AKMA Routing Indicator Retrieval for Reliable A-KID Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In 5G networks, scenarios arise where network functions needing to generate A-KID during UE authentication do not have the UE's Routing Indicator, leading to undesirable failure of AKMA procedures due to the absence of necessary routing information.
Innovation Solution
Methods and systems are introduced to facilitate the generation of security keys by determining and utilizing the Routing Indicator (RID) in the communication network, involving the AUSF, UDM, and AAnF to derive and manage security keys like A-KID and KAF, ensuring complete authentication and key management for applications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the network function uses the conventional authentication method without routing indicator retrieval, then the authentication process is simpler and faster, but the AKMA procedure fails due to missing routing information
Solution Approach 1:
The patent applies preliminary action by retrieving the routing indicator from the UDM before the AKMA procedure begins. The AUSF proactively obtains the routing indicator during the authentication process, ensuring that when the A-KID needs to be generated, the routing information is already available. This prevents AKMA procedure failure while maintaining a relatively straightforward authentication flow.
2Reliability
If the routing indicator is retrieved from UDM during authentication, then the AKMA procedure can complete successfully, but the authentication process takes longer and involves additional steps
Solution Approach 1:
The routing indicator is retrieved during the authentication process before AKMA key generation is needed. By performing this action in advance, the system ensures that when the A-KID generation step occurs, the routing information is already ready, eliminating delays that would occur if the routing indicator were requested after the authentication failure point.
3Reliability
If the network function stores and manages routing indicators for all UEs, then AKMA procedures can always succeed, but the network complexity and data management burden increase
Solution Approach 1:
The patent extracts the routing indicator retrieval operation from the AKMA key generation process and integrates it into the existing authentication flow between AUSF and UDM. This separation allows the routing indicator to be obtained as part of standard authentication without requiring separate complex routing setup procedures, thereby reducing overall network function complexity while ensuring AKMA success.
Solution Approach 2:
The authentication process between AUSF and UDM is designed to serve multiple functions: it authenticates the UE, retrieves the routing indicator for AKMA, and establishes the security context. By making the authentication process multi-functional, the system avoids adding separate complex routing setup mechanisms, thereby achieving reliable AKMA procedures without proportionally increasing network complexity.
Data Source
AI summary
A method for an authentication server function, AUSF, of a communication network is provided. The method comprises sending a second authentication request comprising a first identifier associated with a user equipment, UE, or a second identifier associated with the UE, receiving a response to the second authentication request, and when the response comprises an 5 authentication and key management for applications, AKMA, indicator: determining a first security key identifier based on a first field comprised in the response.