Abstract: According to an example aspect of the present invention, there is provided an apparatus configured to function as a network function repository, and transmit to a network function consumer an access token authorizing access to a service provided by a network function producer, the access token comprising an at least one of: indication of a fully qualified domain name of the network function consumer, an indication of a domain from which access to the network function producer is allowed and an indication of a stand-alone non-public network from which access to the network function producer is allowed.

Abstract: There is provided an apparatus that comprises means for receiving a request from a second network function including information relating to the second network function, determining, based on the information relating to the second network function, at least one proxy function and in response to the request, providing to the second network function information relating to the at least one determined proxy function.

Abstract: Systems, methods, and software for inter-PLMN communications. In one embodiment, a roaming hub receives a message from a sending entity across an N32 interface, and determines whether the message includes an HTTP custom header that indicates a PLMN that is validated. When the message as received does not include the HTTP custom header, the roaming hub adds the HTTP custom header to the message that indicates the PLMN of the sending entity, integrity protects the HTTP custom header, and forwards the message toward a receiving entity.

Abstract: Techniques for determining a registration area are provided. A network entity may receive one or more indications of topology information from one or more radio access network nodes. Each indication of topology information is related to one or more tracking areas and each tracking area is associated with one or more cells in a radio access network served by each of the one or more radio access network nodes. The network entity may determine a registration area based at least in part on the received one or more indications of topology information related to the one or more tracking areas.

Abstract: Techniques for enforcing packet detection rules within communication systems are provided. A network entity may configure a user plane function to detect whether a domain name system request sent by a user equipment satisfies one or more packet detection rules. The network entity may receive, from a user plane function, a report that a domain name system request sent by the user equipment has been detected as non-compliant with instructions sent to the user equipment. The network entity may cause one or more corrective actions relating to traffic offloading.

Abstract: There is provided an apparatus, said apparatus comprising means for providing, from a first function instance of a set of first function instances to a second function, first information comprising an indication that a protocol session between the first function and the second function is controllable by different instances of the set of first function instances and receiving, at one of the set of first function instances from the second function, a protocol session related message based on the first information.

Abstract: Various aspects described herein relate to apparatus, methods, and computer programs for retrieving an identifier of a subscription network of a mobile subscriber in a communication system. For example, one such method includes registering with a network repository function network function as a mobile number portability network function providing a service allowing a consumer to retrieve an identifier of a subscription network of a mobile subscriber. This method also includes receiving a request from the consumer to retrieve the identifier of the subscription network of the mobile subscriber. This method further includes sending a response to the consumer comprising information to retrieve the identifier of the subscription network of the mobile subscriber.

Abstract: According to an example aspect of the present invention, there is provided a method comprising, receiving, by an intermediary network function, a subscription request from a network function consumer requesting data of a network function producer, wherein the subscription request comprises a client credential assertion of the network function consumer and an access token, authorizing and authenticating, by the intermediary network function, the network function consumer upon successful validation of the access token and the client credential assertion validation and transmitting, by the intermediary network function, an access token request to an authorization server to get another access token, wherein said another access token is to be used to validate the network function consumer to access services of the network function producer, and the access token request comprises the client credential assertion of the network function consumer requesting data of the network function producer.

Abstract: According to an example aspect of the present invention, there is provided a method comprising receiving, by a network repository function, a registration request from an application function, wherein the registration request comprises at least one parameter that needs to be used for generating an access token for the application function, the at least one parameter being associated with the application function, registering the application function by the network repository function and transmitting, by the network repository function, a response to the registration request, wherein the response comprises the at least one parameter associated with the application function.

Abstract: There is provided an apparatus comprising means for receiving information about an identification of a network function set associated with at least one packet data network connection. The means is further configured for, in response to receiving an indication that a network function instance of the network function set supporting the at least one packet data network connection is no longer available, transferring the at least one packet data network connection from the network function instance to another network function instance comprised within the network function set.

Abstract: Systems, methods, apparatuses, and computer program products for load and/or overload control in 5GC SBA are provided. One method may include transmitting, from a network function (NF) service consumer, overload control information (OCI) comprising scope information to a network function (NF) service producer or service communication proxy (SCP). The scope information may include at least one of: scope set to a notification uniform resource identifier (URI), or scope set to one of network function (NF) service instance, network function (NF) service set, network function (NF) instance, or network function (NF) set, and optionally a service name.

Abstract: There is provided an apparatus that comprises means for receiving a request from a second network function including information relating to the second network function, determining, based on the information relating to the second network function, at least one proxy function and in response to the request, providing to the second network function information relating to the at least one determined proxy function.

Abstract: Preference information is received at a network repository function from a first network function, the preference information indicating one or more optional preferences for a respective second network function or network function service. Information is provided to the first network function about one or more second network functions or network function services, the one or more second network functions or network function services being selected taking into account the preference information.

Abstract: An apparatus and a method are provided by which a virtual network function is instantiated. The virtual network function comprises at least one virtual network function component. Each virtual network function component is described by a virtual deployment unit. At least one virtual deployment unit is indicated as an inactive virtual deployment unit. Upon instantiating a virtual network function, only a virtual network function component which is not described by an inactive deployment unit is instantiated when instantiating the virtual network function.

Abstract: An apparatus and a method are described by which a virtual network function is instantiated, wherein the virtual network function comprises at least one virtual network function component, each virtual network function component being described by a virtual deployment unit, and at least one virtual deployment unit being indicated as an inactive virtual deployment unit, wherein upon instantiating a virtual network function, only a virtual network function component is instantiated which is not described by an inactive deployment unit when instantiating the virtual network function.