Delegated Data Connection via N3IWF for Non-3GPP 5G Access

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Some UEs do not support the 5G NAS protocol over non-3GPP access networks, preventing them from utilizing 5G services over these networks.

Innovation Solution

Establishing a delegated data connection through an interworking function that converts authentication signaling and facilitates communication between the UE and the mobile communication network, allowing non-5G-capable UEs to access 5G services via non-3GPP access networks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If UEs use non-3GPP access networks to connect to 5G core networks, then connectivity flexibility is improved, but protocol compatibility deteriorates because some UEs do not support the 5G NAS protocol

Engineering Contradiction:
Improveconnectivity flexibilityVSAvoidprotocol compatibility
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent introduces a Non-3GPP Interworking Function (N3IWF) as an intermediary between non-3GPP access networks and 5G core networks. The N3IWF translates and adapts signaling protocols, enabling UEs that do not support 5G NAS protocol to communicate with the 5G core network through non-3GPP access networks. This mediator handles protocol conversion and authentication signaling transformation, resolving the compatibility issue while maintaining connectivity flexibility.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If traditional authentication methods are used, then security is improved, but ease of deployment deteriorates due to requirements for USIM-based credentials

Engineering Contradiction:
Improveauthentication securityVSAvoiddeployment complexity
Core Design Contradiction:
ReliabilityVSEase of manufacture

Solution Approach 1:

The patent changes the authentication parameters by supporting multiple authentication methods including EAP-AKA, EAP-TLS, and EAP-SIM instead of requiring only USIM-based credentials. The N3IWF is configured with authentication parameters that can accommodate different credential types, allowing flexible authentication mechanisms while maintaining security. This parameter flexibility enables easier deployment scenarios where USIM cards are not available or practical.

Inventive Principle:
Principle #35Parameter changes

3Ease of operation

If delegated data connections are established for non-registered UEs, then access accessibility is improved, but network management complexity increases

Engineering Contradiction:
Improveaccess accessibilityVSAvoidnetwork management complexity
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The patent segments the network functionality by separating the access function (handled by non-3GPP access network and N3IWF) from the core network registration function (handled by 5G core network). This segmentation allows UEs to establish delegated data connections without full registration, improving accessibility. The N3IWF manages the delegated connection state locally, reducing the burden on core network management while maintaining security and control.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentEP4727185A2Delegated data connection
Publication Date: 2026.04.15 LENOVO (SINGAPORE) PTE LTD
  • EP4727185A2 patent drawingFigure 1
  • EP4727185A2 patent drawingFigure 2A
  • EP4727185A2 patent drawingFigure 2B

AI summary

Apparatuses, methods, and systems are disclosed for supporting delegated data connections. One apparatus 400 includes a processor 405 and a transceiver 425 that receives 905 an access request indicating that a remote unit requires to access a first access network. The processor 405 determines 910 to establish a delegated data connection in a mobile communication network for the remote unit, the delegated data connection connecting the apparatus 400 with an external data network. The processor 950 enables 915 the authentication of the remote unit by converting a first authentication signaling used by the mobile communication network to a second authentication signaling used by the first access network. The processor 405 controls the transceiver 425 to forward 920 data traffic between the remote unit and the external data network over the delegated data connection, wherein the delegated data connection is reserved for use by the remote unit.