Method and apparatus for security management in 5G networks
AssigneeNokia Technologies Oy
InventorsPeter Schneider, Anja Jerichow
Life of this patent
Estimating the term…
Abstract
A session management function of a 5G system receives information that a secondary authentication is to be done for a given user equipment for authorising user equipment to use a data network; and responsively to the received information, communicates with the data network and receives from the data network an indication; and allows a 5G access to the user equipment so that the user equipment can communicate with the data network according to the indication either without cryptographic protection or with cryptographic protection depending on the indication.
Claims20
An apparatus comprising:
- at least one processing core,
- at least one memory including computer program code,
- the at least one memory and the computer program code being configured to, with the at least one processing core, cause the apparatus at least to:
- receive information that a secondary authentication is to be done for a user equipment for authorising the user equipment to use a data network;
- responsively to the received information, communicate with the data network and receive from the data network an indication;
- and
- allow a 5G access to the user equipment so that the user equipment can communicate with the data network either without cryptographic protection or with cryptographic protection depending on the indication.
A method in a session management function of a 5G system, comprising:
- receiving information that a secondary authentication is to be done for a user equipment for authorising the user equipment to use a data network;
- responsively to the received information, communicating with the data network and receiving from the data network an indication;
- and
- allowing a 5G access to the user equipment so that the user equipment can communicate with the data network either without cryptographic protection or with cryptographic protection depending on the indication.
An apparatus comprising:
- at least one processing core,
- at least one memory including computer program code, the at least one memory and the computer program code being configured to, with the at least one processing core, cause the apparatus at least to:
- receive from a session management function of a 5G system a secondary authentication request for authorising an user equipment to use the data network;
- responsively to the secondary authentication request,
- determine whether the 5G system should provide the user equipment with a communication channel with integrity protection and/or encryption;
- and
- based on the determination, send to the 5G system an indication configured to cause the 5G system to provide the user equipment with a communication channel either without cryptographic protection or with cryptographic protection.
Dependencies are inferred from the claim text.