4.14.3 Public network integrated non-public network (PNI-NPN)

A PNI-NPN is made available by means of e.g. dedicated DNNs or by one or more S-NSSAIs allocated for it. A CAG can be optionally used in order to prevent UEs not allowed to access a PNI-NPN from accessing the PNI-NPN. The key enablers for the CAG in the NAS layer are as follows:

• CAG selection (see 3GPP TS 23.122 [5]); and
• provisioning of a "CAG information list" as specified in 3GPP TS 23.122 [5], from network to UE via the generic UE configuration update procedure, the registration procedure, the service request procedure, and the network-initiated de-registration procedure.

The "CAG information list" provisioned by the network, if available, is stored in the non-volatile memory in the ME as specified in annex C. The "CAG information list" stored in the ME is kept when the UE enters 5GMM-DEREGISTERED state. Annex C specifies condition under which the "CAG information list" stored in the ME is deleted. Additionally, when a USIM is inserted, if:

• no "CAG information list" is stored in the non-volatile memory of the ME; or
• the SUPI from the USIM does not match the SUPI stored together with the "CAG information list" in the non-volatile memory of the ME;

and the UE has a "CAG information list" stored in the USIM (see 3GPP TS 31.102 [22]), the UE shall store the "CAG information list" from the USIM into the ME, as specified in annex C. The "Allowed CAG list" included in the entry for the HPLMN or EHPLMN in "CAG information list" stored in the USIM can contain a range of CAG-IDs.

The UE supporting CAG may perform the initial registration for emergency services via a non-CAG cell in a PLMN for which the UE has an "indication that the UE is only allowed to access 5GS via CAG cells" or via a CAG cell for which none of CAG-ID(s) is authorized based on the "Allowed CAG list" (see 3GPP TS 23.122 [5]) for the selected PLMN. If a UE supporting CAG having an emergency PDU session is camping on:

• a CAG cell and none of the CAG-ID(s) of the CAG cell is authorized based on the "Allowed CAG list" for the current PLMN in the UE's subscription; or
• a non-CAG cell in a PLMN for which the UE's subscription contains an "indication that the UE is only allowed to access 5GS via CAG cells";

the AMF shall behave as specified in clause 5.4.4.2, 5.5.1.3.4 or 5.6.1.4.1.

NOTE: The emergency services in a PLMN for which the UE's subscription contains an "indication that the UE is only allowed to access 5GS via CAG cells" can be subject to local regulation.

If a UE supporting enhanced CAG information is in a CAG cell with a CAG-ID which:

• was authorized based on the "Allowed CAG list" associated with the current PLMN in the "CAG information list" stored in the ME; and
• becomes not authorized based on the "Allowed CAG list" (e.g. time validity information no longer matches UE's current time); and

none of the CAG-ID(s) supported by the current CAG cell is currently authorized based on the "Allowed CAG list" of the entry for the current PLMN in the stored "CAG information list", and:

• the entry for the current PLMN in the "CAG information list" does not include an "indication that the UE is only allowed to access 5GS via CAG cells", then the UE shall abort ongoing UE initialted 5GMM procedures, if any, locally release the NAS signalling connection, if any, enter the state 5GMM-REGISTERED.LIMITED-SERVICE and shall search for a suitable cell according to 3GPP TS 38.304 [28] or 3GPP TS 36.304 [25C] with the stored "CAG information list"; or
• the entry for the current PLMN in the stored "CAG information list" includes an "indication that the UE is only allowed to access 5GS via CAG cells" and:
• one or more CAG-ID(s) are authorized based on the "Allowed CAG list" of the entry for the current PLMN in the stored "CAG information list", the UE shall abort ongoing UE initialted 5GMM procedures, if any, locally release the NAS signalling connection, if any, enter the state 5GMM-REGISTERED.LIMITED-SERVICE and shall search for a suitable cell according to 3GPP TS 38.304 [28] or 3GPP TS 36.304 [25C] with the stored "CAG information list"; or
• no CAG-ID is authorized based on the "Allowed CAG list" of the entry for the current PLMN in the stored "CAG information list" and:
• the UE does not have an emergency PDU session, then the UE shall abort ongoing UE initialted 5GMM procedures, if any, locally release the NAS signalling connection, if any, enter the state 5GMM-REGISTERED.PLMN-SEARCH and shall apply the PLMN selection process defined in 3GPP TS 23.122 [5] with the stored "CAG information list"; or
• the UE has an emergency PDU session, then the UE shall perform a local release of all PDU sessions associated with 3GPP access except for the emergency PDU session and enter the state 5GMM-REGISTERED.LIMITED-SERVICE.