ProSe Secondary Authentication in Relay PDU Session Setup
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing 5G PDU Session ProSe SA procedures face challenges in determining whether a data network accessed by a Remote UE through a Relay UE requires ProSe SA, especially when the UDM of the Remote UE does not hold DNN information, leading to inconsistencies in authentication and authorization processes.
Innovation Solution
The SMF initiates ProSe SA procedures based on local information and subscription data, reconciling IP address allocation and authorization operations, and sends PDU session responses based on the outcome of ProSe SA procedures, ensuring consistent authorization and rejection mechanisms.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If the SMF checks subscription data from UDM to determine whether ProSe SA is required, then the authorization accuracy is improved, but the procedure fails when UDM does not hold DNN information
Solution Approach 1:
The SMF performs preliminary checks using locally stored subscription data and DNN authorization information before relying on UDM. This preliminary action ensures that the ProSe SA determination can proceed even when UDM does not hold DNN information, while still maintaining accurate authorization when data is available.
Solution Approach 2:
The patent introduces an intermediary mechanism where the SMF uses locally cached subscription data and DNN authorization information as a bridge between the Relay UE and UDM. This intermediary layer allows the procedure to continue when UDM is unavailable or lacks DNN information, while still ensuring accurate authorization when data exists.
2Reliability
If the SMF uses local information and subscription data to determine ProSe SA requirement, then the procedure reliability is improved, but the authorization precision may be reduced
Solution Approach 1:
The SMF performs preliminary authorization checks using locally stored data before final authorization decisions. This preliminary action using local information ensures procedure continuity while maintaining authorization precision by validating against locally cached accurate data when available.
Solution Approach 2:
The locally stored subscription data and DNN authorization information act as an intermediary that bridges the gap between reliability needs and precision requirements. This intermediary layer provides a fallback mechanism that maintains both procedure reliability and authorization precision simultaneously.
3Reliability
If the SMF initiates ProSe SA procedure for all Remote UEs, then the security is improved, but the network signaling overhead increases
Solution Approach 1:
The patent applies local quality by making the ProSe SA initiation selective rather than universal. The SMF uses locally stored DNN authorization information to identify which specific Remote UEs require ProSe SA, initiating the procedure only for those cases where local data indicates it is necessary, thereby reducing unnecessary signaling while maintaining security where needed.
Solution Approach 2:
The patent changes the parameter of ProSe SA initiation from a binary all-or-nothing approach to a conditional approach based on local DNN authorization information. This parameter change allows the system to dynamically adjust which UEs undergo ProSe SA based on their specific authorization requirements, optimizing both security and signaling efficiency.
Data Source
AI summary
Methods and devices are disclosed to provide proximity services (ProSe) secondary authentication (SA) for a remote WTRU to communicate with a data network over a 5G communications network via a WTRU-to-Network relay. In one method, a ProSe SA procedure is triggered when an SMF receives a PDU session establishment or modification request from the relay WTRU and determines, based on information in session management context relay WTRU and/or subscription data of the remote WTRU from unified data management (UDM), that a ProSe SA procedure is required for the remote WTRU. The ProSe SA procedure is triggered prior to the completion of PC5 link establishment between the remote WTRU and the WTRU-to-Network Relay, as well as prior to completion of the PDU Session establishment/modification procedure.