Attribute-based credentials for resource access

A processor for wireless communication, comprising:

• at least one controller coupled with at least one memory and configured to cause the processor to:
• communicate a registration request message for registration of a user equipment (UE) to a wireless communication network, the registration request message comprising a credentials indication associated with a credential;
• receive a response message comprising a presentation policy for registration to the wireless communication network, the presentation policy comprising an indication to provide an encrypted subscription identifier, an encrypted root key, and a public key;
• communicate a presentation token generated based at least in part on the presentation policy, the presentation token comprising proof information for a private key;
• receive an authentication challenge;
• generate, based at least in part on the authentication challenge, an authentication result using a root key and a subscription identity from the credential;
• and
• perform a registration procedure for the UE with the wireless communication network based at least in part on the authentication result.

A network equipment for wireless communication, comprising:

• at least one memory;
• and
• at least one processor coupled with the at least one memory and configured to cause the network equipment to:
• receive a registration request message for registration of a user equipment (UE) to a wireless communication network, the registration request message comprising a credentials indication associated with a credential;
• communicate a response message, to the UE, comprising a presentation policy for registration to the wireless communication network, the presentation policy comprising an indication to provide an encrypted subscription identifier, an encrypted root key, and a public key;
• receive a presentation token generated based at least in part on the presentation policy, the presentation token comprising proof information for a private key;
• receive, based at least in part on the presentation token, an authentication challenge;
• and
• communicate, to the UE, the authentication challenge associated with registration of the UE to the wireless communication network.

A method performed by a user equipment (UE), the method comprising:

• communicating a registration request message for registration of the UE to a wireless communication network, the registration request message comprising a credentials indication associated with a credential;
• receiving a response message comprising a presentation policy for registration to the wireless communication network, the presentation policy comprising an indication to provide an encrypted subscription identifier, an encrypted root key, and a public key;
• communicating a presentation token generated based at least in part on the presentation policy, the presentation token comprising proof information for a private key;
• receiving an authentication challenge;
• generating, based at least in part on the authentication challenge, an authentication result using a root key and a subscription identity from the credential;
• and
• performing a registration procedure with the wireless communication network based at least in part on the authentication result.