COMMUNICATION DEVICE INITIATED QUALITY OF SERVICE WITH SERVICE LEVEL AGREEMENT FOR SUPPORTING QUALITY OF SERVICE MODIFICATION

A method performed by a first network node in a first network is provided for support in a second network of a quality of service, QoS, of the first network for a communication device initiated QoS modification. The method includes checking a QoS profile for a QoS flow of the first network based on a service level agreement, SLA, between the first network and the second network to determine whether the QoS flow is supported by the second network. The method further includes creating a dedicated internet protocol security, IPsec, security association, SA, for handling the QoS flow; and setting a differentiated services code point, DSCP, value of the dedicated IPsec SA according to the SLA. Methods performed by a second network node and by a communication device are also provided.

TECHNICAL FIELD

The present disclosure relates generally to support in a second network of a quality of service, QoS, of a first network for a communication device initiated QoS modification when the communication device is accessing a service of the first network via the second network, and related methods and apparatuses.

BACKGROUND

When a user equipment (UE) is accessing a public land mobile network (PLMN) service via a stand-alone non-public network (SNPN) as specified in clause 5.30.2.7 and Annex D.3 in the third generation partnership project (3GPP) TS 23.501 V17, the SNPN is acting as untrusted non-3GPP access for the PLMN. The UE first registers and establishes a packet data unit (PDU) session and a User Plane in the SNPN. Then UE connects to a non-3GPP interworking function (N3IWF) in the PLMN via the User Plane established in the SNPN, and performs registration and PDU session establishment in the PLMN. All the traffic between UE and PLMN is transported via the User Plane in SNPN, in the form of internet protocol security (IPsec) security association (SA).

SUMMARY

In various embodiments, a method is provided that is performed by a first network node in a first network for support in a second network of a quality of service, QoS, of the first network for a communication device initiated QoS modification when the communication device is accessing a service of the first network via the second network. The method includes checking a QoS profile for a QoS flow of the first network based on a service level agreement, SLA, between the first network and the second network to determine whether the QoS flow is supported by the second network. The method further includes, when the QoS is supported by the second network, creating a dedicated internet protocol security, IPsec, security association, SA, for handling the QoS flow in the second network. The method further includes setting a differentiated services code point, DSCP, value of the dedicated IPsec SA according to the SLA.

In various embodiments, a first network node in a first network is provided. The first network node includes processing circuitry, and at least one memory coupled with the processing circuitry. The memory includes instructions that when executed by the processing circuitry causes the first network node to perform operations for support in a second network of a quality of service, QoS, of the first network for a communication device initiated QoS modification when the communication device is accessing a service of the first network via the second network. The operations include check a QoS profile for a QoS flow of the first network based on a service level agreement, SLA, between the first network and the second network to determine whether the QoS flow is supported by the second network. The operations further include, when the QoS is supported by the second network, create a dedicated internet protocol security, IPsec, security association, SA, for handling the QoS flow in the second network. The operations further include set a differentiated services code point, DSCP, value of the dedicated IPsec SA according to the SLA.

In various embodiments, a first network node in a first network is provided. The first network node is adapted to perform operations for support in a second network of a quality of service, QoS, of the first network for a communication device initiated QoS modification when the communication device is accessing a service of the first network via the second network. The operations include check a QoS profile for a QoS flow of the first network based on a service level agreement, SLA, between the first network and the second network to determine whether the QoS flow is supported by the second network. The operations further include, when the QoS is supported by the second network, create a dedicated internet protocol security, IPsec, security association, SA, for handling the QoS flow in the second network. The operations further include set a differentiated services code point, DSCP, value of the dedicated IPsec SA according to the SLA.

In various embodiments, a computer program including program code to be executed by processing circuitry of a first network node in a first network is provided. The program code causes the first network node to perform operations for support in a second network of a quality of service, QoS, of the first network for a communication device initiated QoS modification when the communication device is accessing a service of the first network via the second network. The operations include check a QoS profile for a QoS flow of the first network based on a service level agreement, SLA, between the first network and the second network to determine whether the QoS flow is supported by the second network. The operations further include, when the QoS is supported by the second network, create a dedicated internet protocol security, IPsec, security association, SA, for handling the QoS flow in the second network. The operations further include set a differentiated services code point, DSCP, value of the dedicated IPsec SA according to the SLA.

In various embodiments, a computer program product including a non-transitory storage medium including program code to be executed by processing circuitry of a first network node in a first network is provided. Execution of the program code causes the first network node to perform operations for support in a second network of a quality of service, QoS, of the first network for a communication device initiated QoS modification when the communication device is accessing a service of the first network via the second network. The operations include check a QoS profile for a QoS flow of the first network based on a service level agreement, SLA, between the first network and the second network to determine whether the QoS flow is supported by the second network. The operations further include, when the QoS is supported by the second network, create a dedicated internet protocol security, IPsec, security association, SA, for handling the QoS flow in the second network. The operations further include set a differentiated services code point, DSCP, value of the dedicated IPsec SA according to the SLA.

In various embodiments, a method is provided that is performed by a second network node in a second network for support in the second network of a quality of service, QoS, of a first network for a communication device initiated QoS modification when the communication device is accessing a service of the first network via the second network. The method includes receiving, from the communication device, a differentiated services code point, DSCP, value and a corresponding set of QoS parameters describing a QoS flow of the first network. The method further includes, responsive to the receiving, determining whether the DSCP value and the corresponding set of QoS parameters describing the QoS flow is included in a service level agreement, SLA, between the first network and the second network.

In various embodiments a second network node in a second network is provided. The second network node includes processing circuitry, and at least one memory coupled with the processing circuitry. The memory includes instructions that when executed by the processing circuitry causes the second network node to perform operations for support in the second network of a quality of service, QoS, of a first network for a communication device initiated QoS modification when the communication device is accessing a service of the first network via the second network. The operations include receive, from the communication device, a differentiated services code point, DSCP, value and a corresponding set of QoS parameters describing a QoS flow of the first network. The operations further include, responsive to the receiving, determine whether the DSCP value and the corresponding set of QoS parameters describing the QoS flow is included in a service level agreement, SLA, between the first network and the second network.

In various embodiments, a second network node in a second network is provided. The second network node is adapted to perform operations for support in the second network of a quality of service, QoS, of a first network for a communication device initiated QoS modification when the communication device is accessing a service of the first network via the second network. The operations include receive, from the communication device, a differentiated services code point, DSCP, value and a corresponding set of QoS parameters describing a QoS flow of the first network. The operations further include, responsive to the receiving, determine whether the DSCP value and the corresponding set of QoS parameters describing the QoS flow is included in a service level agreement, SLA, between the first network and the second network.

In various embodiments, a computer program including program code to be executed by processing circuitry of a second network node in a second network is provided. The program code causes the second network node to perform operations for support in the second network of a quality of service, QoS, of a first network for a communication device initiated QoS modification when the communication device is accessing a service of the first network via the second network. The operations include receive, from the communication device, a differentiated services code point, DSCP, value and a corresponding set of QoS parameters describing a QoS flow of the first network. The operations further include, responsive to the receiving, determine whether the DSCP value and the corresponding set of QoS parameters describing the QoS flow is included in a service level agreement, SLA, between the first network and the second network.

In various embodiments, a computer program product including a non-transitory storage medium including program code to be executed by processing circuitry of a second network node in a second network is provided. Execution of the program code causes the second network node to perform operations for support in the second network of a quality of service, QoS, of a first network for a communication device initiated QoS modification when the communication device is accessing a service of the first network via the second network. The operations include receive, from the communication device, a differentiated services code point, DSCP, value and a corresponding set of QoS parameters describing a QoS flow of the first network. The operations further include, responsive to the receiving, determine whether the DSCP value and the corresponding set of QoS parameters describing the QoS flow is included in a service level agreement, SLA, between the first network and the second network.

In various embodiments, a method is provided that is performed by a communication device for support in a second network of a quality of service, QoS, of a first network for a QoS modification initiated by the communication device when the communication device is accessing a service of the first network via the second network. The method includes receiving, from a first network node in the first network, an instruction to set a differentiated services code point, DSCP, value of a dedicated IPsec SA for the service of the first network. The instruction based on a mapping in a service level agreement, SLA, between the DSCP value of the dedicated IPsec SA and a set of QoS parameters for the service of the first network. The method further includes adding the DSCP value to a packet filter when the communication device initiates the QoS modification in the second network.

In various embodiments a communication device is provided. The communication device includes processing circuitry, and at least one memory coupled with the processing circuitry. The memory includes instructions that when executed by the processing circuitry causes the communication device to perform operations for support in a second network of a quality of service, QoS, of a first network for a QoS modification initiated by the communication device when the communication device is accessing a service of the first network via the second network. The operations include receive, from a first network node in the first network, an instruction to set a differentiated services code point, DSCP, value of a dedicated IPsec SA for the service of the first network. The instruction based on a mapping in a service level agreement, SLA, between a DSCP value of the dedicated IPsec SA and a set of QoS parameters for the service of the first network. The operations further include add the DSCP value to a packet filter when the communication device initiates the QoS modification in the second network.

In various embodiments, a communication device is provided. The communication device is adapted to perform operations for support in a second network of a quality of service, QoS, of a first network for a QoS modification initiated by the communication device when the communication device is accessing a service of the first network via the second network. The operations include receive, from a first network node in the first network, an instruction to set a differentiated services code point, DSCP, value of a dedicated IPsec SA for the service of the first network. The instruction based on a mapping in a service level agreement, SLA, between a DSCP value of the dedicated IPsec SA and a set of QoS parameters for the service of the first network. The operations further include add the DSCP value to a packet filter when the communication device initiates the QoS modification in the second network.

In various embodiments, a computer program including program code to be executed by processing circuitry of a communication device is provided. The program code causes the communication device to perform operations for a QoS modification initiated by the communication device when the communication device is accessing a service of the first network via the second network. The operations include receive, from a first network node in the first network, an instruction to set a differentiated services code point, DSCP, value of a dedicated IPsec SA for the service of the first network. The instruction based on a mapping in a service level agreement, SLA, between a DSCP value of the dedicated IPsec SA and a set of QoS parameters for the service of the first network. The operations further include add the DSCP value to a packet filter when the communication device initiates the QoS modification in the second network.

In various embodiments, a computer program product including a non-transitory storage medium including program code to be executed by processing circuitry of a communication device is provided. Execution of the program code causes the communication device to perform operations for a QoS modification initiated by the communication device when the communication device is accessing a service of the first network via the second network. The operations include receive, from a first network node in the first network, an instruction to set a differentiated services code point, DSCP, value of a dedicated IPsec SA for the service of the first network. The instruction based on a mapping in a service level agreement, SLA, between a DSCP value of the dedicated IPsec SA and a set of QoS parameters for the service of the first network. The operations further include add the DSCP value to a packet filter when the communication device initiates the QoS modification in the second network.

For user equipment initiated QoS modification, a requested QoS rule may be based on a network node (e.g., N3IWF) internet protocol (IP) address and a security parameter index (SPI) associated with an IPsecSA. The SPI may be dynamically allocated at the UE/network node side when establishing the IPsecSA, and may not be used for the network to determine if QoS request from the UE is authorized or not. Potential advantages provided by various embodiments of the present disclosure may include that a network that receives the UE request may be able to determine if the request is authorized, or not, directly according to a differentiated services code point (DSCP) value in the QoS rule and a service level agreement (SLA).

DETAILED DESCRIPTION

The following description presents various embodiments of the disclosed subject matter. These embodiments are presented as teaching examples and are not to be construed as limiting the scope of the disclosed subject matter. For example, certain details of the described embodiments may be modified, omitted, or expanded upon without departing from the scope of the described subject matter. The term “network node” is used in a non-limiting manner and, as explained below, can refer without limitation to any type of network node in a telecommunications network performing support in a second network of a QoS of a first network for a communication device initiated QoS modification including, without limitation, a PLMN N3IWF node, an SNPN session management function (SMF) node, and/or an SNPN policy control function (PCF) node. As used herein, “first network” is used in a non-limiting manner and, as explained below, can refer to any type of network with respect to a second network that is an overlay network or an underlay network, respectively (e.g., a PLMN or a SNPN, respectively). As used herein, “second network” is used in a non-limiting manner and as explained below, can refer to any type of network with respect to the first network that is an underlay network or an overlay network, respectively (e.g., a SNPN or a PLMN, respectively).

The following explanation of potential problems with some approaches is a present realization as part of the present disclosure and is not to be construed as previously known by others.

In some approaches, e.g., in 3GPP TS 23.501 V17 clause 5.30.27 and Annex D.3, in order to differentiate the QoS for the IPsec SA in SNPN, there two mechanisms are specified. One mechanism is a network initiated QoS modification, where the two networks based on service level agreement (SLA) decide what differentiated services code point (DSCP) marking will be used on the IPsec SA and what are the corresponding QoS parameters to be used when the internet protocol (IP) header of the IPsec SA is marked with this DSCP value. A second mechanism is a UE initiated QoS modification, relying on the UE to request a proper QoS from the SNPN for handling the IPsec SA. The requested QoS in the SNPN is the QoS UE receives from the PLMN.

In another approach, the same principle applies when a UE is accessing a SNPN service via a PLMN as specified, e.g., in clause 5.30.2.8 and Annex D.3 in 3GPP TS 23.501 V17.

In some approaches, for a UE initiated QoS modification, the requested QoS rule is based on a N3IWF IP address and the SPI associated with the IPsec SA. The SPI is dynamically allocated at the UE/N3IWF side when establishing the IPsec SA, and may not be used for the network to determine if such QoS request from the UE is authorized or not.

Thus, in such approaches, a UE-initiated QoS mechanism to support QoS differentiation when the UE is accessing a SNPN via a PLMN, or vice versa, does not have the SLA support. As a consequence, the network that receives the UE request may not know how to react on the UE request, e.g., whether or not to allocate the resources for the UE.

Various embodiments of the present disclosure may provide solutions to these and other potential problems. In various embodiments of the present disclosure, a DSCP value is introduced that is used on the IP header of the IPsec SA as extra information in the QoS rule requested by the UE. As a consequence, the DSCP value can be used by the network to determine if the QoS requested by UE can be authorized or not, according to a SLA.

Potential advantages provided by various embodiments of the present disclosure may include that the network that receives the UE request is able to determine if such request can be authorized or not according to the DSCP value in the QoS rule and the SLA.

FIG.1is a schematic diagram illustrating an example of a first network (e.g., PLMN101), a second network (e.g., SNPN103), and a communication device (e.g., UE107). PLMN101includes N3IWF node105, access mobility function (AMF) node113, SMF node115, user plane function node121, data network123and 3GPP access125. SNPN103includes next generation (NG) radio access network (RAN) node111, SMF node109, AMF node117, UPF node119and policy control function (PCF) node121.

FIG.2is a signalling diagram of methods of a first network node, a second network node and a communication device, respectively, in accordance with some embodiments of the present disclosure.FIG.2illustrates logic when UE107is accessing a first network (e.g., PLMN101) service via a second network (e.g., SNPN103). In other embodiments, the same logic applies when UE107is accessing an SNPN service via a PLMN.

Referring to operation201ofFIG.2, UE107registers and establishes a PDU Session in SNPN103(e.g., the second network).

At operation203, UE107registers in a PLMN (e.g., the first network), via User Plane IP connectivity in SNPN103.

At operation205, UE107requests to establish a PDU session in PLMN101.

At operation207, SMF115in PLMN101accepts the UE107request via an N2 interface message sent to N3IWF105. The N2 message to N3IWF105includes a QoS profile(s) and corresponding QoS flow identifier (QFI), PDU session identifier, etc.

At operation209, a SLA is enabled for the UE-initiated QoS. N3IWF105in PLMN101checks the QoS profile for the QoS Flow with the SLA set up with SNPN101and determines if such QoS Flow can be supported by SNPN101as well. If yes, then N3IWF105decides to create a dedicated IPsec SA for handling this QoS Flow, and sets the DSCP value of this IPsec SA according to the SLA between the PLMN101and the SNPN103. The SLA is configured in N3IWF105, in PLMN101and in SMF109and/or PCF121in SNPN101.

Referring now to operation211, UE107and N3IWF105proceed with the User Plane IPSec SA establishment.

At operation213, UE107receives a non-access stratum (NAS) message PDU Session Establishment Accept, including the QoS Flow description from the PLMN SMF115.

At operation215, UE107initiates a request (e.g., PDU Session Modification Request) with SNPN SMF109. In the request, UE107requests the QoS rule with N3IWF105IP address, SPI and DSCP as a packet filter, and a set of QoS parameters to describe the QoS flow (“QoS Flow level QoS parameters”) which UE107receives from PLMN SMF115in operation213. Operation215is in contrast to the approach discussed above in the existing UE-initiated QoS mechanism described in clause 5.30.2.7 and clause 5.30.2.8 in 3GPP TS 23.501, in which a UE requests only a N3IWF IP address and SPI as a packet filter. In various embodiments of the present disclosure, by supporting SLA, a UE receives DSCP information (e.g., a DSCP value) from a first network node (e.g., N3IWF105) in a first network (e.g., PLMN101) at operation211and passes such information to a second network node (e.g., SMF109/PCF121) in a second network (e.g., SNPN103), thus, facilitating the two networks to cooperate on how to support the QoS agreed in SLA.

In various embodiments of the present disclosure, SMF109/PCF121in SNPN103is configured with the SLA between the PLMN and the SNPN.

At operation217, or alternatively at operation219, a second network node (e.g., PCF121in operation217or SMF109in operation219) checks if the DSCP value (which is from the UE107request) and the QoS Flow level QoS parameters is included in the SLA between the second network (e.g., SNPN103) and the first network (e.g., PLMN101). If yes, the second network node authorizes the UE107request.

At operation221, UE107and SMF109proceed with the PDU Session Modification, and establish a QoS Flow in the second network (e.g., SNPN103) supporting the IPsec SA with the proper QoS.

In some embodiments, the same logic and operations described above apply to UE initiated QoS when accessing SNPN services via a PLMN by swapping the SNPN and PLMN discussed above with reference toFIG.2.

FIG.3is a block diagram illustrating elements of a communication device300(also referred to as a user equipment, UE, a user equipment node/terminal/device, a mobile terminal, a mobile communication terminal, a wireless device, a wireless communication device, a wireless terminal, mobile device, a wireless communication terminal, etc.) configured to provide wireless communication according to embodiments of the present disclosure. As shown, communication device may include an antenna307, and transceiver circuitry301(also referred to as a transceiver) including a transmitter and a receiver configured to provide uplink and downlink radio communications with a base station(s) of a radio access network (e.g., PLMN101, SNPN103, etc.). Communication device may also include processing circuitry303(also referred to as a processor) coupled to the transceiver circuitry, and memory circuitry305(also referred to as memory) coupled to the processing circuitry. The memory circuitry305may include computer readable program code that when executed by the processing circuitry303causes the processing circuitry to perform operations according to embodiments disclosed herein. According to other embodiments, processing circuitry303may be defined to include memory so that separate memory circuitry is not required. Communication device may also include an interface (such as a user interface) coupled with processing circuitry303, and/or communication device may be incorporated in a vehicle.

As discussed herein, operations of communication device may be performed by processing circuitry303and/or transceiver circuitry301. For example, processing circuitry303may control transceiver circuitry301to transmit communications through transceiver circuitry301over a radio interface to a radio access network node (also referred to as a base station) and/or to receive communications through transceiver circuitry301from a RAN node over a radio interface. Moreover, modules may be stored in memory circuitry305, and these modules may provide instructions so that when instructions of a module are executed by processing circuitry303, processing circuitry303performs respective operations (e.g., operations discussed herein with respect to example embodiments relating to communication devices). According to some embodiments, a communication device300and/or an element(s)/function(s) thereof may be embodied as a virtual node/nodes and/or a virtual machine/machines.

FIG.4is a block diagram illustrating elements of a first network node (e.g., a PLMN N3IWF node, a SNPN N3IWF, etc.) of a first network (e.g., a PLMN or a SNPN) configured to provide cellular communication according to embodiments of the present disclosure. As shown, the first network node may include network interface circuitry407(also referred to as a network interface) configured to provide communications with other nodes of the first network and/or a second network, and/or a radio access network RAN. The first network node may also include a processing circuitry403(also referred to as a processor) coupled to the network interface circuitry, and memory circuitry405(also referred to as memory) coupled to the processing circuitry. The memory circuitry405may include computer readable program code that when executed by the processing circuitry403causes the processing circuitry to perform operations according to embodiments disclosed herein. According to other embodiments, processing circuitry403may be defined to include memory so that a separate memory circuitry is not required.

As discussed herein, operations of the first network node may be performed by processing circuitry403and/or network interface circuitry407. For example, processing circuitry403may control network interface circuitry407to transmit communications through network interface circuitry407to one or more other network nodes and/or to receive communications through network interface circuitry from one or more other network nodes. Moreover, modules may be stored in memory405, and these modules may provide instructions so that when instructions of a module are executed by processing circuitry403, processing circuitry403performs respective operations (e.g., operations discussed herein with respect to example embodiments relating to first network nodes). According to some embodiments, first network node400and/or an element(s)/function(s) thereof may be embodied as a virtual node/nodes and/or a virtual machine/machines.

FIG.5is a block diagram illustrating elements of a second network node (e.g., a SNPN SMF, a SNPN PCF, a PLMN SMF, a PLMN PCF, etc.) of a second network (e.g., a SNPN or a PLMN) configured to provide cellular communication according to embodiments of the present disclosure. As shown, the second network node may include network interface circuitry507(also referred to as a network interface) configured to provide communications with other nodes of the second network and/or a first network, and/or a radio access network RAN. The second network node may also include a processing circuitry503(also referred to as a processor) coupled to the network interface circuitry, and memory circuitry505(also referred to as memory) coupled to the processing circuitry. The memory circuitry505may include computer readable program code that when executed by the processing circuitry503causes the processing circuitry to perform operations according to embodiments disclosed herein. According to other embodiments, processing circuitry503may be defined to include memory so that a separate memory circuitry is not required.

As discussed herein, operations of the second network node may be performed by processing circuitry503and/or network interface circuitry507. For example, processing circuitry503may control network interface circuitry507to transmit communications through network interface circuitry507to one or more other network nodes and/or to receive communications through network interface circuitry from one or more other network nodes. Moreover, modules may be stored in memory505, and these modules may provide instructions so that when instructions of a module are executed by processing circuitry503, processing circuitry503performs respective operations (e.g., operations discussed herein with respect to example embodiments relating to second network nodes). According to some embodiments, second network node500and/or an element(s)/function(s) thereof may be embodied as a virtual node/nodes and/or a virtual machine/machines.

Now that the operations of the various components have been described, operations specific to a first network node (e.g., node105implemented using the structure of the block diagram ofFIG.4) will now be discussed with reference to the flow charts ofFIGS.6-7according to some embodiments of inventive concepts. For example, modules may be stored in memory405ofFIG.4, and these modules may provide instructions so that when the instructions of a module are executed by respective first network node processing circuitry403, processing circuitry403performs respective operations of the flow charts ofFIGS.6-7.

Each of the operations described inFIGS.6-7can be combined and/or omitted in any combination with each other, and it is contemplated that all such combinations fall within the spirit and scope of this disclosure.

Referring first toFIG.6, a method is performed by a first network node (e.g.,105,400) in a first network (e.g.,101,103) for support in a second network (e.g.,103,101) of a quality of service, QoS, of the first network for a communication device (e.g.,107) initiated QoS modification when the communication device is accessing a service of the first network via the second network. The method includes checking (601) a QoS profile for a QoS flow of the first network based on a service level agreement, SLA, between the first network and the second network to determine whether the QoS flow is supported by the second network. The method further includes, when the QoS is supported by the second network, creating (603) a dedicated internet protocol security, IPsec, security association, SA, for handling the QoS flow in the second network. The method further includes setting (605) a differentiated services code point, DSCP, value of the dedicated IPsec SA according to the SLA.

In some embodiments, the SLA is configured in the first network node in the first network and in a second network node in the second network.

In some embodiments, the SLA includes a mapping between the DSCP value of the dedicated IPsec SA and a set of QoS parameters for the service of the first network.

Referring now toFIG.7, in some embodiments, the method further includes instructing (705) the communication device to set the DSCP value of the dedicated IPsec SA for the service of the first network based on the mapping in the SLA between the DSCP value of the dedicated IPsec SA and a set of QoS parameters for the service of the first network.

In some embodiments, the method further includes signalling (701) a message to the communication device including a set of QoS parameters describing the QoS flow. The method further includes, responsive to the request, signalling (703) a response to the communication device that includes the instruction to set the DSCP value.

In some embodiments, the setting a DSCP value includes marking on a plurality of DSCP bits in an internet protocol, IP, header of the dedicated IPsec SA.

In some embodiments, the first network is an overlay network and the second network is an underlay network.

Various operations from the flow chart ofFIG.7may be optional with respect to some embodiments of a method performed by a first network node, and related methods. For example, operations of blocks701,703,705ofFIG.7may be optional.

Operations specific to a second network node (e.g., SMF node109or PCF node121implemented using the structure of the block diagram ofFIG.5) will now be discussed with reference to the flow charts ofFIGS.8-9according to some embodiments of inventive concepts. For example, modules may be stored in memory505ofFIG.5, and these modules may provide instructions so that when the instructions of a module are executed by respective first network node processing circuitry503, processing circuitry503performs respective operations of the flow charts ofFIGS.8-9.

Each of the operations described inFIGS.8-9can be combined and/or omitted in any combination with each other, and it is contemplated that all such combinations fall within the spirit and scope of this disclosure.

Referring first toFIG.8, a method is provided that is performed by a second network node (e.g.,109,121,500) in a second network (e.g.,103,101) for support in the second network of a quality of service, QoS, of a first network (e.g.,101,103) for a communication device (e.g.,107) initiated QoS modification when the communication device is accessing a service of the first network via the second network. The method includes receiving (801), from the communication device, a differentiated services code point, DSCP, value and a corresponding set of QoS parameters describing a QoS flow of the first network. The method further includes, responsive to the receiving, determining (803) whether the DSCP value and the corresponding set of QoS parameters describing the QoS flow is included in a service level agreement, SLA, between the first network and the second network.

Referring now toFIG.9, in some embodiments, the method further includes authorizing (901) the request of the communication device to modify the QoS to access the service when the DSCP value and the corresponding set of QoS parameters describing the QoS flow is included in the SLA.

In some embodiments, the SLA is configured in the second network node in the second network and in a first network node in the first network.

In some embodiments, the SLA includes a mapping between the DSCP value of a dedicated internet security, IPsec, security association, SA, and a set of QoS parameters for the service of the first network.

In some embodiments, the determining (803) is based on an internet protocol, IP, address for the first network node and the mapping in the SLA.

In some embodiments, the method further includes installing (903) a policy and charging control, PCC, rule on the second network node to create a new QoS flow in the second network using the set QoS parameters describing the QoS flow of the first network.

In some embodiments, the method further includes establishing (905) the QoS flow in the second network supporting the dedicated IPsecSA with the QoS of the first network.

In some embodiments, the first network is an overlay network and the second network is an underlay network.

Various operations from the flow chart ofFIG.9may be optional with respect to some embodiments of a method performed by a second network node, and related methods. For example, operations of blocks901,903,905FIG.9may be optional.

Operations of a communication device (e.g., communication device107implemented using the structure of the block diagram ofFIG.3) will now be discussed with reference to the flow charts ofFIGS.10-11according to some embodiments of inventive concepts. For example, modules may be stored in memory305ofFIG.3, and these modules may provide instructions so that when the instructions of a module are executed by respective communication device processing circuitry303, processing circuitry303performs respective operations of the flow charts.

Each of the operations described inFIGS.10-11can be combined and/or omitted in any combination with each other, and it is contemplated that all such combinations fall within the spirit and scope of this disclosure.

Referring first toFIG.10, a method is provided that is performed by a communication device (e.g.,107,300) for support in a second network (e.g.,103,101) of a quality of service, QoS, of a first network (e.g.,101,103) for a QoS modification initiated by the communication device when the communication device is accessing a service of the first network via the second network. The method includes receiving (1001), from a first network node in the first network, an instruction to set a differentiated services code point, DSCP, value of a dedicated IPsec SA for the service of the first network. The instruction is based on a mapping in a service level agreement, SLA, between the DSCP value of the dedicated IPsec SA and a set of QoS parameters for the service of the first network. The method further includes adding (1003) the DSCP value to a packet filter when the communication device initiates the QoS modification in the second network.

In some embodiments, the SLA is configured in the first network node in the first network and in a second network node in the second network.

In some embodiments, the method further includes receiving (1101) a message from the first network node including a set of QoS parameters describing a QoS flow.

In some embodiments, the set a DSCP value comprises marking on a plurality of DSCP bits in an internet protocol, IP, header of the dedicated IPsec SA.

In some embodiments, the method further includes signalling (1103) to the second network node a request for a QoS flow based on the set of QoS parameters describing the QoS flow. The QoS rule of the requested QoS flow includes the packet filter having an internet protocol, IP, address for the first network node, a security parameter index, SPI, and the DSCP value associated with the dedicated IPSec SA flow.

In some embodiments, the method further includes establishing (1105) the QoS flow in the second network supporting the dedicated IPsecSA with the QoS of the first network.

In some embodiments, the first network is an overlay network and the second network is an underlay network.

Various operations from the flow chart ofFIG.11may be optional with respect to some embodiments of a method performed by a communication device, and related methods. For example, operations of blocks1101,1103,1105ofFIG.11may be optional.

Many variations and modifications can be made to the embodiments without substantially departing from the principles of the present inventive concepts. All such variations and modifications are intended to be included herein within the scope of present inventive concepts. Accordingly, the above disclosed subject matter is to be considered illustrative, and not restrictive, and the examples of embodiments are intended to cover all such modifications, enhancements, and other embodiments, which fall within the spirit and scope of present inventive concepts. Thus, to the maximum extent allowed by law, the scope of present inventive concepts is to be determined by the broadest permissible interpretation of the present disclosure including the examples of embodiments and their equivalents, and shall not be restricted or limited by the foregoing detailed description.