Telefonaktiebolaget Lm Ericsson (Publ)

Prajwol Kumar Nakarmi

Monica Wifvesson

Noamen Ben Henda

Vesa Torvinen

Pasi Saarinen

David Castellanos Zamora

Karl Norrman

Oscar Ohlsson

Vesa Lehtovirta

Magnus Stattin

Christine Jost

Gunnar Mildh

Peter Hedman

Mats Näslund

Håkan Palm

Cheng Wang

Helena Vahidi Mazinani

Paul Schliwa-Bertling

Åke Busin

Malik Wahaj Arshad

Dung Pham Van

Muhammad Ali Kazmi

Icaro L J Da Silva

Fredrik Gunnarsson

Oumer Teyeb

George Foti

Mats Folke

Qian Chen

Christofer Lindheimer

Nianshan Shi

Gunnar Bergquist

Vlasios Tsiatsis

Antonino Orsino

Luis Barriga

John Mattsson

Michael Liljenstam

Icaro Leonardo Da Silva

Lena Melin

Jesus Angel De Gregorio Rodriguez

Jonathan Olsson

András Méhes

Alessandro Mordacci

Fredrik Sonnevi

Jesus-Angel De-Gregorio-Rodriguez

Markus Hanhisalo

Enrique Cobo Jimenez

Loay Abdelrazek

Oumer Teyab

Ikram Ullah

András MÉHES

Systems and methods are described for redirecting a user equipment with a routing misconfiguration. An exemplary method includes detecting a potential misconfiguration associated with the user equipment or a subscriber identity module (SIM) associated with the user equipment and generating an error code indicating the potential misconfiguration associated with the user equipment of the SIM associated with the user equipment. The error code is transmitted to an authentication module and indicates that the misconfiguration is an incorrect routing identifier and includes additional user information.

Handling USIMs with misconfigured routing IDs in 5GC

A user equipment ('UE') can handle registrations of the UE in different wireless communication networks. The UE can obtain information indicating whether a Universal Subscriber Identity Module (“USIM”) of the UE supports storing multiple different Non-Access Stratum (“NAS”) security contexts of the UE associated with the different wireless communication networks. The UE can further determine whether the USIM supports storing the multiple different NAS security contexts of the UE associated with the different wireless communication networks based on the obtained information.

Handling registrations of a user equipment in different communication networks

A wireless device () receives, over an access stratum (), a capability enquiry () that requests the wireless device () to transmit capability information () indicating one or more capabilities of the wireless device (). After receiving the capability enquiry (), the wireless device () generates a token () using one or more input parameters () and transmits the token (). The one or more input parameters () include at least some part of the capability enquiry () and/or at least some of the capability information (). In some embodiments, the token () is generated or transmitted based on a non-access stratum security context () at the wireless device (). The wireless device () also transmits the capability information () over the access stratum ().

Protecting capability information transfer in a wireless communication network

Network equipment () comprising a processing circuitry () and a memory (), where the memory contains instructions executable by the processing circuitry whereby the network equipment is configured to: identify a set of measurements to be used for false base station detection in an area (); configure different sets (---N) of one or more wireless devices () to report different respective measurements in the set by transmitting measurement reporting configurations (---N) to the wireless devices (); receive measurement reports from the different sets (---N) of one or more wireless devices () as configured; and perform false base station detection for the area () using the received measurement reports. Methods, a wireless device (), and communication systems are also disclosed.

Measurement reporting configuration

A method performed by a Distributed Unit, DU, node for handling a message in a communication between a User Equipment, UE, the DU node and a Central Unit, CU, node. The DU node obtains a secondary security key from a network node. The secondary security key is associated with the DU node. The DU node receives the message from the UE or the CU node. The message is security protected with one or both of a first security key, and the secondary security key. The message or a part of the message, is not possible to use by the DU node when security protected with the first security key. The DU node determines that at least a part of the message is security protected with the secondary security key. The DU node uses the at least the part of the message security protected with the secondary security key.

Distributed unit node, user equipment, and methods in a wireless communications network

Procedures are provided for robust handling of NAS request messages that contain a spurious information element (IE). The spurious information element could include a NAS message container containing a NAS message with the wrong procedure type, i.e., a procedure type that does not match the type of the parent NAS message. The spurious information elements could also include redundant IEs that are not necessary for the emergency services fallback request.

Robust NAS layer signaling

Network equipment () is configured for use in a wireless communication network (). The network equipment () is configured to receive, over an interface () with radio equipment (), a request () for information () based on which is determinable an unobfuscated identifier () associated with a target () being tracked by the radio equipment (). The unobfuscated identifier () may be obfuscated by an obfuscating identifier () associated with the target (). The network equipment () is also configured to send, from the network equipment () to the radio equipment (), a response () that includes the requested information ().

Tracking of a target in a wireless communication network

A user equipment ('UE') in a wireless communication network can receive a plurality of signals from a plurality of nodes. The UE can further determine a plurality of radio signal strength measurements. Each radio signal strength measurement can be associated with a signal of the plurality of signals received from the plurality of nodes. The UE can further determine whether there is an indication that a first node of the plurality of nodes may be an imposter node based on the plurality of radio signal strength measurements.

False base station detection

Network equipment in a wireless communication network is configured to receive at least a portion of a subscription concealed identifier, SUCI, for a subscriber. The SUCI contains a concealed subscription permanent identifier, SUPI, for the subscriber. The received at least a portion of the SUCI indicates a sub-domain code, SDC. The SDC indicates a certain sub-domain, from among multiple sub-domains of a home network of the subscriber, to which the subscriber is assigned. The network equipment is also configured to determine, based on the SDC and from among multiple instances of a provider network function in the home network respectively allocated to provide a service to be consumed for subscribers assigned to different sub-domains, an instance of the provider network function to provide the service to be consumed for the subscriber.

Network function instance selection

A method performed by a wireless device includes receiving a Radio Resources Control Reject (RRCReject) message and determining whether to act on the RRCReject message based on a configuration of the wireless device. The method may also include receiving a configuration message that includes the configuration from a network node.

Handling radio resource control rejections

A method performed by a network equipment of a communication network to dynamically provide trust information to a communication device registered or being registered to the communication network is provided. The method includes determining a trust information for each of one or more access networks. The trust information indicates whether each of the one or more access networks is trusted. The method further includes indicating to the communication device whether the one or more access networks is trusted for a current session or a later session. A method performed by a communication device registered or being registered with a communication network to dynamically receive trust information is also provided. The method includes receiving a message including a protected trust information list from a network equipment. The method further includes verifying the protection of the message. The method further includes storing the protected trust information list.

Methods for trust information in communication network and related communication equipment and communication device

A method is provided to operate a CN node to determine UP security activation. A UP session establishment request is obtained for a wireless device. An indication is obtained that the UP session establishment request is associated with an emergency session and/or that null ciphering and/or null integrity protection are applied to a CP associated with a CP session for the wireless device. It is determined that a UP should be configured for the UP session without activating integrity and/or confidentiality protection for the UP based on the indication. A UP security policy is provided to a RAN node associated with the wireless device, wherein the UP security policy indicates to configure the UP for the UP session without activating integrity and/or confidentiality protection based on determining that a UP should be configured for the UP session without activating integrity and/or confidentiality protection.

Methods providing management of emergency sessions and related devices and nodes

A method performed by a UE. The method incudes generating a SUCI comprising: i) an encrypted part in which a Mobile Subscription Identification Number of a SUPI is encrypted and ii) a clear-text part comprising: a) a Mobile Country Code of the SUPI, b) a Mobile Network Code of the SUPI, c) a public key identifier for a public key of a home network of the user equipment, and d) an encryption scheme identifier that identifies an encryption scheme used by the UE to encrypt the Mobile Subscription Identification Number in the SUCI. The method also includes transmitting the SUCI to an authentication server in the home network for forwarding of the SUCI to a de-concealing server capable of decrypting the Mobile Subscription Identification Number.

Privacy key and message authentication code

A method performed by a mobile terminal for verifying at least one privacy profile setting for positioning of the mobile terminal to a location network node in a communications network is provided. The method includes receiving a request from the location network node for the mobile terminal to provide a position of the mobile terminal. The method further includes checking the at least one privacy profile setting of the mobile terminal for permission to provide position information of the mobile terminal. The method further includes determining whether to send the positioning information of the mobile terminal to the location network node based on the checking the at least one privacy profile setting. Methods performed by a network node are also provided.

Privacy control of user equipment and related apparatuses

Core network equipment is configured for use in a core network of a wireless communication system. The core network equipment is configured to switch switching to using a new non-access stratum, NAS, security context between a user equipment and the core network equipment. The core network equipment is also configured to, during or in association with a handover procedure for handover of the user equipment, signal from the core network equipment that the new NAS security context between the user equipment and the core network equipment is to be used as a basis for an access stratum (AS) security context between the user equipment and radio access network equipment.

Security context in a wireless communication system

Growing community of inventors

Sollentuna, Sweden

Prajwol Kumar Nakarmi