Methods, systems, and computer readable media for validating a session management function (SMF) registration request
Methods, systems, and computer readable media for validating a session management function (SMF) registration request are disclosed. One method occurs at a network node. The method comprises: receiving, from a first SMF in a home network, a registration request indicating a first network identifier identifying a visited network where a user device is roaming; determining whether the registration request is valid by comparing the first network identifier and a second network identifier associated with an access and mobility management function (AMF) serving the user device; and performing at least one action based on the determining.
1. A method for validating a session management function (SMF) registration request, the method comprising:
at a network node:
receiving, from a first session management function (SMF), the first SMF being located in a home network, a registration request indicating a first network identifier identifying a visited network where a user device is roaming;
after receiving the registration request, querying a unified data repository (UDR) for a second network identifier;
receiving, from the UDR, as a response to the querying, the second network identifier identifying a network where an access and mobility management function (AMF) is registered as serving the user device;
determining whether the registration request is valid by comparing the first network identifier and the second network identifier; and
performing at least one action based on the determining.
2. The method of claim 1 wherein the second network identifier is included in Amf3GppAccessRegistration data obtained from the UDR.
3. The method of claim 1 wherein determining that the registration request is valid includes determining that the first network identifier and the second network identifier match.
4. The method of claim 1 where determining that the registration request is invalid includes determining that the first network identifier and the second network identifier do not match.
5. The method of claim 1 wherein performing the at least one action includes in response to determining that the registration request is valid, performing a registration based on the registration request.
6. The method of claim 1 wherein performing the at least one action includes in response to determining that the registration request is invalid, discarding the registration request, averting a registration based on the registration request, sending a notification message to a management or security node indicating that the registration request is invalid, sending a notification message to a management or security node indicating that a related node is potentially malicious, or copying or storing a portion of the registration request.
7. The method of claim 1 wherein the first network identifier or the second network identifier includes a public land mobile network (PLMN) identifier or a PLMN code.
8. The method of claim 1 wherein the registration request includes a Nudm_UECM_Registration request.
9. The method of claim 1 wherein the network node includes a unified data management (UDM) node, an authentication server function (AUSF), or the UDR.
10. A system for validating a session management function (SMF) registration request, the system comprising:
a network node comprising:
at least one processor; and
a memory,
wherein the network node is configured for:
receiving, from a first session management function (SMF), the first SMF being located in a home network, a registration request indicating a first network identifier identifying a visited network where a user device is roaming;
after receiving the registration request, querying a unified data repository (UDR) for a second network identifier;
receiving, from the UDR, as a response to the querying, the second network identifier identifying a network where an access and mobility management function (AMF) is registered as serving the user device;
determining whether the registration request is valid by comparing the first network identifier and the second network identifier; and
performing at least one action based on the determining.
11. The system of claim 10 wherein the second network identifier is included in Amf3GppAccessRegistration data obtained from the UDR.
12. The system of claim 10 wherein the network node is configured for determining that the registration request is valid by determining that the first network identifier and the second network identifier match.
13. The system of claim 10 wherein the network node is configured for determining that the registration request is invalid by determining that the first network identifier and the second network identifier do not match.
14. The system of claim 10 wherein the network node is configured for:
in response to determining that the registration request is valid, performing a registration based on the registration request.
15. The system of claim 10 wherein the network node is configured for:
in response to determining that the registration request is invalid, discarding the registration request, averting a registration based on the registration request, sending a notification message to a management or security node indicating that the registration request is invalid, sending a notification message to a management or security node indicating that a related node is potentially malicious, or copying or storing a portion of the registration request.
16. The system of claim 10 wherein the first network identifier or the second network identifier includes a public land mobile network (PLMN) identifier or a PLMN code.
17. The system of claim 10 wherein the registration request includes a Nudm_UECM_Registration request.
18. The system of claim 10 wherein the network node includes a unified data management (UDM) node, an authentication server function (AUSF), or the UDR.
19. A non-transitory computer readable medium comprising computer executable instructions embodied in the non-transitory computer readable medium that when executed by at least one processor of at least one computer cause the at least one computer to perform steps comprising:
at a network node:
receiving, from a first session management function (SMF), the first SMF being located in a home network, a registration request indicating a first network identifier identifying a visited network where a user device is roaming;
after receiving the registration request, querying a unified data repository (UDR) for a second network identifier;
receiving, from the UDR, as a response to the querying, the second network identifier identifying a network where an access and mobility management function (AMF) is registered as serving the user device;
determining whether the registration request is valid by comparing the first network identifier and the second network identifier; and
performing at least one action based on the determining.
20. The non-transitory computer readable medium of claim 19 wherein the second network identifier is included in Amf3GppAccessRegistration data obtained from the UDR.