Method, apparatus, and computer program product for authentication using a user equipment identifier

A method comprising:

• receiving, by a network function, from a network entity, a user equipment (UE) identifier;
• causing transmission, by the network function, to an authentication function, of the UE identifier and a wireless connection indicator, wherein the wireless connection indicator indicates that an extensible authentication protocol (EAP) procedure is triggered for non-seamless wireless offload (NSWO) connection purposes;
• and
• upon successful authentication using the UE identifier, sending a master key received from the authentication function to the network entity.

An apparatus comprising:

• at least one processor;
• and
• at least one memory including computer program code, the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to at least:
• request, by a user equipment (UE), a non-seamless wireless offload (NSWO) connection to a network entity;
• receive, by the UE, from the network entity, an identity request;
• in response to the identity request, cause transmission, by the UE, of an identity response comprising a UE identifier to the network entity, wherein (i) the UE identifier comprises a subscription concealed identifier (SUCI), (ii) the SUCI is part of a network access identifier (NAI), and (iii) the SUCI is generated based on a public key of a home network associated with a registration of the UE;
• derive, by the UE, a master key (MSK) during authentication with the network entity;
• and
• establish, by the UE, a security context with the network entity upon successful authentication based on the MSK.

An apparatus comprising:

• at least one processor;
• and
• at least one memory including computer program code, the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to at least:
• receive, by a network function, from a network entity, a user equipment (UE) identifier;
• cause transmission, by the network function, to an authentication function, of the UE identifier and a wireless connection indicator, wherein the wireless connection indicator indicates that an extensible authentication protocol (EAP) procedure is triggered for non-seamless wireless offload (NSWO) connection purposes;
• and
• upon successful authentication using the UE identifier, send a master key received from the authentication function to the network entity.