Method and apparatus for authentication method selection in edge network system
The disclosure relates to a 5G or 6G communication system for supporting a higher data transmission rate. Embodiments herein disclose a method and system for authentication method selection in an edge network system. The method includes determining whether the UE is configured with authentication methods supported by at least one of an ECS, an EES, a home network and a serving network in the edge network system. The method further includes selecting the authentication methods configured at the UE based on a capability of the UE to establish a connection with the EES based on the at least one selected authentication method when the UE is configured with the authentication methods supported by at least one of the ECS, the EES, the home network and the serving network.
1 . A method performed by a user equipment (UE) in an edge network system, the method comprising:
receiving, from a core network to an edge enabler client (EEC) of the UE, a message including edge configuration server (ECS) configuration information, wherein the ECS configuration information includes an ECS address, an ECS provider identifier, and at least one authentication method which is selected by a home network (HN) and a serving network (SN);
if more than one authentication method is supported, selecting an authentication method of the at least one authentication method based on the ECS configuration information; and
if the at least one authentication method is not supported, selecting a default authentication method based on the ECS configuration information.
2 . The method of claim 1 ,
wherein the at least one authentication method is selected based on a local policy, and
wherein the default authentication method is selected based on an operator policy.
3 . A method performed by an edge configuration server (ECS) in an edge network system, the method comprising:
receiving, from an edge enabling server (EES), an EES registration request for registering the EES, wherein the EES registration request includes first authentication methods supported by the EES;
receiving, from a core network, information on second authentication methods supported by a home network and a serving network;
selecting at least one authentication method supported by the home network, the serving network, and the EES based on the first authentication methods and the second authentication methods; and
transmitting, to the EES, an EES registration response in response to the EES registration request.
4 . The method of claim 3 , wherein the transmitting, to the EES, an EES registration response in response to the EES registration request comprises:
generating configuration information including at least one of an ECS address, an ECS provider identifier, the at least one authentication method supported by at least one of the ECS, the EES, the home network, and the serving network; and
transmitting, to the EES, the configuration information for selecting the at least one authentication method.
5 . The method of claim 3 , wherein the selecting the at least one authentication method supported by the home network, the serving network, and the EES comprises:
validating an EES security credential, wherein the EES registration request includes the at least one authentication method supported by the EES, an EES profile, the EES security credential;
storing registration information in the EES registration request in case that the EES security credential is successfully validated;
indicating a status of validation of the EES registration request to the EES;
identifying whether the at least one of authentication method that is supported by the home network, the serving network, the ECS, and the EES is in common; and
selecting the at least one authentication method in case that the at least one authentication method that is supported by the home network, the serving network, the ECS, and the EES in common is identified.
6 . A User Equipment (UE) in an edge network system, wherein the UE comprises:
a transceiver; and
a processor coupled to the transceiver,
wherein the processor is configured to:
receive, from a core network to an edge enabler client (EEC) of the UE, a message including edge configuration server (ECS) configuration information, wherein the ECS configuration information includes an ECS address, an ECS provider identifier, and at least one authentication method which is selected by a home network (HN) and a serving network (SN);
if more than one authentication method is supported, select an authentication method of the at least one authentication method based on the ECS configuration information; and
if the at least one authentication method is not supported, select a default authentication method based on the ECS configuration information.
7 . The UE of claim 6 ,
wherein the at least one authentication method is selected based on a local policy, and
wherein the default authentication method is selected based on an operator policy.
8 . An edge configuration server (ECS) in an edge network system, wherein the ECS comprises:
a transceiver; and
a processor coupled to the transceiver,
wherein the processor is configured to:
receive, from an edge enabling server (EES), an EES registration request for registering the EES, wherein the EES registration request includes first authentication methods supported by the EES;
receive, from a core network, information on second authentication methods supported by a home network and a serving network;
select at least one authentication method supported by the home network, the serving network, and the EES based on the first authentication methods and the second authentication methods; and
transmit, to the EES, an EES registration response in response to the EES registration request.
9 . The ECS of claim 8 , wherein the processor is further configured to:
generate configuration information including at least one of an ECS address, an ECS provider identifier, the at least one authentication method supported by at least one of the ECS, the EES, the home network, and the serving network, and
transmit, to the EES, the configuration information for selecting the at least one authentication method.
10 . The ECS of claim 8 , wherein the processor is further configured to:
validate an EES security credential, wherein the EES registration request includes the at least one authentication method supported by the EES, an EES profile, and the EES security credential,
store registration information in the EES registration request in case that the EES security credential is successfully validated,
indicate a status of validation of the EES registration request to the EES,
identify whether the at least one authentication method that is supported by the home network, the serving network, the ECS, and the EES is in common, and
select the at least one authentication method in case that the at least one authentication method that is supported by the home network, the serving network, the ECS, and the EES in common is identified.