Content for TS 23.015 Word version: 19.0.0
2.8 Barring of services in I-WLAN
2.8.1 Change of Barring in the HSS
2.8.2 Barring of interworked packet services in I-WLAN
2.8.3 Barring of W-APN Activation in I-WLAN
2.8.4 Barring of public Internet access in I-WLAN
2.9 Barring of Access to All Except Some Specific DNNs/APNs
2.9.1 General
2.9.2 Application or Change of Barring in the UDM/HSS/HLR
2.9.3 Invocation of Barring
2.8 Barring of services in I-WLAN |R7| p. 25
Barring of interworked services in I-WLAN upon the activation of W-APN shall be performed based on the Operator Determined Barring for Packet Oriented Services as defined in TS 29.234.
2.8.1 Change of Barring in the HSS p. 26
If barring of Packet Oriented Services for I-WLAN is applied to a subscription (or existing barring of Packet Oriented Services is modified or removed) by administrative action in the HSS, the HSS shall update the subscription information accordingly. It is necessary to transfer the updated User Profile Data and subscription information to the 3GPP AAA Server if the subscriber is currently using interworked WLAN services. After downloading the update User Profile Data the 3GPP AAA Server shall initiate re-authorization of the W-APN if there is an existing connection established. The HSS initiated User Profile Data update indication followed by the 3GPP AAA Server download of the updated User Profile Data and re-authorization request is shown in the message flow diagram in Figure 2.8.1-1.
Figure 2.8.1-1: Transfer of updated User profile Data to 3GPP AAA Server
(⇒ copy of original 3GPP image)
(⇒ copy of original 3GPP image)
2.8.2 Barring of interworked packet services in I-WLAN p. 26
The interactions between Operator Determined Barring and W-APN activation/authorization are specified in TS 29.234.
Barring of interworked WLAN packet services is invoked in the 3GPP AAA Server. If the 3GPP AAA Server receives a request for a W-APN activation/authorization which is prohibited by Operator Determined Barring, the 3GPP AAA Server shall return a negative response to the request with an appropriate error code.
Indicative message flow diagram for the handling of Operator Determined Barring of interworked WLAN packet services is given in Figure 2.8.2-1.
Figure 2.8.2-1: Authorization attempt of a interworked packet services when the WLAN-UE is connecting via a PDG located either in Visited or Home PLMN
(⇒ copy of original 3GPP image)
(⇒ copy of original 3GPP image)
2.8.3 Barring of W-APN Activation in I-WLAN p. 27
The interactions between Operator Determined Barring and W-APN activation/authorization are specified in TS 29.234.
Barring of specific W-APN is invoked in the 3GPP AAA Server. If the 3GPP AAA Server receives a request for a W-APN activation/authorization which is prohibited by Operator Determined Barring, the 3GPP AAA Server shall return a negative response to the request with an appropriate error code.
Indicative message flow diagram for the handling of Operator Determined Barring of a specific W-APN is given in Figure 2.8.3-1.
Figure 2.8.3-1: Authorization attempt of a W-APN when the WLAN-UE is connecting via a PDG located either in Visited or Home PLMN
(⇒ copy of original 3GPP image)
(⇒ copy of original 3GPP image)
2.8.4 Barring of public Internet access in I-WLAN p. 27
The interactions between Operator Determined Barring and W-APN activation/authorization are specified in TS 29.234.
Barring of specific public Internet access through a specific W-APN is invoked in the 3GPP AAA Server. If the 3GPP AAA Server receives a request for a W-APN activation/authorization where public Internet access is prohibited by Operator Determined Barring, the 3GPP AAA Server shall return a positive response to the request with appropriate routing policies that allow the PDG filter IP traffic to or from public Internet.
Indicative message flow diagram for the handling of Operator Determined Barring of a specific W-APN is given in Figure 2.8.4-1.
Figure 2.8.4-1: Authorization of a W-APN when public Internet access is barred
(⇒ copy of original 3GPP image)
(⇒ copy of original 3GPP image)
2.9 Barring of Access to All Except Some Specific DNNs/APNs |R11| p. 27
2.9.1 General p. 27
Barring of access to all except some specific DNNs/APNs shall be performed based on the Operator Determined Barring for Packet Oriented Services defined in TS 22.041.
2.9.2 Application or Change of Barring in the UDM/HSS/HLR p. 28
When barring of access to all except some specific DNNs/APNs is invoked in the UDM/HSS/HLR, the UDM/HSS/HLR shall update the subscription profile to contain only the specific non barred DNNs/APNs as the subscribed DNNs/APNs and indicate the updated subscription information to the AMF, SMF, MME or the SGSN.
If the existing default DNN/APN is barred, one of the specific non barred DNN/APNs shall be the new default DNN/APN.
The UDM/HSS/HLR shall disable any other barring of Packet Oriented Services when this function is used.
When barring of access to all except some specific DNNs/APNs is removed in the UDM/HSS/HLR, the UDM/HSS/HLR shall update the subscription profile to restore the originally subscribed DNNs/APNs, including the original default DNN/APN and indicate the updated subscription information to the AMF, SMF, the MME or the SGSN.
For 5GC, if the AMF/SMF/UDM supports the "OdbExemptedDnn" feature, when barring of access to all except some specific DNNs is invoked, the UDM may provision the odbPacketServices together with odbExemptedDnnData which contains those specific DNNs exempted from the barring, without or with spatial and time validity conditions. When barring of access to all except some specific DNNs is removed in the UDM, the UDM removes the odbPacketServices in the AccessAndMobilitySubscriptionData and SessionManagementSubscriptionData.
2.9.3 Invocation of Barring p. 28
When the AMF, the SMF, the MME or the SGSN updates the subscription, and if the subscriber has existing PDN connectivity for DNNs/APNs not in the received list of subscribed DNN/APN, the SMF, MME or the SGSN deactivates the PDU/PDN connectivity for these DNNs/APNs as specified in TS 23.502, TS 23.401 and TS 23.060.
To bar a subscriber from access to all except some specific DNNs/APNs, when the AMF, the MME or the SGSN receives PDU/PDN Connectivity Request message from the UE or the MS, the AMF, the MME or the SGSN shall check whether or not the requested DNN/APN is included in the list of subscribed DNNs/APNs for the subscriber. If included, then the AMF, the MME or the SGSN continues the Attach or UE-requested PDU/PDN connectivity or MS-requested PDP Context Activation procedures as specified in TS 23.502, TS 23.401 and TS 23.060. If not included, then the AMF, the MME or the SGSN rejects the Attach or UE-requested PDU/PDN connectivity or MS-requested PDP Context Activation requests as specified in TS 23.502, TS 23.401 and TS 23.060.
