TECHNICAL FIELD

The present disclosure relates to a next-generation system that can include unified data management (UDM).

BACKGROUND ART

In the field of mobile communication systems, as disclosed in Non Patent Literature 1 and Non Patent Literature 2, the configuration of a next-generation system called 5G (5 Generation) is being studied. In the next-generation system, management of subscriber data and the like by unified data management (UDM) is being considered. UDM provides the subscription concealed identifier (SUCI) de-concealment (decryption) process based on subscription identifier de-concealing function (SIDF) services. SUCI is generated by user equipment (UE). SUCI includes a concealed subscription permanent identifier (SUPI).

In the SUCI de-concealment process based on the SIDF services, Non Patent Literature 1 discloses that UDM performs SUCI de-concealment to obtain SUPI. UDM selects an authentication method used for authentication processing between a terminal and a network based on SUPI.

CITATION LIST

Non Patent Literature

Non Patent Literature 1: 3GPP TS 33.501 V0.6.0 (2018-January), Security Architecture and Procedures for 5G System (Release 15)

Non Patent Literature 2: 3GPP TS 23.501 V15.0.0 (2017-December), System Architecture for 5G System; Stage 2 (Release 15)

SUMMARY OF INVENTION

Technical Problem

The related art described above has a problem in that UDM cannot execute the SUCI de-concealment process because a protection scheme used for concealment of SUPI is unknown to the UDM.

An object of the present disclosure is to provide a communication terminal, a network apparatus, and a method that solve the above problem.

Solution to Problem

A communication terminal according to a first aspect of the present disclosure comprises control means for generating a Subscription Concealed Identifier (SUCI) including a Subscription Permanent Identifier (SUPI) concealed using a predetermined protection scheme and a protection scheme identifier identifying the protection scheme, and transmission means for sending the SUCI to a first network apparatus during Registration Procedure, the SUCI being sent for a second network apparatus to de-conceal the SUPI from the SUCI based on the protection scheme used to generate the SUCI.

A network apparatus according to a second aspect of the present disclosure comprises reception means for receiving a message including a Subscription Concealed Identifier (SUCI) generated by a communication terminal, the SUCI including a Subscription Permanent Identifier (SUPI) concealed using a protection scheme and a protection scheme identifier identifying the protection scheme, and control means for de-concealing the SUPI from the SUCI based on the protection scheme used to generate the SUCI.

A communication method according to a third aspect of the present disclosure comprises generating a Subscription Concealed Identifier (SUCI) including a Subscription Permanent Identifier (SUPI) concealed using a predetermined protection scheme and a protection scheme identifier identifying the protection scheme, and sending the SUCI to a first network apparatus during Registration Procedure, the SUCI being sent for a second network apparatus to de-conceal the SUPI from the SUCI based on the protection scheme used to generate the SUCI.

A de-concealment method according to a fourth aspect of the present disclosure comprises receiving a message including a Subscription Concealed Identifier (SUCI) generated by a communication terminal, the SUCI including a Subscription Permanent Identifier (SUPI) concealed using a protection scheme and a protection scheme identifier identifying the protection scheme, and de-concealing the SUPI from the SUCI based on the protection scheme used to generate the SUCI.

Advantageous Effect of Invention

An effect in the present disclosure resides in that SUPI can be reliably acquired in a network.

