Abstract: A method for releasing a context of a user equipment in a non-3GPP access network and a network entity performing the same are disclosed. In a case in which the UE is a unreachable state, a non-3GPP interworking function (N3IWF) may a UE context release request message to an access and mobility management function (AMF), and may perform protocol data unit (PDU) session user plane de-activation between the AMF, a session management function (SMF), and a user plane function (UPF). In addition, the AMF may transmit a UE context release command message to the N3IWF, and the N3IWF may transmit a UE context release complete message to the AMF.

Abstract: A traffic distribution method through a multi-access network in a network and a network entity performing the same are disclosed. An access and mobility management function (AMF) may receive a PDU session modification request message including an ATSSS (access traffic steering, switching, and splitting) preference, which is a preference for an ATSSS rule, from an user equipment (UE) when a multi-access PDU session (MA PDU session) is established and the UE desires to change the ATSSS rule corresponding to the established MA PDU session. The AMF may transmit a first message including the ATSSS preference to a session management function (SMF).

Abstract: A traffic distribution method through a multi-access network in a network and a network entity performing the same. A first device belonging to the network may trigger a change to an ATSSS (access traffic steering, switching, and splitting) rule corresponding to an established multi-access PDU session (MA PDU session) when the MA PDU session is established. A session management function (SMF) may transmit a first message including the changed ATSSS rule to an access and mobility management function (AMF).

Abstract: A non-access stratum based access method and a terminal supporting the same. The terminal receives an Internet protocol (IP) address allocated from a first gateway included in a non-3rd generation partnership project (3GPP) access network. In addition, the terminal applies a non-access stratum (NAS) protocol to a first device managing mobility of the terminal through the IP address.

Abstract: A packet data unit (PDU) session release method and a network entity performing the same are disclosed. An access and mobility management function (AMF) may receive a PDU session release request message including an access type which is an access network to be released in a multi-access PDU (MA PDU) session from user equipment (UE) when the MA PDU session is established. The AMF transmits a first message including the access type to a session management function (SMF).

Abstract: A non-access stratum based access method and a terminal supporting the same. The terminal receives an Internet protocol (IP) address allocated from a first gateway included in a non-3rd generation partnership project (3GPP) access network. In addition, the terminal applies a non-access stratum (NAS) protocol to a first device managing mobility of the terminal through the IP address.

Abstract: A packet data unit session establishment method and network entity performing the same is disclosed. User equipment (UE) may establish registration with the core network through a first access network when the UE is registered in a core network through a second access network belonging to the network and a first PDU session is established through the second access network. The UE may transmit a non-access stratum (NAS) message including a PDU session identifier (ID) that is the same as an ID of the first PDU session to an access and mobility management function (AMF).

Abstract: A deregistration method of user equipment in a network and user equipment performing the same is disclosed. The user equipment determines whether the user equipment is in a connection management (CM)_CONNECTED state in a non-3GPP access network and initiates a deregistration procedure through the non-3GPP access network if the user equipment is in the CM_CONNECTED state in the non-3GPP access network.

Abstract: A method for notifying downlink data in a network, a network triggered service request method, and a network entity performing the same. The method includes receiving, by an access and mobility management function (AMF), a message including a packet data unit (PDU) session identifier (ID) from a session management function (SMF), confirming, by the AMF, a state of user equipment (UE) associated with the PDU session ID, and transmitting, by the AMF, a non-access stratum (NAS) notification message to the UE through a non-3GPP access if the UE is in a connection management (CM)_IDLE state in 3GPP access and in a CM_CONNECTED state in the non-3GPP access.

Abstract: Provided is a network triggered service request method performed by an access and mobility management function (AMF) device, the method including receiving a Namf_Communication_N1N2MessageTransfer message from a session management function (SMF) device that receives a data notification message indicating that a user plane function (UPF) device receives downlink data for a protocol data unit (PDU) session and no access network tunnel information is stored for the PDU session; and sending, to an access network, a paging message for a PDU session between the AMF device and a user equipment (UE) based on a PDU session identifier (ID) included in the Namf_Communication_N1N2MessageTransfer message. The UE receiving the paging message from the access network is configured to initiate a service request procedure according to a connection management state of the UE.

Abstract: A method for releasing a context of a user equipment in a non-3GPP access network and a network entity performing the same are disclosed. In a case in which the UE is a unreachable state, a non-3GPP interworking function (N3IWF) may a UE context release request message to an access and mobility management function (AMF), and may perform protocol data unit (PDU) session user plane de-activation between the AMF, a session management function (SMF), and a user plane function (UPF). In addition, the AMF may transmit a UE context release command message to the N3IWF, and the N3IWF may transmit a UE context release complete message to the AMF.

Abstract: A distributed mobility management method includes: receiving, by a base station, an address resolution protocol (ARP) request message from a user terminal in a heterogeneous unified network environment; generating, by the base station, a logical interface having a media access control (MAC) proxy of the base station as a link address; registering, by the base station, the logical interface with an edge unified control entity; and transmitting, by the base station, an ARP response message including the MAC proxy that the logical interface has to the user terminal.

Abstract: A signaling method in a mobile communication core network and a system thereof. The signaling method in a mobile communication core network includes: receiving, by a traffic controller, an initial attach request from a terminal in a software defined network (SDN) based mobile communication core network; allocating, by the traffic controller, a tunnel identifier for a tunnel establishment between a base station and a traffic transmitter or between traffic transmitters in response to the initial attach or a service request of the terminal; and transmitting, by the traffic controller, the allocated tunnel identifier to the traffic transmitter and the base station.

Abstract: A non-access stratum based access method and a terminal supporting the same. The terminal receives an Internet protocol (IP) address allocated from a first gateway included in a non-3rd generation partnership project (3GPP) access network. In addition, the terminal applies a non-access stratum (NAS) protocol to a first device managing mobility of the terminal through the IP address.

Abstract: A method of using a converged core network service, a universal control entity (UCE), and a converged core network system. The method includes establishing, by a terminal, a signaling connection with a converged core network supporting a plurality of access networks through a first access network, and after establishing the signaling connection, using, by the terminal, a data service through a second access network by reusing at least one of authentication information authenticated and resource information allocated upon establishing the signaling connection through the first access network.

Abstract: A VPN (Virtual Private Network) gateway virtualizes a logical gateway corresponding to a VPC (Virtual Private Cloud) group of a connected user terminal, based on a virtual address of the user terminal, and logically connects the logical gateway to the database corresponding to the VPC group to provide VPC service to the user terminal.

Abstract: The present disclosure relates to a system and a method for managing filtering information of attack traffic, and more particularly, to a system and a method for managing filtering information of attack traffic that may block attack traffic in a front end from which the attack traffic is transmitted by transmitting traffic filtering information, to a first autonomous system of the front end from which the attack traffic is transmitted, through a border gateway protocol (BGP) and by applying, to a relevant router, the transmitted traffic filtering information in the corresponding first autonomous system, when an edge router of a second autonomous system (AS) positioned in a rear end sets the traffic filtering information by detecting the attack traffic.

Abstract: Disclosed is a traffic managing device which includes an information collector collecting primary information associated with a flow; a controller judging a traffic state, collecting secondary information associated with the traffic based on the judged traffic state and the primary information, and judging whether the flow is abnormal, based on the secondary information; and a traffic correspondence unit dropping the flow based on the judged traffic state and whether the flow is abnormal. The primary information includes internet protocol addresses of source and destination of the flow and the secondary information includes a flow number of each internet protocol address of a source.

Abstract: Provided are a user authentication apparatus and method for supporting PMIPv6 (Proxy Mobile Internet Protocol version 6) in next generation networks. Authentication and mobility signaling protocol can be performed without having an additional signaling process when a mobile terminal moves by extending user profiles of the next generations to support the PMIPv6.

Abstract: Provided is a network-based Internet Protocol (IP) multicast service reception controlling apparatus and method. Data corresponding to a multicast channel may be controlled based on a snooping table. The snooping table may be updated based on the service profile. The snooping table may be updated based on a control message, and the control message may be based on whether a user is subscribed to the multicast channel. Whether data corresponding to the multicast channel is to be transmitted may be determined based on whether the data is being transmitted to another user in response to a request from the other user.