Abstract: Various communication systems may benefit from appropriate restriction on use. For example, certain wireless communication systems may benefit from radio-access-technology-specific access restrictions. A method can include registering a user equipment with a network element. The registering can include identifying user equipment capabilities. The method can also include receiving a response from the network element indicating restriction on use of at least one radio access technology.

Abstract: Techniques for securely identifying applications in a communication network are disclosed. For example, a method comprises receiving, at user equipment, a data item associated with an application program that is installed or being installed on the user equipment. The method further comprises storing, by the user equipment, the data item with an identifier of the application program. The method still further comprises utilizing, by the user equipment, the stored data item when deciding to apply a route selection rule for data traffic associated with the application program.

Abstract: There are provided measures for location based network access management. Such measures exemplarily comprise receiving a rejection message indicative of rejection of access of said mobile terminal to a first mobile network, checking for a cause of said rejection of access of said mobile terminal to said first mobile network, and affecting, if said cause of said rejection of access of said mobile terminal to said first mobile network is indicative of that said mobile terminal is not allowed to access to said first mobile network from a determined location of said mobile terminal, a selection of a second mobile network to be accessed based on a content of said rejection message.

Abstract: Techniques for providing more efficient onboarding traffic protocols in a standalone non-public network architecture are provided. A network entity includes processing circuitry and at least one memory including computer program code. The at least one memory and the computer program code configured to, with the processing circuitry, cause the network entity at least to generate one or more traffic filter rules for a traffic filter set. The one or more traffic filter rules or traffic detection rules are generated based at least in part on domain name service query response information related to one or more user device originated domain name service queries. The network entity may further be configured to cause a user plane function to be provided with the one or more traffic filter rules.

Abstract: There is provided an apparatus, method and computer program fora network function, that causes the apparatus to signal, to a replication handling function, a set of replication criteria defining, for one or more session associated with a first user traffic and a second user traffic, when at least one of the first and second user traffic will be transmitted using a replication-based redundancy mechanism, wherein each of the first and second user traffic are associated with a respective quality of service requirement for transmission.

Abstract: There is provided a method for an apparatus for a network function, the apparatus for the network function, and a computer program for the apparatus, that causes the apparatus to: receive an indication that a first user equipment and/or a first user plane function configured to transmit first user traffic is associated with a first replication handling function, the first replication handling function being configurable to coordinate at least one replication-based redundancy mechanism performed on at least part of said first user traffic; determine a first set of replication rules for use by the first replication handling function determining when the at least one replication-based redundancy mechanism is performed on at least part of said first user traffic; and cause the first set of replication rules to be provided to the first replication handling function.

Abstract: Systems, methods, apparatuses, and computer program products for access traffic steering, switching, and splitting (ATSSS) with branching point (BP) or uplink classifier (ULCL) on the path. The method may include, setting up, in response to a request, a first user plane function with multi-access traffic steering functionality. The method may also include requesting a user equipment to establish a new multi-access packet data unit session to a same data network name and slice as an old multi-access packet data unit session, or request the user equipment to release the old multi-access packet data unit session with a second user plane function and to initiate a multi-access packet data unit session re-establishment. The method may further include sending, to the user equipment, multi-access rules for the new multi-access packet data unit session, a new internet protocol address, and new multipath transmission control protocol proxy information.

Abstract: There is provided an apparatus, said apparatus comprising means for receiving an indication of an identifier of a group comprising one or more user equipments, providing the indication of the identifier of the group to a first network function and selecting a second network function for use by a user equipment of the group based on the indication of the identifier of the group.

Abstract: Systems, methods, apparatuses, and computer program products for access traffic steering, switching, and splitting (ATSSS) with branching point (BP) on the path are provided. The method may include determining that an existing user plane function is sub-optimal in terms of routing and latency incurred with respect to traffic for a given packet data unit session of a user equipment. The method may also include establishing, based on the determination, a new user plane function for the packet data unit session. The method may further include establishing a branching point user plane function that interfaces with the existing user plane function, the new user plane function, and a plurality of network access types. In addition, the method may include updating the user equipment by providing the user equipment with relevant multi-access traffic steering rules.

Abstract: Techniques for facilitating onboarding to a non-public network is provided. Provisioning parameters may be provided to User Equipment (UE) from a Default Credential Server (DCS) via a secure communication tunnel. Additionally or alternatively, provisioning parameter container(s) including readable provisioning parameters for an Onboarding Network (ONN), and secure provisioning parameters for the UE, may be transmitted to the UE via the ONN. The disclosed methods and apparatuses enable the UE to onboard to a non-public network using the provisioning parameters, and to verify the integrity of the provisioning parameters and ensure the provisioning parameters are not modified by an unauthorized device.

Abstract: Techniques for providing more efficient onboarding traffic protocols in a standalone non-public network architecture are provided. A network entity includes processing circuitry and at least one memory including computer program code. The at least one memory and the computer program code configured to, with the processing circuitry, cause the network entity at least to generate one or more traffic filter rules for a traffic filter set. The one or more traffic filter rules or traffic detection rules are generated based at least in part on domain name service query response information related to one or more user device originated domain name service queries. The network entity may further be configured to cause a user plane function to be provided with the one or more traffic filter rules.

Abstract: Techniques are disclosed for security management during an onboarding process for user equipment. For example, from a perspective of an onboarding network, a method comprises authenticating, via the onboarding network, user equipment based on an onboarding record previously configured for the user equipment or a set of user equipment and maintained by the onboarding network. Upon successful authentication, a communication session is established from the onboarding network to a provisioning server for remote provisioning of the user equipment. Advantageously, the onboarding process is performed without a default credential server.

Abstract: Techniques for improving the resiliency of communication networks by providing radio access network data stored in a radio access network database to one or more associated radio access network nodes are provided. A network entity receives a connection request from a user device including at least a radio access network set identifier or radio access network database identifier. The network entity determines whether the radio access network set identifier received in the connection request corresponds to an associated radio access network set identifier. In an instance in which the radio access network set identifier received in the connection request corresponds to the associated radio access network set identifier, radio access network database data are retrieved from the radio access network database associated with the radio access network set identifier. The radio access network database data include at least user device context data for the associated user device.

Abstract: Various communication systems may benefit from an improved signaling protocol. For example, machine-to-machine communications in a network may benefit from improved signaling and security. A method includes establishing a secure data transmission path for an application. The secure data transmission path is used to transmit data between a user equipment and a network element. The network entity includes a gateway or an application server. The method also includes transmitting data for the application over the secure data transmission path using a pre-configured radio bearer. The radio bearer is pre-configured for data transmission between the user equipment and an access node located between the user equipment and the network element. In addition, the method includes receiving a response message at the user equipment from the network element through the secure data transmission path.

Abstract: Various communication systems may benefit from appropriate restriction on use. For example, certain wireless communication systems may benefit from radio-access-technology-specific access restrictions. A method can include registering a user equipment with a network element. The registering can include identifying user equipment capabilities. The method can also include receiving a response from the network element indicating restriction on use of at least one radio access technology.

Abstract: A method and apparatus may include providing a multi-dimensional descriptor to a network function. The method may also include accessing a network slice. The network slice is selected based on the multi-dimensional descriptor. The method may also include accessing a component of the network slice. One or more network functions of the network slice are selected based on the multi-dimensional descriptor.

Abstract: Various communication systems may benefit from network location reporting. For example, such reporting may be beneficial in the establishment of a multimedia broadcast/multicast service bearer for media traffic delivery from a group communication service application server or other similar device or system. A method can include reporting at least a first set of user equipment location information and at least a second set of user equipment location information from the user equipment to at least one network node for broadcast bearer management. The first set of user equipment location information can include a serving cell identity of the user equipment. The second set of user equipment location information can include at least one identity of at least one network service area for media broadcasting.

Abstract: A method and apparatus may include providing a multi-dimensional descriptor to a network function. The method may also include accessing a network slice. The network slice is selected based on the multi-dimensional descriptor. The method may also include accessing a component of the network slice. One or more network functions of the network slice are selected based on the multi-dimensional descriptor.

Abstract: Various communication systems may benefit from a dynamic streaming service. For example, certain streaming services may benefit from an improvement in the switching between broadcast delivery and unicast delivery for a streaming service in a cellular system. A method includes receiving information about a streaming service. The method also includes determining by a network entity in a radio access network whether to deliver data for the streaming service via multimedia broadcast or unicast based on the information and predetermined criteria for evaluating the information. In addition, the method includes triggering a sending of the data via the multimedia broadcast or the unicast.

Abstract: Systems, methods, apparatuses, and computer program products for interworking between bearer-less networks and bearer based networks are provided. One method includes receiving, by a network entity in a bearer-less network, a context request to obtain user equipment context information for a user equipment moving from the bearer-less network to a bearer-based network. The method may further include providing a context response comprising the context information to a network entity in the bearer-based network, the context information used to establish bearers for the user equipment to obtain internet protocol (IP) based services.