# US 2026/0095960 A1 · Pdu session modification for a subscriber entity > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2026/0095960 A1 - Document ID: US20260095960A1 - Status: Published application - Kind: A1 - Application number: 19/113,198 - Filed: 2022-09-30 - Published: 2026-04-02 - Earliest claimed: 2022-09-30 - Assignees: Telefonaktiebolaget LM Ericsson (publ) - Applicants: Telefonaktiebolaget LM Ericsson (publ) - Inventors: Patrik SALMELA; Kazi Wali ULLAH; Patrik TEPPO; Abu Shohel AHMED - Web page: https://patentgrep.com/patent/US20260095960A1 ## CPC - H04W 76/10: Connection setup - H04W 76/12: Setup of transport tunnels - H04W 12/06: Authentication - H04W 12/08: Access security - H04W 76/22: Manipulation of transport tunnels - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract There is provided techniques for using a PDU session to access application services. A method is performed by a subscriber entity. The method includes accessing a primary application service of a primary data network using a PDU session by first requesting the PDU session with the primary data network to be established. The method includes providing a request to an SMF entity for the PDU session to be modified for the subscriber entity to use the PDU session to access a secondary application service with a different access control policy than the primary application service. The method includes, in response thereto, performing a secondary authentication with an EAP server for the already established PDU session for the subscriber entity to access the secondary application service of the secondary data network. ## Claims ### Claim 1 A method for using a protocol data unit, PDU, session to access application services, the method being performed by a subscriber entity, the method comprising: accessing a primary application service of a primary data network using a PDU session by first requesting the PDU session with the primary data network to be established; providing a request to a Session Management Function, SMF, entity for the PDU session to be modified for the subscriber entity to use the PDU session to access a secondary application service with a different access control policy than the primary application service; and in response thereto: performing a secondary authentication with an Extensible Authentication Protocol, EAP, server for the already established PDU session for the subscriber entity to access the secondary application service of the secondary data network ### Claim 2 (depends on 1) The method according to claim 1, wherein the secondary authentication is a further secondary authentication, and wherein a first secondary authentication is performed with the EAP server for accessing the primary application service. ### Claim 3 (depends on 1) The method according to claim 1, wherein the secondary application service is of a secondary data network. ### Claim 4 (depends on 3) The method according to claim 3, wherein the secondary data network is a sub-data network of the primary data network. ### Claim 5 (depends on 3) The method according to claim 3, wherein the request for the PDU session to be modified for the subscriber entity is provided in a PDU session modification request, wherein the PDU session modification request comprises an information element, IE, for at least holding information identifying the secondary data network. ### Claim 6 (depends on 5) The method according to claim 5, wherein the IE further holds information identifying that the secondary application service is requested to be accessed using the PDU session. ### Claim 7 A method for enabling a subscriber entity to use a protocol data unit, PDU, session to access application services, the method being performed by a Session Management Function, SMF, entity, the method comprising: allowing the subscriber entity to use a PDU session to access a primary application service of a primary data network upon the PDU session with the primary data network being established for the subscriber entity; obtaining from the subscriber entity a request for the PDU session to be modified for the subscriber entity to use the PDU session to access a secondary application service with a different access control policy than the primary application servicedata; and in response thereto: allowing the subscriber entity to access the secondary application service upon having received verification that a secondary authentication with an Extensible Authentication Protocol, EAP, server for the already established PDU session has been performed for the subscriber entity and upon having verified that the subscriber entity is allowed to use the PDU session for accessing the secondary application service. ### Claim 8 (depends on 7) The method according to claim 7, wherein the secondary authentication is a further secondary authentication, and wherein a first secondary authentication is performed with the EAP server for the subscriber entity. ### Claim 9 (depends on 7) The method according to claim 7, wherein the secondary application service is of a secondary data network. ### Claim 10 (depends on 7) The method according to claim 7, wherein the verification that the secondary authentication with the EAP server for the already established PDU session has been performed for the subscriber entity is received from the EAP server. ### Claim 11 (depends on 7) The method according to claim 7, wherein verifying that the subscriber entity is allowed to use the PDU session for accessing the secondary application service comprises the SMF entity to check policies for the PDU session. ### Claim 12 (depends on 11) The method according to claim 11, wherein the method further comprises: obtaining the policies from the EAP server. ### Claim at position 13 13-21. (canceled) ### Claim 22 A subscriber entity for using a protocol data unit, PDU, session to access application services, the subscriber entity comprising processing circuitry the processing circuitry being configured to cause the subscriber entity to: access a primary application service of a primary data network using a PDU session by first requesting the PDU session with the primary data network to be established; provide a request to a Session Management Function, SMF, entity for the PDU session to be modified for the subscriber entity to use the PDU session to access a secondary application service with a different access control policy than the primary application servicedata; and in response thereto: perform a secondary authentication with an Extensible Authentication Protocol, EAP, server for the already established PDU session for the subscriber entity to access the secondary application service of the secondary data network. ### Claim 23 (canceled) ### Claim 24 A Session Management Function, SMF, entity for enabling a subscriber entity to use a protocol data unit, PDU, session to access application services, the SMF entity comprising processing circuitry the processing circuitry being configured to cause the SMF entity to: allow the subscriber entity to use a PDU session to access a primary application service of a primary data network upon the PDU session with the primary data network being established for the subscriber entity; obtain, from the subscriber entity a request for the PDU session to be modified for the subscriber entity to use the PDU session to access a secondary application service with a different access control policy than the primary application servicedata; and in response thereto: allow the subscriber entity to access the secondary application service upon having received verification that a secondary authentication with an Extensible Authentication Protocol, EAP, server for the already established PDU session has been performed for the subscriber entity and upon having verified that the subscriber entity is allowed to use the PDU session for accessing the secondary application service. ### Claim at position 17 25-31. (canceled) ### Claim 32 (depends on 2) The method according to claim 2, wherein the secondary application service is of a secondary data network. ### Claim 33 (depends on 32) The method according to claim 32, wherein the secondary data network is a sub-data network of the primary data network. ### Claim 34 (depends on 32) The method according to claim 32, wherein the request for the PDU session to be modified for the subscriber entity is provided in a PDU session modification request, wherein the PDU session modification request comprises an information element, IE, for at least holding information identifying the secondary data network. ### Claim 35 (depends on 8) The method according to claim 8, wherein the secondary application service is of a secondary data network. ### Claim 36 (depends on 35) The method according to claim 35, wherein the verification that the secondary authentication with the EAP server for the already established PDU session has been performed for the subscriber entity is received from the EAP server. ### Claim 37 (depends on 35) The method according to claim 35, wherein verifying that the subscriber entity is allowed to use the PDU session for accessing the secondary application service comprises the SMF entity to check policies for the PDU session.