# US 12,225,377 B2 · Methods for trust information in communication network and related communication equipment and communication device > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,225,377 B2 - Document ID: US12225377B2 - Status: Granted - Kind: B2 - Application number: 17/774,896 - Filed: 2020-11-09 - Published: 2022-12-08 - Granted: 2025-02-11 - Earliest claimed: 2020-11-09 - Assignees: Telefonaktiebolaget LM Ericsson (publ) - Applicants: Telefonaktiebolaget LM Ericsson (publ) - Inventors: Vesa Lehtovirta; Prajwol Kumar Nakarmi; Helena Vahidi Mazinani; Noamen Ben Henda; Markus Hanhisalo - Web page: https://patentgrep.com/patent/US12225377B2 ## CPC - H04W 12/082: using revocation of authorisation - H04W 8/06: Registration at serving network Location Register, VLR or user mobility server - H04W 12/069: using certificates or pre-shared keys - H04W 12/102: Route integrity, e.g. using trusted paths - H04W 12/63: Location-dependent; Proximity-dependent - H04W 12/66: {Trust-dependent, e.g. using trust scores or trust relationships} - H04W 48/16: Discovering, processing access restriction or access information - H04W 60/00: Affiliation to network, e.g. registration; Terminating affiliation with the network, e.g. de-registration - H04W 84/042: {Public Land Mobile systems, e.g. cellular systems} - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A method performed by a network equipment of a communication network to dynamically provide trust information to a communication device registered or being registered to the communication network is provided. The method includes determining a trust information for each of one or more access networks. The trust information indicates whether each of the one or more access networks is trusted. The method further includes indicating to the communication device whether the one or more access networks is trusted for a current session or a later session. A method performed by a communication device registered or being registered with a communication network to dynamically receive trust information is also provided. The method includes receiving a message including a protected trust information list from a network equipment. The method further includes verifying the protection of the message. The method further includes storing the protected trust information list. ## Claims ### Claim 1 A method performed by a network equipment of a communication network to dynamically provide trust information to a communication device registered to or being registered the communication network, the method comprising: determining a trust information for each of one or more access networks, wherein the trust information indicates whether each of the one or more access networks is trusted, wherein the determining a trust information for each of one or more access networks comprises protecting a trust information list with a key shared with the communication device to obtain a protected trust information list; and indicating to the communication device whether the one or more access networks is trusted for a current session or a later session, wherein the indicating to the communication device whether the one or more access networks is trusted for a current session or a later session comprises sending the protected trust information list toward the communication device. ### Claim 2 (depends on 1) The method of claim 1, wherein the determining a trust information for each of one or more access networks comprises: obtaining a list of the one or more access networks; and associating the trust information to each of the one or more of the access networks in the list of the one or more access networks resulting in the trust information list. ### Claim 3 (depends on 1) The method of claim 1, wherein the sending the protected trust information list toward the communication device is sent toward the communication device during steering of the communication device in a visited public land mobile network (VPLMN) during registration. ### Claim 4 (depends on 1) The method of claim 1, wherein the sending the protected trust information list toward the communication device is sent toward the communication device during steering of the communication device in a visited public land mobile network (VPLMN) after registration. ### Claim 5 (depends on 4) The method of claim 4, further comprising: sending a message to an authentication server function (AUSF) to obtain security material for protection of the trust information list; and receiving a response to the first message from the AUSF with the security material. ### Claim 6 (depends on 1) The method of claim 1, wherein the sending the protected trust information list toward the communication device is sent toward the communication device via a parameters update to the communication device during a unified data management (UDM) control plane security procedure. ### Claim 7 (depends on 6) The method of claim 6, wherein the parameters update comprises a user equipment parameter update (UPU). ### Claim 8 (depends on 6) The method of claim 6, further comprising: sending a message to an authentication server function (AUSF) to obtain security material for protection of the trust information list; and receiving a response to the first message from the AUSF with the security material. ### Claim 9 (depends on 1) The method of claim 1, wherein the sending the protected trust information list toward the communication device is sent toward the communication device after a primary authentication. ### Claim 10 (depends on 2) The method of claim 2, wherein the list is obtained where an authentication of the communication device was performed; and the sending the protected trust information list toward the communication device is sent toward the communication device using a user equipment parameter update (UPU) procedure. ### Claim 11 A network equipment comprising: processing circuitry; and memory coupled with the processing circuitry, wherein the memory includes instructions that when executed by the processing circuitry causes the network equipment to perform operations comprising: determining a trust information for each of one or more access networks, wherein the trust information indicates whether each of the one or more access networks is trusted, wherein the determining a trust information for each of one or more access networks comprises protecting a trust information list with a key shared with the communication device to obtain a protected trust information list; and indicating to a communication device registered or being registered with a communication network whether the one or more access networks is trusted for a current session or a later session, wherein the indicating to the communication device whether the one or more access networks is trusted for a current session or a later session comprises sending the protected trust information list toward the communication device. ### Claim 12 A method performed by a communication device registered or being registered with a communication network to dynamically receive trust information, the method comprising: receiving a message including a protected trust information list from a network equipment; verifying the protection of the message; and storing the protected trust information list. ### Claim 13 (depends on 12) The method of claim 12, wherein the receiving a message including a protected trust information list from a network equipment is received during steering of the communication device in a visited public land mobile network (VPLMN) after registration. ### Claim 14 (depends on 12) The method of claim 12, wherein the receiving a message including a protected trust information list from a network equipment is received via a parameters update to the communication device during a unified data management (UDM) control plane security procedure. ### Claim 15 (depends on 14) The method of claim 14, wherein the parameters update comprises a user equipment parameter update (UPU). ### Claim 16 (depends on 12) The method of claim 12, wherein the receiving a message including a protected trust information list from a network equipment is received after a primary authentication. ### Claim 17 (depends on 12) The method of claim 12, wherein the protected trust information comprises a plurality of trust indications comprising a trust indication from a visited public land mobile network (VPLMN) and a trust indication from a home public land mobile network (HPLMN). ### Claim 18 (depends on 17) The method of claim 17, wherein the communication device has default behavior that the trust indication from the VPLMN overrides the trust indication of the HPLMN. ### Claim 19 A communication device registered or being registered with a communication network adapted to perform operations comprising: receive a message including a protected trust information list from a network equipment; verify the protection of the message; and store the protected trust information list.