Z.3 IMS Registration to access RLOS

23.2283GPPIP Multimedia Subsystem (IMS)Release 18Stage 2TS

Z.3.1 RLOS IMS Registration for Roaming users (no roaming Agreements with home network)

Figure Z.3.1-1: RLOS IMS Registration procedures for roaming users without roaming agreements with their home network

1. After the UE has obtained IP connectivity (as defined in TS 23.401 [70] for RLOS users), it performs regular IMS registration and includes an indication that this is an RLOS related IMS registration in the Register information.

2. The P‑CSCF is a P-CSCF that supports RLOS, and upon receipt of the Register information, optionally, and based on operator policy performs the security checks in clause Z.3.3. Based on the subscriber being a roaming user without roaming agreement with his home network, and the RLOS indication in the Register information, the P-CSCF shall send the Register information to the S-CSCF configured in the P-CSCF to handle RLOS users.

NOTE: The P-CSCF ID for handling RLOS would have been sent to the UE during the Attach procedure which included an explicit indication to access RLOS.

Steps 3-8 apply if the S-CSCF has responded with 420 response.

3. Upon receipt of the Register information, the S-CSCF, based on the RLOS indication and the subscriber being a roaming user without roaming agreement with his home network and depending on the network configuration, and if the network supports GIBA, sends back a 420 response with sec-agree value listed in the unsupported header field.

4. The P-CSCF forwards the 420 response to the UE.

5. The UE initiates a new Register request and does not include the Authorization header field.

6. The P-CSCF optionally performs the RLOS APN verification in clause Z.3.3, then sends the Register information to the S-CSCF allocated to the UE.

7. Upon receipt of the Register information, the S-CSCF shall accept the Registration, creates a temporary record for the unauthenticated UE with a default service profile and responds with a 200 OK.

8. The P-CSCF sends the 200 OK to the UE.

Steps 9-10 apply if the S-CSCF has responded with 403 response.

9. Upon receipt of the Register information, the S-CSCF, based on the RLOS indication and the subscriber being a roaming user without roaming agreement with his home network and depending on the network configuration as well as operator configuration (no support for GIBA), responds with a 403 response. The S-CSCF creates a temporary registration record for the unauthenticated UEs with a default service profile.

10. The P-CSCF sends the 403 response to the UE. The P-CSCF creates a temporary registration record for the unauthenticated UE given that the subscriber is a roaming user without roaming agreement with his home network. The UE is allowed to initiate an IMS session.

Z.3.2 RLOS IMS Registration for Operator own subscribers and Roaming users with roaming agreements with their home network

Operator own subscribers, and/or roaming users with IMS services and Restricted Local Operator Services roaming agreement with their home network, shall perform a new IMS registration, as specified below, to access IMS-based Restricted Local Operator Services upon roaming in cells with restricted services. The UE shall also delete any valid IMS registration performed by the UE prior to roaming in cells with restricted services.

Z.3.2.1 Unsuccessful IMS Registration

Figure Z.3.2.1-1: Unsuccessful RLOS IMS Registration procedure

1. After the UE has obtained IP connectivity (as defined in TS 23.401 [70] for RLOS users), it performs regular IMS registration and includes an indication that this is an RLOS IMS related registration in the Register information.

2. The P-CSCF is a P-CSCF that supports RLOS, and upon receipt of the Register information optionally, and based on operator policy, performs the RLOS APN verification in clause Z.3.3. The P-CSCF based on the RLOS indication and the subscriber being its own subscriber sends the Register information to the I-CSCF.

NOTE 1: The P-CSCF ID for handling RLOS would have been sent to the UE during the Attach procedure which included an explicit indication to access RLOS.

3. The I-CSCF queries HSS for the subscriber S-CSCF. If the I-CSCF determines based on configuration that the received S-CSCF does not support RLOS and since this is an RLOS related registration, the I-CSCF queries HSS again for required S-CSCF capabilities in the user profile. The I-CSCF shall use the returned S-CSCF capability information and in addition configured information about S-CSCF support for RLOS to select a S-CSCF.

NOTE 2: The S-CSCF allocated to a subscriber may be from an old registration that did not expire and is not deleted, or for an RLOS related registration. The S-CSCF support of RLOS is preconfigured in the I-CSCF rather than a capability stored in the user profile within the HSS as otherwise RLOS support would be a requirement for the S-CSCF selection even if the registration is not for RLOS.

4. The I-CSCF sends the Register information to the selected S-CSCF.

5. The S-CSCF fetches the authentication information from HSS.

6. The S-CSCF challenges the UE by sending a 401 response.

7. The I-CSCF forwards the 401 response to the P-CSCF.

8. The P-CSCF forwards the 401 response to the UE.

9. The UE sends a new Register request to the P-CSCF including the authentication information.

10. The P-CSCF optionally and based on operator policy, performs the RLOS APN verification in clause Z.3.3, then sends the Register information to the I-CSCF.

11. The I-CSCF queries HSS for the subscriber S-CSCF and receives the S-CSCF name allocated to the UE. If the I-CSCF determines based on configuration that the received S-CSCF does not support RLOS and since this is an RLOS related registration, the I-CSCF queries HSS again for required S-CSCF capabilities in the user profile. The I-CSCF shall use the returned S-CSCF capability information and in addition configured information about S-CSCF support for RLOS to select a S-CFCF.

12. The I-CSCF sends the Register information to the selected S-CSCF.

13. The S-CSCF validates the UE received authentication information but failed to successfully authenticate the UE. Since this is an RLOS related IMS registration, the S-CSCF creates a temporary "unauthenticated subscriber" registration record for the UE with a default service profile and responds with a 403 response.

14. The I-CSCF sends the 403 response to the P-CSCF.

15. The P-CSCF sends the 403 response to the UE, and creates a temporary "unauthenticated subscriber" registration record for the UE.

Z.3.2.2 Successful IMS Registration

A successful IMS registration is identical to the failed one with following exceptions:

– The S-CSCF successfully authenticates the UE in step 12.

– The S-CSCF tags the UE registration record as being successfully RLOS registered.

– The S-CSCF updates HSS with the S-CSCF name being allocated to the UE, downloads the UE profile from HSS, and stores it. This step is not performed in the previous case.

– The P-CSCF tags the UE registration record as being successfully RLOS registered.

Z.3.3 RLOS APN Verification

The P-CSCF may be configured with a range of IP addresses dedicated to UEs requesting access to RLOS. These addresses, if configured, shall be checked against the contact information received by the P-CSCF Register information at IMS registration.

Furthermore, the P-CSCF shall validate that an incoming IMS registration did indeed use the APN dedicated to RLOS by the access network. To that effect, the P-CSCF shall indicate to the PCRF that the UE requests access to RLOS. The PCRF shall then validate whether the UE uses the APN dedicated to RLOS and otherwise reject the related Rx session with the indication that the UE is not using the APN dedicated to RLOS. Upon reception of such an indication from the PCRF, the P-CSCF shall reject the IMS registration.