Mediatek Singapore Pte. Ltd.

Nokia Corporation

Jarkko Eskelinen

Marko Niemi

Matti Moisanen

Jaakko Sitomaniemi

Pasi P Laitinen

Marko Tapani Akselin

Examples pertaining to indication of additional security capabilities using non-access stratum (NAS) signaling in 5Generation (5G) mobile communications are described. A processor of an apparatus (e.g., a user equipment (UE)) transmits an initial NAS message to a communication entity of a 5G mobile network. The processor then receives a message from the communication entity responsive to the transmitting, the message comprising an additional 5G security parameter information element (IE). The processor proceeds to perform a security mode control procedure using information contained in the additional 5G security parameter IE pertaining to at least one 5G security parameter.

Indication of additional security capabilities using NAS signaling in 5G mobile communications

Examples pertaining to user equipment (UE) key derivation at mobility update in mobile communications are described. An apparatus implemented in a UE conducts a registration with a first Access and Mobility Management Function (AMF) of a network. The apparatus also conducts one other registration with a second AMF of the network over a 3Generation Partnership Project (3GPP) access. In response, the apparatus receives a request from the second AMF over the 3GPP access. The apparatus then performs a key derivation to generate a derived key using a keying material from the initial registration with the first AMF to result in the UE and the second AMF sharing a common security context for the 3GPP access and a non-3GPP access.

User equipment key derivation at mobility update in mobile communications

Various examples pertaining to improvement for incorrect key set identifier (KSI) handling in mobile communications are described. An apparatus (e.g., user equipment) receives from a wireless network an authentication challenge after the processor having completed an authentication and key agreement (AKA) procedure with the wireless network. The apparatus detects an error in the authentication challenge and handles the error in the authentication challenge. For example, the apparatus can reject the authentication challenge responsive to detecting the error. Alternatively, the apparatus can accept the authentication challenge.

Incorrect KSI handling in mobile communications

A User Equipment (UE) communicates with one or both of a first 3GPP core network and a second 3GPP core network over one or both of a 3GPP access and a non-3GPP access. The communication includes: receiving, from the first 3GPP core network, a reject message; and searching for another suitable cell or another suitable Access Point (AP), when the reject message is received over the 3GPP access or the non-3GPP access and the UE is registered with the first 3GPP core network or the second 3GPP core network over the 3GPP access or the non-3GPP access.

Apparatuses and methods for handling a non-integrity-protected reject message

Methods and apparatus are provided for handling of non-integrity reject message in the 5G system. In one novel aspect, the UE upon receiving the reject message via one access without integrity protection, retries one or more other accesses for one or more times before treating the rejection genuine. In one embodiment, the UE attempts the same 5GMM procedure over another access in the same cell/tracking area (TA). The alternative access including other types of 3GPP access and non-3GPP access. Subsequently, the UE can search the service from another cell/TA or another PLMN. In one embodiment, if the UE receives reject cause invalidating the UE with one access without integrity protection, the UE tries the system a few times before treating the reject genuine by tracking an invalidating counter, which is increased by one each time the rejection is received with a cause value invalidating the UE.

Handling of non-integrity protected reject messages in 5G

Examples pertaining to user equipment (UE) key derivation at mobility update in mobile communications are described. An apparatus implemented in a UE conducts a registration with a first Access and Mobility Management Function (AMF) of a network. The apparatus also conducts one other registration with a second AMF of the network over a 3Generation Partnership Project (3 GPP) access. In response, the apparatus receives a request from the second AMF over the 3 GPP access. The apparatus then performs a key derivation to generate a derived key using a keying material from the initial registration with the first AMF to result in the UE and the second AMF sharing a common security context for the 3 GPP access and a non-3 GPP access.

A User Equipment (UE) including a wireless transceiver and a controller is provided. The wireless transceiver performs wireless transmission and reception to and from a service network. The controller transitions the UE from a Radio Resource Control (RRC) idle state to an RRC connected state, and after transitioning the UE from the RRC idle state to the RRC connected state, sends an initial Non-Access Stratum (NAS) message comprising a limited set of Information Elements (IEs) in cleartext, which are required to establish security between the UE and the service network, and a container IE carrying an initial NAS message Protocol Data Unit (PDU) ciphered with NAS security context to the service network via the wireless transceiver.

Apparatuses and methods for protection of an initial non-access stratum (NAS) message

Aspects of the disclosure provide a method for power reduction in an electronic device. The method includes determining a local timer value corresponding to an idle time for the electronic device to stay in an idle mode. The electronic device is registered to a service provider to provide service to the electronic device. Further, the method includes starting, upon entering the idle mode, a specific timer with the local timer value, and another timer to track a next update time for the electronic device to update tracking area to the service provider for maintaining the electronic device to be registered to the service provider, exiting the idle mode and entering the power saving mode when the specific timer expires, exiting the power saving mode when the other timer expires, and updating the tracking area to the service provider to keep the electronic device being registered to the service provider.

Method and apparatus for power saving

In accordance with an example embodiment of the present invention, a communications apparatus participates in a packet-based communication, obtains a temperature of the apparatus, and compares the temperature of the apparatus to a threshold temperature, and responsive to a result of the comparison, the apparatus starts dropping packets pertaining to the packet-based communication in the protocol layer.

Growing community of inventors

Oulu, Finland

Jarkko Eskelinen