Samsung Electronics Co., Ltd.

Nec Corporation

Nivedya Parambath Sasi

Rohini Rajendran

Rajavelsamy Rajadurai

Varini Gupta

Lalith Kumar

Anand Raghawa Prasad

Nishant Gupta

Narendranath Durga Tangudu

Sivabalan Arumugam

Takahito Yoshizawa

Ashok Kumar Nayak

Rajavelsamy Rajadura

R Rohini

Pradheep Kumar Singaravelu

Methods and systems for identifying AUSF and accessing related keys in 5G ProSe. The AUSF corresponding to a remote UE is identified by an AMF based on routing indicator or SKI. The AUSF is capable of key management of ProSe UE-to-Network relay communication. The AUSF authorizes the remote UE to access a 5G core network through one or more UE-to-network relays. The authorization of the remote UE is performed based on a SUPI corresponding to the remote UE. The SUPI is obtained from a UDM. Once the remote UE is authorized, the AUSF can derive keys that enable the remote UE to access the 5G core network through the one or more UE-to-network relays. The keys derived by the AUSFcan be referred to as authentication keys. The derived keys include REAR key, K, K, and K.

Methods and systems for identifying AUSF and accessing related keys in 5G prose

The present disclosure relates to a communication method and system for converging a 5-Generation (5G) communication system for supporting higher data rates beyond a 4-Generation (4G) system with a technology for Internet of Things (IoT). The present disclosure may be applied to intelligent services based on the 5G communication technology and the IoT-related technology, such as smart home, smart building, smart city, smart car, connected car, health care, digital education, smart retail, security and safety services. Embodiments herein provide a method of enabling authentication and key management application (AKMA) services in roaming mode comprising generating a key associated with the AKMA services after a primary authentication of the UE with a wireless network; determining whether to share the at least one key associated with the AKMA services with a visited AKMA anchor function (vAAnF); and sharing the at least one key associated with the AKMA services with the vAAnF.

Method and system of enabling AKMA service in roaming scenario

The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. A method for limiting a scope of authorization provided to a network function service consumer (NFC) device in a wireless network by a network repository function (NRF) server is provided. The method includes receiving an NF-registration request message from a network function producer (NFP) device. The NF-registration request message includes at least one of a set of the first information element indicating a single-network slice selection assistance information (S-NSSAI) of the NFC device allowed to access by the NFP device, a corresponding second information element indicating operations allowed on resources of the NFP device belonging to a S-NSSAI of the NFP device, and a third information element indicating a trust-level of the NFC device.

System and method for limiting a scope of authorization provided to NFC device

The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. Embodiments herein provide an apparatus and method for verifying authenticity of a BH-RLF. A method is provided for using a new message to verify the authenticity of the BH-RLF. A method is provided for using existing and/or message over an F1AP and an RRC to verify the authenticity of the BH-RLF. A method is provided for using a hash based procedure for protection of the BH-RLF indication. A method is provided for generating a unique secret key at an parent IAB node and a child IAB node to protect the BAP control messages. Further, a method is provided for re-using ICMP ping messages to check the destination availability based on a received BH-RLF indication.

Apparatus and method for verifying authenticity of a backhaul-radio link failure

A communication system, a UE (User Equipment), a communication method and a computer readable medium may be provided. The communication system () includes: a first UE (User Equipment) () including a first controller and a first transceiver, wherein the first controller is configured to control the transceiver to send a message including L2 ID (Layer 2 Identity) and verification information; and a second UE () including a second controller and a second transceiver, wherein the second controller is configured: to control the transceiver to receive the message from the first UE (); and to determine whether to accept the L2 ID or not using the verification information.

Method and device for reducing security risk in communication

Methods and systems for authentication and establishment of secure connection for accessing edge computing services are provided. The method includes dynamically deriving a pre-shared key (PSK) and use the dynamically derived PSK for the authentication, while performing or before performing a secure connection establishment or while or before establishing a secure interface between a user equipment (UE), and a server, wherein the UE includes an Edge Enabler Client (EEC), and the server is an Edge Configuration Server (ECS). The method further includes deriving the PSK based on an Authentication and Key Management for Applications (AKMA) application key.

Methods and systems for authentication and establishment of secure connection for edge computing services

The disclosure relates to 5G or 6G communication systems for supporting higher data transmission rates. A method of detecting cyber-attacks using network analytics in a user equipment (UE) is provided. The method includes receiving, by a network data analytics function (NWDAF), a request for sharing analytics information associated with the UE from a consumer network function (NF), requesting the analytics information associated with the UE and causing the cyber-attack to at least one 5th generation core (5GC) network entity, receiving the analytics information associated with the UE and causing the cyber-attack from the at least one 5GC network entity, comparing an expected behavior of the UE with an actual behavior based on the analytics information provided by the at least one 5GC network entity, deriving analytics associated with the cyber-attack based on the analytics information and the comparison, and sending the analytics associated with the UE to the consumer NF.

Method and system for detecting cyber-attacks using network analytics

The method includes: generating, by a source base station, a UE specific Anonymity Challenge Parameter to the UE based on sensitive information from the UE, cell information, source base station information and initial Anonymity Challenge Parameter assigned to the particular base station; and sending, by the source base station, a measurement command message including the UE specific Anonymity Challenge Parameter to the UE. Further, the method includes receiving, by the source base station, an Anonymity Challenge Parameter acknowledgement as a response from the UE; and negotiating, by the source base station, the UE specific Anonymity Challenge Parameter with the UE to prevent the UE from attaching to the false base station.

Source base station, UE, method in wireless communication system

The present disclosure relates to a communication method and system for converging a 5th-Generation (5G) communication system for supporting higher data rates beyond a 4th-Generation (4G) system with a technology for Internet of Things (IoT). A method performed by a user equipment (UE) in a wireless network, the method comprising: establishing a communication with an application function (AF) server using a first authentication and key management for applications (AKMA) application key (K); receiving a message over the established communication from the AF server, the message indicating that a lifetime of the first Khas expired; and configuring a back-off flag in the UE to optimize an AKMA key refresh mechanism in the wireless network in response to receiving the message, wherein the back-off flag prevents a request for a first AKMA anchor key (K) until a fresh primary authentication is performed.

Method and system for optimizing AKMA key refresh mechanism in wireless network

A method performed by a first terminal performing vehicle-to-everything (V2X) communication with a second terminal via one or more PC5 unicast links in a wireless communication system is provided. The method may include: receiving, from a core network entity, information on one or more security policies respectively corresponding to the one or more PC5 unicast links, wherein each of the one or more PC5 unicast links is associated with one or more V2X services; transmitting, to the second terminal, a direct communication request message including the one or more security policies for initiating the V2X communication; and in case that the transmitted direct communication request message is accepted by the second terminal, activating a security of each of the one or more PC5 unicast links based on the received information on the one or more security policies.

Method and apparatus for handling security policies in V2X communication system

The present disclosure relates to a communication method and system for converging a 5-Generation (5G) communication system for supporting higher data rates beyond a 4-Generation (4G) system with a technology for Internet of Things (IoT). The present disclosure may be applied to intelligent services based on the 5G communication technology and the IoT-related technology, such as smart home, smart building, smart city, smart car, connected car, health care, digital education, smart retail, security and safety services. Methods and systems for generating/deriving CU-UP security keys for disaggregated gNB architecture are described herein. A UE/gNB can inform the gNB/UE about the capability of the UE/gNB to derive CU-UP security keys. CU-UP security keys comprise an integrity protection key and a ciphering key. The gNB derives an integrity protection key and a ciphering key upon determining that the UE supports derivation of the CU-UP security keys or the UE has capability to derive CU-UP security keys. The integrity protection key protects the integrity of data, in a DRB, traversing through a CU-UP. The ciphering key encrypts the data, in the DRB, traversing through the CU-UP. The gNB sends RRC connection reconfiguration messages, which include multiple parameters. The UE derives an integrity protection key and a ciphering key, for each DRB, based on the plurality of parameters, for protecting the integrity of the data and encrypting the data.

Methods and systems for deriving cu-up security keys for disaggregated gNB architecture

The present disclosure relates to a pre-5G or 5G communication system to support higher data rates beyond 4G communication system such as LTE. The present disclosure enables the 3GPP system to protect the broadcasted unique UAV identities for a secured UAV communication. In remote identification process, the UAVs send the messages with flight information to the receiving party (i.e., UTM/USS, a TPAE or another UAV). Also, there are use cases on local broadcast of UAV identities for remote identification and tracking purposes. The present disclosure renders a mechanism that only the authorized personnel is able to decode the received broadcasting ID from the initiating UAV. The present disclosure protects unique UAV identities broadcasted so that, the fake UAV or unauthorized personnel cannot use the broadcasted ID for certain attacks such as impersonation of genuine UAV, tracking of the UAV and so on.

Growing community of inventors

Bengaluru, India

Nivedya Parambath Sasi