SEPP PLMN Negotiation With Segmented Identifier Fields
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems, particularly in 5G networks, face challenges in efficiently managing security edge protection proxies (SEPPs) that support multiple public land mobile networks (PLMNs) identified by multiple PLMN IDs, as current protocols like 3GPP TS 29.573 V17.1.0 do not adequately address scenarios where each PLMN is identified by multiple IDs, leading to inefficient security capability negotiations.
Innovation Solution
The proposed solution involves an apparatus and method for initiating and responding SEPPs to exchange information about their supported PLMNs using specific information elements (SecNegotiateReqData and SecNegotiateRespData) to establish separate signaling connections for each unique PLMN combination, enabling efficient security policy exchange and service request forwarding.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If current protocols (3GPP TS 29.573 V17.1.0) are used for security capability negotiations, then the negotiation process can be completed, but the process becomes inefficient when SEPPs support multiple PLMNs with multiple PLMN IDs
Solution Approach 1:
The patent segments the security capability negotiation process by introducing separate information elements for different PLMN identification methods. The SecNegotiateReqData and SecNegotiateRespData information elements are divided into distinct fields: one for PLMN ID lists (plmnldList) and another for target PLMN identification (targetPlmnId). This segmentation allows the system to handle multiple PLMN identification scenarios efficiently without conflating different identification approaches, thereby improving negotiation efficiency while managing complexity.
2Reliability
If separate signaling connections are established for each unique PLMN combination, then security policy management is improved, but the number of connections and management complexity increases
Solution Approach 1:
The patent introduces an intermediary mechanism in the form of standardized information elements (SecNegotiateReqData and SecNegotiateRespData) that mediate the establishment of signaling connections between SEPPs. These information elements contain structured fields (plmnldList and targetPlmnId) that enable the network to systematically identify and manage connections for different PLMN combinations. This intermediary structure provides a systematic approach to connection management, improving security policy reliability while containing management complexity through standardization.
Data Source
AI summary
The disclosure relates to a first apparatus comprising at least one processor and at least one memory including computer code for one or more programs, the at least one memory and the computer code configured, with the at least one processor, to cause the apparatus at least to: send (500), to a second apparatus, a request comprising information indicating a list of public land mobile network identifiers identifying a first public land mobile network supported by the first apparatus, and information to derive a second public land mobile network supported by the second apparatus; and receive (502), from the second apparatus, a response comprising information indicating a list of public land mobile network identifiers identifying the second public land mobile network supported by the second apparatus.