Reliance Jio and T-Mobile Achieve World’s First 5G Standalone (5G SA) Roaming: Architecture, SEPP Security, and Latency Analysis

On September 22, 2026, Reliance Jio Infocomm and T-Mobile US announced the successful execution of the world’s first commercial 5G Standalone (5G SA) international roaming connection between India and the United States. Interconnected through Syniverse’s global IPX network, the deployment links two of the planet's largest standalone 5G networks.

Until this deployment, every international "5G" roaming session relied on 5G Non-Standalone (5G NSA) or fallback to 4G LTE Evolved Packet Cores (EPC). When a traveler landed overseas, their 5G handset anchored its control signaling to a local 4G cell tower, routing packets through legacy network elements.

The Jio and T-Mobile connection removes legacy 4G anchors. It establishes a pure cloud-native 5G Core to 5G Core connection across international borders, enabling native Voice over New Radio (VoNR), cryptographic signaling protection via Security Edge Protection Proxies (SEPP), and lower round-trip latency.

1. Executive Comparison: 5G SA vs. Legacy 5G NSA Roaming

2. Network Architecture: 5G Core to 5G Core Interconnect

The 5G SA roaming architecture connects the Visited Public Land Mobile Network (VPLMN) and the Home Public Land Mobile Network (HPLMN) strictly using 3GPP Service-Based Architecture (SBA) specifications defined in Release 16 and Release 17.

  [INDIA: Reliance Jio 5G SA Core]                  [USA: T-Mobile 5G SA Core]
  
  ┌───────────────────────────────┐                  ┌───────────────────────────────┐
  │   Jio Control Plane (5GC)    │                  │  T-Mobile Control Plane (5GC) │
  │   [UDM]  [AUSF]  [AMF]  [SMF] │                  │   [UDM]  [AUSF]  [AMF]  [SMF] │
  └──────────────┬────────────────┘                  └──────────────┬────────────────┘
                 │                                                  │
                 ▼                                                  ▼
      ┌─────────────────────┐                            ┌─────────────────────┐
      │  vSEPP / cSEPP Node │                            │  vSEPP / cSEPP Node │
      │  (Jio Edge Gateway) │                            │ (T-Mobile Gateway)  │
      └──────────┬──────────┘                            └──────────┬──────────┘
                 │                                                  │
                 │              [Syniverse Global IPX]             │
                 └──────────────► N32-c (Control Handshake) ◄───────┘
                 └──────────────► N32-f (Forwarding & PRINS) ◄──────┘
                                            │
                                            ▼
                           ┌─────────────────────────────────┐
                           │   N9 Data Plane User Tunnel     │
                           │   (Jio UPF <=======> T-Mo UPF)  │
                           └─────────────────────────────────┘

A. The Control Plane: Service-Based Architecture (SBA)

In 5G SA, core network functions communicate as microservices over RESTful HTTP/2 APIs. During an outbound roaming event (for example, a Jio subscriber registering on T-Mobile’s network in New York):

1. Initial Registration: The subscriber's handset connects to a T-Mobile 5G gNodeB base station.
2. Identity Verification: The T-Mobile Access and Mobility Management Function (AMF) requests authentication credentials from Jio’s Unified Data Management (UDM) and Authentication Server Function (AUSF) in India.
3. Encrypted Routing: The request does not travel across the public internet. It routes through T-Mobile’s Security Edge Protection Proxy (cSEPP), across Syniverse’s private IPX fabric, to Jio’s vSEPP.

B. The User Plane: Home-Routed vs. Local Breakout

The architecture supports two distinct data traffic pipelines:

• Home-Routed (HR): User plane data tunnels from T-Mobile's User Plane Function (UPF) across the international N9 interface back to Jio’s UPF in India. This ensures corporate IP restrictions, Indian banking compliance, and home content filtering remain enforced.
• Local Breakout (LBO): User traffic exits directly onto the US internet at T-Mobile’s local UPF edge, slashing latency for browsing, cloud gaming, and CDN streaming down to local US response times.

3. Cryptographic Security: Why the SEPP Gateway Matters

International telecom roaming has historically suffered from vulnerabilities in the SS7 (Signaling System No. 7) and Diameter protocols. Attackers, state actors, and rogue third parties could exploit unencrypted signaling to track subscriber locations, intercept SMS two-factor authentication codes, or redirect calls.

3GPP resolved this in 5G Standalone by defining the Security Edge Protection Proxy (SEPP) across the N32 interface.

                 SEPP Cryptographic Enforcement (N32 Interface)

     [VPLMN: AMF/SMF]                                              [HPLMN: UDM/AUSF]
            │                                                              │
            ▼                                                              ▼
   ┌─────────────────┐                                            ┌─────────────────┐
   │  Visiting SEPP  │                                            │    Home SEPP    │
   └────────┬────────┘                                            └────────┬────────┘
            │                                                              │
            ├── N32-c (TLS 1.3 Key Exchange & Capability Negotiation) ─────┤
            │                                                              │
            └── N32-f (PRINS: Message Encryption & Integrity Verification) ┘
                     ▲                                            ▲
                     │                                            │
                     └──────── [Syniverse IPX Interconnect] ──────┘

Technical Mechanics of SEPP Security

1. N32-c (Control Plane Handshake): Establishes a mutual TLS (mTLS 1.3) connection between Jio and T-Mobile. The proxies negotiate security capabilities, cipher suites, and public key certificates issued by verified telecom certificate authorities (CAs).
2. N32-f (Forwarding Plane with PRINS): Implements Packet Routing and Information Security (PRINS). Sensitive JSON fields containing subscriber identifiers (SUPI - Subscription Permanent Identifier), exact location coordinates, and encryption keys are encrypted end-to-end between the operators.
3. Intermediary Modification Control: Syniverse’s IPX network can inspect or modify routing headers required for transit billing without decrypting the payload containing sensitive subscriber data. Any unauthorized payload alteration triggers immediate signature failure and packet drop.

4. Latency Analysis: 5G SA vs. 5G NSA Cross-Border Performance

Field validation conducted between commercial server endpoints in Mumbai and Chicago demonstrates empirical gains in connection setup and packet transmission:

Round-Trip Latency and Call Setup Metrics (Commercial Live Testing)

Call Setup Time (VoNR vs. VoLTE Roaming)
5G SA VoNR (Jio / T-Mo)  ████ 1.15s
5G NSA VoLTE Fallback    ██████████████ 3.90s
Legacy 4G LTE CSFB       ████████████████████ 5.40s

Cross-Border Ping (Local Breakout LBO Mode)
5G SA Roaming (LBO)      ███ 18ms (Local US Breakout)
5G NSA Roaming (HR)      ████████████████████████████████████ 184ms (Tunnels to India)

Time-to-First-Byte (TTFB) Web Browsing
5G SA (HTTP/2 Multiplex) ██ 42ms
5G NSA Legacy Anchor     █████████ 148ms

Why 5G SA Eliminates Roaming Friction

• Pure Carrier Aggregation: Handsets aggregate up to four 5G New Radio component carriers simultaneously (e.g., n71 + n41 on T-Mobile, or n28 + n78 on Jio), delivering multi-hundred megabit download speeds without needing to reserve transceiver power for an LTE anchor band.
• Lower Battery Drain: Roaming smartphones operate a single 5G NR radio frequency chain rather than maintaining concurrent Dual Connectivity (EN-DC) radios, cutting active device power consumption by 24% while roaming.
• Immediate Voice Connect: VoNR calls initiate directly over 5G without falling back to 4G LTE, preserving data download speeds during active phone calls.

5. Enterprise Network Slicing Across Borders

The most consequential capability enabled by 5G SA roaming is the extension of Network Slicing beyond domestic boundaries.

             International 5G Network Slicing Framework

[Enterprise Device in US] ──► [T-Mobile 5G gNodeB] ──► [T-Mo Edge Slice: Low Latency]
                                                               │
                                                               ▼
                                                     [Syniverse IPX SLA Core]
                                                               │
                                                               ▼
[Corporate HQ in India]  ◄── [Jio 5G SA Core]    ◄── [Jio Dedicated Enterprise Slice]

Under 4G or 5G NSA, all roaming traffic is treated as a generic best-effort packet pipe. In 5G SA, an enterprise can define a dedicated Network Slice Instance (NSI) mapped across both networks:

1. Critical IoT & Logistics: Temperature-sensitive pharmaceutical shipments or connected automotive fleets moving between factories in India and distribution hubs in the US maintain guaranteed latency and bandwidth SLAs.
2. Financial Trading & Corporate VPNs: Dedicated slices isolate enterprise traffic cryptographically from the consumer data stream across the entire transatlantic IPX path.
3. Ultra-Reliable Low-Latency Communication (URLLC): Industrial equipment remotely monitored by teams across time zones operates with guaranteed packet prioritization.

6. Device Compatibility and Commercial Rollout

Subscribers do not need to replace their SIM cards to access 5G SA roaming if they already use a 5G-ready Jio or T-Mobile physical SIM or eSIM. However, the handset must support Standalone roaming firmware profiles.

Handset Compatibility Matrix

• Apple: iPhone 15, iPhone 16, and iPhone 17 series running iOS 18.4 or later.
• Samsung: Galaxy S23, S24, S25, and S26 series, along with Galaxy Z Fold5/Fold6/Fold7 devices running One UI 6.1+.
• Google: Pixel 8, Pixel 9, and Pixel 10 series running Android 14+.
• OnePlus & Xiaomi: Flagship devices powered by Snapdragon 8 Gen 2, Gen 3, and Gen 4 platforms.

Both operators confirmed that commercial activation will roll out progressively to enterprise tiers and high-usage consumer international roaming packs starting in late 2026.

7. Strategic Impact on Global Telecoms

The partnership between Jio and T-Mobile establishes three operational benchmarks for the worldwide telecommunications industry:

1. A Blueprint for Global Carriers: European, Asian, and Latin American operators that have deployed 5G SA (such as Vodafone, Singtel, and Telefonica) now have a validated production reference architecture for cross-border interconnects.
2. Accelerated Sunset of Legacy Networks: By successfully routing voice, emergency services, and high-speed data over pure 5G SA, carriers can accelerate the complete decommission of 2G and 3G networks and repurpose 4G spectrum for sub-6GHz 5G.
3. Validation of IPX Vendors: Syniverse cements its role as a pivotal neutral broker for 5G SEPP-to-SEPP clearinghouses, proving that cloud-native 5G core interconnects can operate reliably across oceans.

The achievement by Reliance Jio and T-Mobile marks the transition of 5G Standalone from an isolated domestic technology into a unified global communications fabric.