Abstract: A user equipment (UE) may attempt to access an edge data network. The UE generates a first credential based on a second credential, the second credential generated for a procedure between the UE and a cellular network, generating an identifier corresponding to the first credential, and generates a multi-access edge computing (MEC) authorization parameter. The UE then transmits an application registration request message to a server associated with an edge data network, the application registration request message including an indication of the first credential, the identifier corresponding to the first credential and the first authorization parameter. The UE then receives an authentication accept message or an authentication reject message from the server associated with the edge data network.

Abstract: The present application relates to devices and components including apparatus, systems, and methods to perform authentication procedures for direct non-access stratum (NAS) connections in a network.

Abstract: A user equipment (UE) includes a first subscriber identification module (SIM) and a second SIM. The UE is configured to establish a first cellular network connection based on, at least, the first SIM and a second cellular network connection based on, at least, the second SIM. The UE sends, by the first SIM, a first registration request to the network, wherein the first registration request comprises an identification indicating the multi-SIM device is a type of multi-SIM device, receives, by the first SIM, a first registration accept message indicating the first registration request has been accepted, wherein the first registration accept message comprises a first temporary identification for the first SIM and sends, by the second SIM, an access network message comprising one of the first temporary identification or a further temporary identification based on, at least, the first temporary identification.

Abstract: A network application server including communication circuitry and at least one processor is disclosed. The at least one processor is configured to receive, from a number of user equipments (UEs) and via the communication circuitry, a number of requests to receive service data from a number of application providers; determine an amount of service data exchanged between an application provider and a set of UEs of the number of UEs requesting service data over one or more network slices; generate first billing information corresponding to the application provider based on criteria including the amount of service data exchanged with the application provider over the one or more network slices; and generate second billing information corresponding to each UE of the set of UEs based on data usage by each UE of the set of the UEs, independent of characteristics of the one or more network slices.

Abstract: An edge enabler server of an edge data network is configured to receive a verification request comprising an edge enabler client identification (EEC ID), wherein the EEC ID uniquely identifies an edge enabler client (EEC), determine whether the EEC ID is an authorized EEC ID and provide a verification response based on whether the EEC ID is authorized.

Abstract: The exemplary embodiments relate to a user equipment (UE) providing an indication of user consent to a network for access to UE information. The UE may perform operations including transmitting an indication of user consent to a first network. The user consent corresponds to a network function acquiring UE information. The operations also include transmitting the UE information to the first network and establishing a connection with a second network. The network function performs operations related to establishing the connection between the UE and the second network using the UE information.

Abstract: A user equipment (UE) is configured to transmit a request to an edge configuration server (ECS) comprising a list of authentication mechanisms supported by the UE, wherein the ECS is configured to select one authentication mechanism from the list of authentication mechanisms and receive a response to the request from the ECS, wherein response comprises an indication of the selected authentication mechanism.

Abstract: A user equipment (UE) is configured to generate a first credential based on a second credential, wherein the second credential is used for primary authentication between the UE and a core network, generate an identifier corresponding to the first credential and perform, after the primary authentication, an authentication procedure with an edge configuration server (ECS) for access to an edge data network based on transport layer security (TLS)-pre-shared key (PSK) protocols using the first credential.

Abstract: Apparatuses, systems, and methods for revocation and/or modification of user consent in Edge Computing (MEC). A user equipment device (UE) may determine that user consent needs to be updated. The user consent may be associated with MEC. Additionally, the UE may transmit, via an application layer of the UE, a user consent modification request to an edge application server of a network, e.g., of an edge data network. The user consent modification request may be carried in application data traffic. The user consent modification request may be indicated via an Nnef_ParameterProvision_Update service operation. The user consent modification request is indicated via an Nnef_ParameterProvision_Update service operation.

Abstract: The present application relates to devices and components including apparatus, systems, and methods for security enhancement with respect to reselection of relay user equipment.

Abstract: Embodiments are presented herein of apparatuses, systems, and methods for a user equipment device (UE) and/or cellular network to resume a connection. To resume the connection, the UE may transmit a fully protected connection resume message, e.g., which may include protection for a resume cause field.

Abstract: An approach is described for a base station to generate a first message and a second message. The base station transmits the first message and the second message to a user equipment (UE). The first message is associated with a cell supported by the base station and includes a first public land mobile network (PLMN) identity index and a first list of one or more network slices supported by a first PLMN associated with the first PLMN identity index. The second message is associated with one or more neighboring cells, and includes the first PLMN identity index and a second list of one or more network slice data associated the first PLMN as supported by the one or more neighboring cells. In addition, at least one of the one or more network slice data in the second list includes a sub-list of one or more neighboring cell data.

Abstract: An example technique for security key derivation in a wireless system includes: sending a radio resource control (RRC) suspend message from a first node, to a first user device, the RRC suspend message including a first next hop (NH) chaining counter (NCC) value; releasing access stratum (AS) resources associated with the first user device; deriving a first node key based on the first NCC value; receiving a first uplink message from the first user device without allocating AS resources to the first user device; and unscrambling the first uplink message based on the first NCC value.

Abstract: The present application relates to devices and components including apparatus, systems, and methods for supporting voice services during roaming.

Abstract: Systems and methods provide packet data convergence protocol (PDCP) user plane (UP) integrity protection (IP) for a user equipments (UE) and radio access network (RAN) nodes operating in Evolved Universal Terrestrial Radio Access-New Radio dual connectivity (EN-DC). In an attach procedure, a UE may indicate a UE security capability for support of relay node (RN) PDCP UP IP used in LTE. Based on the LIE security capability, a master e Node B (MeNB) security capability, and a secondary g Node B (SgNB) security capability, the MeNB may determine whether to use UP IP between the UE and the MeNB, the UE and the SgNB, and/or in a split bearer between the MeNB and the SgNB.

Abstract: A user plane function (UPF) of a core network is configured to receive an Internet Protocol (IP) packet including a flow label comprising a plurality of sub-fields, the plurality of sub-fields including an application data unit (ADU) identifier (ID) field for an ADU to which the IP packet belongs, map the IP packet to a quality of service (QOS) flow based on the flow label and transmit the IP packet to a base station with a tag including information from the plurality of sub-fields, the information including an ADU ID.

Abstract: Techniques discussed herein can facilitate improved security establishment procedures for Vehicle to Everything (V2X) direct connections. Various embodiments are employable at or comprise User Equipment, and can initiate and/or receive V2X security establishment connections wherein a receiving UE can reject the connection based on the initiating UE's capabilities/policy and/or the initiating UE can make the final decision regarding the connection based at least on receiving security policy and capability information from the receiving UE.

Abstract: Disclosed are embodiments of a user equipment (UE) configured to communicate in a 5G network and to perform authentication between an edge enabler client (EEC) of the UE and an edge configuration server (ECS) or an edge enabler server (EES) based on an architecture for authentication and key management for applications (AKMA). The techniques include performing primary authentication with the 5G network to obtain a KAUSF; generating a KAKMA and an A-KID; providing to the EEC the KAKMA and an EEC identifier (ID) for the EEC to generate a Kedge, the KAKMA and the EEC ID being used by the EEC to compute a MACEEC; and sending to the ECS or the EES an application registration request, the application registration request including the EEC ID, the MACEEC, and the A-KID.

Abstract: Apparatuses, systems, and methods for application function (AF) key generation and AF key renewal. A user equipment device (UE) may communicate with an application function (AF) via a radio access network (RAN) using a first AF key and determine that the first AF key has expired. The UE may derive a second AF key based on at least an Architecture for Authentication and Key Management for Applications (AKMA) anchor key (KAKMA) and a counter parameter and communicate with the AF via the RAN using the second AF key. At least one of the UE, the AF, and/or an AKMA Anchor Function (AAnF) may be configured to monitor expiration of the first AF key based on an associated lifetime of the first AF key. The first and second AF keys may be derived using a key derivation function that includes at least one variable parameter.

Abstract: The present application discloses a method for synchronizing encryption information between a SCell and UE, which includes that: the SCell transmits a COUNT value of RB established for the UE to a PCell; the PCell transmits the COUNT value received from the SCell to the UE; and the PCell receives a COUNT value of RB established on the SCell that is saved by the UE from the UE. Or, the SCell and the UE may directly exchange the COUNT value of RB. By the present application, the security and correctness of data can be ensured.