NEF Binding Map for Accurate UE Identity Exposure Behind NAT

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing systems face challenges in providing accurate UE identities to applications due to Network Address Translation (NAT) by intervening network devices, hindering the ability of applications to authorize and provide services to User Equipment (UE) devices.

Innovation Solution

Implementing a network exposure function (NEF) that maintains a binding map between UE IP addresses and device identifiers, allowing applications to access this information through notification services, thereby enabling accurate UE identification.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If Network Address Translation (NAT) is used by intervening network devices, then network address management is simplified and IP address conservation is improved, but UE identity accuracy deteriorates and application authorization capability worsens

Engineering Contradiction:

Improvenetwork address management flexibilityVSAvoidUE identity accuracy

Core Design Contradiction:

Adaptability or versatilityVSMeasurement precision

Solution Approach 1:

The patent introduces a binding map as an intermediary data structure that stores the mapping relationship between private IP addresses (after NAT) and public IP addresses (original UE identities). This binding map acts as a mediator that allows applications to retrieve accurate UE identities without disrupting the NAT process, thus resolving the contradiction between maintaining NAT benefits and preserving identity accuracy.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Measurement precision

If a binding map is maintained to store UE IP address and device identifier mappings, then UE identification accuracy is improved, but system complexity and memory requirements increase

Engineering Contradiction:

ImproveUE identity accuracyVSAvoidsystem complexity

Core Design Contradiction:

Measurement precisionVSDevice complexity

Solution Approach 1:

The binding map is populated in advance during network attachment and session establishment phases. When a UE attaches to the network or establishes a session, the mapping between private and public IP addresses is pre-recorded in the binding map. This preliminary action ensures that when applications need UE identities, the information is already available without requiring complex real-time resolution mechanisms.

Inventive Principle:

Principle #10Preliminary action

3Ease of operation

If applications directly access UE identities without NAT, then service authorization is simplified, but network address conservation and flexibility are compromised

Engineering Contradiction:

Improveservice authorization simplicityVSAvoidnetwork address management flexibility

Core Design Contradiction:

Ease of operationVSAdaptability or versatility

Solution Approach 1:

The system implements a feedback mechanism where applications can query the binding map to obtain accurate UE identities based on observed private IP addresses. This feedback loop allows applications to retrieve authentic UE identities on-demand, simplifying service authorization while maintaining the NAT infrastructure for network address management flexibility.

Inventive Principle:

Principle #23Feedback

Data Source

PatentUS12549635B2Systems and methods for exposing user equipment identities to applications

Publication Date: 2026.02.10 VERIZON PATENT & LICENSING INC

AI summary

A system comprises a Network Exposure Function (NEF) and a Session Management Function (SMF). The MF may be configured to: receive, from the NEF, a first request to subscribe to a notification service offered by the SMF; send a create session request to a User Plane Function (UPF); receive a first response from the UPF to the create session request, wherein the first response includes binding information that pertains to an association between a User Equipment device (UE) identifier (ID) and Internet Protocol (IP) addresses; and send, as part of the notification service, a message that includes the binding information to the NEF.