NPN Credential Provisioning Protocol Indication for UE Interoperability
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing 3GPP specifications for 5G non-public networks (NPNs) lack standardized credential provisioning protocols, leading to interoperability issues among devices and networks supporting different techniques, hindering the deployment and access of user equipment (UE) to NPNs.
Innovation Solution
Exemplary methods and procedures for UE, onboarding network (ON), default credential server (DCS), and provisioning server (PS) to determine and exchange credential provisioning protocols (CPPs) using integrity-protected communications, ensuring compatibility and secure access to NPNs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple different credential provisioning techniques are supported to provide flexibility, then adaptability is improved, but interoperability deteriorates due to lack of standardized protocol
Solution Approach 1:
The patent implements a universal credential provisioning mechanism where the AMF can handle multiple credential provisioning protocols (CMP, ACME, EST, SCEP, GSMA eSIM, OMA LwM2M) through a single standardized interface. The network side indication field enables the system to select and execute different provisioning techniques based on UE capability while maintaining a unified architecture, thus achieving multi-functionality without sacrificing interoperability.
2Ease of manufacture
If credential provisioning protocol is kept out of 3GPP specifications to maintain vendor flexibility, then ease of manufacture is improved, but interoperability deteriorates
Solution Approach 1:
The patent segments the credential provisioning system into two distinct layers: (1) a standardized 3GPP control layer that defines the indication mechanism, message structure, and selection logic in the AMF, and (2) vendor-specific implementation layers that support different credential provisioning protocols. This segmentation allows vendor flexibility in protocol implementation while ensuring interoperability through the standardized control layer.
3Reliability
If standardized credential provisioning protocol is implemented to ensure interoperability, then reliability is improved, but adaptability deteriorates due to restricted protocol selection
Solution Approach 1:
The patent implements a dynamic credential provisioning mechanism where the selected protocol is not fixed but adapts based on real-time conditions. The AMF receives network side indications about supported protocols, determines the appropriate protocol based on UE capability and network policy, and dynamically selects the provisioning method during the onboarding process. This dynamic selection maintains interoperability through standardized control while preserving adaptability through flexible protocol choice.
Data Source
AI summary
A method for a user equipment (UE) to obtain security credentials for accessing a non-public network (NPN) is provided. The method comprises sending, to an onboarding network (ON), a registration request that includes an identifier of the UE, and obtaining an indication of a credential provisioning protocol (CPP) used by a provisioning server (PS) for provisioning security credentials to access the NPN. The method further comprises obtaining, from the PS via the ON using the indicated CPP, security credentials for the UE to access the NPN.