Timer-Based NSSAA for Network Slice Free-Trial Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing Network Slice-Specific Authentication and Authorization (NSSAA) systems do not account for free trial periods, failing to manage access control during trial periods for network slices, and lack a defined mechanism for initiating NSSAA after such periods expire.
Innovation Solution
Implement a method and apparatus to perform NSSAA after a specified time period (T), allowing a free trial period before requiring authentication and authorization for network slices, with configuration options in AMF, UDM, or AF, and enabling timer adjustments based on subscription changes or network policies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If NSSAA is performed immediately upon network slice selection, then security control is strengthened, but service availability during trial periods is reduced
Solution Approach 1:
The system performs preliminary authentication and authorization for network slices before the free trial period expires by starting a timer when the UE is allowed to use the network slice. The AMF initiates NSSAA procedures in advance based on stored timer values, ensuring security checks are completed before the trial period ends while maintaining service availability during the trial.
2Productivity
If NSSAA is delayed until after free trial period, then service availability during trials is improved, but unauthorized access post-trial is risked
Solution Approach 1:
The system implements a feedback mechanism where the AMF stores timer values for each network slice in the subscription data. The timer is started when the UE is allowed to use the network slice, and the AMF continuously monitors the timer status. When the timer expires or reaches a threshold, the AMF automatically initiates NSSAA procedures to re-authenticate the UE, ensuring timely security verification while maintaining service continuity.
3Adaptability or versatility
If timer configuration is centralized in network entities, then network control is enhanced, but system complexity increases
Solution Approach 1:
The AMF is designed with multi-functionality to handle both regular mobility management and free trial period management. The same AMF that performs standard NSSAA procedures also manages timer configurations for free trial periods, stores timer values in subscription data, and initiates timely authentication. This universal approach avoids creating separate specialized systems, thereby reducing overall system complexity while maintaining enhanced network control.
Data Source
Figure 1
Figure 2~3
AI summary
The present disclosure relates to a communication method and system for converging a 5th-Generation (5G) communication system for supporting higher data rates beyond a 4th-Generation (4G) system with a technology for Internet of Things (IoT). Disclosed is a method of performing Network Slice-Specific Authentication and Authorization, NSSAA, in a telecommunication network, for at least one network slice, such that a given user is able to access the at least one network slice, S-NSSAI, comprising the step of performing NSSAA after a specified time period, T, has elapsed.