UE Relay Authentication via PDU Session Modification in 5G

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing wireless communication systems face challenges in providing secure session processing for user equipment (UE) in 5G and beyond networks, particularly in scenarios involving relay communications and device-to-device authentication.

Innovation Solution

A method and device for supporting authentication of a second UE by a first UE or a session management function (SMF) through the exchange of PDU session establishment and modification messages, including authentication information such as EAP messages, to enhance security in wireless communication systems.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional authentication methods are used in 5G relay communications, then network security is maintained, but authentication complexity and processing time increase for device-to-device scenarios

Engineering Contradiction:
Improvenetwork securityVSAvoidauthentication complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces an authentication manager as an intermediary component that centralizes authentication logic. The authentication manager receives authentication requests from relay UEs, manages the authentication workflow with the network, and distributes authentication credentials to relevant devices. This mediator approach simplifies the authentication process for individual devices while maintaining comprehensive network security through centralized control.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The authentication process is segmented into distinct functional components: authentication request generation at the relay UE, authentication management at the authentication manager, and authentication verification at the network side. This segmentation allows each component to handle only its specific task, reducing overall system complexity while maintaining security through specialized processing at each stage.

Inventive Principle:
Principle #1Segmentation

2Reliability

If comprehensive authentication protocols are implemented for all UEs, then security is enhanced, but protocol overhead and processing time increase

Engineering Contradiction:
ImprovesecurityVSAvoidprocessing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent implements preliminary authentication where the authentication manager pre-establishes authentication credentials and security contexts before actual data transmission begins. Relay UEs and remote UEs receive pre-configured authentication information that enables rapid connection establishment without requiring full authentication protocols during time-critical communications, thus reducing processing time while maintaining security.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If authentication information is exchanged through multiple message exchanges, then authentication reliability is improved, but message overhead and network traffic increase

Engineering Contradiction:
Improveauthentication reliabilityVSAvoidmessage overhead
Core Design Contradiction:
ReliabilityVSQuantity of substance

Solution Approach 1:

The patent merges multiple authentication information elements into consolidated authentication messages. Instead of exchanging separate messages for different authentication parameters, the authentication manager combines authentication credentials, security contexts, and authorization information into unified message structures. This merging reduces the total number of messages exchanged while maintaining complete authentication reliability through comprehensive information inclusion in each message.

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentEP4503692B1Method and device for supporting authentication of terminal in wireless communication system
Publication Date: 2026.04.08 SAMSUNG ELECTRONICS CO LTD
  • EP4503692B1 patent drawingFigure 1
  • EP4503692B1 patent drawingFigure 2
  • EP4503692B1 patent drawingFigure 3

AI summary

The present disclosure relates to a 5G or 6G communication system for supporting a higher data transfer rate. A method of supporting authentication of a second user equipment (UE) by a first UE in a wireless communication system may comprise the steps of: transmitting a PDU session establishment message (PDU session establishment) for a PDU session of the first UE to a session management function (SMF); receiving a PDU session establishment response message corresponding to the PDU session establishment message from the SMF; transmitting a PDU session modification message (PDU session modification) including a request for authentication information on the second UE to the SMF; and receiving a PDU session modification response message including the authentication information on the second UE from the SMF.