Onboarding devices in standalone non-public networks
The present disclosure relates to supporting provisioning of a User Equipment (UE) with credentials to access a communication network, such as a Standalone Non-Public Network (SNPN). A credential server stores a binding associating UE device information, including an onboarding identifier, with network information for the SNPN. The credential server receives, from a network function in an onboarding network, a request for authentication of the UE that includes the onboarding identifier. The credential server responds with a message comprising the network information bound to the device information to enable provisioning of the credentials to the UE.
1. A method implemented by a credential server to support provisioning of a User Equipment (UE) in a standalone non-public network (SNPN), the method comprising: storing a binding associating device information for the UE and network information identifying the SNPN, the device information including an onboarding identifier; receiving, from a network function in an onboarding network, an authentication request message requesting authentication of the UE, the authentication request message including the onboarding identifier of the UE; and sending, to the network function in the onboarding network in response to the authentication request message, an authentication response message comprising the network information bound to the device information to enable provisioning of credentials to the UE to access the SNPN.
2. The method of claim 1 , wherein the device information further comprises onboarding credentials for authenticating the UE in the onboarding network.
3. The method of claim 1 , wherein the credential server stores binding information associating the device information for the UE and network information for multiple standalone non-public networks (SNPNs).
4. The method of claim 3 , wherein sending the network information to the network function comprises sending the network information for the multiple SNPNs to the network function.
5. A credential server comprising: processing circuitry and a memory, the memory storing instructions executable by the processing circuitry whereby the credential server is configured to: store a binding associating device information for a User Equipment (UE) and network information identifying a standalone non-public network (SNPN), the device information including an onboarding identifier; receive, from the network function in an onboarding network, an information request message requesting authentication of the UE, the authentication request message including the onboarding identifier for the UE; and send, to the network function in the onboarding network in response to the authentication request message, an authentication response message comprising the network information bound to the device information to enable provisioning of credentials to the UE to access the SNPN.
6. The credential server of claim 5 , wherein the device information further comprises onboarding credentials for authenticating the UE in the onboarding network.
7. The credential server of claim 5 , wherein the credential server stores binding information associating the device information for the UE and network information for multiple standalone non-public networks (SNPNs).
8. The credential server of claim 7 , wherein to send the network information to the network function the credential server is configured to send the network information for the multiple SNPNs to the network function.
9. A method implemented by a credential server to support provisioning of a User Equipment (UE) in a standalone non-public network (SNPN), the method comprising: storing a binding associating device information for the UE and network information identifying the SNPN, the device information including an onboarding identifier; receiving, from a network function in an onboarding network, an information request message including the onboarding identifier of the UE; and sending, to the network function in the onboarding network in response to the information request message, the network information bound to the device information to enable provisioning of credentials to the UE to access the SNPN.
10. The method of claim 9 , wherein the device information further comprises onboarding credentials for authenticating the UE in the onboarding network.
11. The method of claim 9 , wherein the credential server stores binding information associating the device information for the UE and network information for multiple standalone non-public networks (SNPNs).
12. The method of claim 11 , wherein sending the network information to the network function comprises sending the network information for the multiple communication networks SNPNs to the network function.
13. A credential server comprising: processing circuitry and a memory, the memory storing instructions executable by the processing circuitry whereby the credential server is configured to: store a binding associating device information for a User Equipment (UE) and network information identifying a standalone non-public network (SNPN), the device information including an onboarding identifier; receive, from the network function in an onboarding network, an information request message including the onboarding identifier for the UE; and send, to the network function in the onboarding network in response to the information request message, the network information bound to the device information to enable provisioning of credentials to the UE to access the SNPN.
14. The credential server of claim 13 , wherein the device information further comprises onboarding credentials for authenticating the UE in the onboarding network.
15. The credential server of claim 13 , wherein the credential server stores binding information associating the device information for the UE and network information for multiple standalone non-public networks (SNPNs).
16. The credential server of claim 15 , wherein to send the network information to the network function the credential server is configured to send the network information for the multiple SNPNs to the network function.