Method and system to detect anti-steering of roaming activity in wireless communication network
Accordingly, embodiments herein provide a system for managing anti-steering of roaming in a wireless communication network. The system includes a HPLMN, a VPLMN and a UE. The HPLMN obtains a register request message from the VPLMN and derives at least one HPLMN specific security key based on at least one security parameter. Further, the HPLMN protects a preferred PLMN list using the at least one HPLMN specific security key and the security parameter and sends the protected preferred PLMN list to the VPLMN along with necessary security information. Further, the VPLMN is configured to receive the protected preferred PLMN list from the HPLMN and send a message including the protected preferred PLMN list to the UE. The message mandates the VPLMN to send the preferred PLMN list transparently to the UE. Further, the UE is configured to receive the message including the preferred PLMN list from the VPLMN.
1. A method for steering of roaming by a user equipment (UE) in a wireless communication system, the method comprising:
sending a registration request message to an access and mobility management function (AMF) in a visited public land mobile network (VPLMN);
receiving a registration accept message including a preferred PLMN list from the AMF in the VPLMN;
performing security check of the preferred PLMN list; and
sending a registration complete message to the AMF in the VPLMN based on a result of the security check,
wherein the registration accept message includes a message authentication code for integrity (MAC-I), calculated by an authentication server function (AUSF) in a home public land mobile network (HPLMN) for protection of the preferred PLMN list, and
wherein the MAC-I is calculated by the AUSF in the HPLMN using a key (KAUSF) identified by a subscription permanent identifier (SUPI) of the UE.
2. The method of claim 1 , wherein the performing of the security check comprises:
calculating by the UE a MAC-I of the preferred PLMN list based on the preferred PLMN list in the same way as the AUSF in the HPLMN; and
verifying by the UE whether the calculated MAC-I of the preferred PLMN list matches a MAC-I of the preferred PLMN list received in the registration accept message.
3. The method of claim 1 , wherein the registration complete message includes acknowledge information of the UE and a MAC-I calculated by the UE if the security check is successful.
4. The method of claim 3 , further comprising:
selecting a PLMN other than the VPLMN based on the preferred PLMN list if the VPLMN is not included in the preferred PLMN list.
5. The method of claim 3 , further comprising:
selecting a PLMN other than the VPLMN if the security check is not successful.
6. The method of claim 1 , wherein the preferred PLMN list is sent transparently via NAS signaling from the AMF in the VPLMN.
7. A user equipment (UE) for steering of roaming in a wireless communication system, the UE comprising:
a transceiver; and
at least one processor coupled with the transceiver and configured to:
send a registration request message to an access and mobility management function (AMF) in a visited public land mobile network (VPLMN),
receive a registration accept message including a preferred PLMN list from the AMF in the VPLMN,
perform security check of the preferred PLMN list, and
send a registration complete message to the AMF in the VPLMN based on a result of the security check,
wherein the registration accept message includes a message authentication code for integrity (MAC-I), calculated by an authentication server function (AUSF) in home public land mobile network (HPLMN) for protection of the preferred PLMN list, and
wherein the MAC-I is calculated by the AUSF in the HPLMN using a key (KAUSF) identified by a subscription permanent identifier (SUPI) of the UE.
8. The UE of claim 7 , wherein the at least one processor is further configured to:
calculate a MAC-I of the preferred PLMN list based on the preferred PLMN list in the same way as the AUSF in the HPLMN, and
verify whether the calculated MAC-I of the preferred PLMN list matches the MAC-I of the preferred PLMN list received in the registration accept message.
9. The UE of claim 7 , wherein the registration complete message includes acknowledge information of the UE and a MAC-I calculated by the UE if the security check is successful.
10. The UE of claim 9 , wherein the at least one processor is further configured to select a PLMN other than the VPLMN based on the preferred PLMN list if the VPLMN is not included in the preferred PLMN list.
11. The UE of claim 9 , wherein the at least one processor is further configured to select a PLMN other than the VPLMN if the security check is not successful.
12. The UE of claim 7 , wherein the preferred PLMN list is sent transparently via NAS signaling from the AMF in the VPLMN.