Systems and methods of supporting device triggered re-authentication of slice-specific secondary authentication and authorization
Various aspects of the present disclosure include methods, network servers or components and user equipment devices configured to authorize network slices that are associated with services provided by external providers. Various aspects enable access and use of network slices by user equipment devices connected to a network (e.g., 5G or New Radio network) via network components associated with a service provider by generating an allowed network slice selection assistance information (Allowed NSSAI) and an Unauthorized NSSAI, and sending the Allowed NSSAI and Unauthorized NSSAI to a user equipment device.
1. A method comprising:
by a user equipment:
receiving, from a access and mobility management function (AMF), first allowed network slice selection assistance information identifying one or more network slices that were authorized by at least one of:
a service provider associated with the AMF; or
an external provider;
receiving, from the AMF, pending network slice selection assistance information identifying one or more network slices for which a slice-specific secondary authentication is pending;
generating a requested network slice selection assistance information (Requested NSSAI) based at least in part on the first allowed network slice selection assistance information and the pending network slice selection assistance information; and
sending, to the AMF, the Requested NSSAI.
2. The method of claim 1 , further comprising:
receiving, from the AMF, second allowed network slice selection assistance information identifying a network slice for which the slice-specific secondary authentication was successful;
generating an updated Requested NSSAI based at least in part on the second allowed network slice selection assistance information; and
sending, to the AMF, the updated Requested NSSAI.
3. The method of claim 2 , further comprising:
receiving, from the AMF, a first registration accept message that includes the first allowed network slice selection assistance information and the pending network slice selection assistance information.
4. The method of claim 3 , further comprising:
receiving, from the AMF, a second registration accept message that includes the second allowed network slice selection assistance information.
5. The method of claim 1 , further comprising:
receiving, from the AMF, rejected network slice selection assistance information identifying one or more network slices that have not been authorized.
6. An apparatus comprising:
a processor configured with processor-executable instructions to:
receive, by a user equipment from a access and mobility management function (AMF), first allowed network slice selection assistance information identifying one or more network slices that were authorized by at least one of:
a service provider associated with the AMF; or
an external provider;
receive, by the user equipment from the AMF, pending network slice selection assistance information identifying a second network slice for which a slice-specific secondary authentication is pending;
generate a requested network slice selection assistance information (Requested NSSAI) based at least in part on the first allowed network slice selection assistance information and the pending network slice selection assistance information; and
send, by the user equipment to the AMF, the Requested NSSAI.
7. The apparatus of claim 6 , wherein the processor is further configured with processor-executable instructions to:
receive, by the user equipment from the AMF, second allowed network slice selection assistance information identifying the second network slice for which the slice-specific secondary authentication from the external service provider or third party was successful; and
generate an updated Requested NSSAI based at least in part on the second allowed network slice selection assistance information; and
sending, to the AMF, the updated Requested NSSAI.
8. The apparatus of claim 7 , wherein the processor is further configured with processor-executable instructions to:
receive, by the user equipment from the AMF, a first registration accept message that includes the first allowed network slice selection assistance information and the pending network slice selection assistance information.
9. The apparatus of claim 8 , wherein the processor is further configured with processor-executable instructions to:
receive, by the user equipment from the AMF, a second registration accept message that includes the second allowed network slice selection assistance information.
10. The apparatus of claim 6 , wherein the processor is further configured with processor-executable instructions to:
receive, by the user equipment from the AMF, rejected network slice selection assistance information identifying one or more network slices that have not been authorized.
11. The method of claim 1 , further comprising:
receiving, from the AMF, a first registration accept message that includes the first allowed network slice selection assistance information and the pending network slice selection assistance information.
12. The apparatus of claim 6 , wherein the processor is further configured with processor-executable instructions to:
receive, by the user equipment from the AMF, a first registration accept message that includes the first allowed network slice selection assistance information and the pending network slice selection assistance information.