Roaming Terminal Authentication With Dual-Network AKMA Key Registration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing wireless communication systems face challenges in efficiently managing authentication and key management for terminals in roaming situations, particularly in handling AKMA key registration procedures across different networks.
Innovation Solution
The method involves an authentication server function (AUSF) determining terminal roaming status, and an access and mobility management function (AMF) registering AKMA keys in both the home PLMN (HPLMN) and visited PLMN (VPLMN) AAnF, utilizing messages like SUCI, GUTI, SUPI, and SN-name to facilitate AKMA anchor key registration.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If AKMA key registration is performed in both HPLMN and VPLMN AAnF for roaming terminals, then authentication reliability and security are improved, but device complexity and signaling overhead increase
Solution Approach 1:
The patent segments the authentication system into multiple AAnF instances distributed across different PLMNs (HPLMN and VPLMN). Each AAnF handles authentication for terminals in its respective network, allowing roaming terminals to be authenticated by both home and visited network AAnFs simultaneously, thereby improving authentication reliability without requiring a single complex centralized system
Solution Approach 2:
The AMF acts as an intermediary that coordinates between the terminal, HPLMN AAnF, and VPLMN AAnF during the AKMA key registration process. It manages the signaling flow and ensures proper key distribution across multiple networks, reducing the complexity burden on individual network elements while maintaining robust authentication
2Reliability
If AKMA key registration procedure is implemented for roaming terminals, then security and reliability are enhanced, but signaling overhead and processing time increase
Solution Approach 1:
The patent performs AKMA key registration in advance during the initial authentication phase, before the terminal actually needs to access services. By pre-registering keys in both HPLMN and VPLMN AAnFs, the system avoids time-consuming authentication procedures during service access, thereby enhancing security while minimizing processing time loss
Solution Approach 2:
The patent combines the AKMA key registration procedure with the existing primary authentication process. By merging these procedures, the system enhances security through dual-network key registration without requiring separate additional signaling exchanges, thus reducing the overall time overhead compared to performing them as separate steps
Data Source
AI summary
The present disclosure relates to a method for operation an AMF in a wireless communication system, and the method may include receiving a message based on primary authentication from a terminal, wherein the message includes any one of an SUCI or a 5G-GUTI, transmitting an authentication request message including the SUCI or an SUPI and a serving network name to an AUSF, and receiving an authentication response message from the AUSF. When the terminal is a roaming terminal and AKMA is supported, the authentication response message may include an AKMA anchor key and an A-KID indicating the AKMA anchor key, and the AMF may perform a procedure of registering the AKMA anchor key in an AAnF based on the SUPI, the AKMA anchor key and the A-KID.