Abstract: Techniques for determining a registration area are provided. A network entity may receive one or more indications of topology information from one or more radio access network nodes. Each indication of topology information is related to one or more tracking areas and each tracking area is associated with one or more cells in a radio access network served by each of the one or more radio access network nodes. The network entity may determine a registration area based at least in part on the received one or more indications of topology information related to the one or more tracking areas.

Abstract: Systems, methods, apparatuses, and computer program products for load and/or overload control in 5GC SBA are provided. One method may include transmitting, from a network function (NF) service consumer, overload control information (OCI) comprising scope information to a network function (NF) service producer or service communication proxy (SCP). The scope information may include at least one of: scope set to a notification uniform resource identifier (URI), or scope set to one of network function (NF) service instance, network function (NF) service set, network function (NF) instance, or network function (NF) set, and optionally a service name.

Abstract: Systems, methods, apparatuses, and computer program products for the assignment of a common edge application server (EAS) for ad-hoc groups of user equipment (UE). A method may include generating or updating binding information comprising a correlation between a group identifier of an ad-hoc group of user equipment (UE) and an edge application server (EAS) identifier assigned to the ad-hoc group, and storing, updating, and/or deleting the binding information, or causing the binding information to be stored, in a database.

Abstract: There is provided an apparatus, said apparatus comprising means for providing, from a first function instance of a set of first function instances to a second function, first information comprising an indication that a protocol session between the first function and the second function is controllable by different instances of the set of first function instances and receiving, at one of the set of first function instances from the second function, a protocol session related message based on the first information.

Abstract: Systems, methods, apparatuses, and computer program products for the assignment of a common edge application server (EAS) for ad-hoc groups of user equipment (UE). A method may include generating or updating binding information comprising a correlation between a group identifier of an ad-hoc group of user equipment (UE) and an edge application server (EAS) identifier assigned to the ad-hoc group, and storing, updating, and/or deleting the binding information, or causing the binding information to be stored, in a database.

Abstract: Preference information is received at a network repository function from a first network function, the preference information indicating one or more optional preferences for a respective second network function or network function service. Information is provided to the first network function about one or more second network functions or network function services, the one or more second network functions or network function services being selected taking into account the preference information.

Abstract: There is provided an apparatus comprising at least one processor; and at least one memory storing instructions that, when executed by the at least one processor, cause the apparatus to perform at least: receiving from at least one security edge protection proxy, SEPP, a registration message indicative of at least: at least one remote public land mobile network, PLMN, and/or at least one remote stand-alone non-public network, SNPN, the at least one SEPP is connected to; at least one agreed interface purpose per remote PLMN and/or remote SNPN the at least one SEPP is connected to, wherein the interface purpose is a purpose of intended usage of a connection over an inter-network interface; receiving a discovery request for a SEPP, which is configured to support connecting to a target PLMN or SNPN for interface purpose or interface purposes specified in the discovery request; selecting, among the at least one SEPP, at least one SEPP configured to support connecting to the target PLMN or target SNPN for the interf

Abstract: Systems, methods, apparatuses, and computer program products for determination of non-3GPP interworking function(s) (N3IWFs), which support slices targeted by a device or user equipment (UE), are provided. One method may include transmitting, by a UE or device, a request to at least one network node. The request may be to obtain information on network slices supported by at least one N3IWF. The method may also include receiving, from the at least one network node, a response comprising information for one or more N3IWFs and, based on the received information for the N3IWF(s), selecting one of the N3IWF(s) to use to connect to a 5G core network (5GC).

Abstract: There is provided a method for an apparatus for a network function, the apparatus for the network function, and a computer program for the apparatus, that causes the apparatus to: receive an indication that a first user equipment and/or a first user plane function configured to transmit first user traffic is associated with a first replication handling function, the first replication handling function being configurable to coordinate at least one replication-based redundancy mechanism performed on at least part of said first user traffic; determine a first set of replication rules for use by the first replication handling function determining when the at least one replication-based redundancy mechanism is performed on at least part of said first user traffic; and cause the first set of replication rules to be provided to the first replication handling function.

Abstract: There is provided an apparatus, method and computer program fora network function, that causes the apparatus to signal, to a replication handling function, a set of replication criteria defining, for one or more session associated with a first user traffic and a second user traffic, when at least one of the first and second user traffic will be transmitted using a replication-based redundancy mechanism, wherein each of the first and second user traffic are associated with a respective quality of service requirement for transmission.

Abstract: Systems, methods, apparatuses, and computer program products for access traffic steering, switching, and splitting (ATSSS) with branching point (BP) on the path are provided. The method may include determining that an existing user plane function is sub-optimal in terms of routing and latency incurred with respect to traffic for a given packet data unit session of a user equipment. The method may also include establishing, based on the determination, a new user plane function for the packet data unit session. The method may further include establishing a branching point user plane function that interfaces with the existing user plane function, the new user plane function, and a plurality of network access types. In addition, the method may include updating the user equipment by providing the user equipment with relevant multi-access traffic steering rules.

Abstract: Systems, methods, apparatuses, and computer program products for access traffic steering, switching, and splitting (ATSSS) with branching point (BP) or uplink classifier (ULCL) on the path. The method may include, setting up, in response to a request, a first user plane function with multi-access traffic steering functionality. The method may also include requesting a user equipment to establish a new multi-access packet data unit session to a same data network name and slice as an old multi-access packet data unit session, or request the user equipment to release the old multi-access packet data unit session with a second user plane function and to initiate a multi-access packet data unit session re-establishment. The method may further include sending, to the user equipment, multi-access rules for the new multi-access packet data unit session, a new internet protocol address, and new multipath transmission control protocol proxy information.

Abstract: According to an example aspect of the present invention, there is provided an apparatus configured to process a request for an access token authorizing access for a network function consumer to a service provided by a network function producer, the request being received in the apparatus from a service communication proxy, wherein the processing comprises one or more of the following verification: verification that a credential data element comprised in the request, cryptographically signed by the network function consumer, identifies the request, the service or a type of the service, and verification with reference to a further node, or to a profile of the network function consumer, that the service communication proxy is authorized to act on behalf of the network function consumer, and transmit, responsive to at least one of the verifications being successful, the requested access token, the access token comprising an indication of the service communication proxy.

Abstract: There is provided an apparatus, method and computer program for a proxy function that causes the apparatus to: receive, from a network repository function, profile information relating to a network function service producer: determine from the profile information whether the network function service producer is able to use an access token for subscribing to a service that indicates a plurality of entities; select a mechanism for requesting an access token for subscribing to a service in dependence on the determination; and request, from the network repository function, a first access token for subscribing to a service on behalf of a first network function service consumer based on the selected mechanism.

Abstract: There is provided an apparatus comprising at least one processor and at least one memory including a computer program code, the at least one memory and computer program code configured to, with the at least one processor, cause the apparatus at least to: receive, at a first network repository function in a first network from a security edge protection proxy in a second network, a request for discovering one or more roaming hubs and/or security edge protection proxies in the first network; and send, from the first network repository function to the security edge protection proxy in the second network, a response comprising information identifying the one or more roaming hubs and/or security edge protection proxies in the first network and information identifying one or more further networks which can be reached via a respective roaming hub and/or security edge protection proxy in the first network.

Abstract: According to an example aspect of the present invention, there is provided an apparatus configured to function as a network function repository, and transmit to a network function consumer an access token authorizing access to a service provided by a network function producer, the access token comprising an at least one of: indication of a fully qualified domain name of the network function consumer, an indication of a domain from which access to the network function producer is allowed and an indication of a stand-alone non-public network from which access to the network function producer is allowed.

Abstract: There is provided an apparatus that comprises means for receiving a request from a second network function including information relating to the second network function, determining, based on the information relating to the second network function, at least one proxy function and in response to the request, providing to the second network function information relating to the at least one determined proxy function.

Abstract: Systems, methods, and software for inter-PLMN communications. In one embodiment, a roaming hub receives a message from a sending entity across an N32 interface, and determines whether the message includes an HTTP custom header that indicates a PLMN that is validated. When the message as received does not include the HTTP custom header, the roaming hub adds the HTTP custom header to the message that indicates the PLMN of the sending entity, integrity protects the HTTP custom header, and forwards the message toward a receiving entity.

Abstract: Techniques for determining a registration area are provided. A network entity may receive one or more indications of topology information from one or more radio access network nodes. Each indication of topology information is related to one or more tracking areas and each tracking area is associated with one or more cells in a radio access network served by each of the one or more radio access network nodes. The network entity may determine a registration area based at least in part on the received one or more indications of topology information related to the one or more tracking areas.

Abstract: Techniques for enforcing packet detection rules within communication systems are provided. A network entity may configure a user plane function to detect whether a domain name system request sent by a user equipment satisfies one or more packet detection rules. The network entity may receive, from a user plane function, a report that a domain name system request sent by the user equipment has been detected as non-compliant with instructions sent to the user equipment. The network entity may cause one or more corrective actions relating to traffic offloading.