# US 12,593,209 B2 · Secondary or splice-specific access control in a wireless communication network

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,593,209 B2
- Document ID: US12593209B2
- Status: Granted
- Kind: B2
- Application number: 17/923,929
- Filed: 2021-05-12
- Published: 2023-06-01
- Granted: 2026-03-31
- Earliest claimed: 2020-05-13
- Assignees: Telefonaktiebolaget LM Ericsson (publ)
- Applicants: Telefonaktiebolaget LM Ericsson (publ)
- Inventors: Henrik Normann; Peter Hedman; David Castellanos Zamora
- Web page: https://patentgrep.com/patent/US12593209B2

## CPC

- H04W 12/08: Access security
- H04W 8/18: Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data
- H04W 12/40: Security arrangements using identity modules
- H04W 12/72: Subscriber identity
- H04W 48/18: Selecting a network or a communication service
- H04L 63/101: {Access control lists [ACL]}
- H04W 12/06: Authentication
- H04W 12/088: using filters or firewalls
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A data management network node (12) is configured for use in a wireless communication network (10). The data management network node (12) stores subscription data (14) for a wireless device (16). The data management network node (12) receives, from network equipment (26), a request that requests subscription data (14) for the wireless device (16). Responsive to the request, the data management network node (12) transmits to the network equipment (26) a response that includes at least some of the stored subscription data (14). If the subscription data (14) included in the response indicates the wireless device (16) is subscribed to use a certain data network or network slice that is subject to secondary or slice-specific access control, the subscription data (14) included in the response includes a least one generic subscription identifier for the wireless device (16).

## Claims

### Claim 1

A method performed by a data management network node in a wireless communication network, the method comprising:
storing subscription data for a wireless device;
receiving, from network equipment, a request that requests subscription data for the wireless device; and
responsive to the request, transmitting to the network equipment a response that includes at least some of the stored subscription data, wherein if the subscription data included in the response indicates the wireless device is subscribed to use a certain data network or network slice that is subject to secondary or slice-specific access control, the subscription data included in the response includes at least one generic subscription identifier for the wireless device, wherein a generic subscription identifier generically addresses a subscription to the wireless communication network in different data networks outside the wireless communication network, wherein the response includes or does not include information which identifies the certain data network or network slice depending respectively on whether or not the stored subscription data includes a generic subscription identifier for the wireless device.

### Claim 2 (depends on 1)

The method of claim 1, further comprising checking whether the stored subscription data indicates the wireless device is subscribed to use a certain data network or network slice that is subject to secondary or slice-specific access control, and wherein if the subscription data included in the response indicates the wireless device is subscribed to use the certain data network or network slice that is subject to secondary or slice-specific access control according to said checking, the subscription data included in the response includes at least one generic subscription identifier for the wireless device.

### Claim 3 (depends on 1)

The method of claim 1, wherein the certain data network or network slice comprises a certain network slice, wherein the secondary or slice-specific access control comprises slice-specific authentication and/or authorization, and wherein the stored subscription data includes Single Network Slice Selection Assistance Information (S-NSSAI) that identifies the certain network slice, wherein if the subscription data included in the response includes S-NSSAI identifying a certain network slice that is subject to slice-specific authentication and/or authorization, the subscription data included in the response also includes at least one generic subscription identifier for the wireless device.

### Claim 4 (depends on 3)

The method of claim 3, wherein the response includes or does not include the S-NSSAI which identifies the certain network slice, depending respectively on whether or not the stored subscription data includes a generic subscription identifier for the wireless device.

### Claim 5 (depends on 1)

The method of claim 1, wherein the certain data network or network slice comprises a certain data network, wherein the secondary or slice-specific access control comprises secondary authentication and/or authorization, and wherein the stored subscription data includes a Data Network Name (DNN) which identifies the certain data network, wherein if the subscription data included in the response includes a DNN identifying a certain data network that is subject to secondary authentication and/or authorization, the subscription data included in the response also includes at least one generic subscription identifier for the wireless device.

### Claim 6 (depends on 5)

The method of claim 5, wherein the response includes or does not include the DNN which identifies the certain data network that is subject to secondary authentication and/or authorization, depending respectively on whether or not the stored subscription data includes a generic subscription identifier for the wireless device.

### Claim 7 (depends on 1)

The method of claim 1, wherein the generic subscription identifier is a Generic Public Subscription Identifier (GPSI).

### Claim 8 (depends on 1)

The method of claim 1, wherein, if the stored subscription data indicates the wireless device is subscribed to use the certain data network or network slice but the stored subscription data lacks a generic subscription identifier for the wireless device, the response does not indicate that the wireless device is subscribed to use the certain data network or network slice.

### Claim 9

A data management network node configured for use in a wireless communication network, the data management network node comprising:
communication circuitry; and
processing circuitry configured to:
store subscription data for a wireless device;
receive, from network equipment, a request that requests subscription data for the wireless device; and
responsive to the request, transmit to the network equipment a response that includes at least some of the stored subscription data, wherein if the subscription data included in the response indicates the wireless device is subscribed to use a certain data network or network slice that is subject to secondary or slice-specific access control, the subscription data included in the response includes at least one generic subscription identifier for the wireless device, wherein a generic subscription identifier generically addresses a subscription to the wireless communication network in different data networks outside the wireless communication network, wherein the response includes or does not include information which identifies the certain data network or network slice depending respectively on whether or not the stored subscription data includes a generic subscription identifier for the wireless device.

### Claim 10 (depends on 9)

The data management network node of claim 9, the processing circuitry configured to perform a check whether the stored subscription data indicates the wireless device is subscribed to use a certain data network or network slice that is subject to secondary or slice-specific access control, and wherein if the subscription data included in the response indicates the wireless device is subscribed to use the certain data network or network slice that is subject to secondary or slice-specific access control according to said check, the subscription data included in the response includes at least one generic subscription identifier for the wireless device.

### Claim 11 (depends on 9)

The data management network node of claim 9, wherein the certain data network or network slice comprises a certain network slice, wherein the secondary or slice-specific access control comprises slice-specific authentication and/or authorization, and wherein the stored subscription data includes Single Network Slice Selection Assistance Information (S-NSSAI) that identifies the certain network slice, wherein if the subscription data included in the response includes S-NSSAI identifying a certain network slice that is subject to slice-specific authentication and/or authorization, the subscription data included in the response also includes at least one generic subscription identifier for the wireless device.

### Claim 12 (depends on 11)

The data management network node of claim 11, wherein the response includes or does not include the S-NSSAI which identifies the certain network slice, depending respectively on whether or not the stored subscription data includes a generic subscription identifier for the wireless device.

### Claim 13 (depends on 9)

The data management network node of claim 9, wherein the certain data network or network slice comprises a certain data network, wherein the secondary or slice-specific access control comprises secondary authentication and/or authorization, and wherein the stored subscription data includes a Data Network Name (DNN) which identifies the certain data network, wherein if the subscription data included in the response includes a DNN identifying a certain data network that is subject to secondary authentication and/or authorization, the subscription data included in the response also includes at least one generic subscription identifier for the wireless device.

### Claim 14 (depends on 13)

The data management network node of claim 13, wherein the response includes or does not include the DNN which identifies the certain data network that is subject to secondary authentication and/or authorization, depending respectively on whether or not the stored subscription data includes a generic subscription identifier for the wireless device.

### Claim 15 (depends on 9)

The data management network node of claim 9, wherein the generic subscription identifier is a Generic Public Subscription Identifier (GPSI).

### Claim 16 (depends on 9)

The data management network node of claim 9, wherein the processing circuitry is configured to generate the response such that, if the stored subscription data indicates the wireless device is subscribed to use the certain data network or network slice but the stored subscription data lacks a generic subscription identifier for the wireless device, the response does not indicate that the wireless device is subscribed to use the certain data network or network slice.