Apparatus, method and computer program

1. An apparatus, comprising:

at least one processor; and

at least one memory comprising computer program code,

the at least one memory and computer program code configured, with the at least one processor, to cause the apparatus at least to:

participate, for a network slice, in a slice-specific authentication and authorization procedure for the apparatus; wherein the participating comprises:

receiving a SLICE-SPECIFIC AUTHENTICATION COMMAND message at the apparatus;

creating a SLICE-SPECIFIC AUTHENTICATION COMPLETE message;

sending the SLICE-SPECIFIC AUTHENTICATION COMPLETE message; and

receiving a SLICE-SPECIFIC AUTHENTICATION RESULT message at the apparatus, the SLICE-SPECIFIC AUTHENTICATION RESULT message comprising an information element indicating to a mobility management sub-layer of the apparatus a result of the slice-specific authentication and authorization procedure, and the message comprising single network slice selection assistance information for the apparatus, the single network slice selection assistance information relating to the network slice; and

wherein the at least one memory and computer program code are further configured, with the at least one processor, to cause the apparatus at least to:

when the SLICE-SPECIFIC AUTHENTICATION COMMAND message is received after sending a DEREGISTRATION REQUEST message and when an access type included in the DEREGISTRATION REQUEST message is the same as an access type for which the SLICE-SPECIFIC AUTHENTICATION COMMAND message is received, proceed with a deregistration procedure and ignoring the SLICE-SPECIFIC AUTHENTICATION COMMAND message.

2. An apparatus according to claim 1 , wherein the result of the slice-specific authentication and authorization procedure indicates success or failure of the authentication and authorization procedure.

3. An apparatus according to claim 2 , wherein the at least one memory and computer program code are further configured, with the at least one processor, to cause the apparatus at least to:

when the result indicates success of the authentication and authorization procedure, add the single network slice selection assistance information for the apparatus to a list of any already allowed network slice selection assistance information for the apparatus.

4. An apparatus according to claim 1 , wherein the at least one memory and computer program code are further configured, with the at least one processor, to:

associate the single network slice selection assistance information with a mapped single network slice selection assistance information of a Home Public Land Mobile Network, when the apparatus is roaming.

5. An apparatus, comprising:

at least one processor; and

at least one memory comprising computer program code,

the at least one memory and computer program code configure, with the at least one processor, to cause the apparatus at least to:

participate, for a network slice, in a slice-specific authentication and authorization procedure for a user equipment; wherein the participating comprises:

sending a SLICE-SPECIFIC AUTHENTICATION COMMAND message;

starting a timer;

stopping the timer when a SLICE-SPECIFIC AUTHENTICATION COMPLETE message is received; and

sending a SLICE-SPECIFIC AUTHENTICATION RESULT message to the user equipment, the SLICE-SPECIFIC AUTHENTICATION RESULT message comprising an information element indicating to a mobility management sub-layer of the user equipment a result of the slice-specific authentication and authorization procedure, and the message comprising single network slice selection assistance information for the user equipment the single network slice selection assistance information relating to the network slice; and

wherein the at least one memory and computer program code are further configured, with the at least one processor, to cause the apparatus at least to:

in case the timer expires, retransmit the SLICE-SPECIFIC AUTHENTICATION COMMAND message and reset the timer.

6. An apparatus according to claim 5 , wherein the at least one memory and computer program code are further configured, with the at least one processor, to cause the apparatus at least to:

provide mapped single network slice selection assistance information of a home public land mobile network for the user equipment, when the user equipment is roaming.

7. An apparatus according to claim 5 , wherein the result of the slice-specific authentication and authorization procedure indicates success or failure of the authentication and authorization procedure.

8. An apparatus according to claim 5 , wherein the at least one memory and computer program code are further configured, with the at least one processor, to cause the apparatus at least to:

when the result indicates success of the authentication and authorization procedure, cause adding the single network slice selection assistance information for the user equipment to a list of any already allowed network slice selection assistance information for the user equipment.

9. An apparatus according to claim 5 , wherein the at least one memory and computer program code are further configured, with the at least one processor, to cause the apparatus at least to:

when the result indicates failure of the authentication and authorization procedure, cause removing the single network slice selection assistance information for the user equipment from a list of any already allowed network slice selection assistance information for the user equipment.

10. A method comprising:

participating, for a network slice, in a slice-specific authentication and authorization procedure for an apparatus; wherein the participating comprises:

receiving a SLICE-SPECIFIC AUTHENTICATION COMMAND message at the apparatus;

creating a SLICE-SPECIFIC AUTHENTICATION COMPLETE message;

sending the SLICE-SPECIFIC AUTHENTICATION COMPLETE message; and

receiving a SLICE-SPECIFIC AUTHENTICATION RESULT message at the apparatus, the SLICE-SPECIFIC AUTHENTICATION RESULT message comprising an information element indicating to a mobility management sub-layer of the apparatus a result of the slice-specific authentication and authorization procedure, and the message comprising single network slice selection assistance information for the apparatus, the single network slice selection assistance information relating to the network slice;

wherein the method further comprises, when the SLICE-SPECIFIC AUTHENTICATION COMMAND message is received after sending a DEREGISTRATION REQUEST message and when an access type included in the DEREGISTRATION REQUEST message is the same as an access type for which the SLICE-SPECIFIC AUTHENTICATION COMMAND message is received, proceeding with a deregistration procedure and ignoring the SLICE-SPECIFIC AUTHENTICATION COMMAND message.

11. A method according to claim 10 , wherein the result of the slice-specific authentication and authorization procedure indicates success or failure of the authentication and authorization procedure.

12. A method according to claim 11 , further comprising, when the result indicates success of the authentication and authorization procedure, adding the single network slice selection assistance information for the apparatus to a list of any already allowed network slice selection assistance information for the apparatus.

13. A method according to claim 10 , further comprising associating the single network slice selection assistance information with a mapped single network slice selection assistance information of a Home Public Land Mobile Network, when the apparatus is roaming.

14. A method, comprising:

participating, for a network slice, in a slice-specific authentication and authorization procedure for a user equipment; wherein the participating comprises:

sending a SLICE-SPECIFIC AUTHENTICATION COMMAND message;

starting a timer;

stopping the timer when a SLICE-SPECIFIC AUTHENTICATION COMPLETE message is received; and

sending a SLICE-SPECIFIC AUTHENTICATION RESULT message to the user equipment, the SLICE-SPECIFIC AUTHENTICATION RESULT message comprising an information element indicating to a mobility management sub-layer of the user equipment a result of the slice-specific authentication and authorization procedure, and the message comprising single network slice selection assistance information for the user equipment the single network slice selection assistance information relating to the network slice;

wherein the method further comprises:

in case the timer expires, retransmitting the SLICE-SPECIFIC AUTHENTICATION COMMAND message and resetting the timer.

15. A method according to claim 14 , further comprising providing mapped single network slice selection assistance information of a home public land mobile network for the user equipment, when the user equipment is roaming.

16. A method according to claim 14 , wherein the result of the slice-specific authentication and authorization procedure indicates success or failure of the authentication and authorization procedure.

17. A method according to claim 14 , further comprising, when the result indicates success of the authentication and authorization procedure, causing adding the single network slice selection assistance information for the user equipment to a list of any already allowed network slice selection assistance information for the user equipment.

18. A method according to claim 14 , further comprising, when the result indicates failure of the authentication and authorization procedure, causing removing the single network slice selection assistance information for the user equipment from a list of any already allowed network slice selection assistance information for the user equipment.