Non-3gpp access authentication
AssigneeNokia Technologies Oy
InventorsSaurabh KHARE, Ranganathan MAVUREDDI DHANASEKARAN
Life of this patent
Estimating the term…
Abstract
Various embodiments provide methods and related devices for non-3GPP access authentication. According to one embodiment, a method performed by a user equipment (UE) comprises transmitting, to a wireless access node in a wireless access network, a request message for access authentication comprising a concealed identity of the UE in a decorated network access identifier, NAI, format in which a username of the concealed identity of the UE in a NAI format is concatenated with a visited public land mobile network, VPLMN, identifier of a VPLMN serving the UE.
Claims17
A user equipment, UE, comprising:
- one or more processors;
- and
- one or more memories storing instructions that, when executed by the one or more processors, cause the UE to:
- transmit, to a wireless access node in a wireless access network, a request message for access authentication comprising a concealed identity of the UE in a decorated network access identifier, NAI, format in which a username of the concealed identity of the UE in a NAI format is concatenated with a visited public land mobile network, VPLMN, identifier of a VPLMN serving the UE.
A first network entity, comprising:
- one or more processors;
- and
- one or more memories storing instructions that, when executed on the one or more processors, cause the first network entity to:
- receive, from a wireless access node in a wireless access network, a first message comprising a concealed identity of a UE to be authenticated in a decorated network access identifier, NAI, format in which a username of the concealed identity of the UE in a NAI format is concatenated with a visited public land mobile network, VPLMN, identifier of a VPLMN serving the UE;
- obtain the VPLMN identifier from a realm part of the concealed identity;
- and
- send, to a network entity for authentication server function, a request message for authentication comprising the concealed identity of the UE and the obtained VPLMN identifier.
A second network entity, comprising:
- one or more processors;
- and
- one or more memories storing instructions that, when executed on the one or more processors, cause the second network entity to:
- receive, from a network entity for authentication server function, a request message for authentication credential comprising a concealed identity of a UE to be authenticated in a decorated network access identifier, NAI, format in which a username of the concealed identity of the UE in a NAI format is concatenated with a visited public land mobile network, VPLMN, identifier of a VPLMN serving the UE;
- de-conceal the concealed identity of the UE to obtain the VPLMN identifier and a first identity of the UE;
- determine whether the de-concealed VPLMN identifier is same as the VPLMN identifier in a realm part of the concealed identity of the UE;
- and
- in response to the determination that the de-concealed VPLMN identifier is same as the VPLMN identifier in the realm part, send, to the network entity for authentication server function, a response message for authentication comprising a generated authentication vector and the first identity of the UE.
Dependencies are inferred from the claim text.