Abstract: A wireless transmit-receive unit (WTRU) may be provided. A first message may be received from a relay. The first message may indicate a link quality measurement associated with a Uu interface between the relay and a network. It may be determined that a condition for a relay selection is satisfied based on the Uu link quality measurement. Based on the condition that the relay selection condition is satisfied, a second message may be sent to the relay. The second message may indicate a request to establish a connection to the network via the relay.

Abstract: A first network node of a first network, the first network node configured to receive, from a second network node, a first authentication request to access, by a wireless transmit/receive unit (WTRU), a second network hosted by the first network; send, to a third network node, a first request to obtain an identification token; receive, from the third network node, a response to the first request; send, to a fourth network node, a second authentication request comprising information indicating an identifier associated with the WTRU, a network identifier and the identification token; receive, from the fourth network node, a response to the second authentication request comprising information indicating a first key in response to an authentication success; determine, based on the first key and network identifier, a second key to access the second network by the WTRU; and send, to the second network node, information indicating the second key.

Abstract: Methods, apparatuses, systems, etc., directed to performing a change of relay are disclosed herein. In an embodiment, a WTRU may transmit a link modification request message to a target WTRU via a first relay WTRU for requesting a change of relay. The WTRU may receive a link modification accept message from the target WTRU via the first relay WTRU, indicating a (e.g., proposed) second relay WTRU (e.g., identifier). The WTRU may transmit a direct communication request message including the second relay WTRU identifier for indicating to the target WTRU acceptance of the proposed second relay WTRU. The WTRU may a receiving a direct communication accept message from the target WTRU via the second relay WTRU, indicating the traffic may be relayed via the second relay WTRU.

Abstract: The disclosure pertains to methods and apparatus for federated learning (FL) artificial intelligence machine learning (AIML) implemented in a first security entity associated with a Wireless Transmit/Receive Unit (WTRU). A method may include: obtaining, by the first security entity, first information indicating security assessment data of the WTRU in a federated learning network; determining, by the first security entity, based on the security assessment data, an indication of a security vulnerability of a trained FL AIML intermediate model; sending based on the determined indication of the security vulnerability, by the first security entity to a second security entity associated with a network node, second information indicating the trained FL AIML intermediate model; and sending, by the first security entity to the network node, third information associated with a training of the trained FL AIML intermediate model.

Abstract: Procedures, methods, architectures, apparatuses, systems, devices, and computer program products directed to real-time quality of service (QoS) monitoring and prediction are described. A first QoS monitoring request indicating one or more WTRUs may be received from a server. A second QoS monitoring request may be sent, the second QoS monitoring request indicating a session to be monitored by a WTRU of the one or more WTRUs. A QoS monitoring response may be received, the QoS monitoring response indicating (i) the session to be monitored and (ii) performance measurement information associated with the session to be monitored. First performance measurement assistance information may be sent, based on the performance measurement information associated with the session to be monitored, and QoS report information may be received, the QoS report information indicating one or more QoS metrics measured by the WTRU in the session.

Abstract: Methods, apparatus, systems, architectures and interfaces for performing secure command and control (C2) communications in an Unmanned Aerial System (CAS) including a UAV controller (UAV-C) are provided. The method includes on condition that the UAV has completed a registration procedure with a network, transmitting, to a session management function (SMF) of the network, a packet data unit (PDU) session establishment request message; performing a secondary authentication, with any of the USS and the UTM, via the SMF; receiving a PDU session establishment accept message including C2 security information; and establishing C2 communications security with the peer UAV-C using the C2 security information.

Abstract: A method implemented in a wireless transmit/receive unit (WTRU) of provisioning the WTRU for communication in a temporary local network includes transmitting, to an onboarding network, information regarding a capability of the WTRU to communicate with the temporary local network. Configuration information for temporary local network provisioning is received from the onboarding network. A message identifying a provisioning configuration for use by the WTRU with the temporary local network is received from the onboarding network, using the received configuration information. A message is sent to the temporary local network using the provisioning configuration.

Abstract: A method performed by a wireless transmit/receive unit (WTRU) for secure policy provisioning includes receiving a network message including new policy information, a first policy message authentication code (MAC) generated by a network (P-MAC-N), and a policy protection counter (PPC). The WTRU generates a second policy MAC using a security key shared with the network, the new policy information, and the PPC, and verifies the integrity of the network message by determining that the P-MAC-N matches the second policy MAC. After the verification, the WTRU updates the previous policy information of the WTRU using the new policy information based on the match of the P-MAC-N and the second policy MAC.

Abstract: A WTRU Reader assists AIoT devices by collecting AIoT device responses that are triggered by a BS Reader and forwards the AIoT device responses to the BS Reader. The BS reader collects capability information from WTRU Readers. The WTRU Reader is configured by the BS Reader with the information needed to perform AIoT device assistance, including time slot information. When the BS Reader triggers an AIoT device, the WTRU Reader monitors for AIoT responses, and forwards received response to the BS Reader.

Abstract: Methods and apparatus for protecting user privacy while bootstrapping an application function (AF) key from primary authentication are provided herein. In an example, a WTRU derives a KAKMA key for authentication and key management for applications (AKMA). Also, the WTRU derives a KAF key for an AF and a KAF key identity (ID) identifying the KAF key. Further, the KAF key and a KAF key ID are derived based on a freshness parameter, the KAKMA key, an AF ID identifying the AF, and a WTRU ID identifying the WTRU. The WTRU then transmits, to a network node, the freshness parameter, the AF ID and the WTRU ID. Also, the WTRU transmits to the AF, the KAF key ID. Moreover, the WTRU performs mutual authentication with the AF using the KAF key. In an example, the WTRU may also receive a key establishment confirmation, from the AF, for the KAF key.

Abstract: Disclosed herein are solutions to remediate a distributed denial of service attack. In an example, a wireless transmit and receive unit (WTRU) transmits, to a network, a first attach request message including an store and forward (S&F) mode parameter. The WTRU receives, from the network, information indicating a puzzle and one or more parameters of the puzzle. Further, the WTRU generates evidence based on solving the puzzle. Moreover, the WTRU transmits, to the network, a second attach request message including the evidence. In an example, the WTRU receives, from the network, an attach reject message responsive to the S&F mode parameter. Additionally or alternatively, the WTRU receives, from the network, the S&F mode parameter. Additionally or alternatively, the network is a non-terrestrial network (NTN). Additionally or alternatively, the network includes a satellite. Additionally or alternatively, the includes a mobility management entity (MME) non-terrestrial (NT).

Abstract: Methods and apparatuses are described herein for paging retransmission. A wireless transmit/receive unit (WTRU) may receive, from a network node, a message comprising device information and paging configuration information. The paging configuration information may include paging retransmission instructions. The paging retransmission instructions may comprise a first instruction indicative of retransmission not required, a second instruction indicative of retransmission required, and a third instruction indicative of conditional retransmission required. The WTRU transmit, based on the device information, to a group of devices, a first paging message. Based on receiving one or more paging responses or receiving no responses, the WTRU may transmit, based on the paging retransmission instructions, a second paging message with an indication of paging retransmission.

Abstract: A wireless transmit and receive unit (WTRU) may be provisioned with a shared key and a WTRU identity. The WTRU may receive, from a network equipment on board the satellite, broadcasted parameters of a puzzle. The WTRU may generate evidence based on solving the puzzle and injecting the shared secret key into the evidence. The WTRU may send, to the network equipment on board the satellite, a registration request message. The registration request message may include the generated evidence and the WTRU identity. The WTRU may receive, from the network equipment on board the satellite, a registration accept responsive to the registration request.

Abstract: Methods, apparatuses, systems, etc., directed to performing a change of relay are disclosed herein. In an embodiment, a WTRU may transmit a link modification request message to a target WTRU via a first relay WTRU for requesting a change of relay. The WTRU may receive a link modification accept message from the target WTRU via the first relay WTRU, indicating a (e.g., proposed) second relay WTRU (e.g., identifier). The WTRU may transmit a direct communication request message including the second relay WTRU identifier for indicating to the target WTRU acceptance of the proposed second relay WTRU. The WTRU may a receiving a direct communication accept message from the target WTRU via the second relay WTRU, indicating the traffic may be relayed via the second relay WTRU.

Abstract: Systems, methods, and instrumentalities may be described herein for wireless transmit/receive units (WTRUs) to authorize roaming (e.g., authorize an EEC (Edge Enabler Client) in a roaming WTRLI by a V-ECS (Visiting Edge Configuration Server) token that may be generated by the H-ECS (Home Edge Configuration Server). A first message may be sent. The first message may indicate a request for an authorization token to be used in a visiting network. A second message may be sent. The second message may indicate authentication information. A third message may be sent. The third message may indicate an authorization token. The authorization token may be associated with the authentication information. A fourth message may be received. The fourth message may indicate a validation of the authorization token and may indicate an identity of a visiting network.

Abstract: An unmanned aerial vehicle (UAV) authentication and authorization may be performed by a third-party service provider (e.g., an unmanned aerial system traffic management (UTM) over a user plane (UP). An UAV may be configured to send an UAV ID to a network. The UAV may receive, from the network, security information that indicates an authorization of a connection to a third-party service provider. The UAV may establish, based on the security information, the connection to the third-party service provider for communications with the third-party service provider. The security information may include signature information of the third-party service provider, and one or more of a subscription identifier (ID) associated with the UAV, the UAV ID, or an ID of the third-party service provider.

Abstract: The disclosure pertains to methods and apparatus for federated learning (FL) artificial intelligence machine learning (AIML) implemented in a first security entity associated with a Wireless Transmit/Receive Unit (WTRU), the method comprising: obtaining, by the first security entity, first information indicating security assessment data of the WTRU in a federated learning network; determining, by the first security entity, based on the security assessment data, an indication of a security vulnerability of a trained FL AIML intermediate model; sending based on the determined indication of the security vulnerability, by the first security entity to a second security entity associated with a network node, second information indicating the trained FL AIML intermediate model; and sending, by the first security entity to the network node, third information associated with a training of the trained FL AIML intermediate model.

Abstract: An application function (AF) or network exposure function (NEF) requests authorization tokens to access policy control functions (PCF) from network repository function (NRF) for each AI/ML cycle, and receives a token that authorizes the AF to manage the quality of service (QoS) policy for the next AIML training cycle. Upon token validation, the AF sends a request to the NEF to reserve resources for an AF session. Upon authorization, the NEF sends a discovery request message to a binding support function (BSF) to discover PCFs serving WTRUs of an indicated group for the next AI/ML training cycle in the request from the AF. The BSF sends a discovery response to the NEF that comprises a list of the PCFs serving the identified WTRUs. The authorization tokens for PCF policy management on each PCF for the next AIML training cycle are then requested from the NRF.

Abstract: Systems, methods, and apparatuses for establishing an ephemeral security context between an ambient internet of things (AIOT) device and a reader device are provided herein. The reader device transmits a plurality of cryptographic puzzles and one or more puzzle parameters to the AIOT device. Each cryptographic puzzle is associated with a tuple comprising an ephemeral key and an ephemeral key index associated with the ephemeral key. The plurality of cryptographic puzzles may include reverse encryption based cryptographic puzzles and/or reverse cryptographic hash functions. The AIOT device selects and solves a cryptographic puzzle of the plurality of cryptographic puzzles and recovers the ephemeral key corresponding to the selected cryptographic puzzle. The AIOT device transmits a first message including a random device identifier and an ephemeral key index corresponding to the recovered ephemeral key. The AIOT device and the reader device establish the ephemeral security context based on the ephemeral key.

Abstract: An example method performed by a vertical federated learning (VFL) server is disclosed. The method comprises receiving information indicating a plurality of network elements associated with one or more analytics services and respective ML models supported at the plurality of network elements for the one or more analytics services, selecting one or more of the plurality of network elements as one or more VFL clients to perform VFL for an analytics service based on the received information, performing sample and feature alignment with the one or more VFL clients to obtain alignment results, and determining a VFL model for the analytics service. The VFL model includes a global ML model for the VFL server and one or more local ML models for the one or more VFL clients. The method further comprises sending an indication of a local ML model determined for each VFL client.