Methods and apparatuses for slice-specific authentication
A method for slice authentication in a mobile telephone network. A WTRU performs, during a registration procedure with an Access and Mobility management Function, AMF, of a network, primary authentication of the WTRU, during which registration procedure the WTRU receives from the AMF a message indicating successful registration and including at least one of an indication of at least one network slice-specific authentication and authorization for slice access, SSSA, procedure to be executed following the registration procedure, a list of slices for which the WTRU is allowed access, and a list of slices for which SSSA is needed for access by the WTRU, and performs, after successful registration, at least one SSSA of the WTRU for accessing a first slice in the network.
1. A method for operation by a wireless transmit/receive unit, WTRU, the method comprising:
receiving a message indicating successful registration of the WTRU and further including a first list of slices for which slice-specific authentication and authorization for slice access, SSSA, is required after registration, and a second list of at least one currently allowed slice; and
performing, after successful registration of the WTRU, at least one SSSA for accessing a first slice included in the first list of slices included in the received message.
2. The method of claim 1 , further comprising:
performing SSSA for at least one further slice in the list of slices for which SSSA is required; and
accessing the at least one further slice after successful SSSA.
3. The method of claim 2 , further comprising:
receiving a message indicating successful SSSA of the at least one further slice.
4. The method of claim 3 , further comprising:
upon reception of the message indicating successful SSSA of the at least one further slice, updating a stored list of slices for which the WTRU is allowed access to include the at least one further slice.
5. The method of claim 1 , wherein the SSSA for the first slice is for accessing the first slice over a first access type, the method further comprising:
determining that a SSSA is being performed for the first slice over the first access type and waiting for an outcome of the SSSA for the first slice over the first access type before beginning a registration procedure for the first slice over a second access type.
6. The method of claim 5 , wherein the first access type is 3GPP access or non-3GPP access.
7. The method of claim 6 , wherein the second access type is non-3GPP access in case the first access type is 3GPP access, and 3GPP access in case the first access type is non-3GPP access.
8. The method of claim 7 , wherein the non-3GPP access is to a Wireless Local Area Network.
9. The method of claim 1 , wherein the message further comprises a list of slices for which the WTRU is allowed access including at least one slice for which a previous SSSA was successfully executed and for which the WTRU is allowed access regardless of access type.
10. The method of claim 1 , further comprising maintaining the list of slices for which SSSA is needed for access by the WTRU.
11. The method of claim 10 , further comprising updating the list of slices for which SSSA is required based on a result of a SSSA for a slice included in the list.
12. The method of claim 1 , wherein the WTRU refrains from accessing slices for which SSSA is required until a corresponding SSSA has been performed successfully.
13. The method of claim 1 , wherein the WTRU refrains from accessing slices until after reception from the network of a specific message that access is allowed.
14. A wireless transmit/receive unit, WTRU, comprising:
memory for storing processor-executable instructions; and
at least one processor configured to execute the processor-executable instructions to:
receive a message indicating successful registration of the WTRU and including a first list of slices for which slice-specific authentication and authorization for slice access, SSSA, is required after registration, and a second list of at least one currently allowed slice; and
perform, after successful registration of the WTRU, at least one SSSA for accessing a first slice included in the first list of slices included in the received message.
15. The WTRU of claim 14 , wherein the SSSA for the first slice is for accessing the first slice over a first access type, and wherein the at least one processor is further configured to execute the processor-executable instructions to:
determine that a SSSA is being performed for the first slice over the first access type and wait for an outcome of the SSSA for the first slice over the first access type before beginning a registration procedure for the first slice over a second access type.
16. The WTRU of claim 15 , wherein the at least one processor is further configured to execute the processor-executable instructions to update the list of slices for which SSSA is required based on a result of a SSSA for a slice included in the list.
17. The WTRU of claim 15 , wherein the first access type is 3GPP access or non-3GPP access.
18. The WTRU of claim 17 , wherein the second access type is non-3GPP access in case the first access type is 3GPP access, and 3GPP access in case the first access type is non-3GPP access.
19. The WTRU of claim 18 , wherein the non-3GPP access is to a Wireless Local Area Network.
20. The WTRU of claim 14 , wherein the message further comprises a list of slices for which the WTRU is allowed access includes at least one slice for which a previous SSSA was successfully executed and for which the WTRU is allowed access regardless of access type.
21. The WTRU of claim 14 , wherein the at least one processor is further configured to execute the processor-executable instructions to:
perform SSSA for at least one further slice in the list of slices for which SSSA is required; and
access the at least one further slice after successful SSSA.
22. The WTRU of claim 21 , wherein the at least one processor is further configured to execute the processor-executable instructions to receive a message indicating successful SSSA of the at least one further slice.
23. The WTRU of claim 22 , wherein the at least one processor is further configured to execute the processor-executable instructions to, upon reception of the message indicating successful SSSA of the at least one further slice, update a stored list of slices for which the WTRU is allowed access to include the at least one further slice.
24. The WTRU of claim 14 , wherein the at least one processor is further configured to execute the processor-executable instructions to maintain the list of slices for which SSSA is required.
25. The WTRU of claim 14 , wherein the at least one processor is further configured to execute the processor-executable instructions to refrain from accessing slices for which SSSA is required until a corresponding SSSA has been performed successfully.
26. The WTRU of claim 14 , wherein the at least one processor is further configured to execute the processor-executable instructions to refrain from accessing slices until after reception from the network of a specific message that access is allowed.
27. A method for operation by an Access and Mobility management Function, AMF, the method comprising:
provide to a wireless transmit/receive unit, WTRU a message indicating successful registration of the WTRU and including a first list of slices for which SSSA is required after registration, and a second list of at least one currently allowed slice; and
initiating, after successful registration of the WTRU, at least one SSSA for accessing a first slice included in the first list of slices included in the provided message.
28. The method of claim 27 , wherein the message further comprises a list of slices for which the WTRU is allowed further includes at least one slice for which a previous SSSA was successfully executed and for which the WTRU is allowed access regardless of access type.
29. The method of claim 27 , wherein the AMF determines to skip SSSA for a slice for which a previous SSSA was successfully executed regardless of access type.