated between the antenna 162 and the processing circuit 170. The radio front-end circuit 192 may receive digital data to be sent to other network nodes or wireless devices via a wireless connection. The radio front-end circuitry 192 may convert the digital data into a radio signal having appropriate channel and bandwidth parameters using a combination of filters 198 and / or amplifiers 196. The radio signal may then be transmitted via the antenna 162. Similarly, when receiving data, the antenna 162 may collect the radio signal, which is then converted to digital data by the radio front-end circuitry 192. The digital data may be passed to the processing circuitry 170. In other embodiments, the interface may comprise different components and / or different combinations of components.

[0062] In some alternative embodiments, the network node 160 may not include a separate radio front-end circuit 192; instead, the processing circuit 170 may comprise a radio front-end circuit and be connected to the antenna 162 without a separate radio front-end circuit 192. Similarly, in some embodiments, all or a portion of the RF transceiver circuit 172 may be considered part of the interface 190. In still other embodiments, the interface 190 may include one or more ports or terminals 194, the radio front-end circuit 192, and the RF transceiver circuit 172 as part of a radio unit (not shown), and the interface 190 may communicate with a baseband processing circuit 174 that is part of a digital unit (not shown).

[0063] The antenna 162 may include one or more antennas or antenna arrays configured to send and / or receive wireless signals. The antenna 162 may be coupled to the radio front-end circuitry 192 and may be any type of antenna capable of wirelessly transmitting and receiving data and / or signals. In some embodiments, the antenna 162 may comprise one or more omni-directional, sector or panel antennas operable to transmit / receive wireless signals, for example, between 2 GHz and 66 GHz. An omni-directional antenna may be used to transmit / receive wireless signals in any direction, a sector antenna may be used to transmit / receive wireless signals from devices in a particular area, and a panel antenna may be a line-of-sight antenna used to transmit / receive wireless signals in a relatively straight line. In some instances, the use of more than one antenna may be referred to as MIMO. In some embodiments, the antenna 162 may be separate from the network node 160 and may be connectable to the network node 160 through an interface or port.

[0064] The antenna 162, the interface 190, and / or the processing circuitry 170 may be configured to perform any receiving operation and / or some obtaining operation described herein as being performed by a network node. Any information, data, and / or signal may be received from a wireless device, another network node, and / or any other network equipment. Similarly, the antenna 162, the interface 190, and / or the processing circuitry 170 may be configured to perform any transmitting operation described herein as being performed by a network node. Any information, data, and / or signal may be transmitted to a wireless device, another network node, and / or any other network equipment.

[0065] The power circuit 187 may comprise or be coupled to a power management circuit and is configured to supply power to the components of the network node 160 for performing the functions described herein. The power circuit 187 may receive power from the power source 186. The power source 186 and / or the power circuit 187 may be configured to provide power to the various components of the network node 160 in a form suitable for the respective components (e.g., at voltage and current levels required for each respective component). The power source 186 may either be included in the power circuit 187 and / or the network node 160 or be external to the power circuit 187 and / or the network node 160. For example, the network node 160 may be connectable to an external power source (e.g., an electrical outlet) via an input circuit or interface, such as an electrical cable, whereby the external power source provides power to the power circuit 187. As a further example, the power source 186 may comprise a power source in the form of a battery or battery pack connected to or integrated in the power circuit 187. Batteries can provide backup power if the external power source fails. Other types of power sources, such as photovoltaic devices, can also be used.

[0066] Alternate embodiments of network node 160 may include additional components other than those shown in FIG. 9 that may be responsible for providing some aspects of the network node's functionality, including any of the functionality described herein and / or functionality necessary to support the subject matter described herein. For example, network node 160 may include user interface devices to enable input of information into network node 160 and output of information from network node 160. This may enable a user to perform diagnostics, maintenance, repair, and other administrative functions for network node 160.

[0067] FIG. 10 illustrates an exemplary wireless device 110, according to some embodiments. A wireless device, as used herein, refers to a device capable of, configured to, and / or operable to wirelessly communicate with network nodes and / or other wireless devices. Unless otherwise noted, the term wireless device may be used interchangeably herein with user equipment (UE). Communicating wirelessly may involve transmitting and / or receiving wireless signals using electromagnetic, radio, infrared, and / or other types of signals suitable for conveying information over the air. In some embodiments, a wireless device may be configured to transmit and / or receive information without direct human interaction. For example, a wireless device may be designed to transmit information to a network on a predetermined schedule, when triggered by an internal or external event, or in response to a request from the network. Examples of wireless devices include, but are not limited to, smartphones, mobile phones, cell phones, voice-over-IP (VoIP) phones, wireless local loop phones, desktop computers, personal digital assistants (PDAs), wireless cameras, gaming consoles or devices, music storage devices, playback appliances, wearable terminal devices, wireless endpoints, mobile stations, tablets, laptop computers, laptop embedded equipment (LEE), laptop mounted equipment (LME), smart devices, wireless customer premises equipment (CPE), in-vehicle wireless terminal devices, etc. A wireless device may support device-to-device (D2D) communications, e.g., by implementing 3GPP standards for sidelink communications, vehicle-to-vehicle (V2V), vehicle-to-infrastructure (V2I), vehicle-to-everything (V2X), in which case it may be referred to as a D2D communications device. As yet another specific example, in an Internet of Things (IoT) scenario, a wireless device may represent a machine or other device that performs monitoring and / or measurements and transmits results of such monitoring and / or measurements to another wireless device and / or network node.The wireless device may in this case be a machine-to-machine (M2M) device, which may be referred to as an MTC device in a 3GPP context. As one particular example, the wireless device may be a UE implementing the 3GPP Narrowband Internet of Things (NB-IoT) standard. Particular examples of such machines or devices are sensors, metering devices such as power meters, industrial machinery, or household or personal appliances (e.g., refrigerators, televisions, etc.), personal wearables (e.g., watches, fitness trackers, etc.). In other scenarios, the wireless device may represent a vehicle or other equipment capable of monitoring and / or reporting on its operational status or other functions associated with its operation. The wireless devices described above may represent an endpoint of a wireless connection, in which case the device may be referred to as a wireless terminal. Furthermore, the wireless devices described above may be mobile, in which case the device may be referred to as a mobile device or mobile terminal.

[0068] As shown, wireless device 110 includes antenna 111, interface 114, processing circuitry 120, device-readable medium 130, user interface equipment 132, auxiliary equipment 134, power source 136, and power circuitry 137. Wireless device 110 may include multiple sets of one or more of the shown components for different wireless technologies supported by wireless device 110, such as, for example, GSM, WCDMA, LTE, NR, WiFi, WiMAX, or Bluetooth wireless technologies, just to name a few. These wireless technologies may be integrated on the same or different chip or set of chips as other components in wireless device 110.

[0069] Antenna 111 may include one or more antennas or antenna arrays configured to send and / or receive wireless signals and is connected to interface 114. In some alternative embodiments, antenna 111 may be separate from wireless device 110 and connectable to wireless device 110 through an interface or port. Antenna 111, interface 114, and / or processing circuit 120 may be configured to perform any receiving or transmitting operations described herein as being performed by a wireless device. Any information, data, and / or signal may be received from a network node and / or another wireless device. In some embodiments, the wireless front-end circuit and / or antenna 111 may be considered an interface.

[0070] As shown, the interface 114 comprises a radio front-end circuit 112 and an antenna 111. The radio front-end circuit 112 comprises one or more filters 118 and an amplifier 116. The radio front-end circuit 112 is connected to the antenna 111 and the processing circuit 120 and is configured to condition signals communicated between the antenna 111 and the processing circuit 120. The radio front-end circuit 112 may be coupled to or part of the antenna 111. In some embodiments, the wireless device 110 may not include a separate radio front-end circuit 112; rather, the processing circuit 120 may comprise a radio front-end circuit and be connected to the antenna 111. Similarly, in some embodiments, some or all of the RF transceiver circuit 122 may be considered part of the interface 114. The radio front-end circuit 112 may receive digital data to be sent to other network nodes or wireless devices via a wireless connection. The radio front-end circuitry 112 may convert the digital data into a radio signal having appropriate channel and bandwidth parameters using a combination of filters 118 and / or amplifiers 116. The radio signal may then be transmitted via the antenna 111. Similarly, when receiving data, the antenna 111 may collect the radio signal, which is then converted to digital data by the radio front-end circuitry 112. The digital data may be passed to the processing circuitry 120. In other embodiments, the interface may comprise different components and / or different combinations of components.

[0071] The processing circuitry 120 may comprise one or more combinations of a microprocessor, controller, microcontroller, central processing unit, digital signal processor, application specific integrated circuit, field programmable gate array, or any other suitable computing device, resources, or combinations of hardware, software, and / or coded logic operable to provide wireless device 110 functionality, either alone or in conjunction with other wireless device 110 components, such as device readable medium 130. Such functionality may include providing any of the various wireless features or benefits described herein. For example, the processing circuitry 120 may execute instructions stored on the device readable medium 130 or in a memory within the processing circuitry 120 to provide the functionality disclosed herein.

[0072] As shown, the processing circuitry 120 includes one or more of the RF transceiver circuitry 122, the baseband processing circuitry 124, and the application processing circuitry 126. In other embodiments, the processing circuitry may comprise different components and / or different combinations of components. In some embodiments, the processing circuitry 120 of the wireless device 110 may comprise a SOC. In some embodiments, the RF transceiver circuitry 122, the baseband processing circuitry 124, and the application processing circuitry 126 may be on separate chips or sets of chips. In alternative embodiments, some or all of the baseband processing circuitry 124 and the application processing circuitry 126 may be combined into one chip or set of chips, and the RF transceiver circuitry 122 may be on a separate chip or set of chips. In yet alternative embodiments, some or all of the RF transceiver circuitry 122 and the baseband processing circuitry 124 may be on the same chip or set of chips, and the application processing circuitry 126 may be on a separate chip or set of chips. In yet other alternative embodiments, some or all of the RF transceiver circuitry 122, the baseband processing circuitry 124, and the application processing circuitry 126 may be combined in the same chip or set of chips. In some embodiments, the RF transceiver circuitry 122 may be part of the interface 114. The RF transceiver circuitry 122 may condition RF signals for the processing circuitry 120.

[0073] In some embodiments, some or all of the functionality described herein as being performed by the wireless device may be provided by the processing circuitry 120 executing instructions stored on a device-readable medium 130, which in some embodiments may be a computer-readable storage medium. In alternative embodiments, some or all of the functionality may be provided by the processing circuitry 120 without executing instructions stored on a separate or distinct device-readable storage medium, such as in a hardwired manner. In any of those particular embodiments, the processing circuitry 120 may be configured to perform the described functionality, whether or not it executes instructions stored on a device-readable storage medium. Benefits provided by such functionality are enjoyed by the processing circuitry 120 alone or by other components of the wireless device 110, but by the wireless device 110 as a whole, and / or by end users and wireless networks generally.

[0074] Processing circuitry 120 may be configured to perform any of the decision, calculation, or similar operations (e.g., some acquisition operations) described herein as being performed by a wireless device. These operations as performed by processing circuitry 120 may include processing information acquired by processing circuitry 120, for example, by converting the acquired information into other information, comparing the acquired or converted information with information stored by wireless device 110, and / or performing one or more operations based on the acquired or converted information and as a result of the processing making a decision.

[0075] The device-readable medium 130 may be operable to store applications including one or more of computer programs, software, logic, rules, codes, tables, etc., and / or other instructions that may be executed by the processing circuit 120. The device-readable medium 130 may include computer memory (e.g., random access memory (RAM) or read-only memory (ROM)), mass storage media (e.g., hard disk), removable storage media (e.g., compact disc (CD) or digital video disc (DVD)), and / or any other volatile or non-volatile, non-transitory device-readable and / or computer-executable memory device that stores information, data, and / or instructions that may be used by the processing circuit 120. In some embodiments, the processing circuit 120 and the device-readable medium 130 may be considered to be integrated.

[0076] The user interface equipment 132 may provide components that allow a human user to interact with the wireless device 110. Such interaction may be of many forms, such as visual, auditory, tactile, etc. The user interface equipment 132 may be operable to produce output to the user and to allow the user to provide input to the wireless device 110. The type of interaction may vary depending on the type of user interface equipment 132 installed on the wireless device 110. For example, if the wireless device 110 is a smartphone, the interaction may be via a touch screen, and if the wireless device 110 is a smart meter, the interaction may be through a screen that provides usage (e.g., number of gallons used) or a speaker that provides an audible alarm (e.g., if smoke is detected). The user interface equipment 132 may include input interfaces, devices and circuits, as well as output interfaces, devices and circuits. The user interface equipment 132 is configured to allow input of information to the wireless device 110 and is connected to the processing circuit 120 to allow the processing circuit 120 to process the input information. The user interface equipment 132 may include, for example, a microphone, proximity or other sensors, keys / buttons, a touch display, one or more cameras, a USB port, or other input circuitry. The user interface equipment 132 is also configured to enable output of information from the wireless device 110 and to enable the processing circuitry 120 to output information from the wireless device 110. The user interface equipment 132 may include, for example, a speaker, a display, vibration circuitry, a USB port, a headphone interface, or other output circuitry. Using one or more input and output interfaces, devices, and circuits of the user interface equipment 132, the wireless device 110 may communicate with an end user and / or a wireless network, enabling the end user and / or the wireless network to benefit from the functionality described herein.

[0077] Auxiliary equipment 134 is operable to provide more specific functionality that may not generally be implemented by wireless devices. It may comprise specialized sensors for taking measurements for various purposes, interfaces for additional types of communication such as wired communication, etc. The inclusion and types of components of auxiliary equipment 134 may vary depending on the embodiment and / or scenario.

[0078] The power source 136 may be in the form of a battery or battery pack in some embodiments. Other types of power sources may also be used, such as an external power source (e.g., an electrical outlet), a photovoltaic device, or a battery cell. The wireless device 110 may further comprise a power circuit 137 for delivering power from the power source 136 to various portions of the wireless device 110 that require power from the power source 136 to perform any of the functions described or indicated herein. The power circuit 137 may comprise a power management circuit in some embodiments. The power circuit 137 may additionally or alternatively be operable to receive power from an external power source, in which case the wireless device 110 may be connectable to an external power source (such as an electrical outlet) via an input circuit or interface, such as a power cable. The power circuit 137 may also be operable in some embodiments to deliver power from the external power source to the power source 136. This may be for charging the power source 136, for example. Power circuitry 137 may perform any formatting, conversion, or other modification on the power from power source 136 to make the power suitable for the respective components of wireless device 110 to which it is supplied.

[0079] FIG. 11 illustrates an embodiment of a UE according to various aspects described herein. User equipment or UE as used herein does not necessarily have a user in the sense of a human user who owns and / or operates an associated device. Instead, a UE may represent a device (e.g., a smart sprinkler controller) that is intended for sale to or operation by a human user, but may not be associated with or may not be initially associated with a particular human user. Alternatively, a UE may represent a device (e.g., a smart power meter) that is not intended for sale to or operation by an end user, but may be associated with or operated for the benefit of a user. The UE 2200 may be any UE identified by the 3rd Generation Partnership Project (3GPP), including an NB-IoT UE, a machine type communication (MTC) UE, and / or an enhanced MTC (eMTC) UE. The UE 200 shown in Figure 9 is an example of a wireless device configured for communication according to one or more communications standards promulgated by the 3rd Generation Partnership Project (3GPP), such as the 3GPP GSM, UMTS, LTE, and / or 5G standards. As previously mentioned, the terms wireless device and UE may be used interchangeably. Thus, although Figure 11 is a UE, the components described herein are equally applicable to a wireless device and vice versa.

[0080] In FIG. 11, UE 200 includes processing circuitry 201 operatively coupled to input / output interface 205, radio frequency (RF) interface 209, network connection interface 211, memory 215 including random access memory (RAM) 217, read only memory (ROM) 219, storage medium 221, etc., communication subsystem 231, power source 233, and / or any other components, or any combination thereof. Storage medium 221 includes operating system 223, application programs 225, and data 227. In other embodiments, storage medium 221 may include other similar types of information. Some UEs may utilize all of the components shown in FIG. 11 or only a subset of those components. The level of integration between components may vary from UE to UE. Additionally, some UEs may include multiple instances of components, such as multiple processors, memories, transceivers, transmitters, receivers, etc.

[0081] In Fig. 11, the processing circuit 201 may be configured to process computer instructions and data. The processing circuit 201 may be configured to implement any sequential state machine operable to execute machine instructions stored in memory as a machine-readable computer program, such as one or more hardware-implemented state machines (e.g., in discrete logic, FPGA, ASIC, etc.), programmable logic with appropriate firmware, one or more pre-programmed, general-purpose processors, such as a microprocessor or digital signal processor (DSP) with appropriate software, or any combination of the above. For example, the processing circuit 201 may include two central processing units (CPUs). The data may be information in a form suitable for use by a computer.

[0082] In the illustrated embodiment, the input / output interface 205 may be configured to provide an input device, an output device, or a communication interface to an input / output device. The UE 200 may be configured to use an output device via the input / output interface 205. The output device may use the same type of interface port as the input device. For example, a USB port may be used to provide input to and output from the UE 200. The output device may be a speaker, a sound card, a video card, a display, a monitor, a printer, an actuator, an emitter, a smart card, another output device, or any combination thereof. The UE 200 may be configured to use an input device via the input / output interface 205 to allow a user to capture information on the UE 200. The input device may include a touch-sensitive or presence-sensitive display, a camera (e.g., a digital camera, a digital video camera, a webcam, etc.), a microphone, a sensor, a mouse, a trackball, a directional pad, a trackpad, a scroll wheel, a smart card, etc. The presence-sensitive display may include a capacitive or resistive touch sensor to sense input from a user. The sensor may be, for example, an accelerometer, a gyroscope, a tilt sensor, a force sensor, a magnetometer, a light sensor, a proximity sensor, another like sensor, or any combination thereof. For example, the input device may be an accelerometer, a magnetometer, a digital camera, a microphone, and a light sensor.

[0083] In FIG. 11, the RF interface 209 may be configured to provide a communication interface to RF components, such as a transmitter, a receiver, and an antenna. The network connection interface 211 may be configured to provide a communication interface to a network 243a. The network 243a may encompass a wired and / or wireless network, such as a local area network (LAN), a wide area network (WAN), a computer network, a wireless network, a communication network, another similar network, or any combination thereof. For example, the network 243a may comprise a Wi-Fi network. The network connection interface 211 may be configured to include a receiver and a transmitter interface used to communicate with one or more other devices over a communication network according to one or more communication protocols, such as Ethernet, TCP / IP, SONET, ATM, etc. The network connection interface 211 may implement receiver and transmitter functions appropriate for a communication network link (e.g., optical, electrical, etc.). The transmitter and receiver functions may share circuit components, software, or firmware, or may alternatively be implemented separately.

[0084] The RAM 217 may be configured to interface to the processing circuit 201 via the bus 202 to provide storage or caching of data or computer instructions during execution of software programs, such as an operating system, application programs, and device drivers. The ROM 219 may be configured to provide computer instructions or data to the processing circuit 201. For example, the ROM 219 may be configured to store unchanging low-level system code or data for basic system functions, such as basic input / output (I / O), booting, or receiving keystrokes from a keyboard, stored in non-volatile memory. The storage medium 221 may be configured to include memory, such as RAM, ROM, programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), magnetic disk, optical disk, floppy disk, hard disk, removable cartridge, or flash drive. In one example, the storage medium 221 may be configured to include an operating system 223, an application program 225, such as a web browser application, a widget or gadget engine, or another application, and data files 227. The storage medium 221 may store any of a variety of different operating systems or combinations of operating systems for use by the UE 200.

[0085] The storage medium 221 may be configured to include several physical drive units, such as a redundant array of independent disks (RAID), a floppy disk drive, a flash memory, a USB flash drive, an external hard disk drive, a thumb drive, a pen drive, a key drive, a high density digital versatile disk (HD-DVD) optical disk drive, an internal hard disk drive, a Blu-Ray optical disk drive, a holographic digital data storage (HDDS) optical disk drive, an external mini dual in-line memory module (DIMM), a synchronous dynamic random access memory (SDRAM), an external micro-DIMM SDRAM, a smart card memory such as a subscriber identity module or a removable user identity (SIM / RUIM) module, other memory, or any combination thereof. The storage medium 221 may enable the UE 200 to access computer executable instructions, application programs, etc. stored in a temporary or non-transitory memory medium, offload data, or upload data. An article of manufacture, such as an article of manufacture utilizing a communication system, may be tangibly embodied in the storage medium 221, and the storage medium 221 may comprise a device-readable medium.

[0086] In FIG. 11, the processing circuit 201 may be configured to communicate with the network 243b using the communication subsystem 231. The networks 243a and 243b may be the same network or networks or different networks or networks. The communication subsystem 231 may be configured to include one or more transceivers used to communicate with the network 243b. For example, the communication subsystem 231 may be configured to include one or more transceivers used to communicate with one or more remote transceivers of another device capable of wireless communication, such as another wireless device, UE, or base station of a radio access network (RAN), according to one or more communication protocols, such as IEEE 802.2, CDMA, WCDMA, GSM, LTE, Universal Terrestrial Radio Access Network (UTRAN), WiMax, etc. Each transceiver may include a transmitter 233 and / or a receiver 235 for implementing a transmitter function or a receiver function, respectively, appropriate for a RAN link (e.g., frequency allocation, etc.). Furthermore, the transmitter 233 and receiver 235 of each transceiver may share circuit components, software or firmware, or may alternatively be implemented separately.

[0087] In the illustrated embodiment, the communication capabilities of the communication subsystem 231 may include data communications, voice communications, multimedia communications, short-range communications such as Bluetooth, near-field communications, location-based communications such as using a global positioning system (GPS) to determine location, another similar communication capability, or any combination thereof. For example, the communication subsystem 231 may include cellular communications, Wi-Fi communications, Bluetooth communications, and GPS communications. The network 243b may encompass wired and / or wireless networks, such as a local area network (LAN), a wide area network (WAN), a computer network, a wireless network, a communications network, another similar network, or any combination thereof. For example, the network 243b may be a cellular network, a Wi-Fi network, and / or a near-field network. The power source 213 may be configured to provide alternating current (AC) or direct current (DC) power to the components of the UE 200.

[0088] The features, benefits and / or functions described herein may be implemented in one of the components of the UE 200 or distributed across multiple components of the UE 200. Furthermore, the features, benefits and / or functions described herein may be implemented in any combination of hardware, software or firmware. In one example, the communication subsystem 231 may be configured to include any of the components described herein. Furthermore, the processing circuit 201 may be configured to communicate with any of such components over the bus 202. In another example, any of such components may be represented by program instructions stored in memory that, when executed by the processing circuit 201, perform the corresponding functions described herein. In another example, the functions of any of such components may be distributed between the processing circuit 201 and the communication subsystem 231. In another example, non-computationally intensive functions of any of such components may be implemented in software or firmware and computationally intensive functions may be implemented in hardware.

[0089] FIG. 12 is a schematic block diagram illustrating a virtualization environment 300 in which functions implemented by some embodiments may be virtualized. In this context, virtualizing means creating a virtual version of an apparatus or device, which may include virtualizing a hardware platform, storage devices, and networking resources. Virtualization as used herein may be applied to a node (e.g., a virtualized base station or a virtualized radio access node) or to a device (e.g., a UE, a wireless device, or any other type of communication device) or to a component of that device, and relates to implementations in which at least a portion of the functionality is implemented as one or more virtual components (e.g., via one or more applications, components, functions, virtual machines, or containers running on one or more physical processing nodes in one or more networks).

[0090] In some embodiments, some or all of the functionality described herein may be implemented as virtual components executed by one or more virtual machines implemented in one or more virtual environments 300 hosted by one or more of the hardware nodes 330. Furthermore, in embodiments where the virtual nodes are not wireless access nodes or do not require wireless connectivity (e.g., core network nodes), the network nodes may be fully virtualized.

[0091] The functionality may be implemented by one or more applications 320 (which may alternatively be referred to as software instances, virtual appliances, network functions, virtual nodes, virtual network functions, etc.) operable to implement some of the features, functions, and / or benefits of some of the embodiments disclosed herein. The applications 320 are run in a virtualization environment 300, which provides hardware 330 comprising processing circuitry 360 and memory 390. The memory 390 includes instructions 395 executable by the processing circuitry 360 such that the applications 320 are operable to provide one or more of the features, benefits, and / or functions disclosed herein.

[0092] The virtualization environment 300 includes a general-purpose or dedicated network hardware device 330 that includes a set of one or more processors or processing circuitry 360, which may be a commercial off-the-shelf (COTS) processor, a dedicated application-specific integrated circuit (ASIC), or any other type of processing circuitry including digital or analog hardware components or dedicated processors. Each hardware device may include a memory 390-1, which may be a non-persistent memory for temporarily storing instructions 395 or software executed by the processing circuitry 360. Each hardware device may include one or more network interface controllers (NICs) 370, also known as network interface cards, which include physical network interfaces 380. Each hardware device may also include a non-transitory, persistent, machine-readable storage medium 390-2 that stores software 395 and / or instructions executable by the processing circuitry 360. The software 395 may include any type of software, including software for instantiating one or more virtualization layers 350 (also called hypervisors), software for running virtual machines 340, and software that enables it to perform the functions, features and / or benefits described in connection with some of the embodiments described herein.

[0093] The virtual machines 340 may comprise virtual processing, virtual memory, virtual networking or interfaces, and virtual storage, and may be run by a corresponding virtualization layer 350 or hypervisor. Different embodiments of the virtual appliance 320 instances may be implemented on one or more of the virtual machines 340, and the implementations may be done in different ways.

[0094] During operation, the processing circuitry 360 executes software 395 to instantiate a hypervisor or virtualization layer 350, which is sometimes referred to as a virtual machine monitor (VMM). The virtualization layer 350 may present to the virtual machines 340 a virtual operating platform that looks like networking hardware.

[0095] 12, the hardware 330 may be a standalone network node with general or specific components. The hardware 330 may include an antenna 3225 and may implement some functions via virtualization. Alternatively, the hardware 330 may be part of a larger cluster of hardware (e.g., as in the case of a data center or customer premises equipment (CPE)) where many hardware nodes work together and are managed via a management and orchestration (MANO) 3100 that, among other things, oversees the lifecycle management of the application 320.

[0096] Hardware virtualization is referred to in some contexts as network function virtualization (NFV). NFV can be used to consolidate many network equipment types onto industry-standard high-volume server hardware, physical switches, and physical storage that may be located in data centers and customer premises equipment.

[0097] In the context of NFV, virtual machine 340 may be a software implementation of a physical machine that runs programs as if those programs were running on a physical, non-virtualized machine. Each virtual machine 340 and the portion of hardware 330 on which it runs, whether hardware dedicated to that virtual machine and / or hardware shared by that virtual machine with other ones of virtual machines 340, form a separate Virtual Network Element (VNE).

[0098] Further in the context of NFV, a Virtual Network Function (VNF) is responsible for handling a specific network function running in one or more virtual machines 340 on top of the hardware networking infrastructure 330 and corresponds to application 320 in FIG. 12.

[0099] In some embodiments, one or more radio units 3200, each including one or more transmitters 3220 and one or more receivers 3210, may be coupled to one or more antennas 3225. The radio units 3200 may communicate directly with the hardware node 330 via one or more suitable network interfaces and may be used in combination with a virtualization component to provide a virtual node with wireless capabilities, such as a wireless access node or base station.

[0100] In some embodiments, some signaling may be affected using a control system 3230, which may alternatively be used for communication between the hardware nodes 330 and the wireless unit 3200.

[0101] FIG. 13 illustrates a communications network connected to a host computer through an intermediate network, according to some embodiments.

[0102] Referring to Fig. 13, according to one embodiment, a communication system includes a communication network 410, such as a 3GPP type cellular network, comprising an access network 411, such as a wireless access network, and a core network 414. The access network 411 comprises a number of base stations 412a, 412b, 412c, such as NBs, eNBs, gNBs or other types of wireless access points, each defining a corresponding coverage area 413a, 413b, 413c. Each base station 412a, 412b, 412c can be connected to the core network 414 over a wired or wireless connection 415. A first UE 491 located in the coverage area 413c is configured to wirelessly connect to or be paged by the corresponding base station 412c. A second UE 492 in the coverage area 413a can be wirelessly connected to the corresponding base station 412a. Although multiple UEs 491, 492 are shown in this example, the disclosed embodiments are equally applicable to situations where only one UE is in the coverage area or is connected to a corresponding base station 412.

[0103] The communication network 410 is itself connected to a host computer 430, which may be embodied in hardware and / or software of a standalone server, a cloud-implemented server, a distributed server, or as a processing resource in a server farm. The host computer 430 may be owned or under the control of a service provider, or may be operated by or on behalf of the service provider. The connections 421 and 422 between the communication network 410 and the host computer 430 may extend directly from the core network 414 to the host computer 430, or may proceed through an optional intermediate network 420. The intermediate network 420 may be one of a public network, a private network, or a hosted network, or a combination of two or more of them, and the intermediate network 420 may be a backbone network or the Internet, if any, and in particular the intermediate network 420 may comprise two or more sub-networks (not shown).

[0104] The communication system of FIG. 13 as a whole enables connectivity between connected UEs 491, 492 and a host computer 430. The connectivity may be described as an over-the-top (OTT) connection 450. The host computer 430 and connected UEs 491, 492 are configured to communicate data and / or signaling via the OTT connection 450 using the access network 411, the core network 414, any intermediate networks 420, and possible further infrastructure (not shown) as intermediaries. The OTT connection 450 may be transparent in the sense that the participating communication devices through which the OTT connection 450 passes are unaware of the routing of the uplink and downlink communications. For example, the base station 412 may not be or need not be informed about the past routing of incoming downlink communications involving data originating from the host computer 430 to be forwarded (e.g., handed over) to the connected UE 491. Similarly, the base station 412 does not need to be aware of the future routing of outgoing uplink communications originating from the UE 491 and destined for the host computer 430 .

[0105] FIG. 14 illustrates a host computer communicating with user equipment via a base station over a partially wireless connection according to some embodiments.

[0106] Next, an exemplary implementation of the UE, base station and host computer described in the previous paragraph according to an embodiment will be described with reference to FIG. 14. In the communication system 500, the host computer 510 comprises hardware 515 including a communication interface 516 configured to set up and maintain wired or wireless connections with interfaces of different communication devices of the communication system 500. The host computer 510 further comprises a processing circuit 518, which may have storage and / or processing capabilities. In particular, the processing circuit 518 may comprise one or more programmable processors, application specific integrated circuits, field programmable gate arrays, or combinations thereof (not shown) adapted to execute instructions. The host computer 510 further comprises software 511, which is stored in or accessible by the host computer 510 and is executable by the processing circuit 518. The software 511 includes a host application 512. The host application 512 may be operable to provide services to a remote user, such as a UE 530 that connects via an OTT connection 550 that terminates at the UE 530 and the host computer 510. In providing services to the remote user, the host application 512 may provide user data that is transmitted using the OTT connection 550.

[0107] The communication system 500 further includes a base station 520 provided in the communication system, the base station 520 comprising hardware 525 enabling the base station 520 to communicate with the host computer 510 and the UE 530. The hardware 525 may include a communication interface 526 for setting up and maintaining wired or wireless connections with interfaces of different communication devices of the communication system 500, as well as a wireless interface 527 for setting up and maintaining at least a wireless connection 570 with a UE 530 located in a coverage area (not shown in FIG. 14) served by the base station 520. The communication interface 526 may be configured to facilitate a connection 560 to the host computer 510. The connection 560 may be direct or alternatively the connection 560 may pass through a core network (not shown in FIG. 14) of the communication system and / or one or more intermediate networks outside the communication system. In the illustrated embodiment, the hardware 525 of the base station 520 further includes processing circuitry 528, which may comprise one or more programmable processors, application specific integrated circuits, field programmable gate arrays, or combinations thereof (not shown) adapted to execute instructions. The base station 520 further has software 521 stored internally or accessible via an external connection.

[0108] The communication system 500 further includes the UE 530 already mentioned. The hardware 535 of the UE 530 may include a wireless interface 537 configured to set up and maintain a wireless connection 570 with a base station serving a coverage area in which the UE 530 is currently located. The hardware 535 of the UE 530 further includes a processing circuit 538, which may comprise one or more programmable processors, application specific integrated circuits, field programmable gate arrays, or combinations thereof (not shown) adapted to execute instructions. The UE 530 further includes software 531 stored in or accessible by the UE 530 and executable by the processing circuit 538. The software 531 includes a client application 532. The client application 532 may be operable to provide services to a human or non-human user via the UE 530 with the support of the host computer 510. At the host computer 510, a running host application 512 may communicate with a running client application 532 via an OTT connection 550 that terminates at the UE 530 and the host computer 510. In providing services to a user, the client application 532 may receive request data from the host application 512 and provide user data in response to the request data. The OTT connection 550 may transfer both the request data and the user data. The client application 532 may interact with the user to generate the user data that the client application 532 provides.

[0109] It should be noted that the host computer 10, base station 520 and UE 530 shown in Figure 14 may be similar or equivalent to the host computer 430, one of the base stations 412a, 412b, 412c, and one of the UEs 491, 492, respectively, of Figure 13. That is, the inner workings of these entities may be as shown in Figure 14, and separately, the surrounding network topology may be that of Figure 13.

[0110] 14, the OTT connection 550 is depicted abstractly to show communication between the host computer 510 and the UE 530 via the base station 520, without explicit reference to intermediary devices and the exact routing of messages through these devices. The network infrastructure may determine the routing, and the network infrastructure may be configured to hide the routing from the UE 530 or from the service provider operating the host computer 510, or both. The network infrastructure may also make decisions to dynamically change the routing while the OTT connection 550 is active (e.g., based on load balancing considerations or reconfiguration of the network).

[0111] The wireless connection 570 between the UE 530 and the base station 520 follows the teachings of the embodiments described throughout this disclosure. One or more of the various embodiments improve the performance of the OTT service provided to the UE 530 using the OTT connection 550 of which the wireless connection 570 forms the last segment. More precisely, the teachings of these embodiments may improve data rates, latency, and / or power consumption, thereby providing benefits such as reduced user latency, relaxed limitations on file sizes, improved responsiveness, and / or extended battery life.

[0112] Measurement procedures may be provided for the purpose of monitoring data rates, latency, and other factors that one or more embodiments improve upon. There may further be an optional network function for reconfiguring the OTT connection 550 between the host computer 510 and the UE 530 in response to fluctuations in the measurement results. The measurement procedures and / or the network function for reconfiguring the OTT connection 550 may be implemented in the software 511 and hardware 515 of the host computer 510 or in the software 531 and hardware 535 of the UE 530, or both. In an embodiment, sensors (not shown) may be deployed in or associated with the communication device through which the OTT connection 550 passes, and the sensors may participate in the measurement procedures by providing values ​​of the monitored quantities exemplified above, or other physical quantities from which the software 511, 531 may calculate or estimate the monitored quantities. The reconfiguration of the OTT connection 550 may include message formats, retransmission settings, preferred routing, etc., and the reconfiguration need not affect the base station 5520, and the reconfiguration may be unknown or imperceptible to the base station 520. Such procedures and functions may be known and practiced in the art. In some embodiments, the measurements may involve proprietary UE signaling that facilitates the host computer 510 measurements of throughput, propagation time, latency, etc. The measurements may be implemented in the software 511 and 531 causing messages, particularly empty or "dummy" messages, to be sent using the OTT connection 550 while the software 511 and 531 monitors propagation times, errors, etc.

[0113] FIG. 15 is a flow chart illustrating a method implemented in a communication system according to one embodiment. The communication system includes a host computer, a base station, and a UE, which may be as described with reference to FIG. 13 and FIG. 14. For simplicity of the disclosure, only drawing references to FIG. 15 are included in this section. In step 610, the host computer provides user data. In sub-step 611 of step 610 (which may be optional), the host computer provides the user data by executing a host application. In step 620, the host computer initiates a transmission carrying the user data to the UE. In step 630 (which may be optional), the base station transmits the user data carried in the host computer initiated transmission to the UE, according to the teachings of the embodiments described throughout this disclosure. In step 640 (which may also be optional), the UE executes a client application associated with the host application executed by the host computer.

[0114] FIG. 16 is a flow chart illustrating a method implemented in a communication system according to one embodiment. The communication system includes a host computer, a base station, and a UE, which may be as described with reference to FIG. 13 and FIG. 14. For simplicity of the disclosure, only drawing references to FIG. 16 are included in this section. In step 710 of the method, the host computer provides user data. In an optional sub-step (not shown), the host computer provides the user data by executing a host application. In step 720, the host computer initiates a transmission carrying the user data to the UE. The transmission may proceed via the base station according to the teachings of the embodiments described throughout this disclosure. In step 730 (which may be optional), the UE receives the user data carried in the transmission.

[0115] FIG. 17 is a flow chart illustrating a method implemented in a communication system according to one embodiment. The communication system includes a host computer, a base station, and a UE, which may be as described with reference to FIG. 13 and FIG. 14. For simplicity of the disclosure, only drawing references to FIG. 17 are included in this section. In step 810 (which may be optional), the UE receives input data provided by the host computer. Additionally or alternatively, in step 820, the UE provides user data. In sub-step 821 (which may be optional) of step 820, the UE provides the user data by executing a client application. In sub-step 811 (which may be optional) of step 810, the UE executes a client application that provides the user data in response to the received input data provided by the host computer. In providing the user data, the executed client application may further take into account user input received from the user. Regardless of the particular manner in which the user data is provided, the UE initiates transmission of the user data to the host computer in sub-step 830 (which may be optional). In method step 840, the host computer receives user data transmitted from the UE according to the teachings of the embodiments described throughout this disclosure.

[0116] FIG. 18 is a flow chart illustrating a method implemented in a communication system according to one embodiment. The communication system includes a host computer, a base station, and a UE, which may be as described with reference to FIG. 13 and FIG. 14. For simplicity of the disclosure, only a drawing reference to FIG. 18 is included in this section. In step 910 (which may be optional), the base station receives user data from the UE, according to the teachings of the embodiments described throughout this disclosure. In step 920 (which may be optional), the base station initiates a transmission of the received user data to the host computer. In step 930 (which may be optional), the host computer receives the user data carried in the transmission initiated by the base station.

[0117] 19 illustrates a method 1000 by a wireless device 110 according to some embodiments. In step 1002, the wireless device 110 determines whether a first message received from a network node 160 includes an AKMA key indicator. In step 1004, based on whether the first message includes an AKMA indicator, the wireless device 110 determines whether to generate AKMA keying material for an authentication procedure with the network.

[0118] FIG. 20 illustrates a schematic block diagram of a virtual device 1100 in a wireless network (e.g., the wireless network shown in FIG. 8). The device may be implemented in a wireless device or a network node (e.g., the wireless device 110 or the network node 160 shown in FIG. 8). The device 1100 is operable to perform the example method described with respect to FIG. 19 and, possibly, any other process or method disclosed herein. It should also be understood that the method of FIG. 19 is not necessarily performed solely by the device 1100. At least some operations of the method may be performed by one or more other entities.

[0119] The virtual device 1100 may comprise a processing circuit, which may include one or more microprocessors or microcontrollers, as well as other digital hardware, which may include digital signal processors (DSPs), dedicated digital logic, and the like. The processing circuit may be configured to execute program code stored in a memory, which may include one or several types of memory, such as a read-only memory (ROM), a random access memory, a cache memory, a flash memory device, an optical storage device, and the like. The program code stored in the memory includes, in some embodiments, program instructions for executing one or more communication and / or data communication protocols, as well as instructions for performing one or more of the techniques described herein. In some implementations, the processing circuit may be used to cause the first determination module 1110, the second determination module 1120, and any other suitable units of the device 1100 to perform corresponding functions according to one or more embodiments of the present disclosure.

[0120] According to some embodiments, the first determination module 1110 may perform some of the determination functions of the apparatus 1100. For example, the determination module 1110 may determine whether a first message received from the network node 160 includes an AKMA key indicator.

[0121] According to some embodiments, the second decision module 1120 may perform some other of the decision functions of the apparatus 1100. For example, based on whether the first message includes an AKMA indicator, the second decision module 1120 may determine whether to generate AKMA keying material for an authentication procedure with the network.

[0122] The term unit may have its conventional meaning in the field of electronics, electrical devices, and / or electronic devices and may include, for example, electric and / or electronic circuits, devices, modules, processors, memories, logical solid and / or discrete devices, computer programs or instructions, etc., for performing a respective task, procedure, computation, output, and / or display function, such as those described herein.

[0123] FIG. 21 illustrates a method 1200 by the wireless device 110 in accordance with some embodiments. In step 1202, in response to determining a need to initiate a communication session with an application function (AF), the wireless device 110 AKMA In step 1204, the wireless device 110 sends a request to the AF to initiate a communication session.

[0124] In a particular embodiment, the need to initiate a communication session with the AF is determined after performing a primary authentication procedure with the network.

[0125] In a particular embodiment, during the primary authentication procedure, the wireless device 110 acquires the root key K AUSF Generate.

[0126] In a particular embodiment, the wireless device 110 AUSF Based on K AKMA and K. AKMA Identifier (K AKMA Generate a .

[0127] In a particular embodiment, the wireless device 110 determines, based on subscription information stored on or at the wireless device 110, AKMAFIG. 22 illustrates a schematic block diagram of a virtual device 1300 in a wireless network (e.g., the wireless network shown in FIG. 8). The device may be implemented in a wireless device or a network node (e.g., the wireless device 110 or the network node 160 shown in FIG. 8). The device 1300 is operable to perform the example method described with respect to FIG. 21 and, possibly, any other process or method disclosed herein. It should also be understood that the method of FIG. 21 is not necessarily performed solely by the device 1300. At least some operations of the method may be performed by one or more other entities.

[0128] The virtual device 1300 may comprise a processing circuit, which may include one or more microprocessors or microcontrollers, as well as other digital hardware, which may include digital signal processors (DSPs), dedicated digital logic, and the like. The processing circuit may be configured to execute program code stored in a memory, which may include one or several types of memory, such as a read-only memory (ROM), a random access memory, a cache memory, a flash memory device, an optical storage device, and the like. The program code stored in the memory includes, in some embodiments, program instructions for implementing one or more communication and / or data communication protocols, as well as instructions for performing one or more of the techniques described herein. In some implementations, the processing circuit may be used to cause the generating module 1310, the transmitting module 1320, and any other suitable units of the device 1300 to perform corresponding functions according to one or more embodiments of the present disclosure.

[0129] According to some embodiments, the generating module 1310 may perform some of the generating functions of the device 1300. For example, in response to determining a need to initiate a communication session with an application function (AF), the generating module 1310 may AKMA may be generated.

[0130] According to some embodiments, the transmitting module 1320 may perform some of the transmitting functions of the apparatus 1300. For example, the transmitting module 1320 may transmit a request to the AF to initiate a communication session.

[0131] The term unit may have its conventional meaning in the field of electronics, electrical devices, and / or electronic devices and may include, for example, electric and / or electronic circuits, devices, modules, processors, memories, logical solid and / or discrete devices, computer programs or instructions, etc., for performing a respective task, procedure, computation, output, and / or display function, such as those described herein.

[0132] 23 illustrates a method 1400 by the network node 160 operating as a UDM, according to some embodiments. In step 1402, the network node 160 receives a first message associated with an authentication request message of the wireless device 110. Based on subscription information associated with the wireless device 110, the network node 160 generates a second message including an authentication response message in step 1404. The second message includes an AKMA key indicator to trigger the wireless device 110 to generate AKMA keying material. In step 1406, the network node 160 transmits the second message including the authentication response message to trigger the wireless device 110 to generate AKMA keying material.

[0133] In a particular embodiment, the first message initiates an authentication procedure of the wireless device 110 with the network.

[0134] In a particular embodiment, the authentication procedure includes a primary authentication procedure of the wireless device 110 .

[0135] In a particular embodiment, the AKMA key indicator includes an AKMA keying material generation flag to trigger wireless device 110 to generate AKMA keying material.

[0136] In a particular embodiment, the AKMA keying material is AKMA Includes.

[0137] In a further specific embodiment, the AKMA keying material is AKMA Identifier (K AKMA ID), K AKMA and K. AKMA ID is K AUSF It is derived based on.

[0138] In a particular embodiment, the first message is received from the second network node 160 acting as an AUSF and the second message is sent to the second network node 160 acting as an AUSF.

[0139] In a particular embodiment, prior to receiving the first message from the wireless device 110, the network node 160 receives a third message from the NF. The third message includes subscription information associated with the wireless device 110.

[0140] FIG. 24 illustrates a schematic block diagram of a virtual device 1500 in a wireless network (e.g., the wireless network shown in FIG. 8). The device may be implemented in a wireless device or a network node (e.g., the wireless device 110 or the network node 160 shown in FIG. 8). The device 1500 is operable to perform the example method described with respect to FIG. 23 and, possibly, any other process or method disclosed herein. It should also be understood that the method of FIG. 23 is not necessarily performed solely by the device 1500. At least some operations of the method may be performed by one or more other entities.

[0141] The virtual device 1500 may comprise a processing circuit, which may include one or more microprocessors or microcontrollers, as well as other digital hardware, which may include digital signal processors (DSPs), dedicated digital logic, and the like. The processing circuit may be configured to execute program code stored in a memory, which may include one or several types of memory, such as a read-only memory (ROM), a random access memory, a cache memory, a flash memory device, an optical storage device, and the like. The program code stored in the memory includes, in some embodiments, program instructions for implementing one or more communication and / or data communication protocols, as well as instructions for performing one or more of the techniques described herein. In some implementations, the processing circuit may be used to cause the receiving module 1510, the generating module 1520, the transmitting module 1530, and any other suitable units of the device 1500 to perform corresponding functions according to one or more embodiments of the present disclosure.

[0142] According to some embodiments, the receiving module 1510 may perform some of the receiving functions of the apparatus 1500. For example, the receiving module 1510 may receive a first message related to an authentication request message of the wireless device.

[0143] According to some embodiments, the generating module 1520 may perform some of the generating functions of the apparatus 1500. For example, the generating module 1520 may generate a second message including an authentication response message in step Q04. The second message includes an AKMA key indicator for triggering the wireless device to generate AKMA keying material.

[0144] According to some embodiments, the transmitting module 1530 may perform some of the transmitting functions of the apparatus 1500. For example, the transmitting module 1520 may transmit a second message including an authentication response message to trigger the wireless device to generate AKMA keying material.

[0145] The term unit may have its conventional meaning in the field of electronics, electrical devices, and / or electronic devices and may include, for example, electric and / or electronic circuits, devices, modules, processors, memories, logical solid and / or discrete devices, computer programs or instructions, etc., for performing a respective task, procedure, computation, output, and / or display function, such as those described herein.

[0146] 25 illustrates a method 1600 by network node 160 operating as a UDM, according to some embodiments. In step 1602, network node 160 determines whether a first message received from network node 160 includes an AKMA key indicator. Based on whether the first message includes an AKMA indicator, network node 160 determines in step 1604 whether to generate AKMA keying material.

[0147] In a particular embodiment, when determining whether the first message includes an AKMA key indicator, network node 160 determines that the first message includes an AKMA key indicator. Network node 160 then generates AKMA keying material based on the AKMA key indicator in the first message.

[0148] In another particular embodiment, when determining whether the first message includes an AKMA key indicator, network node 160 determines that the first message does not include an AKMA key indicator. Network node 160 then determines not to generate AKMA keying material for an authentication procedure with the network based on the first message not including an AKMA key indicator.

[0149] In a particular embodiment, the second network node 160 comprises a unified data management (UDM) node.

[0150] In a particular embodiment, the network node 160 sends a second message including the AKMA key indicator to the wireless device 110 to trigger the wireless device 110 to generate AKMA keying material.

[0151] In a particular embodiment, the AKMA keying material is an authentication and key management anchor key for an application (K AKMA ).

[0152] In a further particular embodiment, the AKMA keying material is a K AKMA Contains ID, K AKMA and K. AKMA ID is K AUSF It is derived based on.

[0153] In a particular embodiment, the AKMA key indicator includes an AKMA keying material generation flag.

[0154] FIG. 26 illustrates a schematic block diagram of a virtual device 1700 in a wireless network (e.g., the wireless network shown in FIG. 8). The device may be implemented in a wireless device or a network node (e.g., the wireless device 110 or the network node 160 shown in FIG. 8). The device 1700 is operable to perform the example method described with respect to FIG. 25 and, possibly, any other process or method disclosed herein. It should also be understood that the method of FIG. 25 is not necessarily performed solely by the device 1700. At least some operations of the method may be performed by one or more other entities.

[0155] The virtual device 1700 may comprise a processing circuit, which may include one or more microprocessors or microcontrollers, as well as other digital hardware, which may include digital signal processors (DSPs), dedicated digital logic, and the like. The processing circuit may be configured to execute program code stored in a memory, which may include one or several types of memory, such as a read-only memory (ROM), a random access memory, a cache memory, a flash memory device, an optical storage device, and the like. The program code stored in the memory includes, in some embodiments, program instructions for executing one or more communication and / or data communication protocols, as well as instructions for performing one or more of the techniques described herein. In some implementations, the processing circuit may be used to cause the first determination module 1710, the second determination module 1720, and any other suitable units of the device 1700 to perform corresponding functions according to one or more embodiments of the present disclosure.

[0156] According to some embodiments, the first determination module 1710 may perform some of the determination functions of the apparatus 1700. For example, the first determination module 1710 may determine whether a first message received from a network node includes an AKMA key indicator.

[0157] According to some embodiments, the second decision module 1720 may perform some other of the decision functions of the apparatus 1700. For example, based on whether the first message includes an AKMA indicator, the second decision module 1720 may determine whether to generate AKMA keying material.

[0158] The term unit may have its conventional meaning in the field of electronics, electrical devices, and / or electronic devices and may include, for example, electric and / or electronic circuits, devices, modules, processors, memories, logical solid and / or discrete devices, computer programs or instructions, etc., for performing a respective task, procedure, computation, output, and / or display function, such as those described herein.

[0159] 27 illustrates a method 1800 by network node 160 acting as an AUSF, according to some embodiments. At step 1802, network node 160 receives a first message from an AAnF requesting AKMA keying material associated with wireless device 110. At step 1804, network node 160 sends a second message to a UDM to determine whether to generate AKMA keying material.

[0160] FIG. 28 illustrates a schematic block diagram of a virtual device 1900 in a wireless network (e.g., the wireless network shown in FIG. 8). The device may be implemented in a wireless device or a network node (e.g., the wireless device 110 or the network node 160 shown in FIG. 8). The device 1900 is operable to perform the example method described with respect to FIG. 27 and, possibly, any other process or method disclosed herein. It should also be understood that the method of FIG. 27 is not necessarily performed solely by the device 1900. At least some operations of the method may be performed by one or more other entities.

[0161] The virtual device 1900 may comprise a processing circuit, which may include one or more microprocessors or microcontrollers, as well as other digital hardware, which may include digital signal processors (DSPs), dedicated digital logic, and the like. The processing circuit may be configured to execute program code stored in a memory, which may include one or several types of memory, such as a read-only memory (ROM), a random access memory, a cache memory, a flash memory device, an optical storage device, and the like. The program code stored in the memory includes, in some embodiments, program instructions for implementing one or more communication and / or data communication protocols, as well as instructions for performing one or more of the techniques described herein. In some implementations, the processing circuit may be used to cause the receiving module 1910, the transmitting module 1920, and any other suitable units of the device 1900 to perform corresponding functions according to one or more embodiments of the present disclosure.

[0162] According to some embodiments, the receiving module 1910 may perform some of the receiving functions of the apparatus 1900. For example, the receiving module 1910 may receive a first message from the AAnF requesting AKMA keying material associated with the wireless device.

[0163] According to some embodiments, the sending module 1920 may perform some of the sending functions of the apparatus 1900. For example, the sending module 1920 may send a second message to the UDM to determine whether to generate AKMA keying material.

[0164] The term unit may have its conventional meaning in the field of electronics, electrical devices, and / or electronic devices and may include, for example, electric and / or electronic circuits, devices, modules, processors, memories, logical solid and / or discrete devices, computer programs or instructions, etc., for performing a respective task, procedure, computation, output, and / or display function, such as those described herein.

[0165] Further embodiments:

[0166] Exemplary embodiment 1. A method implemented by a wireless device, the method including: determining whether a first message received from a network node includes an Authentication and Key Management for Application (AKMA) key indicator; and determining whether to generate AKMA keying material for an authentication procedure with the network based on whether the first message includes the AKMA indicator.

[0167] Exemplary embodiment 2. The method of exemplary embodiment 1, further comprising sending a second message to the network node prior to receiving the first message from the network node, the second message initiating an authentication procedure with the network, and the first message including an authentication response message.

[0168] Exemplary embodiment 3. The method of exemplary embodiment 2, wherein the authentication procedure includes a primary authentication procedure.

[0169] Exemplary embodiment 4. The method according to exemplary embodiment 1, wherein the first message is related to a UE parameter update (UPU) procedure.

[0170] Exemplary embodiment 5. The method of any one of exemplary embodiments 1 to 4, wherein the AKMA key indicator includes an AKMA key material generation flag.

[0171] Exemplary Embodiment 6. A method according to any one of exemplary embodiments 1 to 5, wherein determining whether the first message includes an AKMA key indicator includes determining that the first message includes an AKMA key indicator, and generating AKMA key material based on the AKMA key indicator in the first message.

[0172] Exemplary Embodiment 7. The method of any one of exemplary embodiments 1 to 6, wherein determining whether the first message includes an AKMA key indicator includes determining that the first message does not include an AKMA key indicator, and determining not to generate AKMA key material for an authentication procedure with the network based on the first message not including the AKMA key indicator.

[0173] Exemplary embodiment 8. The method of any one of exemplary embodiments 1 to 7, wherein the wireless device determines whether to generate AKMA keying material based on subscription information stored in or at the wireless device.

[0174] Exemplary embodiment 9. The method of any one of exemplary embodiments 1 to 8, wherein the network node comprises a unified data management (UDM) node.

[0175] Exemplary embodiment 10. The method according to any one of exemplary embodiments 1 to 8, wherein the network node comprises an authentication server function (AUSF).

[0176] Exemplary embodiment 11. AKMA keying material is an anchor key (K AKMA ) and K AKMA Identifier (K AKMA 11. The method according to any one of exemplary embodiments 1 to 10, comprising at least one of:

[0177] Exemplary embodiment 12. A computer program comprising instructions for performing any of the methods according to exemplary embodiments 1 to 11 when the computer program is executed on a computer.

[0178] Exemplary embodiment 13. A computer program product comprising a computer program, the computer program comprising instructions for performing any of the methods described in exemplary embodiments 1 to 11 when the computer program is executed on a computer.

[0179] Exemplary embodiment 14. A non-transitory computer-readable medium storing instructions that, when executed by a computer, perform any of the methods described in exemplary embodiments 1-11.

[0180] Exemplary embodiment 15. A wireless device comprising a processing circuit configured to perform any of the methods described in exemplary embodiments 1-11.

[0181] Exemplary embodiment 16. A method implemented by a wireless device, the method comprising: in response to determining a need to initiate a communication session with an application function (AF), AKMA and sending a request to the AF to initiate a communication session.

[0182] Exemplary embodiment 17. The method according to exemplary embodiment 16, wherein the need to initiate a communication session with the AF is determined after performing a primary authentication procedure with the network.

[0183] Exemplary embodiment 18. During the primary authentication procedure, K AUSF 20. The method of exemplary embodiment 17, further comprising generating:

[0184] Exemplary embodiment 19. A computer program comprising instructions for performing any of the methods according to exemplary embodiments 16 to 18 when executed on a computer.

[0185] Exemplary embodiment 20. A computer program product comprising a computer program, the computer program comprising instructions for performing any of the methods described in exemplary embodiments 16 to 18 when the computer program is executed on a computer.

[0186] Exemplary embodiment 21. A non-transitory computer-readable medium storing instructions that, when executed by a computer, perform any of the methods described in exemplary embodiments 16-18.

[0187] Exemplary embodiment 22. A wireless device comprising a processing circuit configured to perform any of the methods described in exemplary embodiments 16-18.

[0188] Exemplary embodiment 23. A method implemented by a network node operating as a unified data management (UDM) node, the method including: receiving a first message associated with an authentication request message of a wireless device; generating a second message including an authentication response message based on subscription information associated with the wireless device, the second message including an authentication and key management (AKMA) key indicator for triggering the wireless device to generate AKMA keying material for an application; and transmitting the second message including the authentication response message to trigger the wireless device to generate the AKMA keying material.

[0189] Exemplary embodiment 24. The method of exemplary embodiment 23, wherein the first message initiates an authentication procedure with the network.

[0190] Exemplary embodiment 25. The method of exemplary embodiment 24, wherein the authentication procedure includes a primary authentication procedure.

[0191] Example Embodiment 26. The method of any one of Example Embodiments 23 to 25, further comprising receiving a third message from the NF prior to receiving the first message from the wireless device, the third message including subscription information associated with the wireless device.

[0192] Exemplary Embodiment 27. The method of any one of exemplary embodiments 23 to 26, wherein the AKMA key indicator includes an AKMA key material generation flag for triggering the wireless device to generate AKMA key material.

[0193] Exemplary embodiment 28. AKMA keying material is an anchor key (K AKMA 28. The method of any one of exemplary embodiments 23 to 27, comprising:

[0194] Exemplary embodiment 29. A computer program comprising instructions for performing any of the methods according to exemplary embodiments 23 to 28 when executed on a computer.

[0195] Exemplary embodiment 30. A computer program product comprising a computer program, the computer program comprising instructions for performing any of the methods described in exemplary embodiments 23 to 28 when the computer program is executed on a computer.

[0196] Exemplary embodiment 31. A network node comprising processing circuitry configured to perform any of the methods described in exemplary embodiments 23-28.

[0197] Exemplary embodiment 32. A method implemented by a network node, the method including determining whether a first message received from the network node includes an Authentication and Key Management for an Application (AKMA) key indicator, and determining whether to generate AKMA key material based on whether the first message includes the AKMA indicator.

[0198] Exemplary Embodiment 33. The method of any one of exemplary embodiment 33, wherein the AKMA key indicator includes an AKMA key material generation flag.

[0199] Exemplary Embodiment 34. The method of exemplary embodiment 32 or 33, wherein determining whether the first message includes an AKMA key indicator includes determining that the first message includes an AKMA key indicator, and generating AKMA key material based on the AKMA key indicator in the first message.

[0200] Exemplary Embodiment 35. The method of exemplary embodiment 32 or 33, wherein determining whether the first message includes an AKMA key indicator includes determining that the first message does not include an AKMA key indicator, and determining not to generate AKMA key material for an authentication procedure with the network based on the first message not including the AKMA key indicator.

[0201] Exemplary embodiment 36. The method of any one of exemplary embodiments 32 to 35, wherein the network node comprises a unified data management (UDM) node.

[0202] Exemplary embodiment 37. The method according to any one of exemplary embodiments 32 to 35, wherein the network node comprises an authentication server function (AUSF).

[0203] Exemplary embodiment 38. A method implemented by a network node operating as an AUSF, the method including receiving a first message from an authentication and key management application function (AAnF) for an application requesting authentication and key management (AKMA) keying material for an application associated with a wireless device, and sending a second message to a unified data management (UDM) for determining whether to generate AKMA keying material.

[0204] Exemplary embodiment 39. The first message is sent to a K AKMA Identifier (K AKMA 39. The method of exemplary embodiment 38, comprising:

[0205] Exemplary embodiment 40. K AKMA ID is K AKMA 40. The method of exemplary embodiment 38 or 39, derived based on:

[0206] Exemplary embodiment 41. The method of any one of exemplary embodiments 38 to 40, further comprising: receiving a third message from the UDM, the third message including an AKMA key indicator; and generating AKMA key material based on receiving the third message including the AKMA key indicator.

[0207] Exemplary embodiment 42. The method of any one of exemplary embodiments 38 to 40, further comprising: receiving a third message from the UDM, the third message indicating that the AUSF should not generate AKMA keying material; and determining not to generate AKMA keying material based on receiving the third message.

[0208] Exemplary embodiment 43. The method of any one of exemplary embodiments 38 to 40, further comprising receiving a third message from the UDM, determining that the third message from the UDM does not include an AKMA key indicator, and determining not to generate AKMA key material based on the third message not including the AKMA key indicator.

[0209] Exemplary embodiment 44. The method of any one of exemplary embodiments 38 to 40, further comprising receiving a third message from the UDM, the third message including AKMA keying material.

[0210] Exemplary Embodiment 45. The method of any one of exemplary embodiments 38-44, wherein the decision regarding whether to generate AKMA keying material is based at least in part on subscription information associated with the wireless device.

[0211] Exemplary embodiment 46. During a primary authentication procedure with a wireless device, AUSF 46. ​​The method of any one of exemplary embodiments 38 to 45, further comprising generating:

[0212] Exemplary embodiment 47. A computer program comprising instructions which, when executed on a computer, performs any of the methods according to exemplary embodiments 38 to 46.

[0213] Exemplary embodiment 48. A computer program product comprising a computer program, the computer program comprising instructions for performing any of the methods described in exemplary embodiments 38 to 46 when the computer program is executed on a computer.

[0214] Exemplary embodiment 49. A non-transitory computer-readable medium storing instructions that, when executed by a computer, perform any of the methods described in exemplary embodiments 38-46.

[0215] Exemplary embodiment 50. A wireless device comprising processing circuitry configured to implement any of the methods described in exemplary embodiments 38-46.

[0216] Exemplary embodiment 51. A wireless device comprising: a processing circuit configured to perform any of the steps recited in any one of exemplary embodiments 1 to 22; and a power supply circuit configured to supply power to the wireless device.

[0217] Exemplary embodiment 52. A network node comprising: a processing circuit configured to perform any of the steps recited in any one of exemplary embodiments 23 to 50; and a power supply circuit configured to supply power to a wireless device.

[0218] Exemplary embodiment 53. A wireless device comprising: an antenna configured to send and receive wireless signals; a wireless front-end circuit connected to the antenna and a processing circuit and configured to condition signals communicated between the antenna and the processing circuit, the processing circuit configured to perform any of the steps described in any one of exemplary embodiments 1 to 22; an input interface connected to the processing circuit and configured to enable information input to the wireless device to be processed by the processing circuit; an output interface connected to the processing circuit and configured to output information from the wireless device processed by the processing circuit; and a battery connected to the processing circuit and configured to power the wireless device.

[0219] Exemplary embodiment 54. A communications system including a host computer, the host computer comprising a processing circuit configured to provide user data and a communications interface configured to forward the user data to a cellular network for transmission to a wireless device, the cellular network comprising a network node having a wireless interface and a processing circuit, the processing circuit of the network node configured to perform any of the steps recited in any one of exemplary embodiments 23 to 50.

[0220] Exemplary Embodiment 55. The communication system of exemplary embodiment 54, further comprising a network node.

[0221] Exemplary embodiment 56. The communication system of exemplary embodiment 54 or 55, further comprising a wireless device, the wireless device configured to communicate with the network node.

[0222] Exemplary Embodiment 57. The communications system of any one of Exemplary Embodiments 54 to 56, wherein the processing circuitry of the host computer is configured to execute a host application thereby providing user data, and the wireless device comprises processing circuitry configured to execute a client application associated with the host application.

[0223] Exemplary embodiment 58. A method implemented in a communications system including a host computer, a network node, and a wireless device, the method including: providing, at the host computer, user data; and initiating, at the host computer, a transmission conveying the user data to the wireless device over a cellular network comprising the network node, the network node performing any of the steps described in any one of exemplary embodiments 23 to 50.

[0224] Exemplary embodiment 59. The method of exemplary embodiment 58, further comprising transmitting user data at the network node.

[0225] Exemplary embodiment 60. The method of exemplary embodiment 58 or 59, wherein the user data is provided by executing a host application at the host computer, and the method further includes executing a client application associated with the host application at the wireless device.

[0226] Exemplary embodiment 61. A wireless device configured to communicate with a network node, the wireless device comprising a radio interface and a processing circuit configured to implement any one of embodiments 58 to 60.

[0227] Exemplary embodiment 62. A communications system including a host computer, the host computer comprising a processing circuit configured to provide user data and a communications interface configured to forward the user data to a cellular network for transmission to a wireless device, the wireless device comprising a wireless interface and a processing circuit, the components of the wireless device configured to perform any of the steps recited in any one of exemplary embodiments 1 to 22.

[0228] Exemplary Embodiment 63. The communication system of exemplary embodiment 62, wherein the cellular network further includes a network node configured to communicate with the wireless device.

[0229] Exemplary embodiment 64. The communications system of exemplary embodiment 62 or 63, wherein the processing circuitry of the host computer is configured to execute a host application thereby providing user data, and the processing circuitry of the wireless device is configured to execute a client application associated with the host application.

[0230] Exemplary embodiment 65. A method implemented in a communication system including a host computer, a network node, and a wireless device, the method including: providing user data at the host computer; and initiating a transmission at the host computer conveying the user data to the wireless device over a cellular network comprising the network node, the wireless device performing any of the steps described in any one of exemplary embodiments 1 to 22.

[0231] Exemplary Embodiment 66. The method of exemplary embodiment 65, further comprising receiving, at the wireless device, user data from the network node.

[0232] Exemplary embodiment 67. A communications system including a host computer, the host computer comprising a communications interface configured to receive user data originating from a transmission from a wireless device to a network node, the wireless device comprising a wireless interface and a processing circuit, the processing circuit of the wireless device being configured to perform any of the steps recited in any one of exemplary embodiments 1 to 22.

[0233] Exemplary Embodiment 68. The communication system of exemplary embodiment 67, further comprising a wireless device.

[0234] Exemplary embodiment 69. The communication system of exemplary embodiment 67 or 68, further including a network node, the network node having a wireless interface configured to communicate with the wireless device and a communication interface configured to forward user data carried by a transmission from the wireless device to the network node to a host computer.

[0235] Exemplary embodiment 70. The communications system of any one of exemplary embodiments 67 to 69, wherein the processing circuitry of the host computer is configured to execute a host application and the processing circuitry of the wireless device is configured to execute a client application associated with the host application, thereby providing user data.

[0236] Exemplary Embodiment 71. The communications system of any one of Exemplary Embodiments 67 to 70, wherein processing circuitry of the host computer is configured to execute a host application thereby providing requested data, and processing circuitry of the wireless device is configured to execute a client application associated with the host application thereby providing user data in response to the requested data.

[0237] Exemplary embodiment 72. A method implemented in a communication system including a host computer, a network node, and a wireless device, the method including receiving, at the host computer, user data transmitted from the wireless device to the network node, and the wireless device performing any of the steps described in any one of exemplary embodiments 1 to 22.

[0238] Exemplary Embodiment 73. The method of exemplary embodiment 72, further comprising, at the wireless device, providing user data to the network node.

[0239] Exemplary embodiment 74. The method of exemplary embodiment 72 or 73, further comprising: executing, at the wireless device, a client application thereby providing user data to be transmitted; and executing, at the host computer, a host application associated with the client application.

[0240] Exemplary embodiment 75. The method of any one of exemplary embodiments 72 to 74, further comprising: executing, at the wireless device, a client application; and receiving, at the wireless device, input data for the client application, the input data being provided at the host computer by executing a host application associated with the client application, and the user data to be transmitted being provided by the client application in response to the input data.

[0241] Exemplary embodiment 76. A communications system including a host computer, the host computer comprising a communications interface configured to receive user data originating from a transmission from a wireless device to a network node, the network node comprising a wireless interface and processing circuitry, the processing circuitry of the network node configured to perform any of the steps recited in any one of exemplary embodiments 23 to 50.

[0242] Exemplary Embodiment 77. The communication system of Exemplary Embodiment 76, further comprising a network node.

[0243] Exemplary embodiment 78. The communication system of exemplary embodiment 76 or 77, further comprising a wireless device, the wireless device configured to communicate with the network node.

[0244] Exemplary Embodiment 79. The communications system of any one of Exemplary Embodiments 76 to 78, wherein the processing circuitry of the host computer is configured to execute a host application and the wireless device is configured to execute a client application associated with the host application, thereby providing user data to be received by the host computer.

[0245] Exemplary embodiment 80. A method implemented in a communications system including a host computer, a network node, and a wireless device, the method including receiving, at the host computer, from a base station, user data originating from a transmission received by the network node from the wireless device, and the wireless device performing any of the steps described in any one of exemplary embodiments 1 to 22.

[0246] Example Embodiment 81. The method of example embodiment 80, further comprising receiving, at the network node, user data from the wireless device.

[0247] Exemplary embodiment 82. The method of exemplary embodiment 80 or 81, further comprising initiating, at the network node, transmission of the received user data to the host computer.

[0248] Example Embodiment 83. The method of any one of example embodiments 1 to 82, wherein the network node comprises a base station.

[0249] Example Embodiment 84. The method of any one of example embodiments 1-83, wherein the wireless device comprises a user equipment (UE).

[0250] Modifications, additions, or omissions may be made to the systems and devices described herein without departing from the scope of the present disclosure. Components of the systems and devices may be integrated or separated. Moreover, operations of the systems and devices may be performed by more, fewer, or other components. Furthermore, operations of the systems and devices may be performed using any suitable logic, including software, hardware, and / or other logic. As used herein, "each" refers to each member of a set or each member of a subset of a set.

[0251] Modifications, additions, or omissions may be made to the methods described herein without departing from the scope of the disclosure. The methods may include more, fewer, or other steps. Further, the steps may be performed in any suitable order.

[0252] Although the present disclosure has been described with respect to several embodiments, modifications and substitutions of the embodiments will be apparent to those skilled in the art. Therefore, the above description of the embodiments does not limit the present disclosure. Other changes, substitutions, and modifications are possible without departing from the spirit and scope of the present disclosure.

Claims

1. 1. A method implemented by a first network node operating as a Unified Data Management (UDM) node, the method comprising: Receiving a first message associated with an authentication request message of the wireless device (110); generating a second message including an authentication response message based on subscription information associated with the wireless device, the second message including an authentication and key management (AKMA) key indicator for triggering the wireless device to generate authentication and key management (AKMA) keying material for an application; sending the second message including the authentication response message to trigger the wireless device to generate the AKMA keying material; Including, the first message is received from a second network node acting as an Authentication Server Function (AUSF); the second message is sent to the second network node acting as the AUSF; method.

2. The method of claim 1 , wherein the first message initiates an authentication procedure of the wireless device with a network.

3. The method of claim 2 , wherein the authentication procedure includes a primary authentication procedure of the wireless device.

4. 4. The method of claim 1, wherein the AKMA key indicator includes an AKMA keying material generation flag for triggering the wireless device to generate the AKMA keying material.

5. The AKMA keying material is an authentication and key management anchor key for an application (K ＡＫＭＡ 5. The method of claim 1 , further comprising:

6. The AKMA keying material is ＡＫＭＡ Identifier (K ＡＫＭＡ ID), ＡＫＭＡ and the K ＡＫＭＡ ID is K ＡＵＳＦ The method of claim 5 , wherein the first and second eigenvalues ​​are derived based on:

7. receiving a third message from an NF prior to receiving the first message from the AUSF, the third message including the subscription information associated with the wireless device; The method of claim 1 , further comprising:

8. 1. A method implemented by a first network node acting as an Authentication Server Function (AUSF), the method comprising: determining whether a first message received from the second network node includes an authentication and key management (AKMA) key indicator for an application; determining whether to generate AKMA keying material based on whether said first message includes said AKMA key indicator; sending a second message including the AKMA key indicator to a wireless device (110) to trigger the wireless device to generate the AKMA keying material; A method comprising:

9. determining whether the first message includes the AKMA key indicator includes determining that the first message includes the AKMA key indicator; the method further comprising generating the AKMA keying material based on the AKMA key indicator in the first message. The method according to claim 8.

10. determining whether the first message includes the AKMA key indicator includes determining that the first message does not include the AKMA key indicator; The method further includes determining not to generate the AKMA keying material for an authentication procedure with a network based on the first message not including the AKMA key indicator. The method according to claim 8.

11. 11. The method of claim 8, wherein the second network node comprises a Unified Data Management (UDM) node.

12. The AKMA keying material is an authentication and key management anchor key for an application (K ＡＫＭＡ 12. The method of claim 8, comprising:

13. The AKMA keying material is associated with a wireless device. ＡＫＭＡ Identifier (K ＡＫＭＡ ID), The above K ＡＫＭＡ and the K ＡＫＭＡ ID is K ＡＵＳＦ is derived based on The method of claim 12.

14. 14. The method of claim 8, wherein the AKMA key indicator comprises an AKMA keying material generation flag.

15. A first network node operating as a Unified Data Management (UDM) node, said first network node comprising: Processing circuit (170) The processing circuit (170) Receiving a first message associated with an authentication request message of the wireless device (110); generating a second message including an authentication response message based on subscription information associated with the wireless device, the second message including an authentication and key management (AKMA) key indicator for triggering the wireless device to generate authentication and key management (AKMA) keying material for an application; sending the second message including the authentication response message to trigger the wireless device to generate the AKMA keying material; It is set to do the following: the first message is received from a second network node acting as an Authentication Server Function (AUSF); the second message is sent to the second network node acting as the AUSF; A first network node.

16. The first network node of claim 15, wherein the first message initiates an authentication procedure of the wireless device with a network.

17. A first network node acting as an Authentication Server Function (AUSF), said first network node comprising: Processing circuit (170) The processing circuit (170) determining whether a first message received from the second network node includes an authentication and key management (AKMA) key indicator for an application; determining whether to generate AKMA keying material based on whether said first message includes said AKMA Indicator Key; sending a second message including the AKMA key indicator to a wireless device (110) to trigger the wireless device to generate the AKMA keying material; A first network node configured to:

Images