Systems and methods for secure roaming network steering

A non-transitory computer-readable storage medium, storing a plurality of processor-executable instructions to:

• receive, from a particular User Equipment (“UE”) registered with a first network as a home network of the particular UE, a request to access a second network that is a roaming network with respect to the particular UE, wherein the request includes a network identifier associated with the first network;
• subscribe to an element of the first network, based on the network identifier included in the request, for access parameters associated with the particular UE and the second network;
• receive, from the element of the first network and based on the subscribing, a first set of access parameters associated with access by the particular UE to the second network, wherein the first set of access parameters are provided by the first network with authentication information associated with the first network;
• output the first set of access parameters and the authentication information to the particular UE, wherein the particular UE:
• verifies the first set of access parameters based on the authentication information,
• selects one or more access parameters of the verified first set of access parameters, and
• requests a communication session establishment with the second network in accordance with the selected one or more access parameters of the verified first set of access parameters;
• receive, from the first network and after receiving the first set of access parameters, a second set of access parameters associated with the particular UE, wherein the first network updates UE information, maintained by the first network, to indicate that the particular UE is associated with the second set of access parameters when connected to the second network, and wherein the element of the first network further automatically pushes the second set of access parameters to the second network based on the subscribing;
• and
• modify access, of the particular UE, to the second network based on the second set of access parameters.

A method performed by a device, the method comprising:

• receiving, from a particular User Equipment (“UE”) registered with a first network as a home network of the particular UE, a request to access a second network that is a roaming network with respect to the particular UE, wherein the request includes a network identifier associated with the first network;
• subscribing to an element of the first network, based on the network identifier included in the request, for access parameters associated with the particular UE and the second network;
• receiving, from the element of the first network and based on the subscribing, a first set of access parameters associated with access by the particular UE to the second network, wherein the first set of access parameters are provided by the first network with authentication information associated with the first network;
• outputting the first set of access parameters and the authentication information to the particular UE, wherein the particular UE:
• verifies the first set of access parameters based on the authentication information,
• selects one or more access parameters of the verified first set of access parameters, and
• requests a communication session establishment with the second network in accordance with the selected one or more access parameters of the verified first set of access parameters;
• receiving, from the first network and after receiving the first set of access parameters, a second set of access parameters associated with the particular UE, wherein the first network updates UE information, maintained by the first network, to indicate that the particular UE is associated with the second set of access parameters when connected to the second network, and wherein the element of the first network further automatically pushes the second set of access parameters to the second network based on the subscribing;
• and
• modifying access, of the particular UE, to the second network based on the second set of access parameters.