Abstract: In one aspect, an NRF is configured to inform an NF instance that has sent a discover request toward the NRF that the number of NF instances that match the search criteria used by the NRF in response to the discover request is greater than the number of NF instance profiles included in the NF instances array of the discover response.

Abstract: The present disclosure provides methods for event subscription management in a network comprising a set of NF nodes, and corresponding NF nodes. The method implemented at a first NF node includes receiving a subscription request of an event for a user equipment, UE, from a third NF node; transmitting, to a second NF node that serves the UE, a subscription report request for the event for the UE; receiving, from a fourth NF node that currently serves the UE, a UE registration request for the UE, including an indication indicating whether the UE is in a restricted service area; and determining whether to transmit a notification for the event to the third NF node based on the UE registration request. The present disclosure further discloses a corresponding method implemented at the second NF node. The present disclosure further provides corresponding computer readable medium.

Abstract: Embodiments described herein provide methods and apparatuses for providing a network function, NF, service producer access to a key set, wherein the key set is for use in verifying an access token received from an NF service consumer. A method in a network repository function, NRF, comprises receiving a request from the NF service producer to provide an indication of services provided by the NRF; and responsive to the request, transmitting a first address where the key set can be retrieved, as part of an indication of an authorization service.

Abstract: The invention relates to a method for operating a tracking entity (100, 400) configured to track to which access and connectivity management entity (200) a mobile device (50) is connected in a mobile communications network, wherein an application server (60) is initiating a monitoring of an event occurring at the mobile device, the method comprising: —receiving a request to monitor the event at the mobile device (50), the request comprising an indication for an audit for the monitoring of the event by which a validity of the monitoring of the event should be checked when the event has not been detected for an indicated period of time, —transmitting the received request for the event with the indication for the audit and the indicated period of time to the access and connectivity management entity (200) to which the mobile device is connected, —receiving a notification from the access and connectivity management entity (200) that the event has not been detected for the indicated period of time, —determining, i

Abstract: Selecting a serving session control node in an Internet Protocol, IP, Multimedia Subsystem, IMS, telecommunication network, for a User Equipment.

Abstract: A UE is assigned a first server for session control of the session. The first IMS node sends a request to a subscriber server associated with the UE. The request requests assistance data for selecting a second server to be assigned to the UE for the session control. The first IMS node selects a second server to be assigned to the UE for session control, based on the requested assistance data. The first IMS node sends an invitation to the selected second server. The invitation includes an indication indicating that the selected second server is selected to replace the first server. The indication triggers the selected second server, to indicate to the subscriber server to register the address of the selected second server in the subscriber server, to replace the first server in being assigned to the UE for the session control.

Abstract: The present specification faces the issues of selecting a right 5G Network Function, NF, instance in scenarios wherein NF instances are considered NF segments that manage different sets of users and wherein NF segmentation is not based on SUPI ranges. To solve these issues, there is provided a new procedure for accessing an NF segment, wherein registration and discovery of the right NF segment is based on a Routing Indicator, and wherein the Routing Indicator, which is received with a Subscription Concealed Identifier (SUCI) identifying a UE, is included in any interaction between 5GC NFs.

Abstract: Network equipment is configured for use in one of multiple different core network domains of a wireless communication system. The network equipment is configured to receive a message that has been, or is to be, transmitted between the different core network domains. The network equipment is also configured to apply inter-domain security protection to, or remove inter-domain security protection from, one or more portions of the content of a field in the message according to a protection policy. The protection policy includes information indicating to which one or more portions of the content inter-domain security protection is to be applied or removed. The network equipment is also configured to forward the message, with inter-domain security protection applied or removed to the one or more portions, towards a destination of the message.

Abstract: An authentication server (16) in a home network (18) of a wireless device (10) receives, from a network node (14), a request (20) for authentication data (22) based on which to authenticate the wireless device (10). The request (20) indicates a serving network (12) on which the authentication data (22) is to be based. The authentication server (16) checks whether or not the network node (14) is authorized to request authentication data (22) that is based on the indicated serving network (12).

Abstract: Network equipment (300, 400) is configured for use in one of multiple different core network domains of a wireless communication system (10). The network equipment (300, 400) is configured to receive a message (60) that has been, or is to be, transmitted between the different core network domains. The network equipment (300, 400) is also configured to apply inter-domain security protection to, or remove inter-domain security protection from, one or more portions of the content of a field in the message according to a protection policy (80). The protection policy (80) includes information indicating to which one or more portions of the content inter-domain security protection is to be applied or removed. The network equipment (300, 400) is also configured to forward the message (60), with inter-domain security protection applied or removed to the one or more portions, towards a destination of the message (60).

Abstract: Disclosed herein is a method, performed by a repository network entity within a telecommunications network, for providing notifications for a subscription to monitor changes of a NF profile of a monitored network entity. The method comprises: receiving, from a subscribing network entity, a subscription request to subscribe to monitor changes to a NF profile of at least one monitored network entity, the request comprising a notification preference that identifies a subset of attributes in the NF profile to be monitored or to be excluded from monitoring; and providing to the subscribing network entity, notifications of changes to the identified subset of attributes of the NF profile of the at least one monitored network entity.

Abstract: According to an aspect, there is provided a method of operating a first network node (420; 430; 520; 530; 620; 630; 730; 740) in a first core network of a telecommunication network. The first network node (420; 430; 520; 530; 620; 630; 730; 740) is for managing data relating to subscribers of the first core network, and the telecommunication network further comprises a second core network having a second network node (420; 430; 520; 530; 620; 630; 730; 740) that is for managing data relating to subscribers of the second core network. The method comprises, after a first wireless device identifier for a first subscriber of the first core network and the second core network is changed to a second wireless device identifier, sending (1101) a first message to the second the second wireless device identifier for the first subscriber.

Abstract: Apparatuses and methods for short message service (SMS) delivery are disclosed. In one embodiment, a method implemented in a data management (UDM) node includes receiving, by the UDM node, a registration request from a home subscriber server, HSS, node, the registration request being to register an Internet Protocol-Short Message-Gateway, IP-SM-GW, and the registration request comprising an address of the IP-SM-GW; and optionally, as a result of receiving the registration request comprising the address of the IP-SM-GW from the HSS node, determining message waiting data. In one embodiment, a method implemented in a HSS node includes receiving a registration request; and sending, to a unified data management, UDM, node, the registration request, the registration request being to register an Internet Protocol-Short Message-Gateway, IP-SM-GW, and the registration request comprising an address of the IP-SM-GW.

Abstract: There is provided mechanisms for enabling selection of service-providing NFs in a 3GPP communication network. A method is performed by an NRF. The method comprises obtaining one register request from each of the service-providing NFs. Each registration request comprises an NF profile. Each NF profile comprises a security setting attribute. The method comprises storing the NF profiles of the service-providing NFs. The method comprises obtaining a discovery request from a service-requesting NF. The request indicates an NF type. The method comprises providing a discovery response to the service-requesting NF. The discovery response comprises the NF profile of at least one of the service-providing NFs of the NF type, thereby enabling selection of the service-providing NFs. The security setting attribute may pertain to support for mutual TLS and/or for use of OAuth-2 based authorization.

Abstract: A method by a network function communicating with a unified data repository of a communications network. The method including receiving from the UDR a subscription identifier for a subscription by the network function to receive data change notifications from the UDR. The method also including sending toward the UDR a change request containing an instruction to change data in the UDR and containing the subscription identifier to signal the UDR to not send to the network function a notification regarding this change to the data.

Abstract: Selecting a serving session control node in an Internet Protocol, IP, Multimedia Subsystem, IMS, telecommunication network, for a User Equipment.

Abstract: Initiating primary reauthentication of a communication device by a home network (UDM or AUSF) is provided. A trigger to initiate a primary reauthentication request of a communication device is detected. An authentication status of the subscription permanent identifier (SUPI) of the communication device is checked. Responsive to the authentication status of the SUPI being obsolete or null, a reauthentication message is transmitted towards an access and mobility management function (AMF) node. A reauthentication confirmation message is received. A determination is made as to whether to continue, abort, or postpone any steering of roaming (SoR) updates, any user equipment parameter updates (UPU updates) or any authentication and key agreement for applications (AKMA) procedures based on the reauthentication confirmation message.

Abstract: A method for supporting authentication of a User Equipment, UE, in an Internet Protocol, IP, Multimedia Subsystem, IMS, telecommunication network, by interfacing a Service Based Architecture, SBA, telecommunication network, the method including receiving, by a Unified Data Management, UDM, in the SBA telecommunication network, from a Session Management Function, SMF, in the SBA telecommunication network, binding information, wherein the binding information is used to identify the UE in the IMS telecommunication network; receiving, by the UDM in the SBA telecommunication network, from a Home Subscriber Server, in the IMS telecommunication network, a request for providing the binding information, and providing, by the UDM in the SBA telecommunication network, to the HSS in the IMS telecommunication network the binding information, thereby supporting authentication of the UE. Complementary methods and corresponding nodes are also presented herein.

Abstract: Disclosed herein is a method for indirect communication in a core network of a wireless communication system using a Service Communication Proxy, SCP, with Transport Layer Security, TLS, the method comprising: at a Network Function, NF, service consumer: sending, to the SCP, a Hypertext Transfer Protocol, HTTP, message that is intended for a first NF service producer instance, the HTTP message using a Fully Qualified Domain Name, FQDN, of the SCP and having a path that includes a query parameter set to a first value; and at the SCP: receiving the HTTP message from the NF service consumer; obtaining a HTTP response for the HTTP message; and sending the HTTP response to the NR service consumer; and at the NF service consumer: receiving the HTTP response from the SCP.

Abstract: Apparatuses and methods for short message service (SMS) delivery are disclosed. In one embodiment, a method implemented in a unified data management, UDM, node includes setting a short message service, SMS, function, SMSF, registration notification flag to detect an SMSF registration event associated with a user equipment, UE. In another embodiment, a method implemented in a home subscriber server, HSS, node includes sending a request to subscribe to a notification at a unified data management, UDM, node about a short message service, SMS, function, SMSF, registration event associated with a user equipment, UE.