Abstract: According to some embodiments, a method for early data transmission performed by a wireless device comprises: obtaining, from a non-access stratum (NAS) communication layer, an initial NAS protocol data unit (PDU) for early data transmission; determining, by a radio resource control (RRC) communication layer, to initiate early data transmission based at least in part on a size of the initial NAS PDU; and transmitting an early data transmission including the initial NAS PDU.

Abstract: A method performed by a network node, for handling User Equipment, UE, capabilities of a UE in a wireless communications network is provided. The network node sends (501) to the AMF node (130), a first indication indicating whether or not the network node (110) has capabilities to store UE capabilities associated with the UE capability ID. The network node receives (502) from an AMF node, a second indication indicating whether or not UE capabilities associated with a capability identity of the UE, UE capability ID, are UE available in the AMF node. The network node decides (503) whether explicit UE capabilities associated with the UE capability ID shall be retrieved from the UE or the AMF node based on the received first and second indication.

Abstract: Disclosed herein is a method for operating a radio access network (RAN) node of a wireless communication network.

Abstract: A method may be provided at a wireless terminal to support communications with a network node of a wireless communication network. An IKE SA may be initiated to establish a NAS connection between the wireless terminal and the network node through a non-3GPP access network and a non-3GPP interworking function network node. After initiating the IKE SA, an IKE authorization request may be transmitted through the non-3GPP access network to the N3IWF network node, with the IKE authorization request including an identifier of the wireless terminal. An access network key may be derived for the NAS connection through the non-3GPP access network at the wireless terminal, with the access network key being derived based on a NAS count for the wireless terminal and an anchor key. An IKE authorization response corresponding to the IKE authorization request may be received.

Abstract: A message authentication code, for a message transmitted and received over a communications network, is formed by applying inputs to an integrity algorithm acting on the message. The inputs comprise: an integrity key; a value indicating a transfer direction; and a frame-dependent integrity input, wherein the frame-dependent integrity input is a frame-dependent modulo count value that also depends on a random value and on a frame-specific sequence number.

Abstract: Systems and methods for enabling User Equipments (UEs) to use a Public Land Mobile Network (PLMN) failing service under disaster conditions and to receive services from alternative PLMNs. In some embodiments, a method performed by a first network node comprises receiving, from a second network node, a first disaster roaming PLMN list. The method also comprises determining that a UE is to be authenticated. The method further comprises providing, to a third network node, a request including the disaster roaming PLMN list, responsive to determining that the UE is to be authenticated. In this way, an interruption of the service at the UE is minimized in case of the disaster conditions.

Abstract: A wireless device and an Access and Mobility Management Function (AMF) and methods performed by a wireless device and an AMF, respectively.

Abstract: A method performed by a target network node for interworking handover from an evolved packet system, EPS, to a fifth generation system, 5GS, in a mobile network is provided. The method includes receiving, from a source network node, a determined user plane, UP, encryption policy. The method further includes providing the determined UP encryption policy to a target radio access network node. Corresponding embodiments for methods performed by a source network node and a first target network node are also provided.

Abstract: A method may be provided at a wireless terminal to support communications with a network node of a wireless communication network. An IKE SA may be initiated to establish a NAS connection between the wireless terminal and the network node through a non-3GPP access network and a non-3GPP interworking function network node. After initiating the IKE SA, an IKE authorization request may be transmitted through the non-3GPP access network to the N3IWF network node, with the IKE authorization request including an identifier of the wireless terminal. An access network key may be derived for the NAS connection through the non-3GPP access network at the wireless terminal, with the access network key being derived based on a NAS count for the wireless terminal and an anchor key. An IKE authorization response corresponding to the IKE authorization request may be received.

Abstract: Systems and methods for enabling notification of disaster conditions and alternative Public Land Mobile Networks (PLMNs) to network nodes are disclosed. In one embodiment, a method performed by a User Equipment (UE) for responding to a disaster condition in a first PLMN, comprises determining that a first PLMN is not available; determining that a second PLMN is available for disaster roaming; and attempting to register with the second PLMN, responsive to determining that the first PLMN is not available due to the disaster condition and determining that a second PLMN is available for disaster roaming. In this way, a UE is informed of the failure of its currently used PLMN due to a disaster condition and a service may be provided in another PLMN, where the UE under normal conditions may not be allowed to receive a service from the second PLMN.

Abstract: Disclosed herein is a method performed by a network node and a network node for handling User Equipment, UE, Parameters Update, UPU, data set types which may not be supported by a UE, the method comprising one or more of: receiving an indication of UPU data set types supported by a UE; determining if a given UPU data set type is supported by the UE based on the indication; if the given UPU data set type is supported by the UE, sending a UPU message to the UE with the given UPU data set type; and if the given UPU data set type is not supported by the UE, not sending the UPU message to the UE with the given UPU data set type.

Abstract: Embodiments here in relate to methods for message handling performed by an Access and Mobility Management function, AMF, and a User Equipment, UE, as well as a corresponding AMF and UE. Particularly, embodiments herein relate to methods for handling service requests performed by an Access and Mobility Management function, AMF, and a User Equipment, UE, as well as a corresponding AMF and UE.

Abstract: A network node in a wireless communication system configures an operator policy to indicate whether to accept legacy user equipments, UEs, that do not support user plane integrity protection, UP IP, and it sets UP IP to be either “preferred” or “not required” of a UP security policy based on the operator policy indicating acceptance of legacy UEs and in response to a communication related to a legacy UE.

Abstract: Embodiments here in relate to methods for message handling performed by an Access and Mobility Management function, AMF, and a User Equipment, UE, as well as a corresponding AMF and UE. Particularly, embodiments herein relate to methods for handling service requests performed by an Access and Mobility Management function, AMF, and a User Equipment, UE, as well as a corresponding AMF and UE.

Abstract: A method, system and apparatus for subscription based service restriction are disclosed. In one embodiment, a network node is configured to determine that a wireless device (WD) is service area restricted when the WD is in an area defined as a non-allowed area according to subscription data associated with the WD; and provide support for the WD for at least one service that is service area restricted in the non-allowed area based at least in part on at least one of the subscription data associated with the WD and an operator policy. In one embodiment, a wireless device (WD) is configured to operate in the non-allowed area using at least one service that is service area restricted in the non-allowed area based at least in part on at least one of the subscription data associated with the WD and an operator policy.

Abstract: Disclosed herein is a method performed by a wireless communication device, the method comprising: receiving, from a network node, a configuration update command comprising an indication as to whether the wireless communication device is to maintain an existing non-access stratum, NAS, connection; and performing one or more actions in accordance with the configuration update command.

Abstract: A method at a UE may include providing a first NAS connection with a network node through a first access node, wherein a first NAS CID is associated with the first NAS connection. While providing the first NAS connection, a second NAS CID may be allocated for a second NAS connection with the network node through a second access node. A registration request message may be transmitted to the network node to request the second NAS connection, wherein transmitting the registration request message includes performing integrity protection for the registration request message using the second NAS CID. A security mode command message may be received from the network node, wherein the security mode command message corresponds to the registration request message. Responsive to receiving the security mode command message, a security mode complete message may be transmitted to the network node through the second access node.

Abstract: A network node of a mobile communications network may need to generate at least one new Input Offset Value, IOV value, for use in protecting communications between the network node and a mobile station. The network node then associates a fresh counter value with the or each new IOV value; calculates a Message Authentication Code based on at least the at least one new IOV value, the fresh counter value associated with the or each new IOV value, and a constant indicating that the Message Authentication Code is calculated to protect the new IOV value; and transmits the at least one new IOV value, the fresh counter value associated with the or each new IOV value, and the calculated Message Authentication Code to the mobile station.

Abstract: A wireless device and an Access and Mobility Management Function (AMF) and methods performed by a wireless device and an AMF, respectively.

Abstract: Methods and apparatuses for non-Internet protocol (IP) data delivery are disclosed. According to an embodiment, a network exposure node obtains associations between multiple non-IP connections between a terminal device and the network exposure node and multiple reliable data service (RDS) port configurations configured to the network exposure node by an application related node for multiple applications. The network exposure node receives, from the application related node, a message that is destined to the terminal device and includes non-IP data and one of the multiple RDS port configurations. The network exposure node transfers the non-IP data to the terminal device through one of the multiple non-IP connections that is associated with the one of the multiple RDS port configurations according to the obtained associations.