# US 12,764,532 B2 · User equipment authentication and authorization procedure for edge data network

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,764,532 B2
- Document ID: US12764532B2
- Status: Granted
- Kind: B2
- Application number: 18/546,809
- Filed: 2021-02-19
- Published: 2024-04-25
- Granted: 2026-10-13
- Earliest claimed: 2021-02-19
- Assignees: Apple Inc.
- Applicants: Apple Inc.
- Inventors: Shu Guo; Dawei Zhang; Haijing Hu; Hao Duo; Huarui Liang; Lanpeng Chen; Mona Agnel; Ralf Rossbach; Sudeep Manithara Vamanan; Xiaoyu Qiao
- Web page: https://patentgrep.com/patent/US12764532B2

## CPC

- H04W 12/069: using certificates or pre-shared keys
- H04L 9/3242: {involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC}
- H04W 12/106: Packet or message integrity
- H04W 12/71: Hardware identity
- H04W 12/72: Subscriber identity
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A user equipment (UE) may attempt to access an edge data network. The UE generates a first credential based on a second credential that was generated for a procedure between the UE and a network. The UE then generates an identifier corresponding to the first credential and generates a message authentication code based on the first credential and a count, wherein the count is associated with an identifier of an edge network client running on the UE. The UE then transmits an application registration request, message to a server associated with an edge data network, the application registration request message including the count, the message authentication code, the identifier corresponding to the first credential, and a public land mobile network identifier (PLMN ID) of the network. The UE then receives an authentication accept message or an authentication reject message from the server associated with the edge data network.

## Claims

### Claim 1

A user equipment (UE), comprising:
a transceiver configured to communicate with a network; and
a processor communicatively coupled to the transceiver and configured to perform operations comprising:
generating a first credential based on a second credential, the second credential generated for a procedure between the UE and a cellular network;
generating an identifier corresponding to the first credential;
generating a message authentication code based on the first credential and a count, wherein the count is associated with an identifier of an edge network client running on the UE;
transmitting an application registration request message to a server associated with an edge data network, the application registration request message including the count, the message authentication code, the identifier corresponding to the first credential, and a public land mobile network identifier (PLMN ID) of the network; and
receiving an authentication accept message or an authentication reject message from the server associated with the edge data network.

### Claim 2 (depends on 1)

The UE of claim 1, wherein the second credential is generated for a primary authentication procedure including an authentication server function (AUSF), and wherein the second credential is KAUSF.

### Claim 3 (depends on 1)

The UE of claim 1, wherein the first credential is further based on an identifier associated with the UE or other shared information between the UE and the cellular network.

### Claim 4 (depends on 3)

The UE of claim 3, wherein the identifier associated with the UE is one of a subscription permanent identifier (SUPT) or a generic public subscription identifier (GPSI).

### Claim 5 (depends on 1)

The UE of claim 1, wherein the operations further comprise:
generating a mapping relationship between the count and the identifier associated with the edge network client.

### Claim 6 (depends on 5)

The UE of claim 5, wherein the UE stores a plurality of identifiers associated with the edge network client, and wherein the count is a corresponding plurality of counts, and wherein the operations further comprise:
generating mapping relationships between each of the plurality of counts and each of the plurality of identifiers associated with the edge network client.

### Claim 7 (depends on 6)

The UE of claim 6, wherein the operations further comprise:
generating a new count for each of the plurality of counts that has been utilized a predetermined number of times; and
updating the mapping relationship between the plurality of counts and the plurality of identifiers associated with the edge network client to include the new count.

### Claim 8 (depends on 1)

The UE of claim 1, wherein the server associated with the edge data network is an edge configuration server (ECS).