Device authentication without subscription using external credentials

ChangeBridge: Patent Apps - Networking (H04L)

Published April 2nd, 2026

Detected April 3rd, 2026

Summary

USPTO published patent application US20260095446A1 disclosing methods and systems for authenticating user equipment (UE) without mobile network subscription using external credentials. The invention involves an authentication proxy that communicates with service provider AAA servers to derive master session keys for secure non-public network access. Inventors: Andreas Kunz, Sheeba Backia Mary Baskaran, Genadi Velev.

View original document View source feed page

What changed

This patent application discloses an authentication method enabling devices lacking mobile network subscriptions to access non-public networks (NPN) via external credentials. The authentication proxy receives registration requests from user equipment, identifies the service provider, transmits authentication messages to the provider's AAA server, and derives security keys upon successful authentication using the returned master session key (MSK).

This is a published patent application, not a regulatory requirement. Technology companies and telecommunications firms developing network authentication solutions may review the disclosed methods for technical understanding or potential licensing considerations. No compliance actions, deadlines, or penalties are associated with this document.

Source document (simplified)

← USPTO Patent Applications

AUTHENTICATING A DEVICE NOT HAVING A SUBSCRIPTION IN A NETWORK

Application US20260095446A1 Kind: A1 Apr 02, 2026

Inventors

Andreas Kunz, Sheeba Backia Mary Baskaran, Genadi Velev

Abstract

Apparatuses, methods, and systems are disclosed for accessing a non-public network (NPN) using external credentials. One method of an authentication proxy includes receiving a registration request for a user equipment (UE), wherein the UE does not have a subscription with the mobile communication network; identifying a service provider of the UE; transmitting an authentication message to an authentication, authorization and accounting (AAA) server of the identified service provider; receiving an authentication response from the AAA server in response to successful authentication of the UE, the authentication response comprising a master session key (MSK); and deriving a set of security keys using the MSK.