WO2018171486A1 - Method and device for updating position of mobile terminal - Google Patents

Abstract

A method and a device for updating the position of a mobile terminal. The method is applicable to a core network control function (CCF), and comprises: upon reception of a message from user equipment (UE), a CCF sending a request message to a home network function (HF), the request message being used for requesting first information content (IE1) and second information content (IE2), upon reception of the IE1 and IE2 sent from the HF, sending the IE2 to the UE, and receiving fourth information content (IE4) from the UE, the IE4 being generated on the basis of the IE2; the CCF verifying a Key on the basis of the IE1 and the IE4; and on the basis of the result of the verification, the CCF sending a position update message to the HF, the position update message carrying fifth information content (IE5) generated on the basis of the Key.

Description

Method and device for updating mobile terminal location Technical field

The present disclosure relates to the field of communications technologies, and, for example, to a method and apparatus for location update of a mobile terminal.

Background technique

In the related art, the 3rd Generation Partnership Project (3GPP) proposes a method for updating a location of a mobile terminal, and FIG. 1 is a schematic diagram of a process for updating a location of a mobile terminal according to the related art, as shown in FIG.

In step 101, the terminal UE sends an attach request to a core network Call Control Function (CCF) (such as a Mobility Management Entity (MME), or an Access Management Function (AMF)). For example, an Attach Request message is sent, and the message carries the identifier 1 of the UE. For example, the identifier 1 may be a Temporary Mobile Subscriber Identity (TMSI) or an International Mobile Subscriber Identity (IMSI).

In step 102, the CCF sends an authentication data request to a Home Network Function (HF), such as a Unified Data Manager (UDM) or a Home Subscriber Server (HSS), such as sending an Authentication. The data request message carries the identifier 2, for example, the identifier 2 is the IMSI. When the identifier 1 is the TMSI, the identifier 1 can be converted into the identifier 2 by the CCF.

In step 103, the HF sends an authentication data response to the CCF, such as sending an Authentication Data Response message carrying Auth, Xres, and Key, where Auth is authentication information, such as AUTN for the UE authentication network and RAND for the UE to generate Res. Xres is an expected response, such as for the CCF to determine whether the Res sent by the UE is equal to Xres to authenticate the UE, and the Key is used by the CCF for secure communication between the UE and the CCF.

In step 104, the CCF sends a user authentication request to the UE, for example, sending a User Authentication Request message carrying the AUTN and the RAND.

In step 105, the UE checks the AUTN to authenticate the network. If the authentication is successful, the Res is generated based on the RAND, and a user authentication response is sent to the CCF, such as sending a User Authentication Response message carrying the Res.

In step 106, the CCF checks the Res using Xres, and if the two are the same, sends a location update to the HF, such as sending an Update Location message. The HF receiving the message can know the current location information of the UE and consider that the UE has access to the mobile network using the service.

If the CCF does not perform steps 104 and 105, but directly performs step 106, that is, the CCF uses Xres as the Res to notify the HF that the UE has been authenticated, the HF can be spoofed to let the HF assume that the UE has accessed the network, which may cause the home network to occur as a UE. The risk of incorrect billing.

Summary of the invention

The present disclosure provides a method and apparatus for updating a location of a mobile terminal, so as to at least solve the problem that the CCF can initiate a legal location update without authenticating the UE in the related art.

The present disclosure provides a method for updating a location of a mobile terminal, which is applied to a core network control function CCF, including: after receiving an attach request message from a user terminal UE, the CCF sends a request message to the home network function HF, where the The request message is used to request to acquire the first information content IE1 and the second information content IE2, where the IE1 includes an encryption key Key, and the IE2 includes at least one of the following: challenge information and key generation information; the CCF is at the receiving station. After the IE1 and the IE2 sent by the HF, send the IE2 to the UE, and receive a fourth information content IE4 from the UE, where the IE4 is generated based on the IE2, where the IE4 is at least Include one of: an actual key and an actual response; the CCF verifies the Key based on the IE1 and the IE4; based on the result of the verification, the CCF sends a location update message to the HF, wherein the location The update message carries a fifth information content IE5 generated based on the Key.

In an embodiment, the IE1 is generated based on a third information content IE3 and a key Key, the IE3 being generated based on the IE2, the IE3 comprising at least one of: a desired key and a desired response.

In an embodiment, the method further includes: the CCF verifying the Key based on the IE1 and the IE4, the CCF receiving the IE3 from the HF; and the CCF verifying the IE4 After the IE3 is successfully matched, the Key is verified based on the IE1 and the IE4.

In an embodiment, before the CCF initiates a location update message to the HF, the method further comprises: the CCF receiving a sixth information content IE6 from the HF, wherein the IE6 includes verification information The check information is used to check the IE4; after the CCF determines the Key, the IE6 is verified based on the Key and the IE4.

The present disclosure also provides another method for updating a location of a mobile terminal, which is applied to a home network function HF. The method includes: receiving, by the HF, a request message sent by the core network control function CCF for the user terminal UE, where the request message is used by the HF. Requesting to acquire the first information content IE1 and the second information content IE2; the HF transmitting the first information content IE1 and the second information content IE2 to the CCF, wherein the IE1 includes an encryption key Key, The IE2 includes at least one of: challenge information and key generation information; the challenge information includes a random number challenge RAND; the HF receives a location update message sent by the CCF, where the location update message is carried There is a fifth information content IE5 generated based on the Key; the HF verifies the IE5 based on the Key.

In an embodiment, the IE1 is generated based on a third information content IE3 and a key Key, the IE3 being generated based on the IE2, the IE3 comprising at least one of: a desired key and a desired response.

In an embodiment, before the HF receives the location update message sent by the CCF, the HF further includes: sending, by the HF, the IE3 to the CCF.

In an embodiment, before the HF receives the location update message sent by the CCF, the HF further includes: the HF sending a sixth content information IE6 to the CCF, where the IE6 includes verification information, the school The verification information is used to check IE4, and the IE4 is generated based on the IE2, wherein the IE4 includes at least one of the following: an actual key and an actual response.

The present disclosure further provides an apparatus for updating a location of a mobile terminal, which is applied to a core network control function CCF, and the apparatus includes: a requesting module, configured to: after receiving an attach request message from the user terminal UE, to the home network function HF Sending a request message, wherein the request message is used to request to acquire the first information content IE1 and the second information content IE2, where the IE1 includes an encryption key Key, and the IE2 includes at least one of the following: challenge information and key generation And a transmission module, configured to: after receiving the IE1 and the IE2 sent by the HF, send the IE2 to the UE, and receive a fourth information content IE4 from the UE, where the IE4 is The UE is generated based on the IE2, where the IE4 includes at least one of the following: an actual key and an actual response; a first verification module, configured to verify the Key based on the IE1 and the IE4; and an update module, Set to be based on the result of the verification, the CCF sends a location update message to the HF, wherein the location update message carries a fifth information content IE5 generated based on the Key.

In an embodiment, the IE1 is generated based on a third information content IE3 and a key Key, the IE3 being generated based on the IE2, the IE3 comprising at least one of: a desired key and a desired response.

In an embodiment, the first receiving module is configured to receive the IE3 from the HF; the first verification module is configured to, after verifying that the IE4 and the IE3 are successfully matched, based on the IE1 And verifying the Key with the IE4.

In an embodiment, the apparatus further comprises: a second receiving module, configured to receive a sixth information content IE6 from the HF before the update module initiates a location update message to the HF, wherein the The IE6 includes verification information, and the verification information is used to verify the IE4. The second verification module is configured to verify the IE6 based on the Key and the IE4 after determining the Key.

The present disclosure further provides another apparatus for updating a location of a mobile terminal, which is applied to a home network function HF, the apparatus comprising: a first receiving module, configured to receive a request message sent by a core network control function CCF for a user terminal UE, The request message is used to request to acquire the first information content IE1 and the second information content IE2, and send the first information content IE1 and the second information content IE2 to the CCF, where the IE1 includes an encryption key. Key, the IE2 includes at least one of the following: challenge information and key generation information; and a second receiving module, configured to receive a location update message sent by the CCF, where the location update message is carried based on the The fifth information content IE5 generated by the Key; the verification module is configured to verify the IE5 based on the Key.

In an embodiment, the IE1 is generated based on a third information content IE3 and a key Key, the IE3 being generated based on the IE2, the IE3 comprising at least one of: a desired key and a desired response.

In an embodiment, the apparatus further includes: a first sending module, configured to send the IE3 to the CCF before receiving the location update message sent by the CCF.

In an embodiment, the apparatus further includes: a second sending module, configured to send a sixth content information IE6 to the CCF before receiving the location update message sent by the CCF, where the IE6 includes a school The verification information is used to check IE4, and the IE4 is generated based on the IE2, wherein the IE4 includes at least one of the following: an actual key and an actual response.

The present disclosure also provides a storage medium. The storage medium is arranged to store program code for performing the following steps:

After receiving the attach request message from the user terminal UE, the request message is sent to the home network function HF, where the request message is used to request to acquire the first information content IE1 and the second information content IE2, where the IE1 includes the encryption key. Key Key, the IE2 includes at least one of the following: challenge information and key generation information;

After receiving the IE1 and the IE2 sent by the HF, sending the IE2 to the UE, and receiving a fourth information content IE4 from the UE, where the IE4 is generated based on the IE2, where The IE4 includes at least one of the following: an actual key and an actual response;

Verifying the Key based on the IE1 and the IE4;

And transmitting, according to the result of the verification, a location update message to the HF, where the location update message carries a fifth information content IE5 generated based on the Key.

The method and the device for updating the location of the mobile terminal provided by the present disclosure can solve the problem that the CCF can initiate a legal location update without the UE being authenticated in the related art, and prevent the CCF from spoofing the home network when the UE does not access the network. Happening.

DRAWINGS

1 is a schematic diagram of a mobile terminal location update process in the related art;

2 is a flowchart of a method for updating a location of a mobile terminal according to an embodiment;

FIG. 3 is a flowchart of another method for updating a location of a mobile terminal according to an embodiment; FIG.

4 is a structural block diagram of an apparatus for updating a location of a mobile terminal according to an embodiment;

FIG. 5 is a structural block diagram of another apparatus for updating a location of a mobile terminal according to an embodiment; FIG.

FIG. 6 is a schematic diagram of a mobile terminal location update process according to an embodiment; FIG.

FIG. 7 is a schematic diagram of another mobile terminal location update process according to an embodiment.

detailed description

The terms "first", "second" and the like in the specification and claims of the present disclosure and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a particular order or order.

Example 1

In this embodiment, a method for updating a location of a mobile terminal in a core network control function CCF is provided. FIG. 2 is a flowchart of a method for updating a location of a mobile terminal according to the embodiment. As shown in FIG. The process includes the following steps:

In step 202, after receiving the attach request message from the user terminal UE, the CCF sends a request message to the home network function HF, where the request message is used to request to acquire the first information content (IE) IE1 and The second information content IE2, wherein the IE1 includes an encryption key Key, and the IE2 includes at least one of the following: challenge information and key generation information.

In step 204, after receiving the IE1 and IE2 sent by the HF, the CCF sends the IE2 to the UE, and receives the fourth information content IE4 from the UE. The IE4 is generated based on the IE2, where the IE4 includes at least one of the following: Key and actual response.

In step 206, the CCF verifies the Key based on IE1 and IE4.

In step 208, based on the result of the verification, the CCF sends a location update message to the HF, where the location update message carries the fifth information content IE5 generated based on the Key.

After receiving the message from the user terminal UE, the CCF requests the first information content IE1 and the second information content IE2 from the home network function HF, where the IE1 includes an encryption key, and the IE2 includes at least one of the following: The information and the key generation information; the CCF sends the IE2 to the UE, and receives the fourth information content IE4 from the UE, and the IE4 is generated based on the IE2, wherein the IE4 includes at least one of the following: the actual key and the actual response; the CCF is based on the IE1 and the IE4 Verifying the Key; when the verification is passed, the CCF sends a fifth information content IE5 generated based on the Key to the HF, and initiates a location update to the HF. Since the CCF carries the authentication information generated based on the key in the location update, the key must be in the After the UE is authenticated, the CCF can not initiate a legal location update without authenticating the UE. This solves the problem that the CCF can initiate a legal location update without the UE being authenticated in the related art, and prevents the CCF from being in the UE. The case of spoofing the home network when accessing the network.

In an embodiment, the execution body of the above steps may be an entity or software related to the CCF.

In an embodiment, IE1 is generated based on the third information content IE3 and the key Key, and IE3 is generated based on IE2, and IE3 includes at least one of the following: a desired key and a desired response.

In an embodiment, the CCF verifies the Key based on the IE1 and the IE4, including:

The CCF receives the IE3 from the HF.

After the CCF verifies that the IE4 matches the IE3, the Key is verified based on the IE1 and the IE4.

In an embodiment, the method further includes:

The CCF receives IE3 from HF.

After the CCF verifies that IE4 matches IE3, it initiates a location update to the HF.

In an embodiment, before the CCF initiates the location update message to the HF, the method further includes:

The CCF receives the sixth information content IE6 from the HF, wherein the IE6 includes verification information, wherein the verification information is used to verify the IE4 in this embodiment.

After the CCF determines the Key, it verifies IE6 based on Key and IE4.

In this embodiment, a method for updating a location of a mobile terminal that operates on a home network function HF is provided. FIG. 3 is a flowchart of another method for updating a location of a mobile terminal according to the embodiment. As shown in FIG. The process includes the following steps:

In step 302, the HF receives a request message sent by the core network control function CCF for the user terminal UE, the request message is used to request to acquire the first information content IE1 and the second information content IE2; the HF sends the IE1 and the IE2 to the CCF, where IE1 includes an encryption key Key, and IE2 includes at least one of the following: challenge information and key generation information;

In step 304, the HF receives a location update message carrying the fifth information content IE5 from the CCF for the UE, where the IE5 is generated based on the Key;

In step 306, HF verifies IE5 based on Key.

In an embodiment, IE1 is generated based on the third information content IE3 and the key Key, and IE3 is generated based on IE2, and IE3 includes at least one of the following: a desired key and a desired response.

In an embodiment, the method further comprises: before the HF receives the location update message sent by the CCF, the HF sends the IE3 to the CCF.

In an embodiment, the method further includes: before the HF receives the location update message sent by the CCF, the HF sends the sixth content information IE6 to the CCF, where the IE6 includes verification information, and the verification information is used to verify the IE4.

The method of the foregoing embodiment can be implemented by means of software plus a necessary general hardware platform, and can also be implemented by hardware, and can be embodied in the form of a software product, which can be stored in a storage medium (such as ROM/RAM, disk or optical disk, etc., includes a number of instructions for causing a terminal device (which may be a mobile phone, a computer, a server, or a network device, etc.) to perform the method of the above embodiments.

Example 2

In this embodiment, a device for updating a location of a mobile terminal is also provided, and the device may perform the method provided in the foregoing embodiment, and details are not described herein. As used hereinafter, the term "module" can be a combination of at least one of software and hardware that implements a predetermined function. The apparatus described in the following embodiments may be implemented in software, but hardware, or a combination of software and hardware, is also possible and conceivable.

4 is a structural block diagram of an apparatus for updating a location of a mobile terminal according to the embodiment, which is applied to a CCF. As shown in FIG. 4, the apparatus includes:

The requesting module 40 is configured to, after receiving the attach request message from the user terminal UE, send a request message requesting the first information content IE1 and the second information content IE2 to the home network function HF, where the IE1 includes an encryption key Key, IE2 includes at least one of the following: challenge information and key generation information;

The transmission module 42 is configured to: after receiving the IE1 and the IE2 sent by the HF, send the IE2 to the UE, and receive the fourth information content IE4 from the UE, where the IE4 is generated based on the IE2, where the IE4 includes at least one of the following: an actual key and Actual response

The first verification module 44 is configured to verify the Key based on IE1 and IE4 by the CCF;

The update module 46 is configured to, when the verification passes, send a fifth information content IE5 carrying the Key-based generation to the HF, and initiate a location update message to the HF.

In an embodiment, IE1 is generated based on the third information content IE3 and the key Key, and IE3 is generated based on IE2, and IE3 includes at least one of the following: a desired key and a desired response.

In an embodiment, the apparatus further includes: a first receiving module configured to receive the IE3 from the HF; and a first verification module configured to verify that the IE4 and the IE3 match successfully, and verify the IE1 and the IE4 based on the IE1 and the IE4 Key.

In an embodiment, the first update module is further configured to set a CCF to verify that the IE4 and the IE3 match successfully, and initiate a location update message to the HF.

In an embodiment, the apparatus further comprises: a second receiving module, configured to receive the sixth information content IE6 from the HF before the update module initiates the location update to the HF, wherein the IE6 includes verification information, the verification information For verifying the IE4; the second verification module is configured to verify the IE6 based on the Key and IE4 after determining the Key.

FIG. 5 is a structural block diagram of another apparatus for updating a location of a mobile terminal according to an embodiment of the present invention, which is applied to an HF. As shown in FIG. 5, the apparatus includes:

The first receiving module 50 is configured to receive a request message sent by the core network control function CCF for the user terminal UE, where the request message is used to request to acquire the first information content IE1 and the second information content IE2, and send the first message to the CCF. The information content IE1 and the second information content IE2, wherein the IE1 includes an encryption key, and the IE2 includes at least one of the following: challenge information and key generation information;

The second receiving module 52 is configured to receive a location update message carrying the fifth information content IE5 from the CCF for the UE, where the IE5 is generated based on the Key;

The verification module 54 is set to verify the IE 13 based on the Key.

In an embodiment, IE1 is generated based on the third information content IE3 and the key Key, and IE3 is generated based on IE2, and IE3 includes at least one of the following: a desired key and a desired response.

In an embodiment, the apparatus further comprises: a first sending module, configured to send the IE3 to the CCF before receiving the location update message sent by the CCF.

In an embodiment, the apparatus further includes: a second sending module, configured to send the sixth content information IE6 to the CCF before receiving the location update message sent by the CCF, where the IE6 includes the check information, the check information Used to verify IE4. The IE4 is generated based on the IE2, wherein the IE4 includes at least one of the following: an actual key and an actual response.

Each of the above modules may be implemented by software or hardware. For the latter, the modules may be implemented in the same manner: the modules are located in different processors in any combination. in.

Example 3

FIG. 6 is a schematic diagram of a mobile terminal location update process according to the embodiment. The process may include the following steps: Steps 601-602 are the same as steps 101-102 in FIG.

In step 603, the HF sends an authentication data response to the CCF, such as sending an Authentication Data Response message carrying Auth, Seed, Xres, and Encl, where Auth is authentication information, such as AUTN for UE authentication network and Res for UE generation. RAND, Xres is the expected response, such as for CCF to determine whether the Res sent by the UE is equal to Xres to authenticate the UE, Seed for HF to generate Xkey2 and UE to generate key2 (if the UE is legal, Xkey2 will be equal to key2), Encl is based on Xkey2 And Key1 is generated, and Key1 is used by the CCF for secure communication between the UE and the CCF.

In step 604, the CCF sends a user authentication request to the UE, such as sending a User Authentication Request message carrying the AUTN, RAND, and Seed.

In step 605, the UE checks the AUTN to authenticate the network. If the authentication succeeds, the Res is generated based on the RAND, the key2 is generated based on the Seed, and the user authentication response is sent to the CCF, for example, a User Authentication Response message is sent, carrying Res and key2.

In step 606, the CCF checks the Res using Xres. If the two are the same (then Xkey2=key2), Key1 is calculated based on key2 and Encl, and a location update is sent to the HF, such as sending an Update Location message carrying the authentication information generated based on Key1. Verification. The HF that receives the message verifies the Verification based on Xkey2. If the verification succeeds, it can be known that the current location information of the UE is legal, and that the UE has accessed the mobile network to use the service, and the verification operation can be performed as follows:

HF generates Xverification based on Xkey2 and checks if Xverification is equal to Verification, or HF calculates Xkey3 based on Verification and checks if Xkey3 is equal to Xkey2.

FIG. 7 is a schematic diagram of another mobile terminal location update process provided by this embodiment. The process includes the following steps: Steps 701-702 are the same as steps 101-102 in FIG.

In step 703, the HF sends an authentication data response to the CCF, such as sending an Authentication Data Response message carrying Auth, Verification1, and Enc, where Auth is authentication information, such as AUTN for the UE authentication network and RAND for the UE to generate Res. Verification1 is response verification information, based on expected response Xres generation, Xres is generated based on RAND, Enc is generated based on Xres and Key, and Key is used by CCF for secure communication between UE and CCF.

In step 704, the CCF sends a user authentication request to the UE, such as sending a User Authentication Request message carrying the AUTN and the RAND.

In step 705, the UE checks the AUTN to authenticate the network. If the authentication is successful, the Res is generated based on the RAND, and a user authentication response is sent to the CCF, such as sending a User Authentication Response message carrying the Res.

In step 706, the CCF calculates XKey based on Enc and Res, and then verifies Verification1 based on XKey (such as calculating Xverification1 based on XKey and comparing it with Verification1, or calculating Xres based on Verification1 and comparing it with Res), if the verification is successful ( Then Xres=Res and XKey=Key), then the UE passes the authentication.

In step 707, the CCF sends a location update to the HF, such as sending an Update Location message, carrying the verification information Verification2 generated based on the Key. The HF that receives the message is based on the Key Verification Verification 2. If the verification succeeds, it can be known that the current location information of the UE is legal, and that the UE has accessed the mobile network to use the service, and the verification operation can be performed as follows:

HF generates Xverification2 based on Key and checks if Xverification2 is equal to Verification2, or HF calculates XKey2 based on Verification2 and checks if XKey2 is equal to Key.

With the above scheme, it is possible to prevent the CCF from spoofing that the HF UE has access to the network.

In the method for updating the location of the mobile terminal provided by the embodiment, the CCF needs to carry the authentication information generated by the key in the location update, and the key must be obtained after the UE is authenticated, so that the CCF cannot be initiated without authenticating the UE. A legitimate location update prevents the CCF from spoofing the home network without the UE accessing the network.

Example 4

This embodiment provides a storage medium. In this embodiment, the above storage medium may be configured to store program code for performing the following steps:

S1, after receiving the message from the user terminal UE, sending request information for requesting the first information content IE1 and the second information content IE2 to the home network function HF, where the IE1 includes an encryption key, and the IE2 is at least Includes one of the following: challenge information and key generation information;

S2, after receiving the IE1 and the IE2 sent by the HF, sending the IE2 to the UE, and receiving a fourth information content IE4 from the UE, where the IE4 is generated based on the IE2, where The IE4 includes at least one of the following: an actual key and an actual response;

S3, verifying the Key based on the IE1 and the IE4;

S4. When the verification is passed, send the fifth information content IE5 generated based on the Key to the HF, and initiate a location update to the HF.

In an embodiment, the foregoing storage medium may include: a U disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a mobile hard disk, a magnetic disk, or an optical disk. The medium in which the program code is stored.

In an embodiment, the processor may, after receiving the message from the user terminal UE, request the first information content IE1 and the second information content IE2 from the home network function HF according to the stored program code in the storage medium, where The IE1 includes an encryption key, and the IE2 includes at least one of the following: challenge information and key generation information;

In an embodiment, the processor performs to send the IE2 to the UE according to the stored program code in the storage medium, and receives a fourth information content IE4 from the UE, where the IE4 is generated based on the IE2, where The IE4 includes at least one of the following: an actual key, an actual response;

In an embodiment, the processor performs verification based on the IE1 and the IE4 to verify the Key according to the stored program code in the storage medium;

In an embodiment, the processor performs, according to the stored program code in the storage medium, sending a fifth information content IE5 generated based on the Key to the HF to initiate a location update to the HF when the verification passes.

For examples in this embodiment, reference may be made to the examples described in the foregoing embodiments and the optional embodiments, and details are not described herein again. The modules or steps provided by the above embodiments may be implemented by a general-purpose computing device, which may be centralized on a single computing device or distributed over a network of multiple computing devices. In one embodiment, they may be calculated. The program code executable by the apparatus is implemented such that they may be stored in a storage device by a computing device, and in some cases, the steps shown or described may be performed in an order different than that herein, or They are fabricated separately for each integrated circuit module, or a plurality of modules or steps thereof are fabricated into a single integrated circuit module.

Industrial applicability

The present disclosure provides a method and a device for updating a location of a mobile terminal, which can solve the problem that the CCF can initiate a legal location update without authenticating the UE, and reduce the risk that the home network is incorrectly charged by the UE.

Claims (17)

A method for updating a location of a mobile terminal is applied to a core network control function CCF, and the method includes: After receiving the message from the user terminal UE, the CCF sends a request message to the home network function HF, where the request message is used to request to acquire the first information content IE1 and the second information content IE2, where the IE1 includes an encryption key. Key, the IE2 includes at least one of the following: challenge information and key generation information; After receiving the IE1 and the IE2 sent by the HF, the CCF sends the IE2 to the UE, and receives a fourth information content IE4 from the UE, where the IE4 is generated based on the IE2, The IE4 includes at least one of the following: an actual key and an actual response; The CCF verifies the Key based on the IE1 and the IE4; Based on the result of the verification, the CCF sends a location update message to the HF, where the location update message carries a fifth information content IE5 generated based on the Key. The method according to claim 1, wherein the IE1 is generated based on a third information content IE3 and a key Key, the IE3 being generated based on the IE2, the IE3 comprising at least one of: a desired key and an expected response . The method of claim 2, wherein the CCF verifies the Key based on the IE1 and the IE4 comprises: The CCF receives the IE3 from the HF; After the CCF verifies that the IE4 matches the IE3, the Key is verified based on the IE1 and the IE4. The method of claim 1, wherein before the CCF initiates a location update message to the HF, the method further comprises: The CCF receives the sixth information content IE6 from the HF, where the IE6 includes verification information, and the verification information is used to verify the IE4; After the CCF determines the Key, the IE6 is verified based on the Key and the IE4. A method for updating a location of a mobile terminal is applied to a home network function HF, and the method includes: The HF receives a request message sent by the core network control function CCF for the user terminal UE, the request message is used to request to acquire the first information content IE1 and the second information content IE2; The HF sends the first information content IE1 and the second information content IE2 to the CCF, where the IE1 includes an encryption key Key, and the IE2 includes at least one of the following: challenge information and key generation information; The HF receives a location update message sent by the CCF, where the location update message carries a fifth information content IE5 generated based on the Key; The HF verifies the IE5 based on the Key. The method according to claim 5, wherein the IE1 is generated based on a third information content IE3 and a key Key, the IE3 being generated based on the IE2, the IE3 comprising at least one of: a desired key and an expected response . The method of claim 6, wherein the receiving, by the HF, the location update message sent by the CCF further comprises: The HF sends the IE3 to the CCF. The method of claim 5, wherein the receiving, by the HF, the location update message sent by the CCF further comprises: The HF sends a sixth content information IE6 to the CCF, where the IE6 includes check information, the check information is used to check IE4, and the IE4 is generated based on the IE2, where the IE4 is at least Includes one of the following: the actual key and the actual response. A device for updating a location of a mobile terminal is applied to a core network control function CCF, and the device includes: The requesting module is configured to send a request message to the home network function HF after receiving the attach request message from the user terminal UE, where the request message is used to request to acquire the first information content IE1 and the second information content IE2, The IE1 includes an encryption key Key, and the IE2 includes at least one of the following: challenge information and key generation information; a transmission module, configured to: after receiving the IE1 and the IE2 sent by the HF, send the IE2 to the UE, and receive a fourth information content IE4 from the UE, where the IE4 is based on the IE2 Generating, wherein the IE4 includes at least one of: an actual key and an actual response; a first verification module, configured to verify the Key based on the IE1 and the IE4; The update module is configured to send a location update message to the HF based on the result of the verification, wherein the location update message carries a fifth information content IE5 generated based on the Key. The apparatus according to claim 9, wherein the IE1 is generated based on a third information content IE3 and a key Key, the IE3 being generated based on the IE2, the IE3 comprising at least one of: a desired key and an expected response . The device of claim 10, wherein the device further comprises: a first receiving module, configured to receive the IE3 from the HF; The first verification module is configured to verify the key based on the IE1 and the IE4 after verifying that the IE4 and the IE3 are successfully matched. The apparatus of claim 9 wherein said apparatus further comprises: a second receiving module, configured to receive a sixth information content IE6 from the HF before the update module initiates a location update message to the HF, where the IE6 includes verification information, and the verification information is used by For verifying the IE4; The second verification module is configured to verify the IE6 based on the Key and the IE4 after determining the Key. A device for updating a location of a mobile terminal is applied to a home network function HF, and the device includes: a first receiving module, configured to receive a request message sent by the core network control function CCF for the user terminal UE, where the request message is used to request to acquire the first information content IE1 and the second information content IE2, and send the message to the CCF The first information content IE1 and the second information content IE2, wherein the IE1 includes an encryption key Key, and the IE2 includes at least one of the following: challenge information and key generation information; The second receiving module is configured to receive the location update message sent by the CCF, where the location update message carries the fifth information content IE5 generated based on the Key; A verification module is configured to verify the IE5 based on the Key. The apparatus according to claim 13, wherein the IE1 is generated based on a third information content IE3 and a key Key, the IE3 being generated based on the IE2, the IE3 comprising at least one of: a desired key and an expected response . The apparatus of claim 14 wherein said apparatus further comprises: The first sending module is configured to send the IE3 to the CCF before receiving the location update message sent by the CCF. The device of claim 13 wherein said device further comprises: a second sending module, configured to send a sixth content information IE6 to the CCF before receiving the location update message sent by the CCF, where the IE6 includes check information, where the check information is used for verification IE4, the IE4 is generated based on the IE2, wherein the IE4 includes at least one of the following: an actual key and an actual response. A computer readable storage medium storing computer executable instructions for performing the method of any of claims 1-8.

Images