Abstract: Apparatuses, methods, and systems are disclosed for wireless communication, including wireless communications for providing a blind assistance service. One method includes receiving, from a blind assistance device, an indication associated with a blind assistance service. The method includes determining an availability of a subscription to the Begin blind assistance service. The method includes selecting a device corresponding to the blind assistance service.

Abstract: Apparatuses, methods, and systems are disclosed for provisioning a UE with information to access a specific service. One apparatus includes a processor coupled with at least one memory and configured to transmit a first registration request message; receive a configuration comprising information for enabling use of at least one network slice from a plurality of network slices, the at least one network slice associated with the specific service, wherein the information includes a frequency priority for the at least one network slice; perform cell reselection based at least in part on the frequency priority; and transmit a second registration request message after performing the cell reselection, wherein the second registration request message comprises a request to register with the at least one network slice.

Abstract: There is provided a network entity in a wireless communication network. The network entity comprises a processor coupled with a memory and configured to cause the network entity to receive information comprising one or more selection criteria for selecting one or more UEs, and message information related to one or more messages that are to be sent to one or more UEs. The processor is configured to acquire a UE list based at least in part on the received information, the UE list indicating one or more UEs each of which satisfies the one or more selection criteria and is technically capable of receiving the one or more messages.

Abstract: Various aspects of the present disclosure relate to authorizing services related to machine learning (ML) model handling and artificial intelligence machine learning enablement (AIMLE) service operations control and management. A service device may transmit a first message requesting an access token including a scope related to ML handling or AIMLE service operations control and management, where the ML model handling includes one or more of ML model training capability evaluation, an ML model update, ML model performance monitoring, or ML model selection. The service device may receive, responsive to the first message, a second message including the access token, the access token including one or more claims associated with the scope. The claims may identify permissions for the ML model training capability evaluation, the ML model update, the ML model performance monitoring, the ML model selection, or the AIMLE service operations control and management.

Abstract: Various aspects of the present disclosure relate to lower layer security key generation. A network entity (NE) detects that an updated security key is available and generates, using the updated security key, at least one lower layer security key. The NE transmits, to a user equipment (UE), a lower layer message using the at least one lower layer security key. The UE detects that the updated security key is available and generates, using the updated security key, the at least one lower layer security key. The UE uses the at least one lower layer security key to receive the lower layer message. In some examples, the at least one lower layer security key includes a first lower layer security key for ciphering and a second lower layer security key for integrity protection. In some examples, the updated security key is an updated next generation NodeB (gNB) security key.

Abstract: Various aspects of the present disclosure relate to radio access network (RAN) authentication. System information and protection information for a radio access network (RAN) node are received. Based at least in part on a digital signature of the radio protection information or a message authentication code for integrity (MAC-I) of the radio protection information, an authenticity of the RAN node is verified.

Abstract: Various aspects of the present disclosure relate to pre-shared key authentication for wireless communications. A user equipment (UE) communicates, to a first network function, a session request message including a support indication. The support indication indicates access traffic steering, switching, and splitting (ATSSS) capability with pre-shared key (PSK) support. The first network function communicates, to a second network function, a request message including a temporary identifier, the support indication, and a security key. The first network function receives, from the second network function and in response to the request message, a response message including an acceptance indication based on the support indication. The acceptance indication indicates PSK-based authentication or certificate-based authentication for the requested session. The first network function communicates the acceptance indication to the UE.

Abstract: Various aspects of the present disclosure relate to ciphering and integrity protection activation. A user equipment (UE) may receive a first message from a network entity (NE) including data that indicates an authenticated encryption algorithm and an authenticated encryption mode associated with at least one of integrity protection or ciphering. The UE verifies an integrity of the first message using the authenticated encryption algorithm and based on the data. The UE transmits a second message to the NE based on the integrity of the first message being verified. The second message is associated with activation of at least one of the integrity protection or the ciphering for transmission and/or reception based on the authenticated encryption mode.

Abstract: Various aspects of the present disclosure relate to updating sensing parameters based on privacy criteria. A first network entity (NE) may obtain a request to trigger a sensing operation associated with a sensing target. The request includes one or more parameters associated with a sensing accuracy of the sensing operation. The first NE may output the request to a second NE with an update to the parameters to satisfy a privacy criteria associated with the sensing target. The privacy criteria indicates a threshold value associated with the sensing accuracy. The first NE may obtain one or more sensing measurements associated with the sensing target based on the update to the parameters. In some cases, the second NE may perform the sensing operation based on the update to the parameters to obtain the sensing measurements, and may output the sensing measurements and an indication that the privacy criteria are satisfied.

Abstract: Various aspects of the present disclosure relate to authorizing services related to artificial intelligence machine learning enablement (AIMLE) split operation or model inference. A service device may transmit a first message requesting an access token including a scope related to an AIMLE split operation service or an AIMLE model inference service. The service device may receive, responsive to the first message, a second message including the access token, the access token including information that identifies one or more permissions for the AIMLE split operation service or the AIMLE model inference service.

Abstract: Various aspects of the present disclosure relate to user consent (UC) in a wireless network. A user equipment (UE) receives a request for UC information associated with the UE. In some examples, the request includes a list of purposes for collecting or processing data. The UE generates a signature based on a public key, a secret key, header information, and one or more messages. In some examples, the one or more messages includes an indication of a respective purpose of the list of purposes and an indication of whether a user of the UE consents to the respective purpose. The UE transmits, based on the request, a response including the public key, the header information, the one or more messages, and the signature.

Abstract: Various aspects of the present disclosure relate to non-access stratum (NAS) for ambient Internet of Things (AIoT) devices. An AIoT device may communicate with an AIoT function (AIoTF) implemented by a network entity (NE). The AIoT device may, for example, receive a first AIoT NAS message that includes a security header type, a message type, and a message authentication code. The first AIoT NAS message may be a command request message (e.g., a read command message, a write command message, a disable command message), based on which the AIoT device initiates a corresponding operation. The AIoT device may transmit, to the AIoTF and in response to the first AIoT NAS message, a second AIoT NAS message that includes the security header type, a message type, and a message authentication code. The second AIoT NAS message may indicate a result of the corresponding operation.

Abstract: Various aspects of the present disclosure relate to authorization of network functions (NFs) involving an artificial intelligence (AI) agent. An apparatus, such as a network server with a NF, may receive a first request indicating a function goal. The NF may determine, by an AI agent and in response to authentication of the first request, a configuration tool type to perform actions associated with a target NF type to fulfill the function goal. The NF may obtain an access token authorizing access to the target NF type and access to a configuration tool NF associated with the configuration tool type. The NF may transmit a second request to perform the actions for target NFs associated with the target NF type, and receive information associated with the actions. The NF may transmit a goal fulfillment status based on the information associated with the actions.

Abstract: Various aspects of the present disclosure relate to lower layer security policy distribution and activation. An apparatus, such as a network equipment (NE), receives a lower layer security policy from a network function, the lower layer security policy for protecting one or more medium access control (MAC) control elements (MAC-CEs). An apparatus, such as a user equipment (UE), receives a radio resource control (RRC) message from the NE including a lower layer security policy, and the NE applies the lower layer security policy to the one or more MAC-CEs. In addition, the UE receives, from the NE, a layer 1 (L1)/layer 2 (L2) message including a security header and the one or more MAC-CEs, the security header indicating that the one or more MAC-CEs are protected according to the lower layer security policy. The UE verifies the one or more MAC-CEs based on the security header.

Abstract: Various aspects of the present disclosure relate to authorizing services related to task transfer, transfer learning (TL) enablement, and context transfer. A service device may transmit a first message requesting an access token including a scope related to a machine learning (ML) task transfer service, a TL enablement service, or an artificial intelligence machine learning enablement (AIMLE) context transfer service. The service device may receive, responsive to the first message, a second message including the access token, the access token including one or more claims associated with the scope that identify one or more permissions for the ML task transfer service, the TL enablement service, or the AIMLE context transfer service.

Abstract: Apparatuses, methods, and systems are disclosed for allowing connectivity between a UAV and a UAV-C. One method includes receiving, at a network function, a first request from a first USS. The first request indicates to replace a first UAV-C of a first UAV, and the first request includes an IP address of the first UAV, a requested QoS, flow descriptors identifying traffic, UAV to UAV-C pairing information, or some combination thereof. The method includes transmitting a second request to a policy control function. The second request includes a request to trigger policies to allow connectivity between the first UAV and a second UAV-C based on the UAV to UAV-C pairing information.

Abstract: Various aspects of the present disclosure relate to a wireless communications system that includes a network data analytics function (NWDAF) containing a model training logical function (MTLF), an NWDAF containing an analytics logical function (AnLF), and an analytics data repository function (ADRF). The NWDAF containing the MTLF generates a security context that protects a machine learning (ML) model that is stored in the ADRF. An NWDAF containing the AnLF obtains the protected ML model from the ADRF and obtains the security context from the NWDAF containing the MTLF. The security context is managed using a storage duration time that indicates when the ADRF is to delete the protected ML and the NWDAF containing the MTLF is to delete the security context, or a validity time that indicates when the ADRF is to delete the protected ML and the NWDAF containing the MTLF is to delete the security context.

Abstract: Apparatuses, methods, and systems are disclosed for handling security aspects for UAS in a 3GPP network. One apparatus contains a transceiver that receives a revocation indication message from a mobile communication network and a processor that deletes UAS-related authorization and security information corresponding to a UAV ID. The transceiver further transmits a revocation acknowledgement message to the mobile communication network.

Abstract: Various aspects of the present disclosure relate to receiving a first request message comprising a first set of parameters. Aspects of the present disclosure may relate to determining, based on the first set of parameters and a corresponding set of parameters stored in an internet-of-things (IoT) device, a mismatch of a sequence number (SQN) or a security key. Aspects of the present disclosure may relate to generating a synchronization ID based on a device SQN. Aspects of the present disclosure may relate to transmitting a response message comprising at least an expected result based on a default ID of the IoT device, and the device SQN.

Abstract: Various aspects of the present disclosure relate to adaptation of procedures established for both trusted non-3GPP access and untrusted non-3GPP access. For example, network nodes (e.g., TNGF and N3IWF) can assign or generate an identifier for a UE having an anonymous SUCI as a username during the access procedure. Using the assigned identifier, the network entity can bind or associate the UE to a security key, and communications with the UE within the SNPN can be correlated.