UAS authentication and security establishment
Apparatuses, methods, and systems are disclosed for UAS authentication and security establishment. One apparatus includes a transceiver that sends, from a first network function of a mobile wireless communication network, an authentication request message from a user equipment (“UE”) to a UAS Service Supplier (“USS”)/UAS Traffic Management (“UTM”), the UE comprising at least one of an unmanned aerial vehicle (“UAV”) and a UAV controller (“UAV-C”). The transceiver receives, at the first network function from the USS/UTM, an authentication response message comprising a UAS identifier and a UAS security context.
1 . A network equipment (NE), comprising:
at least one memory; and
at least one processor coupled with the at least one memory and configured to cause the NE to:
transmit, from a first network function, an unmanned aerial system (UAS) authentication request message associated with a user equipment (UE) to a UAS Service Supplier (USS) or a UAS Traffic Management (UTM) entity, the UE comprising an unmanned aerial vehicle (UAV) or a UAV controller (UAV-C), wherein the UAS authentication request message comprises a civil aviation authority (CAA)-level UAV identifier used by the USS or UTM to authenticate the UE;
receive, at the first network function from the USS or UTM entity, a UAS authentication response message comprising a UAS identifier and a UAS security context comprising a UAS root key and a UAS root key identifier; and
store, at the first network function, the UAS identifier and the UAS security context.
2 . The NE of claim 1 , wherein the UAS authentication response message further comprises at least one of an authentication success indication, an identifier for the UAV, command and control (C2) assistance information, and an authorization token.
3 . The NE of claim 2 , wherein the processor is configured to cause the NE to locally store, at the first network function, the authentication success indication, the identifier for the UAV, the UAS identifier, the C2 assistance information, the authorization token, and the UAS security context.
4 . The NE of claim 2 , wherein the C2 assistance information comprises at least one of: an identifier for the UAV-C, a UAV3 type indicator, and a UAV-C serving network identifier.
5 . The NE of claim 2 , wherein the processor is configured to cause the NE to send, from the first network function, the UAS authentication response message to an Access and Mobility Management Function (AMF).
6 . The apparatus NE of claim 1 , wherein the processor is configured to cause the NE to:
receive the UAS authentication request message from an Access and Mobility Management Function (AMF), the UAS authentication request message comprising an identifier for the UAV;
locally store the identifier for the UAV at the first network function; and
send the UAS authentication request message to the USS or UTM entity in response to receiving the UAS authentication request message.
7 . A method performed by a network equipment (NE), comprising:
transmitting, from a first network function, an unmanned aerial system (UAS) authentication request message associated with a user equipment (UE) to a UAS Service Supplier (USS) or a UAS Traffic Management (UTM) entity, the UE comprising an unmanned aerial vehicle (UAV) or a UAV controller (UAV-C), wherein the UAS authentication request message comprises a civil aviation authority (CAA)-level UAV identifier used by the USS or UTM to authenticate the UE;
receiving, at the first network function from the USS or UTM entity, a UAS authentication response message comprising a UAS identifier and a UAS security context comprising a UAS root key and a UAS root key identifier; and
storing, at the first network function, the UAS identifier and the UAS security context.
8 . The method of claim 7 , wherein the UAS authentication response message further comprises at least one of an authentication success indication, an identifier for the UAV, command and control (C2) assistance information, and an authorization token.
9 . The method of claim 8 , further comprising locally storing, at the first network function, the authentication success indication, the identifier for the UAV, the UAS identifier, the C2 assistance information, the authorization token, and the UAS security context.
10 . The method of claim 8 , wherein the C2 assistance information comprises at least one of: an identifier for the UAV-C, a UAV3 type indicator, and a UAV-C serving network identifier.
11 . The method of claim 8 , wherein the processor is configured to cause the NE to send, from the first network function, the UAS authentication response message to an Access and Mobility Management Function (AMF).
12 . The method of claim 7 , further comprising:
receiving the UAS authentication request message from an Access and Mobility Management Function (AMF), the UAS authentication request message comprising an identifier for the UAV;
locally storing the identifier for the UAV at the first network function; and
sending the UAS authentication request message to the USS or UTM entity in response to receiving the UAS authentication request message.