Abstract: There is provided an apparatus comprising at least one processor and at least one memory including a computer program code, the at least one memory and computer program code configured to, with the at least one processor, cause the apparatus at least to: receive, at a first network repository function in a first network from a security edge protection proxy in a second network, a request for discovering one or more roaming hubs and/or security edge protection proxies in the first network; and send, from the first network repository function to the security edge protection proxy in the second network, a response comprising information identifying the one or more roaming hubs and/or security edge protection proxies in the first network and information identifying one or more further networks which can be reached via a respective roaming hub and/or security edge protection proxy in the first network.

Abstract: Embodiments of the present disclosure relate to dynamical changes in access and mobility policies. According to embodiments, an Application Function entity can request the Access and Mobility related entity to modify the access and mobility policies for a terminal device after the discovery of the Access and Mobility related entity. Alternatively, the Access and Mobility related entity obtains access and mobility policies from a User Data Repository that link traffic of an application on a PDU Session towards to access and mobility policies and configure the AM policy based on a detection of traffic change done under control of a Session Management related entity. Therefore, the access setting and/or the mobility setting can be dynamically changed based on the traffic change in the application.

Abstract: Systems, methods, and software of directly connecting a SIM-less device with a cellular network. In one embodiment, User Equipment (UE) includes a Subscriber Identity Module (SIM) provisioned with a plurality of subscription profiles for subscriptions to the cellular network. The UE establishes a direct communication with a SIM-less device that does not have a subscription with the cellular network. The UE selects one of the subscriptions provisioned in the SIM as a temporary subscription assigned to the SIM-less device to allow the SIM-less device to establish a direct connection with the cellular network using the temporary subscription, and transmits a message to the SIM-less device via the direct communication containing subscription credentials for the temporary subscription. The SIM-less device may therefore register with the cellular network using the subscription credentials provided by the UE, and establish a direct connection with the cellular network using the temporary subscription.

Abstract: In some embodiments, there is provided an apparatus comprising at least one processor; and at least one memory including computer program code, the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to at least: receive, from a user equipment, a request to join a multicast, broadcast service; and send, in order to process the request, information in a request message to an access network node, the information including an identifier of the multicast, broadcast service, an identifier of a user equipment context and/or a session identifier corresponding to the user equipment served by the access network node, a source address and/or a multicast address where the access network node can access, via an N3 interface, data of the multicast, broadcast service.

Abstract: Systems, methods, apparatuses, and computer program products for ad hoc group based services to support 5G system (5GS) scenarios such as, but not limited to, edge computing and time synchronization, are provided.

Abstract: Techniques are disclosed for managing uplink data transmission associated with user equipment during authentication/authorization of the user equipment when establishing a data network connection through a communication network.

Abstract: Systems, methods, apparatuses, and computer program products for dynamically updating routing identifiers (IDs) are provided. One method may include deciding, at a network node, to update a routing identifier for at least one user equipment. The method may then include obtaining or generating a new routing identifier to be assigned to the at least one user equipment along with authentication vectors, and transmitting the new routing identifier to an authentication entity.

Abstract: Systems, methods, apparatuses, and computer program products for selective indications towards a UE (110), for example, at de-registration (110) from an AMF with request to re-register (130) with another AMF, are provided.

Abstract: There is provided an apparatus that comprises means for receiving a request from a second network function including information relating to the second network function, determining, based on the information relating to the second network function, at least one proxy function and in response to the request, providing to the second network function information relating to the at least one determined proxy function.

Abstract: Methods, computer program products, and apparatuses are provided for enabling a user equipment (UE) to connect to the wireless access network that support non-seamless wireless local area network (WLAN) offload (NSWO), such as using the UE's fifth generation (5G) credentials. An apparatus may include a processor and a memory storing computer program code configured to cause the apparatus to request, by the UE, a wireless connection to a network entity; receive, by the UE, from the network entity, an identity request; and in response to the identity request, cause transmission, by the UE, an identity response including a UE identifier to the network entity such that the UE is configured to establish a security context with the network entity upon successful authentication using the UE identifier.

Abstract: An embodiment of the present invention is a method for support of Circuit Switched (CS) fallback in an Evolved Packet System (EPS), said support including moving a User Equipment (UE) from an evolved Radio Access Network (RAN) to a legacy RAN for access to CS domain services, and moving back said UE from said legacy RAN to said evolved RAN at termination of said CS domain services, said support including moving back said UE to said evolved RAN in the Public Land Mobile Network (PLMN) that was serving said UE over said evolved RAN before moving said UE to said legacy RAN.

Abstract: Systems, methods, and software for inter-PLMN communications. In one embodiment, a roaming hub receives a message from a sending entity across an N32 interface, and determines whether the message includes an HTTP custom header that indicates a PLMN that is validated. When the message as received does not include the HTTP custom header, the roaming hub adds the HTTP custom header to the message that indicates the PLMN of the sending entity, integrity protects the HTTP custom header, and forwards the message toward a receiving entity.

Abstract: Methods and apparatus, including computer program products, are provided for supporting network functions. In some example embodiments, there may be provided a method that includes selecting, by a network node, a network function instance and/or a group of network function instances, the selecting based on information indicating membership of the network function instance in the group of network functions instances and the information including session information for a request associated with a session of a user equipment, the session information indicating whether the network function instance and/or the group of network function instances is assigned to the user equipment; and forwarding, by the network node, the request to the selected network function instance and/or the selected group. Related systems, methods, and articles of manufacture are also described.

Abstract: There is provided a method, apparatus and computer program product for causing a network repository function to perform: receiving, from a network function service consumer, an access request for an access authorization token, the request comprising a first identification of the network function service consumer and a first identification of at least one network slice on which access is requested; generating an access token in response to the request, the access token comprising at least one network slice identifier for the at least one network slice identified by the first identification; and providing the generated access token to the network function in response to the request for an access authorization token.

Abstract: This specification describes apparatus comprising means for sending, from a first network function service consumer instance to an authorisation server, a request for an access token for use in accessing a service provided by a network function service producer, wherein the request includes an identifier of a set of network function service consumer instances of which the first network function service consumer instance is a member; receiving, at the first network function service consumer instance from the authorisation server, an access token for use in accessing the service provided by the network function service producer, wherein the access token includes the identifier of the set of network function service consumer instances of which the first network function service consumer instance is a member; and sending, from the first network function service consumer instance to the network function service producer, a request to access the service provided by the network function service producer, wherein the

Abstract: Techniques for determining a registration area are provided. A network entity may receive one or more indications of topology information from one or more radio access network nodes. Each indication of topology information is related to one or more tracking areas and each tracking area is associated with one or more cells in a radio access network served by each of the one or more radio access network nodes. The network entity may determine a registration area based at least in part on the received one or more indications of topology information related to the one or more tracking areas.

Abstract: The apparatus includes a processor configured to send, over a 3rd Generation Partnership project (3GPP) access, a notifying message regarding non-3GPP access to a user equipment, the user equipment being simultaneously registered to the communication network via the 3GPP access and via the non-3GPP access, the user equipment being in a connection management-idle state over the non-3GPP access. The method includes sending over a 3rd Generation Partnership project (3GPP) access a notifying message regarding non-3GPP access to a user equipment, the user equipment being simultaneously registered to a communication network via the 3GPP access and via the non-3GPP access, the user equipment being in a connection management-idle state over the non-3GPP access.

Abstract: Methods and apparatuses for edge services are disclosed. A network function entity receives from an application function entity a request relating to a data communication session, and can then determine, in response to the request, information of at least one local network exposure function entity for the application function entity. The application function entity is provided with the information of the at least one local network exposure function entity. The information can be used in connecting with a local network exposure function entity. The local network exposure function entity can then be used for the data communication session.

Abstract: Techniques for enforcing packet detection rules within communication systems are provided. A network entity may configure a user plane function to detect whether a domain name system request sent by a user equipment satisfies one or more packet detection rules. The network entity may receive, from a user plane function, a report that a domain name system request sent by the user equipment has been detected as non-compliant with instructions sent to the user equipment. The network entity may cause one or more corrective actions relating to traffic offloading.

Abstract: There is provided an apparatus, said apparatus comprising means for providing, from a first function instance of a set of first function instances to a second function, first information comprising an indication that a protocol session between the first function and the second function is controllable by different instances of the set of first function instances and receiving, at one of the set of first function instances from the second function, a protocol session related message based on the first information.