Core Network Slice Authentication Using Permission Lists

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

The increase in the number of network slices accessed by a UE leads to increased time and processing load for secondary authentication during registration, affecting communication efficiency.

Innovation Solution

A core network device performs first and second authentication processing to determine if a communication terminal is permitted to be registered and use specific network slices, utilizing permission list information to reduce the number of authentication checks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If secondary authentication is performed for each network slice during registration processing, then access control to network slices is ensured, but time and processing load increase as the number of network slices increases

Engineering Contradiction:

Improveaccess control to network slicesVSAvoidtime for secondary authentication

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent applies preliminary action by performing secondary authentication for network slices during the registration processing phase, before the UE actually accesses those slices. The AMF determines which network slices require secondary authentication and performs this authentication in advance as part of the registration流程, so that when the UE later accesses permitted network slices, the authentication has already been completed, avoiding repeated authentication delays

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent extracts the secondary authentication process from the general access流程 and handles it specifically during registration processing. By separating and extracting the authentication determination and execution for specific network slices, the system can identify which slices require authentication and process them efficiently without affecting other access operations

Inventive Principle:

Principle #2Taking out (Extraction)

2Reliability

If secondary authentication is performed for each network slice during registration processing, then access control to network slices is ensured, but processing load increases as the number of network slices increases

Engineering Contradiction:

Improveaccess control to network slicesVSAvoidprocessing load for authentication

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The patent performs secondary authentication determination and execution during the registration processing phase, which is a preliminary stage before actual network slice access. By consolidating the authentication determination for multiple network slices into this single registration流程, the system avoids the need to perform separate authentication operations later when the UE accesses each slice, thereby reducing overall processing load

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The AMF performs multiple functions during registration processing: it determines which network slices the UE is permitted to access, determines which of those slices require secondary authentication, and executes the secondary authentication for those slices. This multi-functionality consolidates what would otherwise be separate processing operations into a single efficient流程

Inventive Principle:

Principle #6Universality (Multi-functionality)

3Adaptability or versatility

If authentication information for multiple network slices is stored in subscriber information, then comprehensive access control is enabled, but time required until UE performs communication increases

Engineering Contradiction:

Improveaccess control for multiple network slicesVSAvoidtime until communication starts

Core Design Contradiction:

Adaptability or versatilityVSLoss of time

Solution Approach 1:

The patent uses the registration processing as a preliminary action to pre-determine and pre-authenticate for multiple network slices. The AMF retrieves authentication information for multiple slices from subscriber information, determines which slices require authentication, and performs the authentication in advance during registration, so that the UE can immediately start communication without delay

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS20250338118A1Core network device, communication terminal, communication system, authentication method, and communication method

Publication Date: 2025.10.30 NEC CORP

AI summary

An object is to provide a core network device being able to efficiently perform secondary authentication to be performed for each network slice. A core network device (10) according to the present disclosure includes an authentication unit (11) configured to perform, during registration processing of registering a communication terminal in a core network, first authentication processing of determining whether the communication terminal is a communication terminal permitted to be registered in the core network, a communication unit (13) configured to receive permission list information indicating at least one network slice usable by the communication terminal in a serving network, and an authentication unit (12) configured to perform, during registration processing of registering the communication terminal in the core network, second authentication processing of determining whether the communication terminal is a communication terminal permitted to use a network slice included in the permission list information.