Pdu session modification for a subscriber entity

A method for enabling a subscriber entity to use a protocol data unit, PDU, session to access application services, the method being performed by a Session Management Function, SMF, entity, the method comprising:

• allowing the subscriber entity to use a PDU session to access a primary application service of a primary data network upon the PDU session with the primary data network being established for the subscriber entity;
• obtaining from the subscriber entity a request for the PDU session to be modified for the subscriber entity to use the PDU session to access a secondary application service with a different access control policy than the primary application servicedata;
• and in response thereto:
• allowing the subscriber entity to access the secondary application service upon having received verification that a secondary authentication with an Extensible Authentication Protocol, EAP, server for the already established PDU session has been performed for the subscriber entity and upon having verified that the subscriber entity is allowed to use the PDU session for accessing the secondary application service.

A subscriber entity for using a protocol data unit, PDU, session to access application services, the subscriber entity comprising processing circuitry the processing circuitry being configured to cause the subscriber entity to:

• access a primary application service of a primary data network using a PDU session by first requesting the PDU session with the primary data network to be established;
• provide a request to a Session Management Function, SMF, entity for the PDU session to be modified for the subscriber entity to use the PDU session to access a secondary application service with a different access control policy than the primary application servicedata;
• and in response thereto:
• perform a secondary authentication with an Extensible Authentication Protocol, EAP, server for the already established PDU session for the subscriber entity to access the secondary application service of the secondary data network.

A Session Management Function, SMF, entity for enabling a subscriber entity to use a protocol data unit, PDU, session to access application services, the SMF entity comprising processing circuitry the processing circuitry being configured to cause the SMF entity to:

• allow the subscriber entity to use a PDU session to access a primary application service of a primary data network upon the PDU session with the primary data network being established for the subscriber entity;
• obtain, from the subscriber entity a request for the PDU session to be modified for the subscriber entity to use the PDU session to access a secondary application service with a different access control policy than the primary application servicedata;
• and in response thereto:
• allow the subscriber entity to access the secondary application service upon having received verification that a secondary authentication with an Extensible Authentication Protocol, EAP, server for the already established PDU session has been performed for the subscriber entity and upon having verified that the subscriber entity is allowed to use the PDU session for accessing the secondary application service.