Architecture#1: IoT/M2M Local Breakout

No UICC
1.2M2ProvM2S

Provisioning
Operator: None
Others: As per app business logi

M2M Server

M2M Provisioning

1.1UeM2Prov

Mobile
Backhaul
SAE-GW

eNodeB

HSS/Registers

1.5UEM2S

1.4UE-Rad

M2M Server

1.6UEHSS

Mobile
Backhaul
SAE-GW

eNodeB

Authentication
Operator: Radio fingerprinting
to minimize fraud
E2e: If required by application

HSS/Registers

1.8UE-M2

1.9UE-SAEGW
1.7UE-Rad

Nokia Solutions and Networks 2014

<Change information classification in footer>

Data Flow
Breakout at edge or core

M2M Server

eNodeB

Mobile
Backhaul
SAE-GW

HSS/Registers

Architecture#2: Special HSS

UICC is present; but all devices have same secret / identity?
2.2M2ProvM2S

M2M Server

M2M Provisioning

2.1UeM2Prov

2.3M2ProvHSS

Mobile
Backhaul
SAE-GW

eNodeB

Provisioning
Operator: None
Others: As per app business logi

HSS/Registers

2.5UEM2S

2.4UE-Rad

M2M Server

2.6UEHSS

Mobile
Backhaul
SAE-GW

eNodeB

Authentication
Operator: 3GPP
E2e: If required by application

HSS/Registers

2.8UE-M2

2.9UE-SAEGW
2.7UE-Rad

M2M Server

Nokia Solutions and Networks 2014

<Change information classification in footer>

eNodeB

Data Flow
3GPP

Mobile
Backhaul
SAE-GW

HSS/Registers

Architecture#3: Third Party Authentication

UICC not present; auth goes over eNodeB up to Weightless GW, non3GPP security architecture offered from operator n/w, end-2-end
authentication
3.2M2ProvM2S
3.3 M2ProvMNO
M2M Server

M2M Provisioning

3.1UeM2Prov

Mobile
Backhaul
SAE-GW

eNodeB

M2M GW

Provisioning
Operator: Trust Setup/onboarding
(
as M2M-2-MNO)
Others: As per app business logic

3.5M2S-MME
M2M Server

3.4UE-Rad

Authentication
Operator: as per protocol chosen
E2e: As per protocol chosen

3.6UE-MME
Mobile
Backhaul
MME

eNodeB

M2M GW(Authentication)

3.8UE-M2

M2M Server

3.7UE-Rad
3

Nokia Solutions and Networks 2014

<Change information classification in footer>

eNodeB

3.9UE-SAEGW

Mobile
Backhaul
SAE-GW

M2M GW (Data)

Data Flow
3GPP

Assumptions

Nokia Solutions and Networks 2014

<Change information classification in footer>

Architecture#3: Third Party Authentication

UICC not present; auth goes over eNodeB up to Weightless GW, non3GPP security architecture offered from operator n/w, end-2-end
authentication
3.2M2ProvM2S
3.3 M2ProvMNO
M2M Server

M2M Provisioning

3.1UeM2Prov

Mobile
Backhaul
SAE-GW

eNodeB

M2M GW

Provisioning
Operator: Trust Setup/onboarding
(
as M2M-2-MNO)
Others: As per app business logic

3.5M2SGW
M2M Server

3.4UE-Rad

Authentication
Operator: as per protocol chosen
E2e: As per protocol chosen

3.6eNB-M2MG
Mobile
Backhaul
MME

eNodeB

M2M Server

3.7UE-Rad
5

3.8UE-M2

Nokia Solutions and Networks 2014

<Change information classification in footer>

eNodeB

M2M GW(Authentication)

3.9UE-SAEGW

Mobile
Backhaul
SAE-GW

M2M GW (Data)

Data Flow
3GPP

Architecture#4: Nokia Global IoT platform acts a

MVNO/HomeNetwork
UICC is present
4.2M2ProvM2S

M2M Server

M2M Provisioning

4.1UeM2Prov

Visited

Home

4.3M2ProvHSS

Mobile
Backhaul
SAE-GW

eNodeB

Provisioning
Operator: 3GPP
Others: As per app business logi

HSS/Registers

4.5UEM2S

4.4UE-Rad

M2M Server

4.6UEHSS

Mobile
Backhaul
SAE-GW

eNodeB

Authentication
Operator: 3GPP
E2e: If required by application

HSS/Registers

4.8UE-M2

4.9UE-SAEGW
4.7UE-Rad

M2M Server

Nokia Solutions and Networks 2014

<Change information classification in footer>

eNodeB

Data Flow
3GPP

Mobile
Backhaul
SAE-GW

HSS/Registers

Architecture#1: IoT/M2M Local Breakout

1.2M2ProvM2S

No UICC

Provisioning
Operator: None
Others: As per app business logi

M2M Server

M2M Provisioning

1.1UeM2Prov

Mobile
Backhaul
SAE-GW

eNodeB

HSS/Registers

Architecture#2: Special HSS

UICC is present; but all devices have same secret / identity?
2.2M2ProvM2S

M2M Server

M2M Provisioning

2.1UeM2Prov

2.3M2ProvHSS

Mobile
Backhaul
eNodeB

Nokia Solutions and Networks 2014

<Change information classification in footer>

eNodeB

SAE-GW

HSS/Registers

Provisioning
Operator: None
Others: As per app business logi

Architecture#3: Weightless like overlay

UICC may be present; non-3GPP security architecture offered from
3.2M2ProvM2S
operator n/w
M2M Server

M2M Provisioning

3.1UeM2Prov

Provisioning
Operator: one time; not per devi
Others: As per app business logic

Mobile
Backhaul
SAE-GW

eNodeB

Weightless GW

Architecture#4: Nokia Global IoT platform acts a

MVNO/HomeNetwork
UICC is present
4.2M2ProvM2S

Visited

Home

M2M Server 4.3M2ProvHSS

M2M Provisioning

4.1UeM2Prov

Mobile
Backhaul
eNodeB

Nokia Solutions and Networks 2014

<Change information classification in footer>

SAE-GW

HSS/Registers

Provisioning
Operator: 3GPP
Others: As per app business logi

Architecture#1: IoT/M2M Local Breakout

No UICC

1.5UEM2S

1.4UE-Rad

M2M Server

1.6UEHSS

Mobile
Backhaul
SAE-GW

eNodeB

Authentication
Operator: Radio fingerprinting
to minimize fraud
E2e: If required by application

HSS/Registers

Architecture#2: Special HSS

UICC is present; but all devices have same secret / identity?
2.5UEM2S

2.4UE-Rad

M2M Server

2.6UEHSS

Mobile
Backhaul
eNodeB

11

Nokia Solutions and Networks 2014

<Change information classification in footer>

SAE-GW

HSS/Registers

Authentication
Operator: 3GPP
E2e: If required by application

Architecture#3: Weightless like overlay

UICC may be present; non-3GPP security architecture offered from
operator n/w
3.5M2SGW
3.4UE-Rad

M2M Server

3.6UEGW

Mobile
Backhaul
SAE-GW

eNodeB

Authentication
Operator: as per protocol chosen
E2e: As per protocol chosen

Weightless GW

Architecture#4: Nokia Global IoT platform acts a

MVNO/HomeNetwork
UICC is present
4.5UEM2S

4.4UE-Rad

M2M Server

4.6UEHSS

Mobile
Backhaul
eNodeB

12

Nokia Solutions and Networks 2014

<Change information classification in footer>

SAE-GW

HSS/Registers

Authentication
Operator: 3GPP
E2e: If required by application

Architecture#1: IoT/M2M Local Breakout

No UICC

1.8UE-M2

1.9UE-SAEGW
1.7UE-Rad

Data Flow
Breakout at edge or core

M2M Server

Mobile
Backhaul
SAE-GW

eNodeB

HSS/Registers

Architecture#2: Special HSS

UICC is present; but all devices have same secret / identity?
2.8UE-M2

2.9UE-SAEGW
2.7UE-Rad

M2M Server

Data Flow
3GPP

Mobile
Backhaul
eNodeB

14

Nokia Solutions and Networks 2014

<Change information classification in footer>

SAE-GW

HSS/Registers

Architecture#3: Weightless like overlay

UICC may be present; non-3GPP security architecture offered from
3.8UE-M2
operator n/w
3.9UE-SAEGW
3.7UE-Rad

M2M Server

Data Flow
3GPP

Mobile
Backhaul
SAE-GW

eNodeB

Weightless GW

Architecture#4: Nokia Global IoT platform acts a

MVNO/HomeNetwork
UICC is present
4.8UE-M2

4.9UE-SAEGW
4.7UE-Rad

M2M Server

Data Flow
3GPP

Mobile
Backhaul
eNodeB

15

Nokia Solutions and Networks 2014

<Change information classification in footer>

SAE-GW

HSS/Registers