Determining an authentication type
Apparatuses, methods, and systems are disclosed for selecting an authentication type in a 5G network. One apparatus includes a processor and a network interface that receives a first message requesting to register a remote unit to the mobile communication network, where the remote unit is connected to a non-3GPP access network and the remote unit does not support the NAS protocol. The processor determines an authentication request type for the remote unit, where the authentication request type is not based on the NAS protocol. The processor creates a NAS registration message on behalf of the remote unit and sends a second message to an access management function in the mobile communication network, where the second message contains the NAS registration message and the determined authentication request type.
1 . An access and mobility management function (“AMF”) in a mobile communication network, the AMF comprising:
a memory; and
a processor coupled with the memory and configured to cause the AMF to:
receive a first message from an interworking function in a non-third generation partnership project (“non-3GPP”) access network, wherein the first message requests fifth-generation (“5G”) registration to the mobile communication network on behalf of a user equipment (“UE”) that does not support a non-access stratum (“NAS”) protocol;
determine an authentication request type for the UE, wherein the authentication request type is not based on the NAS protocol;
forward the authentication request type to a data management function via an Authentication Server Function (“AUSF”) in the mobile communication network, wherein the authentication request type is a basis for a selected authentication method for the UE, wherein the selected authentication method is not based on the NAS protocol; and
initiate a security mode control procedure with the interworking function in response to the UE successfully completing authentication using the selected authentication method.
2 . The AMF of claim 1 , wherein the first message is a Next Generation Application Protocol (“NGAP”) message containing a NAS registration request message and an authentication type parameter, wherein to determine the authentication request type, the processor is configured to cause the AMF to parse the first message for an authentication type parameter.
3 . The AMF of claim 1 , wherein to determine the authentication request type, the processor is configured to cause the AMF to select a pre-configured authentication request type whenever the first message is received.
4 . The AMF of claim 1 , wherein the processor is configured to cause the AMF to transmit to the AUSF an Authentication Request message containing the authentication request type, wherein the Authentication Request message indicates that the UE is to be authenticated using an authentication method based on the authentication request type.
5 . An interworking function in a non-third generation partnership project (“non-3GPP”) access network, the interworking function comprising:
a memory; and
a processor coupled with the memory and configured to cause the interworking function to:
receive a first message requesting to register a user equipment (“UE”) to a mobile communication network, wherein the first message indicates that the UE is connected to a non-3GPP access network and the UE does not support a non-access stratum (“NAS”) protocol;
determine an authentication request type for the UE, wherein the authentication request type is not based on the NAS protocol;
create a NAS registration message on behalf of the UE; and
transmit a second message to an access and mobility management function (“AMF”) in the mobile communication network, wherein the second message contains the NAS registration message and the determined authentication request type.
6 . The interworking function of claim 5 , wherein the first message comprises a Network Access Identifier (“NAI”) which indicates that the UE does not support the NAS protocol, wherein to determine the authentication request type, the processor is configured to cause the interworking function to select an authentication request type based on the NAI.
7 . The interworking function of claim 6 , wherein a portion of the NAI indicates an authentication method preferred by the UE, wherein the processor is configured to cause the interworking function to determine the authentication request type is based on the authentication method preferred by the UE.
8 . The interworking function of claim 5 , wherein the interworking function is configured with a default authentication request type to use whenever the first message is received.
9 . A data management function in a mobile communication network, the data management function comprising:
a memory; and
a processor coupled with the memory and configured to cause the data management function to:
receive from an Authentication Server Function (“AUSF”) in the mobile communication network a first request to provide authentication data for a user equipment (“UE”), wherein the first request indicates an authentication request type;
select a first authentication method based on the authentication request type and subscription data of the UE; and
transmit a response to the first request, wherein the response comprises an authentication vector and an indication of the first authentication method.
10 . The data management function of claim 9 , wherein to select the first authentication method, the processor is configured to cause the data management function to determine whether the authentication request type is permitted by the subscription data.
11 . The data management function of claim 9 , wherein the first request includes a subscription concealed identifier (“SUCI”) of the UE, wherein the processor is configured to cause the data management function to decode the SUCI and to retrieve the subscription data of the UE based on the decoded SUCI.