PDU Session Modification for Multi-Network Access Control

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing systems require multiple DNNs and complex management for enterprises to provide different access rights levels to their data networks, leading to inefficiencies and operational complexity.

Innovation Solution

A method and system for modifying PDU sessions to allow secondary authentication, enabling access to multiple data networks or parts of a network using a single PDU session and IP address, with different access control policies through sub-DNNs and firewall rules.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If multiple DNNs are used to provide different access rights levels to enterprise data networks, then access control capability is improved, but device complexity and operational complexity increase

Engineering Contradiction:

Improveaccess control capabilityVSAvoidoperational complexity

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent applies universality by enabling a single PDU session to serve multiple functions - accessing both public internet services and private enterprise data network services through the same session infrastructure. The SMF entity manages multiple DNNs within a single PDU session context, allowing the session to be universally applicable to different network types without requiring separate sessions for each access rights level.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent segments the data network access into different DNNs (Data Network Names) that can be associated with a single PDU session. Each DNN represents a different access rights level or network segment, allowing fine-grained access control through logical segmentation rather than requiring separate physical sessions. The SMF manages these segmented DNNs within the unified session framework.

Inventive Principle:

Principle #1Segmentation

2Manufacturing precision

If multiple PDU sessions are established for different data networks, then access control precision is improved, but loss of time and productivity decrease

Engineering Contradiction:

Improveaccess control precisionVSAvoidsession management time

Core Design Contradiction:

Manufacturing precisionVSLoss of time

Solution Approach 1:

The patent merges multiple DNN configurations into a single PDU session, combining what would traditionally require separate sessions. The SMF entity consolidates the management of multiple data network accesses within one session context, maintaining precise access control through DNN-specific configurations while eliminating the need for multiple session establishment procedures.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The patent implements preliminary action by pre-configuring multiple DNNs and their associated access control policies within the single PDU session during session establishment. This preliminary configuration allows the UE to access different data networks with appropriate access rights already in place, without requiring additional authentication or session setup actions when switching between networks.

Inventive Principle:

Principle #10Preliminary action

3Reliability

If separate PDU sessions are used for public and private network access, then network security is improved, but device complexity increases

Engineering Contradiction:

Improvenetwork securityVSAvoidsession management complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies local quality by assigning different access control policies and security parameters to different DNNs within the same PDU session. Each DNN can have its own security characteristics, authentication requirements, and network policies, allowing security to be tailored locally to each data network type while maintaining a unified session management approach.

Inventive Principle:

Principle #3Local quality

Data Source

PatentUS20260095960A1PDU session modification for a subscriber entity

Publication Date: 2026.04.02 TELEFONAKTIEBOLAGET LM ERICSSON (PUBL)

AI summary

There is provided techniques for using a PDU session to access application services. A method is performed by a subscriber entity. The method includes accessing a primary application service of a primary data network using a PDU session by first requesting the PDU session with the primary data network to be established. The method includes providing a request to an SMF entity for the PDU session to be modified for the subscriber entity to use the PDU session to access a secondary application service with a different access control policy than the primary application service. The method includes, in response thereto, performing a secondary authentication with an EAP server for the already established PDU session for the subscriber entity to access the secondary application service of the secondary data network.