Technique for enabling exposure of information related to encrypted communication

A method for enabling exposure of information related to encrypted communication between a User Equipment (UE) and an application server in a mobile communication system, the mobile communication system comprising a network node configured to act as application layer proxy in the communication between the UE and the application server when a communication channel is established as part of an application layer communication channel between the UE and the application server, the communication channel being used to communicate encrypted traffic from the UE to the network node for further delivery to the application server, and the communication channel being used to exchange supplemental information related to the encrypted traffic between the UE and the network node, the method being performed by a first control plane node of the mobile communication system and comprising:

• receiving a capability indication from the network node for use in selecting a network node acting as application layer proxy for the communication between the UE and the application server, the capability indication indicating that the network node supports acting as application layer proxy, wherein the encrypted traffic corresponds to QUIC protocol based traffic exchanged between the UE and the application server, wherein the supplemental information comprises information indicating one or more QUIC connections which are associated with an application identifier indicating an application which originates the encrypted traffic on the UE.

A method for enabling exposure of information related to encrypted communication between a User Equipment (UE) and an application server in a mobile communication system, the mobile communication system comprising a network node configured to act as application layer proxy in the communication between the UE and the application server when a communication channel is established as part of an application layer communication channel between the UE and the application server, the communication channel being used to communicate encrypted traffic from the UE to the network node for further delivery to the application server, and the communication channel being used to exchange supplemental information related to the encrypted traffic between the UE and the network node, the method being performed by a second control plane node of the mobile communication system and comprising:

• providing, to a first control plane node, an indication of a requirement that a network node handling the communication between the UE and the application server is to support acting as application layer proxy, wherein the encrypted traffic corresponds to QUIC protocol based traffic exchanged between the UE and the application server, wherein the supplemental information comprises information indicating one or more QUIC connections which are associated with an application identifier indicating an application which originates the encrypted traffic on the UE.

A User Equipment (UE) for enabling exposure of information related to encrypted communication between the UE and an application server in a mobile communication system, the UE comprising:

• at least one processor;
• and
• at least one memory, the at least one memory containing instructions executable by the at least one processor such that the UE is operable to:
• establish a communication channel with a network node of the mobile communication system, the communication channel being established as part of an application layer communication channel between the UE and the application server, wherein the network node acts as application layer proxy in communication between the UE and the application server;
• and
• send encrypted traffic through the communication channel to the network node for further delivery to the application server, wherein the communication channel is used to exchange supplemental information related to the encrypted traffic between the UE and the network node, wherein the encrypted traffic corresponds to QUIC protocol based traffic exchanged between the UE and the application server, wherein the supplemental information comprises information indicating one or more QUIC connections which are associated with an application identifier indicating an application which originates the encrypted traffic on the UE.

A computing unit configured to execute a network node of a mobile communication system for enabling exposure of information related to encrypted communication between a User Equipment (UE) and an application server in the mobile communication system, the computing unit comprising:

• at least one processor;
• and
• at least one memory, the at least one memory containing instructions executable by the at least one processor such that the network node is operable to:
• establish, upon request of the UE, a communication channel with the UE, the communication channel being established as part of an application layer communication channel between the UE and the application server, wherein the network node acts as application layer proxy in communication between the UE and the application server;
• and
• receive encrypted traffic through the communication channel from the UE for further delivery to the application server, wherein the communication channel is used to exchange supplemental information related to the encrypted traffic between the UE and the network node, wherein the encrypted traffic corresponds to QUIC protocol based traffic exchanged between the UE and the application server, wherein the supplemental information comprises information indicating one or more QUIC connections which are associated with an application identifier indicating an application which originates the encrypted traffic on the UE.