# US 12,225,375 B2 · Authentication reject handling for SNPN-enabled UE

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,225,375 B2
- Document ID: US12225375B2
- Status: Granted
- Kind: B2
- Application number: 17/668,772
- Filed: 2022-02-10
- Published: 2022-09-08
- Granted: 2025-02-11
- Earliest claimed: 2021-03-05
- Assignees: Mediatek Inc.
- Applicants: Mediatek Inc.
- Inventors: Yuan-Chieh Lin; Chia-Lin Lai
- Web page: https://patentgrep.com/patent/US12225375B2

## CPC

- H04W 12/06: Authentication
- H04W 12/72: Subscriber identity
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

A method of handling authentication reject upon accessing an SNPN using credentials from a credential holder is proposed. A UE is configured with a “list of subscriber data”. The UE selects an SNPN using the configured list of subscriber data, e.g., based on the SNPN selection parameters contained in a selected entry of the list of subscriber data. Based on the selected entry, the UE selects an SNPN, and then tries to access the selected SNPN using credentials supplied by a subscribed SNPN. When UE receives an authentication reject message from the network, UE considers that the selected entry of the list of subscriber data is invalid. However, other entries related to the current selected SNPN are still valid. UE is still able to access the current selected SNPN, using credentials supplied in another entry of the list of subscriber data.

## Claims

### Claim 1

A method, comprising:
maintaining a list of subscriber data having one or more entries by a user equipment (UE), wherein the UE is enabled to access to a stand-alone non-public network (SNPN) using credentials from a credential holder;
selecting an entry by the UE from the list of subscriber data;
selecting an SNPN by the UE based on SNPN selection parameters contained in the selected entry of the list of subscriber data, wherein the selected entry comprises a subscribed SNPN identity, and wherein the SNPN selection parameters of an entry comprises at least one of a user controlled prioritized list of preferred SNPNs, a credential holder controlled prioritized list of preferred SNPNs, and a credential holder controlled prioritized list of group IDs for network selection (GIN);
registering to the current selected SNPN using credentials supplied in the selected entry or supplied in a universal subscriber identity module (USIM) for the selected entry, and receiving a notification indicating that the UE is not authorized to access the current selected SNPN; and
considering the selected entry of the list of subscriber data to be invalid.

### Claim 2 (depends on 1)

The method of claim 1, wherein the selected entry comprises a user controlled prioritized list of preferred SNPNs, wherein the user controlled prioritized list includes the current selected SNPN.

### Claim 3 (depends on 1)

The method of claim 1, wherein the selected entry comprises a credential holder controlled prioritized list of preferred SNPNs, wherein the credential holder controlled prioritized list includes the current selected SNPN.

### Claim 4 (depends on 1)

The method of claim 1, wherein the selected entry comprises a credential holder controlled prioritized list of group IDs for network selection (GIN), wherein the list of GIN includes a GIN, and wherein the current selected SNPN broadcasts the same GIN.

### Claim 5 (depends on 1)

The method of claim 1, wherein the list of subscriber data comprises an entry that includes the current selected SNPN as a subscribed SNPN identity.

### Claim 6 (depends on 1)

The method of claim 1, wherein the UE is allowed to register to the same selected SNPN using credentials supplied in a second entry that is different from the selected entry or supplied in the USIM for the second entry.

### Claim 7 (depends on 1)

The method of claim 1, wherein the credentials are supplied in the USIM when using an EAP based primary authentication and key agreement procedure using EAP-AKA′, or using a 5G AKA based primary authentication and key agreement procedure.

### Claim 8 (depends on 7)

The method of claim 7, wherein the UE considers the USIM as invalid for the selected entry until switching off or a UICC (Universal Integrated Circuit Card) containing the USIM is removed.

### Claim 9 (depends on 1)

The method of claim 1, wherein the UE considers the selected entry to be invalid until switching off or the selected entry is updated.

### Claim 10 (depends on 1)

The method of claim 1, wherein the notification is an AUTHENTICATION REJECT message, an EAP-failure message in an AUTHENTICATION REJECT message, an REGISTRATION REJECT message with cause value #3 (Illegal UE) or #6 (Illegal ME) or #7 (5GS services not allowed), or an SERVICE REJECT message with cause value #3 (Illegal UE) or #6 (Illegal ME) or #7 (5GS services not allowed).

### Claim 11

A User Equipment (UE), comprising:
a control and configuration circuit that maintains a list of subscriber data having one or more entries, wherein the UE is enabled to access to a stand-alone non-public network (SNPN) using credentials from a credential holder;
an SNPN handling circuit that selects an entry from the list of subscriber data, and also selects an SNPN based on SNPN selection parameters contained in the selected entry, wherein the selected entry comprises a subscribed SNPN identity, and wherein the SNPN selection parameters of an entry comprises at least one of a user controlled prioritized list of preferred SNPNs, a credential holder controlled prioritized list of preferred SNPNs, and a credential holder controlled prioritized list of group IDs for network selection (GIN);
a registration circuit that registers to the current selected SNPN using credentials supplied in the selected entry or supplied in a universal subscriber identity module (USIM) for the selected entry; and
a receiver that receives a notification indicating that the UE is not authorized to access the current selected SNPN, wherein the UE considers the selected entry of the list of subscriber data to be invalid.

### Claim 12 (depends on 11)

The UE of claim 11, wherein the selected entry comprises a user controlled prioritized list of preferred SNPNs, wherein the user controlled prioritized list includes the current selected SNPN.

### Claim 13 (depends on 11)

The UE of claim 11, wherein the selected entry comprises a credential holder controlled prioritized list of preferred SNPNs, wherein the credential holder controlled prioritized list includes the current selected SNPN.

### Claim 14 (depends on 11)

The UE of claim 11, wherein the selected entry comprises a credential holder controlled prioritized list of group IDs for network selection (GIN), wherein the list of GIN includes a GIN, and wherein the current selected SNPN broadcasts the same GIN.

### Claim 15 (depends on 11)

The UE of claim 11, wherein the list of subscriber data comprises an entry that includes the current selected SNPN as a subscribed SNPN identity.

### Claim 16 (depends on 11)

The UE of claim 11, wherein the UE is allowed to register to the same selected SNPN using credentials supplied in a second entry that is different from the selected entry or supplied in the USIM for the second entry.

### Claim 17 (depends on 11)

The UE of claim 11, wherein the credentials are supplied in the USIM when using an EAP based primary authentication and key agreement procedure using EAP-AKA′, or using a 5G AKA based primary authentication and key agreement procedure.

### Claim 18 (depends on 17)

The UE of claim 17, wherein the UE considers the USIM as invalid for the selected entry until switching off or a UICC (Universal Integrated Circuit Card) containing the USIM is removed.

### Claim 19 (depends on 11)

The UE of claim 11, wherein the UE considers the selected entry to be invalid until switching off or the selected entry is updated.

### Claim 20 (depends on 11)

The UE of claim 11, wherein the notification is an AUTHENTICATION REJECT message, an EAP-failure message in an AUTHENTICATION REJECT message, an REGISTRATION REJECT message with cause value #3 (Illegal UE) or #6 (Illegal ME) or #7 (5GS services not allowed), or an SERVICE REJECT message with cause value #3 (Illegal UE) or #6 (Illegal ME) or #7 (5GS services not allowed).