IP Library Granted Patent US 12695809
Granted Patent B2
US 12695809 · App. 18/339,016 · Granted Jul 28, 2026

Target services for authentication and authorization

Inventors: Sunghoon Kim (San Diego, CA); Lenaig Genevieve Chaponniere (La Jolla, CA); Waqar Zia (Munich, DE)
Assignee: QUALCOMM Incorporated
H04L67/51H04L63/08H04W8/18
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12695809
App. No.
18/339,016
Granted
Jul 28, 2026
Kind
B2
Abstract

Methods, systems, and devices for wireless communications are described. The described techniques support authentication and authorization (AA) for various services provided by a network and supported by a user equipment (UE). A UE may transmit a container to a first network entity requesting AA for a first service. The container may include an indicator of the first service, and the indicator may indicate or distinguish the first service from multiple services. The first network entity may query a third network entity based on the indicator of the first service to discover a second network entity supporting AA for the first service. The first network entity may then transmit an indicator of the first service to the second network entity, and the second network entity may select a fourth network entity supporting AA for the first service.

Claims (75)

1 . An apparatus for wireless communication at a first network entity, comprising:

one or more memories; and

one or more processors coupled with the one or more memories and configured to cause the first network entity to:

obtain a request to validate a first network service for a user equipment (UE), the request comprising an indicator of the first network service of a plurality of network services; and

output or obtain one or more messages with a second network entity to validate the UE for the first network service based at least in part on the indicator of the first network service, the second network entity selected based at least in part on the indicator of the first network service and support, by the second network entity, of validation for the first network service.

2 . The apparatus of claim 1 , wherein the one or more processors are further configured to cause the first network entity to:

output or obtain, based at least in part on the indicator of the first network service, a query message with a third network entity to discover the second network entity that supports validation for the first network service.

3 . The apparatus of claim 1 , wherein the indicator of the first network service comprises a service-level device identifier, and the one or more processors are further configured to cause the first network entity to:

output or obtain the one or more messages based at least in part on a service identifier that corresponds to the service-level device identifier, the second network entity selected based at least in part on the service identifier.

4 . The apparatus of claim 3 , wherein the one or more processors are further configured to cause the first network entity to:

output, to the second network entity, an indication of the service identifier or an indication of a target address associated with the service identifier.

5 . The apparatus of claim 3 , wherein the one or more processors are further configured to cause the first network entity to:

verify a subscription of the UE to determine the service identifier that corresponds to the service-level device identifier.

6 . The apparatus of claim 5 , wherein the subscription comprises the service identifier that indicates a capability of the UE to support the plurality of network services.

7 . The apparatus of claim 1 , wherein the indicator of the first network service comprises a service-level device identifier, and the one or more processors are further configured to cause the first network entity to:

output or obtain the one or more messages based at least in part on a service name that corresponds to the service-level device identifier, the second network entity selected based at least in part on the service name.

8 . The apparatus of claim 7 , wherein the one or more processors are further configured to cause the first network entity to:

output, to the second network entity, an indication of the service name or an indication of a target address associated with the service name.

9 . The apparatus of claim 7 , wherein the service name that corresponds to the service-level device identifier is based at least in part on a format of the service-level device identifier.

10 . The apparatus of claim 1 , wherein the indicator of the first network service comprises a payload type of a payload in the request, and the one or more processors are further configured to cause the first network entity to:

output or obtain the one or more messages based at least in part on a service name that corresponds to the payload type, the second network entity selected based at least in part on the service name.

11 . The apparatus of claim 10 , wherein the one or more processors are further configured to cause the first network entity to:

output, to the second network entity, an indication of the service name or an indication of a target address associated with the service name.

12 . The apparatus of claim 10 , wherein the service name that corresponds to the payload type is based at least in part on a mapping of the payload type to the service name in accordance with a service-level agreement between an operator and a service provider.

13 . The apparatus of claim 1 , wherein the indicator of the first network service comprises a server address in the request, and the one or more processors are further configured to cause the first network entity to:

output, to the second network entity, an indication of the server address.

14 . The apparatus of claim 1 , wherein the indicator of the first network service comprises a payload type of a payload in the request, and the one or more processors are further configured to cause the first network entity to:

output or obtain the one or more messages based at least in part on a category of services that corresponds to the payload type, the category of services comprising the first network service, the second network entity selected based at least in part on the category of services.

15 . The apparatus of claim 14 , wherein the request further comprises a server address for the first network service, and the one or more processors are further configured to cause the first network entity to:

output, to the second network entity, an indication of the server address for the first network service.

16 . The apparatus of claim 1 , wherein the one or more processors are further configured to cause the first network entity to:

verify, based at least in part on the indicator of the first network service, that a subscription of the UE supports the first network service.

17 . The apparatus of claim 1 , wherein the request comprises a payload for a validation procedure.

18 . An apparatus for wireless communication at a second network entity, comprising:

one or more memories; and

one or more processors coupled with the one or more memories and configured to cause the second network entity to:

obtain, from a first network entity, a request to validate a user equipment (UE) for a first network service, the request comprising an indicator of the first network service of a plurality of network services; and

output or obtain one or more messages with a third network entity, a fourth network entity, or both to validate the UE for the first network service based at least in part on the indicator of the first network service, wherein the one or more messages are output or obtained based at least in part on the indicator of the first network service and support, by the third network entity, the fourth network entity, or both, of validation for the first network service.

19 . The apparatus of claim 18 , wherein the one or more processors are further configured to cause the second network entity to:

output, to the third network entity, an indication that the second network entity supports the first network service; and

obtain, from the third network entity, an indication of a target address of the fourth network entity that corresponds to the indicator of the first network service, wherein the one or more messages are output or obtained based at least in part on the indication of the target address of the fourth network entity.

20 . The apparatus of claim 19 , wherein the one or more processors are further configured to cause the second network entity to:

output, to the third network entity, an indication of a range of domain names that correspond to the first network service supported by the second network entity.

21 . The apparatus of claim 19 , wherein the one or more processors are further configured to cause the second network entity to:

output, to the third network entity, an indication of a category of services supported by the second network entity, the category of services comprising the first network service.

22 . The apparatus of claim 18 , wherein the indicator of the first network service comprises a service identifier, a service name, a server address, or a combination thereof.

23 . An apparatus for wireless communication at a user equipment (UE), comprising:

one or more memories; and

one or more processors coupled with the one or more memories and configured to cause the UE to:

output, to a first network entity, for a request to validate a first network service for the UE, the request comprising an indicator of the first network service of a plurality of network services; and

output or obtain one or more messages with the first network entity to validate the UE for the first network service based at least in part on outputting the request.

24 . The apparatus of claim 23 , wherein the indicator of the first network service comprises a service-level device identifier, the service-level device identifier corresponding to a service identifier, a service name, or both of the first network service.

25 . The apparatus of claim 23 , wherein the indicator of the first network service comprises a payload type of a payload in the request, wherein the payload type corresponds to a service name of the first network service.

26 . The apparatus of claim 23 , wherein the indicator of the first network service comprises a server address.

27 . The apparatus of claim 23 , wherein the indicator of the first network service comprises a payload type of a payload in the request, wherein the payload type corresponds to a category of services comprising the first network service, and the request further comprises a server address for the first network service.

28 . A method for wireless communication at a first network entity, comprising:

obtaining a request to validate a first network service for a user equipment (UE), the request comprising an indicator of the first network service of a plurality of network services; and

outputting or obtaining one or more messages with a second network entity to validate the UE for the first network service based at least in part on the indicator of the first network service, the second network entity selected based at least in part on the indicator of the first network service and the second network entity supporting validation for the first network service.

29 . The method of claim 28 , further comprising:

outputting or obtaining, based at least in part on the indicator of the first network service, a query message with a third network entity to discover the second network entity supporting validation for the first network service.

30 . The method of claim 28 , wherein the indicator of the first network service comprises a service-level device identifier, the outputting or obtaining the one or more messages further comprising:

outputting or obtaining the one or more messages based at least in part on a service identifier corresponding to the service-level device identifier, the second network entity selected based at least in part on the service identifier.

31 . A method for wireless communication at a second network entity, comprising:

obtaining, from a first network entity, a request to validate a user equipment (UE) for a first network service, the request comprising an indicator of the first network service of a plurality of network services; and

outputting or obtaining one or more messages with a third network entity, a fourth network entity, or both to validate the UE for the first network service based at least in part on the indicator of the first network service, wherein the one or more messages are output or obtained based at least in part on the indicator of the first network service and the third network entity, the fourth network entity, or both supporting validation for the first network service.

32 . The method of claim 31 , further comprising:

outputting, to the third network entity, an indication that the second network entity supports the first network service; and

obtaining, from the third network entity, an indication of a target address of the fourth network entity corresponding to the indicator of the first network service, wherein the one or more messages are output or obtained based at least in part on obtaining the indication of the target address of the fourth network entity.

33 . The method of claim 31 , further comprising:

outputting, to the third network entity, an indication of a range of domain names corresponding to the first network service supported by the second network entity.

34 . A method for wireless communication at a user equipment (UE), comprising:

outputting, to a first network entity, for a request to validate a first network service for the UE, the request comprising an indicator of the first network service of a plurality of network services; and

outputting or obtaining one or more messages with the first network entity to validate the UE for the first network service based at least in part on outputting the request.

35 . The method of claim 34 , wherein the indicator of the first network service comprises a service-level device identifier, the service-level device identifier corresponding to a service identifier or a service name of the first network service.

36 . The method of claim 34 , wherein the indicator of the first network service comprises a payload type of a payload in the request, the payload type corresponding to a service name of the first network service.