Parameters for application communication establishment
Methods, apparatus, and systems to establish a secure communication in a wireless network are described. In one example aspect, a wireless communication method includes generating, by a first function entity, a first identifier configured to be used to establish a secure communication for a first device, using at least a mobile country code, a mobile network code, and a random number, and transmitting the first identifier to the first device.
1 . A method for wireless communication, comprising:
generating, by a unified data management entity (UDM), an authentication and key management for applications (AKMA) identifier (AKMAID) for establishing a secure communication for a first device, the AKMAID including at least a mobile country code, a mobile network code, and a random number, the mobile country code identifying a country where the UDM is operated, the mobile network code identifying a home public land mobile network, the random number allocated by the UDM to be used for the first device, wherein the UDM is configured to communicate with at least one of a network exposure function entity, an authentication and key management for application anchor function entity, an authentication server function entity, an access and mobility management function entity, or an application function entity; and
transmitting the AKMAID to the first device.
2 . The method of claim 1 , wherein the AKMAID is used to identify at least one of authentication and key management for applications procedures for the first device or an authentication and key management for applications anchor key.
3 . The method of claim 1 , wherein the transmitting of the AKMAID to the first device is carried out by performing, by the unified data management entity, a parameter update procedure for the first device.
4 . The method of claim 1 , wherein at least one of the UDM or the first device stores the AKMAID.
5 . The method of claim 1 , further comprising sending, by the UDM, the AKMAID to a second function entity configured to store the AKMAID.
6 . The method of claim 1 , wherein a second function entity is the authentication server function entity.
7 . The method of claim 1 , wherein the AKMAID is generated upon completion of a primary authentication, and wherein the random number is included in an authentication vector to be used in the primary authentication.
8 . A method for wireless communication, comprising:
generating, by a first device, a an authentication and key management for applications (AKMA) identifier (AKMAID) for establishing a secure communication for the first device, the AKMAID including at least a mobile country code, a mobile network code, and a random number, the mobile country code identifying a country where a unified data management entity (UDM) is operated, the mobile network code identifying a home public land mobile network, the random number allocated by the UDM to be used for the first device, wherein the UDM includes a unified data management entity configured to communicate with at least one of a network exposure function entity, an authentication and key management for application anchor function entity, an authentication server function entity, an access and mobility management function entity, or an application function entity; and
storing, by the first device, the AKMAID for a subsequent request to an application function entity.
9 . The method of claim 8 , wherein the AKMAID is used to identify at least one of authentication and key management for applications procedures for the first device or an authentication and key management for applications anchor key.
10 . The method of claim 8 , further comprising causing, by the first device, the unified data management entity to store the random number.
11 . The method of claim 10 , wherein the random number is generated and used in an authentication vector in a primary authentication.
12 . A method for wireless communication, comprising:
obtaining, upon completion of a primary authentication, an intermediate key stored at a unified data management entity (UDM) and a first device;
generating an anchor key for authentication and key management for applications based on the intermediate key;
generating a an authentication and key management for applications (AKMA) identifier (AKMAID) including at least a mobile country code, a mobile network code, and a random number, the mobile country code identifying a country where the UDM is operated, the mobile network code identifying a home public land mobile network, the random number allocated by the UDM to be used for the first device, wherein the UDM is configured to communicate with at least one of a network exposure function entity, an authentication and key management for application anchor function entity, an authentication server function entity, an access and mobility management function entity, or an application function entity;
storing the AKMAID and the anchor key for authentication and key management for applications; and
using the AKMAID to establish a secure communication for the first device.
13 . The method of claim 12 , further comprising causing the authentication server function entity to inform the unified data management entity about a result of the primary authentication.
14 . The method of claim 12 , wherein the intermediate key includes an authentication server function key.
15 . The method of claim 12 , wherein an anchor function entity identifier for authentication and key management for applications is used to identify an authentication and key management for applications anchor function entity, and the first device identifier is used to identify a user equipment.
16 . The method of claim 15 , wherein the using the AKMAID to establish the secure communication for the first device includes causing an application function entity to transmit, to the authentication and key management for applications anchor function entity, a key request including the AKMAID.
17 . The method of claim 15 , wherein the using the AKMAID to establish the secure communication for the first device includes causing the authentication and key management for applications anchor function entity to derive an application function key based on the anchor key for authentication and key management for applications.
18 . The method of claim 15 , wherein the using the AKMAID to establish the secure communication for the first device includes generating a new random number to generate a new AKMAID using the mobile country code, the mobile network code, a routing indicator, the anchor function entity identifier for authentication and key management for applications, and the new random number.