Access control in communications network comprising slices

A method for operating a network entity configured to control a non-access stratum signaling of a mobile entity in a mobile communications network, the mobile communications network comprising at least one slice, the method comprising:

• receiving, by the network entity, a request message from the mobile entity;
• determining, by the network entity, whether the request message comprises a network slice identifier with which the slice to which the mobile entity intends to connect can be identified;
• the network entity checking, if the network slice identifier is present in the request message, whether the network slice identified by the network slice identifier is allowed for the mobile entity transmitting the request;
• sending, by the network entity and in response to the received request, a response message to the mobile entity indicating the network slice allowed to be used by the mobile entity based on one or more of:
• if the network slice identifiers are included in the request:
• the network slice identifiers;
• if the network slice identifiers are included in the request:
• subscription data associated with the mobile entity;
• and
• mobile entity capabilities;
• and
• transmitting, if no network slice identifier is present in the request message, an attach response message to the mobile entity, the attach response message including a network slice identifier for the mobile entity determined based on subscriber data for the mobile entity and/or capabilities of the mobile entity.

A mobile entity for operating in a mobile communications network which comprises at least one slice, the mobile entity comprising:

• processing circuitry;
• memory containing instructions executable by the processing circuitry whereby the mobile entity is operative to:
• determine to which slice of the mobile communications network the mobile entity intends to connect;
• determine whether a relationship can be identified in the mobile entity, wherein the relationship indicates that the slice to which the mobile entity intends to connect is related to an access point of the determined slice;
• in response to the relationship being found in the mobile entity, transmit a request message including the identified relationship to a radio access network of the mobile communications network;
• wherein the instructions are such that the mobile entity is operative to:
• store the access point received from the mobile communications network as default access point if no information about an access point has been transmitted to the mobile communications network;
• and
• when information about the access point has been transmitted to the mobile communications network before the relationship is received from the mobile communications network, store the received relationship as a new relationship relating the access point mentioned in the received relationship to the slice mentioned in the relationship.

A network entity configured to control a non-access stratum signaling of a mobile entity in a mobile communications network, the mobile communications network comprising at least one slice, the entity comprising:

• processing circuitry;
• memory containing instructions executable by the processing circuitry whereby the entity is operative to:
• receive a request message from the mobile entity;
• determine whether the request message comprises a network slice identifier with which the slice to which the mobile entity intends to connect can be identified;
• check, if the network slice identifier is present in the request message, whether the network slice identified by the network slice identifier is allowed for the mobile entity transmitting the request;
• and
• send, in response to the received request, a response message to the mobile entity indicating the network slice allowed to be used by the mobile entity based on one or more of:
• if the network slice identifier is included in the request:
• the network slice identifier;
• and
• if the network slice identifier is not included in the request:
• subscription data associated with the mobile entity;
• and
• mobile entity capabilities;
• and
• wherein the instructions are such that the entity is operative to transmit, if no network slice identifier is present in the request message, an attach response message to the mobile entity;
• the attach response message including a network slice identifier for the mobile entity determined based on subscriber data for the mobile entity and/or capabilities of the mobile entity.