UAS PDU Session Authentication for Service Continuity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing 4G/5G systems face challenges in efficiently managing network slicing and authentication/authorization processes, particularly for Unmanned Aerial Systems (UAS), which require enhanced features and functionalities to support seamless connectivity and service continuity.
Innovation Solution
The implementation of enhanced network slicing and authentication/authorization mechanisms in 4G/5G systems, including support for Unmanned Aerial Systems (UAS), through the use of network functions such as AMF, SMF, UPF, PCF, and NEF, which facilitate secure and efficient session management, policy enforcement, and edge computing to ensure uninterrupted service continuity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing 4G/5G authentication and authorization mechanisms are used, then basic network connectivity is maintained, but service continuity and seamless connectivity for UAS are not ensured
Solution Approach 1:
The patent segments the authentication and authorization process into distinct phases: initial authentication, service-specific authorization, and session management. This segmentation allows each phase to be optimized independently, ensuring service continuity while supporting UAS-specific requirements through dedicated authorization checks for different flight phases and services.
Solution Approach 2:
The patent implements preliminary authorization decisions during the authentication phase, where the network function determines authorized services and parameters before the UAS actually requests them. This preliminary action ensures service continuity by pre-establishing authorization contexts that remain valid throughout the flight, eliminating the need for repeated authentication.
2Loss of time
If traditional network authentication processes are used, then basic connectivity is established, but latency is not reduced
Solution Approach 1:
The patent merges authentication and authorization functions into a single integrated network function that handles both operations simultaneously. This consolidation reduces the number of separate signaling exchanges required, thereby reducing latency while managing complexity through a unified architecture rather than multiple separate components.
Solution Approach 2:
The network function performs authorization decisions in advance during the authentication phase, preparing authorization contexts and service permissions before the UAS needs them. This preliminary action eliminates waiting time during service requests, reducing overall latency despite the increased complexity of the pre-processing operations.
3Adaptability or versatility
If basic network slicing is implemented, then network resource division is achieved, but secure and efficient session management for diverse access networks is not ensured
Solution Approach 1:
The patent implements a universal network function that handles authentication, authorization, and session management across multiple access network types (3GPP and non-3GPP). This multi-functional approach ensures secure session management is maintained consistently across diverse networks while adapting to their specific characteristics, achieving both versatility and reliability.
Solution Approach 2:
The network function acts as an intermediary between the UAS and diverse access networks, providing a standardized interface for authentication and session management. This intermediary role ensures secure session management by centralizing security policies and authorization logic, while allowing flexible adaptation to different network types through configured interfaces.
Data Source
AI summary
A method comprises a wireless device transmitting, to an access and mobility management function (AMF), a registration request message for the wireless device, receiving, from the AMF, a registration response message indicating an acceptance of a registration request of the wireless device, and transmitting, to the AMF, a protocol data unit (PDU) session establishment request for establishing a PDU session associated with an unmanned aerial system (UAS) service. The method further comprises receiving, from the AMF, a rejection of the PDU session establishment request, which comprises: a first parameter indicating that authentication and/or authorization for the UAS service is failed or revoked; and a second parameter indicating that authentication and/or authorization for a command and control (C2) communication is failed or revoked.