PINE Access Authentication via PEGC-SMF Session Control

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

The existing 5G system lacks mechanisms for authenticating and authorizing personal IoT networks elements (PINEs), leading to a risk of network resource abuse by malicious, unauthenticated devices.

Innovation Solution

A method and apparatus for access authentication involving a PEGC receiving an access request from a PINE, sending a PDU session modification request to an SMF, and triggering identity authentication, along with the PINE sending an access request to a PEGC, to establish identity and authorization.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If PINE connects to 5GC via PEGC without authentication mechanism, then network access is enabled, but network resources may be abused by malicious devices

Engineering Contradiction:

Improvenetwork accessVSAvoidnetwork security

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The patent implements authentication and authorization procedures before allowing PINE to access network resources. The SMF triggers identity authentication of the PINE according to the PDU session modification request, and only after successful authentication are network resources allocated. This preliminary security check prevents malicious devices from abusing network resources while enabling legitimate access.

Inventive Principle:

Principle #10Preliminary action

2Reliability

If identity authentication mechanism is added for PINE, then network security is improved, but system complexity increases

Engineering Contradiction:

Improvenetwork securityVSAvoidauthentication system

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces the SMF as an intermediary that coordinates the authentication process between the PEGC and the authentication server. The SMF receives the PDU session modification request from the PEGC, triggers the identity authentication, and based on the authentication result, allocates or denies network resources. This intermediary approach distributes the complexity across multiple network functions rather than concentrating it in one device.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Reliability

If PDU session modification request is sent for authentication, then authorization is ensured, but access time is extended

Engineering Contradiction:

ImproveauthorizationVSAvoidaccess time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent integrates the authentication process into the existing PDU session modification workflow. The SMF triggers identity authentication according to the PDU session modification request, and the authentication result directly determines the session setup. This continuous process avoids separate authentication steps, ensuring authorization while minimizing additional access time.

Inventive Principle:

Principle #20Continuity of useful action

Data Source

PatentUS20260067685A1Access authentication method and apparatus for personal IoT networks element (PINE)

Publication Date: 2026.03.05 BEIJING XIAOMI MOBILE SOFTWARE CO LTD

AI summary

A method for access authentication for a PINE, performed by a PEGC, includes: receiving an access request sent by the PINE, where the access request comprises identity information of the PINE; and sending a protocol data unit (PDU) session modification request to a session management function (SMF).