Invention titles: core network nodes, access mobility management devices, and communication methods.
Technical field
[0001]
This disclosure relates to an access mobility management device, a core network node, a control method, and a communication method.
Background technology
[0002]
In the telecommunications industry, we are working on a new generation network called the 5th generation (5G) network. Activities have been initiated by multiple research standards bodies to develop a 5G network that provides services to multiple vertical service providers and services to a variety of terminals. In particular, the 3GPP (3rd Generation Partnership Project) is studying next-generation communication technology and system architecture for 5G networks, which are next-generation mobile communication systems. In particular, in 3GPP, 5GS (5G System) is specified as a system for realizing a 5G mobile communication system. The specifications of 5GS are disclosed in, for example, Non-Patent Document 1, Non-Patent Document 2, and Non-Patent Document 3.
[0003]
For example, as one of the main features of 5GS, the specification of network slicing technology is being promoted.
[0004]
A network slice is a collection of logical network functions and resources that realize communication services in a specific use case. Network slicing is the process of dividing one physical network into multiple slices.
[0005]
Non-Patent Document 1 describes a process in which a wireless terminal (UE; User Equipment) uses S-NSSAI (Single Network Slice Selection Assistance information).
[0006]
S-NSSAI may be composed of SST (Slice / Service type) and SD (Slice Differentiator). Further, S-NSSAI may be composed only of SST. Note that the SST may indicate the function or service aspect of the network slice, and the SD may be complementary information used to identify the network slice indicated by the same SST.
[0007]
A network slice instance includes a control plane (c-plane; cp) function and a user plane (u-plane; up) function described in Non-Patent Document 1. It is the actual situation of.
[0008]
Regarding the relationship between S-NSSAI and network slice instances, multiple different S-NSSAIs may be associated with one network slice instance. Further, one S-NSSAI may be associated with one network slice instance, or may be associated with a plurality of different network slice instances. For the network, select an appropriate network slice instance using S-NSSAI or the like. The function of selecting a network slice instance is described in Section 5.15 of Non-Patent Document 1. The network slice instance selected here provides the UE with a service specialized for the network slice.
[0009]
NSSAI (Network Slice Selection Assistance Information) is a collection of S-NSSAI. In addition, NSSAI has five modes of NSSAI: Configured NSSAI, Rejected NSSAI, Allowed NSSAI, Requested NSSAI, and Subscribed NSSAI.
[0010]
Requested NSSAI includes one or more S-NSSAI sent by the UE to the network. Allowed NSSAI includes one or more S-NSSAIs that the network permits for use. Rejected NSSAI includes S-NSSAI that the network refuses to use, and each S-NSSAI contained in Rejected NSSAI has a cause value associated with it. Configured NSSAI includes one or more S-NSSAI indicated in the UE as applicable to one or more PLMNs (Public land mobile networks). Subscribed NSSAI is S-NSSAI based on subscriber information, and Subscribed NSSAI may be set for each PLMN on the assumption that the UE moves to another PLMN.
[0011]
Furthermore, 3GPP is studying a network slice-specific authentication and authorization (NSSAA) function specialized for network slices. Details of the NSSAA procedure are described in Section 5.15 of Non-Patent Document 1. As described in Non-Patent Document 1, the NSSAA procedure is initiated by the network, and finally the network notifies the UE of the result of NSSAA. The UE will be controlled from the network whether access to the network slice is allowed based on the result of NSSAA.
Prior art literature
Non-patent literature
[0012]
Non-Patent Document 1: 3GPP TS 23.501 V16.1.0 (2019-06)
Non-Patent Document 2: 3GPP TS 23.502 V16.1.1 (2019-06)
Non-Patent Document 3: 3GPP TS 24.501 V16.1.0 (2019-06)
Outline of the invention
Problems to be solved by the invention
[0013]
When a telecommunications carrier requests an NSSAA procedure for a UE that uses a network slice, each of the UE, 5GS core network, and security device related to the network slice must support the NSSAA procedure. However, if the security device for the UE and network slice has the NSSAA function and the 5GS core network does not support the NSSAA function, even though the carrier requires the NSSAA procedure, the NSSAA There is a problem that the procedure is not executed normally. Specifically, if the core network node does not support the NSSAA function, it cannot interpret the instruction to execute the NSSAA procedure for the UE, so it cannot determine whether to execute the NSSAA procedure. Therefore, in this case, if the core network node can normally execute processing other than the NSSAA procedure, the core network node allows the UE to access the network slice without determining whether or not the NSSAA procedure needs to be executed. Therefore, even if the UE has the NSSAA function, the UE is allowed to access the network slice without executing the NSSAA procedure.
[0014]
An object of the present disclosure is to provide an access mobility management device, a core network node, a control method, and a communication method capable of appropriately determining accessability to a network slice in order to solve the above problems. ..
Means to solve problems
[0015]
Access mobility management is the first information indicating whether the core network node according to one aspect of the present disclosure supports the network slice-specific authentication and authorization (NSSAA) function. Of the information indicating the receiving means received from the device and the network slice associated with a certain subscriber information, the second information indicating the network slice corresponding to the first information is transmitted to the access mobility management device. Means and.
[0016]
The core network contains first information indicating whether or not the access mobility management device according to one aspect of the present disclosure supports a network slice-specific authentication and authorization (NSSAA) function. Receives from the transmission means to be transmitted to the node and the second subscriber information indicating the network slice corresponding to the first information among the information indicating the network slice associated with a certain subscriber information from the core network node. The receiving means and the receiving means are provided.
[0017]
The core network node according to one aspect of the present disclosure is a receiving means for receiving a request for selecting an access mobility management device from the first access mobility management device, and authentication specialized for a network slice in response to the request. And a transmission means for transmitting information indicating a second access mobility management device that supports the NSSAA (Network Slice-Specific Authentication and Authorization) function to the first access mobility management device.
[0018]
The communication method according to one aspect of the present disclosure provides first information indicating whether or not the network slice-specific authentication and authorization (NSSAA) function is supported by the access mobility management device. Of the information indicating the network slice associated with a certain subscriber information, the second information indicating the network slice corresponding to the first information is transmitted to the access mobility management device.
The invention's effect
[0019]
According to the present disclosure, it is possible to provide an access mobility management device, a core network node, a control method, and a communication method that can appropriately determine whether or not access to a network slice is possible.
A brief description of the drawing
[0020]
FIG. 1 is a configuration diagram of an access mobility management device according to the first embodiment.
FIG. 2 is a configuration diagram of a core network node according to the first embodiment.
FIG. 3 is a configuration diagram of a communication system according to the second embodiment.
FIG. 4 is a configuration diagram of a UDM according to the second embodiment.
FIG. 5 is a diagram showing a flow of Registration processing according to the second embodiment.
FIG. 6 is a diagram showing parameters indicating that the NSSAA function according to the second embodiment is supported.
FIG. 7 is a diagram showing parameters indicating that the NSSAA function according to the second embodiment is supported.
FIG. 8 is a configuration diagram of a core network node according to the third embodiment.
FIG. 9 is a block diagram of the NSSF according to the third embodiment.
FIG. 10 is a diagram showing a flow of AMF re-allocation processing according to the third embodiment.
FIG. 11 is a diagram showing a flow of AMF re-allocation processing according to the third embodiment.
FIG. 12 is a configuration diagram of an apparatus according to each embodiment.
Embodiment for carrying out the invention
[0021]
(Aspect 1)
Hereinafter, embodiments of the present invention will be described with reference to the drawings. A configuration example of the access mobility management device 10 according to the first embodiment will be described with reference to FIG. The access mobility management device 10 may be a computer device operated by the processor executing a program stored in the memory.
[0022]
The access mobility management device 10 has a communication unit 11 and a control unit 12. The communication unit 11 and the control unit 12 execute processing by the processor executing a program stored in the memory.It may be software or a module to be used. Alternatively, the communication unit 11 and the control unit 12 may be hardware such as a circuit or a chip.
[0023]
The communication unit 11 is a functional unit for the access mobility management device 10 to connect to another core network node. Further, the communication unit 11 is a functional unit for connecting to an access network and connecting to a wireless terminal via the access network. In other words, the access mobility management device 10 can send and receive user data and control information to and from the device in the access network and other core networks via the communication unit 11.
[0024]
The core network is a network included in the communication system. The communication system also includes, for example, an access network. The wireless terminal communicates with or connects with the access mobility management device 10 or the core network node 15 arranged in the core network via the access network.
[0025]
The communication unit 11 transmits information indicating whether or not the NSSAA function is supported to the core network node 15. The NSSAA procedure is a network slice-specific authentication and authorization procedure performed by a security device for a wireless terminal that requests the use of the network slice for each network slice. The security device may be, for example, an AAA (Authentication Authorization Accounting) server or a Radius server. The wireless terminal may be, for example, a mobile phone terminal, a smartphone terminal, or a tablet terminal. Further, the wireless terminal may be an IoT (Internet of Things) terminal or an MTC (Machine Type Communication) terminal. The core network node 15 may be a device that manages subscriber information or a device that has a function of selecting an access mobility management device 10.
[0026]
The function related to the NSSAA procedure may be to recognize the parameters required for the NSSAA procedure and execute the processing associated with the recognized parameters. The function related to the NSSAA procedure is, for example, even if the communication unit 11 receives a message including the capability information capable of executing the NSSAA procedure from another device, and reads the capability information from the received message. good. Further, the function related to the NSSAA procedure may be to transmit the received capability information to another device. For example, the communication unit 11 may receive the capability information from the wireless terminal or the core network node 15 and transmit the capability information to the wireless terminal or the core network node 15. Further, the function related to the NSSAA procedure may be to read the identification information of the network slice from the received message when the message including the identification information for identifying the network slice in which the NSSAA procedure is required is received. The communication unit 11 may receive the identification information of the network slice that requires the NSSAA procedure from the core network node 15. Further, the function related to the NSSAA procedure may be to transmit the identification information of the network slice that requires the NSSAA procedure to the wireless terminal.
[0027]
The communication unit 11 receives information about the network slice corresponding to the information indicating whether or not the NSSAA function is supported from the core network node 15. The information about the network slice corresponding to the information indicating whether or not the NSSAA function is supported corresponds to the information indicating whether or not the NSSAA function is supported. In other words, the information about the network slice corresponding to the information indicating whether or not the NSSAA function is supported is specified or changed depending on the information indicating whether or not the NSSAA function is supported.
[0028]
The information about the network slice corresponding to the information indicating whether or not the NSSAA function is supported may be, for example, the information indicating the network slice to which the wireless terminal is subscribed. Alternatively, the information about the network slice corresponding to the information indicating whether or not the NSSAA function is supported may be the information indicating the network slice requesting the NSSAA procedure.
[0029]
The control unit 12 is a functional unit for controlling the access mobility management device 10, and by reading and executing various information and programs stored in the memory, various processes of the entire access mobility management device 10 can be performed. Realize.
[0030]
The control unit 12 determines whether or not to permit the use of the network slice based on the information about the network slice corresponding to the information indicating whether or not the NSSAA function is supported. Determining whether to allow use also includes identifying network slices that are permitted to be used, network slices that are not permitted to be used, and network slices that are suspended from use. The network slice whose use is suspended may be a network slice whose use by a wireless terminal is determined in the NSSAA procedure.
[0031]
Subsequently, a configuration example of the core network node 15 according to the first embodiment will be described with reference to FIG. The core network node 15 may be a computer device operated by the processor executing a program stored in the memory. The core network node 15 has a communication unit 16. The communication unit 16 may be software or a module whose processing is executed by the processor executing a program stored in the memory. Alternatively, the communication unit 16 may be hardware such as a circuit or a chip.
[0032]
The communication unit 16 receives information indicating whether or not the NSSAA function is supported from the access mobility management device 10. Further, the communication unit 16 identifies information about the network slice corresponding to the information indicating whether or not the NSSAA function is supported. Then, the communication unit 16 transmits information about the specified network slice to the access mobility management device 10. For example, when the communication unit 16 receives the information indicating that the NSSAA function is supported, the communication unit 16 may identify the information regarding the network slice that requires the NSSAA and transmit it to the access mobility management device 10. Alternatively, when the communication unit 16 receives information that does not indicate that it supports the NSSAA function, the communication unit 16 may control not to send information about the network slice that requires NSSAA to the access mobility management device 10.
[0033]
As described above, the access mobility management device 10 provides information indicating whether or not the core network node 15 supports the network slice-specific authentication and authorization (NSSAA) function. It receives and transmits the information about the network slice corresponding to the information to the access mobility management device 15. For example, the core network node 15 can control the access mobility management device 10 that does not support the NSSAA function so as not to transmit information about a network slice that requires the NSSAA function. As a result, the core network node 15 can appropriately determine whether or not access to the network slice is possible even if the access mobility device 10 does not have the NSSAA function.
Further, the access mobility management device 10 can transmit information indicating whether or not the NSSAA function is supported. Further, the access mobility management device 10 receives information about the network slice corresponding to the information indicating whether or not the NSSAA function is supported from the core network node 15. The information about the network slice corresponding to the information indicating whether or not the NSSAA function is supported is set according to the information indicating whether or not the access mobility management device 10 supports the NSSAA function.
[0034]
From this, since the access mobility management device 10 receives the information set according to whether or not the NSSAA function is supported, it is possible to appropriately determine whether or not the wireless terminal can access the network slice. For example, if the access mobility management device 10 does not support the NSSAA function, the access mobility management device 10 receives information about a network slice that does not require the NSSAA function, which is set according to the fact that the NSSAA function is not supported. Since it is only necessary to receive information that can appropriately determine accessability without using the above, the desired accessability determination can be realized.
[0035]
(Implementation mode 2)
Subsequently, a configuration example of the communication system according to the second embodiment will be described with reference to FIG. The communication system of FIG. 3 includes a UE 20, an AMF (Access and Mobility management Function) entity 30 (hereinafter referred to as AMF30), a UDM (Unified Data Management) entity 40 (hereinafter referred to as UDM40), and an NSSF (Network Slice Selection Function). ) Entity 50 (hereinafter referred to as NSSF50). The UE 20 corresponds to a wireless terminal. The AMF 30 corresponds to the access mobility management device 10 of FIG. Further, UDM40 and NSSF50 correspond to core network nodes.
[0036]
The core network is a network including at least AMF30, UDM40, and NSSF50. Each of AMF30, UDM40, and NSSF50 may be referred to as a core network node or a core network device. When the core network sends and receives messages and / or performs procedures, it means that devices in the core network send and receive messages and / or perform procedures.
[0037]
The access network is a wireless network that connects the UE and the core network. The access network may be a 3GPP network or a non-3GPP network. The 3GPP network may be NG- (R) AN. The access network node refers to at least a part of gNB and ng-eNB, and may be referred to as an NG- (R) AN node or an NG- (R) AN device. The fact that the NG- (R) AN executes the message transmission / reception and / or the procedure means that the device in the NG- (R) AN executes the message transmission / reception and / or the procedure. The gNB may be a gNB having an NR (New Radio) function constituting the NG- (R) AN. The ng-eNB may be an eNB having an E-UTRA (Evolved Universal Terrestrial Radio Access) function constituting the NG- (R) AN.
[0038]
AMF30 manages access, mobility, etc. related to UE20. The UDM40 manages subscriber information about the AMF30. The NSSF 50 selects an AMF that manages the access and mobility of the UE 20. Specifically, the NSSF 50 may identify at least one candidate AMF in the re-allocation of AMF or the selection or reselection of AMF.
[0039]
UE20 holds Configured NSSAI for each application. UE20 is S-N used in Serving PLMN Requested NSSAI including SSAI is transmitted to AMF30 in the Registration procedure. The UDM40 holds a Subscribed NSSAI including an S-NSSAI that can be provided to the UE 20. AMF30 acquires Subscribed NSSAI from UDM40. In addition, AMF30 uses Requested NSSAI and Subscribed NSSAI to determine Allowed NSSAI or Rejected NSSAI. The AMF 30 transmits the determined Allowed NSSAI or Rejected NSSAI to the UE 20.
[0040]
Subsequently, a configuration example of the UDM 40 will be described with reference to FIG. The UDM40 may be a computer device in which the processor operates by executing a program stored in the memory.
[0041]
The UDM 40 has a communication unit 41 and a control unit 42. The communication unit 41 and the control unit 42 may be software or modules whose processing is executed by the processor executing a program stored in the memory. Alternatively, the communication unit 41 and the control unit 42 may be hardware such as a circuit or a chip.
[0042]
The communication unit 41 receives information from the AMF 30 indicating whether or not the AMF 30 supports the NSSAA function.
[0043]
The control unit 42 determines whether or not the AMF 30 supports the NSSAA function by using the received information. For example, when the communication unit 41 receives information from the AMF 30 that directly or explicitly indicates whether or not the NSSAA function is supported, the control unit 42 determines according to the information directly or explicitly indicated. do. Here, the communication unit 41 may receive a message from the AMF 30 that does not directly indicate whether or not the NSSAA function is supported. In such a case, the control unit 42 may determine that the AMF 30 does not support the NSSAA function. That is, in such a case, it can be said that the communication unit 41 has received information indirectly or implicitly indicating whether or not the NSSAA function is supported. Information that directly or explicitly indicates that the NSSAA function is supported is also expressed as an indicator that the NSSAA function is supported. Information that directly or explicitly indicates that the NSSAA function is not supported is also expressed as an indicator that the NSSAA function is not supported. In addition, the information indirectly or implicitly indicating whether or not the NSSAA function is supported is also expressed as information that does not include an indicator indicating that the NSSAA function is supported.
[0044]
The operation when the control unit 42 determines that the AMF 30 supports the NSSAA function will be described. In this case, one or more S-NSSAI indicating a network slice requesting the NSSAA procedure may be transmitted to the AMF 30 via the communication unit 41 together with the Subscribed NSSAI. S-NSSAI is used as identification information for identifying network slices. Alternatively, the control unit 42 may transmit a subscribed NSSAI including only the S-NSSAI indicating the network slice requesting the NSSAA procedure to the AMF 30 via the communication unit 41. Alternatively, the control unit 42 includes S-NSSAI and Subscribed NSSAI including at least one S-NSSAI indicating a network slice that requires an NSSAA procedure and one or more S-NSSAI indicating a network slice that does not require an NSSAA procedure. May be transmitted to the AMF 30 via the communication unit 41.
[0045]
Next, the operation when the control unit 42 determines that the AMF 30 does not support the NSSAA function will be described. In this case, the control unit 42 does not have to provide the S-NSSAI indicating the network slice requesting the NSSAA procedure to the AMF 30 as a Subscribed NSSAI. For example, the control unit 42 may transmit the Subscribed NSSAI to the AMF 30 without deleting, excluding, or including the S-NSSAI indicating the network slice requesting the NSSAA procedure from the Subscribed NSSAI. If all the network slices indicated by the S-NSSAI included in the Subscribed NSSAI require the NSSAA procedure, the control unit 42 does not have to provide the Subscribed NSSAI to the AMF30 or provides an empty Subscribed NSSAI to the AMF30. You may. That is, the control unit 42 notifies the AMF 30 of only the S-NSSAI indicating the network slice that does not require the NSSAA procedure among the network slices to which the UE 20 is subscribed. As a result, if the AMF30 does not support the NSSAA function, it is possible to prevent the UE 20 supporting the NSSAA procedure from being allowed access to the network slice requesting the NSSAA procedure without performing the NSSAA procedure. can.
[0046]
Subsequently, the flow of the Registration process according to the second embodiment will be described with reference to FIG. Here, it is assumed that the UE 20, AMF 30, and UDM 40 support the NSSAA function. Further, it is assumed that the UE 20 and the AMF 30 support the functions related to the NSSAA procedure.
[0047]
The UE 20 supporting the function related to the NSSAA procedure may be capable of executing the NSSAA procedure with the security device arranged in the network slice. Further, the fact that the UE 20 supports the function related to the NSSAA procedure may mean that the ability information indicating that the NSSAA procedure can be executed can be notified to the AMF 30.
[0048]
First, the UE 20 sends a Registration Request to the AMF 30 (S11). Registration Request includes Requested NSSAI. In addition, the Registration Request contains information indicating that the UE 20 can perform the NSSAA procedure. Information indicating that the UE 20 can perform the NSSAA procedure may be shown as capability information of the UE 20.
[0049]
Next, the authentication process related to the UE 20 is executed between the UE 20, the AMF 30, and the UDM 40 (S12). Here, it is assumed that the UE 20 is authenticated as a UE that can use 5GS.
[0050]
Next, AMF30 transmits Nudm_UECM_Registration to UDM40 (S13). Step S13 is performed to register the AMF 30 with the UDM 40.
[0051]
Since AMF30 supports NSSAA function, Nudm_UECM_Registration includes a parameter indicating that AMF30 supports NSSAA function. A parameter indicating that the NSSAA function is supported may be paraphrased as an indicator indicating that the NSSAA function is supported.
[0052]
The parameters indicating that the NSSAA function is supported will be described with reference to FIGS. 6 and 7.
[0053]
FIG. 6 shows a list of parameters set in Nudm_UECM_Registration. The table shown in FIG. 6 is based on the table shown in 3GPP TS 29.503 V16.0.0 (2019-06). In the table shown in FIG. 6, some parameters are omitted from the table shown in 3GPP TS 29.503 V16.0.0 (2019-06).
[0054]
The table shown in FIG. 6 includes Nssaasupportindicator as a parameter. When Nssaasupportindicator is set in Nudm_UECM_Registration transmitted from AMF30, it indicates that AMF30 supports the NSSAA function.
[0055]
Further, FIG. 7 shows the parameters set in the supported Features of FIG. FIG. 7 shows that Nssaasupportindicator is set in supportedFeatures. The Nssaasupportindicator may be a parameter at the same level as a parameter such as supportedFeatures as shown in FIG. 6, or may be a parameter set in supportedFeatures as shown in FIG.
[0056]
Returning to FIG. 5, the UDM40 transmits a Nudm_UECM_Registration response to the AMF30 as a response to the Nudm_UECM_Registration (S14).
[0057]
Next, AMF30 sends Nudm_SDM_Get to UDM40 (S15). Step S15 is performed for the AMF 30 to acquire the subscriber information from the UDM 40. Nudm_SDM_Get may include a parameter indicating that the AMF30 supports the NSSAA function.
[0058]
Next, the UDM 40 transmits a Nudm_SDM_Get response to the AMF30 as a response to the Nudm_SDM_Get (S16). The UDM 40 has received Nudm_UECM_Registration including the Nssaa support indicator in step S13. That is, the UDM 40 recognizes that the AMF 30 supports the NSSAA function. Alternatively, the UDM 40 has received Nudm_SDM_Get including the Nssaa support indicator in step S15. That is, the UDM 40 recognizes that the AMF 30 supports the NSSAA function. Therefore, the UDM 40 may include one or more S-NSSAIs indicating a subscribed NSSAI and a network slice requesting the NSSAA procedure in the Nudm_SDM_Get response. Alternatively, the UDM 40 may include in the Nudm_SDM_Get response a Subscribed NSSAI containing only the S-NSSAI indicating the network slice requesting the NSSAA procedure. Alternatively, the UDM40 may include an S-NSSAI and a Subscribed NSSAI that include at least one S-NSSAI indicating a network slice that requires an NSSAA procedure and one or more S-NSSAIs that indicate a network slice that does not require an NSSAA procedure. It may be transmitted to the AMF 30 via the communication unit 41.
[0059]
Next, the AMF 30 transmits a Registration Accept to the UE 20 (S17). The AMF 30 may include at least one of Allowed NSSAI and Rejected NSSAI in the Registration Accept.
[0060]
AMF30 may include Allowed NSSAI including S-NSSAI included in Requested NSSAI and Subscribed NSSAI, which does not correspond to the network slice requesting NSSAA procedure, in Registration Accept. Further, the AMF 30 may include the Rejected NSSAI including the S-NSSAI not included in the Subscribed NSSAI among the S-NSSAI included in the Requested NSSAI in the Registration Accept. Furthermore, AMF30 is Requested NSSAI and Rejected NSSAI including S-NSSAI included in Subscribed NSSAI and corresponding to the network slice requesting the NSSAA procedure may be included in Registration Accept. For S-NSSAI that is included in Rejected NSSAI and corresponds to the network slice that requests the NSSAA procedure, the cause value (reason value or reason for refusal) indicating that the NSSAA procedure is to be executed or is scheduled to be executed is given to S-NSSAI. Value) may be associated.
[0061]
Alternatively, in step S16, when the Subscribed NSSAI containing only the S-NSSAI indicating the network slice for which the UDM 40 requests the NSSAA procedure is included in the Nudm_SDM_Get response, the operation may be performed as follows. In this case, the AMF 30 may include the Rejected NSSAI including the S-NSSAI included in the Requested NSSAI and the Subscribed NSSAI in the Registration Accept. The S-NSSAI included in the Rejected NSSAI and corresponding to the network slice requesting the NSSAA procedure may be associated with a cause value indicating that the NSSAA procedure is to be executed or is scheduled to be executed.
[0062]
Next, the UE 20 executes the NSSAA procedure (Network Slice-Specific Authentication and Authorization procedure) for the S-NSSAI associated with the cause value indicating that the NSSAA procedure is to be executed or is scheduled to be executed (S18). ). The UE 20 executes the NSSAA procedure with the AMF30 and the security device AAA60. If there are a plurality of S-NSSAIs associated with the cause value to be executed or to be executed, the UE 20 performs the NSSAA procedure for each S-NSSAI.
[0063]
UE20 can use the network slice specified by S-NSSAI for which the NSSAA procedure has been completed.
[0064]
Next, with reference to FIG. 5, the flow of Registration processing when the AMF30 does not support the NSSAA function will be described. Here, it is assumed that the UE 20 and the UDM 40 support the NSSAA function. Further, it is assumed that the UE 20 supports the function of the NSSAA procedure.
[0065]
The fact that AMF30 does not support the NSSAA function includes the following cases. For example, the AMF 30 can set Nssaasupportindicator in Nudm_UECM_Registration, but it also includes the case where Nssaasupportindicator is not set in Nudm_UECM_Registration based on the operator's policy or the like. The operator may be paraphrased as a telecommunications carrier, a telecommunications carrier, or the like.
[0066]
In the following, we will mainly explain the processing that is different from the flow of Registration processing when the AMF30 supports the NSSAA function.
[0067]
In step S13, the AMF 30 transmits Nudm_UECM_Registration that does not include the Nssaa support indicator. That is, AMF30 does not set Nssaasupportindicator in Nudm_UECM_Registration, and does not set Nssaasupportindicator in supportedFeatures. Alternatively, in step S15, the AMF 30 sends a Nudm_SDM_Get that does not include the Nssaa support indicator. That is, AMF30 does not set Nssaasupportindicator in Nudm_SDM_Get, and does not set Nssaasupportindicator in supportedFeatures.
[0068]
Further, in step S16, the UDM 40 deletes or excludes the S-NSSAI of the network slice requesting the NSSAA procedure from the Subscribed NSSAI, and sends a Nudm_SDM_Get response to the AMF30. In this case, the Subscribed NSSAI contains only S-NSSAI indicating a network slice that does not require the NSSAA procedure, or does not include any S-NSSAI.
[0069]
Further, in step S17, the AMF 30 includes the Allowed NSSAI including the S-NSSAI included in the Requested NSSAI and the Subscribed NSSAI in the Registration Accept. Further, the AMF 30 may include the Rejected NSSAI including the S-NSSAI included in the Requested NSSAI but not in the Subscribed NSSAI in the Registration Accept. In this case, the UE 20 does not receive the S-NSSAI associated with the cause value that indicates that the NSSAA procedure is to be executed or is scheduled to be executed. Therefore, the procedure (S18) requesting the NSSAA procedure cannot be executed. Further, the UE 20 does not receive an Allowed NSSAI containing an S-NSSAI indicating a network slice requesting an NSSAA procedure. As a result, the UE 20 cannot utilize the network slice that requires the NSSAA procedure.
[0070]
As described above, the UDM40 does not notify the AMF30 of the network slice requesting the NSSAA procedure when the NSSAA function is not supported in the AMF30. From this, the AMF 30 does not notify the UE 20 of the Allowed NSSAI including the S-NSSAI indicating the network slice requesting the NSSAA procedure. As a result, it is possible to prevent the UE 20 from being allowed access to the network slice requesting the NSSAA procedure from the UE 20 without performing the NSSAA procedure.
[0071]
Also, in the above description, if the AMF30 does not support the NSSAA function, the UE 20 cannot access the network slice that requires the NSSAA procedure at all.
[0072]
Instead of such processing, for example, when AMF30 does not support the NSSAA function, UDM40 may select S-NSSAI to be set in Subscribed NSSAI based on a predetermined standard such as an operator policy. good. The operator policy may be a policy defined by an operator who manages the home network (PLMN), or may be a policy defined by an operator who manages the roaming destination network (Visited PLMN). For example, the UDM 40 may determine for each AMF whether or not to set S-NSSAI indicating a network slice requesting the NSSAA procedure to Subscribed NSSAI. Specifically, the UDM40 may set the S-NSSAI of the network slice that requires the NSSAA procedure for the AMF to Subscribed NSSAI even if the AMF in a specific area does not support the NSSAA function. good. Alternatively, the UDM40 may set the S-NSSAI of the network slice that requires the NSSAA procedure for the AMF that does not support the NSSAA function to the Subscribed NSSAI only for a specific period. Alternatively, the UDM 40 may set the S-NSSAI of the network slice that requires the NSSAA procedure, which has a high priority, to the Subscribed NSSAI for the AMF that does not support the NSSAA function. Alternatively, the UDM 40 may set the default S-NSSAI to Subscribed NSSAI for AMF that does not support the NSSAA function. The criteria for selecting S-NSSAI to be set in Subscribed NSSAI for AMF in which UDM40 does not support the NSSAA function are not limited to these. According to the configuration described here, the S-NSSAI requesting the NSSAA procedure can be provided to the UE 20 without the NSSAA procedure.
[0073]
(Implementation mode 3)
Subsequently, a configuration example of the core network node 100 according to the third embodiment will be described with reference to FIG. The core network node 100 according to the third embodiment may be, for example, NSSF50. The core network node 100 has a receiving unit 101 and a transmitting unit 102. The receiving unit 101 and the transmitting unit 102 may be communication units.
[0074]
The receiving unit 101 receives the selection request from the access mobility management device in the selection process of the access mobility management device. As the access mobility management device that is a candidate for selection, the transmission unit 102 transmits information indicating the access mobility management device that supports the NSSAA function to the access mobility management device that has transmitted the selection request.
[0075]
The access mobility management device selection process may be, for example, an AMF re-allocation process. Here, the AMF re-allocation process will be described. The AMF re-allocation process is performed in the Registration process. Specifically, when the UE 20 starts the Registration process, the base station randomly selects AMF. After that, an AMF re-allocation process is executed to change the randomly selected AMF. In the following, it is assumed that the AMF 30 is the AMF initially randomly selected by the base station.
[0076]
The AMF30 receives information from the UE 20 indicating whether or not the NSSAA function is supported. Here, the AMF 30 transmits the following information to the NSSF 50 when the UE 20 supports the NSSAA procedure. The information indicates that the newly selected AMF in the AMF re-allocation process needs to be an AMF that supports the NSSAA function. That is, the AMF 30 transmits information to the NSSF 50 requesting consideration of whether or not the AMF supports the NSSAA function when selecting a candidate AMF.
[0077]
Subsequently, a configuration example of the NSSF 50 that receives information from the AMF 30 will be described with reference to FIG. The NSSF 50 corresponds to the core network node 100. The NSSF 50 may be a computer device operated by the processor executing a program stored in the memory.
[0078]
The NSSF 50 has a communication unit 51 and a control unit 52. The communication unit 51 and the control unit 52 may be software or modules whose processing is executed by the processor executing a program stored in the memory. Alternatively, the communication unit 51 and the control unit 52 may be hardware such as a circuit or a chip.
[0079]
The communication unit 51 receives information indicating that the newly selected AMF must be an AMF that supports the NSSAA function in the AMF re-allocation process.
[0080] [0080]
The control unit 52 has a small number of AMFs that support the NSSAA function.Also select one. The control unit 52 transmits information identifying the selected AMF to the AMF 30 via the communication unit 51. If there is no AMF that supports the NSSAA function, the control unit 52 selects an arbitrary AMF and sends information indicating that there is no AMF that supports the NSSAA function to the AMF 30 via the communication unit 51. You may send it.
[0081]
Subsequently, the flow of the AMF re-allocation process according to the third embodiment will be described with reference to FIG. Here, the (R) AN ((Radio) Access Network) 70 is a base station that wirelessly communicates with the UE 20. Specifically, the (R) AN70 may perform wireless communication with the UE 20 using 5G, which is a wireless communication standard defined in 3GPP.
[0082]
First, (R) AN70 sends an Initial UE message to AMF30 (S21). The Initial UE message is a message associated with the Registration Request transmitted by the UE 20. The Initial UE message contains capability information indicating that the UE 20 can perform the NSSAA procedure.
[0083]
Next, the AMF 30 acquires the subscriber information regarding the UE 20 in the same manner as in steps S15 and S16 of FIG. 5 (S22, S23). At this time, the AMF 30 receives information about the network slice corresponding to the information indicating whether or not the NSSAA function is supported as in the first and second aspects.
[0084]
Next, the AMF 30 sends Nnssf_NSSelection_Get to the NSSF50 in order to execute the AMF re-allocation process (S24). The AMF 30 recognizes that the UE 20 has capability information indicating that it can perform the NSSAA procedure. Therefore, the AMF 30 includes information in Nnssf_NSSelection_Get indicating that the newly selected AMF needs to be an AMF that supports the NSSAA function. Further, the AMF 30 may include information about the network slice corresponding to the information indicating whether or not the above-mentioned NSSAA function is supported in Nnssf_NSSelection_Get.
[0085]
Next, the NSSF 50 sends a Nnssf_NSSelection_Get response containing the identification information of at least one AMF that supports the NSSAA function to the AMF 30 (S25). That is, the NSSF 50 transmits at least one AMF identification information to the AMF 30 as a candidate for the next selected AMF. Alternatively, if there is no AMF that supports the NSSAA function, the NSSF 50 may send information to the AMF 30 indicating that there is no AMF that supports the NSSAA function. The NSSF50 identifies at least one AMF corresponding to the network slice that supports the NSSAA function, based on the information about the network slice corresponding to the information indicating whether or not the above-mentioned NSSAA function is supported. An Nnssf_NSSelection_Get response containing information may be sent to the AMF30. Also, the NSSF50 preferentially provides the NSSAA function even if it receives a Nnssf_NSSelection_Get that does not contain information indicating that the newly selected AMF must be an AMF that supports the NSSAA function. The supported AMF may be the candidate for the next selected AMF.
[0086]
Here, it is assumed that the AMF 30 selects the AMF 31 from the AMF identification information received from the NSSF 50. In this case, the AMF 30 transmits Namf_Communication_N1MessageNotify to the AMF 31 and receives the response message (S26).
[0087]
Further, with reference to FIG. 11, the flow of AMF re-allocation processing different from that of FIG. 10 will be described. Since steps S21 to S25 in FIG. 11 are the same as those in FIG. 10, detailed description thereof will be omitted.
[0088]
The AMF 30 receives the AMF identification information from the NSSF 50 in step S25, selects a new AMF, and then transmits a Reroute NAS message to the (R) AN70 (S31). The AMF 30 includes the identification information of the AMF 31 selected as the new AMF in the Reroute NAS message. Alternatively, when the (R) AN70 selects AMF, the AMF30 may include the identification information of one or more AMFs received from the NSSF50 in the Reroute NAS message.
[0089]
Next, (R) AN70 sends an Initial UE message to AMF31 included in the Reroute NAS message. FIG. 11 differs from FIG. 10 in that the (R) AN70 transmits an Initial UE message from the AMF30 to the designated AMF31.
[0090]
As described above, even if the communication system includes an AMF that supports the NSSAA procedure and an AMF that does not support the NSSAA procedure, the NSSF 50 is sent to the AMF 30 as a candidate for selecting an appropriate AMF next. Can be sent. Here, the appropriate AMF is an AMF that supports the NSSAA procedure.
[0091]
Further, in the description of FIGS. 10 and 11, when the AMF 30 receives the capability information indicating that the UE 20 can execute the NSSAA procedure in step S21, the AMF 30 transmits the following information to the NSSF 50. The following information indicates that the newly selected AMF must be an AMF that supports the NSSAA function.
[0092]
Here, in step S23, after receiving the subscriber information of the UE 20, the AMF 30 determines whether or not the S-NSSAI included in the Subscribed NSSAI or the Requested NSSAI corresponds to the network slice requesting the NSSAA procedure. May be good. If the AMF30 determines that the S-NSSAI included in the Subscribed NSSAI or Requested NSSAI corresponds to the network slice requesting the NSSAA procedure, the above information may be included in the Nnssf_NSSelection_Get in step S24. The above information is information indicating that the newly selected AMF needs to be an AMF that supports the NSSAA function.
[0093]
That is, the AMF 30 may transmit the above information when the following two conditions are satisfied.
(1) The UE 20 can execute the NSSAA procedure.
(2) S-NSSAI included in Subscribed NSSAI or Requested NSSAI corresponds to the network slice that requests the NSSAA procedure.
[0094]
Further, when the AMF30 supports the NSSAA function in file update or the like, the AMF30 may notify the NSSF50 that the NSSAA procedure is supported. Further, the AMF 30 may notify the NSSF 50 that it supports the NSSAA procedure when it is started. Further, the AMF 30 may notify the NSSF 50 that it no longer supports the NSSAA function when updating a file or the like. That is, the AMF 30 may notify the NSSF 50 of the change in the NSSAA ability information.
[0095]
In this way, the AMF 30 notifies the NSSF 50 of the support status of the NSSAA function, so that the NSSF 50 can construct a database for managing the capability information related to each AMF. In such a case, the NSSF 50 can select an AMF that supports the NSSAA function as the next candidate AMF to be selected by referring to the database.
[0096]
FIG. 12 is a block diagram showing a configuration example of a core network node 15, a core network node 100, an access mobility management device 10, an AMF30, a UDM40, and an NSSF50 (hereinafter collectively referred to as a core network node 15). Referring to FIG. 12, the core network node 15 includes a network interface 1201, a processor 1202, and a memory 1203. The network interface 1201 is used to communicate with other network node devices constituting the communication system. The network interface 1201 may include, for example, a network interface card (NIC) compliant with the IEEE 802.3 series. Alternatively, network interface 1201 may be used to perform wireless communication. For example, the network interface 1201 may be used for wireless LAN communication or mobile communication specified in 3GPP (3rd Generation Partnership Project).
[0097]
The processor 1202 reads the software (computer program) from the memory 1203 and executes it to perform the processing of the core network node 15 described by using the flowchart or the sequence in the above embodiment. The processor 1202 may be, for example, a microprocessor, an MPU (Micro Processing Unit), or a CPU (Central Processing Unit). Processor 1202 may include a plurality of processors.
[0098]
Memory 1203 is composed of a combination of volatile memory and non-volatile memory. Memory 1203 may include storage located away from processor 1202. In this case, processor 1202 may access memory 1203 via an I / O interface (not shown).
[0099]
In the example of FIG. 12, the memory 1203 is used to store the software module group. The processor 1202 can perform the processing of the core network node 15 described in the above-described embodiment by reading these software modules from the memory 1203 and executing them.
[0100]
As described with reference to FIG. 12, each of the processors included in the core network node 15 executes one or more programs including instructions for causing the computer to perform the algorithm described with reference to the drawings.
[0101]
In the above example, the program can be stored and supplied to the computer using various types of non-transitory computer readable medium. Non-temporary computer-readable media include various types of tangible storage media. Examples of non-temporary computer-readable media include magnetic recording media, magneto-optical recording media (eg, magneto-optical disks), CD-ROMs (Read Only Memory), CD-Rs, CD-R / Ws, and semiconductor memories. The magnetic recording medium may be, for example, a flexible disk, a magnetic tape, or a hard disk drive. The semiconductor memory may be, for example, a mask ROM, a PROM (Programmable ROM), an EPROM (Erasable PROM), a flash ROM, or a RAM (Random Access Memory). The program also includes various types of temporary computer-readable media (transitory comput).It may be supplied to the computer by er readable medium). Examples of temporary computer readable media include electrical, optical, and electromagnetic waves. The temporary computer-readable medium can supply the program to the computer via a wired communication path such as an electric wire and an optical fiber, or a wireless communication path.
[0102]
In the present specification, a user device (UE) (or a mobile station, a mobile terminal, a mobile device, a communication terminal, a wireless device, etc.) Is an entity connected to the network via a wireless interface.
[0103]
The UE of the present specification is not limited to a dedicated communication device, and may be any device as described below having a communication function as a UE described in the present specification.
[0104]
The terms "User Equipment (UE)" (as a word used in 3GPP), "Mobile Station", "Mobile Terminal", "Mobile Device", and "Wireless Terminal" are generally synonymous with each other. It may be a stand-alone mobile station such as a terminal, a mobile phone, a smartphone, a tablet, a cellular IoT terminal, an IoT device, and the like.
[0105]
It will be understood that the terms "UE" and "wireless terminal" also include devices that have been stationary for a long period of time.
[0106]
UE is also, for example, production equipment / manufacturing equipment and / or energy related machinery (for example, boilers, engines, turbines, solar panels, wind power generators, hydroelectric generators, thermal power generators, nuclear power generators, storage batteries, nuclear systems. , Nuclear equipment, heavy electrical equipment, pumps including vacuum pumps, compressors, fans, blowers, hydraulic equipment, pneumatic equipment, metal processing machines, manipulators, robots, robot application systems, tools, molds, rolls, conveyors , Lifting equipment, cargo handling equipment, textile machinery, sewing machinery, printing machinery, printing-related machinery, paperwork machinery, chemical machinery, mining machinery, mining-related machinery, construction machinery, construction-related machinery, agricultural machinery and / or equipment, forestry Machinery and / or equipment, fishing machinery and / or equipment, safety and / or environmental protection equipment, tractors, bearings, precision bearings, chains, gears, power transmissions, lubricators, valves, pipe fittings, and / Or any device or machine application system mentioned above).
[0107]
UE is also, for example, transportation equipment (for example, vehicles, automobiles, two-wheeled vehicles, bicycles, trains, buses, rearcars, rickshaws, ships and other watercraft, airplanes, rockets, artificial satellites, drones, balloons, etc.). It may be.
[0108]
Further, the UE may be, for example, an information communication device (for example, a computer and related devices, a communication device and related devices, an electronic component, etc.).
[0109]
UE also includes, for example, refrigerating machines, refrigerating machine application products and equipment, commercial and service equipment, vending machines, automatic service machines, office machinery and equipment, consumer electrical and electronic machinery and equipment (for example, audio equipment and speakers). , Radio, video equipment, TV, oven range, rice cooker, coffee maker, dishwasher, washing machine, dryer, fan, ventilation fan and related products, vacuum cleaner, etc.).
[0110]
Further, the UE may be, for example, an electronic application system or an electronic application device (for example, an X-ray device, a particle accelerator, a radioactive material application device, a sound wave application device, an electromagnetic application device, a power application device, etc.).
[0111]
UEs are, for example, light bulbs, lighting, weighing machines, analytical instruments, testing machines and measuring machines (for example, smoke alarms, personal alarm sensors, motion sensors, wireless tags, etc.), watches or clocks, physics and chemistry machines. , Optical machinery, medical equipment and / or medical systems, weapons, clockwork tools, or hand tools.
[0112]
The UE may also be, for example, a personal digital assistant or device having a wireless communication function (for example, an electronic device to which a wireless card, a wireless module, etc. can be attached or inserted) (for example, a personal computer, an electronic measuring instrument, etc.). )) May be.
[0113]
The UE may be, for example, a device or a part thereof that provides the following applications, services, and solutions in the "Internet of Things (IoT)" using wired or wireless communication technology.
[0114]
IoT devices (or things) are equipped with appropriate electronic devices, software, sensors, network connections, etc. that allow devices to collect and exchange data with each other and with other communication devices.
[0115]
Further, the IoT device may be an automated device that complies with the software command stored in the internal memory.
[0116]
Also, the IoT device may operate without the need for human supervision or response.
The IoT device may also remain inactive for a long period of time and / or for a long period of time.
[0117]
Also, IoT devices can be implemented as part of a stationary device. IoT devices can be embedded in non-stationary devices (eg vehicles) or attached to animals or humans that are monitored / tracked.
[0118]
It will be understood that IoT technology can be implemented on any communication device that can be connected to a communication network that sends and receives data regardless of human input control or software instructions stored in memory.
[0119]
It is understandable that IoT devices are sometimes referred to as Machine Type Communication (MTC) devices, or Machine to Machine (M2M) communication devices, NB-IoT (Narrow Band-IoT) UEs. ..
[0120]
It will also be understood that UEs can support one or more IoT or MTC applications.
[0121]
Some examples of MTC applications are listed in the table below (Source: 3GPP TS22.368 V13.2.0 (2017-01-13) Annex B, the contents of which are incorporated herein by reference). This list is not exhaustive and shows an example MTC application.

[0122]
Applications, services, and solutions include, for example, MVNO (Mobile Virtual Network Operator) services / systems, disaster prevention wireless services / systems, and on-site wireless telephone (PBX (Private Branch eXchange)) services / System, PHS / Digital Cordless Telephone Service / System, POS (Point of sale) System, Advertisement Transmission Service / System, Multimedia Broadcast and Multicast Service (MBMS) Service / System, V2X (Vehicle to Everything: Vehicle-to-Vehicle Communication and Road-to-vehicle / pedestrian communication) services / systems, in-train mobile wireless services / systems, location information-related services / systems, disaster / emergency wireless communication services / systems, IoT (Internet of Things) services / systems, Community service / system, video distribution service / system, Femto cell application service / system, VoLTE (Voice over LTE) service / system, wireless TAG service / system, billing service / system, radio on-demand service / system, roaming service / system , User behavior monitoring service / system, Communication carrier / Communication NW selection service / system, Function restriction service / system, PoC (Proof of Concept) service / system, Personal information management service / system for terminals, Display / video service for terminals / It may be a system, a non-communication service / system for terminals, an ad hoc NW / DTN (Delay Tolerant Networking) service / system, or the like.
[0123]
The UE category described above is merely an application example of the technical idea and each aspect described in the present specification. Of course, those skilled in the art can make various changes without being limited to these examples.
[0124]
It should be noted that the present invention is not limited to the above-described embodiment, and can be appropriately modified without departing from the spirit.
[0125]
A part or all of the above embodiment may be described as in the following appendix, but is not limited to the following.
(Appendix 1)
A receiving means for receiving the first information indicating whether or not the network slice-specific authentication and authorization (NSSAA) function is supported from the access mobility management device, and a receiving means.
A core network including a transmission means for transmitting the second information indicating the network slice corresponding to the first information among the information indicating the network slice associated with the subscriber information to the access mobility management device. node.
(Appendix 2)
If the first information does not indicate that it supports the NSSAA function, the second information indicates a network slice that requires NSSAA among the information indicating the network slice associated with the certain subscriber information. The core network node according to Appendix 1, which does not contain information.
(Appendix 3)
If the first information does not indicate that it supports the NSSAA function, the second information indicates a network slice that does not require NSSAA among the information indicating the network slice associated with the certain subscriber information. The core network node according to Appendix 1 or 2, which contains information.
(Appendix 4)
The network slice that does not require the NSSAA is
Network slices not subject to NSSAA and
A network slice that is subject to NSSAA but can be used without NSSAA based on at least one of the operator policy and the visited public land mobile network (Visited PLMN) of the wireless terminal.
The core network node according to Appendix 3, which comprises at least one of the above.
(Appendix 5)
If the first information does not indicate that it supports the NSSAA function, then the first information does not contain an indicator that it supports the NSSAA function, or if the first information does not indicate that it supports the NSSAA function. The core network node according to any one of Supplementary note 1 to 4, which is any of the indicators indicating that the above is not supported.
(Appendix 6)
When the first information is an indicator indicating that the NSSAA function is supported, the second information is a network that requires NSSAA among the information indicating the network slice associated with the certain subscriber information. The core network node according to any one of Supplementary note 1 to 5, which contains at least one piece of information indicating a slice.
(Appendix 7)
The core network node according to any one of Supplementary note 1 to 6, wherein the receiving means receives the first information from the access mobility management device by a Get method.
(Appendix 8)
Authentication and authorization specialized for network slices (NSSAA: Network Slic)A transmission means that sends the first information indicating whether or not the e-Specific Authentication and Authorization) function is supported to the core network node, and
Access mobility management including a receiving means for receiving the second information indicating the network slice corresponding to the first information among the information indicating the network slice associated with the subscriber information from the core network node. Device.
(Appendix 9)
If the first information does not indicate that it supports the NSSAA function, the information indicating the network slice associated with the certain subscriber information does not include the information indicating the network slice that requires NSSAA. The access mobility management device described in.
(Appendix 10)
If the first information does not indicate that it supports the NSSAA function, the second information indicates a network slice that does not require NSSAA among the information indicating the network slice associated with the certain subscriber information. The access mobility management device according to Appendix 8 or 9, which comprises information.
(Appendix 11)
The network slice that does not require the NSSAA is
Network slices other than NSSAA targets, and
A network slice that is subject to NSSAA but can be provided without NSSAA based on at least one of the operator policy and the visited public land mobile network (Visited PLMN) of the wireless terminal.
10. The access mobility management device according to Appendix 10, which comprises at least one of the above.
(Appendix 12)
If it does not indicate that it supports the NSSAA function, it does not include an indicator that the first information supports the NSSAA function, or the first information does not support the NSSAA function. The access mobility management device according to any one of Supplementary note 9 to 11, which is any one of the indicators indicating the above.
(Appendix 13)
When the first information indicates that the NSSAA function is supported, the second information indicates the network slice that requires NSSAA among the information indicating the network slice associated with the certain subscriber information. 8. The access mobility management device according to Appendix 8 or 9, comprising at least one of the above.
(Appendix 14)
The access mobility management device according to any one of Supplementary note 8 to 13, wherein the transmission means transmits the first information to the core network node by a Get method.
(Appendix 15)
A receiving means for receiving a request for selecting an access mobility management device from the first access mobility management device, and
In response to the request, the information indicating the second access mobility management device that supports the network slice-specific authentication and authorization (NSSAA) function is provided with the information indicating the first access mobility. A core network node with a transmission means to transmit to the management device.
(Appendix 16)
The request includes a second piece of information indicating a network slice.
25. The transmission means will transmit information indicating the second access mobility management device that supports the NSSAA function when NSSAA is required for the network slice indicated by the second information. Core network node.
(Appendix 17)
The request includes information requesting that when selecting a candidate access mobility management device, the selected access mobility management device supports the NSSAA function.
25 or 16, wherein the transmitting means transmits information indicating the second access mobility management device that supports the NSSAA function to the first access mobility management device according to the information. Core network node.
(Appendix 18)
Each access mobility management device is equipped with a storage means for storing the first information indicating whether or not the NSSAA function is supported.
The core according to any one of Supplementary note 15 to 17, wherein the transmission means transmits information indicating the second access mobility management device that supports the NSSAA function based on the first information. Network node.
(Appendix 19)
The receiving means has started from the access mobility management device to start or no longer support the NSSAA function from the access mobility management device before transmitting the information indicating the second access mobility management device. Received a third piece of information indicating that
The core network node according to Appendix 18, further comprising an update means for updating the first information stored in the storage means based on the third information.
(Appendix 20)
Receives the first information from the access mobility management device indicating whether or not it supports the network slice-specific authentication and authorization (NSSAA) function, and receives it from the access mobility management device.
A communication method comprising transmitting to the access mobility management device the second information indicating the network slice corresponding to the first information among the information indicating the network slice associated with the certain subscriber information.
(Appendix 21)
Send the first information indicating whether or not the Network Slice-Specific Authentication and Authorization (NSSAA) function specialized for network slices is supported to the core network node, and send it to the core network node.
A communication method comprising receiving from the core network node the second information indicating the network slice corresponding to the first information among the information indicating the network slice associated with a certain subscriber information.
(Appendix 22)
Receive a request to select an access mobility management device from the first access mobility management device,
In response to the request, the information indicating the second access mobility management device that supports the network slice-specific authentication and authorization (NSSAA) function is provided with the information indicating the first access mobility. A communication method that comprises sending to a management device.
[0126]
Although the invention of the present application has been described above with reference to the embodiments, the invention of the present application is not limited to the above. Various changes that can be understood by those skilled in the art can be made within the scope of the invention in the configuration and details of the invention of the present application.
[0127]
This application claims priority on the basis of Japanese Application Japanese Patent Application No. 2019-174767 filed on September 25, 2019, and incorporates all of its disclosures herein.
Code description
[0128]
10 Access mobility management device
11 Communication department
12 Control unit
15 core network node
16 Communication department
17 Control unit
20 UE
30 AMF
40 UDM
41 Communication department
42 Control unit
50 NSSF
51 Communication Department
52 Control unit
60 AAA
70 (R) AN
100 core network nodes
101 receiver
102 transmitter
The scope of the claims
[Claim 1]
A receiving means for receiving the first information indicating whether or not the network slice-specific authentication and authorization (NSSAA) function is supported from the access mobility management device, and a receiving means.
A core network including a transmission means for transmitting the second information indicating the network slice corresponding to the first information among the information indicating the network slice associated with the subscriber information to the access mobility management device. node.
[Claim 2]
If the first information does not indicate that it supports the NSSAA function, the second information indicates a network slice that requires NSSAA among the information indicating the network slice associated with the certain subscriber information. The core network node of claim 1, which does not contain information.
[Claim 3]
If the first information does not indicate that it supports the NSSAA function, the second information indicates a network slice that does not require NSSAA among the information indicating the network slice associated with the certain subscriber information. The core network node of claim 1 or 2, which comprises information.
[Claim 4]
The network slice that does not require the NSSAA is
Network slices not subject to NSSAA and
A network slice that is subject to NSSAA but can be used without NSSAA based on at least one of the operator policy and the visited public land mobile network (Visited PLMN) of the wireless terminal.
3. The core network node of claim 3, comprising at least one of the above.
[Claim 5]
If the first information does not indicate that it supports the NSSAA function, then the first information does not contain an indicator that it supports the NSSAA function, or if the first information does not indicate that it supports the NSSAA function. The core network node according to any one of claims 1 to 4, which is any of the indicators indicating that the above is not supported.
[Claim 6]
When the first information is an indicator indicating that the NSSAA function is supported, the second information is a network that requires NSSAA among the information indicating the network slice associated with the certain subscriber information. The core network node according to any one of claims 1 to 5, which comprises at least one piece of information indicating a slice.
[Claim 7]
The core network node according to any one of claims 1 to 6, wherein the receiving means receives the first information from the access mobility management device by a Get method.
[Claim 8]
A transmission means that sends the first information indicating whether or not the network slice-specific authentication and authorization (NSSAA) function is supported to the core network node.
Access mobility management including a receiving means for receiving the second information indicating the network slice corresponding to the first information among the information indicating the network slice associated with the subscriber information from the core network node. Device.
[Claim 9]
If the first information does not indicate that it supports the NSSAA function, the information indicating the network slice associated with the certain subscriber information does not include the information indicating the network slice that requires NSSAA. 8. The access mobility management device according to 8.
[Claim 10]
If the first information does not indicate that it supports the NSSAA function, the second information indicates a network slice that does not require NSSAA among the information indicating the network slice associated with the certain subscriber information. The access mobility management device according to claim 8 or 9, which comprises information.
[Claim 11]
The network slice that does not require the NSSAA is
Network slices other than NSSAA targets, and
A network slice that is subject to NSSAA but can be provided without NSSAA based on at least one of the operator policy and the visited public land mobile network (Visited PLMN) of the wireless terminal.
10. The access mobility management device according to claim 10, further comprising at least one of the above.
[Claim 12]If it does not indicate that it supports the NSSAA function, it does not include an indicator that the first information supports the NSSAA function, or the first information does not support the NSSAA function. The access mobility management device according to any one of claims 9 to 11, which is any one of the indicators indicating the above.
[Claim 13]
When the first information indicates that the NSSAA function is supported, the second information indicates the network slice that requires NSSAA among the information indicating the network slice associated with the certain subscriber information. The access mobility management device according to claim 8 or 9, which comprises at least one of the above.
[Claim 14]
The access mobility management device according to any one of claims 8 to 13, wherein the transmission means transmits the first information to the core network node by a Get method.
[Claim 15]
A receiving means for receiving a request for selecting an access mobility management device from the first access mobility management device, and
In response to the request, the information indicating the second access mobility management device that supports the network slice-specific authentication and authorization (NSSAA) function is provided with the information indicating the first access mobility. A core network node with a transmission means to transmit to the management device.
[Claim 16]
The request includes a second piece of information indicating a network slice.
15. The core network node described.
[Claim 17]
The request includes information requesting that when selecting a candidate access mobility management device, the selected access mobility management device supports the NSSAA function.
15. The transmission means according to claim 15 or 16, wherein the transmission means transmits information indicating the second access mobility management device that supports the NSSAA function to the first access mobility management device according to the information. Core network node.
[Claim 18]
Each access mobility management device is equipped with a storage means for storing the first information indicating whether or not the NSSAA function is supported.
13. Core network node.
[Claim 19]
The receiving means has started from the access mobility management device to start or no longer support the NSSAA function from the access mobility management device before transmitting the information indicating the second access mobility management device. Received a third piece of information indicating that
The core network node according to claim 18, further comprising an update means for updating the first information stored in the storage means based on the third information.
[Claim 20]
Receives the first information from the access mobility management device indicating whether or not it supports the network slice-specific authentication and authorization (NSSAA) function, and receives it from the access mobility management device.
A communication method comprising transmitting to the access mobility management device the second information indicating the network slice corresponding to the first information among the information indicating the network slice associated with the certain subscriber information.
[Claim 21]
Send the first information indicating whether or not the Network Slice-Specific Authentication and Authorization (NSSAA) function specialized for network slices is supported to the core network node, and send it to the core network node.
A communication method comprising receiving from the core network node the second information indicating the network slice corresponding to the first information among the information indicating the network slice associated with a certain subscriber information.
[Claim 22]
Receive a request to select an access mobility management device from the first access mobility management device,
In response to the request, the information indicating the second access mobility management device that supports the network slice-specific authentication and authorization (NSSAA) function is provided with the information indicating the first access mobility. A communication method that comprises sending to a management device.