name: DN-AAA
full_form: Data Network - Authentication, Authorization and Accounting
context: EAP-based secondary authentication and authorization at PDU Session establishment is supported as defined in clause 4.3.2.3. EAP-based secondary authentication and authorization at PDN connection establishment is supported as defined in Annex H. This clause 4.11.0a.7 defines the support of secondary authorization over EPS without EAP-based authentication when one of the UE, the 5GC and the DN does not support (or is configured not to use) the mechanisms defined in Annex H. NOTE 1: This implies that when data connectivity to the DN is initiated as a PDU Session over 5GC it can be subject to EAP based secondary authentication mechanism (see TS 33.501[ Security architecture and procedures for 5G System ]  [15]) whereas, when data connectivity to the same DN is initiated as a PDN connection over EPC it cannot be subject to EAP based secondary authentication mechanism. This discrepancy occurs regardless of whether the data connection is later on moved between EPC and 5GC. NOTE 2: Secondary authorization without authentication means no signalling exchange with the UE. If secondary authentication and authorization has been performed for the PDU Session while the UE was in 5GS and the UE has moved to EPS, the following applies: - DN-AAA re-authorization (without re-authentication signalling) can be performed even when the UE is in EPS, e.g. to provide new parameters from the DN-AAA Server to SMF+PGW-C. - Re-authentication cannot be performed while the UE is in EPS because there is no support of the related signalling in EPS. In case the SMF+PGW-C receives a re-authentication request from the DN-AAA, the SMF+PGW-C informs the DN-AAA Server that the UE is not available for re-authentication at the moment. The SMF+PGW-C should not initiate PDN connection release at this point: the DN-AAA decides the actions to take, based on the reply from SMF+PGW-C and local policy which may also trigger a DN-AAA Server request to release the PDU Session/PDN connection of the UE.
description: The Data Network - Authentication, Authorization and Accounting (DN-AAA) is a network function that plays a crucial role in managing user authentication, authorization, and accounting within the data network. It interacts with other network functions such as SMF+PGW-C to perform secondary authorization and re-authentication for PDU Sessions and PDN connections.
explanation: The DN-AAA is classified as a Network Function because it serves as an intermediary between the data network and the UE, facilitating authentication, authorization, and accounting processes. Its interactions with other network functions like SMF+PGW-C highlight its role in managing user access and connectivity within the 5G system architecture.
section_title: 4.11.0a.7 Interactions with DN-AAA Server
biotag_Context: O,O,O,O,O,O,B-Connection,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,B-Network,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,B-Network,O,O,O,O,O,O,O,O,O,B-Network,O,O,B-Parameter,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,B-Parameter,O,O,O,O,B-Connection,O,O,B-Network,O,O,O,O,O,B-Protocol,O,O,O,O,O,B-Specification,O,O,O,O,O,O,B-Technology,I-Technology,O,O,O,O,O,O,O,O,O,B-Parameter,O,O,O,O,B-Network,O,O,B-Network,O,O,O,O,O,B-Protocol,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,B-Network,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,B-Connection,O,O,O,B-Device,O,O,B-Technology,O,O,B-Device,O,O,O,O,O,O,O,O,B-Network Function,O,O,O,O,O,O,O,O,O,O,B-Device,O,O,O,O,O,O,O,O,O,O,B-Network Function,O,O,O,O,O,O,O,O,O,O,B-Device,O,O,B-Network,O,O,O,O,O,O,O,O,O,O,O,O,O,O,B-Network Function,O,O,O,O,O,O,O,O,B-Network Function,O,O,B-Network Function,O,O,O,B-Device,O,O,O,O,O,O,O,O,O,B-Network Function,O,O,O,B-Network,O,O,O,O,O,O,B-Network Function,O,O,O,O,O,O,O,O,O,O,B-Network Function,O,O,O,O,O,O,O,O,B-Network Function,O,O,O,O,O,B-Connection,O,O,O,O,O
biotag_Description: O,B-Network Function,I-Network Function,I-Network Function,I-Network Function,I-Network Function,I-Network Function,I-Network Function,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,B-Network Function,O,O,O,O,O,O,O,B-Connection,O,O,B-Network,O