SNPN Authentication Using External AAA for Unsubscribed UEs
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In wireless communication systems, standalone non-public networks (SNPNs) cannot authenticate user equipment (UEs) without a subscription, hindering access and key provisioning for UEs with external credentials.
Innovation Solution
UEs derive security keys using the SNPN's access network identity parameters, and network entities like AMF, AUP, and AAA Server perform authorization and key derivation based on external credentials, establishing temporary subscriptions and security profiles.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a UE wants to access an SNPN without a subscription, then the SNPN cannot authenticate the UE using traditional subscription-based authentication mechanisms
Solution Approach 1:
The patent introduces an external AAA server as an intermediary authentication authority. The AMF acts as a mediator that forwards authentication requests to the external AAA server, which then provides authentication responses and security keys to the SNPN. This intermediary mechanism enables UEs without SNPN subscriptions to be authenticated through their home network's AAA server, resolving the contradiction between access versatility and authentication reliability.
2Reliability
If the SNPN uses traditional subscription-based authentication, then authentication reliability is maintained, but UE access versatility is limited to subscribed users only
Solution Approach 1:
The patent makes the authentication system universal by enabling the AMF to handle both traditional subscription-based authentication and external credential-based authentication for UEs without SNPN subscriptions. The AMF universally processes authentication requests by determining the appropriate authentication method based on the UE's subscription status, thereby maintaining authentication reliability while expanding access versatility.
3Adaptability or versatility
If external credentials are used for authentication, then UE access versatility is improved, but the complexity of the authentication system increases
Solution Approach 1:
The patent extracts the complex authentication logic from the SNPN and places it in the AMF and external AAA server. The AMF handles the determination of authentication method and coordination with the external AAA server, while the SNPN focuses only on receiving authentication responses and establishing security contexts. This extraction reduces the complexity burden on the SNPN while maintaining the enhanced access capability.
Data Source
AI summary
Apparatuses, methods, and systems are disclosed for accessing an NPN using external credentials. One apparatus in a mobile communication network includes a processor and a transceiver that receives a registration request for a UE. Here, the UE does not have a subscription with the mobile communication network. The processor identifies a service provider of the UE and controls the transceiver to send an authentication message to an AAA server of the identified service provider. The processor receives an authentication response containing a master session key from the AAA server in response to successful authentication of the UE and derives a set of security keys (e.g., KAUSF, KSEAF) using the master session key.