Abstract: Embodiments of the present disclosure provide method and apparatus for authentication. A method performed by a session management and gateway entity comprises receiving a create session request comprising an identity of a terminal device from a mobile management entity. The method further comprises determining to use a second authentication method rather than a first authentication method. The second authentication method has a higher security than the first authentication method. The method further comprises triggering a procedure of the second authentication method related to an authentication authorization and accounting (AAA) server.

Abstract: Report of the Single Network Slice Selection Assistance Information (S-NSSAI) that is associated with the Protocol Data Unit (PDU) Session to Data Network Authentication Authorization Accounting (DN-AAA) server. A method performed by a first network function implementing DN-AAA server. The method comprises receiving, from a second network function, a request message comprising network slice related information for a PDU Session. The request message may be an access request message for authentication at least based on the network slice related information. The request message may be an accounting request message indicating that the PDU session has started. The DN-AAA server may know the network slice information that is associated with the session for authentication and statistics based on the received Session S-NSSAI information.

Abstract: Periodic requests for to Packet Flow Description, PFD, data updates on all Application Ids generate a constant background load in several network function nodes, even if applications have not been updated. There is provided a mechanism to optimize PFD management updates in a telecommunication network, whereby PFD data for a selected number of applications are stored and updated permanently, whilst PFD data for other applications are only temporarily stored so that storage and updates are released when these other applications are not in use. A list of permanent Application Ids is configured for the most frequently used applications. When a control rule specifies an Application Id not included in the list of permanent Application Ids, the specified Application Id is included in a list of temporary Application Ids, which are periodically checked and, when not used, are removed from the list of temporary Application Ids.

Abstract: The embodiments herein relate to optimized procedure for Packet Flow Description (PFD) management. In one embodiment, there proposes a method (800) for managing Packet Flow Description (PFD), comprising: receiving (S801) from a Session Management Function (SFM) (201) or a User Plane Function (UPF) (302) a demand message indicating the demand for at least one PFD mle for an application; detecting (S802) the at least one PFD mle for the application; and notifying (S803) information regarding the at least one PFD rule to the SMF (201) or the UPF (302). The embodiments herein may achieve an optimized procedure for PFD Management which optimizes the delivery of PFD rules, by reducing the amount of signaling and by reducing the number of hops between the producer (AF) and the consumer (UPF).

Abstract: Periodic requests for to Packet Flow Description, PFD, data updates on all Application Ids generate a constant background load in several network function nodes, even if applications have not been updated. There is provided a mechanism to optimize PFD management updates in a telecommunication network, whereby PFD data for a selected number of applications are stored and updated permanently, whilst PFD data for other applications are only temporarily stored so that storage and updates are released when these other applications are not in use. A list of permanent Application Ids is configured for the most frequently used applications. When a control rule specifies an Application Id not included in the list of permanent Application Ids, the specified Application Id is included in a list of temporary Application Ids, which are periodically checked and, when not used, are removed from the list of temporary Application Ids.