Control Plane Remote Provisioning for 5G UE Onboarding

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current 5G mobile communication systems face challenges in efficiently managing user equipment (UE) onboarding for standard non-public network (SNPN) credentials and user subscription data, particularly in providing secure and efficient control plane-based remote provisioning.

Innovation Solution

A method and device for network registration that performs control plane-based remote provisioning, enabling UE to receive SNPN credentials and user subscription data during onboarding by utilizing a series of network functions such as the Access and Mobility Management Function (AMF), Authentication Server Function (AUSF), and Provisioning Server (PVS), which communicate to authenticate and authorize the UE and provide necessary credentials.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If control plane-based remote provisioning is implemented for UE onboarding, then security and efficiency of credential distribution is improved, but device complexity and network configuration complexity increases

Engineering Contradiction:

Improvesecurity of credential distributionVSAvoidnetwork configuration complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the onboarding process into distinct phases: initial network access, authentication, credential provisioning, and service activation. By dividing the complex remote provisioning process into manageable segments handled by different network functions (AMF, AUSF, PVS), the system achieves high security while maintaining operational clarity and reducing overall complexity.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent introduces intermediary network functions (AMF as access and mobility management function, AUSF as authentication server function, and PVS as provisioning server) that mediate between the UE and the credential distribution system. These intermediaries handle security-sensitive operations, allowing the system to maintain high security standards while simplifying the interface between devices and the provisioning infrastructure.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If multiple network functions (AMF, AUSF, PVS) are involved in the onboarding process, then authentication and authorization security is improved, but processing time and network overhead increases

Engineering Contradiction:

Improveauthentication securityVSAvoidonboarding processing time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent merges the authentication and credential provisioning operations into a unified control plane procedure. By combining these functions and allowing them to operate in an integrated manner with parallel processing capabilities, the system maintains strong authentication security while reducing the cumulative time impact of multiple separate operations.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The patent performs preliminary authentication and authorization checks before initiating the full credential provisioning process. The AMF and AUSF conduct initial security verification in advance, which allows the subsequent PVS credential distribution to proceed more efficiently, thereby reducing total onboarding time while maintaining security standards.

Inventive Principle:

Principle #10Preliminary action

3Reliability

If control plane-based provisioning is used instead of user plane, then security of NAS messaging is improved, but flexibility in provisioning methods is reduced

Engineering Contradiction:

Improvesecurity of credential messagingVSAvoidprovisioning method flexibility

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent implements a universal control plane-based provisioning framework that can handle multiple credential types (subscription credentials, service credentials, device credentials) and multiple provisioning scenarios through a single standardized interface. This multi-functional approach maintains the security advantages of control plane NAS messaging while providing the flexibility to support diverse provisioning requirements.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS20230199484A1Method and device for control plane-based registration and remote provisioning in communication system

Publication Date: 2023.06.22 SAMSUNG ELECTRONICS CO LTD

AI summary

The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. An operation method of an access and mobility management function (AMF) in a wireless communication network according to the disclosure includes: receiving, from a base station, a registration request message including a parameter indicating that a terminal supports control plane-based remote provisioning; determining the control plane-based remote provisioning, based on the parameter; and determining an authentication server function (AUSF) for onboarding of the terminal, based on the control plane-based remote provisioning.