Abstract: A method for an apparatus, the method comprising: receiving a policy, the policy comprising policy information indicating preferences on which access paths from a plurality of access paths a multi-access data session for application traffic is to be established, the plurality of access paths being over at least two accesses operating according to a first standard or at least two accesses operating according to a further standard; selecting, for a multi-access data session, at least two access paths from the plurality of access paths based on the policy information; and requesting establishment of the multi-access data session for the application traffic over the selected at least two access paths, the selected at least two access paths being over the at least two accesses operating according to the first standard or at least two accesses operating according to the further standard

Abstract: Systems, methods, apparatuses, and computer program products for access traffic steering, switching, and splitting (ATSSS) with branching point (BP) or uplink classifier (ULCL) on the path. The method may include, setting up, in response to a request, a first user plane function with multi-access traffic steering functionality. The method may also include requesting a user equipment to establish a new multi-access packet data unit session to a same data network name and slice as an old multi-access packet data unit session, or request the user equipment to release the old multi-access packet data unit session with a second user plane function and to initiate a multi-access packet data unit session re-establishment. The method may further include sending, to the user equipment, multi-access rules for the new multi-access packet data unit session, a new internet protocol address, and new multipath transmission control protocol proxy information.

Abstract: Described are apparatuses, methods, and computer program products for enabling splitting, switching, and steering of access traffic in a system, e.g., a fifth-generation (5G) system. Access and mobility management functions (AMF) of the 5G system forward one or more of the registration requests to unified data management (UDM) functions of the PLMNs. UDM function determines whether evolved packet system (EPS) interworking (IWK) is allowed for respective registration requests based on subscription, deployment, system capabilities, a radio access technology (RAT) of an access path between the UE and the 5G system, etc. UE can include an indication that EPS IWK is requested and/or required in a registration request.

Abstract: There is provided a method for an apparatus for a network function, the apparatus for the network function, and a computer program for the apparatus, that causes the apparatus to: receive an indication that a first user equipment and/or a first user plane function configured to transmit first user traffic is associated with a first replication handling function, the first replication handling function being configurable to coordinate at least one replication-based redundancy mechanism performed on at least part of said first user traffic; determine a first set of replication rules for use by the first replication handling function determining when the at least one replication-based redundancy mechanism is performed on at least part of said first user traffic; and cause the first set of replication rules to be provided to the first replication handling function.

Abstract: There is provided an apparatus, method and computer program for a proxy function that causes the apparatus to: receive, from a network repository function, profile information relating to a network function service producer: determine from the profile information whether the network function service producer is able to use an access token for subscribing to a service that indicates a plurality of entities; select a mechanism for requesting an access token for subscribing to a service in dependence on the determination; and request, from the network repository function, a first access token for subscribing to a service on behalf of a first network function service consumer based on the selected mechanism.

Abstract: An apparatus comprising means for determining, that data duplication over a plurality of respective paths between one or more communication devices and a network entity is to be modified to reduce or suspend the data duplication.

Abstract: Various aspects described herein relate to apparatus, methods, and computer programs for retrieving an identifier of a subscription network of a mobile subscriber in a communication system. For example, one such method includes registering with a network repository function network function as a mobile number portability network function providing a service allowing a consumer to retrieve an identifier of a subscription network of a mobile subscriber. This method also includes receiving a request from the consumer to retrieve the identifier of the subscription network of the mobile subscriber. This method further includes sending a response to the consumer comprising information to retrieve the identifier of the subscription network of the mobile subscriber.

Abstract: Systems, methods, apparatuses, and computer program products for determination of non-3GPP interworking function(s) (N3IWFs), which support slices targeted by a device or user equipment (UE), are provided. One method may include transmitting, by a UE or device, a request to at least one network node. The request may be to obtain information on network slices supported by at least one N3IWF. The method may also include receiving, from the at least one network node, a response comprising information for one or more N3IWFs and, based on the received information for the N3IWF(s), selecting one of the N3IWF(s) to use to connect to a 5G core network (5GC).

Abstract: According to an example aspect of the present invention, there is provided an apparatus configured to function as a network function repository, and transmit to a network function consumer an access token authorizing access to a service provided by a network function producer, the access token comprising an at least one of: indication of a fully qualified domain name of the network function consumer, an indication of a domain from which access to the network function producer is allowed and an indication of a stand-alone non-public network from which access to the network function producer is allowed.

Abstract: Embodiments of the present disclosure relate to devices, methods, apparatuses and computer readable storage media of NRF policy control for different PLMNs. The method comprises in accordance with a determination that a request for a service associated a second device is received from a third device, determining a target network function profile associated with the second device dedicated for the third device at least based on the profile configuration template, reference network function profile and a target network associated with the third device; and transmitting, to the third device, the target network function profile associated with the second device dedicated for the third device. With the solution of the present disclosure, a flexible NRF control policy can be achieved.

Abstract: A non-terrestrial core network entity is provided. The non-terrestrial core network entity comprises: receiving data from a user equipment, wherein the data comprises Control Plane (CP) data or Non-Internet Protocol Delivery (NIDD) data; buffering the data during a time period in which the non-terrestrial core network entity is not connected to a terrestrial core network entity; when the non-terrestrial core network entity is connected to the terrestrial network entity, sending the data to the terrestrial core network entity.

Abstract: According to an example aspect of the present invention, there is provided an apparatus configured to process a request for an access token authorizing access for a network function consumer to a service provided by a network function producer, the request being received in the apparatus from a service communication proxy, wherein the processing comprises one or more of the following verification: verification that a credential data element comprised in the request, cryptographically signed by the network function consumer, identifies the request, the service or a type of the service, and verification with reference to a further node, or to a profile of the network function consumer, that the service communication proxy is authorized to act on behalf of the network function consumer, and transmit, responsive to at least one of the verifications being successful, the requested access token, the access token comprising an indication of the service communication proxy.

Abstract: There are provided measures for enabling/realizing external steering of access traffic multipath communication in a mobile communication system, e.g. an external access traffic multipath communication steering function. Some such measures include that a session management function element or instance in a mobile communication system initiates control of establishment of at least one user plane session for access traffic multipath communication, obtains communication information of an external steering function element or instance to be used for steering access traffic multipath communication in the at least one user plane session, creates access traffic multipath communication rules, forwarding action rules and multi access rules for access traffic multipath communication in the at least one user plane session, and provides the access traffic multipath communication rules and the communication information of the external steering function element or instance to the communication function element or instance.

Abstract: Systems, methods, apparatuses, and computer program products for access traffic steering, switching, and splitting (ATSSS) with branching point (BP) on the path are provided. The method may include determining that an existing user plane function is sub-optimal in terms of routing and latency incurred with respect to traffic for a given packet data unit session of a user equipment. The method may also include establishing, based on the determination, a new user plane function for the packet data unit session. The method may further include establishing a branching point user plane function that interfaces with the existing user plane function, the new user plane function, and a plurality of network access types. In addition, the method may include updating the user equipment by providing the user equipment with relevant multi-access traffic steering rules.

Abstract: There is provided an apparatus comprising means for receiving information about an identification of a network function set associated with at least one packet data network connection. The means is further configured for, in response to receiving an indication that a network function instance of the network function set supporting the at least one packet data network connection is no longer available, transferring the at least one packet data network connection from the network function instance to another network function instance comprised within the network function set.

Abstract: According to an example aspect of the present invention, there is provided a method comprising, receiving, by an intermediary network function, a subscription request from a network function consumer requesting data of a network function producer, wherein the subscription request comprises a client credential assertion of the network function consumer and an access token, authorizing and authenticating, by the intermediary network function, the network function consumer upon successful validation of the access token and the client credential assertion validation and transmitting, by the intermediary network function, an access token request to an authorization server to get another access token, wherein said another access token is to be used to validate the network function consumer to access services of the network function producer, and the access token request comprises the client credential assertion of the network function consumer requesting data of the network function producer.

Abstract: Techniques for accessing a core network via access points and gateway functions are provided. For example, a method comprises: determining one or more candidate gateway functions for accessing the core network via the access point; transmitting, to the one or more candidate gateway functions or to a core network function, a request for use of the one or more gateway functions to access the core network; and receiving, from the gateway function or from the core network function, a request response per candidate gateway function, the request response being configured to indicate whether the access to the core network via the respective gateway function is rejected and, in the case of rejection, to indicate a cause of rejection. The method may be performed by the terminal device (e.g., a user equipment, UE). Corresponding methods that can be performed by a network device are also provided.

Abstract: Described are apparatuses, methods, and computer program products for enabling splitting, switching, and steering of access traffic in a system, e.g., a fifth-generation (5G) system. Access and mobility management functions (AMF) of the 5G system forward one or more of the registration requests to unified data management (UDM) functions of the PLMNs. UDM function determines whether evolved packet system (EPS) interworking (IWK) is allowed for respective registration requests based on subscription, deployment, system capabilities, a radio access technology (RAT) of an access path between the UE and the 5G system, etc. UE can include an indication that EPS IWK is requested and/or required in a registration request.

Abstract: There is provided an apparatus comprising at least one processor and at least one memory including a computer program code, the at least one memory and computer program code configured to, with the at least one processor, cause the apparatus at least to: receive, at a first network repository function in a first network from a security edge protection proxy in a second network, a request for discovering one or more roaming hubs and/or security edge protection proxies in the first network; and send, from the first network repository function to the security edge protection proxy in the second network, a response comprising information identifying the one or more roaming hubs and/or security edge protection proxies in the first network and information identifying one or more further networks which can be reached via a respective roaming hub and/or security edge protection proxy in the first network.

Abstract: Techniques for determining a registration area are provided. A network entity may receive one or more indications of topology information from one or more radio access network nodes. Each indication of topology information is related to one or more tracking areas and each tracking area is associated with one or more cells in a radio access network served by each of the one or more radio access network nodes. The network entity may determine a registration area based at least in part on the received one or more indications of topology information related to the one or more tracking areas.