AKMA Authentication Proxy for Batched 5G Application Key Requests
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing AKMA authentication procedures in 5G networks are inefficient as each Application Function (AF) separately executes key request procedures with the AKMA Anchor Function (AAnF), leading to a burden on network resources.
Innovation Solution
An AKMA authentication proxy is introduced to interact with the AAnF on behalf of multiple AFs, collectively deriving and managing AKMA application keys, reducing the need for individual key requests by each AF.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If each Application Function (AF) separately executes key request procedures with the AAnF, then individual key management is achieved, but network resource burden increases
Solution Approach 1:
The patent introduces an AKMA authentication proxy as an intermediary component that sits between the Application Functions and the AAnF. The proxy collects key requests from multiple AFs, aggregates them into a single batched request, and submits it to the AAnF. This mediator approach maintains individual key management capabilities while significantly reducing network resource burden by eliminating redundant communication overhead.
Solution Approach 2:
The patent merges multiple individual key requests from different Application Functions into a single batched key request. Instead of each AF separately communicating with the AAnF, the proxy combines their requests and submits them together. This merging strategy reduces the number of network transactions, lowers signaling overhead, and improves overall network resource efficiency while still delivering individualized keys to each AF.
2Reliability
If multiple AFs request keys individually from AAnF, then each AF gets its key, but authentication procedure efficiency decreases
Solution Approach 1:
The patent implements preliminary action by having the AKMA authentication proxy collect and aggregate key requests from multiple Application Functions before submitting them to the AAnF. This pre-aggregation step allows the system to prepare a consolidated request that includes all necessary key derivation information, thereby improving authentication efficiency without compromising the accuracy of individual key distribution. The proxy performs this preliminary consolidation action before the actual key generation process.
3Adaptability or versatility
If each AF performs separate key request procedures, then individual authentication is maintained, but network load increases
Solution Approach 1:
The patent merges multiple separate key request procedures into a single batched communication transaction. The AKMA authentication proxy aggregates the authentication requests from multiple AFs and combines them into one consolidated message exchange with the AAnF. This merging approach maintains the adaptability and versatility of individual authentication capabilities for each AF while dramatically reducing the quantity of network signaling volume, as one batched request replaces multiple individual requests.
Data Source
AI summary
Systems, methods, and software of performing an Authentication and Key Management for Applications (AKMA) authentication service. An AKMA authentication proxy resides between User Equipment (UE) and a plurality of Application Functions (AFs). The AKMA authentication proxy receive an application session establishment request message from the UE requesting an application session with a first application function, sends a key request message toward an AKMA anchor function (AAnF) requesting AKMA application keys for a plurality of application functions, receives a key response message sent from the AAnF that includes the AKMA application keys, identifies a first AKMA application key for the first application function from the AKMA application keys derived by the AAnF, and forwards the application session establishment request message to the first application function with the first AKMA application key.