Handling USIMs with misconfigured routing IDs in 5GC

Patent metadata

Field	Value
Publication number	US-12512985-B2
Application number	US-201917279017-A
Country	US
Kind code	B2
Filing date	Sep 24, 2019
Priority date	Sep 24, 2018
Publication date	Dec 30, 2025
Grant date	Dec 30, 2025

Abstract

Systems and methods are described for redirecting a user equipment with a routing misconfiguration. An exemplary method includes detecting a potential misconfiguration associated with the user equipment or a subscriber identity module (SIM) associated with the user equipment and generating an error code indicating the potential misconfiguration associated with the user equipment of the SIM associated with the user equipment. The error code is transmitted to an authentication module and indicates that the misconfiguration is an incorrect routing identifier and includes additional user information.

First claim

What is claimed is:

1 . A method for redirecting a user equipment with a routing misconfiguration, the method comprising:
detecting a potential misconfiguration associated with the user equipment or a subscriber identity module (SIM) associated with the user equipment; and generating an error code indicating a potential misconfiguration associated with the user equipment or the SIM associated with the user equipment, wherein: the error code further indicates that the potential misconfiguration is an incorrect routing identifier, the error code includes additional user information, the detecting of the potential misconfiguration comprises detecting an unknown or unrecognized subscription identifier associated with the user equipment or the SIM wherein the additional user information comprises a subscription permanent identifier (SUPI) and a new routing ID; generating new configuration information based on the received SUPI and the new routing ID, querying the network to obtain appropriate configuration information where the user is authenticated and/or registered based on the received SUPI and the new routing ID; and configuring the user equipment or the SIM associated with the user equipment with appropriate routing ID.

2 . The method of claim 1 , further comprising transmitting the error code to an authentication module.

3 . The method of claim 1 , wherein the additional user information includes a subscription identity associated with the user equipment or the SIM.

4 . The method of claim 1 , wherein:
detecting the potential misconfiguration associated with the user equipment or the SIM is performed in response to an access request transmitted by the user equipment.

5 . The method of claim 4 , wherein:
an authentication module directs the access request to a first functional module based on the incorrect routing identifier included in the access request.

6 . The method of claim 5 , wherein:
the authentication module redirects the access request to a second functional module is based on the generated error code or information included with the generated error code; and the second functional module authenticates or registers the user equipment or SIM.

7 . The method of claim 6 , wherein the first functional module comprises a first authentication server function (AUSF) module and the second functional module comprises a second AUSF module.

8 . The method of claim 6 , wherein the second functional module comprises at least one of a second AUSF module, a second unified data management (UDM) module, or a second unified data repository (UDR) module.

9 . The method of claim 5 , wherein the first functional module comprises at least one of a first AUSF module, a first unified data management (UDM) module, or a first unified data repository (UDR) module.

10 . The method of claim 5 , wherein the authentication module comprises an access and mobility management functions (AMF) module.

11 . The method of claim 1 , further comprising determining that the user equipment is managed by another network segment within an associated home public land mobile network.

12 . The method of claim 1 , wherein determining that the user equipment is managed by another network segment comprises performing a check of a subscription permanent identifier associated with the user equipment and or a home network public key identifier associated with the user equipment.

13 . The method of claim 12 , wherein a private key that matches the home network public key identifier is not present in the network segment.

14 . A method for correcting a user equipment or a subscriber identity module (SIM) misconfiguration, the method comprising:
receiving, via a wireless transmission, a request from a user equipment to connect to a core network; selecting an authentication server for authentication of the user equipment based on a routing identifier provided by the user equipment, where in the authentication server is part of a first network segment; receiving an error message from the authentication server, the error message indicating that the routing identifier is misconfigured, wherein receiving the error message is in response to a potential misconfiguration associated with the user equipment being detected and the error message contains an error code which further includes additional user information; selecting a new authentication server for authentication of the user equipment based on the error message and/or information included in the error message; sending an authentication request to the new authentication server for authentication of the user equipment, wherein the new authentication server as part of a second network segment and wherein the potential misconfiguration associated with the user equipment comprises an unknown or unrecognized subscription identifier associated with the user equipment or the SIM, wherein the additional user information comprises a subscription permanent identifier (SUPI) and a new routing ID; generating new configuration information based on the received SUPI and the new routing ID, querying the network to obtain appropriate configuration information where the user is authenticated and/or registered based on the received SUPI and the new routing ID; and configuring the user equipment or the SIM associated with the user equipment with appropriate routing ID.

15 . The method of claim 14 , wherein the authentication request comprises information included in the error message.

16 . The method of claim 15 , wherein the authentication server generates the error message when a subscription permanent identifier is not resolved by the authentication server or is not found in a unified data repository associated with the authentication server.

17 . The method of claim 14 , further comprising sending an initial authentication request to the authentication server.

18 . The method of claim 17 , wherein the authentication server sends a request to an associated unified data management (UDM) instance in response to the initial authentication request.

19 . A core network authentication system for authenticating wireless user equipment to a core network, the core network authentication system comprising:
a memory having instructions stored thereon; and processing circuitry, wherein the processing circuitry implements the instructions to perform operations comprising: detecting a potential misconfiguration associated with the user equipment or a subscriber identity module (SIM) associated with the user equipment; and generating an error code indicating the potential misconfiguration associated with the user equipment or the SIM associated with the user equipment, wherein: the error code further indicates that the potential misconfiguration is an incorrect routing identifier, the error code includes additional user information, the detecting of the potential misconfiguration associated with the user equipment comprises detecting that a subscription identifier associated with the user equipment or the SIM is unknown or unrecognized, wherein the additional user information comprises a subscription permanent identifier (SUPI) and a new routing ID; generating new configuration information based on the received SUPI and the new routing ID, querying the network to obtain appropriate configuration information where the user is authenticated and/or registered based on the received SUPI and the new routing ID; and configuring the user equipment or the SIM associated with the user equipment with ap

Assignees

• Ericsson Telefon Ab L M

Inventors

• Castellanos Zamora David
• Nakarmi Prajwol Kumar
• Hedman Peter
• De Gregorio Rodriguez Jesus Angel

Classifications

• H04W12/04

  Key management, e.g. using generic bootstrapping architecture [GBA] · CPC title

• H04W8/20

  Transfer of user or subscriber data · CPC title

• H04L67/63

  Routing a service request depending on the request content or context · CPC title

• H04W12/72

  Subscriber identity · CPC title

• H04W12/35

  Protecting application or service provisioning, e.g. securing SIM application provisioning · CPC title