Dynamic Access Network Trust Signaling for 5G UE Sessions

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing mechanisms for determining the trust status of non-3GPP access networks in 5G systems are not dynamic enough to accommodate a plethora of different access networks, leading to inefficiencies in connecting user equipment (UE) to the 5G core network.

Innovation Solution

A method and system for dynamically providing trust information to communication devices, involving network equipment that determines and indicates the trust status of access networks, using protected lists and shared keys to ensure secure and timely updates to UE.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If existing mechanisms for determining trust status of non-3GPP access networks are used, then the system maintains simplicity in trust management, but the system cannot dynamically accommodate a plethora of different access networks

Engineering Contradiction:
Improveability to accommodate different access networksVSAvoidcomplexity of trust information management
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent segments trust information into separate lists for different access networks (3GPP and non-3GPP), with each list containing specific trust status indicators for individual networks. This allows the system to manage multiple access networks independently without increasing overall system complexity, as each network's trust information is handled separately through standardized procedures.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent implements dynamic trust information management by allowing the network to update trust status of access networks at any time without requiring system reconfiguration. The UE receives updated trust information through standardized signaling procedures, enabling the system to adapt to changing network conditions while maintaining manageable complexity through automated update mechanisms.

Inventive Principle:
Principle #15Dynamics

2Loss of time

If trust information is provided statically, then the system maintains simplicity in information management, but the system cannot provide timely updates to UE about access network trust status

Engineering Contradiction:
Improvetime delay in trust information updatesVSAvoidcomplexity of dynamic information provision
Core Design Contradiction:
Loss of timeVSDevice complexity

Solution Approach 1:

The patent establishes a feedback mechanism where the network continuously monitors access network trust status and automatically provides updates to UEs when changes occur. The network equipment determines trust information and signals it to UEs through standardized procedures, creating a closed-loop system that reduces time delay while managing complexity through automated feedback rather than manual intervention.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The patent implements preliminary action by pre-establishing the trust information management framework and authorization mechanisms before UEs need to access networks. The network equipment is pre-configured to determine and provide trust information through standardized procedures, so when UEs need trust status updates, the infrastructure is already in place to provide timely responses without ad-hoc complexity.

Inventive Principle:
Principle #10Preliminary action

3Productivity

If dynamic trust information provision is implemented, then the system achieves timely updates to UE, but the system increases complexity in information management

Engineering Contradiction:
Improveefficiency of UE connection to 5G core networkVSAvoidcomplexity of trust information determination and signaling
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The patent applies universality by using standardized signaling procedures and message formats that can handle trust information for multiple different access networks through a single unified mechanism. The same standardized procedures used for other network management functions are extended to trust information provision, allowing the system to achieve high productivity for UE connections while avoiding the complexity of separate specialized mechanisms for each access network type.

Inventive Principle:
Principle #6Universality (Multi-functionality)

4Reliability

If trust status is not clearly indicated to UE, then the system maintains simplicity in signaling, but the UE cannot determine appropriate security procedures to use

Engineering Contradiction:
Improvesecurity procedure selection accuracyVSAvoidcomplexity of trust information indication
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies local quality by providing specific trust status indicators for each individual access network rather than a single general trust status. The UE receives targeted trust information for the specific access network it is attempting to use, enabling accurate determination of security procedures for that particular network while keeping the indication mechanism simple through standardized message formats that convey only the necessary local trust information.

Inventive Principle:
Principle #3Local quality

Data Source

PatentEP4059254B1Methods for trust information in communication network and related communication equipment and communication device
Publication Date: 2026.04.15 TELEFONAKTIEBOLAGET LM ERICSSON (PUBL)
  • EP4059254B1 patent drawingFigure 1~2
  • EP4059254B1 patent drawingFigure 3
  • EP4059254B1 patent drawingFigure 4

AI summary

A method performed by a network equipment (900) of a communication network to dynamically provide trust information to a communication device (800) registered or being registered to the communication network is provided. The method includes determining (1001) a trust information for each of one or more access networks. The trust information indicates whether each of the one or more access networks is trusted. The method further includes indicating (1003) to the communication device whether the one or more access networks is trusted for a current session or a later session. A method performed by a communication device registered or being registered with a communication network to dynamically receive trust information is also provided. The method includes receiving a message including a protected trust information list from a network equipment. The method further includes verifying the protection of the message. The method further includes storing the protected trust information list.