CROSS-REFERENCE TO RELATED APPLICATIONS

The present application is a national phase entry of International Application No. PCT/EP2017/056625, filed Mar. 21, 2017, the contents of which are incorporated herein by reference in its entirety.

The present invention generally relates to mobile communication networks and systems.

Detailed descriptions of mobile communication networks and systems can be found in the literature, such as in particular in Technical Specifications published by standardization bodies such as for example 3GPP (3rdGeneration Partnership Project).

In general, in a mobile system, a user/User Equipment (UE) has access to services provided by a mobile network. A mobile network generally comprises a Core Network accessed via an Access Network, such as a Radio Access Network.

An example of mobile system is Next Generation (Next Gen) system, also referred to as 5G system, currently being specified by 3GPP, such as in 3GPP TR 23.799, 3GPP TS 23.501 and 3GPP TS 23.502.

One concept used in Next Generation (or 5G) mobile networks is the concept of network slicing. As indicated for example in 3GPP TS 23.501, the operator may deploy multiple Network Slice instances delivering exactly the same features but for different groups of UEs, e.g. as they deliver a different committed service and/or because they may be dedicated to a customer.

The introduction of network slicing in such networks and systems brings new technical issues requiring new solutions. An example of such new technical issues is that network slicing may introduce new stakeholders in the system end-to-end chain that may require independent authentication and/or authorization.

There is a need to address such new technical issues. Embodiments of the invention in particular address such needs.

These and other objects are achieved, in one aspect, by a mobile network entity, such as Access and Mobility Management Function AMF, providing registration management functions in a mobile network supporting network slicing, said mobile network entity configured to:check if authentication and/or authorization involving a third party associated with a network slice is required for access to said network slice in addition to authentication and/or authorization for access to said mobile network, during registration,initiate said authentication and/or authorization involving said third party upon checking that said authentication and/or authorization involving said third party is required.

These and other objects are achieved, in another aspect, by a mobile network subscriber database, such as SDM, for a mobile network supporting network slicing, said mobile network subscriber database configured to:store subscription data indicating whether authentication and/or authorization involving a third party associated with a network slice is required for access to said network slice, in addition to authentication and/or authorization for access to said mobile network.

These and other objects are achieved, in another aspect, by a User Equipment for a mobile system supporting network slicing, said User Equipment configured to:support authentication and/or authorization involving a third party associated with a network slice, for access to said network slice, in addition to authentication and/or authorization for access to said network, if required for said network slice, during registration.

These and other objects are achieved, in another aspect, by a mobile network entity, such as AUSF, providing authentication server functions in a mobile network supporting network slicing, said mobile network entity configured to:relay information exchanged between a mobile network entity such as Access and Mobility Management Function AMF providing registration management functions, and a AAA server referred to as third party AAA server associated with a third party associated with a network slice, in an authentication and/or authorization procedure performed for access to said network slice.

These and other objects are achieved, in another aspect, by a method for enhanced registration in a mobile system supporting network slicing, said method including at least one step performed by at least one of the thus configured entities: mobile network entity such as Access and Mobility Management Function AMF providing registration management functions, mobile network subscriber database such as SDM, User Equipment UE, mobile network entity such as AUSF providing authentication server functions.

