Method and apparatus for processing in operator network by detecting abnormal behavior of ue

Patent metadata

Field	Value
Publication number	US-2025150946-A1
Application number	US-202318866980-A
Country	US
Kind code	A1
Filing date	May 18, 2023
Priority date	May 19, 2022
Publication date	May 8, 2025
Grant date	—

Abstract

The present disclosure relates to: a 5G communication technique for supporting a higher data transmission rate than a 4G system; and a system therefor. The present disclosure relates to a method by which, when UE accesses a network, an access management function (AMF) verifies whether or not the access is duplicated access from the UE to determine whether or not to allow the UE to access the network, and comprises the steps of: before the AMF allows corresponding UE to access the network, the AMF combining a newly accessing UE ID and auxiliary indicators to determine whether or not it is duplicated access from the UE; on the basis of the result of the determination, transmitting paging to a location that has been previously accessed from the UE; determining a response value of the UE to the transmission of paging, and the AMF/NWDAF determining whether or not the newly accessing UE ID is duplicated; when a duplicated UE ID value is derived, controlling access from the corresponding UE and UE that has accessed a previous location, via whether or not new access or existing access applied to a PCF has been allowed.

First claim

1 . A method performed by an access management function (AMF) in a wireless communication system, the method comprising:
receiving, from second UE, a registration request including a subscription permanent identifier (SUPI); transmitting, to first UE, a paging message related to the SUPI, the first UE being UE having the SUPI; receiving, from the first UE, a response message in response to the paging message; determining whether to allow an access for the second UE; transmitting, to the second UE, a registration rejection message based on the determination; and blocking the second UE from the access.

2 . The method of claim 1 , wherein the paging message includes information on a paging cause.

3 . The method of claim 1 , wherein the determining whether to allow the access for the second UE:
determining whether to allow abnormal access for the second UE based on information obtained through a network function (NF) by a network data analytics function (NWDAF), and receiving the determination from a policy and control function (PCF).

4 . A method performed by first UE in a wireless communication system, the method comprising:
receiving a paging message from an access management function (AMF), the first UE being UE with a subscription permanent identifier (SUPI); and transmitting, to the AMF, a response message in response to the paging message, wherein a registration request including the SUPI is transmitted from second UE to the AMF, wherein whether to allow an access for the second UE is determined based on the response message, wherein a registration rejection message is transmitted from the AMF to the second UE based on the determination, and wherein the access from the second UE is blocked.

5 . The method of claim 4 , wherein the paging message includes information on a paging cause.

6 . The method of claim 4 , wherein whether to allow abnormal access for the second UE is determined by a network data analytics function (NWDAF) based on information obtained through a network function (NF), and
wherein the determination is transmitted from the NWDAF to the AMF through a policy and control function (PCF).

7 . A method performed by second UE in a wireless communication system, the method comprising:
transmitting, to an access management function (AMF), a network registration request including a subscription permanent identifier (SUPI); and receiving, from the AMF, a registration rejection message, wherein a paging message related to the SUPI is transmitted from the AMF to first UE, the first UE being UE with the SUPI, wherein a response message for the paging message is transmitted from the first UE to the AMF, wherein whether to allow an access for the second UE is determined based on the response message, and wherein the access from the second UE is blocked based on the registration rejection message.

8 . The method of claim 7 , wherein the paging message includes information on a paging cause.

9 . The method of claim 7 , wherein whether to allow abnormal access for the second UE is determined by a network data analytics function (NWDAF) on information obtained through a network function (NF), and
wherein the determination is transmitted from the NWDAF to the AMF through a policy and control function (PCF).

10 . An access management function (AMF), comprising:
a transceiver configured to be capable of transmitting and receiving at least one signal; and a controller coupled to the transceiver, wherein the controller is configured to: receive, from second UE, a registration request including a subscription permanent identifier (SUPI); transmit, to first UE, a paging message related to the SUPI, the first UE being UE with the SUPI; receive, from the first UE, a response message in response to the paging message; determine whether to allow an access for the second UE; transmit, to the second UE, a registration rejection message based on the determination; and block the access from the second UE.

11 . The AMF of claim 10 , wherein the paging message includes information on a paging cause.

12 . A first UE, comprising:
a transceiver configured to be capable of transmitting and receiving at least one signal; and a controller coupled to the transceiver, wherein the controller is configured to: receive, from an access management function (AMF), a paging message, the first UE being UE with a subscription permanent identifier (SUPI), and transmit, to the AMF, a response message in response to the paging message, wherein a registration request including the SUPI is transmitted from the second UE to the AMF, wherein whether to allow an access for the second UE is determined based on the response message, wherein a registration rejection message is transmitted from the AMF to the second UE based on the determination, and wherein the access from the second UE is blocked.

13 . The first UE of claim 12 , wherein the paging message includes information on a paging cause.

14 . A second UE, comprising:
a transceiver configured to be capable of transmitting and receiving at least one signal; and a controller coupled to the transceiver, wherein the controller is configured to: transmit, to an access management function (AMF), a network registration request including a subscription permanent identifier (SUPI), and receive, from the AMF, a registration rejection message, wherein a paging message related to the SUPI is transmitted from the AMF to first UE, the first UE being UE with the SUPI, wherein a response message for the paging message is transmitted from the first UE to the AMF, wherein whether to allow an access for the second UE is determined based on the response message, and wherein the access from the second UE is blocked based on the registration rejection message.

15 . The second UE of claim 14 , wherein the paging message includes information on a paging cause.

Assignees

• Samsung Electronics Co Ltd

Inventors

• Kang Sujung
• Yoon Kangjin
• Lee Duckey

Classifications

• H04W68/02 Primary

  Arrangements for increasing efficiency of notification or paging channel · CPC title

• H04W60/04

  using triggered events · CPC title

• H04W48/02 Primary

  Access restriction performed under specific conditions · CPC title

• H04W8/20

  Transfer of user or subscriber data · CPC title

• H04W60/00

  Affiliation to network, e.g. registration; Terminating affiliation with the network, e.g. de-registration · CPC title