5G Network Slice Authentication Timing for Free Trial Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing Network Slice-Specific Authentication and Authorization (NSSAA) systems do not account for free trial periods, failing to manage user access to network slices during trial periods and lacking a defined mechanism for initiating NSSAA after such periods expire.
Innovation Solution
Implementing a time-based mechanism where NSSAA is performed after a specified period (T), allowing a free trial period during which users can access network slices without NSSAA, and configuring network entities like AMF, UDM, or AF to manage NSSAA requirements based on trial periods or operator policies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If NSSAA is performed immediately upon registration, then network security is improved, but user flexibility and service trial capability deteriorate
Solution Approach 1:
The patent applies preliminary action by performing NSSAA in advance during the registration procedure before the user actually accesses network slices. The authentication and authorization are completed proactively, storing results for later use, which ensures security is established beforehand while allowing users to access slices without repeated authentication delays.
Solution Approach 2:
The patent implements dynamics by making the NSSAA timing flexible rather than fixed. The system can perform NSSAA immediately or defer it based on service requirements, user subscriptions, and network policies. This dynamic approach allows the network to adapt authentication timing to balance security needs with user experience and service trial requirements.
2Ease of operation
If NSSAA is deferred to maintain user flexibility during trial periods, then user experience is improved, but network security and authorization control worsen
Solution Approach 1:
The patent performs NSSAA in advance during registration and stores the authentication results. This preliminary authorization allows users to access network slices during trial periods without repeated authentication, improving user experience while maintaining security controls. The pre-established authorization records enable seamless access during the trial period.
Solution Approach 2:
The patent implements feedback mechanisms where the network monitors user activity during trial periods and can trigger additional NSSAA if abnormal patterns are detected. The system continuously evaluates whether the preliminary authorization remains valid and can request re-authentication if needed, maintaining security while allowing flexible trial access.
3Reliability
If NSSAA is performed frequently to ensure security, then network security is improved, but network signaling overhead and processing time worsen
Solution Approach 1:
The patent performs NSSAA in advance during registration and caches the authentication results for subsequent slice accesses. This eliminates the need to repeat the full authentication process for each slice access, significantly reducing processing time and signaling overhead while maintaining security through the pre-established authorization records.
Solution Approach 2:
The patent implements periodic re-authentication only when necessary, such as after trial periods expire, when subscriptions change, or based on timer expirations. Instead of continuous frequent NSSAA, the system uses periodic checks triggered by specific events, reducing overall processing time and signaling overhead while maintaining appropriate security levels.
Data Source
AI summary
The present disclosure relates to a communication method and system for converging a 5th-Generation (5G) communication system for supporting higher data rates beyond a 4th-Generation (4G) system with a technology for Internet of Things (IoT). Disclosed is a method of performing Network Slice-Specific Authentication and Authorization, NS SAA, in a telecommunication network, for at least one network slice, such that a given user is able to access the at least one network slice, S-NSSAI, comprising the step of performing NSSAA after a specified time period, T, has elapsed.