SPATCH 3GPP AAA Server
A high-performance, virtualized 3GPP AAA server designed to manage authentication, authorization, and accounting for subscribers accessing the Evolved Packet Core (EPC) via non- 3GPP networks.
Secure your EPC with high-performance SWm, SWx, and S6b interface support.
Technical Specs & Integrations
The SPATCH 3GPP AAA server provides a high-velocity, software-defined environment for managing complex subscriber authentication and seamless session continuity.
Interfaces Supported
SWm
SWx
S6b
SWd
STa
Radius
Signaling Protocol
Diameter (RFC 6733)
3GPP Compliance
Fully compliant with standard industry
specifications for seamless interoperability.
Virtualized Core
Deploy on standard VM or AWS with ease. Software-based architecture designed for high-availability.
Why Regional Mobile Network Operators are Switching to SPATCH 3GPP AAA
“They have a great technical staff. And what I mean by that is if we have an issue, we know that somebody we're talking to is actually the one that actually fixes stuff. So that to me is important.”
Director of Network Operations, Regional Wireless Carrier
Frequently Asked Questions
How does a 3GPP AAA server mitigate HSS signaling bursts during VoWiFi offloading?
One of the most common challenges in VoWiFi deployments is the sudden spike in signaling traffic on the SWx interface. Every time a device transitions between LTE and Wi-Fi, the AAA server must query the HSS for authentication vectors. To prevent HSS congestion, a carrier-grade 3GPP AAA server for VoWiFi utilizes session caching. By storing frequently accessed subscriber profiles in a local, high-speed cache, the AAA server can authorize repeated sessions without re-querying the HSS, significantly reducing core network load and improving the "time-to-connect" for the subscriber.
What is the role of the SWm and S6b interfaces in securing untrusted Wi-Fi access?
When a subscriber uses a home or public Wi-Fi hotspot, the access is considered "untrusted." The SWm interface is critical here, as it facilitates the EAP-AKA authentication between the ePDG and the 3GPP AAA server to establish a secure IPsec tunnel. Simultaneously, the S6b interface manages the session binding between the AAA and the PDN Gateway (P-GW). This multi-interface coordination ensures that the subscriber's voice and data traffic are encrypted and authorized before ever touching the Evolved Packet Core (EPC).
Can the 3GPP AAA server support "trusted" non-3GPP access and 5G convergence?
Yes. While many regional operators start with "untrusted" VoWiFi, a flexible AAA server must also support trusted non-3GPP access via the STa interface (for carrier-grade Wi-Fi or Passpoint-enabled networks). Furthermore, as you transition to 5G, the AAA server acts as a "safe bridge" to the 5G-EIR and N3IWF (Non-3GPP Interworking Function). This allows you to maintain consistent EAP-SIM/AKA authentication logic for your subscribers, whether they are on a legacy 4G core or a modern 5G Standalone (SA) architecture.
See if SPATCH 3GPP AAA fits your network
We offer complimentary 1:1 demonstrations of the product to show you how it works and give you full visibility into the dashboard. No sales pitch—just a technical walkthrough with our engineers.