Secondary authorization at PDU session establishment for home routed roaming
Exemplary embodiments include methods for establishing a user-requested protocol data unit (PDU) session in a user's visited public land mobile network (VPLMN), by a session management function (V-SMF) in the VPLMN. Such methods include receiving, from an access and mobility management function (AMF) in the VPLMN, a PDUSession_CreateSMContext Request to establish the PDU session to be routed through the user's home PLMN (HPLMN). The PDUSession_CreateSMContext Request identifies an SMF (H-SMF) in the user's HPLMN. Such methods include sending, to the identified H-SMF, a PDUSession_Create Request to create the PDU session. The PDUSession_Create Request includes an identifier of a session management (SM) context, in the V-SMF, that is associated with the PDU session. Such methods include receiving, from the H-SMF, a PDUSession_Update Request that includes an identifier of an SM context, in the H-SMF, that is associated with the PDU session. Embodiments also include complementary methods performed by the H-SMF.
1. A method for establishing a user-requested protocol data unit (PDU) session in a user's visited public land mobile network (VPLMN), the method performed by a session management function (V-SMF) in the VPLMN and comprising:
receiving, from an access and mobility management function (AMF) in the VPLMN, a PDUSession_CreateSMContext Request to establish the PDU session to be routed through the user's home PLMN (HPLMN), wherein the PDUSession_CreateSMContext Request identifies a session management function (H-SMF) in the user's HPLMN;
sending, to the identified H-SMF, a PDUSession_Create Request to create the PDU session, wherein the PDUSession_Create Request includes an identifier of a session management (SM) context, in the V-SMF, that is associated with the PDU session; and
receiving, from the H-SMF, a PDUSession_Update Request that includes an identifier of an SM context, in the H-SMF, that is associated with the PDU session.
2. The method of claim 1 , further comprising using the received identifier of the SM context in the H-SMF, sending to the H-SMF a PDUSession_Update Response for transferring an authentication response from a user equipment (UE) of the user.
3. The method of claim 1 , wherein:
the PDUSession_Create Request includes an indication that the V-SMF supports early delivery of the identifier of the SM context in the H-SMF; and
the identifier of the SM context in the H-SMF is included in the PDUSession_Update Request based on the indication that the V-SMF supports early delivery of the identifier of the SM context in the H-SMF.
4. The method of claim 3 , wherein when the PDUSession_Create Request indicates that the V-SMF does not support early delivery of the identifier of the SM context in the H-SMF:
the identifier of the SM context in the H-SMF is not received in the PDUSession_Update Request; and
the method further comprises, after receiving the PDUSession_Update Request, receiving from the H-SMF a PDUSession_Create Response that includes the identifier of the SM context in the H-SMF.
5. The method of claim 1 , wherein the PDUSession_Update Request that includes the identifier of the SM context in the H-SMF, is received before receiving any other messages from the H-SMF related to the PDU session.
6. The method of claim 1 , wherein the identifier of the SM context in the H-SMF-enables the V-SMF to address services related to the PDU session that are provided by the H-SMF.
7. A method for establishing a user-requested protocol data unit (PDU) session in a user's visited public land mobile network (VPLMN), the method performed by a session management function (H-SMF) in the user's home PLMN (HPLMN) and comprising:
receiving, from a session management function (V-SMF) in the user's VPLMN, a PDUSession_Create Request to create the PDU session to be routed through the user's HPLMN, wherein the PDUSession_Create Request includes an identifier of a session management (SM) context, in the V-SMF, that is associated with the PDU session; and
sending, to the V-SMF, a PDUSession_Update Request that includes an identifier of an SM context, in the H-SMF, that is associated with the PDU session.
8. The method of claim 7 , further comprising after sending the identifier of the SM context in the H-SMF, receiving from the V-SMF a PDUSession_Update Response for transferring an authentication response from a user equipment (UE) of the user.
9. The method of claim 7 , wherein:
the PDUSession_Create Request includes an indication that the V-SMF supports early delivery of the identifier of the SM context in the H-SMF; and
the identifier of the SM context in the H-SMF is included in the PDUSession_Update Request based on the indication that the V-SMF supports early delivery of the identifier of the SM context in the H-SMF.
10. The method of claim 9 , wherein when the PDUSession_Create Request indicates that the V-SMF does not support early delivery of the identifier of the SM context in the H-SMF:
the identifier of the SM context in the H-SMF is not included in the PDUSession_Update Request; and
the method further comprises, after sending the PDUSession_Update Request, sending to the V-SMF a PDUSession_Create Response that includes the identifier of the SM context in the H-SMF.
11. The method of claim 7 , wherein the PDUSession_Update Request that includes the identifier of the SM context in the H-SMF, is sent before sending the V-SMF any other messages related to the PDU session.
12. The method of claim 7 , wherein the identifier of the SM context in the H-SMF-enables the V-SMF to address services related to the PDU session that are provided by the H-SMF.
13. A session management function (V-SMF) in a user's visited public land mobile network (VPLMN), the V-SMF comprising:
a network interface configured to communicate with other network functions in the VLPMN and in the user's home PLMN (HPLMN); and
processing circuitry operably coupled to the network interface, whereby the processing circuitry and the network interface are configured to:
receive, from an access and mobility management function (AMF) in the VPLMN, a PDUSession_CreateSMContext Request to establish a protocol data unit (PDU) session to be routed through the user's HPLMN, wherein the PDUSession_CreateSMContext Request identifies a session management function (H-SMF) in the user's HPLMN;
send, to the identified H-SMF, a PDUSession_Create Request to create the PDU session, wherein the PDUSession_Create Request includes an identifier of a session management (SM) context, in the V-SMF, that is associated with the PDU session; and
receive, from the H-SMF, a PDUSession_Update Request that includes an identifier of an SM context, in the H-SMF, that is associated with the PDU session.
14. The V-SMF of claim 13 , wherein:
the PDUSession_Create Request includes an indication that the V-SMF supports early delivery of the identifier of the SM context in the H-SMF; and
the identifier of the SM context in the H-SMF is included in the PDUSession_Update Request based on the indication that the V-SMF supports early delivery of the identifier of the SM context in the H-SMF.
15. The V-SMF of claim 14 , wherein when the PDUSession_Create Request indicates that the V-SMF does not support early delivery of the identifier of the SM context in the H-SMF:
the identifier of the SM context in the H-SMF is not received in the PDUSession_Update Request; and
the processing circuitry and the network interface are further configured to, after receiving the PDUSession_Update Request, receiving from the H-SMF a PDUSession_Create Response that includes the identifier of the SM context in the H-SMF.
16. The V-SMF of claim 13 , wherein the PDUSession_Update Request that includes the identifier of the SM context in the H-SMF, is received before receiving any other messages from the H-SMF related to the PDU session.
17. A session management function (H-SMF) in a user's home public land mobile network (HPLMN), the H-SMF comprising:
a network interface configured to communicate other network functions in the HLPMN and in the user's visited PLMN (VPLMN); and
processing circuitry operably coupled to the network interface, whereby the processing circuitry and the network interface are configured to:
receive, from a session management function (V-SMF) in the user's VPLMN, a PDUSession_Create Request to create a protocol data unit (PDU) session to be routed through the user's HPLMN, wherein the PDUSession_Create Request includes an identifier of a session management (SM) context, in the V-SMF, that is associated with the PDU session; and
send, to the V-SMF, a PDUSession_Update Request that includes an identifier of an SM context, in the H-SMF, that is associated with the PDU session.
18. The H-SMF of claim 17 , wherein:
the PDUSession_Create Request includes an indication that the V-SMF supports early delivery of the identifier of the SM context in the H-SMF; and
the identifier of the SM context in the H-SMF is included in the PDUSession_Update Request based on the indication that the V-SMF supports early delivery of the identifier of the SM context in the H-SMF.
19. The H-SMF of claim 18 , wherein when the PDUSession_Create Request indicates that the V-SMF does not support early delivery of the identifier of the SM context in the H-SMF:
the identifier of the SM context in the H-SMF is not included in the PDUSession_Update Request; and
the processing circuitry and the network interface are further configured to, after sending the PDUSession_Update Request, sending to the V-SMF a PDUSession_Create Response that includes the identifier of the SM context in the H-SMF.
20. The H-SMF of claim 17 , wherein the PDUSession_Update Request that includes the identifier of the SM context in the H-SMF, is sent before sending the V-SMF any other messages related to the PDU session.