Subscription concealed identifier

A method, performed by a de-concealing server, for providing a subscription permanent identifier (SUPI) to an authentication server, the method comprising:

• receiving, from the authentication server, a subscription concealed identifier (SUCI) which comprises an encrypted part in which at least a part of the SUPI is encrypted, and a clear-text part which comprises a home network identifier and an encryption scheme identifier that identifies an encryption scheme used by a UE to encrypt the SUPI in the SUCI and which is supported by the de-concealing server;
• decrypting the encrypted part of the SUCI, using the encryption scheme indicated by the encryption scheme identifier to obtain the SUPI;
• and
• sending the SUPI to the authentication server.

A user equipment (UE) comprising:

• processing circuitry and memory circuitry, the memory circuitry containing instructions executable by the processing circuitry, wherein the UE is operative to:
• generate a subscription concealed identifier (SUCI) which comprises an encrypted part in which at least a part of a Subscription Permanent Identifier (SUPI) is encrypted, and a clear-text part which comprises a home network identifier and an encryption scheme identifier that identifies an encryption scheme used by the UE to encrypt the SUPI in the SUCI;
• and
• transmit the SUCI to an authentication server for forwarding of the SUCI to a de-concealing server capable of decrypting the SUPI.