Authenticating a device not having a subscription in a network

An authentication server function (AUSF) in a standalone non-public network (SNPN), the AUSF comprising:

• a memory;
• and
• a processor with the memory and configured to cause the AUSF to:
• receive a registration request message for a user equipment (UE), wherein the UE does not have a subscription with the SNPN;
• determine a service provider of the UE;
• transmit an authentication request message to an authentication, authorization and accounting (AAA) server of the service provider, and
• receive an authentication response message from the AAA server in response to a successful authentication of the UE, the authentication response message comprising a master session key (MSK);
• and
• derive a set of security keys using the MSK.

A non-transitory computer-readable medium storing code for wireless communication, the code comprising instructions executable by one or more processors to:

• receive a registration request message for a user equipment (UE), wherein the UE does not have a subscription with a standalone non-public network (SNPN);
• determine a service provider of the UE;
• transmit an authentication request message to an authentication, authorization and accounting (AAA) server of the service provider, and
• receive an authentication response message from the AAA server in response to a successful authentication of the UE, the authentication response message comprising a master session key (MSK);
• and
• derive a set of security keys using the MSK.