Abstract: Apparatuses, methods, and systems are disclosed for determining remote unit behavior parameters. One method includes receiving a message including parameters associated with an application in a remote unit. The method includes determining a first set of parameters including a first portion of the parameters, wherein each parameter of the first set of parameters corresponds to a remote unit behavior. The method includes determining a second set of parameters including a second portion of the parameters, wherein each parameter of the second set of parameters corresponds to a service behavior. The method includes associating the second set of parameters with a data network name, a single network slice selection assistance information, or a combination thereof.

Abstract: Apparatuses, methods, and systems are disclosed for determining remote unit behavior parameters. One method includes receiving a message including parameters associated with an application in a remote unit. The method includes determining a first set of parameters including a first portion of the parameters, wherein each parameter of the first set of parameters corresponds to a remote unit behavior. The method includes determining a second set of parameters including a second portion of the parameters, wherein each parameter of the second set of parameters corresponds to a service behavior. The method includes associating the second set of parameters with a data network name, a single network slice selection assistance information, or a combination thereof.

Abstract: Apparatuses, methods, and systems are disclosed for accessing a local data network via a mobile data connection. One method includes determining to configure a first data connection to provide a user equipment (“UE”) with access to both a local data network and a remote data network based on information received from a session management function (“SMF”) and transmitting a downlink data packet to the UE via the first data connection. The method includes activating a network communicate with the local data network in response to determining to configure the first data connection to provide the UE with access to the local data network and providing the UE with access to one or more services via the local data network using the network interface.

Abstract: Apparatuses, methods, and systems are disclosed for associating the start of an encrypted data flow with an application. One apparatus includes a memory storing instructions executable by a processor to cause the apparatus to authenticate an encrypted traffic detection function (“ETDF”) of the remote unit and to provide the remote unit with a list of application identifiers for which encrypted traffic detection information is to be provided, in response to successfully authenticating the ETDF of the remote unit. The instructions are executable by the processor to cause the apparatus to generate detection information for each application in the list of application identifiers and to send the list of application identifiers and the detection information for each application in the list of application identifiers to a network function in the mobile communication network.

Abstract: Apparatuses, methods, and systems are disclosed for end-to-end QoS fulfillment. One apparatus includes an application interface that receives a request to manage the QoS of an end-to-end application session. Here, the end-to-end application session comprises a first session of a first UE connected to a first network and a second session of a second UE connected to a second network. The processor configures a first QoS parameter for the first session of the first UE and a second QoS parameter for the second session of the second UE and receives a trigger event related to the QoS change of the second QoS parameter. The processor determines a third QoS parameter for the first session of the first UE based on the QoS change of the second QoS parameter and communicates the third QoS parameter to the first network.

Abstract: Techniques are disclosed for creating service rules based on user information retrieved from an application server. One apparatus in a network that supports said techniques includes a memory storing instructions executable by a processor to cause the apparatus to receive, from a PCF, a request to provide service rules for a user and to identify one or more service contexts associated with the user, each service context holding information for accessing user information in an external application server. The instructions further cause the apparatus to retrieve user information from the external application server using each of the identified one or more service contexts, and to create one or more service rules by using the retrieved user information, where the network applies the one or more service rules to configure the data connection requested by the user.

Abstract: Apparatuses, methods, and systems are disclosed for reconfiguring a data connection using new parameters. One apparatus includes a transceiver that communicates with a UE and a processor that registers the UE with a mobile communication network using a first set of parameters, where the first set of parameters is based on a UE configuration. The processor identifies a second set of parameters to be used by the UE in the mobile communication network. Via the transceiver, the processor sends the second set of parameters to the UE and sends mapping information which indicates how the at least one parameter in the second set of parameters corresponds to at least one new parameter for the UE configuration.

Abstract: Apparatuses, methods, and systems are disclosed for providing enhanced QoS via a non-3GPP access network. One apparatus includes a transceiver communicates with a gateway function in a non-3GPP access network. The apparatus includes a processor that receives a create security association request for each of at least one security association. Here, each create security association request includes additional QoS information for the security association. The processor reserves, for each create security association request, at least one access resource in the access network based on the additional QoS information and sends a create security association response to the gateway function for each create security association request, each create security association response indicating whether the corresponding security association is accepted.

Abstract: For establishing network connections via a trusted gateway function, a method includes relaying a first set of messages of a first type between a remote unit and a mobile communication network via a non-3GPP access network, sending a connection setup request to the remote unit via the non-3GPP access network, and relaying subsequent messages of the first type between the remote unit and the mobile communication network via the non-3GPP access, where the first set of messages are encapsulated with a first encapsulation protocol and where the first set of messages initiate a registration procedure to the mobile communication network, where the connection request setup contains information for activating a second encapsulation protocol, where the subsequent messages are encapsulated with the second encapsulation protocol, and where the subsequent messages complete the registration procedure.

Abstract: Apparatuses, methods, and systems are disclosed for supporting authentication with a mobile core network using a concealed identity. One apparatus includes a processor that sends a first authentication message that includes a concealed identifier to a network function to authenticate with a mobile communication network via a non-3GPP access network. The processor receives a second authentication message from the network function in response to the first authentication message. The second authentication message comprises an authentication response based on the concealed identifier. The processor completes authentication with the mobile communication network in response to the authentication response comprising a challenge packet. The processor receives configuration information for accessing the mobile communication network in response to successful authentication with the mobile communication network.

Abstract: Apparatuses, methods, and systems are disclosed for access network selection for UEs not supporting the Non-Access Stratum (“NAS”) protocol over non-3GPP access. One method includes creating a first list of available PLMNs, each PLMN connectable via a non-3GPP access network using a 5G connectivity without the NAS protocol. The method includes selecting a first PLMN from the first list and creating a second list of available non-3GPP access networks. The method includes selecting a first non-3GPP access network from the second list and beginning a connectivity procedure over the first non-3GPP access network, where the connectivity procedure creates a data connection for the apparatus via the first PLMN, and where the connectivity procedure does not use the NAS protocol.

Abstract: Apparatuses, methods, and systems are disclosed for selecting an authentication type in a 5G network. One apparatus includes a processor and a network interface-640 that receives a first message requesting to register a remote unit to the mobile communication network, where the remote unit is connected to a non-3GPP access network and the remote unit does not support the NAS protocol. The processor determines an authentication request type for the remote unit, where the authentication request type is not based on the NAS protocol. The processor creates a NAS registration message on behalf of the remote unit and sends a second message to an access management function in the mobile communication network, where the second message contains the NAS registration message and the determined authentication request type.

Abstract: Apparatuses, methods, and systems are disclosed that support techniques for measuring round trip time (“RTT”). One method includes transmitting a first request for establishing a data connection between a User Equipment (“UE”) and a mobile core network and receiving, from an interworking function (“IWF”), a first message including a first encapsulation packet header that contains an echo request indication, where the first encapsulation packet header complies with a General Routing Encapsulation (“GRE”) protocol. The method includes transmitting, to the IWF, a second message including a second encapsulation packet header that contains an echo response indication, where the second encapsulation packet header complies with the GRE protocol.

Abstract: Apparatuses, methods, and systems are disclosed for selecting a network slice type for media traffic of an IMS session. One apparatus includes a processor and a transceiver that communicates with a mobile communication network (“MCN”) using multiple network connections. The processor receives a first request to establish an IMS session with an IMS network, the first request including multiple media types. Here, the IMS network is reachable via the multiple network connections, each network connection communicating with a different network slice type of the MCN. The processor selects a network connection to be used for communicating media traffic for each media type and transmits a IMS session request to the IMS network using a first network connection. Here, the IMS session request indicates parameters to be used for communicating the media traffic for each media type using the selected network connection.

Abstract: Apparatuses, methods, and systems are disclosed for establishing a multi-access data connection. One apparatus includes a processor coupled to a memory storing instructions executable by the processor to cause the apparatus to transmit, over a first access network, a first request to establish a data connection, the first request including a first indication requesting a single-access data connection and a second indication that an upgrade from the single-access data connection to a multi-access data connection is allowed. The instructions are executable by the processor to cause the apparatus to receive a third indication that the single-access data connection is to be upgraded to the multi-access data connection for transporting user-plane traffic over the first access network and a second access network and to establish the multi-access data connection over the first access network and the second access network based on the third indication.

Abstract: Apparatuses, methods, and systems are disclosed for supporting remote unit reauthentication. One apparatus apparatus includes a processor and a transceiver that sends a first authentication message to a network function in a mobile communication network and receives a second authentication message from the network function in response to the first authentication message. Here, the first authentication message contains an indicator that the apparatus supports EAP Reauthentication Protocol and the second authentication message contains a key management domain name indicating a group of network functions that can share reauthentication security context. The processor derives reauthentication security context in response to successful authentication with the mobile communication network and locally stores the received key management domain name and the derived reauthentication security context for subsequent reauthentication with the mobile communication network.

Abstract: Apparatuses, methods, and systems are disclosed for managing a C2 communication mode of operation. One apparatus includes a transceiver supporting a network interface that receives an application request to manage an operation mode of C2 communication for a first UAS. Here, the first UAS comprises a first UAV and a first UAV-C. The network interface receives a first report from an application of the first UAS, where the first application is located in one of the first UAV and the first UAV-C. The apparatus includes a processor that determines to switch the operation mode of C2 communication for the first UAS based on the received first report and transmits, via the network interface, a C2 communication switching instruction to the first UAS.

Abstract: Apparatuses, methods, and systems are disclosed for supporting remote unit reauthentication. One apparatus includes a network interface that receives a first authentication message for reauthenticating a remote unit and a processor that verifies a first domain-name. The first domain-name identifies a key management domain name and an associated gateway function holding a reauthentication security context. Here, the first authentication message includes a NAI containing a first username and the first domain-name. The processor validates the first authentication message using at least the first username and generates a second authentication message in response to successfully validating the first authentication message. Via the network interface, the processor responds to the first authentication message by sending the second authentication message.

Abstract: Apparatuses, methods, and systems are disclosed for authenticating with a mobile communication network. One apparatus includes a memory comprising instructions executable by a processor to cause the apparatus to receive, from a remote unit, a first request to start authentication via a non-3GPP access network and to send, to the remote unit, an EAP-Start packet to initiate an EAP-5G session between the apparatus and the remote unit for exchanging NAS messages between the remote unit and an AMF via the apparatus. Here, the EAP-5G session utilizes EAP-5G packets having an expanded EAP type and a 3GPP vendor ID, the NAS messages being encapsulated within the EAP-5G packets. The apparatus further receives, from the remote unit, an EAP-5G response packet including a NAS request message and a first set of AN-Params including a PLMN ID of the mobile communication network and NSSAI.

Abstract: Apparatuses, methods, and systems are disclosed for using a pseudonym for access authentication over non-3GPP access. One apparatus includes a processor and a transceiver that communicates with a mobile communication network using a 3GPP access network and a non-3GPP access network. The processor sends a registration message to a first network function in the mobile communication network via the 3GPP access network, the first authentication message comprising a first indicator and a SUCI for the apparatus, wherein the first indicator comprises an indication that the apparatus has the capability for access authentication for non-3GPP access in an EPS. The processor receives a first identity pseudonym for the apparatus in response to the registration message comprising the first indicator and performs access authentication via a non-3GPP access network using the first identify pseudonym.