Granted Patent B2

US 12,273,707 · App. 17/555,196 · Granted Apr 8, 2025

Inventors: Andreas Kunz (Ladenburg, DE); Sheeba Backia Mary Baskaran (Friedrichsdorf, DE)

Assignee: Lenovo (Singapore) Pte. Ltd.

H04W12/041H04L9/0819H04L9/0866H04L63/08

Abstract

Claims (42)

1. A method of a network function, the method comprising:

receiving a request message from an edge server function, wherein the request message comprises: an edge server identifier and an edge enabler client identifier (EEC-ID), wherein the EEC-ID comprises an unencrypted EEC-ID or an encrypted EEC-ID, wherein the encrypted EEC-ID is encrypted with an authentication and key management (AKMA) key (K AKMA );

deriving an application specific key (K AF ) based on the edge server identifier;

authenticating the edge server function;

when the edge server function is authenticated, decrypting the EEC-ID and deriving a unique key (K AFEEC ) in an AKMA anchor function (AAnF) based on the K AF and the EEC-ID; and

transmitting a response message to the edge server function, wherein the response message comprises the K AFEEC and an unencrypted EEC-ID.

2. The method of claim 1 , wherein the network function comprises an AKMA anchor function.

3. The method of claim 1 , wherein the edge server function comprises an edge configuration server, an edge enabler server, or a combination thereof.

4. The method of claim 1 , wherein the edge server identifier comprises an edge configuration identifier, an edge enabler server identifier, or a combination thereof.

5. The method of claim 1 , wherein the request message further comprises an AKMA key identifier.

6. The method of claim 1 , further comprising, in response to the EEC-ID comprising the encrypted EEC-ID, decrypting the EEC-ID with the K AKMA .

7. The method of claim 6 , wherein decrypting the EEC-ID with the K AKMA comprises decrypting the EEC-ID in response to the EEC-ID being encrypted.

8. The method of claim 1 , wherein the response message further comprises a K AFEEC expiry time.

9. An apparatus for performing a network function, the apparatus comprising:

at least one memory; and

at least one processor coupled with the at least one memory and configured to cause the apparatus to:

receive a request message from an edge server function, wherein the request message comprises an edge server identifier and an edge enabler client identifier (EEC-ID), wherein the EEC-ID comprises an unencrypted EEC-ID or an encrypted EEC-ID, wherein the encrypted EEC-ID is encrypted with an authentication and key management (AKMA) key (K AKMA );

derive an application specific key (K AF ) based on the edge server identifier;

authenticate the edge server function;

when the edge server function is authenticated, decrypt the EEC-ID and derive a unique key (K AFEEC ) in an AKMA anchor function (AAnF) based on the K AF and the EEC-ID; and

transmit a response message to the edge server function, wherein the response message comprises the K AFEEC and an unencrypted EEC-ID.

10. The apparatus of claim 9 , wherein the network function comprises an AKMA anchor function.

11. The apparatus of claim 9 , wherein the edge server function comprises an edge configuration server, an edge enabler server, or a combination thereof.

12. The apparatus of claim 9 , wherein the edge server identifier comprises an edge configuration identifier, an edge enabler server identifier, or a combination thereof.

13. The apparatus of claim 9 , wherein the request message further comprises an AKMA key identifier.

14. The apparatus of claim 9 , wherein the at least one processor is configured to cause the apparatus to, in response to the EEC-ID comprising the encrypted EEC-ID, decrypt the EEC-ID with the K AKMA .

15. A user equipment (UE), comprising:

at least one memory; and

at least one processor coupled with the at least one memory and configured to cause the UE to:

transmit a request message to an edge server function, wherein the request message comprises an unencrypted EEC-ID or an encrypted EEC-ID, wherein the encrypted EEC-ID is encrypted with an authentication and key management (AKMA) key (K AKMA );

authenticate the edge server function;

when the edge server function is authenticated, decrypt the EEC-ID and derive a first unique key (K AFEEC ) based on an application specific key (K AF ) and an edge enabler client identifier (EEC-ID); and

receive a response message from the edge server function, wherein the response message comprises a second K AFEEC associated with the edge server function.

16. The UE of claim 15 , wherein the edge server function comprises an edge configuration server, an edge enabler server, or a combination thereof.

17. The UE of claim 15 , wherein the at least one processor is configured to cause the UE to compute the K AKMA .

18. The UE of claim 15 , wherein the at least one processor is configured to cause the UE to compute an AKMA key identifier.

19. A hardware processor for wireless communication, comprising:

at least one controller coupled with at least one memory and configured to cause the hardware processor to:

transmit a request message to an edge server function, wherein the request message comprises an unencrypted EEC-ID or an encrypted EEC-ID, wherein the encrypted EEC-ID is encrypted with an authentication and key management (AKMA) key (K AKMA );

authenticate the edge server function;

when the edge server function is authenticated, decrypt the EEC-ID and derive a first unique key (K AFEEC ) based on an application specific key (K AF ) and an edge enabler client identifier (EEC-ID); and

receive a response message from the edge server function, wherein the response message comprises a second K AFEEC used by the edge server function.

Assignments (2)

Continuity (1)

References Cited (12)