Enhanced hotspot 2.0 management object for trusted non-3GPP access discovery
User equipment (UE) includes a transceiver configured to transmit and receive information to/from a Wireless Fidelity (WiFi) access point. The UE includes processing circuitry coupled to the transceiver and configured to: determine a service provider associated with the WiFi access point based on a response to an ANQP query. The UE is configured to receive at least a portion of a management object (MO). The MO includes a trust field specifying whether the WiFi access point is trusted for WiFi offload by the service provider. The UE is configured to: in response to determining that the WiFi access point is trusted, send an L3 attach trigger. The UE is configured to: in response to determining that the WiFi access point is not trusted, establish an Internet Protocol security (IPsec) tunnel that the UE to an Evolved Packet Data Gateway through the untrusted WiFi access point.
1. An apparatus comprising:
a transceiver configured to transmit information to and receive information from a Wireless Fidelity (WiFi) access point;
processing circuitry coupled to the transceiver and configured to:
determine a service provider associated with the WiFi access point based on a response to an Access Network Query Protocol (ANQP) query,
receive at least a portion of a management object (MO), the MO including a trust field specifying whether the WiFi access point is trusted for WiFi offload by the service provider;
in response to determining that the WiFi access point is trusted, send an L3 attach trigger; and
in response to determining that the WiFi access point is not trusted, establish an Internet Protocol security (IPsec) tunnel that connects the apparatus to an Evolved Packet Data Gateway (ePDG) through the untrusted WiFi access point.
2. The apparatus of claim 1 , further configured to: based the determination that the WiFi access point is trusted, connect to an Evolve Packet Core (EPC) Packet Data Network (PDN) Gateway (GW) through a direct connection between the trusted WiFi access point and the EPC PDN GW.
3. The apparatus of claim 2 , further configured to, in response to determining that the WiFi access point is not trusted:
discover the ePDG,
establish the IPsec tunnel with the ePDG, and
connect to the EPC PDN GW through the IPsec tunnel that connects the untrusted WiFi access point to the ePDG and connects the EPC PDN GW to the ePDG.
4. The apparatus of claim 1 , wherein the at least the portion of the MO comprises an initial provisioning of a whole of the MO.
5. The apparatus of claim 1 , wherein:
the at least the portion of the MO comprises a whole of the MO; and
the apparatus is further configured to initiate provisioning of an update of the whole MO.
6. The apparatus of claim 1 , wherein:
the at least the portion of the MO comprises a whole of the MO; and
the apparatus is further configured to receive a pushed update of the whole MO.
7. The apparatus of claim 1 , wherein:
the at least the portion of the MO comprises a pushed field update to a parameter that defines a frequency of initiating provisioning of an update of a whole of the MO;
the apparatus is further configured to in response to receiving the pushed field update, change the frequency of initiating provisioning of the update of the whole MO; and
initiate a subsequent provisioning of the update of the whole MO according to the changed frequency.
8. An apparatus comprising:
an input/output terminal configured to output information to and receive information from a user equipment (UE) through a Wireless Fidelity (WiFi) access point;
processing circuitry coupled to the input/output terminal and configured to:
in response to a receiving a request to an Access Network Query Protocol (ANQP) query, output a response indicating a service provider associated with the WiFi access point;
generate and provision to the UE at least a portion of a management object (MO), the MO including a trust field specifying whether the WiFi access point is trusted for WiFi offload by the service provider.
9. The apparatus of claim 8 , wherein:
the at least the portion of the MO comprises a whole of the MO; and
the apparatus is further configure to initiate an initial provisioning of the whole MO to the UE.
10. The apparatus of claim 8 , wherein:
the at least the portion of the MO comprises a whole of the MO; and
the apparatus is further configure to initiate provisioning of an update of the whole MO to the UE.
11. The apparatus of claim 8 , wherein:
the at least the portion of the MO comprises a whole of the MO; and
the apparatus is further configured to push an update of the whole MO to the UE.
12. The apparatus of claim 8 , wherein:
the at least the portion of the MO comprises a field update to a parameter that defines a frequency of initiating provisioning of an update of a whole of the MO;
the apparatus is further configured to change the frequency of initiating provisioning, and push the field update to the UE; and
subsequently provision the update of the whole MO according to the changed frequency.
13. A method comprising:
receiving information from a Wireless Fidelity (WiFi) access point;
determining, by processing circuitry, a service provider associated with the WiFi access point based on a response to an Access Network Query Protocol (ANQP) query,
receiving at least a portion of a management object (MO), the MO including a trust field specifying whether the WiFi access point is trusted for WiFi offload by the service provider;
in response to determining that the WiFi access point is trusted, sending an L3 attach trigger; and
in response to determining that the WiFi access point is not trusted, establishing an Internet Protocol security (IPsec) tunnel that connects a user equipment to an Evolved Packet Data Gateway (ePDG) through the untrusted WiFi access point.
14. The method of claim 13 , further comprising: based the determination that the WiFi access point is trusted, connecting to an Evolve Packet Core (EPC) Packet Data Network (PDN) Gateway (GW) through a direct connection between the trusted WiFi access point and the EPC PDN GW.
15. The method of claim 14 , further comprising, in response to determining that the WiFi access point is not trusted:
discovering the ePDG,
establishing the IPsec tunnel with the ePDG, and
connecting to the EPC PDN GW through the IPsec tunnel that connects the untrusted WiFi access point to the ePDG and connects the EPC PDN GW to the ePDG.
16. The method of claim 13 , wherein the at least the portion of the MO comprises an initial provisioning of a whole of the MO.
17. The method of claim 13 , wherein:
the at least the portion of the MO comprises a whole of the MO; and
the method further comprises initiating a provisioning of an update of the whole MO.
18. The method of claim 13 , wherein:
the at least the portion of the MO comprises a whole of the MO; and
the method further comprises receiving a pushed update of the whole MO.
19. The method of claim 13 , wherein:
the at least the portion of the MO comprises a pushed field update to a parameter that defines a frequency of initiating provisioning of an update of a whole of the MO;
the method further comprising: to in response to receiving the pushed field update, changing the frequency of initiating provisioning of the update of the whole MO; and
initiating a subsequent provisioning of the update of the whole MO according to the changed frequency.