Home Network Reauthentication Control for Obsolete SUPI Status
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication networks lack a mechanism for the home network to initiate primary authentication or reauthentication procedures, leading to potential failures in steering of roaming, user equipment parameter updates, and authentication and key agreement processes when the last valid authentication is considered obsolete.
Innovation Solution
The home network is enabled to initiate primary reauthentication procedures through the unified data management (UDM) and authentication server function (AUSF) nodes, allowing them to check the authentication status of communication devices and trigger necessary reauthentication processes when required, ensuring successful completion or postponement of related procedures.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the home network uses the existing authentication mechanism where only the AMF can initiate reauthentication, then the AMF can manage authentication procedures, but the home network cannot initiate procedures when authentication status is obsolete
Solution Approach 1:
The patent inverts the traditional authentication initiation direction by enabling the home network (UDM) to trigger reauthentication procedures remotely, rather than only allowing the AMF to initiate them. This is achieved through the Nudm_UEAuthentication_Reauthentication_Request message that allows the UDM to send reauthentication triggers to the AUSF, which then forwards them to the AMF, enabling home network-controlled authentication initiation.
2Reliability
If the home network initiates primary reauthentication, then authentication status can be updated for network procedures, but the existing error code mechanism does not support home network initiation
Solution Approach 1:
The patent implements preliminary action by having the UDM check authentication status before initiating network procedures. The UDM proactively determines whether authentication is obsolete and triggers reauthentication in advance, preventing potential authentication failures in subsequent procedures. This is embodied in the UDM's authentication status verification and conditional reauthentication triggering mechanism.
Solution Approach 2:
The patent implements feedback through the reauthentication confirmation message flow. The AUSF sends Nudm_UEAuthentication_Reauthentication_Response messages to the UDM containing reauthentication results, enabling the UDM to adjust subsequent network procedures based on authentication outcomes. This feedback loop allows the home network to make informed decisions about procedure continuation, abortion, or postponement.
3Adaptability or versatility
If the AMF triggers primary reauthentication upon receiving REAUTHENTICATION_REQUIRED error, then authentication can be refreshed, but the home network cannot control whether to continue, abort, or postpone subsequent procedures
Solution Approach 1:
The patent implements dynamics by enabling flexible, conditional control of network procedures based on reauthentication outcomes. The UDM can dynamically decide to continue, abort, or postpone procedures such as steering of roaming updates, user equipment parameter updates, and authentication and key agreement for applications based on authentication status and reauthentication results, providing adaptive procedure management.
Data Source
AI summary
Initiating primary reauthentication of a communication device by a home network (UDM or AUSF) is provided. A trigger to initiate a primary reauthentication request of a communication device is detected. An authentication status of the subscription permanent identifier (SUPI) of the communication device is checked. Responsive to the authentication status of the SUPI being obsolete or null, a reauthentication message is transmitted towards an access and mobility management function (AMF) node. A reauthentication confirmation message is received. A determination is made as to whether to continue, abort, or postpone any steering of roaming (SoR) updates, any user equipment parameter updates (UPU updates) or any authentication and key agreement for applications (AKMA) procedures based on the reauthentication confirmation message.


