Enhanced registration procedure in a mobile system supporting network slicing
Embodiments of the invention include a mobile network entity, such as Access and Mobility Management Function AMF, providing registration management functions in a mobile network supporting network slicing, said mobile network entity configured to:—check if authentication and/or authorization involving a third party associated with a network slice is required for access to said network slice in addition to authentication and/or authorization for access to said mobile network, during registration,—initiate said authentication and/or authorization involving said third party upon checking that said authentication and/or authorization involving said third party is required.
1. An apparatus comprising
at least one processor; and
at least one memory including computer program code;
the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus at least to:
perform a registration procedure for registering to a network, wherein said registration procedure is performed before performing a session management procedure for a network slice in an instance access to the network slice involves a third-party authentication authorization and accounting server, and
support authentication and/or authorization involving the third party authentication authorization and accounting server for access to the network slice, in addition to authentication and/or authorization for access to said network, if required for said network slice, during said registration procedure.
2. The apparatus according to claim 1 , wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus to perform:
interact with a network entity providing registration management functions, in an authentication and/or authorization procedure involving said third party authentication authorization and accounting server.
3. The apparatus according to claim 1 , wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus to perform:
store configuration information for performing an authentication and/or authorization procedure involving said third party authentication authorization and accounting server.
4. The apparatus according to claim 1 , wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus to perform:
receive an indication that said registration is accepted if said authentication and/or authorization for access to said network and said authentication and/or authorization for access to said network slice have been performed successfully.
5. The apparatus according to claim 1 , wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus to perform:
receive an accepted single network slice selection assistance information if said authentication and/or authorization for access to said network and said authentication and/or authorization for access to said network slice have been performed successfully.
6. A method comprising:
performing a registration procedure for registering to a network, wherein said registration procedure is performed before performing a session management procedure for a network slice in an instance access to the network slice involves a third-party authentication authorization and accounting server, and
supporting authentication and/or authorization involving the third party authentication authorization and accounting server for access to the network slice, in addition to authentication and/or authorization for access to said network, if required for said network slice, during said registration procedure.
7. The method according to claim 6 , comprising:
interacting with a network entity providing registration management functions, in an authentication and/or authorization procedure involving said third party authentication authorization and accounting server.
8. The method according to claim 6 , comprising:
storing configuration information for performing an authentication and/or authorization procedure involving said third party authentication authorization and accounting server.
9. The method according to claim 6 , comprising:
receiving an indication that said registration is accepted if said authentication and/or authorization for access to said network and said authentication and/or authorization for access to said network slice have been performed successfully.
10. The method according to claim 6 , comprising:
receiving an accepted single network slice selection assistance information if said authentication and/or authorization for access to said network and said authentication and/or authorization for access to said network slice have been performed successfully.
11. An apparatus comprising
at least one processor; and
at least one memory including computer program code;
the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus at least to perform:
provide registration management functions, wherein said registration management functions include a registration procedure, and wherein said registration procedure is performed before performing a session management procedure for a network slice in an instance access to the network slice involves a third-party authentication authorization and accounting server,
check if authentication and/or authorization involving the third party authentication authorization and accounting server is required for access to the network slice, in addition to authentication and/or authorization for access to said network, during a registration procedure, and
initiate said authentication and/or authorization involving said third party authentication authorization and accounting server upon checking that said authentication and/or authorization involving said third party authentication authorization and accounting server is required.
12. The apparatus according to claim 11 , wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus to perform:
interact with a user equipment, in an authentication and/or authorization procedure involving said third party authentication authorization and accounting server.
13. The apparatus according to claim 11 , wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus to perform:
provide an indication that said registration is accepted if said authentication and/or authorization for access to said network and said authentication and/or authorization for access to said network slice have been performed successfully.
14. The apparatus according to claim 11 , wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus to perform:
provide an accepted single network slice selection assistance information if said authentication and/or authorization for access to said network and said authentication and/or authorization for access to said network slice have been performed successfully.