5G AMF Access Management: UE Registration, Mobility & NAS Security
Published June 21, 2026 • 7 min read • Telecom Insights
The 5G Access and Mobility Management Function (AMF) is the UE's primary entry point into the 5G Core — equivalent to the 4G MME but redesigned for the service-based architecture. The AMF terminates the N1 (NAS signalling with UE) and N2 (NGAP signalling with gNB) interfaces, managing UE registration, reachability, mobility, and authentication. Every UE must register with and be served by exactly one AMF at any given time.
Key Takeaway: The AMF is the first NF a UE encounters in the 5GC. It authenticates the UE, selects the appropriate network slice(s), and establishes the initial security context — but unlike the MME in 4G, the AMF delegates session management to the SMF, reflecting the 5GC's clean separation of mobility and session functions.
UE Registration and 5G-GUTI
UE Registration is the fundamental procedure by which a UE attaches to the 5G network. The UE sends a Registration Request NAS message containing its identity (SUCI — Subscription Concealed Identifier — for initial registration, or 5G-GUTI for subsequent registrations). The AMF invokes the AUSF/UDM for authentication and key agreement (5G-AKA or EAP-AKA'), then registers with the UDM for serving AMF identity. If the Registration Request includes a PDU Session establishment request, the AMF selects an SMF via NRF. The AMF assigns a 5G-GUTI (Globally Unique Temporary Identifier) — a temporary identity that protects the UE's permanent SUPI from exposure over the air.
NAS Protocol and Security
The NAS (Non-Access Stratum) protocol carries mobility management (5GMM) and session management (5GSM) messages between UE and core. 5G NAS uses a security mode command procedure to activate integrity protection and ciphering of NAS messages — mandatory in 5G (unlike 4G where it was optional). NAS security algorithms include 128-NEA1 (SNOW 3G), 128-NEA2 (AES), and 128-NEA3 (ZUC). The AMF derives the NAS security keys (KNASint, KNASenc) from KAMF during the authentication procedure.
Network Slicing: NSSAI Management
The AMF plays a central role in 5G network slicing. During registration, the UE provides Requested NSSAI (Network Slice Selection Assistance Information). The AMF verifies the UE's subscription (via UDM) for allowed slices and selects the appropriate NSSF if further slice selection logic is needed. The AMF returns an Allowed NSSAI to the UE, which may be a subset of the Requested NSSAI. The AMF ensures that all subsequent NFs selected (SMF, etc.) belong to the appropriate slice instance(s).
UE Reachability and Paging
The AMF manages UE reachability through the Registration Area concept — a set of Tracking Areas within which the UE may move without notifying the network. When a UE is in CM-IDLE state (no N2 connection), the AMF initiates paging across all gNBs in the UE's Registration Area when downlink data (or signalling) arrives. The AMF implements paging optimisation strategies including: last-known-gNB-first paging, RAN-based paging area assistance, and differentiated paging for different 5QI flows. For IoT devices, the AMF supports extended idle-mode DRX (eDRX) with paging cycles up to 2621.44 seconds.
Inter-AMF Mobility and N14 Interface
The N14 interface between AMFs supports UE context transfer during inter-AMF mobility (when a UE moves to a gNB served by a different AMF). The source AMF transfers the UE's MM context (security keys, allowed NSSAI, PDU Session status) and SM context (SMF addresses, PDU Session IDs) to the target AMF over N14. The target AMF then initiates N2 path switch with the gNB and updates the SMF with the new AMF identity. This avoids full re-registration, reducing signalling load and service interruption during mobility events.
The AMF's role as the UE's anchor point in the control plane makes it one of the most signalling-intensive NFs in the 5GC, handling millions of Registration, Service Request, and mobility events per hour in large-scale deployments.
