Abstract: Certain aspects of the present disclosure provide techniques for selecting a public land mobile network (PLMN) based on route information. A method that may be performed by a wireless node includes camping on a first cellular network on a first frequency band of one or more first frequency bands associated with a first mobile country code (MCC) of a planned route of the wireless node; detecting a condition with the first cellular network after the camping on the first cellular network; and searching, after detecting the condition, for service on the one or more first frequency bands and one or more second frequency bands associated with a second MCC, wherein the one or more second frequency bands are selected based on the first MCC and the planned route.

Abstract: Various aspects of the present disclosure generally relate to wireless communication. In some aspects, a user equipment (UE) may establish, using a first subscription of the UE, a first communication connection associated with a first service. The UE may establish, using a second subscription of the UE, a second communication connection associated with a second service. The UE may operate in a dual subscriber identity module (SIM) dual active (DSDA) mode based at least in part on establishing the first communication connection and establishing the second communication connection. The UE may perform an action to maintain concurrent services, including the first service and the second service, while operating in the DSDA mode. Numerous other aspects are described.

Abstract: A method is provided. The method may be performed by a UE. The method includes attempting to attach to or to perform a tracking area update in an EPS network to obtain voice services for a number of times. The method includes starting a modified timer based on a failure to attach to or to perform the tracking area update in an EPS network for the number of times and based on a configuration parameter. The modified timer may be modified based on a default timer. The method includes keeping an S1 mode enabled when starting the modified timer. The method includes attempting to obtain the voice services based on one or more access technologies other than EPS. The method includes attaching to or performing a tracking area update in the EPS network to obtain voice services based on the modified timer.

Abstract: Aspects are provided which allow a UE including an application processor and a modem to disable measurements of reference signals from 5G base stations which are inapplicable to EN-DC. The UE may receive a reference signal from a base station. The UE may identify a frequency range. The UE may provide, using the application processor, an indication to the modem. The UE may determine whether to measure the reference signal using the modem based on the indication provided to the modem from the application processor and whether the reference signal is within the identified frequency range and further based on whether the base station is standalone or non-standalone. The UE may refrain from measuring the reference signal in response to the determination. As a result, inter-RAT handovers from LTE base stations to 5G base stations are prevented, UE power consumption is thereby saved, and support for EN-DC is maintained.

Abstract: Various aspects of the present disclosure generally relate to wireless communication. In some aspects, a user equipment (UE) may detect that a first subscription, of a plurality of subscriptions associated with the UE, is associated with an active service on a first cellular network. The UE may search, for a second subscription of the plurality of subscriptions, for radio access technologies (RATs) and frequency bands that are compatible with a dual active mode of the UE. In some aspects, the UE may detect that the active service on the first cellular network has ended. Accordingly, the UE may search, for the second subscription, for RATs and frequency bands that are compatible with the dual active mode of the UE and for RATs and frequency bands that are incompatible with the dual active mode, before expiry of a timer associated with a power saving state. Numerous other aspects are described.

Abstract: Aspects are provided which allow a UE to disable measurements of reference signals from 5G base stations which are inapplicable to EN-DC. The UE may receive a reference signal from a base station. The UE may identify a frequency range. The UE may determine whether to measure the reference signal based on whether the reference signal is within the identified frequency range. The UE may refrain from measuring the reference signal in response to the determination. The UE may also refrain from measuring the reference signal in response to a SIB received at the UE not including a ULI, or in response to a frequency associated with the reference signal not being in a list of supported bands for EN-DC. As a result, inter-RAT handovers from LTE base stations to 5G base stations are prevented, UE power consumption is thereby saved, and support for EN-DC is maintained.

Abstract: Aspects disclosed herein facilitate security handling of 5GS to EPC reselection are disclosed herein. An example method at a UE includes transmitting a first TAU request, the first TAU request encoded using a first security context associated with a first RAT, the first TAU request being integrity protected using a first uplink count based on the first security context, and the first TAU request including a first set of information including an identifier mapped to a second RAT associated with the first network entity. The example method also includes transmitting a second TAU request, the second TAU request including the first set of information, the second TAU request being integrity protected using a second uplink count. The example method also includes communicating based on a mapped security context based on the first security context and at least one of the first uplink count or the second uplink count.

Abstract: Techniques are provided for receiving encrypted positioning assistance data, requesting and obtaining cipher keys to decrypt the positioning assistance data. An example method for transmitting a cipher key request includes receiving cipher key information including a start time value, a duration value, and an advance time value, determining an advance time duration that is equal to a sum of the start time value and the duration value minus the advance time value, and transmitting the cipher key request within the advance time duration.

Abstract: Disclosed herein are related to a communication device. In one aspect, the communication device includes a wireless interface and a processor coupled to the wireless interface. In one aspect, the processor is configured to determine an absence of content data remaining to transmit to a base station for an uplink configured grant, and cause the wireless interface to bypass transmission of a padding data for the uplink configured grant, responsive to the absence of the content data remaining for the uplink configured grant.

Abstract: A device may include a controller and a modem of a first wireless network. The controller may determine that the modem is in active mode and the device is using a second wireless network for communication instead of the first wireless network. In response to the determining, the controller may switch the modem into power-save mode. In response to a handover triggering event, the controller may switch the modem to the active mode and acquire a service of the first wireless network without registering with the first wireless network. The controller may determine that a communication service is to be handed over to the service of the first wireless network. In response to determining that the communication service is to be handed over, the controller may perform registration with the first wireless network, and perform handover of the communication service to the service of the first wireless network.

Abstract: Methods, systems, and devices for wireless communications are described. Generally, the described techniques provide for efficiently falling back from one RAT to another RAT while maximizing the services available to a UE. When a request from a UE for communicating with a base station using one RAT is rejected by a network node for unexpected causes, the UE may use the techniques described herein to fallback to an appropriate RAT. For instance, after receiving a response indicating that a request including fifth generation (5G) parameters is rejected, the UE may drop the 5G parameters and fall back to fourth generation (4G), rather than falling back to second generation (2G) or third generation (3G). The unexpected causes may be preconfigured and may be determined based on a number of factors, including a subscription of the UE, a public land mobile network (PLMN) associated with the network node, etc.

Abstract: A method is provided. The method may be performed by a UE. The method includes attempting to attach to or to perform a tracking area update in an EPS network to obtain voice services for a number of times. The method includes starting a modified timer based on a failure to attach to or to perform the tracking area update in an EPS network for the number of times and based on a configuration parameter. The modified timer may be modified based on a default timer. The method includes keeping an S1 mode enabled when starting the modified timer. The method includes attempting to obtain the voice services based on one or more access technologies other than EPS. The method includes attaching to or performing a tracking area update in the EPS network to obtain voice services based on the modified timer.

Abstract: Various aspects of the present disclosure generally relate to wireless communication. In some aspects, a user equipment (UE) may detect that a first subscription, of a plurality of subscriptions associated with the UE, is associated with an active service on a first cellular network. The UE may search, for a second subscription of the plurality of subscriptions, for radio access technologies (RATs) and frequency bands that are compatible with a dual active mode of the UE. In some aspects, the UE may detect that the active service on the first cellular network has ended. Accordingly, the UE may search, for the second subscription, for RATs and frequency bands that are compatible with the dual active mode of the UE and for RATs and frequency bands that are incompatible with the dual active mode, before expiry of a timer associated with a power saving state. Numerous other aspects are described.

Abstract: Various aspects of the present disclosure generally relate to wireless communication. In some aspects, a user equipment (UE) may establish, using a first subscription of the UE, a first communication connection associated with a first service. The UE may establish, using a second subscription of the UE, a second communication connection associated with a second service. The UE may operate in a dual subscriber identity module (SIM) dual active (DSDA) mode based at least in part on establishing the first communication connection and establishing the second communication connection. The UE may perform an action to maintain concurrent services, including the first service and the second service, while operating in the DSDA mode. Numerous other aspects are described.

Abstract: Aspects disclosed herein facilitate security handling of 5GS to EPC reselection are disclosed herein. An example method at a UE includes transmitting a first TAU request, the first TAU request encoded using a first security context associated with a first RAT, the first TAU request being integrity protected using a first uplink count based on the first security context, and the first TAU request including a first set of information including an identifier mapped to a second RAT associated with the first network entity. The example method also includes transmitting a second TAU request, the second TAU request including the first set of information, the second TAU request being integrity protected using a second uplink count. The example method also includes communicating based on a mapped security context based on the first security context and at least one of the first uplink count or the second uplink count.

Abstract: This disclosure provides systems, methods, and apparatus, including computer programs encoded on computer storage media, for wireless communication by a user equipment (UE). In one aspect, the UE is configured to generate a handover request related to a wireless communication session between the UE and a wireless local area network (WLAN) device, and establish, independent of an access check, a radio resource control (RRC) connection with a base station. In another aspect, the UE is configured to perform an access check based on a bias value, and establish an RRC connection with a base station based on a result of the access check. The access check performed based on a communication indicator related to a wireless communication session between the UE and a WLAN device.

Abstract: Aspects are provided which allow a UE to disable measurements of reference signals from 5G base stations which are inapplicable to EN-DC. The UE may receive a reference signal from a base station. The UE may identify a frequency range. The UE may determine whether to measure the reference signal based on whether the reference signal is within the identified frequency range. The UE may refrain from measuring the reference signal in response to the determination. The UE may also refrain from measuring the reference signal in response to a SIB received at the UE not including a ULI, or in response to a frequency associated with the reference signal not being in a list of supported bands for EN-DC. As a result, inter-RAT handovers from LTE base stations to 5G base stations are prevented, UE power consumption is thereby saved, and support for EN-DC is maintained.

Abstract: This disclosure provides systems, methods, and apparatus, including computer programs encoded on computer storage media, for wireless communication by a user equipment (UE). In one aspect, the UE is configured to generate a handover request related to a wireless communication session between the UE and a wireless local area network (WLAN) device, and establish, independent of an access check, a radio resource control (RRC) connection with a base station. In another aspect, the UE is configured to perform an access check based on a bias value, and establish an RRC connection with a base station based on a result of the access check. The access check performed based on a communication indicator related to a wireless communication session between the UE and a WLAN device.

Abstract: Methods, systems, and devices for wireless communication are described. A user equipment (UE) may be configured to include procedures to mitigate denial of service (DoS) attack by a rogue base station when the initial non-access stratum (NAS) messages between the UE and a mobility management entity (MME) is unprotected. UE may maintain a temporary forbidden network list, which resides outside a subscriber identity module (SIM), and update a forbidden network list, which resides on the SIM, only under certain conditions. For example, a visited network, from which the UE receives a reject message, may be added to the forbidden network list on the SIM only when a counter associated with the visited network is equal to a maximum counter value, which is configured by the UE.

Abstract: Methods, systems, and devices for wireless communication are described for inter-RAT mobility from a first radio access technology (RAT) to a second RAT, including cases in which different RATs correspond to different generations of networks. Approaches described herein include providing a preemptive indication of inter-RAT mobility for one or more geographic areas such to a user equipment (UE). The UE can thus use a mobility procedure to transition from the first RAT to the second RAT that is supported in the UE's location without first attempting an unsupported mobility procedure, reducing transition latency.