WO2019196860A1

WO2019196860A1 - 5g and fixed network residential gateway for wireline access network handling

Info

Publication number: WO2019196860A1
Application number: PCT/CN2019/082037
Authority: WO
Inventors: Changzheng WU; Daniel Nilsson; Jan Backman; Stefan Rommer
Original assignee: Telefonaktiebolaget Lm Ericsson (Publ)
Priority date: 2018-04-10
Filing date: 2019-04-10
Publication date: 2019-10-17

Abstract

A system comprising a user entity, UE, a 5G Residential Gateway, 5G-RG, and a Wireline 5G Access Network, W-5GAN, the 5G-RG adapted for communicating with an Application and Mobility Management Function, AMF, of a 5G core network, 5GC, the W-5GAN adapted for communicating with an AMF and a User Plane Function, UPF, of the 5GC, wherein the UE uses Wi-Fi or WLAN to access the 5G-RG, and wherein the 5G-RG connects to 5GC using wireline access or using wireless or 3GPP access as backhaul, wherein the UE uses 802.1x with 3GPP credentials. There is also shown a system for a Fixed Network Residential Gateway, FN-RG.

Description

5G and fixed network residential gateway for wireline access network handling

Technical field

The present disclosure is directed to methods and apparatuses involving so-called 5G Residential Gateways and Fixed Network Residential Gateways, 5G-RG/FN-RG. The disclosure is particularly directed to supporting 3GPP UEs via 5G-RG/FN-RG for wireline access network using Non-3GPP solutions.

Background

Fig. 1 shows an application of non-roaming 5G System architecture for multiple PDU session in reference point representation. Fig. 1 corresponds to TS 23.501 V0.5.0 (2017-05) , Figure 4.2.3-3.

3GPP TS 23.716 v030 is a study on the Wireless and Wireline Convergence for the 5G system architecture. The disclosure deals among others with the following entities:

- 5G-RG: A 5G-RG (5G Residential Gateway) is a RG capable of connecting to 5GC (5G core) playing the role of a UE with regard to the 5G core. It supports secure elements and exchanges N1 signalling with 5GC.

- RG: The RG (Residential Gateway) is a device capable of providing voice, data, broadcast video, video on demand, specified by BBF (BroadBand Forum)

- FN-RG: A Fixed Network RG (FN-RG) is a RG playing a role similar of a UE with regard to the 5G core. It does not support N1 signalling. The FN-RG is a RG specified by BBF TR124i5 (BBF TR-124, "Functional Requirements for Broadband Residential Gateway Devices" , Issue: 5, July 2016) .

- Fixed Access Gateway Function (FAGF) : A Network function in Wireline 5G Access Network (W-5GAN) that provides connectivity to the 5G Core of 5G-RG.

- Wireline 5G Access Network: The Wireline 5G Access Network (W-5GAN) is a wireline AN that connects to a 5GC via N2 and N3 reference points.

- Wireline Access Network: An access network (optical or electrical) which is conform to BBF TR-101 (DSL Forum, TR-101, Migration to Ethernet-Based DSL Aggregation, April 2006) or BBF TR-178 (BBFTR-178, Multi-service Broadband Network Architecture and Nodal Requirements, Issue: 1, September 2014) .

- Non-3GPP Access Network: In the context of this disclosure a Non-3GPP (N3GPP) Access Network is an access network that is not defined by 3GPP including for example the Wireline 5G Access Network.

Summary

It is an object of the present disclosure to set forth apparatuses and methods for supporting end user devices via 5G Residential Gateway /Fixed Network Residential Gateway for wireline access networks.

According to aspects, the present disclosure is directed to only handling 3GPP end user devices.

According to a first aspect of the present disclosure, a system comprising a user entity (UE) , a 5G Residential Gateway (5G-RG) , and a Wireline 5G Access Network (W-5GAN) is provided. The 5G-RG may be adapted for communicating with an Application and Mobility Management Function (AMF) of a 5G core network (5GC) , the W-5GAN may be adapted for communicating with an AMF and a User Plane Function (UPF) of the 5GC, wherein the UE may use Wi-Fi or WLAN to access the 5G-RG, and wherein the 5G-RG connects to 5GC using wireline access or using wireless or 3GPP access as backhaul, wherein the UE may use 802.1x with 3GPP credentials.

According to a second aspect of the present disclosure, a system comprising a user entity (UE) , a 5G Residential Gateway (5G-RG) , and a Wireline 5G Access Network (W-5GAN) is provided. The 5G-RG may be adapted for communicating with an Application and Mobility Management Function (AMF) of a 5G core network (5GC) , the W-5GAN may be adapted for communicating with an AMF and a User Plane Function (UPF) of the 5GC, wherein the UE may use Wi-Fi or WLAN to access the 5G-RG, and wherein the 5G-RG connects to 5GC using wireline access or using wireless or 3GPP access as backhaul, wherein the UE may use enhanced untrusted non-3GPP access procedures.

According to a third aspect of the present disclosure, a system comprising a user entity (UE) , a Fixed Network Residential Gateway (FN-RG) , and a Wireline 5G Access Network (W-5GAN) is provided. The FN-RG may be adapted for communicating with an Application and Mobility Management Function (AMF) of a 5G core network (5GC) , the W-5GAN may be adapted for communicating with an AMF and a User Plane Function (UPF) of the 5GC, wherein the UE may use Wi-Fi or WLAN to access the FN-RG, and wherein the FN-RG connects to 5GC using wireline access or using wireless or 3GPP access as backhaul, wherein the UE may use enhanced untrusted non-3GPP access procedures.

According to a fourth aspect of the present disclosure, a system comprising a user entity (UE) , a 5G Residential Gateway (5G-RG) , and a Wireline 5G Access Network (W-5GAN) is provided. The 5G-RG may be adapted for communicating with an Application and Mobility Management Function (AMF) of a 5G core network (5GC) , the W-5GAN may be adapted for communicating with an AMF and a User Plane Function (UPF) of the 5GC, wherein the UE may use Wi-Fi or WLAN to access the 5G-RG and the 5G-RG connects to 5GC.

In an alternative embodiment of the fourth aspect, the UE may use 802.1x Extensible Authentication Protocol over Local Area Network with 3GPP credentials.

In an alternative embodiment of the fourth aspect, the 5G-RG connecting to 5GC may include the 5G-RG connecting to 5GC using wireline access or using wireless or 3GPP access as backhaul.

In an alternative embodiment of the fourth aspect, the 5G-RG may connect to the W-5GAN.

In an alternative embodiment of the fourth aspect, the W-5GAN may coordinate Quality of Service rules between the UE and the 5G-RG, wherein the coordination may include the W-5GAN setting up dedicated resources between the 5G-RG and the W-5GAN when Quality of Service rules for the UE is set up.

In an alternative embodiment of the fourth aspect, the UE may connect to the 5G-RG via an untrusted or trusted Non-3GPP interfaces, or enhanced interface.

In an alternative embodiment of the fourth aspect, the combination of the 5G-RG and the W-5GAN may act as a trusted Non-3GPP access network, wherein the 5G-RG may act as a Trusted Network Access Point and the W-5GAN may act as a Trusted Network Gateway Function.

In an alternative embodiment of the fourth aspect, the W-5GAN may set up Quality of Service reservations for the 5G-RG in a Protocol Data Unit session establishment procedure.

According to a fifth aspect of the present disclosure, a system comprising a user entity (UE) , a Fixed Network Residential Gateway (FN-RG) or a 5G Residential Gateway (5G-RG) , and a Wireline 5G Access Network (W-5GAN) is provided. The 5G-RG or the FN-RG may be adapted for communicating with an Application and Mobility Management Function (AMF) of a 5G core network (5GC) , the W-5GAN may be adapted for communicating with an AMF and a User Plane Function (UPF) of the 5GC, wherein the UE may use Wi-Fi or WLAN to access the 5G-RG or the FN-RG, and the 5G-RG or the FN-RG connects to 5GC.

In an alternative embodiment of the fifth aspect, the UE may use enhanced untrusted non-3GPP access procedures.

In an alternative embodiment of the fifth aspect, the 5G-RG or the FN-RG connecting to 5GC may include the 5G-RG or the FN-RG connecting to 5GC using wireline access or using wireless or 3GPP access as backhaul.

In an alternative embodiment of the fifth aspect, the 5G-RG or the FN-RG may connect to the W-5GAN.

In an alternative embodiment of the fifth aspect, the UE may connect to the 5G-RG or the FN-RG via an untrusted or trusted Non-3GPP interfaces, or enhanced interface.

In an alternative embodiment of the fifth aspect, the WLAN association may be performed before the UE performs 5GC registration.

In an alternative embodiment of the fifth aspect, a service provider may offer services to only the UE that both associated to the WLAN of the 5G-RG or the FN-RG and registers with the 5GC via the W-5GAN.

In an alternative embodiment of the fifth aspect, the W-5GAN may act as a trusted Non-3GPP access network.

In an alternative embodiment of the fifth aspect, the UE may use Internet Key Exchange/IPsec functionality to connect to the W-5GAN and Internet Key Exchange/IPsec functionality for an interface to the UE may be part of the W-5GAN.

In an alternative embodiment of the fifth aspect, NAS signalling may be carried between the UE and the W-5GAN in IPsec SA after a 5GC registration procedure, wherein the 5GC registration procedure may be an untrusted Non-3GPP access registration procedure.

In an alternative embodiment of the fifth aspect, the W-5GAN may be trusted by the 5GC and an optimized user-plane may be used.

In an alternative embodiment of the fifth aspect, the untrusted Non-3GPP access registration procedure may include: the UE may select an Internet Key Exchange/IPsec endpoint in the W-5GAN based on 3GPP Non-3GPP-Inter-Working Function selection; the UE may determine a serving PLMN of the Internet Key Exchange /IPsec entity which is the same as serving PLMN for the 5G-RG or the FN-RG; and the UE and the W-5GAN may determine whether a trusted access or untrusted access may be allowed; wherein if the trusted access may be allowed, the UE may use unsecure user/control plane; and if an untrusted access may be allowed, the UE may use secure user/control plane tunnels, wherein using unsecure user/control plane may be using Fixed Access Control Protocol user plane transport and using secure user/control plane tunnels may be using IPsec user plane transport.

In an alternative embodiment of the fifth aspect, a Protocol Data Unit session establishment procedure for an untrusted access network may include the UE requesting Protocol Data Unit Session Establishment via Untrusted Non-3GPP Access, wherein the W-5GAN may include the Internet Key Exchange/IPsec endpoint; and the W-5GAN may coordinate Quality of Service rules between the UE and the 5G-RG or the FN-RG, wherein IP/Encapsulation Security Payload/Generic Routing Encapsulation/Protocol Data Unit data may be used.

In an alternative embodiment of the fifth aspect, a Protocol Data Unit session establishment procedure for a trusted access network may include the UE requesting Protocol Data Unit Session Establishment via Untrusted Non-3GPP Access, wherein the W-5GAN may include the Internet Key Exchange/IPsec endpoint; Fixed Access Control Protocol may be used to create a user plane transport connection between the UE and the W-5GAN; and the W-5GAN may coordinate Quality of Service rules between the UE and the 5G-RG or the FN-RG, wherein IP/Generic Routing Encapsulation data or other Protocol Data Unit data or IP/Encapsulation Security Payload/Generic Routing Encapsulation/Protocol Data Unit data may be used.

According to a sixth aspect of the present disclosure, a method for a system comprising a user entity (UE) , a 5G Residential Gateway (5G-RG) , and a Wireline 5G Access Network (W-5GAN) is provided. The 5G-RG may be adapted for communicating with an Application and Mobility Management Function (AMF) of a 5G core network (5GC) , the W-5GAN may be adapted for communicating with an AMF and a User Plane Function (UPF) of the 5GC, wherein the UE may use Wi-Fi or WLAN to access the 5G-RG, and wherein the 5G-RG connects to 5GC using wireline access or using wireless or 3GPP access as backhaul, wherein the UE may use 802.1x with 3GPP credentials.

According to a seven aspect of the present disclosure, a method for a system comprising a user entity (UE) , a 5G Residential Gateway (5G-RG) , and a Wireline 5G Access Network (W-5GAN) is provided. The 5G-RG may be adapted for communicating with an Application and Mobility Management Function (AMF) of a 5G core network (5GC) , the W-5GAN may be adapted for communicating with an AMF and a User Plane Function (UPF) of the 5GC, wherein the UE may use Wi-Fi or WLAN to access the 5G-RG, and wherein the 5G-RG connects to 5GC using wireline access or using wireless or 3GPP access as backhaul, wherein the UE may use enhanced untrusted non-3GPP access procedures.

According to a eighth aspect of the present disclosure, a method for a system comprising a user entity (UE) , a Fixed Network Residential Gateway (FN-RG) , and a Wireline 5G Access Network (W-5GAN) is provided. The FN-RG may be adapted for communicating with an Application and Mobility Management Function (AMF) of a 5G core network (5GC) , the W-5GAN may be adapted for communicating with an AMF and a User Plane Function (UPF) of the 5GC, wherein the UE may use Wi-Fi or WLAN to access the FN-RG, and wherein the FN-RG connects to 5GC using wireline access or using wireless or 3GPP access as backhaul, wherein the UE may use enhanced untrusted non-3GPP access procedures.

According to a ninth aspect of the present disclosure, Aa method for a system comprising a user entity (UE) a 5G Residential Gateway (5G-RG) , and a Wireline 5G Access Network (W-5GAN) is provided. The method may comprise communicating by the 5G-RG with an Application and Mobility Management Function (AMF) of a 5G core network (5GC) , communicating by the W-5GAN with an AMF and a User Plane Function (UPF) of the 5GC, using by the UE Wi-Fi or WLAN to access the 5G-RG, and connecting the 5G-RG to 5GC.

In an alternative embodiment of the ninth aspect, the method may further comprise using by the UE 802.1x Extensible Authentication Protocol over Local Area Network with 3GPP credentials.

In an alternative embodiment of the ninth aspect, wherein connecting the 5G-RG to 5GC may include connecting the 5G-RG to 5GC using wireline access or using wireless or 3GPP access as backhaul.

In an alternative embodiment of the ninth aspect, the method may further comprise connecting the 5G-RG to the W-5GAN.

In an alternative embodiment of the ninth aspect, the method may further comprise coordinating by the W-5GAN Quality of Service rules between the UE and the 5G-RG, wherein the coordinating may include setting up by the W-5GAN dedicated resources between the 5G-RG and the W-5GAN when Quality of Service rules for the UE is set up.

In an alternative embodiment of the ninth aspect, the method may further comprise connecting the UE to the 5G-RG via an untrusted or trusted Non-3GPP interfaces, or enhanced interface.

In an alternative embodiment of the ninth aspect, the method may further comprise acting the combination of the 5G-RG and the W-5GAN as a trusted Non-3GPP access network, and acting 5G-RG as a Trusted Network Access Point and acting the W-5GAN as a Trusted Network Gateway Function.

In an alternative embodiment of the ninth aspect, the method may further comprise setting up by the W-5GAN Quality of Service reservations for the 5G-RG in a Protocol Data Unit session establishment procedure.

According to a tenth aspect of the present disclosure, a method for a system comprising a user entity (UE) , a Fixed Network Residential Gateway (FN-RG) or a 5G Residential Gateway (5G-RG) , and a Wireline 5G Access Network (W-5GAN) is provided. The method may comprise communicating by the 5G-RG or the FN-RG with an Application and Mobility Management Function (AMF) of a 5G core network (5GC) , communicating by the W-5GAN with an AMF and a User Plane Function (UPF) of the 5GC, using by the UE Wi-Fi or WLAN to access the 5G-RG or the FN-RG, and connecting the 5G-RG or the FN-RG to 5GC.

In an alternative embodiment of the tenth aspect, the method may further comprise using by the UE enhanced untrusted non-3GPP access procedures.

In an alternative embodiment of the tenth aspect, connecting the 5G-RG or the FN-RG to 5GC may include connecting the 5G-RG or the FN-RG to 5GC using wireline access or using wireless or 3GPP access as backhaul.

In an alternative embodiment of the tenth aspect, the method may further comprise connecting the 5G-RG or the FN-RG to the W-5GAN.

In an alternative embodiment of the tenth aspect, the method may further comprise connecting the UE to the 5G-RG or the FN-RG via an untrusted or trusted Non-3GPP interfaces, or enhanced interface.

In an alternative embodiment of the tenth aspect, the method may further comprise performing the WLAN association before the UE performs 5GC registration.

In an alternative embodiment of the tenth aspect, the method may further comprise offering by a service provider services to only the UE that both associated to the WLAN of the 5G-RG or the FN-RG and registers with the 5GC via the W-5GAN.

In an alternative embodiment of the tenth aspect, the method may further comprise acting the W-5GAN as a trusted Non-3GPP access network.

In an alternative embodiment of the tenth aspect, the method may further comprise using by the UE Internet Key Exchange/IPsec functionality to connect to the W-5GAN and Internet Key Exchange/IPsec functionality for an interface to the UE may be part of the W-5GAN.

In an alternative embodiment of the tenth aspect, the method may further comprise carrying NAS signalling between the UE and the W-5GAN in IPsec SA after a 5GC registration procedure, wherein the 5GC registration procedure may be an untrusted Non-3GPP access registration procedure.

In an alternative embodiment of the tenth aspect, the W-5GAN may be trusted by the 5GC and an optimized user-plane is used.

In an alternative embodiment of the tenth aspect, the untrusted Non-3GPP access registration procedure may include: selecting by the UE an Internet Key Exchange/IPsec endpoint in the W-5GAN based on 3GPP Non-3GPP-Inter-Working Function selection; determining by the UE a serving PLMN of the Internet Key Exchange /IPsec entity which is the same as serving PLMN for the 5G-RG or the FN-RG; and determining by the UE and the W-5GAN whether a trusted access or untrusted access is allowed; wherein if the trusted access may be allowed, using by the UE unsecure user/control plane; and if an untrusted access may be allowed, using by the UE secure user/control plane tunnels, wherein using unsecure user/control plane may be using Fixed Access Control Protocol user plane transport and using secure user/control plane tunnels may be using IPsec user plane transport.

In an alternative embodiment of the tenth aspect, a Protocol Data Unit session establishment procedure for an untrusted access network may include the UE requesting Protocol Data Unit Session Establishment via Untrusted Non-3GPP Access, the method may further comprise including by the W-5GAN the Internet Key Exchange /IPsec endpoint; and coordinating by the W-5GAN Quality of Service rules between the UE and the 5G-RG or the FN-RG, the method may further comprise using IP/Encapsulation Security Payload/Generic Routing Encapsulation/Protocol Data Unit data.

In an alternative embodiment of the tenth aspect, a Protocol Data Unit session establishment procedure for a trusted access network may include the UE requesting Protocol Data Unit Session Establishment via Untrusted Non-3GPP Access, the method may further comprise including by the W-5GAN the Internet Key Exchange/IPsec endpoint; using Fixed Access Control Protocol to create a user plane transport connection between the UE and the W-5GAN; and coordinating by the W-5GAN Quality of Service rules between the UE and the 5G-RG or the FN-RG, the method may further comprise using IP/Generic Routing Encapsulation data or other Protocol Data Unit data or IP/Encapsulation Security Payload/Generic Routing Encapsulation/Protocol Data Unit data.

This object is intended to align with what is defined as “key issue 9” , that is, “scenario 3” in 4.2.2.3 and “scenario 5” in 4.2.2.5 both of 3GPP TS 23.716 v030.

In the present disclosure, the end-user device that uses 5G-RG or FN-RG to connect to 5GC is called “remote 3GPP UE” .

Brief description of the drawings

Fig. 1 shows a known 5G core network reference architecture corresponding to 3GPP TS 23.501 V0.5.0 (2017-05) , Figure 4.2.3-3: Applying non-roaming 5G System architecture for multiple PDU session in reference point representation,

Fig. 2 shows an architecture for the 3GPP UE behind a 5G-RG case,

Fig. 3 shows an architecture for the 3GPP UE behind a FN-RG case,

Figs. 4A and 4B show an exemplary signalling flow for a registration procedure according to an embodiment of the disclosure for a 3GPP UE behind 5G-RG using 802.1x with 3GPP credentials,

Figs. 5 and 6 show control plane stacks for wireline access for 5G-RG,

Fig. 7 shows an architecture for the 3GPP UE behind FN-RG/5G-RG using enhanced untrusted N3GPP access procedures,

Fig. 8 shows an exemplary signalling flow for a registration procedure,

Fig. 9 shows a PDU session establishment procedure for untrusted access network,

Fig. 10 shows a PDU session establishment procedure for a trusted access network,

Fig. 11 shows various entities for implementing embodiments of the disclosure, and

Fig. 12 shows alternative embodiments for implementing the disclosure with network function virtualisation techniques.

Detailed description

In the following description various embodiments are described for the key issue of “Support end user devices via 5G-RG/FN-RG for wireline access network” with only handling 3GPP end user devices, that is

scenario

3 and 5 in 4.2.2.3 and 4.2.2.5 of 3GPP TS 23.716 v030.

In this disclosure, the end-user device that uses 5G-RG or FN-RG to connect to 5GC is called “remote 3GPP UE” .

Principles

For embodiments of the present disclosure, the following principles apply:

1. The embodiments should work for both 5G-RG and FN-RG.

2. The solution for 5G-RG can be optimized since changes in the 5G-RG is possible in contrast to the FN-RG case.

3. Remote UE uses Wi-Fi to access the 5G-RG/FN-RG

4. Minimize impact on remote 3GPP UE and network nodes by leveraging solutions existing in 3GPP release 15 and new solutions that are developed for release 16 for other purposes.

5. It should be possible to support remote UEs attaching via 5G-RG independent of whether the FN-RG/5G-RG connect to 5GC using wireline access or using wireless/3GPP access as backhaul. The access technology used by the 5G-RG should be transparent to the remote 3GPP UE to avoid impact when 5G-RG switch between wireline access and 3GPP access.

Architecture

Figs. 2 and 3 show the architectures used in this embodiment. Fig. 2 shows an architecture for the 3GPP UE behind a 5G-RG case (also denoted scenario 3 in TS 23.716) , and Fig. 3 shows an architecture for the 3GPP UE behind a FN-RG case (also denoted scenario 5 in TS 23.716) , The W-5GAN separates the respective N2 and N3 connections for 5G-RG/FN-RG and remote 3GPP UE. Consequently, the 3GPP UE N1 connection is independent from the FN-RG/5G-RG N1 connection.

Maintaining N1/N2/N3 connections for the 3GPP UE that are separated from the N1/N2/N3 connections for the 5G-RG will enable the remote 3GPP UE to keep the same AMF (Access and Mobility management Function) and UPF (User Plane Function) at mobility between 3GPP and 5G-RG/FN-RG access if the AMF/UPF used on 3GPP access is also reachable and usable from the W-5GAN. AMF change as well as I-UPF insertion/change/removal when moving to 3GPP access is supported as per Rel. -15. Support for session continuity and that IP (Internet Protocol) services are kept between the accesses can then be provided by the remote 3GPP UE’s 5GC nodes.

The same serving PLMN (Public Land Mobile Network) will be used for both the 5G-RG/FN-RG and the remote 3GPP UE and in case the remote 3GPP has a subscription for another PLMN, the 3GPP roaming model and interfaces are used.

W-5GAN will be enabled to support QoS (Quality of Service) flows for a 3GPP UE using 5G-RG/FN-RG access. The W-5GAN can coordinate the QoS rules for 3GPP UE with the QoS rules assigned for the 5G-RG/FN-RG. For example, a QoS rule which is setup for remote 3GPP UE can result in that the W-5GAN setup dedicated resources between 5G-RG/FN-RG and the W-5GAN.

The interfaces between FN-RG/5G-RG and W-5GAN to support a remote 3GPP UE is within BBF responsibility.

The interfaces used by the 3GPP UE to access a FN-RG/5G-RG will leverage the untrusted/trusted N3GPP (Non-3GPP) interfaces. The untrusted N3GPP interface is defined in 3GPP release 15. The trusted N3GPP interfaces are studied in this report. When these interfaces are not sufficient to accomplish the requirements for

scenario

3 and 5, enhancements on top of the untrusted and trusted solutions described below.

WLAN association options

Two different sub-embodiments are defined:

I. 3GPP UE behind 5G-RG using 802.1x with 3GPP credentials

II. 3GPP UE behind FN-RG/5G-RG using enhanced untrusted N3GPP access procedures

I -3GPP UE behind 5G-RG using 802.1x with 3GPP credentials

General

This embodiment pertains to scenario 3 /Fig. 2.

This embodiment is applicable when 802.1x (EAP (Extensible Authentication Protocol) over LAN (Local Area Network) ) and 3GPP credentials are used to associate with the WLAN. In this embodiment, the solution for trusted N3GPP is used as baseline with the additional property that the service is offered via a wireline access and a 5G-RG. FN-RG is not applicable for this case since changes are needed in the RG (FN-RG is not supporting 802.1x) . This embodiment can typically be used in case a service provider offers services via wireline access to all the subscribers of the service provider.

The combination of 5G-RG and W-5GAN will act as a trusted N3GPP access network from the remote UE and 5GC perspective. Solution #4 described in clause 6.4 of TS 23.716 is used as baseline but it is expected that any solution selected for trusted N3GPP can be re-used/enhanced for this scenario as well.

Registration procedure

The registration procedure in 6.4.3.3 can be used where 5G-RG acts as TNAP (Trusted Network Access Point) and W-5GAN acts as TNGF (Trusted Network Gateway Function) . In similar manner the procedures proposed in 6.4.3.4.2 (step 1-13) and 6.4.3.4.3 (step 1-13) on how to finish the registration can be followed.

The interface between 5G-RG and W-5GAN may be defined by BBF.

In Figs. 4A and Fig. 4B an embodiment for a registration method including various details is shown. It should be noted that Fig. 4B is continuation of Fig. 4A.

Regarding "Fixed Access Control Protocol" (FCP) from 3GPP TS 23.716 V0.3.0:

The control protocol stack in figure 6.3.1-1 of 23.716 is used between 5G-RG and AMF. In the description below, the FCP is used to establish the link, transport AS and NAS parameters, create sessions, etc.

Detailed functionality associated with FCP and the protocol layers below in this embodiment is specified by BBF and is out of 3GPP scope (e.g., whether it is re-using existing protocol (s) or is newly defined) . The purpose to include FCP in this embodiment is just to have a generic concept to discuss the end-to-end solution, that can later be adapted to the actual solution selected by BBF.

Fig. 5 shows a Control Plane stack for Wireline access for 5G-RG.

In order to extend the FCP concept also beyond 5G-RG (i.e. the 5G-RG working as a relay UE for the remote UE) , a remote UE can use FCP between said UE and the FAGF via 5G-RG and a protocol stack may be provided as shown in Fig. 6 according to an embodiment of the disclosure.

PDU session establishment procedure

The procedures in 6.4.3.4.2 (step 14-19) or 6.4.3.4.3 (step 14-19) of 3GPP TS 23.716 can be followed depending on what option is selected.

At step 16b, the W-5GAN can setup QoS reservations for the 5G-RG.

Interface between 5G-RG and W-5GAN will be defined by BBF.

II -3GPP UE behind FN-RG/5G-RG using enhanced untrusted N3GPP (Non-3GPP) access procedures

General

This embodiment pertains to both

scenario

3 and 5 /Figs 2 and 3.

In this embodiment, the WLAN (Wireless Local Access Network) association is assumed to have been carried out before the remote 3GPP UE do 5GC registration. How that is done is outside the scope of 3GPP. Services are only offered to remote 3GPP UEs (User Entities) that can both 1) associate to the WLAN of the 5G-RG/FN-RG and 2) register to the 5GC via the W-5GAN as described below.

This embodiment re-uses procedures defined in 3GPP TS 23.501 V15.1.0 (2018-03) and TS 23.502 V15.1.0 (2018-03) but in a context of trusted W-5GAN. This enables supporting a remote 3GPP UE behind a legacy FN-RG at the same time as allowing the W-5GAN to act as a trusted N3GPP access network, supporting e.g. QoS enforcement and other features available in trusted N3GPP access.

Fig. 7 shows the N1, N2 and N3 reference points of the remote 3GPP UE and that 3GPP UE uses IKE (Internet Key Exchange) /IPsec (similar as 3GPP NWu reference point) functionality to connect to W-5GAN. The IKE/IPsec functionality for the interface to the 3GPP UE is part of the W-5GAN.

After the registration procedure, NAS signalling is carried between 3GPP UE and W-5GAN in IPSec SA.

One difference in this embodiment compared to untrusted N3GPP is that the W-5GAN is trusted by the 5GC and an optimized user-plane may be used.

Registration

The 5GC registration will follow the untrusted N3GPP access registration procedure as defined in 3GPP TS 23.502 clause 4.12.2.2 but with the changes described below.

Fig. 8 shows a registration procedure.

In step 1b, the UE selects an IKE/IPsec endpoint in the W-5GAN. This can be based on 3GPP N3IWF (Non-3GPP -Inter Working Function) selection, but the UE asks for an IKE/IPsec entity in the W-5GAN and not a N3IWF. The UE also learns the serving PLMN of the IKE/IPsec entity which is the same as serving PLMN for the FN-RG/5G-RG.

In step 8, the UE and W-5GAN learns whether the access network allows trusted access or untrusted access. If W-5GAN allows trusted access via the access network which the 5G-RG/FN-RG is using, then the UE can use unsecure user/control plane (e.g., using FCP user plane transport) . If access network only allows untrusted access, the 3GPP UE only uses secure user/control plane tunnels (e.g., using IPSec user plane transport) .

PDU session establishment procedure

Fig. 9 shows a PDU (Protocol Data Unit) session establishment procedure for an untrusted access network.

The PDU session establishment procedure for untrusted access networks uses the UE Requested PDU Session Establishment via Untrusted non-3GPP Access as baseline, see clause 4.12.5 in 3GPP TS 23.502. The differences are:

The W-5GAN includes the IKE/IPsec endpoint.

In

steps

4c and 4f, the W-5GAN can coordinate the QoS rules for 3GPP UE with the QoS rules assigned for the 5G-RG/FN-RG. The FCP request in these steps refers to the FCP functionality defined in solution #2, clause 6.3 (3GPP TS 23.502) .

Fig. 10 shows a PDU session establishment procedure for a trusted access network.

The PDU session establishment procedure for trusted access networks uses the UE Requested PDU Session Establishment via Untrusted non-3GPP Access as baseline, see clause 4.12.5 in 3GPP TS 23.502. The differences are:

The W-5GAN includes the IKE/IPsec endpoint.

Steps 3-4. Instead of steps 3-4 in TS 23.502, clause 4.12.5, FCP is used to create a user plane transport connection between 3GPP UE and W-5GAN.

In step 4b, the W-5GAN can coordinate the QoS rules for 3GPP UE with the QoS rules assigned for the 5G-RG/FN-RG. The FCP request in these steps refers to the FCP functionality defined in solution #2, clause 6.3 (of 3GPP TS 23.502) .

User plane stacks

For the untrusted case: IP/ESP (Encapsulation Security Payload) /GRE (Generic Routing Encapsulation) /PDU data (as defined for N3GPP in 23.501 release 15)

For the trusted case: As proposed in 6.4.3.4.2 and 6.4.3.4.3 interface between UE and W-5GAN (acting as TNGF-UP (Trusted Network Gateway Function) ) may either use IP/GRE /or other alternatives PDU data or IP/ESP/GRE/PDU data.

According to aspects of the disclosure, the following is provided:

A system comprising a user entity, UE, a 5G Residential Gateway, 5G-RG, and a Wireline 5G Access Network, W-5GAN,

the 5G-RG adapted for communicating with an Application and Mobility Management Function, AMF, of a 5G core network, 5GC,

the W-5GAN adapted for communicating with an AMF and a User Plane Function, UPF, of the 5GC,

wherein the UE uses Wi-Fi or WLAN to access the 5G-RG, and wherein the 5G-RG connects to 5GC using wireline access or using wireless or 3GPP access as backhaul,

wherein the UE uses 802.1x with 3GPP credentials.

wherein the UE uses enhanced untrusted non-3GPP access procedures.

A system comprising a user entity, UE, a Fixed Network Residential Gateway, FN-RG, and a Wireline 5G Access Network, W-5GAN,

the FN-RG adapted for communicating with an Application and Mobility Management Function, AMF, of a 5G core network, 5GC,

wherein the UE uses Wi-Fi or WLAN to access the FN-RG, and wherein the FN-RG connects to 5GC using wireline access or using wireless or 3GPP access as backhaul,

wherein the UE uses enhanced untrusted non-3GPP access procedures.

A method for a system comprising a user entity, UE, a 5G Residential Gateway, 5G-RG, and a Wireline 5G Access Network, W-5GAN,

wherein the UE uses 802.1x with 3GPP credentials.

wherein the UE uses enhanced untrusted non-3GPP access procedures.

A method for a system comprising a user entity, UE, a Fixed Network Residential Gateway, FN-RG, and a Wireline 5G Access Network, W-5GAN,

wherein the UE uses enhanced untrusted non-3GPP access procedures.

In Fig. 11, there is shown a user equipment, UE, apparatus according to the disclosure.

The UE comprises a processor PCU_UE an interface IF_UE and a memory, MEM_UE, in which memory instructions are stored for carrying out the method steps explained above. The UE communicates via the interface IF_UE. The IF_UE comprises both an external interface, communicating with a transmitter and receiver, and internal interfaces (not shown) .

There is also shown a 5G-RN comprising a processor PCU_RN, an interface IF_RN; and a memory, MEM_RN. Instructions are stored in the memory for being performed by the processor such that the method steps explained above are carried out and signalling is communicated on the interface.

Further, a FN-RG is provided comprising a processor PCU_RG, an interface IF_RG; and a memory, MEM_RG. Instructions are stored in the memory for being performed by the processor such that the method steps explained above are carried out and signalling is communicated on the interface.

Moreover, a W-5GAN is provided comprising a processor PCU_GAN, an interface IF_GAN; and a memory, MEM_GAN. Instructions are stored in the memory for being performed by the processor such that the method steps explained above are carried out and signalling is communicated on the interface.

In Fig. 11, there is moreover shown a AUSF comprising a processor PCU_AUS, an interface IF_AUS; and a memory, MEM_AUS. Instructions are stored in the memory for being performed by the processor such that the method steps explained above are carried out and signalling is communicated on the interface.

Finally, an AMF is provided comprising a processor PCU_A, an interface IF_A; and a memory, MEM_A. Instructions are stored in the memory for being performed by the processor such that the method steps explained above are carried out and signalling is communicated on the interface.

The above apparatuses /entities are adapted to communicate over known external telecom interfaces or via application programming interfaces, API, as appropriate.

It is noted that the features of the methods described above and in the following, may be implemented in software and carried out on a data processing device or other processing means caused by the execution of program code means such as computer-executable instructions. Here and in the following, the term processing means comprises any circuit and/or device

suitably adapted to perform the above functions. In particular, the above term comprises general- or special-purpose programmable microprocessors, Digital Signal Processors (DSP) , Application Specific Integrated Circuits (ASIC) , Programmable Logic Arrays (PLA) , Field Programmable Gate Arrays (FPGA) , special purpose electronic circuits, etc., or a combination thereof.

For example, the program code means may be loaded in a memory, such as a RAM (Random Access Memory) , from a storage medium, such as a read-only memory (ROM) or other non-volatile memory, such as flash memory, or from another device via a suitable data interface, the described features may be implemented by hardwired circuitry instead of software or in combination with software.

A computer program or computer program product is provided carrying out the method steps defined above.

The methods discussed above may alternatively be implemented by means of a system based on network functions virtualization. In Fig. 12, further embodiments of the disclosure are implemented by means of such a network function virtualization system, NFVS, formed on e.g. general-purpose servers, standard storage and switches. The NFVS may be arranged along the lines described in Fig. 4, ETSI GS NFV 002 V. 1.1.1 (2013-10) and comprises the following elements: A NFV management and orchestration system comprising an Orchestrator, ORCH, a VNF manager, VNF_MGR, and a virtualised Infrastructure manager, VIRT_INFRA_MGR. The NFVS moreover comprises an operational /business support system, OP/BUSS_SUPP_SYST; a number of virtual network function instances, VNF, by which the method steps explained above are instantiated; and a virtualised infrastructure, VIRT_INFRA. The VIRT_INFRA comprises a virtual computing, VIRT_COMP, virtual network; VIRT_NETW, and virtual memory, VIRT_MEM, a virtualisation layer, VIRT_LAYER, (e.g. hypervisor) and shared hardware resources, SHARED_HARDW_RES comprising computing devices, COMP, network devices, NETW, comprising e.g. standard switches and other network devices, and standard data storage devices, MEM.

It should be noted that aspects of the disclosure may be utilized in connection with various services provided by a server or host computer to or from a user entity.

The 5GC may be connected to a host computer (not shown) , which may be embodied in the hardware and/or software of a standalone server, a cloud-implemented server, a distributed server or as processing resources in a server farm. The host computer and the connected (remote) UEs may be configured to communicate data and/or signalling via the OTT (Over-The-Top) connection, using the residential gateways FN-RG/5G-RG and the W-5GAN described above, the core network, any intermediate network and possible further infrastructure (not shown) as intermediaries. The OTT connection may be transparent in the sense that the participating communication devices through which the OTT connection passes are unaware of routing of uplink and downlink communications. A measurement procedure may be provided for the purpose of monitoring data rate, latency and other factors on which the one or more embodiments improve. There may further be an optional network functionality for reconfiguring the OTT connection between the host computer and UE, in response to variations in the measurement results.

Claims

A system comprising a user entity (UE) , a 5G Residential Gateway (5G-RG) , and a Wireline 5G Access Network (W-5GAN) ,

the 5G-RG adapted for communicating with an Application and Mobility Management Function (AMF) of a 5G core network (5GC) ,

the W-5GAN adapted for communicating with an AMF and a User Plane Function (UPF) of the 5GC,

wherein the UE uses Wi-Fi or WLAN to access the 5G-RG, and wherein the 5G-RG connects to 5GC using wireline access or using wireless or 3GPP access as backhaul,

wherein the UE uses 802. lx with 3GPP credentials.
A system comprising a user entity (UE) , a 5G Residential Gateway (5G-RG) , and a Wireline 5G Access Network (W-5GAN) ,

the 5G-RG adapted for communicating with an Application and Mobility Management Function (AMF) of a 5G core network (5GC) ,

the W-5GAN adapted for communicating with an AMF and a User Plane Function (UPF) of the 5GC,

wherein the UE uses Wi-Fi or WLAN to access the 5G-RG, and wherein the 5G-RG connects to 5GC using wireline access or using wireless or 3GPP access as backhaul,

wherein the UE uses enhanced untrusted non-3GPP access procedures.
A system comprising a user entity (UE) , a Fixed Network Residential Gateway (FN-RG) , and a Wireline 5G Access Network (W-5GAN) ,

the FN-RG adapted for communicating with an Application and Mobility Management Function (AMF) of a 5G core network (5GC) ,

the W-5GAN adapted for communicating with an AMF and a User Plane Function (UPF) of the 5GC,

wherein the UE uses Wi-Fi or WLAN to access the FN-RG, and wherein the FN-RG connects to 5GC using wireline access or using wireless or 3GPP access as backhaul,

wherein the UE uses enhanced untrusted non-3GPP access procedures.
A system comprising a user entity (UE) , a 5G Residential Gateway (5G-RG) , and a Wireline 5G Access Network (W-5GAN) ,

the 5G-RG adapted for communicating with an Application and Mobility Management Function (AMF) of a 5G core network (5GC) ,

the W-5GAN adapted for communicating with an AMF and a User Plane Function (UPF) of the 5GC,

wherein the UE uses Wi-Fi or WLAN to access the 5G-RG and the 5G-RG connects to 5GC.
The system of Claim 4, wherein the UE uses 802.1x Extensible Authentication Protocol over Local Area Network with 3GPP credentials.
The system of Claim 4 or 5, wherein the 5G-RG connecting to 5GC includes the 5G-RG connecting to 5GC using wireline access or using wireless or 3GPP access as backhaul.
The system of any of Claims 4-6, wherein the 5G-RG connects to the W-5 GAN.
The system of any of Claims 4-7, wherein the W-5GAN coordinates Quality of Service rules between the UE and the 5G-RG, wherein the coordination includes the W-5GAN setting up dedicated resources between the 5G-RG and the W-5GAN when Quality of Service rules for the UE is set up.
The system of any of Claims 4-8, wherein the UE connects to the 5G-RG via an untrusted or trusted Non-3GPP interfaces, or enhanced interface.
The system of any of Claims 4-9, wherein the combination of the 5G-RG and the W-5GAN acts as a trusted Non-3GPP access network, wherein the 5G-RG acts as a Trusted Network Access Point and the W-5GAN acts as a Trusted Network Gateway Function.
The system of any of Claim 10, wherein the W-5GAN sets up Quality of Service reservations for the 5G-RG in a Protocol Data Unit session establishment procedure.
A system comprising a user entity (UE) , a Fixed Network Residential Gateway (FN-RG) or a 5G Residential Gateway (5G-RG) , and a Wireline 5G Access Network (W-5GAN) ,

the 5G-RG or the FN-RG adapted for communicating with an Application and Mobility Management Function (AMF) of a 5G core network (5GC) ,

the W-5GAN adapted for communicating with an AMF and a User Plane Function (UPF) of the 5GC,

wherein the UE uses Wi-Fi or WLAN to access the 5G-RG or the FN-RG, and the 5G-RG or the FN-RG connects to 5GC.
The system of Claim 12, wherein the UE uses enhanced untrusted non-3GPP access procedures.
The system of Claim 12 or 13, wherein the 5G-RG or the FN-RG connecting to 5GC includes the 5G-RG or the FN-RG connecting to 5GC using wireline access or using wireless or 3GPP access as backhaul.
The system of any of Claims 12-14, wherein the 5G-RG or the FN-RG connects to the W-5GAN.
The system of any of Claims 12-15, wherein the UE connects to the 5G-RG or the FN-RG via an untrusted or trusted Non-3GPP interfaces, or enhanced interface.
The system of any of Claims 13-16, wherein the WLAN association is performed before the UE performs 5GC registration.
The system of any of Claims 13-17, wherein a service provider offers services to only the UE that both associated to the WLAN of the 5G-RG or the FN-RG and registers with the 5GC via the W-5GAN.
The system of any of Claims 13-18, wherein the W-5GAN acts as a trusted Non-3GPP access network.
The system of any of Claims 13-19, wherein the UE uses Internet Key Exchange/IPsec functionality to connect to the W-5GAN and Internet Key Exchange/IPsec functionality for an interface to the UE is part of the W-5GAN.
The system of any of Claims 13-20, wherein NAS signalling is carried between the UE and the W-5GAN in IPsec SA after a 5GC registration procedure, wherein the 5GC registration procedure is an untrusted Non-3GPP access registration procedure.
The system of any of Claims 13-21, wherein the W-5GAN is trusted by the 5GC and an optimized user-plane is used.
The system of Claim 21, wherein the untrusted Non-3GPP access registration procedure includes:

the UE selects an Internet Key Exchange/IPsec endpoint in the W-5GAN based on 3GPP Non-3GPP-Inter-Working Function selection;

the UE determines a serving PLMN of the Internet Key Exchange /IPsec entity which is the same as serving PLMN for the 5G-RG or the FN-RG; and

the UE and the W-5GAN determine whether a trusted access or untrusted access is allowed;

wherein if the trusted access is allowed, the UE uses unsecure user/control plane; and if an untrusted access is allowed, the UE uses secure user/control plane tunnels, wherein using unsecure user/control plane is using Fixed Access Control Protocol user plane transport and using secure user/control plane tunnels is using IPsec user plane transport.
The system of any of Claims 13-23, wherein a Protocol Data Unit session establishment procedure for an untrusted access network includes the UE requesting Protocol Data Unit Session Establishment via Untrusted Non-3GPP Access, wherein the W-5GAN includes the Internet Key Exchange /IPsec endpoint; and the W-5GAN coordinates Quality of Service rules between the UE and the 5G-RG or the FN-RG, wherein IP/Encapsulation Security Payload/Generic Routing Encapsulation/Protocol Data Unit data are used.
The system of any of Claims 13-23, wherein a Protocol Data Unit session establishment procedure for a trusted access network includes the UE requesting Protocol Data Unit Session Establishment via Untrusted Non-3GPP Access, wherein the W-5GAN includes the Internet Key Exchange/IPsec endpoint; Fixed Access Control Protocol is used to create a user plane transport connection between the UE and the W-5GAN; and the W-5GAN coordinates Quality of Service rules between the UE and the 5G-RG or the FN-RG, wherein IP/Generic Routing Encapsulation data or other Protocol Data Unit data or IP/Encapsulation Security Payload/Generic Routing Encapsulation/Protocol Data Unit data are used.
A method for a system comprising a user entity (UE) , a 5G Residential Gateway (5G-RG) , and a Wireline 5G Access Network (W-5GAN) ,

the 5G-RG adapted for communicating with an Application and Mobility Management Function (AMF) of a 5G core network (5GC) ,

the W-5GAN adapted for communicating with an AMF and a User Plane Function (UPF) of the 5GC,

wherein the UE uses Wi-Fi or WLAN to access the 5G-RG, and wherein the 5G-RG connects to 5GC using wireline access or using wireless or 3GPP access as backhaul,

wherein the UE uses 802.lx with 3GPP credentials.
A method for a system comprising a user entity (UE) , a 5G Residential Gateway (5G-RG) , and a Wireline 5G Access Network (W-5GAN) ,

the 5G-RG adapted for communicating with an Application and Mobility Management Function (AMF) of a 5G core network (5GC) ,

the W-5GAN adapted for communicating with an AMF and a User Plane Function (UPF) of the 5GC,

wherein the UE uses Wi-Fi or WLAN to access the 5G-RG, and wherein the 5G-RG connects to 5GC using wireline access or using wireless or 3GPP access as backhaul,

wherein the UE uses enhanced untrusted non-3GPP access procedures.
A method for a system comprising a user entity (UE) , a Fixed Network Residential Gateway (FN-RG) , and a Wireline 5G Access Network (W-5GAN) ,

the FN-RG adapted for communicating with an Application and Mobility Management Function (AMF) of a 5G core network (5GC) ,

the W-5GAN adapted for communicating with an AMF and a User Plane Function (UPF) of the 5GC,

wherein the UE uses Wi-Fi or WLAN to access the FN-RG, and wherein the FN-RG connects to 5GC using wireline access or using wireless or 3GPP access as backhaul,

wherein the UE uses enhanced untrusted non-3GPP access procedures.
A method for a system comprising a user entity (UE) a 5G Residential Gateway (5G-RG) , and a Wireline 5G Access Network (W-5GAN) , comprising:

communicating by the 5G-RG with an Application and Mobility Management Function (AMF) of a 5G core network (5GC) ,

communicating by the W-5GAN with an AMF and a User Plane Function (UPF) of the 5GC,

using by the UE Wi-Fi or WLAN to access the 5G-RG, and

connecting the 5G-RG to 5GC.
The method of Claim 29, further comprising using by the UE 802. l x Extensible Authentication Protocol over Local Area Network with 3 GPP credentials.
The method of Claim 29 or 30, wherein connecting the 5G-RG to 5GC includes connecting the 5G-RG to 5GC using wireline access or using wireless or 3GPP access as backhaul.
The method of any of Claims 29-31, further comprising connecting the 5G-RG to the W-5GAN.
The method of any of Claims 29-32, further comprising coordinating by the W-5GAN Quality of Service rules between the UE and the 5G-RG, wherein the coordinating includes setting up by the W-5GAN dedicated resources between the 5G-RG and the W-5GAN when Quality of Service rules for the UE is set up.
The method of any of Claims 29-33, further comprising connecting the UE to the 5G-RG via an untrusted or trusted Non-3GPP interfaces, or enhanced interface.
The method of any of Claims 29-34, further comprising acting the combination of the 5G-RG and the W-5GAN as a trusted Non-3GPP access network, and acting 5G-RG as a Trusted Network Access Point and acting the W-5GAN as a Trusted Network Gateway Function.
The method of any of Claims 35, further comprising setting up by the W-5GAN Quality of Service reservations for the 5G-RG in a Protocol Data Unit session establishment procedure.
A method for a system comprising a user entity (UE) , a Fixed Network Residential Gateway (FN-RG) or a 5G Residential Gateway (5G-RG) , and a Wireline 5G Access Network (W-5GAN) , comprising:

communicating by the 5G-RG or the FN-RG with an Application and Mobility Management Function (AMF) of a 5G core network (5GC) ,

communicating by the W-5GAN with an AMF and a User Plane Function (UPF) of the 5GC,

using by the UE Wi-Fi or WLAN to access the 5G-RG or the FN-RG, and

connecting the 5G-RG or the FN-RG to 5GC.
The method of Claim 37, further comprising using by the UE enhanced untrusted non-3GPP access procedures.
The method of Claim 37 or 38, wherein connecting the 5G-RG or the FN-RG to 5GC includes connecting the 5G-RG or the FN-RG to 5GC using wireline access or using wireless or 3GPP access as backhaul.
The method of any of Claims 37-39, further comprising connecting the 5G-RG or the FN-RG to the W-5GAN.
The method of any of Claims 37-40, further comprising connecting the UE to the 5G-RG or the FN-RG via an untrusted or trusted Non-3GPP interfaces, or enhanced interface.
The method of any of Claims 37-41, further comprising performing the WLAN association before the UE performs 5GC registration.
The method of any of Claims 37-42, further comprising offering by a service provider services to only the UE that both associated to the WLAN of the 5G-RG or the FN-RG and registers with the 5GC via the W-5GAN.
The method of any of Claims 37-43, further comprising acting the W-5GAN as a trusted Non-3GPP access network.
The method of any of Claims 37-44, further comprising using by the UE Internet Key Exchange/IPsec functionality to connect to the W-5GAN and Internet Key Exchange/IPsec functionality for an interface to the UE is part of the W-5GAN.
The method of any of Claims 37-45, further comprising carrying NAS signalling between the UE and the W-5GAN in IPsec SA after a 5GC registration procedure, wherein the 5GC registration procedure is an untrusted Non-3GPP access registration procedure.
The method of any of Claims 37-46, wherein the W-5GAN is trusted by the 5GC and an optimized user-plane is used.
The method of Claim 46, wherein the untrusted Non-3GPP access registration procedure includes:

selecting by the UE an Internet Key Exchange/IPsec endpoint in the W-5GAN based on 3GPP Non-3GPP-Inter-Working Function selection;

determining by the UE a serving PLMN of the Internet Key Exchange /IPsec entity which is the same as serving PLMN for the 5G-RG or the FN-RG; and

determining by the UE and the W-5GAN whether a trusted access or untrusted access is allowed;

wherein if the trusted access is allowed, using by the UE unsecure user/control plane; and if an untrusted access is allowed, using by the UE secure user/control plane tunnels, wherein using unsecure user/control plane is using Fixed Access Control Protocol user plane transport and using secure user/control plane tunnels is using IPsec user plane transport.
The method of any of Claims 38-48, wherein a Protocol Data Unit session establishment procedure for an untrusted access network includes the UE requesting Protocol Data Unit Session Establishment via Untrusted Non-3GPP Access, the method further comprising including by the W-5GAN the Internet Key Exchange/IPsec endpoint; and coordinating by the W-5GAN Quality of Service rules between the UE and the 5G-RG or the FN-RG, the method further comprising using IP/Encapsulation Security Payload/Generic Routing Encapsulation/Protocol Data Unit data.
The method of any of Claims 38-48, wherein a Protocol Data Unit session establishment procedure for a trusted access network includes the UE requesting Protocol Data Unit Session Establishment via Untrusted Non-3GPP Access, the method further comprising including by the W-5GAN the Internet Key Exchange/IPsec endpoint; using Fixed Access Control Protocol to create a user plane transport connection between the UE and the W-5GAN; and coordinating by the W-5GAN Quality of Service rules between the UE and the 5G-RG or the FN-RG, the method further comprising using IP/Generic Routing Encapsulation data or other Protocol Data Unit data or IP/Encapsulation Security Payload/Generic Routing Encapsulation/Protocol Data Unit data.