# US 12,192,382 B2 · Method for session creation and related equipment

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,192,382 B2
- Document ID: US12192382B2
- Status: Granted
- Kind: B2
- Application number: 17/801,026
- Filed: 2020-04-26
- Published: 2023-03-30
- Granted: 2025-01-07
- Earliest claimed: 2020-02-21
- Assignees: Beijing Unisoc Communications Technology Co., Ltd.
- Applicants: Beijing Unisoc Communications Technology Co., Ltd.
- Inventors: Zhiwei Fu; Yifan Bai
- Web page: https://patentgrep.com/patent/US12192382B2

## CPC

- H04L 9/3268: {using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]}
- H04W 12/069: using certificates or pre-shared keys
- G06F 21/44: Program or device authentication
- G06F 21/51: at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
- H04L 9/0643: {Hash functions, e.g. MD5, SHA, HMAC or f9 MAC}
- H04L 9/3247: {involving digital signatures}
- H04L 9/3263: {involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823)}
- H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)}
- H04L 67/141: Setup of application sessions (admission control or resource allocation in data switching networks H04L47/70)
- H04W 12/48: using secure binding, e.g. securely binding identity modules to devices, services or applications
- H04W 76/12: Setup of transport tunnels
- H04L 2209/80: Wireless
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

A method for session creation is provided. The method includes: acquiring a signing certificate of a first application or a digital fingerprint of the signing certificate when performing network connection; matching the signing certificate of the first application or the digital fingerprint of the signing certificate with application descriptors in a UE route selection policy (URSP) rule distributed by a network side; and creating a session for the first application.

## Claims

### Claim 1

A method for session creation, performed by a user equipment (UE), comprising:
acquiring a signing certificate of a first application or a digital fingerprint of the signing certificate, when performing network connection;
matching the signing certificate of the first application or the digital fingerprint of the signing certificate with application descriptors in a UE route selection policy (URSP) rule distributed by a network side; and
creating a session for the first application; wherein the first application contains a signing certificate of a developer, the application descriptors in the URSP rule comprise a network signing certificate of the first application or a digital fingerprint of the network signing certificate that is comprised in a network signature of the first application, and the network signature of the first application is obtained by re-signing by the network side the first application.

### Claim 2 (depends on 1)

The method of claim 1, wherein the session is a protocol data unit (PDU) session.

### Claim 3 (depends on 1)

The method of claim 1, wherein the application descriptors are application descriptors defined by a Traffic descriptor in 3rd generation partnership project (3GPP) protocol.

### Claim 4 (depends on 1)

The method of claim 1, wherein the application descriptors comprise an operating system identifier (OSId) and an operating system application identifier (OSAppId).

### Claim 5 (depends on 1)

The method of claim 1, wherein before performing network connection, the method further comprises:
receiving the first application, wherein the first application contains the signing certificate of the first application.

### Claim 6 (depends on 1)

The method of claim 1, wherein the digital fingerprint of the signing certificate of the first application is a string encrypted by a one-way encryption algorithm.

### Claim 7 (depends on 1)

The method of claim 1, further comprising:
receiving the application descriptors in the URSP rule distributed by an operator server.

### Claim 8 (depends on 1)

The method of claim 1, wherein matching the signing certificate of the first application or the digital fingerprint of the signing certificate with the application descriptors in the URSP rule distributed by the network side comprises:
determining that the signing certificate of the first application or the digital fingerprint of the signing certificate matches the application descriptors, on condition that the signing certificate of the first application or the digital fingerprint of the signing certificate is consistent with the application descriptors; or
determining that the signing certificate of the first application or the digital fingerprint of the signing certificate fails to match the application descriptors, on condition that the signing certificate of the first application or the digital fingerprint of the signing certificate is different from the application descriptors.

### Claim 9

A non-transitory computer-readable storage medium storing computer programs which cause a computer to:
acquire a signing certificate of a first application or a digital fingerprint of the signing certificate, when performing network connection;
match the signing certificate of the first application or the digital fingerprint of the signing certificate with application descriptors in a UE route selection policy (URSP) rule distributed by a network side; and
create a session for the first application; wherein the first application contains a signing certificate of a developer, the application descriptors in the URSP rule comprise a network signing certificate of the first application or a digital fingerprint of the network signing certificate that is comprised in a network signature of the first application, and the network signature of the first application is obtained by re-signing by the network side the first application.

### Claim 10 (depends on 9)

The non-transitory computer-readable storage medium of claim 9, wherein the computer programs further cause the computer to:
receive the first application before performing network connection, wherein the first application contains the signing certificate of the first application.

### Claim 11 (depends on 9)

The non-transitory computer-readable storage medium of claim 9, wherein the computer programs further cause the computer to:
receive the application descriptors in the URSP rule distributed by an operator server.

### Claim 12 (depends on 9)

The non-transitory computer-readable storage medium of claim 9, wherein the computer programs causing the computer to match the signing certificate of the first application or the digital fingerprint of the signing certificate with the application descriptors in the URSP rule distributed by the network side cause the computer to:
determine that the signing certificate of the first application or the digital fingerprint of the signing certificate matches the application descriptors, on condition that the signing certificate of the first application or the digital fingerprint of the signing certificate is consistent with the application descriptors; or
determine that the signing certificate of the first application or the digital fingerprint of the signing certificate fails to match the application descriptors, on condition that the signing certificate of the first application or the digital fingerprint of the signing certificate is different from the application descriptors.

### Claim 13

A user equipment (UE), comprising:
a transceiver;
a processor, coupled with the transceiver; and
a memory, coupled with the transceiver and the processor, and storing program codes which are operable with the processor to:
cause the transceiver to acquire a signing certificate of a first application or a digital fingerprint of the signing certificate, when the UE performs network connection;
match the signing certificate of the first application or the digital fingerprint of the signing certificate with application descriptors in a UE route selection policy (URSP) rule distributed by a network side; and
create a session for the first application; wherein the first application contains a signing certificate of a developer, the application descriptors in the URSP rule comprise a network signing certificate of the first application or a digital fingerprint of the network signing certificate that is comprised in a network signature of the first application, and the network signature of the first application is obtained by re-signing by the network side the first application.

### Claim 14 (depends on 13)

The UE of claim 13, wherein the session is a protocol data unit (PDU) session.

### Claim 15 (depends on 13)

The UE of claim 13, wherein the application descriptors are application descriptors defined by a Traffic descriptor in 3rd generation partnership project (3GPP) protocol.

### Claim 16 (depends on 13)

The UE of claim 13, wherein the application descriptors comprise an operating system identifier (OSId) and an operating system application identifier (OSAppId).

### Claim 17 (depends on 13)

The UE of claim 13, wherein the processor is further configured to:
receive, with the transceiver, the first application before the UE performs network connection, wherein the first application contains the signing certificate of the first application.

### Claim 18 (depends on 13)

The UE of claim 13, wherein the digital fingerprint of the signing certificate of the first application is a string encrypted by a one-way encryption algorithm.

### Claim 19 (depends on 13)

The UE of claim 13, wherein the processor is further configured to:
receive, with the transceiver, the application descriptors in the URSP rule distributed by an operator server.

### Claim 20 (depends on 13)

The UE of claim 13, wherein the processor configured to match the signing certificate of the first application or the digital fingerprint of the signing certificate with the application descriptors in the URSP rule distributed by the network side is configured to:
determine that the signing certificate of the first application or the digital fingerprint of the signing certificate matches the application descriptors, on condition that the signing certificate of the first application or the digital fingerprint of the signing certificate is consistent with the application descriptors; or
determine that the signing certificate of the first application or the digital fingerprint of the signing certificate fails to match the application descriptors, on condition that the signing certificate of the first application or the digital fingerprint of the signing certificate is different from the application descriptors.