Network Slice Authentication for Multi-Access Service Continuity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing 4G/5G systems lack efficient mechanisms for network slicing and authentication/authorization, particularly in managing multiple access types and ensuring seamless service continuity across different network slices.
Innovation Solution
Implementing a unified authentication framework and network slicing mechanism that supports both 3GPP and non-3GPP access types, with enhanced features for registration and connection management, enabling simultaneous service across multiple network slices and reducing dependencies between access and core networks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If a unified authentication framework is implemented to support both 3GPP and non-3GPP access types, then authentication/authorization efficiency is improved, but system complexity increases
Solution Approach 1:
The patent implements a unified authentication framework where the authentication server performs multiple functions by supporting both 3GPP and non-3GPP access types through a single system architecture. This multi-functional approach eliminates the need for separate authentication mechanisms for different access types, thereby improving authentication/authorization efficiency while managing system complexity through consolidation.
2Reliability
If network slicing capabilities are enhanced to provide seamless service continuity across diverse access networks, then service reliability is improved, but device complexity increases
Solution Approach 1:
The patent segments the network into distinct network slices (3GPP and non-3GPP) while maintaining a unified authentication framework. This segmentation allows for independent management and optimization of each access type while ensuring seamless service continuity through coordinated control, thereby improving service reliability without proportionally increasing device complexity.
Solution Approach 2:
The authentication server acts as an intermediary between different access types and the core network, mediating the authentication and authorization processes. This intermediary role enables seamless service continuity by coordinating between 3GPP and non-3GPP access networks, improving reliability while the server itself absorbs the complexity rather than the end devices.
3Measurement precision
If authentication is performed per network slice, then authorization precision is improved, but processing time increases
Solution Approach 1:
The patent implements preliminary authentication actions during the initial network attachment process, where the authentication server evaluates and authorizes the user for multiple network slices in advance. By performing this authentication and authorization evaluation beforehand, the system achieves precise per-slice authorization while reducing the processing time during subsequent data transmission, as the authentication decisions are already made.
Data Source
AI summary
An access and mobility management function (AMF) receives, from a base station, a non-access stratum (NAS) request message of a wireless device comprising one or more single network slice selection assistance information(s) (S-NSSAIs) corresponding to one or more network slices. The AMF determines to perform network slice specific authentication and authorization (NSSAA) for a first network slice of the one or more network slices. The AMF sends, to the base station, based on the determining, an N2 setup message comprising an indication that the first network slice is pending.