Establishing a control plane signalling session in a wireless communication system

Abstract

Various aspects of the present disclosure relate to a first network function for wireless communication. The first network function may be configured to, capable of, or operable to: receive a registration request from a device; determine whether the device is authorised to convey control plane signalling over a user plane connection for a service; identify, based on the registration request, a second network function supporting session management functionality; send a session request to the second network function to establish a first Protocol Data Unit (PDU) session on behalf of the device; receive confirmation that the first PDU session is established; and in response to receiving confirmation that the first PDU session is established, send, to the device: an indication that the first PDU session is established; and assistance information defining a means for conveying control plane signalling by the device via the PDU session.

Description

ESTABLISHING A CONTROL PLANE SIGNALLING SESSION IN A WIRELESS COMMUNICATION SYSTEMTECHNICAL FIELD

[0001] The present disclosure relates generally to wireless communication, including establishing a control plane signalling session in a wireless communication system.BACKGROUND

[0002] A wireless communications system may include one or multiple network communication devices, which may be otherwise knowns as network equipment (NE) supporting wireless communications for one or multiple user communication devices, which may be otherwise known as user equipment (UE), or other suitable terminology. The wireless communications system may support wireless communications with one or multiple user communication devices by utilizing resources of the wireless communication system (e.g., time resources (e.g., symbols, slots, subframes, frames, or the like) or frequency resources (e.g., subcarriers, carriers, or the like). Additionally, the wireless communications system may support wireless communications across various radio access technologies including third generation (3G) radio access technology, fourth generation (4G) radio access technology, fifth generation (5G) radio access technology, among other suitable radio access technologies beyond 5G (e.g., sixth generation (6G)).SUMMARY

[0003] An article “a” before an element is unrestricted and understood to refer to “at least one” of those elements or “one or more” of those elements. The terms “a,” “at least one,” “one or more,” and “at least one of one or more” may be interchangeable. As used herein, including in the claims, “or” as used in a list of items (e.g., a list of items prefaced by a phrase such as “at least one of’ or “one or more of’ or “one or both of’) indicates an inclusive list such that, for example, a list of at least one of A, B, or C means A or B or C or AB or AC or BC or ABC (i.e., A and B and C). Also, as used herein, the phrase “based on” shall not be construed as a reference to a closed set of conditions. For example, an example step that is described as “based on condition A” may be based on both a condition A and acondition B without departing from the scope of the present disclosure. In other words, as used herein, the phrase “based on” shall be construed in the same manner as the phrase “based at least in part on. Further, as used herein, including in the claims, a “set” may include one or more elements.

[0004] A first network function for wireless communication is described. The first network function may be configured to, capable of, or operable to perform one or more operations as described herein. For example, the first network function may include at least one memory; and at least one processor coupled with the at least one memory and configured to cause the first network function to: receive a registration request from a device; determine whether the device is authorised to convey control plane signalling over a user plane connection for a service; identify, based on the registration request, a second network function supporting session management functionality; send a session request to the second network function to establish a first Protocol Data Unit (PDU) session on behalf of the device; receive confirmation that the first PDU session is established; and in response to receiving confirmation that the first PDU session is established, send, to the device: an indication that the first PDU session is established; and assistance information defining a means for conveying control plane signalling by the device via the PDU session.

[0005] A processor for wireless communication is described. The processor may be configured to, capable of, or operable to perform one or more operations as described herein. For example, the processor may comprise at least one controller coupled with at least one memory and configured to cause the processor to: receive a registration request from a device; determine whether the device is authorised to convey control plane signalling over a user plane connection for a service; identify, based on the registration request, a second network function supporting session management functionality; and send a session request to the second network function to establish a first PDU session on behalf of the device; receive confirmation that the first PDU session is established; in response to receiving confirmation that the first PDU session is established, send, to the device: an indication that the first PDU session is established; and assistance information defining a means for conveying control plane signalling by the device via the PDU session.

[0006] A method performed or performable by a first network function is described. The method may comprise: receiving a registration request from a device; determining whether the device is authorised to convey control plane signalling over a user plane connection for a service; identifying, based on the registration request, a second network function supporting session management functionality; sending a session request to the second network function to establish a first PDU session on behalf of the device; receiving confirmation that the first PDU session is established; and in response to receiving confirmation that the first PDU session is established, sending, to the device: an indication that the first PDU session is established; and assistance information defining a means for conveying control plane signalling by the device via the PDU session.

[0007] A device for wireless communication is described. The device may be configured to, capable of, or operable to perform one or more operations as described herein. For example, the device may include at least one memory; and at least one processor coupled with the at least one memory and configured to cause the device to: send a registration request to a wireless communication network; receive from the wireless communication network: an indication that a first PDU session is established; and assistance information defining a means for conveying control plane signalling by the device via the first PDU session; send a service request over the first PDU session to a first network function wherein the service request includes an indication to establish a second PDU session for a service; and receive via the first PDU session an indication that the second PDU session is established.

[0008] A processor for wireless communication is described. The processor may be configured to, capable of, or operable to perform one or more operations as described herein. For example, the processor may comprise at least one controller coupled with at least one memory and configured to cause the processor to: send a registration request to a wireless communication network; receive from the wireless communication network: an indication that a first PDU session is established; and assistance information defining a means for conveying control plane signalling by the device via the first PDU session; send a service request over the first PDU session to a first network function wherein the servicerequest includes an indication to establish a second PDU session for a service; receive via the first PDU session an indication that the second PDU session is established.

[0009] A method performed or performable by a device for wireless communication is described. The method comprises: sending a registration request to a wireless communication network; receiving from the wireless communication network: an indication that a first PDU session is established; and assistance information defining a means for conveying control plane signalling by the device via the first PDU session; sending a service request over the first PDU session to a first network function wherein the service request includes an indication to establish a second PDU session for a service; and receiving via the first PDU session an indication that the second PDU session is established.BRIEF DESCRIPTION OF THE DRAWINGS

[0010] Figure 1 illustrates an example of a wireless communications system in accordance with aspects of the present disclosure.

[0011] Figure 2 illustrates an example of a process flow that may include CP and UP separation in the 5GS architecture in accordance with aspects of the present disclosure.

[0012] Figure 3 illustrates an example of a process flow that may include supporting CP signalling between the UE and the 6G core network via the UP in accordance with aspects of the present disclosure.

[0013] Figure 4 illustrates an example of a process flow that may include Anchor Network Function (ANF) architecture for support UE CP signalling via the UP in accordance with aspects of the present disclosure.

[0014] Figure 5 illustrates an example of a process flow that may include the protocol stack between the UE, the ANF and 6GNFs in accordance with aspects of the present disclosure.

[0015] Figure 6 illustrates an example of a UE 600 in accordance with aspects of the present disclosure.

[0016] Figure 7 illustrates an example of a processor 700 in accordance with aspects of the present disclosure.

[0017] Figure 8 illustrates an example of an NE 800 in accordance with aspects of the present disclosure.

[0018] Figure 9 illustrates a flowchart of a method 900 performed by a NE in accordance with aspects of the present disclosure.

[0019] Figure 10 illustrates a flowchart of a method 1000 performed by a UE in accordance with aspects of the present disclosure.DETAILED DESCRIPTION

[0020] A wireless communication system, including one or more UE and NE may be arranged with an architecture that separates CP signalling and the UP signalling. The separation of CP signalling and the UP signalling improves scaling of the limited resources available within the wireless communication network. However, some new features and services introduced in 5GS rely on enhancing / extending the CP signalling. For example, for vehicle-to-everything (V2X) services to be supported the UE and core must exchange information over the CP. Such information exchange is facilitated by enhancing the RRC and NAS stack, in order to exchange capabilities and configuration information. In order to deploy new services existing network functions must be updated with new features and the wireless communication network operators must upgrade their existing infrastructure which leads to additional costs. For example, to deploy V2X service would require upgrading multiple existing network functions in a 3GPP network. For at least this reason, the adoption of new services in wireless communication networks has remained limited.

[0021] The first network function as defined herein tends to simplify CP signalling exchange by introducing CP communication between the device and a core network via UP signalling. The first network function defined herein is arranged to identify a second network function for processing the CP signalling of the first request, and to send a second request to the second network function. This approach allows for an optimisation of the way resources are setup for a device (such as a UE) in order to convey control planesignalling over user plane by having the network trigger establishment of a PDU session on behalf of the device

[0022] Aspects of the present disclosure are described in the context of a wireless communications system.

[0023] Figure 1 illustrates an example of a wireless communications system 100 in accordance with aspects of the present disclosure. The wireless communications system 100 may include one or more NE 102, one or more UE 104, and a core network (CN) 106. The wireless communications system 100 may support various radio access technologies. In some implementations, the wireless communications system 100 may be a 4G network, such as an LTE network or an LTE-Advanced (LTE-A) network. In some other implementations, the wireless communications system 100 may be a NR network, such as a 5G network, a 5G-Advanced (5G-A) network, or a 5G ultrawideband (5G-UWB) network. In other implementations, the wireless communications system 100 may be a combination of a 4G network and a 5G network, or other suitable radio access technology including Institute of Electrical and Electronics Engineers (IEEE) 802.11 (Wi-Fi), IEEE 802.16 (WiMAX), IEEE 802.20. The wireless communications system 100 may support radio access technologies beyond 5G, for example, 6G. Additionally, the wireless communications system 100 may support technologies, such as time division multiple access (TDMA), frequency division multiple access (FDMA), or code division multiple access (CDMA), etc.

[0024] The one or more NE 102 may be dispersed throughout a geographic region to form the wireless communications system 100. One or more of the NE 102 described herein may be or include or may be referred to as a network node, a base station, a network element, a network function, a network entity, a radio access network (RAN), a NodeB, an eNodeB (eNB), a next-generation NodeB (gNB), or other suitable terminology. An NE 102 and a UE 104 may communicate via a communication link, which may be a wireless or wired connection. For example, an NE 102 and a UE 104 may perform wireless communication (e.g., receive signalling, transmit signalling) over a Uu interface.

[0025] An NE 102 may provide a geographic coverage area for which the NE 102 may support services for one or more UEs 104 within the geographic coverage area. Forexample, an NE 102 and a UE 104 may support wireless communication of signals related to services (e.g., voice, video, packet data, messaging, broadcast, etc.) according to one or multiple radio access technologies. In some implementations, an NE 102 may be moveable, for example, a satellite associated with a non-terrestrial network (NTN). In some implementations, different geographic coverage areas associated with the same or different radio access technologies may overlap, but the different geographic coverage areas may be associated with different NE 102.

[0026] The one or more UE 104 may be dispersed throughout a geographic region of the wireless communications system 100. A UE 104 may include or may be referred to as a remote unit, a mobile device, a wireless device, a remote device, a subscriber device, a transmitter device, a receiver device, or some other suitable terminology. In some implementations, the UE 104 may be referred to as a unit, a station, a terminal, or a client, among other examples. Additionally, or alternatively, the UE 104 may be referred to as an Internet-of-Things (loT) device, an Internet-of-Everything (loE) device, or machine-type communication (MTC) device, among other examples.

[0027] A UE 104 may be able to support wireless communication directly with other UEs 104 over a communication link. For example, a UE 104 may support wireless communication directly with another UE 104 over a device-to-device (D2D) communication link. In some implementations, such as vehicle-to-vehicle (V2V) deployments, V2X deployments, or cellular-V2X deployments, the communication link may be referred to as a sidelink. For example, a UE 104 may support wireless communication directly with another UE 104 over a PC5 interface.

[0028] An NE 102 may support communications with the CN 106, or with another NE 102, or both. For example, an NE 102 may interface with other NE 102 or the CN 106 through one or more backhaul links (e.g., SI, N2, N2, or network interface). In some implementations, the NE 102 may communicate with each other directly. In some other implementations, the NE 102 may communicate with each other or indirectly (e.g., via the CN 106. In some implementations, one or more NE 102 may include subcomponents, such as an access network entity, which may be an example of an access node controller (ANC). An ANC may communicate with the one or more UEs 104 through one or more otheraccess network transmission entities, which may be referred to as a radio heads, smart radio heads, or transmission-reception points (TRPs).

[0029] The CN 106 may support user authentication, access authorization, tracking, connectivity, and other access, routing, or mobility functions. The CN 106 may be an evolved packet core (EPC), or a 5G core (5GC), which may include a control plane entity that manages access and mobility (e.g., a mobility management entity (MME), an access and mobility management functions (AMF)) and a user plane entity that routes packets or interconnects to external networks (e.g., a serving gateway (S-GW), a Packet Data Network (PDN) gateway (P-GW), or a user plane function (UPF)). In some implementations, the control plane entity may manage non-access stratum (NAS) functions, such as mobility, authentication, and bearer management (e.g., data bearers, signal bearers, etc.) for the one or more UEs 104 served by the one or more NE 102 associated with the CN 106.

[0030] The CN 106 may communicate with a packet data network over one or more backhaul links (e.g., via an SI, N2, N2, or another network interface). The packet data network may include an application server. In some implementations, one or more UEs 104 may communicate with the application server. A UE 104 may establish a session (e.g., a PDU session, or the like) with the CN 106 via an NE 102. The CN 106 may route traffic (e.g., control information, data, and the like) between the UE 104 and the application server using the established session (e.g., the established PDU session). The PDU session may be an example of a logical connection between the UE 104 and the CN 106 (e.g., one or more network functions of the CN 106).

[0031] In the wireless communications system 100, the NEs 102 and the UEs 104 may use resources of the wireless communications system 100 (e.g., time resources (e.g., symbols, slots, subframes, frames, or the like) or frequency resources (e.g., subcarriers, carriers)) to perform various operations (e.g., wireless communications). In some implementations, the NEs 102 and the UEs 104 may support different resource structures. For example, the NEs 102 and the UEs 104 may support different frame structures. In some implementations, such as in 4G, the NEs 102 and the UEs 104 may support a single frame structure. In some other implementations, such as in 5G and among other suitable radio access technologies, the NEs 102 and the UEs 104 may support various framestructures (i.e., multiple frame structures). The NEs 102 and the UEs 104 may support various frame structures based on one or more numerologies.

[0032] One or more numerologies may be supported in the wireless communications system 100, and a numerology may include a subcarrier spacing and a cyclic prefix. A first numerology (e.g., / t=0) may be associated with a first subcarrier spacing (e.g., 15 kHz) and a normal cyclic prefix. In some implementations, the first numerology (e.g., / t=0) associated with the first subcarrier spacing (e.g., 15 kHz) may utilize one slot per subframe. A second numerology (e.g., / / =1) may be associated with a second subcarrier spacing (e.g., 30 kHz) and a normal cyclic prefix. A third numerology (e.g., g=2) may be associated with a third subcarrier spacing (e.g., 60 kHz) and a normal cyclic prefix or an extended cyclic prefix. A fourth numerology (e.g., / t=3) may be associated with a fourth subcarrier spacing (e.g., 120 kHz) and a normal cyclic prefix. A fifth numerology (e.g., / t=4) may be associated with a fifth subcarrier spacing (e.g., 240 kHz) and a normal cyclic prefix.

[0033] A time interval of a resource (e.g., a communication resource) may be organized according to frames (also referred to as radio frames). Each frame may have a duration, for example, a 10 millisecond (ms) duration. In some implementations, each frame may include multiple subframes. For example, each frame may include 10 subframes, and each subframe may have a duration, for example, a l ms duration. In some implementations, each frame may have the same duration. In some implementations, each subframe of a frame may have the same duration.

[0034] Additionally or alternatively, a time interval of a resource (e.g., a communication resource) may be organized according to slots. For example, a subframe may include a number (e.g., quantity) of slots. The number of slots in each subframe may also depend on the one or more numerologies supported in the wireless communications system 100. For instance, the first, second, third, fourth, and fifth numerologies (i.e., / t=0, jtz=l, =2, jtz=3, =4) associated with respective subcarrier spacings of 15 kHz, 30 kHz, 60 kHz, 120 kHz, and 240 kHz may utilize a single slot per subframe, two slots per subframe, four slots per subframe, eight slots per subframe, and 16 slots per subframe, respectively. Each slot may include a number (e.g., quantity) of symbols (e.g., OFDM symbols). In some implementations, the number (e.g., quantity) of slots for a subframe may depend on anumerology. For a normal cyclic prefix, a slot may include 14 symbols. For an extended cyclic prefix (e.g., applicable for 60 kHz subcarrier spacing), a slot may include 12 symbols. The relationship between the number of symbols per slot, the number of slots per subframe, and the number of slots per frame for a normal cyclic prefix and an extended cyclic prefix may depend on a numerology. It should be understood that reference to a first numerology (e.g., / t=0) associated with a first subcarrier spacing (e.g., 15 kHz) may be used interchangeably between subframes and slots.

[0035] In the wireless communications system 100, an electromagnetic (EM) spectrum may be split, based on frequency or wavelength, into various classes, frequency bands, frequency channels, etc. By way of example, the wireless communications system 100 may support one or multiple operating frequency bands, such as frequency range designations FR1 (410 MHz - 7.125 GHz), FR2 (24.25 GHz - 52.6 GHz), FR3 (7.125 GHz - 24.25 GHz), FR4 (52.6 GHz - 114.25 GHz), FR4a or FR4-1 (52.6 GHz - 71 GHz), and FR5 (114.25 GHz - 300 GHz). In some implementations, the NEs 102 and the UEs 104 may perform wireless communications over one or more of the operating frequency bands. In some implementations, FR1 may be used by the NEs 102 and the UEs 104, among other equipment or devices for cellular communications traffic (e.g., control information, data). In some implementations, FR2 may be used by the NEs 102 and the UEs 104, among other equipment or devices for short-range, high data rate capabilities.

[0036] FR1 may be associated with one or multiple numerologies (e.g., at least three numerologies). For example, FR1 may be associated with a first numerology (e.g., / t=0), which includes 15 kHz subcarrier spacing; a second numerology (e.g., / z=l), which includes 30 kHz subcarrier spacing; and a third numerology (e.g., / / =2), which includes 60 kHz subcarrier spacing. FR2 may be associated with one or multiple numerologies (e.g., at least 2 numerologies). For example, FR2 may be associated with a third numerology (e.g., / z=2), which includes 60 kHz subcarrier spacing; and a fourth numerology (e.g., / t=3), which includes 120 kHz subcarrier spacing.

[0037] The 3rd Generation Partnership Project has defined 5G System (5GS) architecture built on the paradigm of separating CP and UP function for the purpose of better scaling and managing of resources. The control plane handles exchange of signallingfor establishing communication and authentication. The user plane handles sending or receiving user or application data.In 5GS architecture the UE exchanges CP information using NAS signalling which is exchanged between the UE and the AMF in the core network. The CP information may comprise a request to register to a network, mobility signalling, UE capabilities, and / or features support. The UE exchanges UP signalling via the mobile communication network after establishing a communication session and obtaining a UP address. The UP signalling may comprise application data. The UP address may be an IP address. The UP address may be obtained using CP signalling exchange.

[0038] Figure 2 illustrates an example of a process flow 200 in accordance with aspects of the present disclosure. The process flow 200 may implement or be implemented by aspects of the wireless communication system 100. For example, the process flow 200 may include a UE 210, a RAN 215, a UP 220, and a CP 250. The UP 220 comprises a UPF 222. The CP 250 comprises an AMF 252, a Session Management Function (SMF) 254, and a Policy Control Function (PCF) 256, which may be one or more examples of devices described herein with reference to Figure 1.

[0039] The process flow 200 may be referred to as a procedure, including one or more operations performed by one or more of the UE 210, the RAN 215, the UP 220, the UPF 222, the CP 250, the AMF 252, the SMF 254, and the PCF 256. In the example of Figure 2, the process flow 200 may include CP and UP separation in the 5GS architecture.

[0040] In the following description of the process flow 200, the operations or signalling performed between one or more of the UE 210, the RAN 215, the UP 220, the UPF 222, the CP 250, the AMF 252, the SMF 254, and the PCF 256 may be performed or signalled (e.g., transmitted, received) in a different order than the example order shown, or the operations or signalling performed by one or more of the UE 210, the RAN 215, the UP 220, the UPF 222, the CP 250, the AMF 252, the SMF 254, and the PCF 256 may be performed or signalled (e.g., transmitted, received) in different orders or at different times. Some operations or signalling may also be omitted from the process flow 200. Additionally, although some operations or signalling may be shown to occur at different times, these operations or signalling may occur at the same time or in overlapping time periods.

[0041] The UE 210 communicates with the RAN 215 using the Uu interface. The UE 210 communicates with the UPF 222 using UP signalling. The UE 210 communicates with the AMF 252 using NAS signalling. The AMF 252 communicates with the SMF 254 using the Nsmf interface. The SMF 254 communicates with the PCF 256 using the Npcf interface. The SMF 254 communicates with the UPF 222 using the N4 interface. The RAN 215 communicates with the UPF 222 using the GPRS Tunnelling Protocol UP (GTP- U), which can be used to carry general packet radio service (GPRS) within the wireless communication network.

[0042] While the CP, UP separation within 5GS architecture offered many advantages in term of, e.g., scaling resources required between CP and UP functions, one issue that wireless communication network operators have with the approach is with the upgradability of CP function(s) once a new feature rolls out. For example, CP and UP separation may require upgrading the RRC / NAS stack each time a new feature is defined.

[0043] There is defined herein an arrangement that allows for simplification of CP signalling exchange by introducing CP communication between the UE and the core network via UP signalling.

[0044] Figure 3 illustrates an example of a process flow 300 in accordance with aspects of the present disclosure. The process flow 300 may implement or be implemented by aspects of the wireless communication system 100. For example, the process flow 300 may include a UE 310, a RAN 315, a UPF 322, a 6G core 350 and a 6G network service 360. The 6G core 350 includes 5G core basic functionality and comprises an AMF 352, an SMF 354, and a PCF 356. The 6G network service 360 comprises at least one 6G network function 362. The UE 310, the RAN 315, the UPF 322, the 6G core 350, the AMF 352, the SMF 354, the PCF 356, the 6G network service 360, and the at least one 6G network function 362 may be one or more examples of devices described herein with reference to Figure 1.

[0045] The process flow 300 may be referred to as a procedure, including one or more operations performed by one or more of the UE 310, the RAN 315, the UPF 322, the 6G core 350, the AMF 352, the SMF 354, the PCF 356, the 6G network service 360, and the atleast one 6G network function 362. In the example of Figure 3, the process flow 300 may include supporting CP signalling between the UE and the 6G core network via the UP.In the following description of the process flow 300, the operations or signalling performed between one or more of the UE 310, the RAN 315, the UPF 322, the 6G core 350, the AMF 352, the SMF 354, the PCF 356, the 6G network service 360, and the at least one 6G network function 362may be performed or signalled (e.g., transmitted, received) in a different order than the example order shown, or the operations or signalling performed by one or more of the UE 310, the RAN 315, the UPF 322, the 6G core 350, the AMF 352, the SMF 354, the PCF 356, the 6G network service 360, and the at least one 6G network function 362 may be performed or signalled (e.g., transmitted, received) in different orders or at different times. Some operations or signalling may also be omitted from the process flow 300. Additionally, although some operations or signalling may be shown to occur at different times, these operations or signalling may occur at the same time or in overlapping time periods.

[0046] In addition to the interfaces shown in Figure 2, Figure 3 shows the UE 310 communicating with the AMF 352 using the N1 interface, the RAN 315 communicating with the AMF 352 using the N2 interface, and the 6G network service 360 communicating with the 6G core 350 using the Nxx interface. An Nyy interface is shown representing CP signalling between the UE 310 and the 6G network service 360 being carried over the UP.

[0047] The main proposal is to support CP signalling between the UE and the 6G core network via the UP, termed as “CP signalling over UP”. CP signalling over UP may be used to access services supported by a 6G network.

[0048] One such procedure defined herein commences when the UE registers to the 6G network using a modified legacy 5G registration procedure. The legacy 5G registration procedure is modified by the UE to include in the registration signalling only the essential parameters needed to register to the network. Such essential parameters may comprise authentication credentials, and may potentially also include parameters for network slice negotiation.

[0049] In the registration signalling, the UE may include additionally one or more of the following: an indication for 6G network access or a 6G network capability, and / or an indication of CP signalling over UP capability. The indication may be a 6G capability or a feature capability. The feature capability might comprise, for example a sensing capability.

[0050] During registration, the AMF or an enhanced version of AMF triggers the UE to establish CP signalling over the UP. The AMF may select a network function such as an ANF for exchanging CP signalling via the UP between the UE and the 6G core network. The ANF may be collocated with other NFs in the 6G network (AMF or SMF or UPF). The AMF provides in the registration accept information to the UE to assist the UE in establishing user plane signaling with the ANF.

[0051] During registration the AMF may also trigger establishment of a PDU session (which may be a network triggered PDU session) for use by the UE for exchanging control plane signalling over the user plane. The AMF may trigger multiple PDU session requests on per 6G service granularity. The AMF may determine the DNN / S-NSSAI for the network triggered PDU session based on the selected ANF. The created PDU session may route control plane traffic from the UE directly to the selected ANF.

[0052] After registration completes, the network may provision assistance information to the UE to indicate to the UE: whether to use CP signalling over UP or legacy NAS for control plane signalling; the PDU session ID for conveying CP signalling over UP; and / or the Address or FQDN, to discover the ANF in the core network for a specific 6G service or feature. The indication of whether to user CP signalling over UP or legacy NAS may be provided on per service granularity. For example, the network may indicate to the UE to use CP signalling over UP only for one type of service (e.g. sensing service) or to replace a legacy NAS service (e.g. send PDU session establishment requests via CP signalling over UP). The assistance information may also include the mapping of a PDU session ID to a 6G service (if multiple PDU session are used on per 6G service granularity). If the network triggered PDU session that is created routes traffic of the UE directly to the ANF, then the address of the ANF does not need to be provided to the UE by the network.

[0053] The assistance information may be included within a Registration Accept message or via another network-terminated NAS signalling. Such a network-terminatedNAS signalling may comprise UE configuration update, or Downlink NAS transport message, for example.

[0054] The UE is triggered to establish CP signalling over UP session with the ANF. This triggering may be based on the assistance information. The trigger may be based on: the UE determining a PDU session connection is required for an application traffic; and / or the UE accessing a specific 6G service.

[0055] In order to establish a CP signalling over UP session with the ANF, the UE may first discover the ANF using DNS request procedures. During DNS discovery the 6G network may assist the ANF discovery process.

[0056] The UE then sends any control plane signalling to the ANF according to the assistance information over the PDU session established by the network. The UE may send the following: PDU session establishment / modification requests; and / or a request for a 6G service.

[0057] When the ANF receives CP signalling over UP from the UE, the ANF determines how to route UE signalling within the core network based on the type of the request from the UE. The ANF may act as a proxy determining how to forward request from the UE to appropriate NFs in the 6G core.

[0058] If the ANF receives PDU session signalling (PDU session request / PDU session modification) the request is routed to an AMF and the AMF follows the procedure for PDU session establishment as per 3GPP TS 23.501 V19.2.1 (January 2025) titled “System architecture for the 5G System (5GS)” and / or 3GPP TS 23.502 vl9.2.0 (January 2025) titled “Procedures for the 5G System (5GS)”, both of which are incorporated herein by reference. Any signalling between the AMF and the UE is sent to the UE via the control plane signalling via user plane instead of sending the information via NAS.

[0059] If the ANF receives from the UE an Nanf service the ANF processes the request and determines the service requested by the UE and determines the NF to forward the UE request to. The ANF then triggers an Nnf service request including in the request the contents of the UE request.

[0060] If the ANF receives from the UE an Nnf service the ANF determines the NF to forward the request to and relays the request to the NF.

[0061] The ANF may also manage any downlink CP signalling to the UE. Any NF that needs to send CP signalling to the UE sends a request to the ANF and the ANF forwards the message to the UE in, e.g., an SBI request towards the UE.

[0062] The ANF may register in the UDM the UE identity. This is used by network functions to find the ANF serving the UE when CP signalling via UP needs to be sent to the UE.

[0063] Figure 4 illustrates an example of a process flow 400 in accordance with aspects of the present disclosure. The process flow 400 may implement or be implemented by aspects of the wireless communication system 100. For example, the process flow 400 may include a UE 410, a RAN 415, a UPF 422, an ANF 440, a 6G AMF 452, a 6G SMF 454, a PCF 456, a UDM 458, and at least one 6GNF 462, which may be one or more examples of devices described herein with reference to Figure 1.

[0064] The process flow 400 may be referred to as a procedure, including one or more operations performed by one or more of the UE 410, the RAN 415, the UPF 422, the ANF 440, the 6G AMF 452, the 6G SMF 454, the PCF 456, the UDM 458, and the at least one 6GNF 462. In the example of Figure 4, the process flow 400 may include ANF architecture for support UE CP signalling via the UP. This architecture may be suitable for supporting the ANF within the 6G architecture.

[0065] In the following description of the process flow 400, the operations or signalling performed between one or more of the UE 410, the RAN 415, the UPF 422, the ANF 440, the 6G AMF 452, the 6G SMF 454, the PCF 456, the UDM 458, and the at least one 6GNF 462 may be performed or signalled (e.g., transmitted, received) in a different order than the example order shown, or the operations or signalling performed by one or more of the UE 410, the RAN 415, the UPF 422, the ANF 440, the 6G AMF 452, the 6G SMF 454, the PCF 456, the UDM 458, and the at least one 6GNF 462 may be performed or signalled (e.g., transmitted, received) in different orders or at different times. Some operations or signalling may also be omitted from the process flow 400. Additionally, although someoperations or signalling may be shown to occur at different times, these operations or signalling may occur at the same time or in overlapping time periods.

[0066] In addition to the interfaces shown in Figures 2 and 3, Figure 4 shows the ANF 440 communicating with the UDM 458 using the Nxx2 interface. The ANF 440 communicates with the 6G AMF 452 using the Nxx3 interface. The ANF 440 communicates with the 6G SMF 454 using the Nxx4 interface. The ANF 440 communicates with the PCF 456 using the Nxx5 interface. The ANF 440 communicates with the UPF 422 using the N6 interface. An Nyy interface is shown representing CP signalling between the UE 410 and the ANF 440 being carried over the UP.

[0067] The Nxx interfaces are used according to the deployment of the ANF 440. The ANF 440 may be part of the 6G SMF or 6G AMF or 6G UPF functionality and as such: Nxx2 is used by the ANF 440 to interact with the UDM 458 for registering the UE 410 served by the ANF 440. The Nxx3 interface is used by the ANF 440 to forward any PDU session related signalling to the 6G AMF 452. The Nxx4 interface is used by the ANF 440 to trigger PDU session requests towards the 6G SMF 454 (e.g. in case the ANF is collocated with the 6G AMF 452). Nxx5 is used by the ANF 440 to establish policy association with the PCF 456 (in case ANF 440 is collocated with 6G SMF 454).

[0068] Figure 5 illustrates an example of a process flow 500 in accordance with aspects of the present disclosure. The process flow 500 may implement or be implemented by aspects of the wireless communication system 100. For example, the process flow 500 may include a UE 510, a RAN 515, an AMF 552, an ANF 540, a UDM 558, a UE PCF 511, an SMF 554, a UPF 522, and a Session Management (SM) PCF 512, which may be one or more examples of devices described herein with reference to Figure 1.

[0069] The process flow 500 may be referred to as a procedure, including one or more operations performed by one or more of the UE 510, the RAN 515, the AMF 552, the ANF 540, the UDM 558, the UE PCF 511, the SMF 554, the UPF 522, and the SM PCF 512. In the example of Figure 5, the process flow 500 may include a UE establishing CP over UP signalling with an ANF for 6G services.

[0070] In the following description of the process flow 500, the operations or signalling performed between one or more of the UE 510, the RAN 515, the AMF 552, the ANF 540, the UDM 558, the UE PCF 511, the SMF 554, the UPF 522, and the SM PCF 512 may be performed or signalled (e.g., transmitted, received) in a different order than the example order shown, or the operations or signalling performed by one or more of the UE 510, the RAN 515, the AMF 552, the ANF 540, the UDM 558, the UE PCF 511, the SMF 554, the UPF 522, and the SM PCF 512 may be performed or signalled (e.g., transmitted, received) in different orders or at different times. Some operations or signalling may also be omitted from the process flow 500. Additionally, although some operations or signalling may be shown to occur at different times, these operations or signalling may occur at the same time or in overlapping time periods.

[0071] The process flow 500 begins at 561, where the UE 510 starts registration. The UE 510 sends (e.g. transmits, outputs), and the RAN node 515 receives (e.g. acquires, obtains), a request. The RAN node 515 may comprise a node of a 6G network. The request may take the form of a Radio Resource Control (RRC) message. The registration is sent using NAS signalling as per 3 GPP TS 23.501. The UE 510 may include a CP signalling over UP capability or a 6G capability or a feature capability supported only in a 6G network.

[0072] Steps 562 to 568 are performed as per legacy registration procedure as per clause 4.2.2.2 of 3GPP TS 23.502.

[0073] At 569, the AMF 552 as part of the subscription information (e.g. the UE 510 has a 6G service subscription) decides to enable CP signalling over UP for the UE 510. The AMF 552 also initiates establishment of a network triggered PDU session which is used for CP signalling over UP on behalf of the UE 510. The AMF 552 selects an SMF 554 (which may also support ANF functionality). The PDU session request message is created by the AMF 552. The PDU session ID of the PDU session may be assigned by the AMF 552.

[0074] At 570 to 576, as per legacy PDU session establishment procedure after the AMF 552 sends a Create Session request to the SMF 554 (as per clause 4.3.2 of 3GPP TS 23.502 step 2 onwards).

[0075] At 577, the AMF 552 determines assistance information for the UE 510, the assistance information includes one or more of the following: an indication of whether to use CP signalling over UP or legacy NAS for control plane signalling; the PDU session ID for conveying CP signalling over UP; and / or the address or FQDN, sufficient for the UE 510 to discover the ANF 540. The indication of whether to user CP signalling over UP or legacy NAS may be provided on per service granularity. For example, the network may indicate to the UE 510 to use CP signalling over UP only for one type of service (e.g. sensing service) or to replace a legacy NAS service (e.g. send PDU session establishment requests via CP signalling over UP). The assistance information may also include the mapping of PDU session ID to a 6G service (if multiple PDU session are used on per 6G service granularity). The address or FQDN, sufficient for the UE 510 to discover the ANF 540 in the core network may be for a specific 6G service or feature.

[0076] At this point the AMF 552 may be notified that the resources for PDU session have been reserved.

[0077] At 578, the AMF 552 sends (e.g. transmits, outputs) and the UE 510 receives (e.g. acquires, obtains), the combined Registration Accept and PDU session accept. The combined Registration Accept and PDU session accept may be sent to the UE 510 via the RAN node 515. The combined Registration Accept and PDU session accept may include assistance information. The combined Registration Accept and PDU session accept may be carried as N2 info or N1. The Registration Accept may include assistance information. The PDU session accept may include assistance information.

[0078] At 579, the UE 510 receives (e.g. acquires, obtains), and the RAN node 515 sends (e.g. transmits, outputs) a combined registration accept and PDU session accept. The combined registration accept and PDU session accept may comprise RRC signalling. The combined registration accept and PDU session accept may comprise a NAS registration accept including assistance information, and a NAS PDU session accept.

[0079] At 580, in an alternative example, the assistance information may be sent at other network terminated signalling, UE 510 configuration Update or Downlink NAS Transport.

[0080] At 581, the UE 510 may discover the ANF 540. The discovery procedure may be based on a DNS query.

[0081] At 582, when the UE 510 determines that a new PDU session needs to be established (e.g. based on the application requesting a network connection and corresponding URSP rules) the UE 510 sends a new PDU session request using CP signalling over UP. The UE 510 sends (e.g. transmits, outputs) and the ANF 540 receives (e.g. acquires, obtains), the new PDU session request via the network triggered PDU session. The PDU session request may comprise a PDU session establishment request. PDU session request may comprise a Data Network Name (DNN) and a Single - Network Slice Selection Assistance Information (S-NSSAI). The new PDU session request is received at the ANF 540 (either based on the UE 510 discovering the ANF address in step 581 or based on the network triggered PDU session routing the traffic directly to an ANF 540).

[0082] At 581, the ANF 540 may check with the UDM 558 if the UE 510 is allowed to establish a CP signalling over UP session.

[0083] At 582, the ANF 540 finds the AMF 552 serving the UE 510. The UE 510 sends (e.g. transmits, outputs) and the ANF 540 receives (e.g. acquires, obtains), a PDU session establishment request.

[0084] At 583, the ANF 540 forwards (e.g. sends, transmits, outputs), and the AMF 552 receives (e.g. acquires, obtains), the PDU session establishment request.

[0085] At 584-593, the AMF 552 continues the PDU session establishment procedure as per legacy PDU session establishment procedures (see steps 2-11 of Figure 4.3.2.2.1-1 of 3GPP TS 23.502).

[0086] At 594, the AMF 552 sends (e.g. transmits, outputs), and the RAN node 515 receives (e.g. acquires, obtains), the N2 SM information.

[0087] At 595, at the same time the AMF 552 sends (e.g. transmits, outputs), and the ANF 540 via Nxx reference point receives (e.g. acquires, obtains), the N1 SM information.

[0088] At 597, the ANF 540 forwards (e.g. sends, transmits, outputs), and the UE 510 receives (e.g. acquires, obtains), the N1 SM information (which may include PDU session accept).

[0089] Figure 6 illustrates an example of a UE 600 in accordance with aspects of the present disclosure. The UE 600 may include a processor 602, a memory 604, a controller 606, and a transceiver 608. The processor 602, the memory 604, the controller 606, or the transceiver 608, or various combinations thereof or various components thereof may be examples of means for performing various aspects of the present disclosure as described herein. These components may be coupled (e.g., operatively, communicatively, functionally, electronically, electrically) via one or more interfaces.

[0090] The processor 602, the memory 604, the controller 606, or the transceiver 608, or various combinations or components thereof may be implemented in hardware (e.g., circuitry). The hardware may include a processor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), or other programmable logic device, or any combination thereof configured as or otherwise supporting a means for performing the functions described in the present disclosure.

[0091] The processor 602 may include an intelligent hardware device (e.g., a general- purpose processor, a DSP, a CPU, an ASIC, an FPGA, or any combination thereof). In some implementations, the processor 602 may be configured to operate the memory 604. In some other implementations, the memory 604 may be integrated into the processor 602. The processor 602 may be configured to execute computer-readable instructions stored in the memory 604 to cause the UE 600 to perform various functions of the present disclosure.

[0092] The memory 604 may include volatile or non-volatile memory. The memory 604 may store computer-readable, computer-executable code including instructions when executed by the processor 602 cause the UE 600 to perform various functions described herein. The code may be stored in a non-transitory computer-readable medium such the memory 604 or another type of memory. Computer-readable media includes both non- transitory computer storage media and communication media including any medium that facilitates transfer of a computer program from one place to another. A non-transitorystorage medium may be any available medium that may be accessed by a general -purpose or special-purpose computer.

[0093] In some implementations, the processor 602 and the memory 604 coupled with the processor 602 may be configured to cause the UE 600 to perform one or more of the functions described herein (e.g., executing, by the processor 602, instructions stored in the memory 604). For example, the processor 602 may support wireless communication at the UE 600 in accordance with examples as disclosed herein. The UE 600 may be configured to support a means for sending a registration request to a wireless communication network; receiving from the wireless communication network: an indication that a first PDU session is established; and assistance information defining a means for conveying control plane signalling by the device via the first PDU session; sending a service request over the first PDU session to a first network function wherein the service request includes an indication to establish a second PDU session for a service; and receiving via the first PDU session an indication that the second PDU session is established.

[0094] The controller 606 may manage input and output signals for the UE 600. The controller 606 may also manage peripherals not integrated into the UE 600. In some implementations, the controller 606 may utilize an operating system such as iOS®, ANDROID®, WINDOWS®, or other operating systems. In some implementations, the controller 606 may be implemented as part of the processor 602.

[0095] In some implementations, the UE 600 may include at least one transceiver 608. In some other implementations, the UE 600 may have more than one transceiver 608. The transceiver 608 may represent a wireless transceiver. The transceiver 608 may include one or more receiver chains 610, one or more transmitter chains 612, or a combination thereof.

[0096] A receiver chain 610 may be configured to receive signals (e.g., control information, data, packets) over a wireless medium. For example, the receiver chain 610 may include one or more antennas for receive the signal over the air or wireless medium. The receiver chain 610 may include at least one amplifier (e.g., a low-noise amplifier (LNA)) configured to amplify the received signal. The receiver chain 610 may include at least one demodulator configured to demodulate the receive signal and obtain the transmitted data by reversing the modulation technique applied during transmission of thesignal. The receiver chain 610 may include at least one decoder for decoding the processing the demodulated signal to receive the transmitted data.

[0097] A transmitter chain 612 may be configured to generate and transmit signals (e.g., control information, data, packets). The transmitter chain 612 may include at least one modulator for modulating data onto a carrier signal, preparing the signal for transmission over a wireless medium. The at least one modulator may be configured to support one or more techniques such as amplitude modulation (AM), frequency modulation (FM), or digital modulation schemes like phase-shift keying (PSK) or quadrature amplitude modulation (QAM). The transmitter chain 612 may also include at least one power amplifier configured to amplify the modulated signal to an appropriate power level suitable for transmission over the wireless medium. The transmitter chain 612 may also include one or more antennas for transmitting the amplified signal into the air or wireless medium.

[0098] Figure 7 illustrates an example of a processor 700 in accordance with aspects of the present disclosure. The processor 700 may be an example of a processor configured to perform various operations in accordance with examples as described herein. The processor 700 may include a controller 702 configured to perform various operations in accordance with examples as described herein. The processor 700 may optionally include at least one memory 704, which may be, for example, an L1 / L2 / L3 cache. Additionally, or alternatively, the processor 700 may optionally include one or more arithmetic-logic units (ALUs) 706. One or more of these components may be in electronic communication or otherwise coupled (e.g., operatively, communicatively, functionally, electronically, electrically) via one or more interfaces (e.g., buses).

[0099] The processor 700 may be a processor chipset and include a protocol stack (e.g., a software stack) executed by the processor chipset to perform various operations (e.g., receiving, obtaining, retrieving, transmitting, outputting, forwarding, storing, determining, identifying, accessing, writing, reading) in accordance with examples as described herein. The processor chipset may include one or more cores, one or more caches (e.g., memory local to or included in the processor chipset (e.g., the processor 700) or other memory (e.g., random access memory (RAM), read-only memory (ROM), dynamic RAM (DRAM), synchronous dynamic RAM (SDRAM), static RAM (SRAM), ferroelectric RAM(FeRAM), magnetic RAM (MRAM), resistive RAM (RRAM), flash memory, phase change memory (PCM), and others).

[0100] The controller 702 may be configured to manage and coordinate various operations (e.g., signalling, receiving, obtaining, retrieving, transmitting, outputting, forwarding, storing, determining, identifying, accessing, writing, reading) of the processor 700 to cause the processor 700 to support various operations in accordance with examples as described herein. For example, the controller 702 may operate as a control unit of the processor 700, generating control signals that manage the operation of various components of the processor 700. These control signals include enabling or disabling functional units, selecting data paths, initiating memory access, and coordinating timing of operations.

[0101] The controller 702 may be configured to fetch (e.g., obtain, retrieve, receive) instructions from the memory 704 and determine subsequent instruction(s) to be executed to cause the processor 700 to support various operations in accordance with examples as described herein. The controller 702 may be configured to track memory address of instructions associated with the memory 704. The controller 702 may be configured to decode instructions to determine the operation to be performed and the operands involved. For example, the controller 702 may be configured to interpret the instruction and determine control signals to be output to other components of the processor 700 to cause the processor 700 to support various operations in accordance with examples as described herein. Additionally, or alternatively, the controller 702 may be configured to manage flow of data within the processor 700. The controller 702 may be configured to control transfer of data between registers, ALUs, and other functional units of the processor 700.

[0102] The memory 704 may include one or more caches (e.g., memory local to or included in the processor 700 or other memory, such RAM, ROM, DRAM, SDRAM, SRAM, MRAM, flash memory, etc. In some implementations, the memory 704 may reside within or on a processor chipset (e.g., local to the processor 700). In some other implementations, the memory 704 may reside external to the processor chipset (e.g., remote to the processor 700).

[0103] The memory 704 may store computer-readable, computer-executable code including instructions that, when executed by the processor 700, cause the processor 700 toperform various functions described herein. The code may be stored in a non-transitory computer-readable medium such as system memory or another type of memory. The controller 702 and / or the processor 700 may be configured to execute computer-readable instructions stored in the memory 704 to cause the processor 700 to perform various functions. For example, the processor 700 and / or the controller 702 may be coupled with or to the memory 704, the processor 700, the controller 702, and the memory 704 may be configured to perform various functions described herein. In some examples, the processor 700 may include multiple processors and the memory 704 may include multiple memories. One or more of the multiple processors may be coupled with one or more of the multiple memories, which may, individually or collectively, be configured to perform various functions herein.

[0104] The one or more ALUs 706 may be configured to support various operations in accordance with examples as described herein. In some implementations, the one or more ALUs 706 may reside within or on a processor chipset (e.g., the processor 700). In some other implementations, the one or more ALUs 706 may reside external to the processor chipset (e.g., the processor 700). One or more ALUs 706 may perform one or more computations such as addition, subtraction, multiplication, and division on data. For example, one or more ALUs 706 may receive input operands and an operation code, which determines an operation to be executed. One or more ALUs 706 be configured with a variety of logical and arithmetic circuits, including adders, subtractors, shifters, and logic gates, to process and manipulate the data according to the operation. Additionally, or alternatively, the one or more ALUs 706 may support logical operations such as AND, OR, exclusive-OR (XOR), not-OR (NOR), and not- AND (NAND), enabling the one or more ALUs 706 to handle conditional operations, comparisons, and bitwise operations.

[0105] The processor 700 may support wireless communication in accordance with examples as disclosed herein. The processor 700 may be configured to support a means for sending a registration request to a wireless communication network; receiving from the wireless communication network: an indication that a first PDU session is established; and assistance information defining a means for conveying control plane signalling by the device via the first PDU session; sending a service request over the first PDU session to afirst network function wherein the service request includes an indication to establish a second PDU session for a service; and receiving via the first PDU session an indication that the second PDU session is established. Alternatively, the processor 700 may be configured to or operable to support a means for receiving a registration request from a device; determining whether the device is authorised to convey control plane signalling over a user plane connection for a service; identifying, based on the registration request, a second network function supporting session management functionality; sending a session request to the second network function to establish a first PDU session on behalf of the device; receiving confirmation that the first PDU session is established; and in response to receiving confirmation that the first PDU session is established, sending, to the device: an indication that the first PDU session is established; and assistance information defining a means for conveying control plane signalling by the device via the PDU session.

[0106] Figure 8 illustrates an example of a NE 800 in accordance with aspects of the present disclosure. The NE 800 may include a processor 802, a memory 804, a controller 806, and a transceiver 808. The processor 802, the memory 804, the controller 806, or the transceiver 808, or various combinations thereof or various components thereof may be examples of means for performing various aspects of the present disclosure as described herein. These components may be coupled (e.g., operatively, communicatively, functionally, electronically, electrically) via one or more interfaces.

[0107] The processor 802, the memory 804, the controller 806, or the transceiver 808, or various combinations or components thereof may be implemented in hardware (e.g., circuitry). The hardware may include a processor, a DSP, an ASIC, or other programmable logic device, or any combination thereof configured as or otherwise supporting a means for performing the functions described in the present disclosure.

[0108] The processor 802 may include an intelligent hardware device (e.g., a general- purpose processor, a DSP, a CPU, an ASIC, an FPGA, or any combination thereof). In some implementations, the processor 802 may be configured to operate the memory 804. In some other implementations, the memory 804 may be integrated into the processor 802. The processor 802 may be configured to execute computer-readable instructions stored in the memory 804 to cause the NE 800 to perform various functions of the present disclosure.

[0109] The memory 804 may include volatile or non-volatile memory. The memory 804 may store computer-readable, computer-executable code including instructions when executed by the processor 802 cause the NE 800 to perform various functions described herein. The code may be stored in a non-transitory computer-readable medium such the memory 804 or another type of memory. Computer-readable media includes both non- transitory computer storage media and communication media including any medium that facilitates transfer of a computer program from one place to another. A non-transitory storage medium may be any available medium that may be accessed by a general -purpose or special-purpose computer.

[0110] In some implementations, the processor 802 and the memory 804 coupled with the processor 802 may be configured to cause the NE 800 to perform one or more of the functions described herein (e.g., executing, by the processor 802, instructions stored in the memory 804). For example, the processor 802 may support wireless communication at the NE 800 in accordance with examples as disclosed herein. The NE 800 may be configured to support a means for receiving a registration request from a device; determining whether the device is authorised to convey control plane signalling over a user plane connection for a service; identifying, based on the registration request, a second network function supporting session management functionality; sending a session request to the second network function to establish a first PDU session on behalf of the device; receiving confirmation that the first PDU session is established; and in response to receiving confirmation that the first PDU session is established, sending, to the device: an indication that the first PDU session is established; and assistance information defining a means for conveying control plane signalling by the device via the PDU session.[oni] The controller 806 may manage input and output signals for the NE 800. The controller 806 may also manage peripherals not integrated into the NE 800. In some implementations, the controller 806 may utilize an operating system such as iOS®, ANDROID®, WINDOWS®, or other operating systems. In some implementations, the controller 806 may be implemented as part of the processor 802.

[0112] In some implementations, the NE 800 may include at least one transceiver 808. In some other implementations, the NE 800 may have more than one transceiver 808. Thetransceiver 808 may represent a wireless transceiver. The transceiver 808 may include one or more receiver chains 810, one or more transmitter chains 812, or a combination thereof.

[0113] A receiver chain 810 may be configured to receive signals (e.g., control information, data, packets) over a wireless medium. For example, the receiver chain 810 may include one or more antennas for receive the signal over the air or wireless medium. The receiver chain 810 may include at least one amplifier (e.g., an LNA) configured to amplify the received signal. The receiver chain 810 may include at least one demodulator configured to demodulate the receive signal and obtain the transmitted data by reversing the modulation technique applied during transmission of the signal. The receiver chain 810 may include at least one decoder for decoding the processing the demodulated signal to receive the transmitted data.

[0114] A transmitter chain 812 may be configured to generate and transmit signals (e.g., control information, data, packets). The transmitter chain 812 may include at least one modulator for modulating data onto a carrier signal, preparing the signal for transmission over a wireless medium. The at least one modulator may be configured to support one or more techniques such as AM, FM, or digital modulation schemes like phaseshift keying (PSK) or QAM. The transmitter chain 812 may also include at least one power amplifier configured to amplify the modulated signal to an appropriate power level suitable for transmission over the wireless medium. The transmitter chain 812 may also include one or more antennas for transmitting the amplified signal into the air or wireless medium.

[0115] Figure 9 illustrates a flowchart of a method 900 in accordance with aspects of the present disclosure. The operations of the method 900 may be implemented by a NE as described herein. In some implementations, the NE may execute a set of instructions to control the function elements of the NE to perform the described functions.

[0116] At 902, the method 900 may include receiving a registration request from a device. The operations of 902 may be performed in accordance with examples as described herein. In some implementations, aspects of the operations of 902 may be performed by a NE as described with reference to Figure 8.

[0117] At 904, the method 900 may include determining whether the device is authorised to convey control plane signalling over a user plane connection for a service. The operations of 904 may be performed in accordance with examples as described herein. In some implementations, aspects of the operations of 904 may be performed by a NE as described with reference to Figure 8.

[0118] At 906, the method 900 may include identifying, based on the registration request, a second network function supporting session management functionality. The operations of 906 may be performed in accordance with examples as described herein. In some implementations, aspects of the operations of 906 may be performed a NE as described with reference to Figure 8.

[0119] At 908, the method 900 may include sending a session request to the second network function to establish a first PDU session on behalf of the device. The operations of 908 may be performed in accordance with examples as described herein. In some implementations, aspects of the operations of 908 may be performed by a NE as described with reference to Figure 8.

[0120] At 910, the method 900 may include receiving confirmation that the first PDU session is established. The operations of 910 may be performed in accordance with examples as described herein. In some implementations, aspects of the operations of 910 may be performed by a NE as described with reference to Figure 8.

[0121] At 912, the method 900 may include in response to receiving confirmation that the first PDU session is established, sending, to the device: an indication that the first PDU session is established; and assistance information defining a means for conveying control plane signalling by the device via the PDU session. The operations of 912 may be performed in accordance with examples as described herein. In some implementations, aspects of the operations of 912 may be performed a NE as described with reference to Figure 8.

[0122] Figure 10 illustrates a flowchart of a method 1000 in accordance with aspects of the present disclosure. The operations of the method may be implemented by a UE asdescribed herein. In some implementations, the UE may execute a set of instructions to control the function elements of the UE to perform the described functions.

[0123] At 1002, the method 1000 may include sending a registration request to a wireless communication network. The operations of 1002 may be performed in accordance with examples as described herein. In some implementations, aspects of the operations of 1002 may be performed by a UE as described with reference to Figure 6.

[0124] At 1004, the method 1000 may include receiving from the wireless communication network: an indication that a first PDU session is established; and assistance information defining a means for conveying control plane signalling by the device via the first PDU session. The operations of 1004 may be performed in accordance with examples as described herein. In some implementations, aspects of the operations of 1004 may be performed by a UE as described with reference to Figure 6.

[0125] At 1006, the method 1000 may include sending a service request over the first PDU session to a first network function wherein the service request includes an indication to establish a second PDU session for a service. The operations of 1006 may be performed in accordance with examples as described herein. In some implementations, aspects of the operations of 1006 may be performed a UE as described with reference to Figure 6.

[0126] At 1008, the method may include receiving via the first PDU session an indication that the second PDU session is established. The operations of 1008 may be performed in accordance with examples as described herein. In some implementations, aspects of the operations of 1008 may be performed by a UE as described with reference to Figure 6.

[0127] It should be noted that the method 1000 described herein describes a possible implementation, and that the operations and the steps may be rearranged or otherwise modified and that other implementations are possible.

[0128] A first network function for wireless communication is described. The first network function may be configured to, capable of, or operable to perform one or more operations as described herein. For example, the first network function may include at least one memory; and at least one processor coupled with the at least one memory andconfigured to cause the first network function to: receive a registration request from a device; determine whether the device is authorised to convey control plane signalling over a user plane connection for a service; identify, based on the registration request, a second network function supporting session management functionality; send a session request to the second network function to establish a first PDU session on behalf of the device; receive confirmation that the first PDU session is established; and in response to receiving confirmation that the first PDU session is established, send, to the device: an indication that the first PDU session is established; and assistance information defining a means for conveying control plane signalling by the device via the PDU session.

[0129] Separation of the control plane and the user plane within 5GS architecture offers advantages such as improved scaling of the resources required between control plane and user plane functions. Many of the new features and services introduced in 5GS rely on enhancing / extending the control plane signalling. For example, for V2X services to be supported the UE and core must exchange information over the control plane. Such information exchange is facilitated by enhancing the RRC and NAS stack, in order to exchange capabilities and configuration information. In order to deploy new services the vendors must upgrade their existing network functions with new features and the wireless communication network operators must upgrade their existing infrastructure which leads to additional costs. For example, to deploy V2X service would require upgrading existing RAN, AMF, SMF and PCF nodes in the 3GPP network. For at least this reason, the adoption of such new services in wireless communication networks has remained limited.

[0130] The first network function as defined herein tends to simplify control plane signalling exchange by introducing control plane communication between the device and a core network over user plane signalling. The first network function defined herein is arranged to identify a second network function for processing the control plane signalling of the registration request, and to forward the registration request to that second network function. This approach allows for an optimisation of the way resources are setup for a device (such as a UE) in order to convey control plane signalling over user plane by having the network trigger establishment of a PDU session on behalf of the device.

[0131] The first network function may be in a 6G core network. The first network function may comprise an Access and Mobility Function. The first service may comprise a feature. The first service may comprise a 6G service. The first service may comprise a 6G feature. The control plane signalling may be targeted for a first service supported in the wireless communication network.

[0132] The assistance information may be sent in a registration response. The registration response may be a registration accept message. By way of example, the assistance information may be sent at other network terminated signalling, UE configuration Update, or Downlink NAS Transport.

[0133] The assistance information may indicate for which services to use the first PDU session for control plane signalling over UP, or to replace a legacy NAS service. For example, the assistance information may comprise an indication for the device to send a session request comprising a PDU session establishment request via CP signalling over UP.

[0134] The registration request may include an indication that the device supports a first capability. The first capability may be a 6G service capability or a CP signalling over UP capability. The registration request may include a CP signalling over UP capability, a 6G capability, or a feature capability supported only in a 6G network.

[0135] The device may be a UE. The second network function may be a SMF. The ANF may be collocated with other NFs in the 6G network (AMF or SMF or UPF). The first PDU session may be used by the device for provision of one or more services.

[0136] The first service may comprise a 6G service, the 6G service comprising at least one of a service for sensing, a service for receiving configuration information from the network for one or more services, a service for positioning, and / or a service having a particular Quality of Service, QoS.

[0137] The first service may be a request for a slice. The first service may be for the implementation of a policy. The device may establish a general Service Based Interface (SB I) service with the first network function to convey control plane signalling of more than one service. For example, the device may establish a session with the first network function using an SBI service for further control plane signalling between the device andthe wireless communication network or for any device request containing control plane signalling over the user plane. The configuration information may comprise URSP rules from PCF, Access and mobility Rules from AMF or other configuration information from new 6G services.

[0138] The at least one processor may be further configured to cause the first network function to check with a third network function whether control plane signalling over the user plane is allowed. The third network function may be a UDM.

[0139] The second network function may be identified based on the identity of the first service. The first service may be identified based on an identifier included in the registration request where the identifier corresponds to the first service. The first service may be identified based on the SBI service included in the registration request.

[0140] A processor for wireless communication is described. The processor may be configured to, capable of, or operable to perform one or more operations as described herein. For example, the processor may comprise at least one controller coupled with at least one memory and configured to cause the processor to: receive a registration request from a device; determine whether the device is authorised to convey control plane signalling over a user plane connection for a service; identify, based on the registration request, a second network function supporting session management functionality; and send a session request to the second network function to establish a first PDU session on behalf of the device; receive confirmation that the first PDU session is established; in response to receiving confirmation that the first PDU session is established, send, to the device: an indication that the first PDU session is established; and assistance information defining a means for conveying control plane signalling by the device via the PDU session.

[0141] A method performed or performable by a first network function is described. The method may comprise: receiving a registration request from a device; determining whether the device is authorised to convey control plane signalling over a user plane connection for a service; identifying, based on the registration request, a second network function supporting session management functionality; sending a session request to the second network function to establish a first PDU session on behalf of the device; receiving confirmation that the first PDU session is established; and in response to receivingconfirmation that the first PDU session is established, sending, to the device: an indication that the first PDU session is established; and assistance information defining a means for conveying control plane signalling by the device via the PDU session.

[0142] Separation of the control plane and the user plane within 5GS architecture offers advantages such as improved scaling of the resources required between control plane and user plane functions. Many of the new features and services introduced in 5GS rely on enhancing / extending the control plane signalling. For example, for V2X services to be supported the UE and core must exchange information over the control plane. Such information exchange is facilitated by enhancing the RRC and NAS stack, in order to exchange capabilities and configuration information. In order to deploy new services the vendors must upgrade their existing network functions with new features and the wireless communication network operators must upgrade their existing infrastructure which leads to additional costs. For example, to deploy V2X service would require upgrading existing RAN, AMF, SMF and PCF nodes in the 3GPP network. For at least this reason, the adoption of such new services in wireless communication networks has remained limited.

[0143] The first network function as defined herein tends to simplify control plane signalling exchange by introducing control plane communication between the device and a core network over user plane signalling. The first network function defined herein is arranged to identify a second network function for processing the control plane signalling of the registration request, and to forward the registration request to that second network function. This approach allows for an optimisation of the way resources are setup for a device (such as a UE) in order to convey control plane signalling over user plane by having the network trigger establishment of a PDU session on behalf of the device.

[0144] The first network function may be in a 6G core network. The first network function may comprise an Access and Mobility Function. The first service may comprise a feature. The first service may comprise a 6G service. The first service may comprise a 6G feature. The control plane signalling may be targeted for a first service supported in the wireless communication network.

[0145] The assistance information may be sent in a registration response. The registration response may be a registration accept message. By way of example, theassistance information may be sent at other network terminated signalling, UE configuration Update, or Downlink NAS Transport.

[0146] The assistance information may indicate for which services to use the first PDU session for control plane signalling over UP, or to replace a legacy NAS service. For example, the assistance information may comprise an indication for the device to send a session request comprising a PDU session establishment request via CP signalling over UP.

[0147] The registration request may include an indication that the device supports a first capability. The first capability may be a 6G service capability or a CP signalling over UP capability. The registration request may include a CP signalling over UP capability, a 6G capability, or a feature capability supported only in a 6G network.

[0148] The device may be a UE. The second network function may be a SMF. The ANF may be collocated with other NFs in the 6G network (AMF or SMF or UPF). The first PDU session may be used by the device for provision of one or more services.

[0149] The first service may comprise a 6G service, the 6G service comprising at least one of: a service for sensing, a service for receiving configuration information from the network for one or more services, a service for positioning, and / or a service having a particular Quality of Service, QoS. The first service may be a request for a slice. The first service may be for the implementation of a policy. The device may establish a general Service Based Interface (SBI) service with the first network function to convey control plane signalling of more than one service. For example, the device may establish a session with the first network function using an SBI service for further control plane signalling between the device and the wireless communication network or for any device request containing control plane signalling over the user plane. The configuration information may comprise URSP rules from PCF, Access and mobility Rules from AMF or other configuration information from new 6G services.

[0150] The method may further comprise checking with a third network function whether control plane signalling over the user plane is allowed. The third network function may be a UDM.

[0151] The second network function may be identified based on the identity of the first service. The first service may be identified based on an identifier included in the registration request where the identifier corresponds to the first service. The first service may be identified based on the SBI service included in the registration request.

[0152] A device for wireless communication is described. The device may be configured to, capable of, or operable to perform one or more operations as described herein. For example, the device may include at least one memory; and at least one processor coupled with the at least one memory and configured to cause the device to: send a registration request to a wireless communication network; receive from the wireless communication network: an indication that a first PDU session is established; and assistance information defining a means for conveying control plane signalling by the device via the first PDU session; send a service request over the first PDU session to a first network function wherein the service request includes an indication to establish a second PDU session for a service; and receive via the first PDU session an indication that the second PDU session is established.

[0153] The service request may be triggered when the device determines that second PDU session needs to be established. The service request may be triggered based on an application trigger. The device may send the PDU session via CP signalling over UP. The UE sends the PDU session request using an SBI service to the ANF.

[0154] Separation of the Control Plane and the User Plane within 5GS architecture offered advantages such as improved scaling resources required between control plane and user plane functions. However, such separation can give rise to problems for operators when upgrading control plane function(s) once a new feature rolls out. For example, as explained above, separation of the Control Plane and the User Plane within 5GS architecture requires upgrading the RRC / NAS stack each time a new feature is defined.

[0155] The device as defined herein tends to simplify control plane signalling exchange by introducing control plane communication between the device and a core network via user plane signalling. The device as defined herein is arranged to send the registration request to the first network function in a form that allows the first network function to identify a second network function for processing the control plane signalling of theregistration request, and to forward the registration request to the second network function. This approach allows for an optimisation of the way resources are setup for the device in order to convey control plane signalling over user plane by having the network trigger establishment of a PDU session on behalf of the device.

[0156] The device may be served by a wireless communication network. The wireless communication network may be a 6G network. The first network function may comprise an Access and Mobility Function. The first network function may be in a 6G core network. The first service may comprise a feature. The first service may comprise a 6G service. The first service may comprise a 6G feature.

[0157] The registration request may initiate the first service. The device may request a service using a specific SBI service supported by the first network function. The device may request a service by constructing an SBI service supported by another network function that is received by the first network function. The wireless communication network may route to the first network function the service request using a specific SBI service supported by the first network function. The another network function may be a 6G network function. The SBI service may be an Nanf service.

[0158] The device may be a UE. The second network function may be a SMF. An ANF may be collocated with other NFs in the 6G network (AMF or SMF or UPF).

[0159] The at least one processor may be further configured to cause the device to: send a registration request to a wireless communication network, the registration requesting including an indication of a control plane over user plane capability; receive assistance information in response to the registration request; and determine, based on the assistance information, that for the first service, control plane signalling over the user plane needs to be established over an established PDU session.

[0160] The assistance information may be received from the wireless communication network. The registration request may be sent via the established PDU session.

[0161] The assistance information may include an indication to establish control plane signalling over the user plane. The assistance information may include the address of the first network function.

[0162] The indication to establish control plane signalling over the user plane may be determined based on a per service granularity.

[0163] The assistance information may include a PDU session ID of the PDU session. The assistance information may include DNN / S-NSSAI of the PDU session for control plane signalling over the user plane. The PDU session related parameters may be determined based on assistance information. The PDU session related parameters may be determined based on provisioned URSP rules. The assistance information may include the address of a first network function.

[0164] The at least one processor may be further configured to cause the device to select the first network function by sending a DNS query to an address included in the assistance information. The address may comprise an FQDN for a DNS resolver in the wireless communication network. The device may discover the first network function by sending a DNS request to the wireless communication network, and receiving in response the address of the first network function to which the device should send the registration request. The wireless communication network may process the DNS request and responds with the address of the first network function to which the device should send the registration request. A 6G DNS resolver within the wireless communication network may process the DNS request and respond with the address of the first network function to which the device should send the registration request.

[0165] A processor for wireless communication is described. The processor may be configured to, capable of, or operable to perform one or more operations as described herein. For example, the processor may comprise at least one controller coupled with at least one memory and configured to cause the processor to: send a registration request to a wireless communication network; receive from the wireless communication network: an indication that a first PDU session is established; and assistance information defining a means for conveying control plane signalling by the device via the first PDU session; send a service request over the first PDU session to a first network function wherein the service request includes an indication to establish a second PDU session for a service; receive via the first PDU session an indication that the second PDU session is established.

[0166] A method performed or performable by a device for wireless communication is described. The method comprises: sending a registration request to a wireless communication network; receiving from the wireless communication network: an indication that a first PDU session is established; and assistance information defining a means for conveying control plane signalling by the device via the first PDU session; sending a service request over the first PDU session to a first network function wherein the service request includes an indication to establish a second PDU session for a service; and receiving via the first PDU session an indication that the second PDU session is established.

[0167] The service request may be triggered when the device determines that second PDU session needs to be established. The service request may be triggered based on an application trigger. The device may send the PDU session via CP signalling over UP. The UE sends the PDU session request using an SBI service to the ANF.

[0168] Separation of the Control Plane and the User Plane within 5GS architecture offered advantages such as improved scaling resources required between control plane and user plane functions. However, such separation can give rise to problems for operators when upgrading control plane function(s) once a new feature rolls out. For example, as explained above, separation of the Control Plane and the User Plane within 5GS architecture requires upgrading the RRC / NAS stack each time a new feature is defined.

[0169] The device as defined herein tends to simplify control plane signalling exchange by introducing control plane communication between the device and a core network via user plane signalling. The device as defined herein is arranged to send the registration request to the first network function in a form that allows the first network function to identify a second network function for processing the control plane signalling of the registration request, and to forward the registration request to the second network function. This approach allows for an optimisation of the way resources are setup for the device in order to convey control plane signalling over user plane by having the network trigger establishment of a PDU session on behalf of the device.

[0170] The device may be served by a wireless communication network. The wireless communication network may be a 6G network. The first network function may comprisean Access and Mobility Function. The first network function may be in a 6G core network. The first service may comprise a feature. The first service may comprise a 6G service. The first service may comprise a 6G feature.

[0171] The registration request may initiate the first service. The device may request a service using a specific SBI service supported by the first network function. The device may request a service by constructing an SBI service supported by another network function that is received by the first network function. The wireless communication network may route to the first network function the service request using a specific SBI service supported by the first network function. The another network function may be a 6G network function. The SBI service may be an Nanf service.

[0172] The device may be a UE. The second network function may be a SMF. An ANF may be collocated with other NFs in the 6G network (AMF or SMF or UPF).

[0173] The method may further comprise: sending a registration request to a wireless communication network, the registration requesting including an indication of a control plane over user plane capability; receiving assistance information in response to the registration request; and determining, based on the assistance information, that for the first service, control plane signalling over the user plane needs to be established over an established PDU session. The assistance information may be received from the wireless communication network. The registration request may be sent via the established PDU session.

[0174] The assistance information may include an indication to establish control plane signalling over the user plane. The assistance information may include the address of the first network function. The indication to establish control plane signalling over the user plane may be determined based on a per service granularity.

[0175] The assistance information may include a PDU session ID of the PDU session. The assistance information may include DNN / S-NSSAI of the PDU session for control plane signalling over the user plane. The PDU session related parameters may be determined based on assistance information. The PDU session related parameters may bedetermined based on provisioned URSP rules. The assistance information may include the address of a first network function.

[0176] The method may may further comprise selecting the first network function by sending a DNS query to an address included in the assistance information. The address may comprise a FQDN for a DNS resolver in the wireless communication network. The device may discover the first network function by sending a DNS request to the wireless communication network, and receiving in response the address of the first network function to which the device should send the registration request. The wireless communication network may process the DNS request and responds with the address of the first network function to which the device should send the registration request. A 6G DNS resolver within the wireless communication network may process the DNS request and respond with the address of the first network function to which the device should send the registration request.

[0177] While the CP, UP separation within 5GS architecture offered many advantages in term of, e.g., scaling resources required between CP and UP functions, one issue that operators have with the approach is with the upgradability of CP function(s) once a new feature rolls out. For example, upgrading the RRC / NAS stack may be necessary each time a new feature is defined.

[0178] The arrangements described herein allow for simplification of CP signalling exchange by introducing CP communication between the UE and the core network via UP signalling. The UE signalling is sent to an ANF which main purpose is to be used as a proxy and route the UE request to the appropriate network function in the 6G core network. There is described herein an arrangement that offers an optimisation on the way resources are setup for the UE in order to convey control plane signalling over user plane by proposing that the network triggers establishment of a PDU session on behalf of the UE.

[0179] CP signalling over UP has been supported in the past. Some examples are IMS support and Positioning. To provide IMS support a UE exchanges IMS related CP signalling with IMS core network using an IMS specific protocol via a dedicated UP connection established between the UE and the 5G core network. - For Positioning, a UE exchanges positioning related data with a Location Management Function (LMF) using aspecific positioning protocol via a dedicated UP connection established between the UE and the 5G core network. Both procedures are specific on the use case and further neither have defined any proxy mechanism to route any UE request to the appropriate network function. The ANF described herein could also re-route IMS specific messages or positioning related message to the IMS network or the LMF respectively.

[0180] As described herein, an AMF establishes on behalf of the UE a PDU session for conveying control plane signalling via the user plane.

[0181] There is provided herein a method of a first network function in a 6G core network where: the network function receives a registration request from a device wherein the request includes an indication of a first service or feature; determines based on the first request to allow the device to convey control plane signalling over the user plane; selects a second network function supporting session management functionality; sends a first request to the second network function to establish a PDU session on behalf of the UE; and in response to the PDU session being established sends a response to the device including a combined registration and PDU session establishment. The first network function may comprise an AMF.

[0182] There is further provided a device, which may be a UE. The device is arranged to establish control plane signalling over UP / discovery of ANF Accordingly, there is described herein a method of a device served by a 6G network, the method comprising: receiving from the 6G network assistance information; determining based on assistance information that a first service, control plane signalling over UP needs to be established over an established PDU session; selecting a first network function in the 6G core network to send the request; sends a first request to initiate the first service to the first network function via the established PDU session.

[0183] The assistance information may include an indication to establish control plane signalling over UP.

[0184] The indication to establish control plane signalling over UP may be on per service / feature granularity.

[0185] The assistance information may include PDU session ID of the PDU session.

[0186] The assistance information may include the address of a first network function.

[0187] It should be noted that the method described herein describes a possible implementation, and that the operations and the steps may be rearranged or otherwise modified and that other implementations are possible.

[0188] The description herein is provided to enable a person having ordinary skill in the art to make or use the disclosure. Various modifications to the disclosure will be apparent to a person having ordinary skill in the art, and the generic principles defined herein may be applied to other variations without departing from the scope of the disclosure. Thus, the disclosure is not limited to the examples and designs described herein but is to be accorded the broadest scope consistent with the principles and novel features disclosed herein.

[0189] The following abbreviations are relevant in the field addressed by this document: 3GPP, 3rd generation partnership project; 5G, fifth generation; 5GS, 5G System; 6G, Sixth generation; 6GS, 6G system; AF, application function; ANF, Anchor NF; AMF, access and mobility function; CP, Control Plane; DNS, Domain Name System; NAS, Non- Access Stratum; RAN, Radio Access Node; UE, User Equipment; UDM, Unified Data Management; UP, User Plane; and UPF, User Plane Function.

Claims

CLAIMSWhat is claimed is:

1. A first network function for wireless communication, comprising: at least one memory; and at least one processor coupled with the at least one memory and configured to cause the first network function to: receive a registration request from a device; determine whether the device is authorised to convey control plane signalling over a user plane connection for a service; identify, based on the registration request, a second network function supporting session management functionality; send a session request to the second network function to establish a first Protocol Data Unit (PDU) session on behalf of the device; receive confirmation that the first PDU session is established; and in response to receiving confirmation that the first PDU session is established, send, to the device: an indication that the first PDU session is established; and assistance information defining a means for conveying control plane signalling by the device via the PDU session.

2. The first network function of claim 1, wherein the first service comprises a 6G service, the 6G service comprising at least one of: a service for sensing, a service for receiving configuration information from the network for one or more services, a service for positioning, a service having a particular Quality of Service, QoS.

3. The first network function of claim 1 or 2, wherein the at least one processor is further configured to cause the first network function to check with a third network function whether control plane signalling over the user plane is allowed.

4. The first network function of any of claims 1 to 3, wherein the second network function is identified based on the identity of the first service.

5. A method performed or performable by a first network function, the method comprising: receiving a registration request from a device; determining whether the device is authorised to convey control plane signalling over a user plane connection for a service; identifying, based on the registration request, a second network function supporting session management functionality; sending a session request to the second network function to establish a first Protocol Data Unit (PDU) session on behalf of the device; receiving confirmation that the first PDU session is established; and in response to receiving confirmation that the first PDU session is established, sending, to the device: an indication that the first PDU session is established; and assistance information defining a means for conveying control plane signalling by the device via the PDU session.

6. The method of claim 5, wherein the first service comprises a 6G service, the 6G service comprising at least one of: a service for sensing, a service for receiving configuration information from the network for one or more services, a service for positioning, a service having a particular Quality of Service, QoS.

7. The method of claim 5 or 6, further comprising checking with a third network function whether control plane signalling over the user plane is allowed.

8. The method of any of claims 5 to 7, wherein the second network function is identified based on the identity of the first service.

9. A device for wireless communication, comprising: at least one memory; and at least one processor coupled with the at least one memory and configured to cause the device to: send a registration request to a wireless communication network; receive from the wireless communication network: an indication that a first PDU session is established; and an assistance information defining a means for conveying control plane signalling by the device via the first PDU session; send a service request over the first PDU session to a first network function wherein the service request includes an indication to establish a second PDU session for a service; receive via the first PDU session an indication that the second PDU session is established.

10. The device of claim 9, wherein the at least one processor is further configured to cause the device to: send a registration request to a wireless communication network, the registration requesting including an indication of a control plane over user plane capability; receive the assistance information in response to the registration request; and determine, based on the assistance information, that for the first service, control plane signalling over the user plane needs to be established over an established PDU session.

11. The device of claim 10, wherein the assistance information includes an indication to establish control plane signalling over the user plane.

12. The device of claim 11, wherein the indication to establish control plane signalling over the user plane is determined based on a per service granularity.

13. The device of any of claims 9 to 12, wherein the assistance information includes a PDU session ID of the PDU session.

14. The device of any of claims 9 to 13, wherein the assistance information includes the address of a first network function.

15. The device of any of claims 9 to 14, wherein the at least one processor is further configured to cause the device to select the first network function by sending a DNS query to an address included in the assistance information.

16. A processor for wireless communication, comprising: at least one controller coupled with at least one memory and configured to cause the processor to: send a registration request to a wireless communication network; receive from the wireless communication network: an indication that a first PDU session is established; and an assistance information defining a means for conveying control plane signalling by the device via the first PDU session; send a service request over the first PDU session to a first network function wherein the service request includes an indication to establish a second PDU session for a service; and receive via the first PDU session an indication that the second PDU session is established.

17. The processor of claim 16, wherein the at least one controller is further configured to cause the processor to: sending a registration request to a wireless communication network, the registration requesting including an indication of a control plane over user plane capability; receiving the assistance information in response to the registration request; and determining, based on the assistance information, that for the first service, control plane signalling over the user plane needs to be established over an established PDU session.

18. The processor of claim 16 or 17, wherein the assistance information includes an indication to establish control plane signalling over the user plane.

19. The processor of claim 18, wherein the indication to establish control plane signalling over the user plane is determined based on a per service granularity.

20. The processor of any of claims 16 to 19, wherein the assistance information includes a PDU session ID of the PDU session.

Images