METHOD AND APPARATUS FOR SECURITY MANAGEMENT IN 5G NETWORKS
FIG4 shows a block diagram of an authentication, accounting and authorizing function according to an example embodiment for a data network  FIG6 shows a block diagram of an apparatus suited to operate as a session management function of a 5G system according to an example embodiment or as an authentication, accounting and authorizing function according to an example embodiment 
FIG4 shows a block diagram of an authentication, accounting and authorizing function 124 according to an example embodiment for the data network 120. The authentication, accounting and authorizing function 124 for the data network 120 is accessible to user equipment 112 in a 5G system 110 and configured to perform a secondary authentication of the user equipment 112 with the session management function 114 of the 5G system 110. The authentication, accounting and authorizing function 124 comprises:  FIG6 shows a block diagram of an apparatus 600 suited to operate as a session management function of a 5G system according to an example embodiment or as an authentication, accounting and authorizing function according to an example embodiment. The apparatus 600 comprises a memory 640 including a persistent computer program code 650 and data 660 such as information about security policies and credentials. The apparatus 600 further comprises a processor 620 for controlling the operation of the apparatus 600 using the computer program code 640, a communication unit 610 for communicating with other elements. The communication unit 610 comprises, for example, a local area network (LAN) port; or a data bus. The processor 620 comprises, for example, any one or more of: a master control unit (MCU); a microprocessor; a digital signal processor (DSP); an application specific integrated circuit (ASIC); a field programmable gate array; and a microcontroller. Embodiments of the present invention may be implemented in software, hardware, application logic or a combination of software, hardware and application logic. In an example embodiment, the application logic, software or an instruction set is maintained on any one of various conventional computer-readable media. In the context of this document, a "computer-readable medium" may be any non-transitory media or means that can contain, store, communicate, propagate or transport the instructions for use by or in connection with an instruction execution system, apparatus, or device, such as a computer, with one example of a computer described and depicted in FIG6. A computer-readable medium may comprise a computer-readable storage medium that may be any media or means that can contain or store the instructions for use by or in connection with an instruction execution system, apparatus, or device, such as a computer.
block diagram
310
input
420
processing block
660
data
620
processor
600
apparatus
640
memory computer program code
6
andFig. through
320
processing block
650
persistent computer program code
610
communication unit
['2. A session management function of a 5G system comprising: an input for receiving information that a secondary authentication is to be done for a given user equipment for authorising the user equipment to use a data network; a processing block configured to perform responsively to the received information at least: communicating with the data network and receiving from the data network an indication; and allowing a 5G access to the user equipment so that the user equipment can communicate with the data network either without cryptographic protection or with cryptographic protection depending on the indication.', '7. The session management function of claim 2 or 3, or the authentication, accounting and authorizing function of claim 5 or 6, wherein the input comprises at least one of a data input circuitry and computer program code.', '8. The session management function of any one of claims 2, 3 or 7, or the authentication, accounting and authorizing function of any one of claims 5 to 7, wherein processing block comprises at least one of computer program code and a processor.']