Abstract: Apparatuses, methods, and systems are disclosed for selecting a server application instance. One apparatus includes a network interface that communicates with a plurality of network functions in a mobile communication network and a processor that receives a request from a first network function to provide performance analytics for a first application. Here, the request includes a present location and a requested time. Additionally, the first application comprises a group of application instances. The processor generates performance analytics for the first application by using a first collection of performance data and reports the performance analytics to the first network function. Here, the performance analytics indicate a best application instance in the group of application instances for the present location and the requested time.

Abstract: Apparatuses, methods, and systems are disclosed for providing subscription data for an external subscriber. One apparatus includes a processor and a network interface that receives a registration request message from a remote unit and receives a subscription retrieval information. Here, the registration request message contains an external subscriber identifier and the subscription retrieval information is different than the external subscriber identifier of the remote unit. The processor controls the network interface to transmit to a network function in a mobile communication network a first request for subscription data retrieval using the subscription retrieval information and receive a response message from the network function that contains the UE subscription data. Here, the subscription retrieval information indicates that the subscription data is stored in a subscription owner outside the mobile communication network.

Abstract: Apparatuses, methods, and systems are disclosed for user authentication using a connection information package provided by a blockchain network. One apparatus includes a processor and a memory coupled to the processor, the memory comprising instructions executable by the processor to cause the apparatus to receive, from a smart contract, a set of connection information packages and to receive, from a first function, a request to authenticate a roaming user. The instructions are further executable by the processor to cause the apparatus to determine whether the first function is associated with a valid connection information package and to accept the request to authenticate the roaming user in response to the first function being associated with the valid connection information package.

Abstract: Apparatuses, methods, and systems are disclosed for associating the start of an encrypted data flow with an application. One apparatus includes a transceiver that communicates with a mobile communication network and a processor. The processor performs an authentication with a network encrypted traffic detection function and detects a data packet generated by a first application. The processor determines whether the data packet is associated with the start of an encrypted data flow for the first application and modifies the data packet to include detection information. The transceiver sends the modified data packet to the mobile communication network.

Abstract: Apparatuses, methods, and systems are disclosed for accessing a local data network via a mobile data connection. One apparatus includes a processor that determines to configure a first data connection to provide access to a local data network in addition to the remote data network based on information received from a session management function (SMF) and activates a network interface that communicates with the local data network in response to determining to configure the first data connection to provide access to the local data network. The processor transmits a downlink data packet to the remote unit over the first data connection and provides the remote unit with access to one or more services via the local data network using the activated network interface.

Abstract: Apparatuses, methods, and systems are disclosed for selecting a non-3GPP access network. One apparatus includes a memory coupled to a processor configured to cause the apparatus to generate a list indicating a set of PLMNs and a respective trusted connectivity type associated with each PLMN of the set of PLMNs, select a PLMN from the set of PLMNs, select a trusted connectivity type associated with the selected PLMN, and select a non-3GPP access network from a set of non-3GPP access networks based on the non-3GPP access network supporting the selected trusted connectivity type associated with the selected PLMN and a priority of the non-3GPP access network. Additionally, the processor causes the apparatus to perform a connection procedure with the selected PLMN using the selected trusted connectivity type and via the selected non-3GPP access network.

Abstract: Apparatuses, methods, and systems are disclosed for creating service rules based on user information retrieved from an application server. One apparatus includes a processor and a transceiver that communicates with one or more network functions in a mobile communication network. The transceiver receives a request to provide service rules for a user in response to a request received by the mobile communication network from the user to establish a data connection. The processor identifies one or more service contexts associated with the user and retrieves user information by using each of the identified one or more service contexts. A service context holds information for accessing user information in an application server. The processor creates one or more service rules by using the user information, wherein the mobile communication network applies the one or more service rules to configure the data connection.

Abstract: For establishing network connections via a trusted gateway function, a method includes: relaying a first set of messages of a first type between a remote unit and a mobile communication network (“MCN”) via a non-3GPP access, sending a connection setup request to the remote unit via the non-3GPP AN, and relaying subsequent messages of the first type between the remote unit and the MCN via the non-3GPP access, wherein the first set of messages are encapsulated with a first encapsulation protocol and wherein the first set of messages initiate a registration procedure to the MCN, wherein the connection request setup contains information for activating a second encapsulation protocol, wherein the subsequent messages are encapsulated with the second encapsulation protocol, and wherein the subsequent messages complete the registration procedure.

Abstract: Apparatuses, methods, and systems are disclosed for provisioning a UE with information to access a specific service. One apparatus (500) includes a transceiver (525) that communicates with a mobile communication network and a processor (505) that sends (705) a first registration request to the mobile communication network, the mobile communication network supporting a plurality of network slices. The processor (505) receives (705) configuration information from the mobile communication network, the configuration information enabling the apparatus to us eat least one network slice from the plurality of network slices, wherein the configuration information includes a frequency priority for the at least one network slice.

Abstract: Apparatuses, methods, and systems are disclosed for supporting TNGF reauthentication. One apparatus includes a network interface that communicates with a remote unit (i.e., UE) and with a mobile communication network. The apparatus includes a processor that receives a first EAP message containing a NAI from the UE. Here, the NAI indicates that the UE requests to reauthenticate with a source gateway function. The processor receives a UE context of the UE and derives a first EAP challenge packet using the UE context. Via the network interface, the processor sends the first EAP challenge packet to the UE. Here, the first EAP challenge packet is used to authenticate the target TNGF with the UE.

Abstract: Apparatuses, methods, and systems are disclosed for supporting TNGF reauthentication. One apparatus includes a processor that establishes connectivity with a first access point in a non-3GPP access network. The processor sends a first EAP message containing a NAI. If the NAI indicates a request to reauthenticate with a gateway function in the non-3GPP access network, then the processor receives a first EAP challenge packet used to authenticate the gateway function. If the NAI indicates a request to initiate a NAS signaling procedure with a mobile communication network, then the processor receives an EAP start packet. Here, the EAP start packet triggers the processor to send a first NAS message to the mobile communication network. The processor completes an EAP session initiated by one of the first EAP challenge packet and the EAP start packet.

Abstract: Apparatuses, methods, and systems are disclosed for relocating an access gateway during UE registration. One apparatus includes a transceiver that communicates with a non-3GPP access network and a processor that selects a first N3IWF and sends a first message to the first N3IWF containing a NAS message to initiate a first registration procedure with the mobile communication network. The processor receives a first response from the first N3IWF containing an address of a second N3IWF and an identity of an AMF. The processor sends a second message to the first N3IWF indicating that the first registration procedure via the first N3IWF is to be stopped and sends a third message to the second N3IWF indicting that the first registration is to be relocated to the second N3IWF. The processor completes the first registration procedure via the second N3IWF.

Abstract: Apparatuses, methods, and systems are disclosed for measuring RTT. One apparatus includes a processor and a transceiver that communicates with a mobile core network via an interworking function. The processor transmits a first request to establish a data connection between the apparatus and the mobile core network, wherein the first request includes a first indicator that the apparatus supports round trip time (“RTT”) measurements, the RTT measurements calculated using messages transmitted via the data connection and using an encapsulation header. The processor receives a first message from the interworking function and transmits a second message to the interworking function, wherein the first message includes a first encapsulation header comprising an echo request indication wherein the second message includes a second encapsulation header including an echo response indication.

Abstract: Apparatuses, methods, and systems are disclosed for relocating an access gateway during UE registration. One apparatus (600) includes an interface (640) that communicates with a remote unit and with a plurality of network functions in a mobile communication network. The apparatus (600) includes a processor (605) that initiates (705) registration of the remote unit with the mobile communication network and receives (710) a relocation command from an AMF while the registration is ongoing, the relocation command containing an address of a first TNGF and a first security key. If connectivity with the first TNGF is supported, then the processor (605) sends (720) a first request to the first TNGF, the first request containing a remote unit identity and an AMF identity. However, if connectivity with the first TNGF is not supported, then the processor (605) sends (725) a relocation reject message to the AMF.

Abstract: Apparatuses, methods, and systems are disclosed for access network selection for UEs not supporting NAS over non-3GPP access. One apparatus includes a processor and a transceiver for communicating with one or more non-3GPP access networks. The processor creates a first list of available PLMNs, each PLMN connectable via a non-3GPP access network without using a NAS protocol. The processor selects a first PLMN from the first list and selects a first network slice supported by the first PLMN. Here, the first network slice is identified by a first S-NSSAI. The processor creates a second list of available non-3GPP access networks and selects a first non-3GPP access network from the second list. The processor begins a connectivity procedure over the first non-3GPP access network. Here, the connectivity procedure creates a data connection for the apparatus via the first network slice in the first PLMN, and the connectivity procedure does not use the NAS protocol.

Abstract: Apparatuses, methods, and systems are disclosed for establishing a multi-access data connection. One apparatus includes a processor and a transceiver that communicates with one or more network functions in a mobile communication network. The processor receives a first session management request containing: a second session management request sent by a UE, a first indication that the UE requests a single-access data connection and a second indication that the UE allows the network to upgrade the data connection. The processor sends a request to establish a data path for each access network with which the UE is registered, where each data path is anchored at a common user plane network function in the mobile communication network.

Abstract: Apparatuses, methods, and systems are disclosed for user authentication using a connection information package provided by a blockchain network. One apparatus includes a processor and a transceiver that receives, from a first address on a blockchain network, a plurality of connection information packages and also receives, from a first function, a request to authenticate a user. The processor determines whether the first function is associated with one of the plurality of connection information packages. In response to the first function being associated with a valid one of the plurality of connection information package, the processor accepts the request to authenticate a user.

Abstract: Apparatuses, methods, and systems are disclosed for paging multi-SIM devices in the same network. One apparatus includes a first subscriber identity module (“SIM”), a second SIM, a processor and a transceiver that communicates with at least one communication network. The processor registers with a first communication network using the first SIM and registers with a second communication network using the second SIM. Here, the registration with the first communication network is associated with a first identifier, wherein registering with the second communication network includes indicating the first identifier to the second communication network upon determining that the first communication network and the second communication network are the same communication network.

Abstract: Apparatuses, methods, and systems are disclosed for authenticating with a mobile communication network. One apparatus includes a processor, a first transceiver that communicates with a mobile communication network via a first access network, and a second transceiver that communicates with the mobile communication network via a second access network. The processor sends a request to start authentication via the second access network and receives an extensible authentication protocol (“EAP”) request with a first expanded type via the second access network. The processor sends an EAP response via the second access network, the EAP response comprising the first expanded type, a first set of parameters, and a first message. Here, the first message is a same type of message usable to establish a connection with the mobile communication network over the first access network.

Abstract: Apparatuses, methods, and systems are disclosed for determining a RAT for an untrusted access network. One apparatus includes a processor and a transceiver that communicates with a first access network. The processor obtains ANI about the first access network, the AM including an access technology type for the first access network. The processor determines to register with a mobile communication network (e.g., a 5GC) via the first access network using an untrusted registration procedure and sends a first request (e.g., an IKE_AUTH Request) to establish a secure connection with a N3IWF in the mobile communication network. Here, the first request includes a registration request for the mobile communication network and the obtained ANI, wherein the obtained ANI is used by the mobile communication network to determine a RAT for the first access network.