Abstract: Apparatuses, methods, and systems are disclosed for network slice admission control. One method includes receiving, at a first network function (NF), a registration request message including a registration request for a network slice. The network slice is subject to network slice specific secondary authentication and authorization (NSSAA) and network slice admission control. The method includes determining to perform a registration procedure by transmitting a registration accept message to a user equipment (UE). The registration accept message includes pending network slice selection assistance information (NSSAI) including a network slice identity corresponding to the network slice. The method includes transmitting information initiating the NSSAA procedure to the user equipment. The method includes, in response to the NSSAA procedure being successful, transmitting an availability check message for network slice admission control to a second NF.

Abstract: Apparatuses, methods, and systems are disclosed for registering a personal Internet-of-Things (PIoT) network and PIoT device. One apparatus includes a first network interface that communicates with a PIoT network comprising at least one PIoT device. The apparatus includes a processor that detects a first PIoT device connecting to the PIoT network and determines a vendor of the first PIoT device. The processor sends a first request to a first PIoT server operated by the determined vendor, the first request enabling the first PIoT server to identify the first PIoT device as operating in the PIoT network, where the first request contains PIoT information which identifies a PIoT aggregation server associated with the PIoT network.

Abstract: Apparatuses, methods, and systems are disclosed for admission control based on registered user equipments. One method includes receiving, at a first network function (NF), an indication from a second NF to subscribe to notifications for an admission control mode of a network slice. The method includes determining a number of user equipments (UEs) registered with the network slice. The method includes sending a first request to the second NF to activate the admission control mode for the network slice based on the number of UEs registered with the network slice being greater than a threshold value. The method includes sending a second request to the second NF to deactivate the admission control mode for the network slice based on the number of UEs registered with the network slice being less than or equal to the threshold value.

Abstract: Apparatuses, methods, and systems are disclosed for rerouting message transmissions. One method includes receiving, at a first network device, a registration request message. The method includes delaying, by the first network device, primary authentication, security setup, or a combination thereof based at least partly on a subscription permanent identifier (SUFI) from a second network device and subscription information. The method includes determining, at the first network device, whether to transmit a reroute non-access stratum (NAS) message.

Abstract: Apparatuses, methods, and systems are disclosed for data connection establishment in response to a disaster condition. One method (600) includes receiving (602), at a first network function in a first mobile communication network, a first message from a second network function in the first mobile communication network. The first message includes a data connection establishment request from a remote unit and a disaster indication indicating that the data connection establishment request is in response to a disaster condition in a second mobile communication network, and the disaster condition disables the remote unit from connecting to the second mobile connection network. The method (600) includes determining (604) destination addresses in the second mobile communication network. The method (600) includes configuring (606) a data connection corresponding to the data connection establishment request to accept data traffic between the remote unit and the destination addresses.

Abstract: Apparatuses, methods, and systems are disclosed for provisioning server selection in a cellular network. One method includes communicating, at a network device, with a remote unit via a first network function. The method includes receiving an authentication request from the first network function. The method includes selecting a provisioning server based on a remote unit identity of an onboarding profile, based on a pre-configuration, or a combination thereof. The method includes transmitting a response message to the first network function. The response message includes a provisioning server address.

Abstract: Apparatuses, methods, and systems are disclosed for determining mobile network policy freshness. One method includes accessing a first policy associated with a first mobile network, a first policy identifier, and a freshness parameter. The method includes determining, based on the freshness parameter, whether the first policy is fresh. The method includes transmitting a registration message to a second mobile network. The registration message includes the first policy identifier in response to determining that the first policy is not fresh.

Abstract: Apparatuses, methods, and systems are disclosed for network security based on routing information. One method includes receiving at a first network device, a security request message from an initial access and mobility management function (AMF), an initial security anchor function (SEAF)), or a combination thereof. The security request message includes information indicating a serving network name (SNN), whether routing information is required, a subscription permanent identifier (SUFI), or some combination thereof. The method includes determining, at the first network device, routing information based on the security request message. The method includes transmitting, from the first network device, a security response message to the initial AMF, the initial SEAF, or the combination thereof. The security response message includes the routing information.

Abstract: Apparatuses, methods, and systems are disclosed for indicating a packet data unit session as unavailable. One apparatus includes a processor that determines that at least one packet data unit session is unavailable. The apparatus includes a transmitter that transmits information indicating that the at least one packet data unit session is to be released.

Abstract: This disclosure provides a User Equipment (UE), including: a transmitter configured to transmit at least one Protocol Data Unit (PDU) session identifier (ID), each of which indicates a PDU session that the UE needs to use in a Non Access Stratum (NAS) Service Request message to a Mobility Management Function (MMF) via an access network (AN) node when the UE has user data to send.

Abstract: Apparatuses, methods, and systems are disclosed for determining an action for a network function based on network analytics. One apparatus includes a processor and a network interface that receives a first set of analytics from at least one network analytics function in a mobile communication network, the first set of analytics relating to a first KPI. The processor determines from the first set of analytics whether a first condition is met and determines a first set of actions when the first condition is not met. Via the network interface, the processor sends the first set of actions to at least one network function in the mobile communication network, each action in the first set of actions being sent to an associated network function.

Abstract: Apparatuses, methods, and systems are disclosed for network slice attribute management. One method (800) includes receiving (805) a configuration comprising a quota for a network slice parameter for access control and receiving (810) a report for the network slice parameter from a network function. The method (800) includes determining (815) to update the status of the network slice parameter based on the report for the network slice parameter and sending (820) a response to the network function.

Abstract: A session initiation protocol register request message for RLOS can be received at a P-CSCF. The session initiation protocol register request message can include an IP multimedia public user identification for a UE. The session initiation protocol register request message can be forwarded to a Serving Call Session Control Function (S-CSCF). A UE identifier in a 200 OK response can be received in response to forwarding the session initiation protocol register request message at the P-CSCF from the S-CSCF. Signaling can be ciphered using a security key for the UE in response to receiving the 200 OK response.

Abstract: Apparatuses, methods, and systems are disclosed for provisioning a subscription to access local services. One apparatus includes a network interface that receives a first request message from an application function associated with a first service, the first request message containing a second subscription that enables a UE having a first subscription to register with a second mobile communication network that is not accessible with the first subscription. The apparatus includes a processor that receives an indication that the UE has initiated communication with a remote server accessible via the first mobile communication network and sends a second request message to the UE, the second request message containing the second subscription and enables the UE to access a local server via the second mobile communication network, where the local server provides the first service.

Abstract: Apparatuses, methods, and systems are disclosed for supporting delegated data connections. One apparatus includes a processor and a transceiver that receives an access request indicating that a remote unit requires to access a first access network. The processor determines to establish a delegated data connection in a mobile communication network for the remote unit, the delegated data connection connecting the apparatus with an external data network. The processor enables the authentication of the remote unit by converting a first authentication signaling used by the mobile communication network to a second authentication signaling used by the first access network. The processor controls the transceiver to forward data traffic between the remote unit and the external data network over the delegated data connection, wherein the delegated data connection is reserved for use by the remote unit.

Abstract: Apparatuses, methods, and systems are disclosed for slice-specific RACH configuration. One apparatus (1000) includes a processor (1005) and a transceiver (1025) that receives (1205) a first set of slice-specific RACH configurations and receives (1210) a mapping of slice group identities to network slices of a communication network. Here, each slice-specific RACH configuration contains a set of random access parameters specific to a slice group identity. The processor (1005) selects (1215) a first RACH configuration for a first network slice based on the mapping and performs (1220) a random-access procedure in accordance with the first RACH configuration. Via the transceiver (1025), the processor (1005) transmits (1225) a service request to the communication network in accordance with the first RACH configuration.

Abstract: The method proposes to establish at least one session between the User Equipment and the Session Management Function node, and initiate session deactivation for a session indicated by the User Plane Function node, upon detection inactivity of User Plane connection for the session for a period by the User Plane Function node.

Abstract: Apparatuses, methods, and systems are disclosed for configuring N6-LAN chain policies. One apparatus includes a processor and a network interface that receives a first request from an application function (“AF”), the first request comprising an external identifier for at least one user equipment (“UE”) and N6-LAN steering information indicating a service function or a chain of service functions in the N6-LAN that must process the user-plane traffic associated with the at least one UE. The processor translates the external identifier into a permanent subscription identifier of the at least one UE and sends a second request to a first network function to update an application data set to include the N6-LAN steering information and the permanent subscription identifier.

Abstract: Apparatuses, methods, and systems are disclosed for remapping traffic between network slices during handover. One apparatus includes a processor and a transceiver that receives a first message indicating that a first connection is not supported in a target RAN. Here, the first connection is established with a first network slice and the first message indicates that buffering-and-forwarding of data traffic of the first connection is supported. The transceiver transmits a request to establish a second connection with a second network slice over the Target RAN and receives a second message from the Target RAN for establishing the second connection, where the second message includes an identifier of the first connection. The processor communicates at least one buffered data packet of the first connection over the second connection.

Abstract: Apparatuses, methods, and systems are disclosed for reconfiguring a data connection using new parameters. One apparatus includes a transceiver that communicates with a UE and a processor that registers the UE with a mobile communication network using a first set of parameters, where the first set of parameters is based on a UE configuration. The processor identifies a second set of parameters to be used by the UE in the mobile communication network. Via the transceiver, the processor sends the second set of parameters to the UE and sends mapping information which indicates how the at least one parameter in the second set of parameters corresponds to at least one new parameter for the UE configuration.