Granted Patent B2

US 12,739,633 · App. 18/674,808 · Granted Sep 15, 2026

Inventors: Andreas Kunz (Ladenburg, DE); Sheeba Backia Mary Baskaran (Friedrichsdorf, DE)

Assignee: Lenovo (Singapore) Pte Ltd

H04W12/068H04L9/0825H04L63/18H04W60/04

Abstract

Claims (48)

1 . A user equipment (UE) for wireless communication, comprising:

at least one memory; and

at least one processor coupled with the at least one memory and configured to cause the UE to:

communicate a registration request message for registration of the UE to a wireless communication network, the registration request message comprising a credentials indication associated with a credential;

receive a response message comprising a presentation policy for registration to the wireless communication network, the presentation policy comprising an indication to provide an encrypted subscription identifier, an encrypted root key, and a public key;

communicate a presentation token generated based at least in part on the presentation policy, the presentation token comprising proof information for a private key;

receive an authentication challenge;

generate, based at least in part on the authentication challenge, an authentication result using a root key and a subscription identity from the credential; and

perform a registration procedure with the wireless communication network based at least in part on the authentication result.

2 . The UE of claim 1 , wherein the registration request message comprises a non-access stratum (NAS) registration request message and the response message comprise a NAS response message.

3 . The UE of claim 1 , wherein the credentials indication comprises an anonymous subscription concealed identifier (SUCI) comprising a network access identifier (NAI) for the wireless communication network.

4 . The UE of claim 1 , wherein the private key is associated with a public key included in the presentation token.

5 . The UE of claim 1 , wherein the at least one processor is configured to cause the UE to communicate the presentation token via a non-access stratum (NAS) request.

6 . The UE of claim 1 , wherein the at least one processor is configured to cause the UE to receive a non-access stratum (NAS) response comprising the authentication challenge and a presentation token success indication.

7 . The UE of claim 1 , wherein the at least one processor is configured to cause the UE to derive the root key and the subscription identity.

8 . The UE of claim 1 , wherein the root key and the subscription identity are included in the credential in an encrypted form, and wherein the at least one processor is configured to cause the UE to decrypt the root key and the subscription identity using the private key.

9 . A processor for wireless communication, comprising:

at least one controller coupled with at least one memory and configured to cause the processor to:

communicate a registration request message for registration of a user equipment (UE) to a wireless communication network, the registration request message comprising a credentials indication associated with a credential;

receive a response message comprising a presentation policy for registration to the wireless communication network, the presentation policy comprising an indication to provide an encrypted subscription identifier, an encrypted root key, and a public key;

communicate a presentation token generated based at least in part on the presentation policy, the presentation token comprising proof information for a private key;

receive an authentication challenge;

generate, based at least in part on the authentication challenge, an authentication result using a root key and a subscription identity from the credential; and

perform a registration procedure for the UE with the wireless communication network based at least in part on the authentication result.

10 . The processor of claim 9 , wherein the registration request message comprises a non-access stratum (NAS) registration request message and the response message comprise a NAS response message.

11 . The processor of claim 9 , wherein the credentials indication comprises an anonymous subscription concealed identifier (SUCI) comprising a network access identifier (NAI) for the wireless communication network.

12 . The processor of claim 9 , wherein the private key is associated with a public key included in the presentation token.

13 . The processor of claim 9 , wherein the at least one controller is configured to cause the processor to communicate the presentation token via a non-access stratum (NAS) request, and receive a non-access stratum (NAS) response comprising the authentication challenge and a presentation token success indication.

14 . The processor of claim 9 , wherein the at least one controller is configured to cause the processor to derive the root key and the subscription identity.

15 . The processor of claim 9 , wherein the root key and the subscription identity are included in the credential in an encrypted form, and wherein the at least one controller is configured to cause the processor to decrypt the root key and the subscription identity using the private key.

16 . A network equipment for wireless communication, comprising:

at least one memory; and

at least one processor coupled with the at least one memory and configured to cause the network equipment to:

receive a registration request message for registration of a user equipment (UE) to a wireless communication network, the registration request message comprising a credentials indication associated with a credential;

communicate a response message, to the UE, comprising a presentation policy for registration to the wireless communication network, the presentation policy comprising an indication to provide an encrypted subscription identifier, an encrypted root key, and a public key;

receive a presentation token generated based at least in part on the presentation policy, the presentation token comprising proof information for a private key;

receive, based at least in part on the presentation token, an authentication challenge; and

communicate, to the UE, the authentication challenge associated with registration of the UE to the wireless communication network.

17 . A method performed by a user equipment (UE), the method comprising:

communicating a registration request message for registration of the UE to a wireless communication network, the registration request message comprising a credentials indication associated with a credential;

receiving a response message comprising a presentation policy for registration to the wireless communication network, the presentation policy comprising an indication to provide an encrypted subscription identifier, an encrypted root key, and a public key;

communicating a presentation token generated based at least in part on the presentation policy, the presentation token comprising proof information for a private key;

receiving an authentication challenge;

generating, based at least in part on the authentication challenge, an authentication result using a root key and a subscription identity from the credential; and

performing a registration procedure with the wireless communication network based at least in part on the authentication result.

18 . The method of claim 17 , wherein the registration request message comprises a non-access stratum (NAS) registration request message and the response message comprise a NAS response message.

19 . The method of claim 17 , wherein the credentials indication comprises an anonymous subscription concealed identifier (SUCI) comprising a network access identifier (NAI) for the wireless communication network.

20 . The method of claim 17 , wherein the root key and the subscription identity are included in the credential in an encrypted form, the method further comprising decrypting the root key and the subscription identity using the private key.

Assignments (2)

Continuity (1)

References Cited (53)