Abstract: In an embodiment, a method includes: forming active devices over a semiconductor substrate; forming an interconnect structure over the active devices, the interconnect structure comprising a first portion of a seal ring over the semiconductor substrate, the seal ring being electrically insulated from the active devices; forming a first passivation layer over the interconnect structure; forming a first metal pad and a second metal pad extending through the first passivation layer and over the interconnect structure, the first metal pad having a bowl shape, the second metal pad having a step shape; and depositing a second passivation layer over the first metal pad and the second metal pad.

Abstract: Semiconductor device and methods of manufacture are provided. In an embodiment, the a semiconductor device may include a first semiconductor die; an oxide layer on the first semiconductor die, wherein the first semiconductor die has a first top surface opposite the oxide layer; a first insulating material encapsulating the first semiconductor die and the oxide layer, wherein the first insulating material has a second top surface planar with the first top surface; and a first polymer buffer disposed between a sidewall of the first semiconductor die and a sidewall of the oxide layer, wherein the first polymer buffer has a third top surface planar with both the first top surface and the second top surface.

Abstract: Systems and methods provide packet data convergence protocol (PDCP) user plane (UP) integrity protection (IP) for a user equipments (UE) and radio access network (RAN) nodes operating in Evolved Universal Terrestrial Radio Access-New Radio dual connectivity (EN-DC). In an attach procedure, a UE may indicate a UE security capability for support of relay node (RN) PDCP UP IP used in LTE. Based on the LIE security capability, a master e Node B (MeNB) security capability, and a secondary g Node B (SgNB) security capability, the MeNB may determine whether to use UP IP between the UE and the MeNB, the UE and the SgNB, and/or in a split bearer between the MeNB and the SgNB.

Abstract: A user plane function (UPF) of a core network is configured to receive an Internet Protocol (IP) packet including a flow label comprising a plurality of sub-fields, the plurality of sub-fields including an application data unit (ADU) identifier (ID) field for an ADU to which the IP packet belongs, map the IP packet to a quality of service (QOS) flow based on the flow label and transmit the IP packet to a base station with a tag including information from the plurality of sub-fields, the information including an ADU ID.

Abstract: This application sets forth techniques for authenticating a mobile device with a cellular wireless network without electronic Subscriber Identity Module (eSIM) credentials by using an Extensible Authentication Protocol Transport Layer Security (EAP-TLS) procedure. The mobile device authenticates with an Authentication Server Function (AUSF) of the cellular wireless network using an embedded Universal Integrated Circuit Card (eUICC) certificate. Processing circuitry of the mobile wireless device external to the eUICC implements the EAP-TLS procedure and authenticates validity of the AUSF. In some embodiments, the eUICC provides key generation and storage for a session key for communication between the mobile device and the cellular wireless network.

Abstract: Techniques discussed herein can facilitate improved security establishment procedures for Vehicle to Everything (V2X) direct connections. Various embodiments are employable at or comprise User Equipment, and can initiate and/or receive V2X security establishment connections wherein a receiving UE can reject the connection based on the initiating UE's capabilities/policy and/or the initiating UE can make the final decision regarding the connection based at least on receiving security policy and capability information from the receiving UE.

Abstract: Methods to enhance the coverage of NR systems for coverage-limited wireless devices are disclosed. A serving base station may configure a coverage-limited UE with parameters for the UE to operate in a coverage enhancement mode through RRC signaling, DCI, or RAR grant. The UE may use the configuration parameters to determine whether to enter into the coverage enhancement mode when connecting and communicating with the serving base station. The configuration parameters may configure the UE to exploit both time diversity and frequency diversity to extend and enhance coverage when receiving PDSCH and PDCCH channels. The UE may use the configuration parameters to receive PDSCH and PCCCH that are coverage enhanced using time repetitions and frequency hopping. Advantageously, the base station may flexibly and dynamically configure the UE with coverage enhancement parameters to extend the coverage of the UE using time diversity and frequency diversity gains as the UE moves around.

Abstract: Disclosed are embodiments of a user equipment (UE) configured to communicate in a 5G network and to perform authentication between an edge enabler client (EEC) of the UE and an edge configuration server (ECS) or an edge enabler server (EES) based on an architecture for authentication and key management for applications (AKMA). The techniques include performing primary authentication with the 5G network to obtain a KAUSF; generating a KAKMA and an A-KID; providing to the EEC the KAKMA and an EEC identifier (ID) for the EEC to generate a Kedge, the KAKMA and the EEC ID being used by the EEC to compute a MACEEC; and sending to the ECS or the EES an application registration request, the application registration request including the EEC ID, the MACEEC, and the A-KID.

Abstract: Apparatuses, systems, and methods for application function (AF) key generation and AF key renewal. A user equipment device (UE) may communicate with an application function (AF) via a radio access network (RAN) using a first AF key and determine that the first AF key has expired. The UE may derive a second AF key based on at least an Architecture for Authentication and Key Management for Applications (AKMA) anchor key (KAKMA) and a counter parameter and communicate with the AF via the RAN using the second AF key. At least one of the UE, the AF, and/or an AKMA Anchor Function (AAnF) may be configured to monitor expiration of the first AF key based on an associated lifetime of the first AF key. The first and second AF keys may be derived using a key derivation function that includes at least one variable parameter.

Abstract: Methods to enhance the coverage of NR systems for coverage-limited wireless devices are disclosed. A serving base station may configure a coverage-limited UE with parameters for the UE to operate in a coverage enhancement mode through RRC signaling, DCI, or RAR grant. The UE may use the configuration parameters to determine whether to enter into the coverage enhancement mode when connecting and communicating with the serving base station. The configuration parameters may configure the UE to exploit both time diversity and frequency diversity to extend and enhance coverage when receiving the PDSCH and PDCCH channels, when transmitting the PUSCH and PUCCH channel, and when transmitting PUSCH Msg3 during random access. Advantageously, the base station may flexibly and dynamically configure the UE with coverage enhancement parameters to extend the coverage of the UE using time diversity and frequency diversity gains as the UE moves around.

Abstract: The present application relates to improved methods of application instance registration in a Multi-access Edge Computing (MEC) system, comprising, e.g.: receiving, at a MEC platform device, a registration request for a first application instance; determining, by the MEC platform device, that the first application instance is not presently registered; in response to determining that the first application instance is not presently registered, allocating, by the MEC platform device, a first application instance registration identifier for the first application instance; transmitting, by the MEC platform device, the first application instance registration identifier to the first application instance; and causing, by the MEC platform device, a first application instance registration notification to be sent to a MEC system-level management device.

Abstract: This application sets forth techniques for authenticating a mobile device with a cellular wireless network without electronic Subscriber Identity Module (eSIM) credentials by using an Extensible Authentication Protocol Transport Layer Security (EAP-TLS) procedure. The mobile device authenticates with an Authentication Server Function (AUSF) of the cellular wireless network using an embedded Universal Integrated Circuit Card (eUICC) certificate. Processing circuitry of the mobile wireless device external to the eUICC implements the EAP-TLS procedure and authenticates validity of the AUSF. In some embodiments, the eUICC provides key generation and storage for a session key for communication between the mobile device and the cellular wireless network.

Abstract: Techniques discussed herein can facilitate improved security establishment procedures for Vehicle to Everything (V2X) direct connections. Various embodiments are employable at or comprise User Equipment, and can initiate and/or receive V2X security establishment connections wherein a receiving UE can reject the connection based on the initiating UE's capabilities/policy and/or the initiating UE can make the final decision regarding the connection based at least on receiving security policy and capability information from the receiving UE.

Abstract: An example technique for security key derivation in a wireless system includes: receiving a radio resource control (RRC) suspend message from a first node, the RRC suspend message including a first next hop (NH) chaining counter (NCC) value, entering a RRC inactive state, deriving a first node key based on the first NCC value, generating a first uplink message for transmission in the RRC inactive state based on the first node key, and transmitting the first uplink message to a node while in the RRC inactive state.

Abstract: The present application relates to devices and components including apparatuses, systems, and methods for technologies for non-seamless wireless local area access offload.

Abstract: An edge enabler server of an edge data network is configured to receive a verification request comprising an edge enabler client identification (EEC ID), wherein the EEC ID uniquely identifies an edge enabler client (EEC), determine whether the EEC ID is an authorized BEC ID and provide a verification response based on whether the EEC ID is authorized.

Abstract: A user equipment (UE) may attempt to access an edge data network. The UE generates a first credential based on a second credential that was generated for a procedure between the UE and a network. The UE then generates an identifier corresponding to the first credential and generates a message authentication code based on the first credential and a count, wherein the count is associated with an identifier of an edge network client running on the UE. The UE then transmits an application registration request, message to a server associated with an edge data network, the application registration request message including the count, the message authentication code, the identifier corresponding to the first credential, and a public land mobile network identifier (PLMN ID) of the network. The UE then receives an authentication accept message or an authentication reject message from the server associated with the edge data network.

Abstract: The present application relates to devices and components including apparatus, systems, and methods for managing relay identifiers for sidelink relays in wireless networks.

Abstract: Provided is a method of a transmitter in a wireless communication system, that includes: generating protocol data units (PDU) in layer 2 (L2); performing security protection on a control PDU of the PDUs in L2 to obtain a protected control PDU for the control PDU, wherein the control PDU in a sublayer lower than service data adaptation protocol (SDAP); and transmitting the protected control PDU.

Abstract: A user equipment (UE) is configured to join a multicast broadcast service (MBS) session. The UE sends, to a network function, a protocol data unit (PDU) modification request comprising a request to join a multicast broadcast service (MBS) session, generates a first key (KMBS-UE), receives a PDU session modification complete message comprising an encrypted second key (KMBS) and a key identification (KID) corresponding to the KMBS and decrypts the Kiss using the KMBS-UE.