US 12,457,490 B2
On-demand subscription concealed identifier (SUCI) deconcealment for select applications
Shanthala Kuravangi-Thammaiah, Keller, TX (US); Ye Huang, San Ramon, CA (US); Scott Sheets, Aurora, TX (US); and Lalit R. Kotecha, San Ramon, CA (US)
Assigned to Verizon Patent and Licensing Inc., Basking Ridge, NJ (US)
Filed by Verizon Patent and Licensing Inc., Basking Ridge, NJ (US)
Filed on May 19, 2022, as Appl. No. 17/748,459.
Prior Publication US 2023/0379696 A1, Nov. 23, 2023
Int. Cl. H04W 12/02 (2009.01); H04W 8/26 (2009.01); H04W 12/06 (2021.01)
CPC H04W 12/02 (2013.01) [H04W 8/26 (2013.01); H04W 12/06 (2013.01)] 21 Claims
OG exemplary drawing
 
1. A method, comprising:
receiving, by a Network Exposure Function (NEF) in a mobile network from a first data center residing in an edge network that is external to the mobile network, a first registration for preregistering with a Subscription Concealed Identifier (SUCI) deconcealment service prior to the first data center requesting execution of the SUCI deconcealment service for any one of multiple mobile network subscribers, wherein the first registration includes a first certificate associated with the first data center;
receiving, from the first data center by the NEF subsequent to receipt of the first registration, a first (SUCI) deconcealment request associated with a first mobile network subscriber, that includes a first SUCI associated with the first mobile network subscriber and requests execution of the SUCI deconcealment service for the first mobile network subscriber;
authenticating, by the NEF based on the first certificate of the first registration, the first data center for authorizing deconcealment of the first SUCI;
obtaining, by the NEF from a mobile network Network Function (NF) based on successful authentication of the first data center, a first Subscription Permanent Identifier (SUPI), associated with the first mobile network subscriber, decrypted from the first SUCI by the mobile network NF; and
forwarding, by the NEF via the edge network that is external to the mobile network, the first SUPI to the authenticated first data center.