Authentication and authorization for localized services

The apparatus of claim 38, wherein the one or more processors are further configured to encode, for transmission to the home network via a connection to a web portal of a home network operator, the request related to information for access to the localized service.

The apparatus of claim 39, wherein the time-restricted credentials are received via the web portal.

The apparatus of claim 37, wherein the time-restricted credentials are received via a short message service (SMS) message.

The apparatus of claim 37, wherein the one or more processors are further configured to:

• select the hosting network when the UE arrives at a location where the localized service is to be provided.

The apparatus of claim 37, wherein establishing the connection with the hosting network is to cause the LSP to authenticate the UE.

The apparatus of claim 37, wherein the one or more processors are further configured to encode a request for a protocol data unit (PDU) session to access the localized service.

The apparatus of claim 37, wherein the access to the localized service includes accessing services of the home network using an over-the-top (OTT) connection with the home network in parallel with the access to the localized service.

The apparatus of claim 37, wherein the one or more processors are further configured to encode a request for release of the UE when the time-restricted credentials expire.

The apparatus of claim 37, wherein the time-restricted credentials include one or more of:

• a standalone non-public network (SNPN) identifier (ID), geographical coordinates of the hosting network, a UE ID, security credentials for accessing the home network, AKMA Anchor Key (KAKMA), data network name (DNN) for establishing a PDU Session in the hosting network, single network slice selection assistance information (S-NSSAI) for establishing a PDU Session in the hosting network, credentials for secondary authentication, and a time-based one-time passwords (TOTPs).