User equipment authentication for applications

An apparatus comprising:

• at least one memory;
• and
• at least one processor coupled with the at least one memory and configured to cause the apparatus to:
• generate a first request message including a key identifier corresponding to a user equipment (UE) and an application function identifier;
• transmit, to an authentication and key management for applications anchor function, the first request message;
• receive, from the authentication and key management for applications anchor function, a first response message including an authentication vector;
• generate a second request message including the application vector;
• transmit, to the UE, the second request message;
• receive, from the UE, a second response message including a challenge result;
• transmit, to the authentication and key management for applications anchor function, a third request message for an application key;
• and
• receive, from the authentication and key management for applications anchor function, a third response message including the application key or a failure indication.

A user equipment (UE) for wireless communication, comprising:

• at least one memory;
• and
• at least one processor coupled with the at least one memory and configured to cause the UE to:
• generate a first request message to establish an application session with an application function on an apparatus, the first request message including a key identifier corresponding to the UE, the key identifier identifying an authentication and key management for applications anchor key corresponding to the UE and having been previously generated based on communication with an authentication server function;
• transmit, to the application function, the first request message;
• receive, from the application function, a second request message including an authentication vector;
• generate a challenge result based on the authentication and key management for applications anchor key and the authentication vector and generate a first response message including the challenge result;
• transmit, to the application function, the first response message;
• and
• receive, from the application function message, a second response including an authorization result indicating failure or success of the first request message.

A processor for wireless communication, comprising:

• at least one controller coupled with at least one memory and configured to cause the processor to:
• generate a first request message to establish an application session with an application function on an apparatus, the first request message including a key identifier corresponding to a user equipment (UE), the key identifier identifying an authentication and key management for applications anchor key corresponding to the UE and having been previously generated based on communication with an authentication server function;
• transmit, to the application function, the first request message;
• receive, from the application function, a second request message including an authentication vector;
• generate a challenge result based on the authentication and key management for applications anchor key and the authentication vector and generate a first response message including the challenge result;
• transmit, to the application function, the first response message;
• and
• receive, from the application function message, a second response including an authorization result indicating failure or success of the first request message.