Method and systems for authenticating UE for accessing non-3GPP service
AssigneeSamsung Electronics Co., Ltd.
InventorsRajavelsamy Rajadurai, Rohini Rajendran, Nivedya Parambath Sasi
Life of this patent
Estimating the term…
Abstract
The present disclosure relates to a pre-5th-Generation (5G) or 5G communication system to be provided for supporting higher data rates Beyond 4th-Generation (4G) communication system such as Long Term Evolution (LTE). A method disclosed herein includes authenticating a User Equipment (UE) using a 3rd Generation Partnership Project (3GPP) subscription credential for accessing non-3GPP services from a non-3GPP network. The method includes authenticating the UE before allowing access to the non-3GPP services from the non-3GPP network. The method further includes using 3GPP security credentials for authenticating the UE to access the non-3GPP services from the non-3GPP network.
Claims18
A method performed by a non-seamless wireless local area network (WLAN) offload (NSWO) function (NSWOF) entity in a wireless communication system, the method comprising:
- receiving, from a WLAN access network (AN), an extensible authentication protocol (EAP) identity (ID) response message including a subscription concealed identifier (SUCI) in a network access identifier (NAI) format;
- transmitting, to an authentication server function (AUSF) entity, a first authentication request message including the SUCI and a NSWO indicator, wherein the NSWO indicator is used to indicate that the first authentication request message is for a NSWO;
- receiving, from the AUSF entity, a first authentication response message including an EAP request message;
- transmitting, to the AUSF entity, a second authentication request message including an EAP response message;
- and
- receiving, from the AUSF entity, a second authentication response message including an EAP success message and a master session key (MSK) key, wherein the MSK key is based on the NSWO indicator.
A method performed by a wireless local area network (WLAN) access network (AN) in a wireless communication system, the method comprising:
- transmitting, to a user equipment (UE), an extensible authentication protocol (EAP) identity (ID) request message;
- receiving, from the UE, an EAP ID response message including a subscription concealed identifier (SUCI) in a network access identifier (NAI) format;
- transmitting, to a non-seamless wireless local area network (WLAN) offload (NSWO) function (NSWOF) entity, the EAP ID response message including the SUCI;
- receiving, from the NSWOF entity, an EAP request message;
- transmitting, to the NSWOF entity, the EAP response message;
- and
- receiving, from the NSWOF entity, an EAP success message and a master session key (MSK) key.
A non-seamless wireless local area network (WLAN) offload (NSWO) function (NSWOF) entity in a wireless communication system, the NSWOF entity comprising:
- a transceiver;
- and
- a controller configured to:
- receive, from a WLAN access network (AN), an extensible authentication protocol (EAP) identity (ID) response message including a subscription concealed identifier (SUCI) in a network access identifier (NAI) format,
- transmit, to an authentication server function (AUSF) entity, a first authentication request message including the SUCI and a NSWO indicator, wherein the NSWO indicator is used to indicate that the first authentication request message is for a NSWO,
- receive, from the AUSF entity, a first authentication response message including an EAP request message,
- transmit, to the AUSF entity, a second authentication request message including an EAP response message, and
- receive, from the AUSF entity, a second authentication response message including an EAP success message and a master session key (MSK) key, wherein the MSK key is based on the NSWO indicator.
A wireless local area network (WLAN) access network (AN) in a wireless communication system, the WLAN AN comprising:
- a transceiver;
- and
- a controller configured to:
- transmit, to a user equipment (UE), an extensible authentication protocol (EAP) identity (ID) request message,
- receive, from the UE, an EAP ID response message including a subscription concealed identifier (SUCI) in a network access identifier (NAI) format,
- transmit, to a non-seamless wireless local area network (WLAN) offload (NSWO) function (NSWOF) entity, the EAP ID response message including the SUCI,
- receive, from the NSWOF entity, an EAP request message,
- transmit, to the NSWOF entity, the EAP response message, and
- receive, from the NSWOF entity, an EAP success message and a master session key (MSK) key.
Dependencies are inferred from the claim text.