Restricted access procedure
Various aspects of the present disclosure generally relate to wireless communication. In some aspects, a user equipment (UE) may transmit a registration request for restricted access (RA), wherein the registration request selectively includes an onboarding access request. The UE may selectively communicate with an onboarding network to authenticate and authorize a particular network based at least in part on whether the registration request includes the onboarding access request. The UE may complete the RA registration after transmitting the registration request and based at least in part on selectively communicating with the onboarding network to authenticate and authorize the particular network. Numerous other aspects are described.
1. A user equipment (UE) for wireless communication, comprising:
a memory; and
one or more processors coupled to the memory, the one or more processors configured to:
transmit a registration request, wherein the registration request includes an onboarding access request;
communicate with an onboarding network to authenticate and authorize a particular network using a stored credential based at least in part on the registration request including the onboarding access request; and
complete a registration of the UE for restricted access based at least in part on communicating with the onboarding network to authenticate and authorize the particular network.
2. The UE of claim 1 , wherein the one or more processors are further configured to:
connect to a full access credentials provisioning server based at least in part on completing the registration.
3. The UE of claim 1 , wherein the one or more processors, when transmitting the registration request, are configured to:
transmit the registration request when operating in a limited service state without a regular access credential.
4. The UE of claim 1 , wherein the one or more processors are further configured to:
receive information from the onboarding network identifying one or more levels of restricted access for onboarding, wherein the one or more levels include an onboarding with default credentials level.
5. The UE of claim 1 , wherein the onboarding access request includes an indicator set to a configured value for onboarding in a non-public network.
6. The UE of claim 1 , wherein the registration request is included in a non-access stratum message.
7. A method of wireless communication performed by a user equipment (UE), comprising:
transmitting a registration request, wherein the registration request includes an onboarding access request;
communicating with an onboarding network to authenticate and authorize a particular network using a stored credential based at least in part on the registration request including the onboarding access request; and
completing a registration of the UE for restricted access based at least in part on communicating with the onboarding network to authenticate and authorize the particular network.
8. The method of claim 7 , further comprising:
connecting to a full access credentials provisioning server based at least in part on completing the registration.
9. The method of claim 7 , wherein transmitting the registration request comprises:
transmitting the registration request when operating in a limited service state without a regular access credential.
10. The method of claim 7 , further comprising:
receiving information from the onboarding network identifying one or more levels of restricted access for onboarding, wherein the one or more levels include at least one of an authenticated level or an onboarding with default credentials level.
11. The method of claim 7 , wherein the onboarding access request includes an indicator set to a configured value for onboarding in a non-public network.
12. The method of claim 7 , wherein the registration request is included in a 12, non-access stratum message.
13. The method of claim 7 , wherein the registration request includes credentials and is included in at least one of a radio resource control message or a non-access stratum message.
14. The method of claim 7 , wherein an extensible authentication protocol procedure is based at least in part on a service descriptor value of the onboarding access request.
15. The method of claim 7 , wherein an authentication, authorization, and accounting (AAA) server is selected based at least in part on an indicated descriptor value of the onboarding access request.
16. The method of claim 7 , wherein communicating with the onboarding network comprises:
receiving an indicator of a UE route selection policy (URSP) identifying a network selection policy, wherein the network selection policy includes information identifying a set of applications that are authorized to use restricted access.
17. The method of claim 7 , wherein communicating with the onboarding network comprises:
receiving an indicator of a UE route selection policy (URSP) identifying a network selection policy, wherein the network selection policy includes information identifying one or more of destination Internet Protocol addresses or fully qualified domain names that are authorized for use with restricted access.
18. The method of claim 7 , further comprising:
enforcing a UE route selection policy (URSP) based at least in part on receiving an indicator of the URSP.
19. The method of claim 7 , wherein completing the registration comprises:
establishing one or more protocol data unit sessions at one or more data network names associated with one or more of a set of applications based at least in part on a UE route selection policy (URSP).
20. A method of wireless communication performed by a network device, comprising:
providing a system information block indicator identifying a set of levels of restricted access for onboarding, wherein the set of levels includes at least one of an unauthenticated level or an onboarding with credentials level;
receiving, from a user equipment (UE) as a response to the system information block indicator, a registration request, wherein the registration request includes an onboarding access request with credentials included in a non-access stratum message;
communicating with the UE to authenticate and authorize a network based at least in part on the registration request including the onboarding access request; and
completing a registration of the UE for restricted access based at least in part on communicating with the UE to authenticate and authorize the network.
21. The method of claim 20 , further comprising:
connecting the UE to a full access credentials provisioning server based at least in part on successfully completing the registration.
22. The method of claim 20 , further comprising:
providing information identifying one or more levels of restricted access for onboarding, wherein the one or more levels include at least one of an authenticated level or an onboarding with default credentials level.
23. The method of claim 20 , wherein the registration request includes the credentials and is included in the non-access stratum message.
24. The method of claim 20 , wherein an extensible authentication protocol procedure is based at least in part on a service descriptor value of the onboarding access request.
25. The method of claim 20 , wherein an authentication, authorization, and accounting (AAA) server is selected based at least in part on an indicated descriptor value of the onboarding access request.
26. The method of claim 20 , wherein communicating with the UE comprises:
providing an indicator of a UE route selection policy (URSP) identifying a network selection policy, wherein the network selection policy includes information identifying a set of applications that are authorized to use for restricted access.
27. The method of claim 20 , wherein communicating with the UE comprises:
providing an indicator of a UE route selection policy (URSP) identifying a network selection policy, wherein the network selection policy includes information identifying one or more of destination Internet Protocol addresses or fully qualified domain names that are authorized for use for restricted access.
28. The method of claim 20 , wherein completing the registration comprises:
establishing one or more protocol data unit sessions at one or more data network names associated with one or more of a set of applications based at least in part on a UE route selection policy.
29. A method of wireless communication performed by a core network node, comprising:
receiving, from a user equipment (UE) and as a response to a system information block indicator, an onboarding access request with credentials included in a non-access stratum message, wherein the onboarding access request with credentials is indicated as being for onboarding in a stand-alone non-public network (SNPN) with a credentials level of access;
triggering a network authentication and authorization procedure using a stored profile of an authorization and authentication (AAA) server;
transmitting, based at least in part on executing the network authentication and authorization procedure, an indicator of a UE route selection policy (URSP) identifying a network selection policy, wherein the network selection policy includes information identifying a set of applications that are authorized to use restricted access; and
communicating with the AAA server to complete the network authentication and authorization procedure based at least in part on transmitting the indicator of the URSP.
30. The method of claim 29 , wherein an extensible authentication protocol procedure of the network authentication and authorization procedure is based at least in part on a service descriptor value of the onboarding access request.