Network relay security

A wireless communication apparatus comprising at least one processor and a memory coupled to the at least one processor and storing instructions that, when executed by the at least one processor, cause the wireless communication apparatus to:

• transmit, to a third network device, a request message that includes an identifier associated with a first communication device;
• receive, from the third network device, a response message in response to the request message, wherein the response message indicates that the third network device cannot identify a relay key using the identifier;
• sending, due to the response message indicating that the third network device cannot identify the relay key using the identifier, a reject message to the first communication device, causing the first communication device to use a subscription concealed identifier (SUCI) to request a UE-to-network relay service.

A non-transitory computer readable program storage medium having code stored thereon, the code, when executed by at least one processor, causing the at least one processor to implement a method including:

• transmitting, to a third network device, a request message that includes an identifier associated with a first communication device;
• receiving, from the third network device, a response message in response to the request message, wherein the response message indicates that the third network device cannot identify a relay key using the identifier;
• sending, due to the response message indicating that the third network device cannot identify the relay key using the identifier, a reject message to the first communication device, causing the first communication device to use a subscription concealed identifier (SUCI) to request a UE-to-network relay service.