Abstract: Methods and systems for establishing and maintaining security for communications when switching paths for the communications are disclosed herein. In one embodiment, a method performed by a first wireless communication device includes: determining whether a service is allowed to switch between at least two different communication paths based on a path switching policy associated with the service; and when the service is allowed to switch between the at least two different communication paths, setting a signaling integrity protection policy for the service to REQUIRED.

Abstract: This disclosure generally relates performing UE authentication and registration with the core network, and in particular, to supporting secure interactions between the UE and the target AMF when the UE is re-allocated to the target AMF. During a UE registration procedure, the initial AMF generate a 5G-GUTI for the UE and retrieves a candidate AMF list. The initial AMF sends the generated 5G-GUTI (or 5G-S-TMSI), the candidate AMF list, and a full registration request message to the (R)AN for storage and subsequent use. The initial AMF, once determines an AMF re-allocation is needed, instruct the UE to re-start the registration procedure with the core network, by using the generated 5G-GUTI. The (R)AN selects the target AMF, and forward the stored full registration request message to the target AMF to complete the registration.

Abstract: Presented are systems and methods for authorization of proximity based services. A first wireless communication device may send, to a second wireless communication device, a message to access a network via the second wireless communication device as a relay node, using at least one authentication and key management for applications (AKMA) service. The message may include an AKMA key identifier (A-KID) and a freshness parameter. The first wireless communication device may generate a validation token to validate against another validation token of the second wireless communication device. The first wireless communication device may generate the validation token using the freshness parameter and a proximity based service function (PBSF) key (KPBSF).

Abstract: A first network element receives a primary re-authentication request message sent by a second network element, where the primary re-authentication request message carries a UE identifier; the first network element determines the UE and acquires the state of the UE according to the UE identifier; then the first network element determines corresponding response indication information according to the state of the UE and sends a primary re-authentication response message carrying the response indication information to the second network element, and the second network element performs a corresponding operation according to the response indication information. The operation of the second network element can be adapted to the current state of the UE to achieve the purpose of improving the success rate of the primary authentication process of the UE, thus improving network service quality and user experience.

Abstract: This disclosure generally relates to User Equipment (UE) authentication and authorization with an edge data network in communication networks. Such authentication and authorization may be based on the generation and application of an edge computing key for a UE. Such edge computing key may be used for bi-directional authentication and may be dynamically updated during various stages of the authentication and authorization process. The authentication and authorization supports a UE connected to multiple Access Management Functions (AMFs) belonging to different Public Land Mobile Networks (PLMNs).

Abstract: Provided herein are trispecific and/or trivalent binding proteins comprising four polypeptide chains that form three antigen binding sites that specifically bind one or more target proteins, wherein a first pair of polypeptides forming the binding protein possess dual variable domains having a cross-over orientation, and wherein and a second pair of polypeptides possess a single variable domain forming a single antigen binding site. In some embodiments, the binding proteins comprise a binding site that binds a CD28 polypeptide, a binding site that binds a CD3 polypeptide, and a binding site that binds a third polypeptide, such as a tumor target protein. In some embodiments, the binding proteins comprise four polypeptide chains that form three antigen binding sites that specifically bind one or more HIV target proteins. The disclosure also relates to methods for making trispecific and/or trivalent binding proteins and uses of such binding proteins.

Abstract: Provided herein are trispecific and/or trivalent binding proteins comprising four polypeptide chains that form three antigen binding sites that specifically bind one or more target proteins, wherein a first pair of polypeptides forming the binding protein possess dual variable domains having a cross-over orientation, and wherein and a second pair of polypeptides possess a single variable domain forming a single antigen binding site. In some embodiments, the binding proteins comprise a binding site that binds a CD28 polypeptide, a binding site that binds a CD3 polypeptide, and a binding site that binds a third polypeptide, such as a tumor target protein. In some embodiments, the binding proteins comprise four polypeptide chains that form three antigen binding sites that specifically bind one or more HIV target proteins. The disclosure also relates to methods for making trispecific and/or trivalent binding proteins and uses of such binding proteins.

Abstract: Provided are an application key deletion method, a key anchor node, a server, a system and a medium. The application key deletion method includes: receiving an AKMA context deletion request, where a user identifier is carried in the AKMA context deletion request; according to the user identifier, searching a corresponding AKMA context and an application server identifier corresponding to the AKMA context; and in response to finding the application server identifier, sending an application key deletion request message and deleting the AKMA context.

Abstract: This patent document describes, among other things, techniques, and apparatuses for providing onboarding and provisioning of networks. In one aspect, a method of wireless communication is disclosed. The method includes receiving, by a first network node from a second network node, an authentication notification including an identifier for a third network node where a key is stored. The method further includes transmitting, by a first network node, a wireless device parameter update message to the third network node identified by the identifier.

Abstract: This disclosure generally relates to transferring encryption key to a VPLMN in wireless communication. Performed by first network element, the method includes: transmitting a query message to a second network element, to request an identification of a NF entity, wherein the query message comprises an identifier of a wireless device, and wherein the network function is an entity in the VPLMN for storing encryption keys; receiving, from the second network element, a response to the query message, the response comprising the identification of the NF entity; and transmitting, to the NF entity based on the identification of the NF entity, a first message comprising an encryption key, wherein the AF entity is located in the HPLMN or a DN external to the HPLMN and the VPLMN.

Abstract: This disclosure relates generally to a method, device, and system for ensuring security related to SCG and/or SN in a wireless network. One method performed by a wireless device is disclosed. The method may include: selecting a target PScell; the target PScell being associated with a target SN; determining whether the SW counter needs to be updated; in determination that the SW counter needs to be updated: incrementing the SW counter by a predefined value; and updating the security key based on the incremented SW counter and the base key; and transmitting, to a master node or the target SN, a first message requesting switching from a current PScell to the target PScell, the first message comprises at least one of: an indicator indicating that an update of the security key in the target SN is needed; or a value of the incremented SW counter.

Abstract: This document describes methods, apparatus, and systems that relate to enable Authentication and Key Management for Application service for roaming users. In one example aspect, a method for wireless communication includes receiving, by a network device in a first network from a network device in a second network, a signal indicative of an authentication result related to a wireless device, wherein the signal includes a first key and an indication in case that the first network is different from the second network; and generating, by the network device, a key related information based on the signal.

Abstract: This disclosure relates generally to a method, device, and system for ensuring security related to SCG in a wireless network. One method performed by a wireless device is disclosed. The method may include: selecting a target PScell, the target PScell being associated with a target SN, wherein the target SN is a member of a list of SNs, each SN in the list of SNs is associated with a SN counter; determining whether a SN counter associated with the target SN needs to be updated; in determination that the SN counter associated with the target SN needs to be updated, selecting a refreshed SN counter value and updating at least the SN counter associated with the target SN with the refreshed SN counter value; and transmitting, to the master node, a first message requesting switching from a current PScell to the target PScell.

Abstract: A wireless communication method is provided. The wireless communication method includes: receiving an authentication indicator; utilizing the authentication indicator to access authentication information; and providing the authentication information for selecting an authentication method.

Abstract: Provided herein are trispecific and/or trivalent binding proteins comprising four polypeptide chains that form three antigen binding sites that specifically bind one or more target proteins, wherein a first pair of polypeptides forming the binding protein possess dual variable domains having a cross-over orientation, and wherein and a second pair of polypeptides possess a single variable domain forming a single antigen binding site. In some embodiments, the binding proteins comprise a binding site that binds a CD28 polypeptide, a binding site that binds a CD3 polypeptide, and a binding site that binds a third polypeptide, such as a tumor target protein. In some embodiments, the binding proteins comprise four polypeptide chains that form three antigen binding sites that specifically bind one or more HIV target proteins. The disclosure also relates to methods for making trispecific and/or trivalent binding proteins and uses of such binding proteins.

Abstract: Techniques are described to perform network relay security. Multiple methods and an apparatus are proposed to protect the sensitive communication information of users in network communication environment. This application proposes a mechanism for protecting roaming UE capability indication in UE initiated slice-based SoR from attacks such as bidding down attacks. An example communication method includes generating, by a communication device, a request information message that includes a request information to be encrypted by a key, wherein the key is selected from a plurality of key pairs known to the first network node and the communication device, wherein a portion of the request information is transparent to a second network node; and transmitting, from the communication device, the request message to a first network node through the second network node, wherein the request message comprises a key identifier and a user identifier.

Abstract: This disclosure generally relates to securely pushing messages from an AF to a User Equipment (UE) in communication networks. Performed by a wireless device in a wireless network, the method includes receiving, from a first network element hosting an Application Function (AF), a message comprising one of: an AKMA (Authentication and Key Management for Applications) key identifier (ID) identifying an AKMA anchor key of the wireless device; or a set of parameters indicative of the AKMA key ID; and storing the AKMA key ID and an AF key associated with the first network element in a security context, wherein the first network element outside of a core network of the wireless network.

Abstract: A wireless communication method for use in a first wireless device is disclosed. The method comprises receiving, from a second wireless device, update information of proximity service (ProSe) subscription data of at least one wireless terminal.

Abstract: Provided are a method, device, and system for detecting soil organic matter, which belong to the technical field of soil detection. The method includes: determining a total carbon content in a soil to be tested according to an atomic emission spectrum of a first pressed soil sample; determining an inorganic carbon content in the soil to be tested according to a molecular absorption spectrum of a second pressed soil sample; and finally determining an organic matter content in the soil to be tested according to the total carbon content and the inorganic carbon content.

Abstract: A method for registration, a terminal device, a core network device, and a storage medium are disclosed. The method may include acquiring a first registration request message sent by a first terminal device, where the first registration request message may include a first identifier of the first terminal device; acquiring related information about a second terminal device associated with the first identifier; acquiring a second identifier of the first terminal device, in response to the related information about the second terminal device being in an active state; and performing a registration for the first terminal device according to the second identifier.