5G Network Slice Access Control for Authentication Failure Feedback

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In 5G communications, terminal devices frequently attempt to access network slices that fail authentication, leading to signaling waste and network congestion due to failed PDU session establishment.

Innovation Solution

The access and mobility management function network element receives information about authentication failures and sends rejection messages to the terminal device, deleting specific network slice selection assistance information or requesting deregistration to prevent further access attempts to failed network slices.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the terminal device continues to attempt PDU session establishment in a network slice whose authentication fails, then the terminal device maintains access persistence, but network congestion and signaling waste increase

Engineering Contradiction:
Improveaccess persistenceVSAvoidnetwork efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The network side (AMF) provides feedback to the terminal device by sending rejection messages when authentication fails. This feedback mechanism informs the terminal device to stop attempting access to the failed network slice, thereby reducing unnecessary signaling and network congestion while maintaining access persistence for valid slices.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The system takes preliminary anti-action by proactively rejecting access attempts to network slices with authentication failures before they can cause further signaling waste and network congestion. The AMF identifies failed slices and sends rejection messages to prevent continued unsuccessful access attempts.

Inventive Principle:
Principle #9Preliminary anti-action

2Adaptability or versatility

If the terminal device frequently accesses the network slice whose authentication fails, then the terminal device ensures comprehensive coverage, but signaling overhead and network congestion increase

Engineering Contradiction:
Improveslice coverageVSAvoidsignaling overhead
Core Design Contradiction:
Adaptability or versatilityVSLoss of information

Solution Approach 1:

The AMF sends feedback messages to the terminal device indicating which network slices have authentication failures. This allows the terminal device to adapt its access behavior by avoiding failed slices while maintaining coverage for successful slices, thereby reducing signaling overhead without compromising comprehensive coverage.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The network slice selection assistance information (NSSAI) is segmented into allowed and disallowed slices. The terminal device receives updated NSSAI information that excludes failed slices, enabling it to maintain comprehensive coverage for valid slices while avoiding signaling overhead associated with failed slice attempts.

Inventive Principle:
Principle #1Segmentation

3Ease of operation

If the terminal device attempts PDU session establishment in failed network slices, then the terminal device maintains access availability, but network resource utilization deteriorates

Engineering Contradiction:
Improveaccess availabilityVSAvoidnetwork resource utilization
Core Design Contradiction:
Ease of operationVSLoss of energy

Solution Approach 1:

The system performs preliminary anti-action by identifying and rejecting access attempts to network slices with authentication failures before they can consume network resources. The AMF sends rejection messages to the terminal device, preventing further resource-wasting attempts while maintaining access availability for successful slices.

Inventive Principle:
Principle #9Preliminary anti-action

Solution Approach 2:

The network provides feedback to the terminal device about authentication failures, enabling the terminal to adjust its access behavior. This feedback mechanism ensures access availability for valid slices while preventing network resource deterioration caused by repeated failed attempts.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS12520148B2Network slice access control method and apparatus
Publication Date: 2026.01.06 HUAWEI TECH CO LTD
  • US12520148B2 patent drawing
  • US12520148B2 patent drawing
  • US12520148B2 patent drawing

AI summary

This application provides a network slice access control method, including: determining, by an access and mobility management function network element, first allowed network slice selection assistance information of a terminal device in a registration process to register the terminal device to a network; learning, by the access and mobility management function network element, of an authentication failure of a first network slice corresponding to first single network slice selection assistance information from the first allowed network slice selection assistance information.