Abstract: Systems, apparatuses, methods, and program products to provision a user plane (UP) security policy at a granularity level that is per data radio bearer (DRB) within a protocol data unit (PDU) session or per quality of service (QoS) flow within one or more DRB of the PDU session.

Abstract: Methods to enhance the coverage of NR systems for coverage-limited wireless devices are disclosed. A serving base station may configure a coverage-limited UE with parameters for the UE to operate in a coverage enhancement mode through RRC signaling, DCI, or RAR grant. The UE may use the configuration parameters to determine whether to enter into the coverage enhancement mode when connecting and communicating with the serving base station. The configuration parameters may configure the UE to exploit both time diversity and frequency diversity to extend and enhance coverage when receiving PDSCH and PDCCH channels. The UE may use the configuration parameters to receive PDSCH and PCCCH that are coverage enhanced using time repetitions and frequency hopping. Advantageously, the base station may flexibly and dynamically configure the UE with coverage enhancement parameters to extend the coverage of the UE using time diversity and frequency diversity gains as the UE moves around.

Abstract: This disclosure relates to techniques for performing wireless communications including authentication between user equipment and edge computing servers. One or more edge enabler client(s) operating at a user equipment may authenticate with one or more edge computing server(s). The authentication may use generic bootstrapping architecture, among various possibilities.

Abstract: Disclosed are embodiments for authentication and authorization in a 5G network between an edge enabler client (EEC) of a UE and an edge configuration server (ECS). The embodiment include performing primary authentication with the 5G network to obtain a KAUSF; generating a Kedge and a Kedge ID using the KAUSF and a subscription permanent identifier (SUPI); providing the Kedge and the Kedge ID to the EEC to cause it to compute a MACEEC using the Kedge and an EEC ID; and sending to the ECS an application registration request, the application registration request including the EEC ID, MACEEC, and Kedge ID.

Abstract: A door lock control system includes: a motor, actuating a door lock; a power supply, supplying power to the motor; a first relay and a second relay, arranged in series between the motor and the power supply; a switch, operated by a user; a body ECU, turning on the first relay for a predetermined time in response to the switch being operated; and a timer IC, turning on the second relay for a predetermined time in response to the switch being operated.

Abstract: Disclosed are embodiments of a user equipment (UE) configured to communicate in a 5G network and to perform authentication between an edge enabler client (EEC) of the UE and an edge configuration server (ECS) or an edge enabler server (EES) based on an architecture for authentication and key management for applications (AKMA). The techniques include performing primary authentication with the 5G network to obtain a KAUSF; generating a KAKMA and an A-KID; providing to the EEC the KAKMA and an EEC identifier (ID) for the EEC to generate a Kedge, the KAKMA and the EEC ID being used by the EEC to compute a MACEEC; and sending to the ECS or the EES an application registration request, the application registration request including the EEC ID, the MACEEC, and the A-KID.

Abstract: Apparatuses, systems, and methods for revocation and/or modification of user consent in Edge Computing (MEC). A user equipment device (UE) may determine that user consent needs to be updated. The user consent may be associated with MEC. Additionally, the UE may transmit, via an application layer of the UE, a user consent modification request to an edge application server of a network, e.g., of an edge data network. The user consent modification request may be carried in application data traffic. The user consent modification request may be indicated via an Nnef_ParameterProvision_Update service operation. The user consent modification request is indicated via an Nnef_ParameterProvision_Update service operation.

Abstract: Embodiments are presented herein of apparatuses, systems, and methods for a user equipment device (UE) and a network to perform closed-loop transmission power control in a multi-base station environment with out-of-order scheduling. The network may configure a series of transmission power control commands to indicate to the UE transmission power for one or more transmissions to different base stations. The UE may receive the transmission power control commands, consider information including timing and/or resources associated with the transmission power control commands, and determine transmission power for the transmissions.

Abstract: This disclosure relates to techniques for determining a quasi-co-located assumption for aperiodic channel state information reference signals for multi-transmission-reception-point operation in a wireless communication system. A wireless device may establish wireless links with multiple transmission-reception-points of a cellular network. The wireless device may receive downlink control information. The wireless device may determine a quasi-co-located assumption for aperiodic channel state information reference signals for the downlink control information. Signals received according to the quasi-co-located assumption for aperiodic channel state information reference signals may be buffered by the wireless device if a scheduling offset for the downlink control information is below a scheduling offset threshold.

Abstract: An example technique for security key derivation in a wireless system includes: sending a radio resource control (RRC) suspend message from a first node, to a first user device, the RRC suspend message including a first next hop (NH) chaining counter (NCC) value; releasing access stratum (AS) resources associated with the first user device; deriving a first node key based on the first NCC value; receiving a first uplink message from the first user device without allocating AS resources to the first user device; and unscrambling the first uplink message based on the first NCC value.

Abstract: An example technique for security key derivation in a wireless system includes: receiving a radio resource control (RRC) suspend message from a first node, the RRC suspend message including a first next hop (NH) chaining counter (NCC) value, entering a RRC inactive state, deriving a first node key based on the first NCC value, generating a first uplink message for transmission in the RRC inactive state based on the first node key, and transmitting the first uplink message to a node while in the RRC inactive state.

Abstract: The present application relates to devices and components including apparatus, systems, and methods for direct discovery or solicitation messages that include indications of types of user equipment-to-network relays.

Abstract: The present application relates to devices and components including apparatus, systems, and methods for security enhancement with respect to reselection of relay user equipment.

Abstract: A UE may receive a first GUTI from a network. The UE may transition to a Connected mode in response to a paging procedure with the network. The UE may take actions to ensure that a second GUTI is obtained from the network. Other aspects are described.

Abstract: A UE may receive a first GUTI from a network. The UE may transition to a Connected mode in response to a paging procedure with the network. The UE may take actions to ensure that a second GUTI is obtained from the network. Other aspects are described.

Abstract: Methods to enhance the coverage of NR systems for coverage-limited wireless devices are disclosed. A serving base station may configure a coverage-limited UE with parameters for the UE to operate in a coverage enhancement mode through RRC signaling, DCI, or RAR grant. The UE may use the configuration parameters to determine whether to enter into the coverage enhancement mode when connecting and communicating with the serving base station. The configuration parameters may configure the UE to exploit both time diversity and frequency diversity to extend and enhance coverage when receiving the PDSCH and PDCCH channels, when transmitting the PUSCH and PUCCH channel, and when transmitting PUSCH Msg3 during random access. Advantageously, the base station may flexibly and dynamically configure the UE with coverage enhancement parameters to extend the coverage of the UE using time diversity and frequency diversity gains as the UE moves around.

Abstract: Techniques to protect a subscriber identity, by encrypting a subscription permanent identifier (SUPI) to form one-time use subscription concealed identifiers (SUCIs) using a set of one-time ephemeral asymmetric keys, generated by a user equipment (UE), and network provided keys are disclosed. Encryption of the SUPI to form the SUCIs can mitigate snooping by rogue network entities, such as fake base stations. The UE is restricted from providing the unencrypted SUPI over an unauthenticated connection to a network entity. In some instances, the UE uses a trusted symmetric fallback encryption key KFB or trusted asymmetric fallback public key PKFB to verify messages from an unauthenticated network entity and/or to encrypt the SUPI to form a fallback SUCIFB for communication of messages with the unauthenticated network entity.

Abstract: Techniques discussed herein can facilitate improved security establishment procedures for Vehicle to Everything (V2X) direct connections. Various embodiments are employable at or comprise User Equipment, and can initiate and/or receive V2X security establishment connections wherein a receiving UE can reject the connection based on the initiating UE's capabilities/policy and/or the initiating UE can make the final decision regarding the connection based at least on receiving security policy and capability information from the receiving UE.

Abstract: Embodiments are presented herein of apparatuses, systems, and methods for a user equipment device (UE) and/or cellular network to resume a connection. To resume the connection, the UE may transmit a fully protected connection resume message, e.g., which may include protection for a resume cause field.

Abstract: A user equipment (UE) includes a first subscriber identification module (SIM) and a second SIM. The UE is configured to establish a first cellular network connection based on, at least, the first SIM and a second cellular network connection based on, at least, the second SIM. The UE sends, by the first SIM, a first registration request to the network, wherein the first registration request comprises an identification indicating the multi-SIM device is a type of multi-SIM device, receives, by the first SIM, a first registration accept message indicating the first registration request has been accepted, wherein the first registration accept message comprises a first temporary identification for the first SIM and sends, by the second SIM, an access network message comprising one of the first temporary identification or a further temporary identification based on, at least, the first temporary identification.