Management of user equipment security capabilities in communication system

A method comprising:

• receiving, from user equipment, a request indicating one or more security capabilities of the user equipment;
• determining whether the indicated one or more security capabilities meet one or more designated criteria of a communication network;
• rejecting the request by the user equipment responsive to determining that the indicated one or more security capabilities do not meet the one or more designated criteria of the communication network;
• and
• sending a rejection notification to the user equipment, the rejection notification comprising a failure cause indication based at least in part on the determination that the indicated one or more security capabilities do not meet the one or more designated criteria of the communication network;
• wherein the failure cause indication comprises a cause code indicating to the user equipment that an initial access request or a mobility request has failed due to the one or more security capabilities of the user equipment not being acceptable to the communication network.

An apparatus comprising:

• at least one processor;
• at least one memory including computer program code;
• the at least one memory and the computer program code being configured to, with the at least one processor, cause the apparatus at least to:
• send, to a security management node in a communication network, a request indicating one or more security capabilities of the apparatus;
• and
• receive, from the security management node, a rejection notification responsive to the indicated one or more security capabilities not meeting one or more designated criteria of the communication network;
• wherein the rejection notification comprises a failure cause indication based at least in part on a determination that the indicated one or more security capabilities do not meet the one or more designated criteria of the communication network;
• and
• wherein the failure cause indication comprises a cause code indicating to the apparatus that an initial access request or a mobility request has failed due to the one or more security capabilities of the apparatus not being acceptable to the communication network.

A method comprising:

• sending, to a security management node in a communication network, a request indicating one or more security capabilities of an apparatus;
• and
• receiving, from the security management node, a rejection notification responsive to the indicated one or more security capabilities not meeting one or more designated criteria of the communication network;
• wherein the rejection notification comprises a failure cause indication based at least in part on a determination that the indicated one or more security capabilities do not meet the one or more designated criteria of the communication network;
• and
• wherein the failure cause indication comprises a cause code indicating to the apparatus that an initial access request or a mobility request has failed due to the one or more security capabilities of the apparatus not being acceptable to the communication network.