Samsung Electronics Co., Ltd.

Rajavelsamy Rajadurai

Anil Agiwal

Mangesh Abhimanyu Ingale

Narendranath Durga Tangudu

Lalith Kumar

Kundan Tiwari

Nishant Gupta

Young-Bin Chang

Varini Gupta

Himke Van Der Velde

Suresh Chitturi

Woo-Seong Kim

Anikethan Ramakrishna Vijaya Kumar

Nivedya Parambath Sasi

Basavaraj Jayawant Pattan

Satish Nanjunda Swamy Jamadagni

Neha Sharma

Rohini Rajendran

Youngbin Chang

Sudhir Kumar Baghel

Fasil Abdul Latheef

Soenghun Kim

Gert Jan Van Lieshout

Song-Yean Cho

Jaehyuk Jang

Hoyeon Lee

Duckey Lee

O-Sok Song

Venkateswara Rao Manepalli

Ho-Yeon Lee

Sung-Ho Choi

Han-Na Lim

Siva Prasad Gundur

Erik Guttman

Sapan Pramodkumar Shah

Vijay Sangameshwara

Deepanshu Gautam

Anshuman Nigam

Hyunjeong Kang

Jicheol Lee

Beom-Sik Bae

Jungje Son

Sung Ho Choi

Han Na Lim

Pravjyot Singh Deogun

Mayuresh Madhukar Patil

Sarvesha Anegundi Ganapathi

Diwakar Sharma

Tushar Vrind

Danish Ehsan Hashmi

Kyung Joo Suh

Venkateswar Jeedigunta

Arijit Sen

Karthik Srinivasa Gopalan

Rahul Suhas Vaidya

Byung-Moo Lee

Ashok Kumar Nayak

Jagadeesh Gandikota

Mallikarjuna Hampali

Pratyush Pushkar

Himke Vandervelde

Siva Selvaganesan

R Rohini

Jedigunta Venkateshwar

Methods and systems for identifying AUSF and accessing related keys in 5G ProSe. The AUSF corresponding to a remote UE is identified by an AMF based on routing indicator or SKI. The AUSF is capable of key management of ProSe UE-to-Network relay communication. The AUSF authorizes the remote UE to access a 5G core network through one or more UE-to-network relays. The authorization of the remote UE is performed based on a SUPI corresponding to the remote UE. The SUPI is obtained from a UDM. Once the remote UE is authorized, the AUSF can derive keys that enable the remote UE to access the 5G core network through the one or more UE-to-network relays. The keys derived by the AUSFcan be referred to as authentication keys. The derived keys include REAR key, K, K, and K.

Methods and systems for identifying AUSF and accessing related keys in 5G prose

The present disclosure relates to a pre-5-Generation (5G) or 5G communication system to be provided for supporting higher data rates Beyond 4-Generation (4G) communication system such as Long Term Evolution (LTE). The present disclosure relates to a method and system for steering of roaming (SoR) information based on required services for roaming subscribers. The method includes registering the UE in a visited public land mobile network (VPLMN) by an access and mobility management function (AMF) device. The method comprises requesting a unified data management (UDM) server of a home public land mobile network (HPLMN) to provide subscription data. The method further comprises requesting by the UDM server SoR information from an application function (AF) device, wherein the request includes information related to single-network slice selection assistance information (S-NSSAI) either requested or subscribed by the UE. The method comprises the steps of determining the SoR information to be provided to the UDM server and transmitting the SoR information to the UE. The subscribers can use the SoR information for latching onto a VPLMN that provides the service they are interested in.

Method and system for improving PLMN selection based on required services/ slices for roaming subscribers

The present disclosure relates to a communication method and system for converging a 5-Generation (5G) communication system for supporting higher data rates beyond a 4-Generation (4G) system with a technology for Internet of Things (IoT). The present disclosure may be applied to intelligent services based on the 5G communication technology and the IoT-related technology, such as smart home, smart building, smart city, smart car, connected car, health care, digital education, smart retail, security and safety services. Embodiments herein provide a method of enabling authentication and key management application (AKMA) services in roaming mode comprising generating a key associated with the AKMA services after a primary authentication of the UE with a wireless network; determining whether to share the at least one key associated with the AKMA services with a visited AKMA anchor function (vAAnF); and sharing the at least one key associated with the AKMA services with the vAAnF.

Method and system of enabling AKMA service in roaming scenario

A method for performing communication in a wireless communication system in includes establishing, by a network entity, a context of a user equipment (UE) in a network, receiving a message for registration request from the UE in a registered state, identifying that the UE is genuine by executing an authentication procedure with the UE, and in case that the UE is genuine, performing a deletion of the established context of the UE and a process of the registration request.

Method and apparatus for performing communication in wireless communication system

The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. A method for limiting a scope of authorization provided to a network function service consumer (NFC) device in a wireless network by a network repository function (NRF) server is provided. The method includes receiving an NF-registration request message from a network function producer (NFP) device. The NF-registration request message includes at least one of a set of the first information element indicating a single-network slice selection assistance information (S-NSSAI) of the NFC device allowed to access by the NFP device, a corresponding second information element indicating operations allowed on resources of the NFP device belonging to a S-NSSAI of the NFP device, and a third information element indicating a trust-level of the NFC device.

System and method for limiting a scope of authorization provided to NFC device

The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. Embodiments herein provide an apparatus and method for verifying authenticity of a BH-RLF. A method is provided for using a new message to verify the authenticity of the BH-RLF. A method is provided for using existing and/or message over an F1AP and an RRC to verify the authenticity of the BH-RLF. A method is provided for using a hash based procedure for protection of the BH-RLF indication. A method is provided for generating a unique secret key at an parent IAB node and a child IAB node to protect the BAP control messages. Further, a method is provided for re-using ICMP ping messages to check the destination availability based on a received BH-RLF indication.

Apparatus and method for verifying authenticity of a backhaul-radio link failure

Methods and systems for authenticating devices using 3GPP network access credentials for providing MEC services. A device is configured to receive MEC services from an EAS through 5G S A or NSA architecture. The device is authenticated by an ECS, which involves validating a MAC generated by the device. The MAC is validated using an edge authentication key, which is generated based on 3GPP network access security credentials of the device. The device is authorized by an EES to receive MEC services, which involves successful registration of the device with the EES and the EES providing credentials to the device for accessing an EAS providing desired MEC services. The EAS provides the desired MEC services to the device if the device provides credentials to the EAS, which are same as those provided to the device by the EES.

Methods and systems for authenticating devices using 3GPP network access credentials for providing MEC services

The present disclosure relates to a pre-5-Generation (5G) or 5G communication system to be provided for supporting higher data rates Beyond 4-Generation (4G) communication system such as Long Term Evolution (LTE). In accordance with an aspect of the present disclosure, a method of transmitting data in a device to device communication system is provided. The method includes determining whether a security feature is applied to one or more packet data convergence protocol (PDCP) data units, configuring the one or more PDCP data units based on the determined result, and transmitting the one or more PDCP data units to one or more receiving user equipments (UEs).

Method of performing device to device communication between user equipments

Methods and systems for authentication and establishment of secure connection for accessing edge computing services are provided. The method includes dynamically deriving a pre-shared key (PSK) and use the dynamically derived PSK for the authentication, while performing or before performing a secure connection establishment or while or before establishing a secure interface between a user equipment (UE), and a server, wherein the UE includes an Edge Enabler Client (EEC), and the server is an Edge Configuration Server (ECS). The method further includes deriving the PSK based on an Authentication and Key Management for Applications (AKMA) application key.

Methods and systems for authentication and establishment of secure connection for edge computing services

The present disclosure relates to a communication method and system for converging a 5th-Generation (5G) communication system for supporting higher data rates beyond a 4th-Generation (4G) system with a technology for Internet of Things (IoT). The present disclosure may be applied to intelligent services based on the 5G communication technology and the IoT-related technology, such as smart home, smart building, smart city, smart car, connected car, health care, digital education, smart retail, security and safety services. Accordingly, the embodiments herein provide a method for binding a plurality of subscriber identity modules (SIMs) () associated with a user equipment (UE) () to optimize network resources in a wireless network.

Method and apparatus for binding a plurality of subscriber identity modules (SIMS) associated with a user equipment (UE) to optimize network resources

Disclosed herein are a communication technique for merging, with an IoT technology, a 5G communication system for supporting a data transmission rate higher than that of a 4G system; and a system therefor. Embodiments herein disclose a method of protecting sensitive user plane traffic in an User Equipment (UE) (), the method comprising: transmitting, to a network (), by the UE () a first NAS message comprising an indicator indicating that the UE () supports of a secure channel for domain name system (DNS); receiving, from the network (), by the UE () a second NAS message including DNS server security information in response to transmitting the first NAS message; and transmitting, to the network (), by the UE () the DNS over the secure channel based on the DNS server security information.

Method and device for protecting sensitive user plane traffic

The disclosure relates to 5G or 6G communication systems for supporting higher data transmission rates. A method of detecting cyber-attacks using network analytics in a user equipment (UE) is provided. The method includes receiving, by a network data analytics function (NWDAF), a request for sharing analytics information associated with the UE from a consumer network function (NF), requesting the analytics information associated with the UE and causing the cyber-attack to at least one 5th generation core (5GC) network entity, receiving the analytics information associated with the UE and causing the cyber-attack from the at least one 5GC network entity, comparing an expected behavior of the UE with an actual behavior based on the analytics information provided by the at least one 5GC network entity, deriving analytics associated with the cyber-attack based on the analytics information and the comparison, and sending the analytics associated with the UE to the consumer NF.

Method and system for detecting cyber-attacks using network analytics

A method and system for authenticating application program interface (API) invokers using a common application program interface framework (CAPIF) is provided. The method includes establishing by a CAPIF core function (CCF) a secure Transport Layers Security (TLS) connection with at least one API invoker, on receiving a connection request from the at least one API invoker to access at least one service API on a CAPIF-2e interface. Further, the method includes determining by the CCF at least one security method to be used by the at least one API invoker for a CAPIF-2e interface security (C2eIS) of the at least one API invoker for accessing the at least one service API on a CAPIF-2e interface. The method further includes enabling the C2eIS by an API exposing function (AEF) the at least one API invoker based on the determined at least one security method.

Method and system for authenticating application program interface (API) invokers

The present disclosure relates to a communication method and system for converging a 5th-Generation (5G) communication system for supporting higher data rates beyond a 4th-Generation (4G) system with a technology for Internet of Things (IoT). The present disclosure may be applied to intelligent services based on the 5G communication technology and the IoT-related technology, such as smart home, smart building, smart city, smart car, connected car, health care, digital education, smart retail, security and safety services. Embodiments herein provide a method for determining whether a base station is genuine or rouge in a wireless network. If a received authentication key matches with the authentication key generated in the UE, the method includes identifying a base station as genuine base station and carrying out a normal procedure. If the received authentication key does not match with the generated authentication key, the method includes identifying the base station as a rouge base station. The authentication key can be a digital signature (DS), a Message Authentication Code-Integrity (MAC-I), and a hash of MIB/SIBs including PCI.

Method and user equipment for determining whether base station is genuine or rouge in wireless network

The present disclosure relates to a communication method and system for converging a 5th-Generation (5G) communication system for supporting higher data rates beyond a 4th-Generation (4G) system with a technology for Internet of Things (IoT). The present disclosure may be applied to intelligent services based on the 5G communication technology and the IoT-related technology, such as smart home, smart building, smart city, smart car, connected car, health care, digital education, smart retail, security and safety services. A method and apparatus for managing CAG related procedure in a wireless communication network is provided.

Method and apparatus for managing cag related procedure in wireless communication network

Growing community of inventors

Bengaluru, India

Rajavelsamy Rajadurai