[go: up one dir, main page]

WO2025167965A1 - Communication method and apparatus - Google Patents

Communication method and apparatus

Info

Publication number
WO2025167965A1
WO2025167965A1 PCT/CN2025/075947 CN2025075947W WO2025167965A1 WO 2025167965 A1 WO2025167965 A1 WO 2025167965A1 CN 2025075947 W CN2025075947 W CN 2025075947W WO 2025167965 A1 WO2025167965 A1 WO 2025167965A1
Authority
WO
WIPO (PCT)
Prior art keywords
message
user
network element
terminal device
identifier
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
PCT/CN2025/075947
Other languages
French (fr)
Chinese (zh)
Inventor
袁佳茜
徐艺珊
李�赫
周润泽
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huawei Technologies Co Ltd
Original Assignee
Huawei Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co Ltd filed Critical Huawei Technologies Co Ltd
Publication of WO2025167965A1 publication Critical patent/WO2025167965A1/en
Pending legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W48/00Access restriction; Network selection; Access point selection
    • H04W48/08Access restriction or access information delivery, e.g. discovery data delivery
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W48/00Access restriction; Network selection; Access point selection
    • H04W48/16Discovering, processing access restriction or access information
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W76/00Connection management
    • H04W76/10Connection setup
    • H04W76/11Allocation or use of connection identifiers

Definitions

  • the embodiments of the present application relate to the field of communications, and more specifically, to a communication method and apparatus.
  • a terminal device when establishing a protocol data unit (PDU) session, a terminal device must report not only its own identity to the network, but also the user identity of the user currently using the terminal device, so that the network can manage the session based on the corresponding subscription information.
  • PDU protocol data unit
  • the present application provides a communication method and apparatus, in which, when the authentication of an activated user of a terminal device is successful, the network side can store the user identification of the activated user of the terminal device, so that when establishing a protocol data unit session for the terminal device, the dependence on information from the terminal device can be reduced, the signaling overhead can be reduced, the communication efficiency can be improved, and the user can be provided with reliable and differentiated service quality assurance.
  • a communication method is provided.
  • the method is performed by a first network element or a component (such as a chip or chip system) for the first network element, which is not specifically limited in this application.
  • the method includes: receiving a first message indicating successful authentication of an activated user of a terminal device, the first message including a user identifier of the activated user; and storing the user identifier according to the first message.
  • the first network element may include a unified data management network element or a mobility management network element.
  • storing the user identifier according to the first message may include: storing the user identifier in the context or contract information of the terminal device according to the first message.
  • the first network element when the authentication of the activated user of the terminal device is successful, can store the user identification of the activated user of the terminal device, so that when establishing a protocol data unit session for the terminal device, the first network element can realize the network side's control over the session management based on the user identification of the activated user of the terminal device stored by it, which can reduce signaling overhead, improve communication efficiency, and provide users with reliable and differentiated service quality assurance.
  • the first network element may include a unified data management network element.
  • the method may further include: sending a first request message, the first request message may be used to request updating the contract information of the terminal device, and the first request message may include a user identifier and an identifier (ID) of the terminal device.
  • the method may further include: receiving a fourth message, where the fourth message may be used to indicate that the update of the contract information of the terminal device has been completed.
  • the third network element may receive the first request message and update the subscription information of the terminal device stored therein according to the first request message. For example, the user identifier of the activated user may be added or updated in the subscription information of the terminal device.
  • the network side can control the session management based on the user's user identification, which can reduce signaling overhead, improve communication efficiency, and provide users with reliable and differentiated service quality guarantees.
  • the method may further include: receiving a second message, which may be used to query the contract information of the terminal device; and sending a third message, which may include the contract information associated with the user identifier.
  • the third message may include the user identifier.
  • the first network element may include a mobility management network element.
  • the method may further include: receiving a second request message, the second request message being used to request establishment of a protocol data unit (PDU) session for a terminal device, and the second request message may include an identifier of the terminal device; determining, based on the identifier of the terminal device, a user identifier of an activated user of the terminal device; and sending a third request message, the third request message may be used to request creation of a session management context for the PDU session, and the third request message includes an identifier of the PDU session, an identifier of the terminal device, and a user identifier.
  • PDU protocol data unit
  • a communication method is provided.
  • the method is performed by a second network element or a component (such as a chip or chip system) for the second network element, which is not specifically limited in this application.
  • the method includes: when authentication of an activated user of a terminal device is successful, sending a first message indicating successful authentication of the activated user of the terminal device, the first message including a user identifier of the activated user.
  • a communication method is provided, which is performed by a third network element or a component (such as a chip or chip system) for the third network element, and is not specifically limited in this application.
  • the method includes: receiving a first request message for requesting an update of contract information of a terminal device, the first request message including a user identifier of an activated user of the terminal device and an identifier of the terminal device; and updating the contract information of the terminal device stored in the third network element according to the first request message.
  • updating the subscription information of the terminal device stored in the third network element may include adding or updating the user identifier of the activated user of the terminal device in the subscription information.
  • the method may further include: sending a fourth message, where the fourth message may be used to indicate that the contract information of the terminal device has been updated.
  • the subscription information may include session management control policy information.
  • the method may further include: receiving a fourth request message, the fourth request message may be used to request session management control policy information associated with the terminal device, and the fourth request message may include an identifier of the terminal device; determining the user identifier of the activated user of the terminal device based on the identifier of the terminal device; and sending a fifth message, the fifth message may include session management control policy information associated with the user identifier.
  • the method may further include: receiving a fifth request message, which may be used to request session management control policy information associated with the user identifier, and the fifth request message may include the user identifier; and sending a sixth message, which may include session management control policy information associated with the user identifier.
  • a communication method is provided, which is performed by a session management function network element or a component (such as a chip or chip system) for the network element, and is not specifically limited in this application.
  • the method includes: sending a second message, the second message being used to query the contract information of a terminal device, the second message including the identifier of the terminal device; and receiving a third message, the third message including the contract information associated with the user identifier of an activated user of the terminal device, the user identifier being determined based on the identifier of the terminal device.
  • the method may further include: sending a sixth request message, the sixth request message may be used to request updating the session management control policy information for the PDU session of the terminal device, the sixth request message may include the identifier of the terminal device and the identifier of the PDU session; receiving a seventh message, the seventh message may include the session management control policy information associated with the user identifier.
  • the sixth request message may further include a user identifier of an activated user of the terminal device.
  • a communication method is provided, which is performed by a policy control function network element or a component (such as a chip or chip system) used for the network element, and is not specifically limited in this application.
  • the method includes: sending a fourth request message, the fourth request message being used to request session management control policy information associated with a terminal device, the fourth request message including an identifier of the terminal device; and receiving a fifth message, the fifth message including session management control policy information associated with a user identifier of an activated user of the terminal device.
  • a device which may include a module or unit for implementing the method in any one of the first to fifth aspects and possible implementations thereof.
  • the apparatus includes a communication module.
  • the device may further include a processing module.
  • the device may further include a storage module.
  • a device comprising at least one processor, the at least one processor being coupled to at least one memory, the at least one memory being used to store computer programs or instructions, and the at least one processor being used to call and run the computer program or instructions from the at least one memory, so that the device executes the method of any one of the first to fifth aspects, or the method of any possible implementation of the first to fifth aspects.
  • the apparatus of the seventh aspect may be a first network element, a second network element, a third network element, a policy control function network element, or a session management function network element.
  • the present application provides a chip comprising a communication interface and a circuit, wherein the communication interface is used to receive information from other devices and input the information into the circuit, and/or the communication interface is used to send the information in the circuit to other devices, and the circuit is used to execute the method of any aspect from the first to the fifth aspect or any possible implementation thereof.
  • the present application provides a computer-readable storage medium, in which computer instructions are stored.
  • the computer instructions are executed on a computer, the method in any one of the first to fifth aspects or any possible implementation thereof is implemented.
  • the present application provides a computer program product, which includes computer program code.
  • the computer program code runs on a computer, the method in any one of the first to fifth aspects or any possible implementation thereof is implemented.
  • the present application provides a communication system, including an apparatus as in any one of aspects 6 to 8, such as a first network element, a second network element, a third network element, a policy control function network element and/or a session management function network element.
  • FIG1 is a schematic diagram of an application scenario applicable to an embodiment of the present application.
  • FIG2 is a schematic diagram of a process for establishing a protocol data unit session
  • FIG3 is a schematic diagram of a business scenario provided in an embodiment of the present application.
  • FIG4 is a schematic diagram of a communication method provided in an embodiment of the present application.
  • FIG5 is a flow chart of another communication method provided in an embodiment of the present application.
  • FIG6 is a flow chart of another communication method provided in an embodiment of the present application.
  • FIG7 is a flow chart of another communication method provided in an embodiment of the present application.
  • FIG8 is a flow chart of another communication method provided in an embodiment of the present application.
  • FIG9 is a flow chart of another communication method provided in an embodiment of the present application.
  • FIG10 is a flow chart of another communication method provided in an embodiment of the present application.
  • FIG11 is a flow chart of another communication method provided in an embodiment of the present application.
  • FIG12 is a flow chart of another communication method provided in an embodiment of the present application.
  • FIG13 is a flow chart of another communication method provided in an embodiment of the present application.
  • FIG14 is a schematic diagram of a device provided in an embodiment of the present application.
  • FIG15 is a schematic diagram of another device provided in an embodiment of the present application.
  • FIG16 is a schematic diagram of a chip system provided in an embodiment of the present application.
  • the technical solutions of the embodiments of the present application can be applied to various communication systems, such as a long term evolution (LTE) system, a frequency division duplex (FDD) system, a time division duplex (TDD) system, a universal mobile telecommunication system (UMTS), a world-wide interoperability for microwave access (WiMAX) communication system, a fifth generation (5G) system or a new radio (NR) system, a sixth generation (6G) system, or future communication systems.
  • LTE long term evolution
  • FDD frequency division duplex
  • TDD time division duplex
  • UMTS universal mobile telecommunication system
  • WiMAX world-wide interoperability for microwave access
  • 5G fifth generation
  • NR new radio
  • 6G sixth generation
  • the 5G mobile communication system described in the present application includes a non-standalone (NSA) 5G mobile communication system or a standalone (SA) 5G mobile communication system.
  • the communication system may also be a public land mobile network (PLMN), a device-to-device (D2D) communication system, a machine-to-machine (M2M) communication system, an Internet of things (IoT) communication system, a vehicle-to-everything (V2X) communication system, an uncrewed aerial vehicle (UAV) communication system, or other communication systems.
  • PLMN public land mobile network
  • D2D device-to-device
  • M2M machine-to-machine
  • IoT Internet of things
  • V2X vehicle-to-everything
  • UAV uncrewed aerial vehicle
  • At least one of the following or similar expressions refers to any combination of these items, including any combination of single or plural items.
  • at least one of a, b, or c can represent: a, b, c, a-b, a-c, b-c, or a-b-c, where a, b, c can be single or multiple.
  • words such as “first” and “second” are used to distinguish between identical or similar items with substantially the same functions and effects.
  • words such as “first” and “second” do not limit the quantity and execution order, and words such as “first” and “second” do not necessarily limit differences.
  • words such as “exemplarily” or “for example” are used to indicate examples, illustrations or explanations. Any embodiment or design described as “exemplarily” or “for example” in the embodiments of the present application should not be interpreted as being more preferred or more advantageous than other embodiments or design schemes.
  • the use of words such as “exemplarily” or “for example” is intended to present related concepts in a concrete way for easy understanding.
  • the network architecture and business scenarios described in the embodiments of the present application are intended to more clearly illustrate the technical solutions of the embodiments of the present application, and do not constitute a limitation on the technical solutions provided in the embodiments of the present application. Ordinary technicians in this field can know that with the evolution of network architecture and the emergence of new business scenarios, the technical solutions provided in the embodiments of the present application are also applicable to similar technical problems.
  • Figure 1 shows an application scenario to which the embodiments of the present application are applicable.
  • a network architecture 100 may include the following network elements.
  • Terminal equipment may include, but is not limited to, a user unit, a user station, a mobile station, a mobile station, a remote station, a remote terminal device, a mobile terminal device, a user terminal device, a wireless communication device, a user agent, a user device, a cellular phone, a cordless phone, a Session Initiation Protocol (SIP) phone, a wireless local loop (WLL) station, a personal digital assistant (PDA), a handheld device with wireless communication capabilities, a computing device, a processing device connected to a wireless modem, an in-vehicle device, a wearable device, a terminal device in the Internet of Things, a home appliance, a virtual reality device, a terminal device in a 5G network, or a terminal device in an evolved public land mobile network (PLMN), etc., and the embodiments of the present application are not limited thereto.
  • PLMN evolved public land mobile network
  • Radio access network This is primarily responsible for air interface radio resource management, quality of service (QoS) management, data compression, and encryption.
  • Access network equipment can include various base stations, such as macro base stations, micro base stations (also known as small stations), relay stations, and access points.
  • base stations such as macro base stations, micro base stations (also known as small stations), relay stations, and access points.
  • the names of devices with base station functions may vary. For example, in third-generation (3G) systems, they are called Node Bs; in LTE systems, they are called evolved Node Bs (eNBs or eNodeBs); and in 5G systems, they can be called gNBs.
  • 3G third-generation
  • eNBs evolved Node Bs
  • 5G systems they can be called gNBs.
  • Data network element a digital transmission network used to transmit data communication services.
  • a data network element can be a data network (DN) element.
  • a DN refers to a carrier's network that provides data transmission services to users. Examples include the Internet Protocol (IP) Multimedia Service (IMS) and the Internet.
  • IP Internet Protocol
  • IMS Internet Multimedia Service
  • a DN can be a carrier's external network or a carrier-controlled network used to provide services to terminals.
  • the data network element may still be a DN element, or may have other names, which is not limited in this application.
  • AAA Authentication, authorization, and accounting
  • the AAA server can belong to the DN or the 5G core network.
  • Access management network element mainly used for mobility management and access management, performing registration, connection, reachability and mobility management, responsible for providing session management message transmission channel between UE and session management network element, providing authentication and authorization functions for UE access, and is the access point of terminal and wireless core network control plane.
  • the access management network element may be an access and mobility management function (AMF) network element.
  • AMF access and mobility management function
  • the access management network element may still be an AMF network element, or may have other names, which are not limited in this application.
  • Session Management NE This element is primarily responsible for session management and handles user services such as session establishment, modification, and release, as well as interaction with user plane functions. For example, its specific functions include allocating Internet Protocol (IP) addresses to users and selecting user plane function (UPF) elements that provide packet forwarding.
  • IP Internet Protocol
  • UPF user plane function
  • a session management network element may be a session management function (SMF) network element.
  • SMF session management function
  • the session management network element may still be an SMF network element, or may have other names, which are not limited in this application.
  • Data management network element performs contract management, access authorization, authentication information generation, etc. for users.
  • the data management network element may be a unified data management (UDM) network element.
  • the data management network element may still be a UDM network element, or may have other names, which are not limited in this application.
  • User plane function network element Mainly responsible for user data processing (forwarding, receiving, billing, etc.). For example, it can receive user data from the data network (DN) and forward the user data to the terminal through the access network equipment. The user plane function network element can also receive user data from the terminal through the access network equipment and forward the user data to the DN.
  • PDU protocol data unit
  • the UPF directly connected to the DN through N6 is also called a protocol data unit session anchor (PSA).
  • PDA protocol data unit session anchor
  • Policy control network element A unified policy framework used to guide network behavior and provide policy rule information for control plane functional network elements (such as AMF, SMF network elements, etc.).
  • the policy control network element may be a policy control function (PCF) network element.
  • PCF policy control function
  • the policy control network element may still be a PCF network element, or may have other names, which are not limited in this application.
  • Network storage function network element supports service discovery function, can receive NF discovery request from network function (NF) instance, and provide information of discovered NF instance to the NF instance.
  • NF network function
  • the network repository function network element may be a network repository function (NRF) network element.
  • NRF network repository function
  • the network repository function network element may still be an NRF network element, or may have other names, which are not limited in this application.
  • Authentication service function network element provides authentication services.
  • the authentication server function network element may be an authentication server function network element (AUSF).
  • AUSF authentication server function network element
  • the authentication server function network element may still be an NRF network element, or may have other names, which are not limited in this application.
  • N1, N2, N3, N4, and N6 are interface serial numbers. The meanings of these interface serial numbers can be found in related technologies, such as those defined in 3GPP TS 23.501.
  • the service-oriented interfaces of network elements such as the AMF, SMF, UDM, and PCF can be denoted as Namf, Nsmf, Nudm, and Npcf, respectively, as shown in Figure 1.
  • the network architecture used in the embodiments of the present application is merely an example.
  • the network architecture applicable to the embodiments of the present application is not limited thereto. Any network architecture capable of implementing the functions of the aforementioned network elements is applicable to the embodiments of the present application.
  • the network architecture may include more or fewer network elements.
  • the network architecture may further include a network slice selection function (NSSF).
  • NSSF network slice selection function
  • the AMF, SMF, UPF, PCF, and UDM shown in Figure 1 can be understood as network elements used to implement different functions in the core network, and can be combined into network slices as needed.
  • These core network elements can be independent devices or integrated into the same device to implement different functions. This application does not limit the specific form of the above network elements.
  • the above naming is only defined to facilitate the distinction between different functions and should not constitute any limitation to this application.
  • This application does not exclude the possibility of adopting other naming in 5G networks and other networks in the future.
  • some or all of the above networks may use the terminology in 5G, or other names may be used.
  • the interface name between the various network elements in Figure 1 is only an example.
  • the name of the interface in the specific implementation may be other names, and this application does not make specific limitations on this.
  • the name of the message (or signaling) transmitted between the above-mentioned network elements is only an example and does not constitute any limitation on the function of the message itself.
  • FIG2 is a schematic diagram of a process for establishing a PDU session.
  • the method may include the following steps:
  • the UE sends message #201 to request to establish a PDU session; accordingly, the AMF can receive message #201.
  • Message #201 may be referred to as a PDU session establishment request message, and may be denoted as PDU_Session_Establishment_Request.
  • the PDU session establishment request message may include a PDU session identifier (PDU session identifier, PDU Session ID) and a request type (request type).
  • the request type may include: initial request, existing PDU session, and emergency request.
  • the request type may be initial request.
  • the request type may be existing PDU session.
  • the request type may be emergency request.
  • AMF selects SMF.
  • the AMF selects an SMF to manage the PDU session for the PDU session.
  • the AMF may select an SMF based on pre-configured available SMFs.
  • the AMF may select an SMF for the PDU session based on network slice selection assistance information (NSSAI) received during configuration or during the UE registration process.
  • NSSAI is a set of single NSSAI (S-NSSAI), which may include configured NSSAI, requested NSSAI, and/or allowed NSSAI.
  • the AMF may determine the network slice information of the serving PLMN of the requested PDU session from the NSSAI currently allowed by the UE.
  • the network slice information is adopted.
  • the network slice selection auxiliary information can be selected based on the UE's subscription information or the network slice information can be determined based on the operator policy. For example, when the UE's subscription information only includes a default S-NSSAI and the corresponding serving PLMN's mapped home PLMN (HPLMN) is included in the allowed NSSAI, the network slice information of the serving PLMN of the requested PDU session can be determined based on the UE's subscription information.
  • the operator policy can support a selected S-NSSAI to allow any UE-requested data network name (DNN) to be used as the S-NSSAI. In this scenario, the network slice information can be determined based on the operator policy.
  • the AMF may use the DNN corresponding to the slice information in the subscription information as the DNN for the requested PDU session. If the UE's subscription information does not include a default DNN, the AMF may select a locally configured DNN for the S-NSSAI of the serving PLMN.
  • the AMF may discover a suitable SMF based on the network selection auxiliary slice information and the network data name.
  • the AMF may store the relationship between the slice S-NSSAI, DNN, PDU session identifier, SMF ID, and access type of the PDU session.
  • AMF sends message #203; accordingly, SMF receives message #203.
  • the AMF sends a message #203 to the selected SMF to request the SMF to establish a PDU session.
  • Message #203 can be used to request the creation of a session management context for the PDU session, which can be recorded as Nsmf_PDUSession_CreateSMContext_request.
  • message #203 may include: the selected DNN, the subscription permanent identifier (SUPI) of the UE requesting to establish a PDU session, the DNN requested by the UE, and network slice selection auxiliary information.
  • SUPI subscription permanent identifier
  • the SMF queries the UDM for the subscription information of the UE.
  • the SMF may query the UDM for the UE's subscription information.
  • step S204 may be skipped.
  • S205 SMF sends message #205; accordingly, AMF receives message #205.
  • Message #205 may be a response message to message #203, and may be recorded as Nsmf_PDUSession_CreateSMContext_response.
  • the SMF when accepting the establishment request of the PDU session, may create a session management (SM) context for the session; accordingly, message #205 may include an identifier of the session management context.
  • SM session management
  • message #205 may include the reason for refusing to establish the PDU session.
  • step S206 may be executed to authenticate the PDU session.
  • step S206 may be skipped.
  • the SMF can determine whether secondary authentication is required for the PDU.
  • the SMF selects the PCF.
  • step S207 is executed to select an appropriate PCF for the PDU session.
  • PCC policy and charging control
  • S208 Associating a session management policy with the PDU session.
  • the SMF may send a message to the PCF requesting association of a session management policy.
  • the message may include the UE's SUPI.
  • the PCF may determine the session management policy associated with the SUPI.
  • the PCF may send a response message to the SMF.
  • the response message may include session management policy information for the PDU session.
  • the SMF may select a UPF for the PDU session. For example, the SMF may select a UPF based on information about available UPFs configured locally. For another example, the SMF may select a UPF for the PDU session based on the location of the UPF, the location of the UE, and/or the dynamic load of the UPF.
  • the SMF may also allocate an IP address for the PDU session.
  • the SMF may also allocate a session and service continuity mode (SSC) for the PDU session.
  • SSC session and service continuity mode
  • S210 SMF sends message #210; accordingly, AMF can receive message #210.
  • Message #210 may include relevant information of the PDU session, such as information of the N3 tunnel associated with the PDU session, uplink and downlink rate information, UE IP information, etc.
  • the PDU session related information contained in message #210 can be forwarded to the UE via the N1 and/or N2 tunnels.
  • This message #210 can be recorded as Namf_Communication_N1N2MessageTransfer.
  • AMF sends message #211; accordingly, RAN can receive message #211.
  • the AMF may send relevant information of the PDU session to the UE via an N2 message.
  • Message #211 may include relevant information about the PDU session and may be recorded as N2_PDU_Session_request. Message #211 may be a NAS message.
  • Message #212 may include relevant information about the PDU session and may be used to indicate that the network has accepted the establishment of the PDU session. Message #212 may be recorded as PDU_Session_Establishment_Accept.
  • the SMF may send relevant information of the PDU session to the UE.
  • the mobile network provides services to the UE based on subscription information.
  • the core network provides network services to the user based on the UE's subscriber identification module (SIM).
  • SIM subscriber identification module
  • the user subscribes to network services using the SIM card.
  • the core network identifies the SIM card's identifier (e.g., SUPI), determines the subscription information for the SUPI, and provides the corresponding network service.
  • SUPI subscriber identification module
  • a user For services like voice and short message service (SMS), a user has only one terminal device. Accordingly, providing a single set of subscription data for that terminal device is sufficient to meet their needs.
  • a user may own different types of terminal devices (such as mobile phones, tablets, and laptops), and the same terminal may be shared by different users. Traditionally, different users who need to access different services through the same terminal must replace the SIM card in the UE, which degrades the user experience.
  • user identifiers can be used to distinguish different users.
  • a user ID represents the person logged into a UE at a given moment. Only one user can be logged into a UE at a time.
  • the core network can provide services based on the subscription information for each user account. Operators can make user ID information available to third parties, allowing users to use it to register or log into third-party applications.
  • FIG3 is a schematic diagram of a business scenario provided by an embodiment of the present application.
  • a mobile network operator can provide a variety of network services.
  • the owner of a shared terminal (such as the vehicle in Figure 3) (e.g., a car rental company) can purchase a contract for the terminal to access the network from the MNO.
  • Users can purchase contracts for network services from the MNO.
  • the core network can provide different services to users through the vehicle based on the contract information for the network services purchased by the users. For example, as shown in Figure 3, when user A uses the shared vehicle, the core network can provide user service #1 based on the network services purchased by user A. For another example, as shown in Figure 3, when user B uses the shared vehicle, the core network can provide user service #2.
  • different users can enjoy different levels and categories of services through different user IDs.
  • the UE needs to carry a user ID in the message it sends to the network to identify the user using the UE, thereby obtaining the required user files to achieve differentiated quality of service (QoS). That is, each time a PDU session is established, the PDU session establishment request message needs to carry the user ID; accordingly, the multiple messages involved in the PDU session establishment process also need to include the user ID. For example, message #201, message #203, the message involved in step S204, the message involved in step S208, and messages #210 through #212 need to include the user ID. This approach is not suitable for this usage scenario and results in signaling redundancy.
  • QoS differentiated quality of service
  • an embodiment of the present application provides a communication method and device, which enables the network to know whether a user has logged into the UE and the identification of the user logged into the UE in a more efficient manner, and can accurately provide differentiated QoS guarantees.
  • Figure 4 is a schematic diagram of a communication method provided by an embodiment of the present application.
  • the execution subjects of the method shown in Figure 4 as the first network element, the second network element, the third network element, the terminal device, the RAN, the SMF and the PCF.
  • the execution subject of the method shown in Figure 4 can also be a component of the above-mentioned network elements or devices, such as a chip or a chip system or a circuit, and the embodiment of the present application does not limit this.
  • the steps described below as being performed by a single execution subject can also be divided into being performed by multiple execution subjects, and these execution subjects can be logically and/or physically separated.
  • the method 400 may include the following steps:
  • the second network element authenticates the activated user of the UE.
  • the second network element may provide an authentication service.
  • the authentication may be a primary authentication or a secondary authentication.
  • the authentication may be a primary authentication.
  • the second network element may include an AUSF.
  • the second network element may include an AMF.
  • the second network element may include an AAA server.
  • the AAA server may provide a secondary authentication service.
  • the second network element may also be other network elements that can provide authentication services, which is not limited in the embodiments of the present application.
  • the second network element sends a first message; correspondingly, the first network element receives the first message.
  • the second network element may send a first message to the first network element.
  • the first message may include a user identifier of the active user of the UE.
  • the first message may indicate the successful authentication of the UE and the user.
  • the active user of a UE may also have other names, such as the user currently using the UE, the currently logged-in user of the UE, or the currently active user of the UE.
  • the first message may include the user ID of user #1.
  • the first network element may include an AMF.
  • the first network element may include a UDM.
  • the first network element stores the user identifier of the activated user of the UE according to the first message.
  • the first network element may be configured to store data of the UE, or in other words, the first network element may store data of the UE.
  • the UE data may include, for example, UE context information, UE subscription information, etc.
  • the first network element may add and/or update the user ID of the activated user in the stored data of the UE.
  • the first network element may add and/or update the user ID of the activated user of the UE in the context information of the UE stored therein.
  • the first network element may add and/or update the user ID of the activated user of the UE in the subscription information of the UE stored therein.
  • the first network element may add and/or update the user ID of the activated user of the UE in other data of the UE stored therein.
  • the embodiment of the present application does not limit the data structure used to store the user ID.
  • the network element responsible for authentication may indicate the authentication result to the first network element.
  • the first network element may store the user ID of the user, thereby storing the identity of the active user of the UE on the network side.
  • relevant information e.g., session management control policy information, subscription information, etc.
  • other network elements in the network architecture may also be used to store UE-related information.
  • a third network element may be used to store UE subscription information.
  • the method 400 may further include one or more of steps S404 to S406.
  • the first network element sends a first request message; correspondingly, the third network element receives the message.
  • the third network element may be used to store relevant data of the UE, such as subscription information of the UE.
  • the third network element may include a UDR.
  • the first request message may include a user identifier of an activated user of the UE.
  • the first request message may be used to request updating of subscription information of the UE.
  • S405 The third network element updates the stored data of the UE according to the first request message.
  • the third network element may update relevant data of the UE.
  • the third network element may add or update the user identifier of the activated user of the UE in the stored UE data.
  • the UE data may be the UE's subscription information. The specific type of this data is not limited in this embodiment of the present application.
  • the third network element since the third network element has updated the stored UE data, in the process of establishing the PDU session, it can provide relevant information about the PDU session based on the stored UE related data, and can provide users with more reliable QoS service guarantees.
  • the first network element sends indication information to indicate the authentication result; correspondingly, the UE receives the indication information.
  • the indication information may indicate that the authentication is successful.
  • the first network element and the third network element can store the user ID of the activated user of the UE, during the establishment of the PDU session, relevant information can be provided based on the stored user ID of the activated user of the UE.
  • the first network element may store subscription information of different UEs and/or subscription information of different users.
  • the first network element may be a UDM.
  • the SMF may send a second message to the first network element.
  • the second message may be used to query the subscription information of the UE and may include the identifier of the UE.
  • the first network element may determine the user ID of the active user of the UE based on the identifier of the UE; and may determine the subscription information associated with the user ID based on the user ID of the active user of the UE.
  • the first network element may send a third message to the SMF.
  • the third message may include the subscription information associated with the user ID.
  • the third message may also include the user ID.
  • the SMF can determine whether to perform secondary authentication based on the contract information associated with the user ID.
  • the first network element may not store relevant data such as the UE's subscription information.
  • the first network element may determine the user ID of the UE's active user from its stored data based on the UE identifier, so that the PDU session can be associated with the user ID of the user.
  • the first network element may receive a second request message, where the second request message may be used to request creation of a PDU session for the UE, and the second request message may include an identifier of the UE.
  • the first network element may determine, based on the identifier of the UE, a user ID of an active user of the UE.
  • the first network element may send a third request message to the SMF, where the third request message may be used to create a session management context for the PDU session.
  • the third request message may include an identifier of the PDU session, an identifier of the UE, and an user ID of an active user of the UE.
  • the third network element may be used to store the subscription information.
  • the third network element is a UDR.
  • the third network element may send a fourth message to the first network element, and the fourth message may be used to indicate that the subscription information of the UE has been updated.
  • the subscription information stored by the third network element may include session management control policy information.
  • the third network element may provide the stored session management control policy information to other network elements.
  • the SMF may send a request message (e.g., the sixth request message) to the PCF to request an update of session management control policy information for the PDU session of the UE.
  • the PCF may send a message (e.g., the seventh message) to the SMF, which may include session management control policy information associated with the user ID of the active user of the UE. For example, if the PCF does not store the session management control policy information associated with the user ID, the PCF may obtain the session management control policy information from a third network element.
  • the PCF may send a fourth request message to a third network element.
  • the fourth request message may be used to request session management control policy information associated with the UE, and the message may include an identifier of the UE.
  • the third network element may determine the user ID of the active user of the UE based on the identifier of the UE, and determine the session management control policy information associated with the user ID.
  • the third network element may send a fifth message to the PCF, which may include the session management control policy information associated with the user ID.
  • the PCF may send a fifth request message to the third network element.
  • the fifth request message may include a user ID and may be used to request session management control policy information associated with the user ID.
  • the third network element may send a sixth message to the PCF.
  • the sixth message may include the session management control policy information associated with the user ID.
  • the network may store the user ID of the UE's active user.
  • relevant information may be queried based on the stored user ID of the UE's active user, thereby providing reliable QoS service guarantees for the user.
  • the main authentication may include a two-way authentication process between the UE and the network.
  • the main authentication may occur during the registration process of the UE, for example, when the UE first accesses the network or initiates a service request.
  • Figure 5 shows the registration process of the UE
  • Figures 6 and 7 show the main authentication process performed by AUSF.
  • Figure 5 is a schematic diagram of another communication method provided by an embodiment of the present application.
  • Figure 5 shows the registration process of a UE.
  • the method 500 may include the following steps:
  • S501 UE sends a registration request message.
  • the registration request message may include the UE identifier and the registration type.
  • registration types may include initial registration, mobility registration update, periodic registration update, and emergency registration.
  • the registration type of the registration process initiated may be an initial registration.
  • the deregistered state may include a CM-IDLE state, in which there is no connection between the UE and the RAN, and between the RAN and the 5GC.
  • the registration type of the initiated registration process may be mobility registration update.
  • the UE may be in the RM-registered state, and the UE's location may be updated through the mobility registration update.
  • the registration type of the registration process initiated may be periodic registration update.
  • the UE may be in the registered RM-registered state.
  • the registration type of the initiated registration process may be emergency registration.
  • the UE identifier may include a subscription concealed identifier (SUCI), a 5G globally unique temporary UE identity (5G-GUTI) or a permanent equipment identifier (PEI).
  • SUCI subscription concealed identifier
  • 5G-GUTI 5G globally unique temporary UE identity
  • PEI permanent equipment identifier
  • the registration request message may include the 5G-GUTI.
  • the registration request message may include SUCI.
  • the registration request message may include a PEI.
  • the UE identifier used in the registration request message may also be other identifiers, which is not limited in the embodiments of the present application.
  • S502 RAN selects a suitable AMF.
  • S503 The RAN sends a registration request message of the UE to the selected AMF.
  • S504 AMF selects a suitable AUSF for authentication.
  • S505 UE, AMF, AUSF and UDM interact to perform authentication.
  • the extensible authentication protocol (EAP)-authentication and key agreement (AKA) mechanism can be used for authentication.
  • EAP extensible authentication protocol
  • AKA authentication and key agreement
  • EAP-enhanced authentication and key agreement (AKA’) mechanism can be used for authentication.
  • the UE may be authenticated according to the UE's identifier (such as SUPI).
  • SUPI the UE's identifier
  • the registration request message in step S501 and the registration request message in step S503 may also include the user identifier of the user.
  • the user may be authenticated based on the user identifier.
  • step S505 may correspond to step S401.
  • S506 AMF can interact with UDM to obtain the UE's subscription data.
  • the AMF can interact with the UDM through the UE's identity to obtain the UE's subscription data.
  • the AMF may obtain the user's subscription data from the UDM.
  • AMF sends message #507; accordingly, RAN receives message #507.
  • the message #507 may include an N2 message.
  • the N2 message may include information that the RAN needs to forward to the UE, such as registration acceptance information.
  • the registration acceptance information may indicate that the network has accepted the UE's registration request.
  • RAN sends message #508; correspondingly, UE receives the message #508.
  • the message #508 may include a NAS message and may include registration reception information.
  • the security anchor function (SEAF) network element mentioned in Figures 6 and 7 can be used to generate security root keys for the access layer and non-access layer.
  • the SAEF is set in the AMF and can be deployed together with the AMF, rather than existing as an independent network function in the system architecture.
  • FIG6 is a flow chart of another communication method provided by an embodiment of the present application.
  • Method 600 may include the following steps:
  • S601 UE sends message #601; correspondingly, SEAF receives the message #601.
  • Message #601 may include the UE's identifier, such as SUCI or 5G-GUTI.
  • SEAF sends message #602; accordingly, AUSF receives the message #602.
  • Message #602 may be used to request authentication for the UE and may be recorded as Nausf_UEAuthentication_Authenticate_Request.
  • message #602 may include SUPI or SUCI, and may also include the name of the serving network (SNN).
  • SNN serving network
  • SUPI is carried when the UE is authenticated again.
  • the SNN can be constructed by the UE or SEAF, and the AUSF can receive the SNN constructed by the SEAF.
  • the AUSF when the AUSF receives message #602, by comparing the service network name carried in message #602 with the name of the expected service network, it can determine whether the SEAF that sent the message is authorized to use the service network name carried in the message.
  • the name of the service network can be used to derive the anchor key.
  • the name of the service network can bind the anchor key to the service network by including the identifier of the service network.
  • the name of the service network can include a service code set to "5G" to ensure that the anchor key is dedicated to the authentication between the 5G core network and the UE.
  • Message #603 can be used to query the UE's authentication information and can be recorded as Nudm_UEAuthentication_Get_Request.
  • Message #603 may include SUPI/SUCI, and SNN.
  • the UDM may call a subscriber identity discovery function (SIDF) network element to determine the SUPI corresponding to the SUCI.
  • SIDF subscriber identity discovery function
  • S604 Select an authentication method based on the SUPI.
  • UDM/ARPF can select the authentication method based on SUPI.
  • message #601 and message #602 may also include the user identification of the user.
  • the following takes the authentication method EPA-AKA’ as an example and introduces the main authentication process performed by AUSF in combination with Figure 7.
  • FIG7 is a flow chart of another communication method provided by an embodiment of the present application.
  • Method 700 may include the following steps:
  • UDM generates an authentication vector (AV).
  • the UDM can select an authentication method based on the contract information and generate an authentication vector.
  • the authentication vector can include an expected response (ERES) and an authentication token (AUTN).
  • ERES expected response
  • AUTN authentication token
  • UDM sends message #702; accordingly, AUSF receives message #702.
  • Message #702 may include the authentication vector.
  • Message #702 may include a response message to message #603, which may be recorded as Nudm_UEAuthentication_Get_Response.
  • message #702 may also include one or more of SUPI, authentication and key management for applications (AKMA) indication, and routing indication.
  • SUPI authentication and key management for applications
  • AKMA authentication and key management for applications
  • Message #703 may be recorded as Nausf_UEAuthentication_Authenticate_Response.
  • Message #703 may include authentication information, such as AUTN.
  • S704 SEAF sends message #704; correspondingly, UE receives the message #704.
  • SEAF may transparently transmit the authentication information to the UE.
  • Message #704 may include an authentication request message from the core network to the UE, which may be recorded as Auth-Req.
  • the UE can authenticate the core network based on the AUTN.
  • S706 UE sends message #706; correspondingly, SEAF receives the message.
  • the UE can send an authentication response message to the core network.
  • Message #706 may include an authentication response message, which may be denoted as Auth-Resp.
  • SEAF sends message #707; accordingly, AUSF receives the message.
  • Message #707 can be recorded as Nausf_UEAuthentication_Authenticate_Request.
  • AUSF can obtain the authentication response of the UE.
  • the AUSF can compare the UE's authentication response with the authentication vector sent by the UDM. If the two are consistent, the serving network authentication is successful.
  • the AUSF and UE can exchange more EAP messages through SEAF, such as EAP request/AKA’ notification message and EAP response/AKA’ notification message.
  • Message #710 can be recorded as Nausf_UEAuthentication_Authenticate_Response.
  • Message #710 may include EAP success information, anchor key, and SUPI.
  • the EAP success information may indicate that the authentication is successful.
  • SEAF sends message #711; correspondingly, UE receives the message.
  • Message #711 may include EAP success information.
  • the UE can obtain the authentication result.
  • steps S601 to S604 , and steps S701 to S711 may correspond to step S505 .
  • Figure 8 shows a registration process of a UE.
  • FIG8 is a flow chart of another communication method provided by an embodiment of the present application.
  • Method 800 may include:
  • Message #801 may include the UE identifier (such as SUCI or 5G-GUTI) and the user ID of the user currently using the UE.
  • the UE identifier such as SUCI or 5G-GUTI
  • S802 RAN selects a suitable AMF.
  • Message #803 may include the UE identifier (such as SUCI or 5G-GUTI) and the user ID of the user currently using the UE.
  • the UE identifier such as SUCI or 5G-GUTI
  • AMF selects a suitable AUSF.
  • steps S801 to S804 may correspond to steps S501 to S504. Accordingly, message #801 may be a registration request message.
  • AMF sends message #805; accordingly, AUSF receives the message.
  • Message #805 may include SUCI and the user ID of the user currently using the UE.
  • Message #806 may include SUCI and the user ID of the user currently using the UE.
  • steps S805 and S806 may correspond to steps S602 and S603. Accordingly, message #805 may be Nausf_UEAuthentication_Authenticate_Request; and message #806 may be Nudm_UEAuthentication_Get_Request.
  • UDM selects an authentication method and generates an authentication vector.
  • the UDM can select an authentication method based on the user ID of the user currently using the UE and generate an authentication vector.
  • UDM sends message #808; accordingly, AUSF receives the message.
  • Message #808 may include SUPI and authentication vector.
  • Step S808 may correspond to step S702. Accordingly, message #808 may be a response message to message #806, and may correspond to message #702, and may be recorded as Nudm_UEAuthentication_Get_Response.
  • S809 UE, RAN, AMF and AUSF interact to perform authentication.
  • step S809 the user currently using the UE can be authenticated.
  • step S809 may correspond to steps S703 to S708.
  • steps S801 to S809 may correspond to step S401.
  • the AUSF may send a message #810 to the UDM.
  • Message #810 may include the UE's identifier (e.g., SUPI), the user ID of the user currently using the UE, and an indication that the authentication was successful.
  • SUPI the UE's identifier
  • Message #810 can be recorded as Nudm_UserAuthentication_ResultConfimation_Request.
  • step S810 may correspond to step S402, and message #810 may be an example of a first message.
  • the UDM adds/updates information in the stored data of the UE to indicate the user currently using the UE.
  • the UE data stored by the UDM may include UE context information. Based on the UE's identifier, the UDM may retrieve the UE's context from its stored UE contexts and add information to the UE's context to indicate the user currently using the UE. For example, assuming the user identifier is user ID#1, the text "active user: user ID#1" may be added to the UE's context information to indicate the user currently using the UE.
  • step S811 may correspond to step S403.
  • the UDM interacts with the UDR to associate or update the session management policy.
  • the UDR may store relevant data of different UEs and may also store relevant data of different users.
  • the UDM may send a data update request message to the UDR to request updating of data stored in the UDR.
  • the message may be recorded as Nudr_DM_Update.
  • the data update request message may include the UE identifier (such as SUPI) and the user ID currently using the UE.
  • the UDR may add information to the UE-related data stored in it to indicate the user currently using the UE.
  • Step S812 may correspond to step S404, and the data update request message may be taken as an example of a first request message.
  • the UDR may send a response message to the UDM to indicate that the data update has been completed.
  • the response message may be used as an example of the fourth message.
  • UDM sends message #813; accordingly, AUSF receives the message.
  • Message #813 may be recorded as Nudm_UserAuthentication_ResultConfimation_Response, which may be a response message to message #810.
  • Message #814 may be a response message to message #805 and may include an authentication result.
  • AMF sends message #815; accordingly, UE receives the message.
  • Message #815 may include the user ID currently using the UE.
  • steps S814 and S815 may correspond to step S406.
  • steps S814 and S815 may correspond to steps S710 and S711, respectively.
  • the UDM can store the identifier of the user currently using the UE. In this way, the UDM can query relevant information about the user, such as subscription information and policy information related to the PDU session, based on the stored user identifier.
  • relevant information about the user such as subscription information and policy information related to the PDU session, based on the stored user identifier.
  • the following still takes UDM as the first network element, AUSF as the second network element and UDR as the third network element as an example, and describes the process of establishing a PDU session in combination with Figure 9.
  • FIG9 is a flow chart of another communication method provided by an embodiment of the present application.
  • Method 900 may include:
  • S901 UE sends message #901; accordingly, AMF receives the message.
  • Message #901 may be used to request the establishment of a PDU session and may include an identifier of the PDU session.
  • AMF selects SMF.
  • AMF sends message #903; accordingly, SMF receives the message.
  • Message #903 may include the identifier and SUPI of the PDU session.
  • steps S901 to S903 may correspond to steps S201 to S203.
  • S904 SMF sends message #904; accordingly, UDM receives the message.
  • Message #904 may include SUPI. Message #904 may be used to query the subscription data of the user currently using the UE, and may be recorded as Nudm_SDM_Get.
  • message #904 may be used as an example of the second message.
  • the UDM confirms the user file of the user currently using the UE based on the stored data of the UE.
  • the UE data stored by the UDM may include the UE's context. Assume that the UDM has added and/or updated the user ID of the active user of the UE in the UE's context according to method 800.
  • the UDM can find the UE context corresponding to the SUPI from among the multiple UE contexts it stores. Based on the user ID of the user currently using the UE carried in the UE context, the UDM can determine the subscription data corresponding to the user ID, such as user level, IP address, QoS parameters, etc.
  • UDM sends message #906; correspondingly, SMF receives the message.
  • Message #906 may include a user file of the user currently using the UE, and the user file may include subscription data of the user.
  • message #906 may also include the user’s user ID.
  • message #906 may be used as an example of the third message.
  • SMF sends message #907; accordingly, AMF receives the message.
  • the SMF can determine whether to allow the establishment of a PDU session based on the user's subscription data. When the establishment of a PDU session is allowed, the SMF can create a session management context for the PDU session.
  • Message #907 may include an identifier of the session management context of the PDU session.
  • S908 the PDU session is authenticated.
  • the SMF may determine whether a secondary authentication is required for the PDU session based on the user's subscription data and/or the session management policy associated with the DN. For example, when the user's subscription data includes an indication for secondary authentication of the PDU session, the SMF performs secondary authentication on the PDU session.
  • the SMF selects a suitable PCF.
  • SMF sends message #910; correspondingly, PCF receives the message.
  • Message #910 may include the SUPI and the identifier of the PDU session. Message #910 may be used to request an update of the session management control policy and may be recorded as Npcf_SMPolicyControl_Update_Request.
  • message #910 may also include a user ID.
  • message #910 may be used as an example of the sixth request message.
  • PCF sends message #911; accordingly, UDR receives the message.
  • the PCF may send a message to the UDR to query the subscription data associated with the user ID.
  • Message #911 may be recorded as Nudr_DM_Query_Request.
  • message #911 may include the SUPI. Accordingly, the UDR may query the relevant data of the UE based on the SUPI and obtain the user ID of the user currently using the UE from the relevant data. The UDR may also query relevant data associated with the user ID and send it to the PCF. In this scenario, message #911 may serve as an example of the fourth request message; the response message to message #911 may serve as an example of the fifth message.
  • message #911 may include the user ID of the user currently using the UE. Accordingly, the UDR may query data related to the user based on the user ID. In this scenario, message #911 may serve as an example of the fifth request message; the response message to message #911 may serve as an example of the sixth message.
  • steps S911 and S912 may be skipped.
  • UDR sends message #912; correspondingly, PCF receives the message.
  • the UDR can query the stored data related to the UE and the data related to the user currently using the UE.
  • Message #912 may include session management control policy information of the PDU session, such as user level, maximum aggregate bit rate of QoS flow corresponding to DNN/S-NSSAI, allowed services, etc.
  • Message #912 may include a response message to message #911.
  • PCF determines to update the policy associated with the PDU session, or determines to send a new policy to SMF.
  • PCF sends message #914; correspondingly, SMF receives the message.
  • Message #914 may include session control policy information for the PDU session corresponding to the user ID of the user.
  • Message #914 may include a response message to message #910, which may be recorded as Npcf_SMPolicyControl_Update_Response.
  • message #914 may be used as an example of the seventh message.
  • SMF selects the appropriate UPF.
  • S916 Establish a PDU session.
  • steps S915 and S916 may correspond to steps S209 to S212 .
  • Figure 10 shows a registration process of a UE.
  • FIG10 is a flow chart of another communication method provided by an embodiment of the present application.
  • the method 1000 may include the following steps:
  • Message #1001 may include the UE identifier (such as SUCI or 5G-GUTI) and the user ID of the user currently using the UE.
  • the UE identifier such as SUCI or 5G-GUTI
  • S1002 RAN selects a suitable AMF.
  • Message #1003 may include the UE identifier (such as SUCI or 5G-GUTI) and the user ID of the user currently using the UE.
  • the UE identifier such as SUCI or 5G-GUTI
  • AMF selects a suitable AUSF.
  • AMF sends message #1005; accordingly, AUSF receives the message.
  • Message #1005 may include SUCI and the user ID of the user currently using the UE.
  • Message #1006 may include SUCI and the user ID of the user currently using the UE.
  • UDM selects an authentication method and generates an authentication vector.
  • the UDM can select an authentication method based on the user ID of the user currently using the UE and generate an authentication vector.
  • UDM sends message #1008; accordingly, AUSF receives the message.
  • Message #1008 may include SUPI and authentication vector.
  • Step S1008 may correspond to step S702. Accordingly, message #1008 may be a response message to message #1006, and may correspond to message #702, and may be recorded as Nudm_UEAuthentication_Get_Response.
  • S1009 UE, RAN, AMF and AUSF interact to perform authentication.
  • steps S1001 to S1009 may correspond to steps S801 to S809.
  • the AUSF may send message #1010 to the AMF.
  • Message #1010 may include the UE's identifier (e.g., SUPI), the user ID of the user currently using the UE, and an indication that the authentication was successful.
  • SUPI the UE's identifier
  • Message #1010 may be recorded as Nausf_UserAuthentication_Authenticate_Response.
  • message #1010 may be used as an example of the first message.
  • the AMF adds/updates information in the stored data of the UE to indicate the user currently using the UE.
  • the UE data stored by the AMF may include UE context information. Based on the UE identifier, the AMF may search for the UE context from its stored UE context. Information may be added/updated in the UE context to indicate the user currently using the UE. For example, assuming the user identifier of the user is user ID#2, the words "current user: user ID#2" may be added to the UE context information to indicate the user currently using the UE.
  • step S1011 may correspond to step S403.
  • AMF sends message #1012; accordingly, UE receives the message.
  • the AMF may send a message to the UE to notify the user currently using the UE that the UE has successfully registered with the network.
  • Message #1012 may include the user ID.
  • Step S1012 may correspond to step S406 .
  • the AMF can store the identifier of the user currently using the UE. In this way, the AMF can pass the recorded user identifier to other network elements, enabling the UDM and UDR to accurately provide services to the user based on the user identifier. In this way, during the establishment of the PDU session, signaling overhead can be reduced and communication efficiency can be improved.
  • FIG11 is a flow chart of another communication method provided by an embodiment of the present application.
  • the method 1100 may include the following steps:
  • Message #1101 may be used to request the establishment of a PDU session and may include an identifier of the PDU session.
  • message #1101 may be used as an example of a second request message.
  • AMF selects SMF.
  • steps S1101 and S1102 may correspond to steps S901 and S902.
  • AMF confirms the user ID of the user currently using the UE based on the stored context of the UE.
  • AMF sends message #1104; accordingly, SMF receives the message.
  • Message #1104 may include the identifier of the PDU session, the SUPI, and the user ID of the user currently using the UE.
  • message #1104 may serve as an example of a third request message.
  • SMF sends message #1105; accordingly, UDM receives the message.
  • Message #1105 may include the user ID of the user currently using the UE.
  • Message #1104 may be used to query the user's subscription data and may be recorded as Nudm_SDM_Get.
  • the UDM can search for the user file associated with the user ID from its stored user files.
  • the user file may include contract data.
  • UDM sends message #1106; correspondingly, SMF receives the message.
  • Message #1106 may include a user file of the user currently using the UE, and the user file may include subscription data of the user.
  • SMF sends message #1107; accordingly, AMF receives the message.
  • the SMF can determine whether to allow the establishment of a PDU session based on the user's subscription data. When the establishment of a PDU session is allowed, the SMF can create a session management context for the PDU session.
  • Message #1107 may include an identifier of the session management context of the PDU session.
  • S1108 the PDU session is authenticated.
  • the SMF can determine whether a secondary authentication is required for the PDU session based on the user's subscription data and/or the session management policy associated with the DN. If a secondary authentication is not required for the PDU session, step S1108 can be skipped.
  • the SMF selects a suitable PCF.
  • steps S1107 to S1109 may correspond to steps S907 to S909.
  • SMF sends message #1110; accordingly, PCF receives the message.
  • Message #1110 may include the SUPI, the user ID of the user currently using the UE, and the identifier of the PDU session.
  • Message #1110 may be used to request an update of a session management control policy and may be recorded as Npcf_SMPolicyControl_Update_Request.
  • PCF sends message #1111; accordingly, UDR receives the message.
  • the PCF may send a message to the UDR to query the subscription data associated with the user ID.
  • Message #1111 may be recorded as Nudr_DM_Query_Request.
  • message #1111 may include the user ID of the user currently using the UE. Accordingly, the UDR may query data related to the user based on the user ID.
  • steps S1111 and S1112 may be skipped.
  • UDR sends message #1112; accordingly, PCF receives the message.
  • the UDR can query the relevant data of the user currently using the UE from the data stored therein.
  • Message #1112 may include session management control policy information of the PDU session, such as user level, maximum aggregate bit rate of the QoS flow corresponding to DNN/S-NSSAI, allowed services, etc.
  • PCF determines to update the policy associated with the PDU session, or determines to send a new policy to SMF.
  • PCF sends message #1114; accordingly, SMF receives the message.
  • Message #1114 may include session control policy information for the PDU session corresponding to the user ID of the user.
  • Message #1114 may include a response message to message #1110, which may be recorded as Npcf_SMPolicyControl_Update_Response.
  • SMF selects appropriate UPF.
  • steps S1113 to S1116 may correspond to steps S913 to S916.
  • FIG12 is a flow chart of another communication method provided by an embodiment of the present application.
  • the method 1200 may include the following steps:
  • AMF sends message #1201 to NSSF.
  • the AMF can send a message to the NSSF in the serving PLMN to query the NRF instance of the network slice serving the UE.
  • Message #1201 can be recorded as Nnssf_NSSelection_Get.
  • the S-NSSAI of the visited PLMN is derived from the allowed NSSAI requested by the UE, the PLMN ID of the SUPI, and the tracking area identity (TAI) of the UE, and indicates the request during the PDU session establishment process in non-roaming or roaming with local offload scenarios.
  • NSSF sends message #1202 to AMF.
  • the NSSF in the serving PLMN selects a network slice instance, determines and returns an appropriate NRF.
  • This NRF can be used to select network elements or services within the selected network slice instance.
  • it returns the ID of the network-specific identifier (NSI) corresponding to the network slice instance.
  • NSI network-specific identifier
  • Message #1202 may include a response message to message #1201.
  • Message #1202 may be recorded as Nnssf_NSSelection_Get_response.
  • steps S1201 and S1202 can be skipped.
  • AMF sends message #1203; accordingly, NRF receives the message.
  • the AMF may send a message to query the appropriate NRF in the serving PLMN.
  • Message #1203 may be denoted as Nnrf_NFDiscoverry_Requst and may include the S-NSSAI of the VPLMN of the PDU session, the allowed NSSAI, and the PLMN ID of the SUPI.
  • message #1203 may also include the NSI ID when the AMF has stored the NSI ID of the CPLMN's S-NSSAI for this PDU session from the allowed NSSAIs.
  • NRF sends #1204; accordingly, AMF receives the message.
  • the NRF in the serving PLMN may send a message to provide the AMF with the set of discovered SMF instances or the set of endpoint addresses of SMF service instances, and possibly the corresponding S-NSSAI for subsequent NRF queries.
  • the endpoint address may include an IP address or a fully qualified domain name (FQDN).
  • Message #1204 may include a response message to message #1203, which may be recorded as Nnrf_NFDiscoverry_Requst_response.
  • the AMF can obtain information about the SMF and select an appropriate SMF.
  • steps S1201 to S1204 may be skipped.
  • Figure 13 is a flow chart of another communication method provided by an embodiment of the present application.
  • Method 1300 may include the following steps.
  • S1301 SMF sends message #1301 to PCF.
  • the SMF may send a message to the PCF to request the creation of a session management policy association.
  • steps S1301 to S1306 may correspond to step S208.
  • the SMF may send a message to the PCF to request an update of the session management policy.
  • step S1301 may correspond to step S910 or S1110.
  • PCF sends message #1302 to UDR.
  • the PCF When the PCF does not store the required UE-related subscription information and the required user ID-related subscription information, it can query the UDR for the required information.
  • message #1302 may include a data key and a data set.
  • the data key may include an identifier for querying data, such as a SUPI, user ID, etc.
  • the data set may include the data to be queried.
  • Table 1 shows a storage format for a UDR.
  • UDR sends message #1303 to PCF.
  • the UDR can query the corresponding contract data based on data and data set and send it to the PCF.
  • a policy counter is set in the charging function (CHF) network element.
  • the PCF can initiate the retrieval of the required expenditure limit report based on the status of the policy counter.
  • an initial spending limit report retrieval may be initiated when a policy counter status report is not established for the subscribing user.
  • the PCF may initiate an interim spending limit report retrieval.
  • the PCF may establish a session management policy association.
  • the PCF may update the session management policy association.
  • PCF sends message #1306 to SMF.
  • Message #1306 may be a response message to message #1301.
  • Message #1306 may include information about a session management policy of the PDU session.
  • Figure 14 is a schematic block diagram of an apparatus provided in an embodiment of the present application.
  • Apparatus 1400 may correspond to a first network element, a second network element, a third network element, an SMF, or a PCF, or may be a component (e.g., a chip, a processor, or a processing circuit) or unit that implements the functions of the aforementioned network elements.
  • a component e.g., a chip, a processor, or a processing circuit
  • the device 1400 may include a communication module 1410, which may also be called a transceiver module, a transceiver, a transceiver, or a transceiver device, etc., for performing receiving (or inputting) and/or sending (or outputting) operations.
  • a communication module 1410 which may also be called a transceiver module, a transceiver, a transceiver, or a transceiver device, etc., for performing receiving (or inputting) and/or sending (or outputting) operations.
  • the communication module 1410 can be used to receive a first message, send a first request message, etc.
  • the communication module 1410 can be used to send the first message.
  • the communication module 1410 can be used to receive the first request message, send the fourth message, etc.
  • the communication module 1410 can be used to send a second message, receive a third message, etc.
  • the communication module 1410 can be used to send the fourth request message and receive the fifth message.
  • the apparatus 1400 may include a processing module 1420 , which may be a processor, a processing board, a processing unit, or a processing device.
  • a processing module 1420 may be a processor, a processing board, a processing unit, or a processing device.
  • the processing module 1420 may be configured to determine a user identifier of an activated user of the terminal device according to an identifier of the terminal device.
  • the processing module 1420 may be configured to determine the user identification of the activated user of the terminal device according to the identification of the terminal device.
  • the apparatus 1400 may include a storage module 1430.
  • the storage module may be a memory, a storage unit, or a storage device.
  • the storage module 1430 can be used to determine and store a corresponding user identifier according to the first message.
  • the storage module 1430 can be used to update the contract information of the terminal device stored in the third network element according to the first request information.
  • Figure 15 is a schematic block diagram of an apparatus 2000 provided in an embodiment of the present application.
  • the apparatus 2000 includes at least one processor 2010 to implement the functions of the first network element, the second network element, the third network element, the SMF, or the PCF described in the aforementioned method embodiment.
  • the processor 2010 is coupled to a memory, which may be located within the device, integrated with the processor, or external to the device.
  • the device 2000 may further include at least one memory 2020.
  • the memory 2020 stores computer programs, instructions, or data necessary to implement any of the above-described method embodiments.
  • the processor 2010 may execute the computer programs, instructions, or data stored in the memory 2020 to perform the interleaving method or deinterleaving method of any of the above-described embodiments.
  • the apparatus 2000 may further include a communication interface 2030, and the apparatus 2000 may exchange information with other devices via the communication interface 2030.
  • the communication interface 2030 may be a transceiver, circuit, bus, module, pin, or other type of interface.
  • Coupling in this application refers to an indirect coupling or communication connection between devices, units, or modules, which can be electrical, mechanical, or other forms, and is used for information exchange between devices, units, or modules.
  • the processor 2010 may operate in conjunction with the memory 2020 and the communication interface 2030.
  • the specific connection medium between the processor 2010, memory 2020, and communication interface 2030 is not limited in this application.
  • the present application also provides a chip (or chip system).
  • the chip (or chip system) 30 may include a circuit 31 and an input/input interface 32.
  • the circuit 31 may be a logic circuit, an integrated circuit, etc.
  • the input/output interface 32 may also be an input/output circuit, or an interface circuit, which can input information (or receive information) and output information (or send information).
  • the chip system can be composed of chips, or it can include chips and other discrete devices.
  • the chip 30 can be used to execute the methods performed by the first network element, the second network element, the third network element, the SMF or the PCF in each embodiment of the present application.
  • the present application also provides a computer-readable storage medium, which stores computer instructions.
  • the computer instructions When the computer instructions are executed on a computer, the operations and/or processing performed by the first network element, the second network element, the third network element, the SMF or the PCF in the various method embodiments of the present application are executed.
  • the present application also provides a computer program product, which includes computer program code or instructions.
  • a computer program product which includes computer program code or instructions.
  • the operations and/or processing performed by the first network element, the second network element, the third network element, the SMF or the PCF in the various method embodiments of the present application are executed.
  • the present application further provides a chip, comprising a processor.
  • a memory for storing a computer program is provided independently of the chip, and the processor is configured to execute the computer program stored in the memory, so that the operations and/or processes performed by the first network element, the second network element, the third network element, the SMF, or the PCF in any one of the method embodiments are executed.
  • the chip may further include a communication interface.
  • the communication interface may be an input/output interface, or an interface circuit, etc.
  • the chip may further include a memory.
  • the present application provides a communication system, including one or more of the first network element, the second network element, the third network element, the SMF and the PCF in the above method embodiment.
  • a processor may be a general-purpose processor, a digital signal processor, an application-specific integrated circuit, a field-programmable gate array or other programmable logic device, a discrete gate or transistor logic device, or a discrete hardware component, and may implement or execute the methods, steps, and logic block diagrams disclosed in this application.
  • a general-purpose processor may be a microprocessor or any conventional processor. The steps of the methods disclosed in this application may be directly executed by a hardware processor, or by a combination of hardware and software modules within the processor.
  • the memory may be a non-volatile memory, such as a hard disk or solid-state drive, or a volatile memory, such as a random access memory.
  • a memory is any other medium that can be used to carry or store desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited thereto.
  • the memory in this application may also be a circuit or any other device capable of performing a storage function, for storing program instructions and/or data.
  • the disclosed systems, devices and methods can be implemented in other ways.
  • the device embodiments described above are merely schematic.
  • the division of the units is merely a logical function division.
  • Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.
  • the units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple network units. Some or all of these units may be selected to achieve the purpose of this embodiment according to actual needs.
  • each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.
  • the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium.
  • the computer software product is stored in a storage medium and includes several instructions for enabling a computer device (which can be a personal computer, server, or network device, etc.) to execute all or part of the steps of the method described in each embodiment of the present application.
  • the aforementioned storage medium includes various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory, a random access memory, a magnetic disk, or an optical disk.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

The present application provides a communication method and apparatus, applicable to the field of communications. The method comprises: when an activated user of a terminal device is successfully authenticated, a second network element sends a first message to a first network element, wherein the first message comprises the identifier of the terminal device and the user identifier of the activated user, and the first message indicates that the activated user of the terminal device is successfully authenticated; on the basis of the first message, the first network element stores the user identifier of the activated user of the terminal device. In this way, the signaling overhead can be reduced when a protocol data unit session is established for the terminal device, the communication efficiency is improved, and reliable differentiated quality-of-service guarantee can be provided for a user.

Description

通信方法和装置Communication method and device

本申请要求在2024年2月8日提交中国国家知识产权局、申请号为202410179371.4、发明名称为“通信方法和装置”的中国专利申请的优先权,其全部内容通过引用结合在本申请中。This application claims priority to the Chinese patent application filed with the State Intellectual Property Office of China on February 8, 2024, with application number 202410179371.4 and invention name “Communication Method and Device”, the entire contents of which are incorporated by reference into this application.

技术领域Technical Field

本申请实施例涉及通信领域,并且更具体地,涉及一种通信方法和装置。The embodiments of the present application relate to the field of communications, and more specifically, to a communication method and apparatus.

背景技术Background Art

当前的移动网络基于签约信息为终端提供服务。随着时代的发展,一个用户可能拥有多个不同类型的终端设备,多个用户也可能在不同的时段共享使用同一个终端设备(比如共享汽车等共享终端的业务场景),这导致服务的订阅者、终端设备的所有者以及终端设备的实际使用者不再是一一对应的关系。Current mobile networks provide services to devices based on subscription information. With the development of the times, a user may own multiple different types of devices, and multiple users may share the same device at different times (for example, in shared terminal scenarios like car-sharing). This results in a break from a one-to-one relationship between service subscribers, device owners, and actual users.

当前,在建立协议数据单元会话时,终端设备不仅需要向网络侧上报其自身的标识,还需要上报当前使用该终端设备的用户的用户标识,使得网络侧能够基于相应的签约信息实现该会话控制的管理。该方式与共享终端的业务场景难以有效匹配,存在冗余的信令开销。Currently, when establishing a protocol data unit (PDU) session, a terminal device must report not only its own identity to the network, but also the user identity of the user currently using the terminal device, so that the network can manage the session based on the corresponding subscription information. This approach is not well-suited for shared terminal services and results in redundant signaling overhead.

发明内容Summary of the Invention

本申请提供一种通信方法和装置,在对终端设备的激活用户的鉴权成功时,网络侧能够存储该终端设备的激活用户的用户标识,使得在为该终端设备建立协议数据单元会话时,可以降低对来自终端设备的信息的依赖,能够降低信令开销,提升通信效率,能够为用户提供可靠的差异化的服务质量保障。The present application provides a communication method and apparatus, in which, when the authentication of an activated user of a terminal device is successful, the network side can store the user identification of the activated user of the terminal device, so that when establishing a protocol data unit session for the terminal device, the dependence on information from the terminal device can be reduced, the signaling overhead can be reduced, the communication efficiency can be improved, and the user can be provided with reliable and differentiated service quality assurance.

第一方面,提供了一种通信方法,该方法由第一网元或用于第一网元的部件(如芯片或芯片系统)执行,本申请对此不作具体限定。该方法包括:接收第一消息,第一消息指示对终端设备的激活用户的成功鉴权,第一消息包括该激活用户的用户标识;根据第一消息,存储该用户标识。In a first aspect, a communication method is provided. The method is performed by a first network element or a component (such as a chip or chip system) for the first network element, which is not specifically limited in this application. The method includes: receiving a first message indicating successful authentication of an activated user of a terminal device, the first message including a user identifier of the activated user; and storing the user identifier according to the first message.

示例性地,该第一网元可以包括统一数据管理网元或移动性管理网元。Exemplarily, the first network element may include a unified data management network element or a mobility management network element.

一些可能的实现方式中,根据第一消息,存储该用户标识,可以包括:根据该第一消息,在该终端设备的上下文或签约信息中,存储该用户标识。In some possible implementations, storing the user identifier according to the first message may include: storing the user identifier in the context or contract information of the terminal device according to the first message.

本申请中,在对终端设备的激活用户的鉴权成功时,第一网元能够存储该终端设备的激活用户的用户标识,使得在为该终端设备建立协议数据单元会话时,第一网元能够根据其所存储的终端设备的激活用户的用户标识实现网络侧对该会话管理的控制,能够降低信令开销,提升通信效率,能够为用户提供可靠的差异化的服务质量保障。In the present application, when the authentication of the activated user of the terminal device is successful, the first network element can store the user identification of the activated user of the terminal device, so that when establishing a protocol data unit session for the terminal device, the first network element can realize the network side's control over the session management based on the user identification of the activated user of the terminal device stored by it, which can reduce signaling overhead, improve communication efficiency, and provide users with reliable and differentiated service quality assurance.

一个实施例中,该第一网元可以包括统一数据管理网元。In one embodiment, the first network element may include a unified data management network element.

结合第一方面,在第一方面的某些实现方式中,该方法还可以包括:发送第一请求消息,第一请求消息可以用于请求更新该终端设备的签约信息,第一请求消息可以包括用户标识和终端设备的标识(identifier,ID)。In combination with the first aspect, in certain implementations of the first aspect, the method may further include: sending a first request message, the first request message may be used to request updating the contract information of the terminal device, and the first request message may include a user identifier and an identifier (ID) of the terminal device.

一些可能的实现方式中,该方法还可以包括:接收第四消息,第四消息可以用于指示该终端设备的签约信息的更新已完成。In some possible implementations, the method may further include: receiving a fourth message, where the fourth message may be used to indicate that the update of the contract information of the terminal device has been completed.

一个实施例中,第三网元可以接收该第一请求消息,可以根据该第一请求消息更新其所存储的该终端设备的签约信息。例如,可以在该终端设备的签约信息中增加或更新其激活用户的用户标识。In one embodiment, the third network element may receive the first request message and update the subscription information of the terminal device stored therein according to the first request message. For example, the user identifier of the activated user may be added or updated in the subscription information of the terminal device.

本申请中,通过对第三网元所存储的终端设备的签约信息的更新,使得在为该终端设备建立协议数据单元会话时,网络侧能够基于该用户的用户标识实现网络侧对该会话管理的控制,能够降低信令开销,提升通信效率,能够为用户提供可靠的差异化的服务质量保障。In this application, by updating the contract information of the terminal device stored in the third network element, when establishing a protocol data unit session for the terminal device, the network side can control the session management based on the user's user identification, which can reduce signaling overhead, improve communication efficiency, and provide users with reliable and differentiated service quality guarantees.

结合第一方面,在第一方面的某些实现方式中,该方法还可以包括:接收第二消息,该第二消息可以用于查询该终端设备的签约信息;发送第三消息,第三消息可以包括与该用户标识关联的签约信息。In combination with the first aspect, in certain implementations of the first aspect, the method may further include: receiving a second message, which may be used to query the contract information of the terminal device; and sending a third message, which may include the contract information associated with the user identifier.

结合第一方面,在第一方面的某些实现方式中,第三消息可以包括该用户标识。In combination with the first aspect, in some implementations of the first aspect, the third message may include the user identifier.

一个实施例中,该第一网元可以包括移动性管理网元。In one embodiment, the first network element may include a mobility management network element.

结合第一方面,在第一方面的某些实现方式中,该方法还可以包括:接收第二请求消息,第二请求消息用于请求为终端设备建立协议数据单元PDU会话,第二请求消息可以包括终端设备的标识;根据终端设备的标识,确定终端设备的激活用户的用户标识;发送第三请求消息,第三请求消息可以用于请求为该PDU会话创建会话管理上下文,第三请求消息包括该PDU会话的标识、该终端设备的标识和用户标识。In combination with the first aspect, in certain implementations of the first aspect, the method may further include: receiving a second request message, the second request message being used to request establishment of a protocol data unit (PDU) session for a terminal device, and the second request message may include an identifier of the terminal device; determining, based on the identifier of the terminal device, a user identifier of an activated user of the terminal device; and sending a third request message, the third request message may be used to request creation of a session management context for the PDU session, and the third request message includes an identifier of the PDU session, an identifier of the terminal device, and a user identifier.

第二方面,提供了一种通信方法,该方法由第二网元或用于第二网元的部件(如芯片或芯片系统)执行,本申请对此不作具体限定。该方法包括:在对终端设备的激活用户的鉴权成功时,发送第一消息,第一消息指示对终端设备的激活用户的成功鉴权,第一消息包括激活用户的用户标识。In a second aspect, a communication method is provided. The method is performed by a second network element or a component (such as a chip or chip system) for the second network element, which is not specifically limited in this application. The method includes: when authentication of an activated user of a terminal device is successful, sending a first message indicating successful authentication of the activated user of the terminal device, the first message including a user identifier of the activated user.

第三方面,提供了一种通信方法,该方法由第三网元或用于第三网元的部件(如芯片或芯片系统)执行,本申请对此不作具体限定。该方法包括:接收第一请求信息,第一请求消息用于请求更新终端设备的签约信息,第一请求消息包括终端设备的激活用户的用户标识和终端设备的标识;根据第一请求信息,更新第三网元存储的终端设备的签约信息。In a third aspect, a communication method is provided, which is performed by a third network element or a component (such as a chip or chip system) for the third network element, and is not specifically limited in this application. The method includes: receiving a first request message for requesting an update of contract information of a terminal device, the first request message including a user identifier of an activated user of the terminal device and an identifier of the terminal device; and updating the contract information of the terminal device stored in the third network element according to the first request message.

一个实施例中,更新第三网元存储的终端设备的签约信息,可以包括,在该签约信息中增加或更新该终端设备的激活用户的用户标识。In one embodiment, updating the subscription information of the terminal device stored in the third network element may include adding or updating the user identifier of the activated user of the terminal device in the subscription information.

结合第三方面,在第三方面的某些实现方式中,该方法还可以包括:发送第四消息,第四消息可以用于指示终端设备的签约信息完成更新。In combination with the third aspect, in certain implementations of the third aspect, the method may further include: sending a fourth message, where the fourth message may be used to indicate that the contract information of the terminal device has been updated.

结合第三方面,在第三方面的某些实现方式中,签约信息可以包括会话管理控制策略信息。In combination with the third aspect, in certain implementations of the third aspect, the subscription information may include session management control policy information.

一些可能的实现方式中,该方法还可以包括:接收第四请求消息,第四请求信息可以用于请求与终端设备关联的会话管理控制策略信息,第四请求信息可以包括终端设备的标识;根据终端设备的标识,确定终端设备的激活用户的用户标识;发送第五消息,第五消息可以包括与用户标识关联的会话管理控制策略信息。In some possible implementations, the method may further include: receiving a fourth request message, the fourth request message may be used to request session management control policy information associated with the terminal device, and the fourth request message may include an identifier of the terminal device; determining the user identifier of the activated user of the terminal device based on the identifier of the terminal device; and sending a fifth message, the fifth message may include session management control policy information associated with the user identifier.

一些可能的实现方式中,该方法还可以包括:接收第五请求消息,第五请求消息可以用于请求与用户标识关联的会话管理控制策略信息,第五请求信息可以包括用户标识;发送第六消息,第六消息可以包括与用户标识关联的会话管理控制策略信息。In some possible implementations, the method may further include: receiving a fifth request message, which may be used to request session management control policy information associated with the user identifier, and the fifth request message may include the user identifier; and sending a sixth message, which may include session management control policy information associated with the user identifier.

第四方面,提供了一种通信方法,该方法由会话管理功能网元或用于该网元的部件(如芯片或芯片系统)执行,本申请对此不作具体限定。该方法包括:发送第二消息,第二消息用于查询终端设备的签约信息,第二消息包括该终端设备的标识;接收第三消息,第三消息包括与该终端设备的激活用户的用户标识关联的签约信息,该用户标识是根据该终端设备的标识确定的。In a fourth aspect, a communication method is provided, which is performed by a session management function network element or a component (such as a chip or chip system) for the network element, and is not specifically limited in this application. The method includes: sending a second message, the second message being used to query the contract information of a terminal device, the second message including the identifier of the terminal device; and receiving a third message, the third message including the contract information associated with the user identifier of an activated user of the terminal device, the user identifier being determined based on the identifier of the terminal device.

结合第四方面,在第四方面的某些实现方式中,该方法还可以包括:发送第六请求消息,第六请求消息可以用于请求为终端设备的PDU会话更新会话管理控制策略信息,第六请求信息可以包括该终端设备的标识和该PDU会话的标识;接收第七消息,第七消息可以包括与该用户标识关联的会话管理控制策略信息。In combination with the fourth aspect, in certain implementations of the fourth aspect, the method may further include: sending a sixth request message, the sixth request message may be used to request updating the session management control policy information for the PDU session of the terminal device, the sixth request message may include the identifier of the terminal device and the identifier of the PDU session; receiving a seventh message, the seventh message may include the session management control policy information associated with the user identifier.

一些可能的实现方式中,第六请求消息还可以包括该终端设备的激活用户的用户标识。In some possible implementations, the sixth request message may further include a user identifier of an activated user of the terminal device.

第五方面,提供了一种通信方法,该方法由策略控制功能网元或用于该网元的部件(如芯片或芯片系统)执行,本申请对此不作具体限定。该方法包括:发送第四请求消息,第四请求信息用于请求与终端设备关联的会话管理控制策略信息,第四请求信息包括该终端设备的标识;接收第五消息,第五消息包括与该终端设备的激活用户的用户标识关联的会话管理控制策略信息。In a fifth aspect, a communication method is provided, which is performed by a policy control function network element or a component (such as a chip or chip system) used for the network element, and is not specifically limited in this application. The method includes: sending a fourth request message, the fourth request message being used to request session management control policy information associated with a terminal device, the fourth request message including an identifier of the terminal device; and receiving a fifth message, the fifth message including session management control policy information associated with a user identifier of an activated user of the terminal device.

第六方面,提供了一种装置。该装置可以包括用于实现第一方面至第五方面中任一方面及其可能的实现方式中的方法的模块或单元。In a sixth aspect, a device is provided, which may include a module or unit for implementing the method in any one of the first to fifth aspects and possible implementations thereof.

示例性地,该装置包括通信模块。Illustratively, the apparatus includes a communication module.

一些可能的实现方式中,该装置还可以包括处理模块。In some possible implementations, the device may further include a processing module.

一些可能的实现方式中,该装置还可以包括存储模块。In some possible implementations, the device may further include a storage module.

第七方面,提供了一种装置,包括至少一个处理器,至少一个处理器与至少一个存储器耦合,至少一个存储器用于存储计算机程序或指令,至少一个处理器用于从至少一个存储器中调用并运行该计算机程序或指令,使得装置执行第一方面至第五方面中任一方面的方法,或第一方面至第五方面的任意可能的实现方式中的方法。In the seventh aspect, a device is provided, comprising at least one processor, the at least one processor being coupled to at least one memory, the at least one memory being used to store computer programs or instructions, and the at least one processor being used to call and run the computer program or instructions from the at least one memory, so that the device executes the method of any one of the first to fifth aspects, or the method of any possible implementation of the first to fifth aspects.

在一个示例中,第七方面的装置可以为第一网元、第二网元、第三网元、策略控制功能网元或会话管理功能网元。In one example, the apparatus of the seventh aspect may be a first network element, a second network element, a third network element, a policy control function network element, or a session management function network element.

第八方面,本申请提供一种芯片,包括通信接口和电路,通信接口用于接收来自其他装置的信息并输入电路,和/或通信接口用于将电路中的信息发送至其他装置,电路用于执行第一方面至第五方面中任一方面或其任一可能的实现方式中的方法。In an eighth aspect, the present application provides a chip comprising a communication interface and a circuit, wherein the communication interface is used to receive information from other devices and input the information into the circuit, and/or the communication interface is used to send the information in the circuit to other devices, and the circuit is used to execute the method of any aspect from the first to the fifth aspect or any possible implementation thereof.

第九方面,本申请提供一种计算机可读存储介质,计算机可读存储介质中存储有计算机指令,当计算机指令在计算机上运行时,使得第一方面至第五方面中任一方面或其任一可能的实现方式中的方法被实现。In a ninth aspect, the present application provides a computer-readable storage medium, in which computer instructions are stored. When the computer instructions are executed on a computer, the method in any one of the first to fifth aspects or any possible implementation thereof is implemented.

第十方面,本申请提供一种计算机程序产品,计算机程序产品包括计算机程序代码,当计算机程序代码在计算机上运行时,使得第一方面至第五方面中任一方面或其任一可能的实现方式中的方法被实现。In a tenth aspect, the present application provides a computer program product, which includes computer program code. When the computer program code runs on a computer, the method in any one of the first to fifth aspects or any possible implementation thereof is implemented.

第十一方面,本申请提供一种通信系统,包括如第六方面至第八方面中任一方面的装置,例如第一网元、第二网元、第三网元、策略控制功能网元和/或会话管理功能网元。In the eleventh aspect, the present application provides a communication system, including an apparatus as in any one of aspects 6 to 8, such as a first network element, a second network element, a third network element, a policy control function network element and/or a session management function network element.

附图说明BRIEF DESCRIPTION OF THE DRAWINGS

图1是本申请实施例适用的一种应用场景的示意图;FIG1 is a schematic diagram of an application scenario applicable to an embodiment of the present application;

图2是一种建立协议数据单元会话的流程的示意图;FIG2 is a schematic diagram of a process for establishing a protocol data unit session;

图3是本申请实施例提供的一种业务场景的示意图;FIG3 is a schematic diagram of a business scenario provided in an embodiment of the present application;

图4是本申请实施例提供的一种通信方法的示意图;FIG4 is a schematic diagram of a communication method provided in an embodiment of the present application;

图5是本申请实施例提供的另一种通信方法的流程性示意图;FIG5 is a flow chart of another communication method provided in an embodiment of the present application;

图6是本申请实施例提供的另一种通信方法的流程性示意图;FIG6 is a flow chart of another communication method provided in an embodiment of the present application;

图7是本申请实施例提供的另一种通信方法的流程性示意图;FIG7 is a flow chart of another communication method provided in an embodiment of the present application;

图8是本申请实施例提供的另一种通信方法的流程性示意图;FIG8 is a flow chart of another communication method provided in an embodiment of the present application;

图9是本申请实施例提供的另一种通信方法的流程性示意图;FIG9 is a flow chart of another communication method provided in an embodiment of the present application;

图10是本申请实施例提供的另一种通信方法的流程性示意图;FIG10 is a flow chart of another communication method provided in an embodiment of the present application;

图11是本申请实施例提供的另一种通信方法的流程性示意图;FIG11 is a flow chart of another communication method provided in an embodiment of the present application;

图12是本申请实施例提供的另一种通信方法的流程性示意图;FIG12 is a flow chart of another communication method provided in an embodiment of the present application;

图13是本申请实施例提供的另一种通信方法的流程性示意图;FIG13 is a flow chart of another communication method provided in an embodiment of the present application;

图14是本申请实施例提供的一种装置的示意图;FIG14 is a schematic diagram of a device provided in an embodiment of the present application;

图15是本申请实施例提供的另一种装置的示意图;FIG15 is a schematic diagram of another device provided in an embodiment of the present application;

图16是本申请实施例提供一种芯片系统的示意图。FIG16 is a schematic diagram of a chip system provided in an embodiment of the present application.

具体实施方式DETAILED DESCRIPTION

下面将结合附图,对本申请中的技术方案进行描述。The technical solution in this application will be described below with reference to the accompanying drawings.

本申请实施例的技术方案可以应用于各种通信系统,例如,长期演进(long term evolution,LTE)系统、频分双工(frequency division duplex,FDD)系统、时分双工(time division duplex,TDD)系统、通用移动通信系统(universal mobile telecommunication system,UMTS)、全球互联微波接入(worldwide interoperability for microwave access,WiMAX)通信系统、第五代(5th generation,5G)系统或新无线(new radio,NR)、第六代(6th generation,6G)系统或未来的通信系统等。本申请中所述的5G移动通信系统包括非独立组网(non-standalone,NSA)的5G移动通信系统或独立组网(standalone,SA)的5G移动通信系统。通信系统还可以是公共陆地移动网络(public land mobile network,PLMN)、设备到设备(device to device,D2D)通信系统、机器到机器(machine to machine,M2M)通信系统、物联网(Internet of things,IoT)通信系统、车联万物(vehicle to everything,V2X)通信系统、无人机(uncrewed aerial vehicle,UAV)通信系统或者其他通信系统。The technical solutions of the embodiments of the present application can be applied to various communication systems, such as a long term evolution (LTE) system, a frequency division duplex (FDD) system, a time division duplex (TDD) system, a universal mobile telecommunication system (UMTS), a world-wide interoperability for microwave access (WiMAX) communication system, a fifth generation (5G) system or a new radio (NR) system, a sixth generation (6G) system, or future communication systems. The 5G mobile communication system described in the present application includes a non-standalone (NSA) 5G mobile communication system or a standalone (SA) 5G mobile communication system. The communication system may also be a public land mobile network (PLMN), a device-to-device (D2D) communication system, a machine-to-machine (M2M) communication system, an Internet of things (IoT) communication system, a vehicle-to-everything (V2X) communication system, an uncrewed aerial vehicle (UAV) communication system, or other communication systems.

下面将结合本申请实施例中的附图,对本申请实施例中的技术方案进行描述。其中,在本申请的描述中,除非另有说明,“/”表示前后关联的对象是一种“或”的关系,例如,A/B可以表示A或B;本申请中的“和/或”仅仅是一种描述关联对象的关联关系,表示可以存在三种关系,例如,A和/或B,可以表示:单独存在A,同时存在A和B,单独存在B这三种情况,其中A,B可以是单数或者复数。并且,在本申请的描述中,除非另有说明,“多个”是指两个或多于两个。“以下至少一项(个)”或其类似表达,是指的这些项中的任意组合,包括单项(个)或复数项(个)的任意组合。例如,a,b,或c中的至少一项(个),可以表示:a,b,c,a-b,a-c,b-c,或a-b-c,其中a,b,c可以是单个,也可以是多个。另外,为了便于清楚描述本申请实施例的技术方案,在本申请的实施例中,采用了“第一”、“第二”等字样对功能和作用基本相同的相同项或相似项进行区分。本领域技术人员可以理解“第一”、“第二”等字样并不对数量和执行次序进行限定,并且“第一”、“第二”等字样也并不限定一定不同。同时,在本申请实施例中,“示例性地”或者“例如”等词用于表示作例子、例证或说明。本申请实施例中被描述为“示例性地”或者“例如”的任何实施例或设计方案不应被解释为比其它实施例或设计方案更优选或更具优势。确切而言,使用“示例性地”或者“例如”等词旨在以具体方式呈现相关概念,便于理解。The technical solutions in the embodiments of the present application will be described below in conjunction with the accompanying drawings in the embodiments of the present application. In the description of the present application, unless otherwise specified, "/" indicates that the objects associated before and after are in an "or" relationship. For example, A/B can represent A or B. The "and/or" in the present application is only a description of the association relationship of the associated objects, indicating that there can be three relationships. For example, A and/or B can represent: A exists alone, A and B exist at the same time, and B exists alone. A and B can be singular or plural. In addition, in the description of the present application, unless otherwise specified, "multiple" refers to two or more than two. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, at least one of a, b, or c can represent: a, b, c, a-b, a-c, b-c, or a-b-c, where a, b, c can be single or multiple. In addition, in order to facilitate a clear description of the technical solutions of the embodiments of the present application, in the embodiments of the present application, words such as "first" and "second" are used to distinguish between identical or similar items with substantially the same functions and effects. Those skilled in the art will understand that words such as "first" and "second" do not limit the quantity and execution order, and words such as "first" and "second" do not necessarily limit differences. At the same time, in the embodiments of the present application, words such as "exemplarily" or "for example" are used to indicate examples, illustrations or explanations. Any embodiment or design described as "exemplarily" or "for example" in the embodiments of the present application should not be interpreted as being more preferred or more advantageous than other embodiments or design schemes. Specifically, the use of words such as "exemplarily" or "for example" is intended to present related concepts in a concrete way for easy understanding.

此外,本申请实施例描述的网络架构以及业务场景是为了更加清楚的说明本申请实施例的技术方案,并不构成对于本申请实施例提供的技术方案的限定,本领域普通技术人员可知,随着网络架构的演变和新业务场景的出现,本申请实施例提供的技术方案对于类似的技术问题,同样适用。In addition, the network architecture and business scenarios described in the embodiments of the present application are intended to more clearly illustrate the technical solutions of the embodiments of the present application, and do not constitute a limitation on the technical solutions provided in the embodiments of the present application. Ordinary technicians in this field can know that with the evolution of network architecture and the emergence of new business scenarios, the technical solutions provided in the embodiments of the present application are also applicable to similar technical problems.

图1示出了本申请实施例适用的一种应用场景。如图1所示,网络架构100可以包括以下网元。Figure 1 shows an application scenario to which the embodiments of the present application are applicable. As shown in Figure 1 , a network architecture 100 may include the following network elements.

1、用户设备(user equipment,UE):也可以称为终端设备、终端。终端设备,可以包括但不限于:用户单元、用户站、移动站、移动台、远方站、远程终端设备、移动终端设备、用户终端设备、无线通信设备、用户代理、用户装置、蜂窝电话、无绳电话、会话启动协议(session initiation protocol,SIP)电话、无线本地环路(wireless local loop,WLL)站、个人数字处理(personal digital assistant,PDA)、具有无线通信功能的手持设备、计算设备、连接到无线调制解调器的处理设备、车载设备、可穿戴设备、物联网中的终端设备设备、家用电器、虚拟现实设备、5G网络中的终端设备设备或者演进的公共陆地移动网络(public land mobile network,PLMN)中的终端设备等,本申请实施例对此并不限定。1. User Equipment (UE): Also referred to as terminal equipment or terminal. Terminal equipment may include, but is not limited to, a user unit, a user station, a mobile station, a mobile station, a remote station, a remote terminal device, a mobile terminal device, a user terminal device, a wireless communication device, a user agent, a user device, a cellular phone, a cordless phone, a Session Initiation Protocol (SIP) phone, a wireless local loop (WLL) station, a personal digital assistant (PDA), a handheld device with wireless communication capabilities, a computing device, a processing device connected to a wireless modem, an in-vehicle device, a wearable device, a terminal device in the Internet of Things, a home appliance, a virtual reality device, a terminal device in a 5G network, or a terminal device in an evolved public land mobile network (PLMN), etc., and the embodiments of the present application are not limited thereto.

2、无线接入网(radio access network,RAN):主要负责空口侧的无线资源管理、服务质量(quality of service,QoS)管理、数据压缩和加密等功能。接入网设备可以包括各种形式的基站,例如:宏基站,微基站(也称为小站),中继站,接入点等。在采用不同的无线接入技术的系统中,具备基站功能的设备的名称可能会有所不同,例如,在第三代(3rd generation,3G)系统中,称为节点B(Node B);在LTE系统中,称为演进的节点B(evolved NodeB,eNB或者eNodeB);在5G系统中,可以称为gNB。2. Radio access network (RAN): This is primarily responsible for air interface radio resource management, quality of service (QoS) management, data compression, and encryption. Access network equipment can include various base stations, such as macro base stations, micro base stations (also known as small stations), relay stations, and access points. In systems using different wireless access technologies, the names of devices with base station functions may vary. For example, in third-generation (3G) systems, they are called Node Bs; in LTE systems, they are called evolved Node Bs (eNBs or eNodeBs); and in 5G systems, they can be called gNBs.

3、数据网络网元:是一种用于传输数据通信业务的数字传输网。3. Data network element: a digital transmission network used to transmit data communication services.

在5G通信系统中,数据网络网元可以是数据网络(data network,DN)网元。DN指的是为用户提供数据传输服务的运营商网络。例如,网际互连协议(internet protocol,IP)多媒体业务(IP multi-media srvice,IMS)、互联网(internet)等。DN可以为运营商外部网络,也可以为运营商控制的网络,用于向终端提供业务服务。In a 5G communication system, a data network element can be a data network (DN) element. A DN refers to a carrier's network that provides data transmission services to users. Examples include the Internet Protocol (IP) Multimedia Service (IMS) and the Internet. A DN can be a carrier's external network or a carrier-controlled network used to provide services to terminals.

在未来通信系统中,数据网络网元仍可以是DN网元,或者,还可以有其他名称,本申请不做限定。In future communication systems, the data network element may still be a DN element, or may have other names, which is not limited in this application.

4、认证-授权-计费(authentication,authorization,and accounting,AAA)服务器:负责认证、授权和计费。4. Authentication, authorization, and accounting (AAA) server: responsible for authentication, authorization, and accounting.

在5G通讯系统中,AAA服务器可以属于DN,或者也可以属于5G核心网(core network)。In the 5G communication system, the AAA server can belong to the DN or the 5G core network.

5、接入管理网元:主要用于移动性管理和接入管理,执行注册、连接、可达性和移动性管理,负责在UE与会话管理网元间提供会话管理消息传输通道,为UE接入时提供认证、鉴权功能,是终端和无线核心网控制面的接入点。5. Access management network element: mainly used for mobility management and access management, performing registration, connection, reachability and mobility management, responsible for providing session management message transmission channel between UE and session management network element, providing authentication and authorization functions for UE access, and is the access point of terminal and wireless core network control plane.

在5G通信系统中,接入管理网元可以是接入和移动性管理功能(access and mobility management function,AMF)网元。在未来通信系统中,接入管理网元仍可以是AMF网元,或者,还可以有其他的名称,本申请不做限定。In a 5G communication system, the access management network element may be an access and mobility management function (AMF) network element. In future communication systems, the access management network element may still be an AMF network element, or may have other names, which are not limited in this application.

6、会话管理网元:主要用于会话管理,负责处理用户的业务如会话建立、修改和释放,以及与用户面功能的交互。例如,其具体功能如为用户分配互联网协议(internet protocol,IP)地址,选择提供数据包转发功能的用户面功能(user plane function,UPF)网元等。6. Session Management NE: This element is primarily responsible for session management and handles user services such as session establishment, modification, and release, as well as interaction with user plane functions. For example, its specific functions include allocating Internet Protocol (IP) addresses to users and selecting user plane function (UPF) elements that provide packet forwarding.

在5G通信系统中,会话管理网元可以是会话管理功能(session management function,SMF)网元。在未来通信系统中,会话管理网元仍可以是SMF网元,或者,还可以有其他的名称,本申请不做限定。In a 5G communication system, a session management network element may be a session management function (SMF) network element. In future communication systems, the session management network element may still be an SMF network element, or may have other names, which are not limited in this application.

7、数据管理网元:对用户进行签约管理、接入授权、鉴权信息生成等。7. Data management network element: performs contract management, access authorization, authentication information generation, etc. for users.

在5G通信系统中,该数据管理网元可以是统一数据管理(unified data management,UDM)网元。在未来通信系统中,数据管理网元仍可以是UDM网元,或者,还可以有其他的名称,本申请不做限定。In a 5G communication system, the data management network element may be a unified data management (UDM) network element. In future communication systems, the data management network element may still be a UDM network element, or may have other names, which are not limited in this application.

8、用户面功能网元:主要负责用户数据处理(转发、接收、计费等)。例如,可以接收来自数据网络(data network,DN)的用户数据,通过接入网设备向终端转发该用户数据。用户面功能网元也可以通过接入网设备接收来自终端的用户数据,并向DN转发该用户数据。一个实施例中,在协议数据单元(protocol data unit,PDU)会话(session)中,通过N6与DN直接相连的UPF,也称为协议数据单元会话锚点(protocol data unit Session Anchor,PSA)。8. User plane function network element: Mainly responsible for user data processing (forwarding, receiving, billing, etc.). For example, it can receive user data from the data network (DN) and forward the user data to the terminal through the access network equipment. The user plane function network element can also receive user data from the terminal through the access network equipment and forward the user data to the DN. In one embodiment, in a protocol data unit (PDU) session, the UPF directly connected to the DN through N6 is also called a protocol data unit session anchor (PSA).

9、策略控制网元:用于指导网络行为的统一策略框架,为控制面功能网元(例如AMF,SMF网元等)提供策略规则信息等。9. Policy control network element: A unified policy framework used to guide network behavior and provide policy rule information for control plane functional network elements (such as AMF, SMF network elements, etc.).

在5G通信系统中,该策略控制网元可以是策略控制功能(policy control function,PCF)网元。在未来通信系统中,该策略控制网元仍可以是PCF网元,或者,还可以有其他名称,本申请不做限定。In a 5G communication system, the policy control network element may be a policy control function (PCF) network element. In future communication systems, the policy control network element may still be a PCF network element, or may have other names, which are not limited in this application.

10、网络存储功能网元:支持服务发现功能,能够从网元(network function,NF)实例接收NF发现请求,并将被发现的NF实例的信息提供给该NF实例。10. Network storage function network element: supports service discovery function, can receive NF discovery request from network function (NF) instance, and provide information of discovered NF instance to the NF instance.

在5G系统中,该网络存储功能网元可以是网络存储功能(network repository function,NRF)网元。在未来通信系统中,该网络存储功能网元仍可以是NRF网元,或者,还可以有其他名称,本申请不做限定。In a 5G system, the network repository function network element may be a network repository function (NRF) network element. In future communication systems, the network repository function network element may still be an NRF network element, or may have other names, which are not limited in this application.

11、鉴权服务功能网元:提供鉴权服务。11. Authentication service function network element: provides authentication services.

在5G系统中,鉴权服务功能网元可以是鉴权服务功能网元(authentication server function,AUSF)网元。在未来通信系统中,该鉴权服务功能网元仍然可以是NRF网元,或者,还可以有其他名称,本申请不做限定。In a 5G system, the authentication server function network element may be an authentication server function network element (AUSF). In future communication systems, the authentication server function network element may still be an NRF network element, or may have other names, which are not limited in this application.

示例性地,基于参考点的5G系统架构的表现形式,可以如图1中所示。其中,N1、N2、N3、N4以及N6为接口序列号。这些接口序列号的含义可参见相关技术,比如,参照3GPP TS23.501定义的含义。AMF、SMF、UDM、PCF等网元的服务化接口可以分别记作Namf、Nsmf、Nudm、Npcf等,如图1所示。For example, the representation of a 5G system architecture based on a reference point can be shown in Figure 1. N1, N2, N3, N4, and N6 are interface serial numbers. The meanings of these interface serial numbers can be found in related technologies, such as those defined in 3GPP TS 23.501. The service-oriented interfaces of network elements such as the AMF, SMF, UDM, and PCF can be denoted as Namf, Nsmf, Nudm, and Npcf, respectively, as shown in Figure 1.

上述应用于本申请实施例的网络架构仅是举例说明,适用于本申请实施例的网络架构并不局限于此,任何能够实现上述各网元的功能的网络架构都适用于本申请实施例。一些可能的实现方式中,该网络架构还可以包括更多或更少的网元。例如,网络架构中还可以包括网络切片选择功能(network slice selection function,NSSF)。The network architecture used in the embodiments of the present application is merely an example. The network architecture applicable to the embodiments of the present application is not limited thereto. Any network architecture capable of implementing the functions of the aforementioned network elements is applicable to the embodiments of the present application. In some possible implementations, the network architecture may include more or fewer network elements. For example, the network architecture may further include a network slice selection function (NSSF).

示例性地,图1所示的AMF、SMF、UPF、PCF、UDM等可以理解为核心网中用于实现不同功能的网元,例如可以按需组合成网络切片。这些核心网网元可以是各自独立的设备,也可以集成于同一设备中实现不同的功能,本申请对于上述网元的具体形态不作限定。For example, the AMF, SMF, UPF, PCF, and UDM shown in Figure 1 can be understood as network elements used to implement different functions in the core network, and can be combined into network slices as needed. These core network elements can be independent devices or integrated into the same device to implement different functions. This application does not limit the specific form of the above network elements.

上述命名仅为便于区分不同的功能而定义,不应对本申请构成任何限定。本申请并不排除在5G网络以及未来其他的网络中采用其他命名的可能。例如,在6G网络中,上述各个网络中的部分或全部可以沿用5G中的术语,也可能采用其他名称等。图1中的各个网元之间的接口名称只是一个示例,具体实现中接口的名称可能为其他的名称,本申请对此不作具体限定。此外,上述各个网元之间所传输的消息(或信令)的名称也仅仅是一个示例,对消息本身的功能不构成任何限定。The above naming is only defined to facilitate the distinction between different functions and should not constitute any limitation to this application. This application does not exclude the possibility of adopting other naming in 5G networks and other networks in the future. For example, in a 6G network, some or all of the above networks may use the terminology in 5G, or other names may be used. The interface name between the various network elements in Figure 1 is only an example. The name of the interface in the specific implementation may be other names, and this application does not make specific limitations on this. In addition, the name of the message (or signaling) transmitted between the above-mentioned network elements is only an example and does not constitute any limitation on the function of the message itself.

示例性地,图2是一种建立PDU会话的流程的示意图。该方法可以包括以下步骤:For example, FIG2 is a schematic diagram of a process for establishing a PDU session. The method may include the following steps:

S201,UE发送消息#201请求建立PDU会话;相应地,AMF可以接收消息#201。S201, the UE sends message #201 to request to establish a PDU session; accordingly, the AMF can receive message #201.

消息#201可以称为PDU会话建立请求消息,可以记作PDU_Session_Establishment_Request。Message #201 may be referred to as a PDU session establishment request message, and may be denoted as PDU_Session_Establishment_Request.

示例性地,PDU会话建立请求消息可以包括PDU会话的标识(PDU session identifier,PDU Session ID)和请求类型(request type)。请求类型可以包括:初次请求(initial request)、已存在的PDU会话(existing PDU session)和紧急请求(emergency request)。例如,在建立新的PDU会话时,请求类型可以采用初次请求。又例如,在为现有的PDU会话在3GPP接入和非3GPP接入之间切换时,请求类型可以采用已存在的PDU会话。又例如,在为紧急服务建立PDU会话时,请求类型可以采用紧急请求。Exemplarily, the PDU session establishment request message may include a PDU session identifier (PDU session identifier, PDU Session ID) and a request type (request type). The request type may include: initial request, existing PDU session, and emergency request. For example, when establishing a new PDU session, the request type may be initial request. For another example, when switching between 3GPP access and non-3GPP access for an existing PDU session, the request type may be existing PDU session. For another example, when establishing a PDU session for emergency services, the request type may be emergency request.

S202,AMF选择SMF。S202, AMF selects SMF.

示例性地,AMF为该PDU会话选择管理该PDU会话的SMF。例如,AMF可以根据预配置的可用的SMF,选择SMF。又例如,AMF可以基于配置或在UE的注册过程中所接收的网络切片选择辅助信息(network slice selection assistance information,NSSAI),为该PDU会话选择SMF。NSSAI为单网络切片选择辅助信息(single NSSAI,S-NSSAI)的集合,可以包括已配置的NSSAI(configured NSSAI)、请求的NSSAI(requested NSSAI)和/或允许的NSSAI(allowed NSSAI)。Exemplarily, the AMF selects an SMF to manage the PDU session for the PDU session. For example, the AMF may select an SMF based on pre-configured available SMFs. For another example, the AMF may select an SMF for the PDU session based on network slice selection assistance information (NSSAI) received during configuration or during the UE registration process. NSSAI is a set of single NSSAI (S-NSSAI), which may include configured NSSAI, requested NSSAI, and/or allowed NSSAI.

一些可能的实现方式中,在非接入层(non-access-stratum,NAS)消息中未携带S-NSSAI时,AMF可以从UE当前允许的NSSAI中确定请求的PDU会话的服务(serving)PLMN的网络切片信息。In some possible implementations, when the S-NSSAI is not carried in the non-access-stratum (NAS) message, the AMF may determine the network slice information of the serving PLMN of the requested PDU session from the NSSAI currently allowed by the UE.

一个实施例中,在允许的NSSAI中仅包括一个serving PLMN的网络切片信息时,则采用该网络切片信息。In one embodiment, when the allowed NSSAI only includes network slice information of one serving PLMN, the network slice information is adopted.

又一个实施例中,在allowed NSSAI中包括多个网络切片信息时,可以根据UE的签约信息选择网络切片选择辅助信息或基于运营商策略确定该网络切片信息。例如,在UE的签约信息中仅包括一个默认的S-NSSAI,且对应的serving PLMN的映射归属PLMN(home PLMN,HPLMN)包含在allowed NSSAI中时,可以根据UE的签约信息确定请求的PDU会话的serving PLMN的网络切片信息。又例如,运营商策略可以支持某个所选S-NSSAI允许任何UE请求的数据网络名称(data network name,DNN)将其作为S-NSSAI。在此场景下,可以基于运营商策略确定网络切片信息。In another embodiment, when multiple network slice information is included in the allowed NSSAI, the network slice selection auxiliary information can be selected based on the UE's subscription information or the network slice information can be determined based on the operator policy. For example, when the UE's subscription information only includes a default S-NSSAI and the corresponding serving PLMN's mapped home PLMN (HPLMN) is included in the allowed NSSAI, the network slice information of the serving PLMN of the requested PDU session can be determined based on the UE's subscription information. For another example, the operator policy can support a selected S-NSSAI to allow any UE-requested data network name (DNN) to be used as the S-NSSAI. In this scenario, the network slice information can be determined based on the operator policy.

一些可能的实现方式中,在NAS消息包含serving PLMN的网络切片信息但不包含DNN的情况下,在UE的签约信息包括默认的DNN时,AMF可以将签约信息中的切片信息对应的DNN作为请求的PDU会话的DNN。在UE的签约信息不包括默认的DNN时,AMF可以为serving PLMN的该S-NSSAI选择本地配置的DNN。In some possible implementations, when the NAS message contains the network slice information of the serving PLMN but does not contain the DNN, and the UE's subscription information includes a default DNN, the AMF may use the DNN corresponding to the slice information in the subscription information as the DNN for the requested PDU session. If the UE's subscription information does not include a default DNN, the AMF may select a locally configured DNN for the S-NSSAI of the serving PLMN.

示例性地,AMF可以根据网络选择辅助切片信息和网络数据名称发现合适的SMF。在请求类型为初次请求时,AMF可以存储切片S-NSSAI、DNN、PDU会话标识、SMF ID以及PDU会话的接入类型间的关系。For example, the AMF may discover a suitable SMF based on the network selection auxiliary slice information and the network data name. When the request type is an initial request, the AMF may store the relationship between the slice S-NSSAI, DNN, PDU session identifier, SMF ID, and access type of the PDU session.

S203,AMF发送消息#203;相应地,SMF接收消息#203。S203, AMF sends message #203; accordingly, SMF receives message #203.

AMF向所选择的SMF发送消息#203,以请求SMF建立PDU会话。消息#203可以用于请求为PDU会话创建会话管理上下文,可以记作Nsmf_PDUSession_CreateSMContext_request。The AMF sends a message #203 to the selected SMF to request the SMF to establish a PDU session. Message #203 can be used to request the creation of a session management context for the PDU session, which can be recorded as Nsmf_PDUSession_CreateSMContext_request.

示例性地,消息#203可以包括:所选择的DNN、请求建立PDU会话的UE的用户永久标识(subscription permanent identifier,SUPI)、UE所请求的DNN和网络切片选择辅助信息。Exemplarily, message #203 may include: the selected DNN, the subscription permanent identifier (SUPI) of the UE requesting to establish a PDU session, the DNN requested by the UE, and network slice selection auxiliary information.

可选地,S204,SMF向UDM查询UE的签约信息。Optionally, in S204, the SMF queries the UDM for the subscription information of the UE.

示例性地,在SUPI、DNN、S-NSSAI对应的HPLMN的会话管理订阅的数据不可用时,SMF可以向UDM查询UE的签约信息。在该HPLMN的会话管理订阅的数据可用时,可以跳过步骤S204。For example, when the session management subscription data of the HPLMN corresponding to SUPI, DNN, and S-NSSAI is not available, the SMF may query the UDM for the UE's subscription information. When the session management subscription data of the HPLMN is available, step S204 may be skipped.

S205,SMF发送消息#205;相应地,AMF接收消息#205。S205, SMF sends message #205; accordingly, AMF receives message #205.

消息#205可以为消息#203的响应消息,可以记作Nsmf_PDUSession_CreateSMContext_response。Message #205 may be a response message to message #203, and may be recorded as Nsmf_PDUSession_CreateSMContext_response.

一个实施例中,在接受该PDU会话的建立请求时,SMF可以为该会话创建会话管理(session management,SM)上下文;相应地,消息#205可以包括该会话管理上下文的标识。In one embodiment, when accepting the establishment request of the PDU session, the SMF may create a session management (SM) context for the session; accordingly, message #205 may include an identifier of the session management context.

又一个实施例中,在SMF不接受PDU会话的建立请求时,消息#205可以包括拒绝建立该PDU会话的理由。In another embodiment, when the SMF does not accept the request to establish a PDU session, message #205 may include the reason for refusing to establish the PDU session.

S206,为PDU会话鉴权/授权。S206: PDU session authentication/authorization.

一个实施例中,在请求类型为初次请求时,可以执行步骤S206可以为PDU会话鉴权。In one embodiment, when the request type is an initial request, step S206 may be executed to authenticate the PDU session.

又一个实施例中,在请求类型为已存在的PDU会话或紧急请求时,可以跳过步骤S206。In another embodiment, when the request type is an existing PDU session or an emergency request, step S206 may be skipped.

又一个实施例中,根据DN关联的会话管理策略,SMF可以确定是否需要为PDU进行二次鉴权。In another embodiment, based on the session management policy associated with the DN, the SMF can determine whether secondary authentication is required for the PDU.

可选地,S207,SMF选择PCF。Optionally, in S207 , the SMF selects the PCF.

一个实施例中,在PDU会话采用了动态的策略与计费控制(policy and charging control,PCC)规则时,执行步骤S207为该PDU会话选择恰当的PCF。In one embodiment, when a PDU session adopts dynamic policy and charging control (PCC) rules, step S207 is executed to select an appropriate PCF for the PDU session.

又一个实施例中,在PDU会话未采用动态PCC规则时,可以跳过步骤S207。In another embodiment, when the PDU session does not adopt the dynamic PCC rule, step S207 may be skipped.

S208,为该PDU会话关联会话管理策略。S208: Associating a session management policy with the PDU session.

示例性地,SMF可以向PCF发送消息以请求关联会话管理策略,该消息中可以包括UE的SUPI。根据该SUPI,PCF可以确定与该SUPI所关联的会话管理策略。PCF可以向SMF发送响应消息,该响应消息中可以包括PDU会话的会话管理策略信息。For example, the SMF may send a message to the PCF requesting association of a session management policy. The message may include the UE's SUPI. Based on the SUPI, the PCF may determine the session management policy associated with the SUPI. The PCF may send a response message to the SMF. The response message may include session management policy information for the PDU session.

S209,选择UPF。S209, select UPF.

SMF可以为该PDU会话选择UPF。例如,可以SMF可以根据本地配置的可用的UPF的信息,选择UPF。又例如,SMF可以根据UPF的位置、UE的位置和/或UPF的动态负载,为该PDU会话选择UPF。The SMF may select a UPF for the PDU session. For example, the SMF may select a UPF based on information about available UPFs configured locally. For another example, the SMF may select a UPF for the PDU session based on the location of the UPF, the location of the UE, and/or the dynamic load of the UPF.

SMF还可以为该PDU会话分配IP地址。The SMF may also allocate an IP address for the PDU session.

一个实施例中,在请求类型为初次请求时,SMF还可以为该PDU会话分配会话和服务连续模式(session and service continuity mode,SSC)。In one embodiment, when the request type is an initial request, the SMF may also allocate a session and service continuity mode (SSC) for the PDU session.

S210,SMF发送消息#210;相应地,AMF可以接收消息#210。S210, SMF sends message #210; accordingly, AMF can receive message #210.

消息#210可以包括PDU会话的相关信息,比如,该PDU会话关联的N3隧道的信息、上下行速率信息、UE的IP信息等。Message #210 may include relevant information of the PDU session, such as information of the N3 tunnel associated with the PDU session, uplink and downlink rate information, UE IP information, etc.

消息#210中所包含的PDU会话的相关信息,可以通过N1和/或N2隧道向UE转发。该消息#210可以记作Namf_Communication_N1N2MessageTransfer。The PDU session related information contained in message #210 can be forwarded to the UE via the N1 and/or N2 tunnels. This message #210 can be recorded as Namf_Communication_N1N2MessageTransfer.

S211,AMF发送消息#211;相应地,RAN可以接收消息#211。S211, AMF sends message #211; accordingly, RAN can receive message #211.

一个实施例中,AMF可以通过N2消息向UE发送PDU会话的相关信息。In one embodiment, the AMF may send relevant information of the PDU session to the UE via an N2 message.

消息#211可以包括PDU会话的相关信息,可以记作N2_PDU_Session_request。消息#211可以为NAS消息。Message #211 may include relevant information about the PDU session and may be recorded as N2_PDU_Session_request. Message #211 may be a NAS message.

S212,RAN发送消息#212;相应地,UE接收消息#212。S212, RAN sends message #212; correspondingly, UE receives message #212.

消息#212可以包括PDU会话的相关信息,可以用于指示网络已接收PDU会话的建立。消息#212可以记作PDU_Session_Establishment_Accept。Message #212 may include relevant information about the PDU session and may be used to indicate that the network has accepted the establishment of the PDU session. Message #212 may be recorded as PDU_Session_Establishment_Accept.

示例性地,通过步骤S210至S212,SMF可以向UE发送该PDU会话的相关信息。Exemplarily, through steps S210 to S212, the SMF may send relevant information of the PDU session to the UE.

在传统方案(以在方法200为例)中,移动网络根据签约信息为UE提供服务。例如,核心网基于UE的用户识别模块(subscriber identification module,SIM)为用户提供网络服务。用户通过SIM卡订阅网络业务;当用户请求某种网络业务时,核心网识别通过识别该SIM卡的标识(比如,SUPI)确定该SUPI的签约信息,提供对应的网络业务。在该方式中,用户与SIM卡是强绑定的。In a traditional solution (using method 200 as an example), the mobile network provides services to the UE based on subscription information. For example, the core network provides network services to the user based on the UE's subscriber identification module (SIM). The user subscribes to network services using the SIM card. When the user requests a certain network service, the core network identifies the SIM card's identifier (e.g., SUPI), determines the subscription information for the SUPI, and provides the corresponding network service. In this approach, the user and the SIM card are strongly bound.

对于语音业务和短信服务(short message service,SMS)业务等而言,一个用户仅有一个终端设备,相应地,为一个终端设备提供一套签约数据即可满足需求。然而随着时代的发展,一个用户可能拥有不同类型的终端设备(比如手机、平板电脑、笔记本电脑等);同一个终端,可能被不同的用户共享。在传统方案中,不同的用户如果需要通过同一个终端享受不同的服务时,需要通过更换该UE中的SIM卡来实现,该方式将会劣化用户的使用体验。For services like voice and short message service (SMS), a user has only one terminal device. Accordingly, providing a single set of subscription data for that terminal device is sufficient to meet their needs. However, with the changing times, a user may own different types of terminal devices (such as mobile phones, tablets, and laptops), and the same terminal may be shared by different users. Traditionally, different users who need to access different services through the same terminal must replace the SIM card in the UE, which degrades the user experience.

为了降低用户与SIM卡间的强绑定关系,可以采用用户标识(user identifier,user ID)区分不同的用户。用户标识可以表示在某一时刻登录在UE上的人,同一时刻只有一个用户登录在该UE上。核心网可以根据为每个用户所建立的账户的签约信息为用户提供服务。运营商可以将用户标识的信息开放给外部第三方,使得用户使用用户标识注册或登录第三方应用程序。To reduce the strong binding between users and SIM cards, user identifiers (IDs) can be used to distinguish different users. A user ID represents the person logged into a UE at a given moment. Only one user can be logged into a UE at a time. The core network can provide services based on the subscription information for each user account. Operators can make user ID information available to third parties, allowing users to use it to register or log into third-party applications.

示例性地,图3是本申请实施例提供的一种业务场景的示意图。For example, FIG3 is a schematic diagram of a business scenario provided by an embodiment of the present application.

移动网络运营商(mobile network operator,MNO)可以提供多种网络业务。共享终端(比如图3中的车辆)的拥有者(比如,汽车租赁商),可以向MNO购买终端接入网络的签约。用户可以向MNO购买网络业务的签约。在终端基于接入网络的签约信息通过注册接入网络之后,不同的用户可以通过自身的用户标识登录到该终端,核心网可以基于用户所购买的网络业务的签约信息,通过该车辆为用户提供不同的服务。例如,如图3所示,用户A使用该共享车辆时,基于用户A所购买的网络业务,核心网可以为用户提供服务#1。又例如,如图3所示,在用户B使用该共享车辆时,核心网可以为用户提供服务#2。也就是说,在同一个终端,不同的用户可以通过不同的用户标识享受到不同等级、类别的服务。A mobile network operator (MNO) can provide a variety of network services. The owner of a shared terminal (such as the vehicle in Figure 3) (e.g., a car rental company) can purchase a contract for the terminal to access the network from the MNO. Users can purchase contracts for network services from the MNO. After the terminal registers and accesses the network based on the contract information for accessing the network, different users can log in to the terminal using their own user IDs. The core network can provide different services to users through the vehicle based on the contract information for the network services purchased by the users. For example, as shown in Figure 3, when user A uses the shared vehicle, the core network can provide user service #1 based on the network services purchased by user A. For another example, as shown in Figure 3, when user B uses the shared vehicle, the core network can provide user service #2. In other words, on the same terminal, different users can enjoy different levels and categories of services through different user IDs.

在图3所示场景下,UE向网络发送的消息中需要携带user ID以指示使用该UE的用户,从而获取所需的用户文件以实现差异化服务质量(quality of service,QoS)。也就是说,在每次建立PDU会话时,PDU会话建立请求消息需要携带user ID;相应地,在PDU会话的建立流程所涉及的多个消息也需要包含用户标识。例如,消息#201、消息#203、步骤S204所涉及的消息、步骤S208所涉及的消息,以及消息#210至消息#212,需要包含用户标识。该方式与该使用场景不匹配,且存在信令冗余。In the scenario shown in Figure 3, the UE needs to carry a user ID in the message it sends to the network to identify the user using the UE, thereby obtaining the required user files to achieve differentiated quality of service (QoS). That is, each time a PDU session is established, the PDU session establishment request message needs to carry the user ID; accordingly, the multiple messages involved in the PDU session establishment process also need to include the user ID. For example, message #201, message #203, the message involved in step S204, the message involved in step S208, and messages #210 through #212 need to include the user ID. This approach is not suitable for this usage scenario and results in signaling redundancy.

鉴于此,本申请实施例提供了一种通信方法和装置,使能网络通过更高效的方式获知是否有用户登录到UE以及登录到该UE的用户的标识,并能精准地提供差异化QoS保障。In view of this, an embodiment of the present application provides a communication method and device, which enables the network to know whether a user has logged into the UE and the identification of the user logged into the UE in a more efficient manner, and can accurately provide differentiated QoS guarantees.

示例性地,图4是本申请实施例提供的一种通信方法的示意图。下面为了便于描述,以图4所示的方法的执行主体为第一网元、第二网元、第三网元、终端设备、RAN、SMF和PCF为例进行示例性说明。可以理解图4所示的方法的执行主体也可以为上述各网元或装置的组成部件,比如芯片或者芯片系统或者电路,本申请实施例对此不做限定。下面描述为由单个执行主体执行的步骤也可以被划分为由多个执行主体执行,这些执行主体可以在逻辑上和/或在物理上分离。该方法400可以包括以下步骤:For example, Figure 4 is a schematic diagram of a communication method provided by an embodiment of the present application. For the sake of convenience of description, the following is an illustrative explanation using the execution subjects of the method shown in Figure 4 as the first network element, the second network element, the third network element, the terminal device, the RAN, the SMF and the PCF. It can be understood that the execution subject of the method shown in Figure 4 can also be a component of the above-mentioned network elements or devices, such as a chip or a chip system or a circuit, and the embodiment of the present application does not limit this. The steps described below as being performed by a single execution subject can also be divided into being performed by multiple execution subjects, and these execution subjects can be logically and/or physically separated. The method 400 may include the following steps:

S401,第二网元对UE的激活用户进行鉴权。S401: The second network element authenticates the activated user of the UE.

示例性地,第二网元可以提供鉴权服务。该鉴权可以为主鉴权,或者也可以为二次鉴权。例如,当在鉴权过程发生在UE的注册过程中时,该鉴权可以为主鉴权。Exemplarily, the second network element may provide an authentication service. The authentication may be a primary authentication or a secondary authentication. For example, when the authentication process occurs during the UE's registration process, the authentication may be a primary authentication.

一个实施例中,第二网元可以包括AUSF。In one embodiment, the second network element may include an AUSF.

又一个实施例中,第二网元可以包括AMF。In another embodiment, the second network element may include an AMF.

又一个实施例中,第二网元可以包括AAA服务器。例如,该AAA服务器可以提供二次鉴权服务。In another embodiment, the second network element may include an AAA server. For example, the AAA server may provide a secondary authentication service.

一些可能的实现方式中,第二网元还可以为其他能够提供鉴权服务的网元,本申请实施例对此不做限定。In some possible implementations, the second network element may also be other network elements that can provide authentication services, which is not limited in the embodiments of the present application.

S402,第二网元发送第一消息;相应地,第一网元接收该第一消息。S402, the second network element sends a first message; correspondingly, the first network element receives the first message.

在对该UE的激活用户的鉴权成功时,第二网元可以向第一网元发送第一消息。第一消息可以包括该UE的激活用户的用户标识。第一消息可以指示对该UE和对该用户的成功鉴权。When the authentication of the active user of the UE is successful, the second network element may send a first message to the first network element. The first message may include a user identifier of the active user of the UE. The first message may indicate the successful authentication of the UE and the user.

示例性地,UE的激活用户,也可以具有其他名称,比如,当前使用该UE的用户、该UE的当前登录用户或者该UE的当前活跃用户。例如,用户#1为该UE的激活用户,在对用户#1的user ID鉴权成功时,第一消息中可以包括用户#1的user ID。Exemplarily, the active user of a UE may also have other names, such as the user currently using the UE, the currently logged-in user of the UE, or the currently active user of the UE. For example, if user #1 is the active user of the UE, when the user ID of user #1 is successfully authenticated, the first message may include the user ID of user #1.

一个实施例中,该第一网元可以包括AMF。In one embodiment, the first network element may include an AMF.

又一个实施例中,该第一网元可以包括UDM。In another embodiment, the first network element may include a UDM.

S403,第一网元根据第一消息存储该UE的激活用户的用户标识。S403: The first network element stores the user identifier of the activated user of the UE according to the first message.

示例性地,第一网元可以用于存储有该UE的数据,或者说,第一网元可以存储有该UE的数据。该UE的数据,比如可以包括UE的上下文信息、UE的签约信息等。根据第一消息,第一网元可以在其所存储的该UE的数据中增加和/或更新该激活用户的用户user ID。Exemplarily, the first network element may be configured to store data of the UE, or in other words, the first network element may store data of the UE. The UE data may include, for example, UE context information, UE subscription information, etc. Based on the first message, the first network element may add and/or update the user ID of the activated user in the stored data of the UE.

一个实施例中,第一网元可以在其所存储的UE的上下文信息中增加和/或更新该UE的激活用户的user ID。In one embodiment, the first network element may add and/or update the user ID of the activated user of the UE in the context information of the UE stored therein.

又一个实施例中,第一网元可以在其所存储的UE的签约信息中增加和/或更新该UE的激活用户的user ID。In another embodiment, the first network element may add and/or update the user ID of the activated user of the UE in the subscription information of the UE stored therein.

一些可能的实现方式中,第一网元可以在其所存储的该UE的其他数据中增加和/或更新该UE的激活用户的user ID,本申请实施例对用于存储该user ID的数据结构不做限定。In some possible implementations, the first network element may add and/or update the user ID of the activated user of the UE in other data of the UE stored therein. The embodiment of the present application does not limit the data structure used to store the user ID.

本申请实施例中,在对UE的激活用户的鉴权成功时,负责鉴权的网元可以向第一网元指示该鉴权结果,相应地,第一网元可以存储该用户的user ID,从而可以在网络侧存储该UE的激活用户的标识。由此,在PDU会话的建立流程中,能够基于该第一网元所存储的该UE的激活用户的用户标识获取相关信息(比如,会话管理控制策略信息、签约信息等),能够降低信令开销。In an embodiment of the present application, when authentication of the active user of the UE is successful, the network element responsible for authentication may indicate the authentication result to the first network element. Accordingly, the first network element may store the user ID of the user, thereby storing the identity of the active user of the UE on the network side. Thus, during the PDU session establishment process, relevant information (e.g., session management control policy information, subscription information, etc.) can be obtained based on the user ID of the active user of the UE stored by the first network element, thereby reducing signaling overhead.

一些可能的实现方式中,网络架构中的其他网元也可以用于存储UE的相关信息。比如,第三网元,可以用于存储UE的签约信息。In some possible implementations, other network elements in the network architecture may also be used to store UE-related information. For example, a third network element may be used to store UE subscription information.

可选地,该方法400还可以包括步骤S404至步骤S406中的一项至多项。Optionally, the method 400 may further include one or more of steps S404 to S406.

S404,第一网元发送第一请求消息;相应地,第三网元接收该消息。S404, the first network element sends a first request message; correspondingly, the third network element receives the message.

示例性地,第三网元可以用于存储该UE的相关数据,比如UE的签约信息。例如,第三网元可以包括UDR。Exemplarily, the third network element may be used to store relevant data of the UE, such as subscription information of the UE. For example, the third network element may include a UDR.

第一请求消息可以包括该UE的激活用户的用户标识。第一请求消息可以用于请求更新该UE的签约信息。The first request message may include a user identifier of an activated user of the UE. The first request message may be used to request updating of subscription information of the UE.

S405,第三网元根据第一请求消息更新所存储的该UE的数据。S405: The third network element updates the stored data of the UE according to the first request message.

示例性地,根据第一请求消息,第三网元可以更新UE的相关数据。比如,第三网元可以在所存储的UE的数据中增加或更新该UE的激活用户的用户标识。例如,该UE的数据可以为UE的签约信息,本申请实施例对该数据的具体类型不做限定。Illustratively, based on the first request message, the third network element may update relevant data of the UE. For example, the third network element may add or update the user identifier of the activated user of the UE in the stored UE data. For example, the UE data may be the UE's subscription information. The specific type of this data is not limited in this embodiment of the present application.

本申请实施例中,由于第三网元已更新所存储的UE的数据,在PDU会话的建立流程中,能够基于所存储的UE的相关数据,提供与该PDU会话的相关信息,能够为用户提供更为可靠的QoS服务保障。In an embodiment of the present application, since the third network element has updated the stored UE data, in the process of establishing the PDU session, it can provide relevant information about the PDU session based on the stored UE related data, and can provide users with more reliable QoS service guarantees.

S406,第一网元发送指示信息指示鉴权结果;相应地,UE接收该指示信息。S406, the first network element sends indication information to indicate the authentication result; correspondingly, the UE receives the indication information.

该指示信息可以指示本次鉴权成功。The indication information may indicate that the authentication is successful.

如上所述,由于第一网元、第三网元可以存储于该UE的激活用户的user ID,在PDU会话的建立过程中,可以基于所存储的该UE的激活用户的user ID提供相关信息。As described above, since the first network element and the third network element can store the user ID of the activated user of the UE, during the establishment of the PDU session, relevant information can be provided based on the stored user ID of the activated user of the UE.

一些可能的实现方式中,第一网元可以存储不同UE的签约信息和/或不同用户的签约信息。比如,第一网元可以为UDM。In some possible implementations, the first network element may store subscription information of different UEs and/or subscription information of different users. For example, the first network element may be a UDM.

示例性地,SMF可以向第一网元发送第二消息,第二消息可以用于查询该UE的签约信息,第二消息可以包括该UE的标识。第一网元可以根据该UE的标识,确定该UE的激活用户的user ID;可以根据该UE的激活用户的user ID,确定该user ID关联的签约信息。第一网元可以向SMF发送第三消息,第三消息中可以包括该user ID关联的签约信息。Exemplarily, the SMF may send a second message to the first network element. The second message may be used to query the subscription information of the UE and may include the identifier of the UE. The first network element may determine the user ID of the active user of the UE based on the identifier of the UE; and may determine the subscription information associated with the user ID based on the user ID of the active user of the UE. The first network element may send a third message to the SMF. The third message may include the subscription information associated with the user ID.

一个实施例中,该第三消息还可以包括该user ID。In one embodiment, the third message may also include the user ID.

一些可能的实现方式中,该SMF可以根据与该user ID关联的签约信息,确定是否进行二次鉴权。In some possible implementations, the SMF can determine whether to perform secondary authentication based on the contract information associated with the user ID.

一些可能的实现方式中,第一网元可能不用于存储UE的签约信息等相关数据。在UE的PDU会话的建立流程中,第一网元可以根据该UE标识从其所存储的数据中确定该UE的激活用户的user ID,使得该PDU会话能够与该用户的user ID相关联。In some possible implementations, the first network element may not store relevant data such as the UE's subscription information. During the UE PDU session establishment process, the first network element may determine the user ID of the UE's active user from its stored data based on the UE identifier, so that the PDU session can be associated with the user ID of the user.

示例性地,第一网元可以接收第二请求消息,第二请求消息可以用于请求为该UE创建PDU会话,该第二请求消息中可以包括该UE的标识。第一网元可以根据该UE的标识,确定该UE的激活用户的user ID。第一网元可以向SMF发送第三请求消息,第三请求消息可以用于为该PDU会话创建会话管理上下文。该第三请求消息可以包括该PDU会话的标识、该UE的标识和该UE的激活用户的user ID。Exemplarily, the first network element may receive a second request message, where the second request message may be used to request creation of a PDU session for the UE, and the second request message may include an identifier of the UE. The first network element may determine, based on the identifier of the UE, a user ID of an active user of the UE. The first network element may send a third request message to the SMF, where the third request message may be used to create a session management context for the PDU session. The third request message may include an identifier of the PDU session, an identifier of the UE, and an user ID of an active user of the UE.

一些可能的实现方式中,第三网元可以用于存储签约信息。比如第三网元为UDR。In some possible implementations, the third network element may be used to store the subscription information. For example, the third network element is a UDR.

一个实施例中,在第三网元完成UE的签约数据的更新后,可以向第一网元发送第四消息,第四消息可以用于指示该UE的签约信息完成更新。In one embodiment, after the third network element completes the update of the subscription data of the UE, it may send a fourth message to the first network element, and the fourth message may be used to indicate that the subscription information of the UE has been updated.

一些可能的实现方式中,第三网元所存储的签约信息可以包括会话管理控制策略信息。在该UE的PDU会话的建立流程中,第三网元可以向其他网元提供其所存储的会话管理控制策略信息。In some possible implementations, the subscription information stored by the third network element may include session management control policy information. During the establishment process of the UE's PDU session, the third network element may provide the stored session management control policy information to other network elements.

示例性地,SMF可以向PCF发送请求消息(比如第六请求消息),以请求为该UE的PDU会话更新会话管理控制策略信息。PCF可以向SMF发送消息(比如第七消息),该消息可以包括与该UE的激活用户的user ID关联的会话管理控制策略信息。例如,在PCF未存储该user ID关联的会话管理控制策略信息的情形下,PCF可以从第三网元获取该会话管理控制策略信息。Exemplarily, the SMF may send a request message (e.g., the sixth request message) to the PCF to request an update of session management control policy information for the PDU session of the UE. The PCF may send a message (e.g., the seventh message) to the SMF, which may include session management control policy information associated with the user ID of the active user of the UE. For example, if the PCF does not store the session management control policy information associated with the user ID, the PCF may obtain the session management control policy information from a third network element.

一个实施例中,PCF可以向第三网元发送第四请求消息。该第四请求消息可以用于请求与UE相关联的会话管理控制策略信息,该消息可以包括该UE的标识。第三网元可以根据该UE的标识,确定该UE的激活用户的user ID,确定与该user ID关联的会话管理控制策略信息。该第三网元可以向PCF发送第五消息,该消息可以包括与该user ID关联的会话管理控制策略信息。In one embodiment, the PCF may send a fourth request message to a third network element. The fourth request message may be used to request session management control policy information associated with the UE, and the message may include an identifier of the UE. The third network element may determine the user ID of the active user of the UE based on the identifier of the UE, and determine the session management control policy information associated with the user ID. The third network element may send a fifth message to the PCF, which may include the session management control policy information associated with the user ID.

又一个实施例中,PCF可以向第三网元发送第五请求消息,该第五请求消息可以包括user ID,可以用于请求与该user ID关联的会话管理控制策略信息。第三网元可以向PCF发送第六消息,第六消息可以包括与该user ID关联的会话管理控制策略信息。In another embodiment, the PCF may send a fifth request message to the third network element. The fifth request message may include a user ID and may be used to request session management control policy information associated with the user ID. The third network element may send a sixth message to the PCF. The sixth message may include the session management control policy information associated with the user ID.

本申请实施例中,在对UE的激活用户的成功鉴权时,可以在网络侧存储该UE的激活用户的user ID。在建立该UE的PDU时,可以基于所存储的该UE的激活用户的user ID进行相关信息的查询,从而为用户提供可靠的QoS服务保障。In this embodiment of the present application, upon successful authentication of the UE's active user, the network may store the user ID of the UE's active user. When establishing the UE's PDU, relevant information may be queried based on the stored user ID of the UE's active user, thereby providing reliable QoS service guarantees for the user.

示例性地,以下结合图5至图7,以AUSF为第二网元为例,简要介绍AUSF所进行的主鉴权流程。主鉴权可以包括UE与网络之间的双向认证过程。主鉴权可以发生在UE的注册过程中,比如,在UE首次接入网络或发起业务请求的情形下。其中,图5示出了UE的注册流程;图6和图7示出了AUSF所进行的主鉴权流程。For example, the following, in combination with Figures 5 to 7, takes AUSF as the second network element as an example to briefly introduce the main authentication process performed by AUSF. The main authentication may include a two-way authentication process between the UE and the network. The main authentication may occur during the registration process of the UE, for example, when the UE first accesses the network or initiates a service request. Among them, Figure 5 shows the registration process of the UE; Figures 6 and 7 show the main authentication process performed by AUSF.

图5是本申请实施例提供的另一种通信方法的流程性示意图。图5示出了UE的注册流程。Figure 5 is a schematic diagram of another communication method provided by an embodiment of the present application. Figure 5 shows the registration process of a UE.

如图5所示,方法500可以包括以下步骤:As shown in FIG5 , the method 500 may include the following steps:

S501,UE发送注册请求消息。S501: UE sends a registration request message.

该注册请求消息中可以包括UE的标识和注册类型。The registration request message may include the UE identifier and the registration type.

示例性地,注册类型可以包括初始注册(initial registration)、移动性注册更新(mobility registration update)、周期性注册更新(periodic registration update)和紧急注册(emergency registration)。Exemplarily, registration types may include initial registration, mobility registration update, periodic registration update, and emergency registration.

一个实施例中,在UE处于去注册状态时,所发起的注册流程的注册类型可以为初始注册。例如,去注册状态可以包括CM-IDLE状态,在该状态下,UE与RAN之间以及RAN与5GC之间均不存在连接。In one embodiment, when the UE is in a deregistered state, the registration type of the registration process initiated may be an initial registration. For example, the deregistered state may include a CM-IDLE state, in which there is no connection between the UE and the RAN, and between the RAN and the 5GC.

又一个实施例中,在UE因移动而需要重新发起注册流程时,所发起的注册流程的注册类型可以为移动性注册更新。例如,UE可以处于已注册的RM-registered状态,通过移动性注册更新可以更新UE的位置。In another embodiment, when the UE needs to re-initiate a registration process due to mobility, the registration type of the initiated registration process may be mobility registration update. For example, the UE may be in the RM-registered state, and the UE's location may be updated through the mobility registration update.

又一个实施例中,在UE因周期性注册更新计时器超时的情况下,所发起的注册流程的注册类型可以为周期性注册更新。此时UE可以处于已注册的RM-registered状态。In another embodiment, when the periodic registration update timer of the UE times out, the registration type of the registration process initiated may be periodic registration update. At this time, the UE may be in the registered RM-registered state.

又一个实施例中,在UE处于业务受限状态时,所发起的注册流程的注册类型可以为紧急注册。In another embodiment, when the UE is in a service-restricted state, the registration type of the initiated registration process may be emergency registration.

示例性地,UE的标识可以包括用户隐藏标识(subscription concealed identifier,SUCI)、5G全局唯一临时UE标识(5G globally unique temporary UE identity,5G-GUTI)或永久设备标识符(permanent equipment identifier,PEI)。Exemplarily, the UE identifier may include a subscription concealed identifier (SUCI), a 5G globally unique temporary UE identity (5G-GUTI) or a permanent equipment identifier (PEI).

一个实施例中,在UE存在有效的5G-GUTI时,注册请求消息中可以包含5G-GUTI。In one embodiment, when the UE has a valid 5G-GUTI, the registration request message may include the 5G-GUTI.

又一个实施例中,在UE不存在有效的5G-GUTI时,注册请求消息中可以包含SUCI。In another embodiment, when the UE does not have a valid 5G-GUTI, the registration request message may include SUCI.

又一个实施例中,在紧急注册中,当UE不存在有效的5G-GUTI且无SUCI或SUPI时,注册请求消息中可以包含PEI。In another embodiment, in emergency registration, when the UE does not have a valid 5G-GUTI and does not have a SUCI or SUPI, the registration request message may include a PEI.

一些可能的实现方式中,注册请求消息中所采用的UE的标识也可以是其他标识,本申请实施例对此不做限定。In some possible implementations, the UE identifier used in the registration request message may also be other identifiers, which is not limited in the embodiments of the present application.

S502,RAN选择合适的AMF。S502: RAN selects a suitable AMF.

S503,RAN向所选择的AMF发送该UE的注册请求消息。S503: The RAN sends a registration request message of the UE to the selected AMF.

S504,AMF选择合适的AUSF进行鉴权。S504: AMF selects a suitable AUSF for authentication.

S505,UE、AMF、AUSF和UDM之间交互,进行鉴权。S505: UE, AMF, AUSF and UDM interact to perform authentication.

一个实施例中,可以采用可扩展认证协议(extensible authentication protocol,EAP)-认证和密钥协商(authentication and key agreement,AKA)机制进行鉴权。In one embodiment, the extensible authentication protocol (EAP)-authentication and key agreement (AKA) mechanism can be used for authentication.

又一个实施例中,可以采用EAP-增强的认证和密钥协商(enhanced authentication and key agreement,AKA’)机制进行鉴权。In another embodiment, EAP-enhanced authentication and key agreement (AKA’) mechanism can be used for authentication.

示例性地,可以根据UE的标识(比如SUPI)对UE进行鉴权。Exemplarily, the UE may be authenticated according to the UE's identifier (such as SUPI).

示例性地,在涉及对当前使用该UE的用户的鉴权时,步骤S501中的注册请求消息以及步骤S503中的步骤请求消息,还可以包括该用户的用户标识。可以根据该用户的用户标识,对该用户进行鉴权。在此情形下,步骤S505可以对应于步骤S401。For example, when authenticating the user currently using the UE, the registration request message in step S501 and the registration request message in step S503 may also include the user identifier of the user. The user may be authenticated based on the user identifier. In this case, step S505 may correspond to step S401.

S506,AMF可以与UDM交互,获取UE的签约数据。S506: AMF can interact with UDM to obtain the UE's subscription data.

在UE和网络侧相互鉴权成功后,AMF可以与UDM通过UE的标识进行交互,以获取UE的签约数据。After the UE and the network have successfully authenticated each other, the AMF can interact with the UDM through the UE's identity to obtain the UE's subscription data.

一些可能的实现方式中,在对用户的鉴权成功后,AMF可以从UDM获取该用户的签约数据。In some possible implementations, after successful authentication of the user, the AMF may obtain the user's subscription data from the UDM.

S507,AMF发送消息#507;相应地,RAN接收该消息#507。S507, AMF sends message #507; accordingly, RAN receives message #507.

该消息#507,可以包括N2消息。该N2消息中可以包含需要RAN转发给UE的信息,比如注册接收信息。注册接收信息可以指示网络侧已接受了UE的注册请求。The message #507 may include an N2 message. The N2 message may include information that the RAN needs to forward to the UE, such as registration acceptance information. The registration acceptance information may indicate that the network has accepted the UE's registration request.

S508,RAN发送消息#508;相应地,UE接收该消息#508。S508, RAN sends message #508; correspondingly, UE receives the message #508.

该消息#508,可以包括NAS消息。该消息#508可以包含注册接收信息。The message #508 may include a NAS message and may include registration reception information.

示例性地,以下结合图6和图7,以AUSF为第二网元为例,简要介绍AUSF所进行的主鉴权流程。其中,图6和图7中所涉及的安全锚定功能(security anchor function,SEAF)网元,可以用于生成用于接入层和非接入层的安全根密钥。SAEF设置于AMF中,可以与AMF部署在一起,而不是作为独立的网络功能存在于系统架构中。For example, the following briefly describes the primary authentication process performed by the AUSF using Figures 6 and 7 as the second network element. The security anchor function (SEAF) network element mentioned in Figures 6 and 7 can be used to generate security root keys for the access layer and non-access layer. The SAEF is set in the AMF and can be deployed together with the AMF, rather than existing as an independent network function in the system architecture.

图6是本申请实施例提供的另一种通信方法的流程性示意图。方法600可以包括以下步骤:FIG6 is a flow chart of another communication method provided by an embodiment of the present application. Method 600 may include the following steps:

S601,UE发送消息#601;相应地,SEAF接收该消息#601。S601, UE sends message #601; correspondingly, SEAF receives the message #601.

消息#601可以包括UE的标识,比如,SUCI或5G-GUTI。Message #601 may include the UE's identifier, such as SUCI or 5G-GUTI.

S602,SEAF发送消息#602;相应地,AUSF接收该消息#602。S602, SEAF sends message #602; accordingly, AUSF receives the message #602.

消息#602,可以用于为UE请求鉴权,可以记作Nausf_UEAuthentication_Authenticate_Request。Message #602 may be used to request authentication for the UE and may be recorded as Nausf_UEAuthentication_Authenticate_Request.

示例性地,消息#602可以包括SUPI或SUCI,还可以包括服务网络的名称(serving network name,SNN)。Exemplarily, message #602 may include SUPI or SUCI, and may also include the name of the serving network (SNN).

一个实施例中,在SEAF接收到的消息中携带的是5G-GUTI时,对该UE再次进行鉴权时携带SUPI。In one embodiment, when the message received by SEAF carries 5G-GUTI, SUPI is carried when the UE is authenticated again.

SNN可以由UE或SEAF构造得到,AUSF可以接收由SEAF所构造的SNN。The SNN can be constructed by the UE or SEAF, and the AUSF can receive the SNN constructed by the SEAF.

示例性地,在AUSF接收到消息#602时,通过比较消息#602中所携带的服务网络名称与预期的服务网络的名称,可以确定发送该消息的SEAF是否有权使用该消息中所携带的服务网络名称。服务网络的名称可以用于锚密钥的推导。一方面,服务网络的名称通过包含服务网络的标识,可以将锚密钥绑定到该服务网络。另一方面,服务网络的名称中可以包含设置为“5G”的服务代码,以确保锚密钥是5G核心网与UE之间的认证所专用的。For example, when the AUSF receives message #602, by comparing the service network name carried in message #602 with the name of the expected service network, it can determine whether the SEAF that sent the message is authorized to use the service network name carried in the message. The name of the service network can be used to derive the anchor key. On the one hand, the name of the service network can bind the anchor key to the service network by including the identifier of the service network. On the other hand, the name of the service network can include a service code set to "5G" to ensure that the anchor key is dedicated to the authentication between the 5G core network and the UE.

S603,AUSF发送消息#603;相应地,UDM/APRF/SIDE接收该消息#603。S603, AUSF sends message #603; accordingly, UDM/APRF/SIDE receives the message #603.

消息#603,可以用于查询UE的鉴权信息,可以记作Nudm_UEAuthentication_Get_Request。Message #603 can be used to query the UE's authentication information and can be recorded as Nudm_UEAuthentication_Get_Request.

消息#603可以包括SUPI/SUCI,以及SNN。Message #603 may include SUPI/SUCI, and SNN.

一个实施例中,在接收到消息#603之后,在消息#603包含SUCI时,UDM可以调用用户身份发现功能(subscriber identity discovery function,SIDF)网元,以根据SUCI对应的SUPI。In one embodiment, after receiving message #603, when message #603 includes SUCI, the UDM may call a subscriber identity discovery function (SIDF) network element to determine the SUPI corresponding to the SUCI.

S604,根据SUPI选择鉴权方法。S604: Select an authentication method based on the SUPI.

UDM/ARPF可以根据SUPI选择身份验证的方式。UDM/ARPF can select the authentication method based on SUPI.

示例性地,在涉及对当前使用该UE的用户的鉴权时,消息#601和消息#602还可以包括该用户的用户标识。Exemplarily, when it comes to authentication of the user currently using the UE, message #601 and message #602 may also include the user identification of the user.

示例性地,以下以鉴权方式为EPA-AKA’为例,结合图7介绍AUSF所进行的主鉴权流程。For example, the following takes the authentication method EPA-AKA’ as an example and introduces the main authentication process performed by AUSF in combination with Figure 7.

图7是本申请实施例提供的另一种通信方法的流程性示意图。方法700可以包括以下步骤:FIG7 is a flow chart of another communication method provided by an embodiment of the present application. Method 700 may include the following steps:

S701,UDM生成鉴权向量(authentication vector,AV)。S701, UDM generates an authentication vector (AV).

UDM可以根据签约信息选择鉴权方式并生成鉴权向量。鉴权向量可以包括预期响应(expected response,ERES)和鉴权令牌(authentication token,AUTN)。The UDM can select an authentication method based on the contract information and generate an authentication vector. The authentication vector can include an expected response (ERES) and an authentication token (AUTN).

S702,UDM发送消息#702;相应地,AUSF接收消息#702。S702, UDM sends message #702; accordingly, AUSF receives message #702.

消息#702可以包括鉴权向量。消息#702可以包括消息#603的响应消息,可以记作Nudm_UEAuthentication_Get_Response。Message #702 may include the authentication vector. Message #702 may include a response message to message #603, which may be recorded as Nudm_UEAuthentication_Get_Response.

一些可能的实现方式中,消息#702还可以包括SUPI、应用程序的认证和管理(authentication and key management for applications,AKMA)指示和路由指示中的一项至多项。In some possible implementations, message #702 may also include one or more of SUPI, authentication and key management for applications (AKMA) indication, and routing indication.

S703,AUSF发送消息#703;相应地,SEAF接收该消息#703。S703, AUSF sends message #703; accordingly, SEAF receives the message #703.

消息#703可以记作Nausf_UEAuthentication_Authenticate_Response。Message #703 may be recorded as Nausf_UEAuthentication_Authenticate_Response.

消息#703可以包括鉴权信息,比如AUTN。Message #703 may include authentication information, such as AUTN.

S704,SEAF发送消息#704;相应地,UE接收该消息#704。S704, SEAF sends message #704; correspondingly, UE receives the message #704.

SEAF可以将鉴权信息透传给UE。消息#704可以包括核心网对UE的鉴权请求消息,可以记作Auth-Req。SEAF may transparently transmit the authentication information to the UE. Message #704 may include an authentication request message from the core network to the UE, which may be recorded as Auth-Req.

S705,确定鉴权响应。S705: Determine the authentication response.

UE可以根据AUTN对核心网进行鉴权。The UE can authenticate the core network based on the AUTN.

S706,UE发送消息#706;相应地,SEAF接收该消息。S706, UE sends message #706; correspondingly, SEAF receives the message.

在身份验证通过后,UE可以向核心网发送鉴权响应消息。After the identity authentication is passed, the UE can send an authentication response message to the core network.

消息#706可以包括鉴权响应消息,可以记作Auth-Resp。Message #706 may include an authentication response message, which may be denoted as Auth-Resp.

S707,SEAF发送消息#707;相应地,AUSF接收该消息。S707, SEAF sends message #707; accordingly, AUSF receives the message.

消息#707可以记作Nausf_UEAuthentication_Authenticate_Request。Message #707 can be recorded as Nausf_UEAuthentication_Authenticate_Request.

S708,验证鉴权响应。S708: Verify the authentication response.

通过步骤S706和步骤S707,可以AUSF可以获取UE的鉴权响应。Through steps S706 and S707, AUSF can obtain the authentication response of the UE.

AUSF可以将UE的鉴权响应与UDM发送的鉴权向量作比对。在二者一致的情况下,服务网络鉴权成功。The AUSF can compare the UE's authentication response with the authentication vector sent by the UDM. If the two are consistent, the serving network authentication is successful.

可选地,S709,交换EAP消息。Optionally, in S709 , EAP messages are exchanged.

AUSF和UE可以通过SEAF交换更多的EAP消息,比如EAP请求/AKA’通知消息和EAP响应/AKA’通知消息。The AUSF and UE can exchange more EAP messages through SEAF, such as EAP request/AKA’ notification message and EAP response/AKA’ notification message.

S710,AUSF发送消息#710;相应地,SEAF接收该消息。S710, AUSF sends message #710; accordingly, SEAF receives the message.

消息#710可以记作Nausf_UEAuthentication_Authenticate_Response。Message #710 can be recorded as Nausf_UEAuthentication_Authenticate_Response.

消息#710可以包括EAP成功信息、锚密钥和SUPI。EAP成功信息可以指示鉴权成功。Message #710 may include EAP success information, anchor key, and SUPI. The EAP success information may indicate that the authentication is successful.

S711,SEAF发送消息#711;相应地,UE接收该消息。S711, SEAF sends message #711; correspondingly, UE receives the message.

消息#711,可以包括EAP成功信息。Message #711 may include EAP success information.

通过步骤S710和步骤S711,UE可以获得鉴权结果。Through steps S710 and S711 , the UE can obtain the authentication result.

示例性地,步骤S601至S604,以及步骤S701至步骤S711可以对应于步骤S505。Exemplarily, steps S601 to S604 , and steps S701 to S711 may correspond to step S505 .

示例性地,以下以AUSF为第二网元、以UDM为第一网元且以UDR为第三网元为例,结合图8对方法400进行简要介绍。图8示出了一种UE的注册流程。Exemplarily, the following takes AUSF as the second network element, UDM as the first network element, and UDR as the third network element as an example, and briefly introduces the method 400 in conjunction with Figure 8. Figure 8 shows a registration process of a UE.

图8是本申请实施例提供的另一种通信方法流程性示意图。方法800可以包括:FIG8 is a flow chart of another communication method provided by an embodiment of the present application. Method 800 may include:

S801,UE发送消息#801;相应地,RAN接收该消息。S801, UE sends message #801; accordingly, RAN receives the message.

消息#801,可以包括UE的标识(比如SUCI或5G-GUTI),还可以包括当前使用该UE的用户的user ID。Message #801 may include the UE identifier (such as SUCI or 5G-GUTI) and the user ID of the user currently using the UE.

S802,RAN选择合适的AMF。S802: RAN selects a suitable AMF.

S803,RAN发送消息#803;相应地,AMF接收该消息。S803, RAN sends message #803; accordingly, AMF receives the message.

消息#803,可以包括UE的标识(比如SUCI或5G-GUTI),还可以包括当前使用该UE的用户的user ID。Message #803 may include the UE identifier (such as SUCI or 5G-GUTI) and the user ID of the user currently using the UE.

S804,AMF选择合适的AUSF。S804, AMF selects a suitable AUSF.

示例性地,步骤S801至S804可以对应于步骤S501至步骤S504。相应地,消息#801可以为注册请求消息。Exemplarily, steps S801 to S804 may correspond to steps S501 to S504. Accordingly, message #801 may be a registration request message.

S805,AMF发送消息#805;相应地,AUSF接收该消息。S805, AMF sends message #805; accordingly, AUSF receives the message.

消息#805,可以包括SUCI,还可以包括当前使用该UE的用户的user ID。Message #805 may include SUCI and the user ID of the user currently using the UE.

S806,AUSF发送消息#806;相应地,UDM接收该消息。S806, AUSF sends message #806; accordingly, UDM receives the message.

消息#806,可以包括SUCI,还可以包括当前使用该UE的用户的user ID。Message #806 may include SUCI and the user ID of the user currently using the UE.

一个实施例中,步骤S805和S806可以对应于步骤S602和S603。相应地,消息#805可以为Nausf_UEAuthentication_Authenticate_Request;消息#806可以为Nudm_UEAuthentication_Get_Request。In one embodiment, steps S805 and S806 may correspond to steps S602 and S603. Accordingly, message #805 may be Nausf_UEAuthentication_Authenticate_Request; and message #806 may be Nudm_UEAuthentication_Get_Request.

S807,UDM选择鉴权方法,并生成鉴权向量。S807: UDM selects an authentication method and generates an authentication vector.

示例性地,UDM可以根据当前使用该UE的用户的user ID选择鉴权方法,并生成鉴权向量。For example, the UDM can select an authentication method based on the user ID of the user currently using the UE and generate an authentication vector.

S808,UDM发送消息#808;相应地,AUSF接收该消息。S808, UDM sends message #808; accordingly, AUSF receives the message.

消息#808可以包括SUPI和鉴权向量。Message #808 may include SUPI and authentication vector.

步骤S808可以对应于步骤S702。相应地,消息#808可以为消息#806的响应消息,可以对应于消息#702,记作Nudm_UEAuthentication_Get_Response。Step S808 may correspond to step S702. Accordingly, message #808 may be a response message to message #806, and may correspond to message #702, and may be recorded as Nudm_UEAuthentication_Get_Response.

S809,UE、RAN、AMF和AUSF之间交互,进行鉴权。S809: UE, RAN, AMF and AUSF interact to perform authentication.

通过步骤S809,可以对当前使用该UE的用户进行鉴权。Through step S809, the user currently using the UE can be authenticated.

一个实施例中,步骤S809可以对应于步骤S703至S708。In one embodiment, step S809 may correspond to steps S703 to S708.

又一个实施例中,步骤S801至步骤S809可以对应于步骤S401。In another embodiment, steps S801 to S809 may correspond to step S401.

S810,AUSF发送消息#810;相应地,UDM接收该消息。S810, AUSF sends message #810; accordingly, UDM receives the message.

在鉴权成功时,AUSF可以向UDM发送消息#810。消息#810可以包括该UE的标识(比如SUPI)、当前使用该UE的用户的user ID,以及鉴权成功的指示信息。When the authentication is successful, the AUSF may send a message #810 to the UDM. Message #810 may include the UE's identifier (e.g., SUPI), the user ID of the user currently using the UE, and an indication that the authentication was successful.

消息#810可以记作Nudm_UserAuthentication_ResultConfimation_Request。Message #810 can be recorded as Nudm_UserAuthentication_ResultConfimation_Request.

一个实施例中,步骤S810可以对应于步骤S402,消息#810可以作为第一消息的示例。In one embodiment, step S810 may correspond to step S402, and message #810 may be an example of a first message.

S811,UDM在其所存储的该UE的数据中增加/更新信息,以指示当前使用该UE的用户。S811, the UDM adds/updates information in the stored data of the UE to indicate the user currently using the UE.

示例性地,UDM所存储的UE的数据,可以包括UE的上下文信息。根据该UE的标识,UDM可以从其所存储的UE的上下文中找到该UE的上下文;可以在该UE的上下文中增加信息,以指示当前使用该UE的用户。例如,假设该用户的用户标识为user ID#1,可以在该UE的上下文信息中增加字样“active user:user ID#1”,通过该字样可以指示当前使用该UE的用户。Exemplarily, the UE data stored by the UDM may include UE context information. Based on the UE's identifier, the UDM may retrieve the UE's context from its stored UE contexts and add information to the UE's context to indicate the user currently using the UE. For example, assuming the user identifier is user ID#1, the text "active user: user ID#1" may be added to the UE's context information to indicate the user currently using the UE.

一个实施例中,步骤S811可以对应于步骤S403。In one embodiment, step S811 may correspond to step S403.

S812,UDM与UDR之间交互,进行会话管理策略的关联或更新。S812: The UDM interacts with the UDR to associate or update the session management policy.

一些可能的实现方式中,UDR中可以存储有不同UE的相关数据,还可以存储有不同用户的相关数据。In some possible implementations, the UDR may store relevant data of different UEs and may also store relevant data of different users.

示例性地,UDM可以向UDR发送数据更新请求消息,以请求更新UDR中所存储的数据,该消息可以记作Nudr_DM_Update。Exemplarily, the UDM may send a data update request message to the UDR to request updating of data stored in the UDR. The message may be recorded as Nudr_DM_Update.

一个实施例中,该数据更新请求消息中可以包括UE的标识(比如SUPI)以及当前使用该UE的user ID。UDR在接收该消息后,可以在其所存储的该UE的相关数据中增加信息,以指示当前使用该UE的用户。In one embodiment, the data update request message may include the UE identifier (such as SUPI) and the user ID currently using the UE. After receiving the message, the UDR may add information to the UE-related data stored in it to indicate the user currently using the UE.

步骤S812可以对应于步骤S404,该数据更新请求消息可以作为第一请求消息的示例。Step S812 may correspond to step S404, and the data update request message may be taken as an example of a first request message.

一些可能的实现方式中,在完成该UE的相关数据的更新之后,UDR可以向UDM发送响应消息,指示已完成数据的更新。该响应消息可以作为第四消息的一个示例。In some possible implementations, after completing the update of the relevant data of the UE, the UDR may send a response message to the UDM to indicate that the data update has been completed. The response message may be used as an example of the fourth message.

S813,UDM发送消息#813;相应地,AUSF接收该消息。S813, UDM sends message #813; accordingly, AUSF receives the message.

消息#813可以记作Nudm_UserAuthentication_ResultConfimation_Response,可以为消息#810的响应消息。Message #813 may be recorded as Nudm_UserAuthentication_ResultConfimation_Response, which may be a response message to message #810.

S814,AUSF发送消息#814;相应地,AMF接收该消息。S814, AUSF sends message #814; accordingly, AMF receives the message.

消息#814可以为消息#805的响应消息,可以包括鉴权结果。Message #814 may be a response message to message #805 and may include an authentication result.

S815,AMF发送消息#815;相应地,UE接收该消息。S815, AMF sends message #815; accordingly, UE receives the message.

消息#815可以包括当前使用该UE的user ID。Message #815 may include the user ID currently using the UE.

一个实施例中,步骤S814和S815可以对应于步骤S406。In one embodiment, steps S814 and S815 may correspond to step S406.

又一个实施例中,步骤S814和S815可以分别对应于步骤S710和S711。In yet another embodiment, steps S814 and S815 may correspond to steps S710 and S711, respectively.

在本申请实施例中,UDM可以存储当前使用UE的用户的标识。通过该方式,UDM能够基于所存储的用户的标识,查询该用户的相关信息,比如签约信息、PDU会话相关的策略信息等。在建立PDU会话过程中,可以降低信令开销,提升通信效率。In an embodiment of the present application, the UDM can store the identifier of the user currently using the UE. In this way, the UDM can query relevant information about the user, such as subscription information and policy information related to the PDU session, based on the stored user identifier. During the PDU session establishment process, signaling overhead can be reduced and communication efficiency can be improved.

示例性地,以下仍然以UDM为第一网元、以AUSF为第二网元且以UDR为第三网元为例,结合图9介绍PDU会话的建立流程。For example, the following still takes UDM as the first network element, AUSF as the second network element and UDR as the third network element as an example, and describes the process of establishing a PDU session in combination with Figure 9.

图9是本申请实施例提供的另一种通信方法的流程性示意图。方法900可以包括:FIG9 is a flow chart of another communication method provided by an embodiment of the present application. Method 900 may include:

S901,UE发送消息#901;相应地,AMF接收该消息。S901, UE sends message #901; accordingly, AMF receives the message.

消息#901可以用于请求建立PDU会话。消息#901可以包括该PDU会话的标识。Message #901 may be used to request the establishment of a PDU session and may include an identifier of the PDU session.

S902,AMF选择SMF。S902, AMF selects SMF.

S903,AMF发送消息#903;相应地,SMF接收该消息。S903, AMF sends message #903; accordingly, SMF receives the message.

消息#903可以包括该PDU会话的标识和SUPI。Message #903 may include the identifier and SUPI of the PDU session.

一个实施例中,步骤S901至步骤S903可以对应于步骤S201至S203。In one embodiment, steps S901 to S903 may correspond to steps S201 to S203.

S904,SMF发送消息#904;相应地,UDM接收该消息。S904, SMF sends message #904; accordingly, UDM receives the message.

消息#904可以包括SUPI。消息#904可以用于查询当前使用该UE的用户的签约数据,可以记作Nudm_SDM_Get。Message #904 may include SUPI. Message #904 may be used to query the subscription data of the user currently using the UE, and may be recorded as Nudm_SDM_Get.

一个实施例中,消息#904可以作为第二消息的一个示例。In one embodiment, message #904 may be used as an example of the second message.

S905,UDM根据其所存储的该UE的数据,确认当前使用该UE的用户的用户文件。S905: The UDM confirms the user file of the user currently using the UE based on the stored data of the UE.

示例性地,UDM所存储的UE的数据可以包括UE的上下文。假设UDM已经按照方法800在该UE的上下文中增加和/或更新了该UE的激活用户的user ID。Exemplarily, the UE data stored by the UDM may include the UE's context. Assume that the UDM has added and/or updated the user ID of the active user of the UE in the UE's context according to method 800.

一个实施例中,UDM可以从其所存储的多个UE的上下文中,找到该SUPI所对应的UE的上下文。可以根据该UE的上下文中所携带的当前使用该UE的用户的user ID,确定该user ID所对应的签约数据,比如,用户等级、IP地址、QoS参数等。In one embodiment, the UDM can find the UE context corresponding to the SUPI from among the multiple UE contexts it stores. Based on the user ID of the user currently using the UE carried in the UE context, the UDM can determine the subscription data corresponding to the user ID, such as user level, IP address, QoS parameters, etc.

S906,UDM发送消息#906;相应地,SMF接收该消息。S906, UDM sends message #906; correspondingly, SMF receives the message.

消息#906可以包括当前使用该UE的用户的用户文件,用户文件可以包括该用户的签约数据。Message #906 may include a user file of the user currently using the UE, and the user file may include subscription data of the user.

一些可能的实现方式中,消息#906还可以包括该用户的user ID。In some possible implementations, message #906 may also include the user’s user ID.

一个实施例中,消息#906可以作为第三消息的示例。In one embodiment, message #906 may be used as an example of the third message.

S907,SMF发送消息#907;相应地,AMF接收该消息。S907, SMF sends message #907; accordingly, AMF receives the message.

SMF可以根据该用户的签约数据,确定是否允许建立PDU会话。在允许建立PDU会话时,SMF可以为该PDU会话创建会话管理上下文。The SMF can determine whether to allow the establishment of a PDU session based on the user's subscription data. When the establishment of a PDU session is allowed, the SMF can create a session management context for the PDU session.

消息#907可以包括该PDU会话的会话管理上下文的标识。Message #907 may include an identifier of the session management context of the PDU session.

一些可能的实现方式中,S908,对PDU会话进行鉴权。In some possible implementations, S908 , the PDU session is authenticated.

SMF可以根据用户的签约数据和/或DN相关联的会话管理策略,确定是否需要对该PDU会话进行二次鉴权。例如,在用户的签约数据包括对PDU会话进行二次鉴权的指示时,SMF对该PDU会话进行二次鉴权。The SMF may determine whether a secondary authentication is required for the PDU session based on the user's subscription data and/or the session management policy associated with the DN. For example, when the user's subscription data includes an indication for secondary authentication of the PDU session, the SMF performs secondary authentication on the PDU session.

S909,SMF选择合适的PCF。S909: The SMF selects a suitable PCF.

S910,SMF发送消息#910;相应地,PCF接收该消息。S910, SMF sends message #910; correspondingly, PCF receives the message.

消息#910中可以包括SUPI以及PDU会话的标识。消息#910可以用于请求更新会话管理控制策略,可以记作Npcf_SMPolicyControl_Update_Request。Message #910 may include the SUPI and the identifier of the PDU session. Message #910 may be used to request an update of the session management control policy and may be recorded as Npcf_SMPolicyControl_Update_Request.

一些可能的实现方式中,消息#910还可以包括user ID。In some possible implementations, message #910 may also include a user ID.

一个实施例中,消息#910可以作为第六请求消息的示例。In one embodiment, message #910 may be used as an example of the sixth request message.

S911,PCF发送消息#911;相应地,UDR接收该消息。S911, PCF sends message #911; accordingly, UDR receives the message.

在PCF未存储有与当前使用该UE的用户的user ID相关的订阅数据时,PCF可以向UDR发送消息,以查询与该user ID相关的订阅数据。消息#911可以记作Nudr_DM_Query_Request。If the PCF does not store subscription data associated with the user ID of the user currently using the UE, the PCF may send a message to the UDR to query the subscription data associated with the user ID. Message #911 may be recorded as Nudr_DM_Query_Request.

一个实施例中,消息#911可以包括SUPI。相应地,UDR可以根据该SUPI查询该UE的相关数据,从该UE的相关数据中得到当前使用该UE的用户的user ID。UDR还可以查询与该user ID关联的相关数据,并发送给PCF。在此场景下,消息#911可以作为第四请求消息的示例;该消息#911的响应消息可以作为第五消息的示例。In one embodiment, message #911 may include the SUPI. Accordingly, the UDR may query the relevant data of the UE based on the SUPI and obtain the user ID of the user currently using the UE from the relevant data. The UDR may also query relevant data associated with the user ID and send it to the PCF. In this scenario, message #911 may serve as an example of the fourth request message; the response message to message #911 may serve as an example of the fifth message.

又一个实施例中,消息#911可以包括当前使用该UE的用户的user ID。相应地,该UDR可以根据该user ID查询与该用户的相关数据。在此场景下,消息#911可以作为第五请求消息的示例;消息#911的响应消息,可以作为第六消息的示例。In another embodiment, message #911 may include the user ID of the user currently using the UE. Accordingly, the UDR may query data related to the user based on the user ID. In this scenario, message #911 may serve as an example of the fifth request message; the response message to message #911 may serve as an example of the sixth message.

示例性地,在PCF中存储有与当前使用该UE的用户相关的会话管理策略时,可以跳过步骤S911和S912。Exemplarily, when a session management policy related to a user currently using the UE is stored in the PCF, steps S911 and S912 may be skipped.

S912,UDR发送消息#912;相应地,PCF接收该消息。S912, UDR sends message #912; correspondingly, PCF receives the message.

UDR可以查询其所存储的该UE的相关数据,以及当前使用该UE的用户的相关数据。The UDR can query the stored data related to the UE and the data related to the user currently using the UE.

消息#912可以包括该PDU会话的会话管理控制策略信息,比如,用户等级、DNN/S-NSSAI所对应的QoS流的最大聚合比特率、允许的服务等。Message #912 may include session management control policy information of the PDU session, such as user level, maximum aggregate bit rate of QoS flow corresponding to DNN/S-NSSAI, allowed services, etc.

消息#912可以包括消息#911的响应消息。Message #912 may include a response message to message #911.

S913,PCF确定更新该PDU会话关联的策略,或确定向SMF发送新的策略。S913, PCF determines to update the policy associated with the PDU session, or determines to send a new policy to SMF.

S914,PCF发送消息#914;相应地,SMF接收该消息。S914, PCF sends message #914; correspondingly, SMF receives the message.

消息#914可以包括该用户的user ID所对应的PDU会话的会话控制策略信息。Message #914 may include session control policy information for the PDU session corresponding to the user ID of the user.

消息#914可以包括消息#910的响应消息,可以记作Npcf_SMPolicyControl_Update_Response。Message #914 may include a response message to message #910, which may be recorded as Npcf_SMPolicyControl_Update_Response.

一个实施例中,消息#914可以作为第七消息的示例。In one embodiment, message #914 may be used as an example of the seventh message.

S915,SMF选择合适的UPF。S915, SMF selects the appropriate UPF.

S916,建立PDU会话。S916: Establish a PDU session.

示例性地,步骤S915和S916可以对应于步骤S209至S212。Exemplarily, steps S915 and S916 may correspond to steps S209 to S212 .

示例性地,以下以AUSF为第二网元且以AMF为第一网元为例,结合图10对方法400进行简要介绍。图10示出了一种UE的注册流程。Exemplarily, the following takes AUSF as the second network element and AMF as the first network element as an example, and briefly introduces the method 400 in conjunction with Figure 10. Figure 10 shows a registration process of a UE.

图10是本申请实施例提供的另一种通信方法的流程性示意图。方法1000可以包括与以下步骤:FIG10 is a flow chart of another communication method provided by an embodiment of the present application. The method 1000 may include the following steps:

S1001,UE发送消息#1001;相应地,RAN接收该消息。S1001, UE sends message #1001; accordingly, RAN receives the message.

消息#1001,可以包括UE的标识(比如SUCI或5G-GUTI),还可以包括当前使用该UE的用户的user ID。Message #1001 may include the UE identifier (such as SUCI or 5G-GUTI) and the user ID of the user currently using the UE.

S1002,RAN选择合适的AMF。S1002: RAN selects a suitable AMF.

S1003,RAN发送消息#1003;相应地,AMF接收该消息。S1003, RAN sends message #1003; accordingly, AMF receives the message.

消息#1003,可以包括UE的标识(比如SUCI或5G-GUTI),还可以包括当前使用该UE的用户的user ID。Message #1003 may include the UE identifier (such as SUCI or 5G-GUTI) and the user ID of the user currently using the UE.

S1004,AMF选择合适的AUSF。S1004, AMF selects a suitable AUSF.

S1005,AMF发送消息#1005;相应地,AUSF接收该消息。S1005, AMF sends message #1005; accordingly, AUSF receives the message.

消息#1005,可以包括SUCI,还可以包括当前使用该UE的用户的user ID。Message #1005 may include SUCI and the user ID of the user currently using the UE.

S1006,AUSF发送消息#1006;相应地,UDM接收该消息。S1006, AUSF sends message #1006; accordingly, UDM receives the message.

消息#1006,可以包括SUCI,还可以包括当前使用该UE的用户的user ID。Message #1006 may include SUCI and the user ID of the user currently using the UE.

S1007,UDM选择鉴权方法,并生成鉴权向量。S1007: UDM selects an authentication method and generates an authentication vector.

示例性地,UDM可以根据当前使用该UE的用户的user ID选择鉴权方法,并生成鉴权向量。For example, the UDM can select an authentication method based on the user ID of the user currently using the UE and generate an authentication vector.

S1008,UDM发送消息#1008;相应地,AUSF接收该消息。S1008, UDM sends message #1008; accordingly, AUSF receives the message.

消息#1008可以包括SUPI和鉴权向量。Message #1008 may include SUPI and authentication vector.

步骤S1008可以对应于步骤S702。相应地,消息#1008可以为消息#1006的响应消息,可以对应于消息#702,记作Nudm_UEAuthentication_Get_Response。Step S1008 may correspond to step S702. Accordingly, message #1008 may be a response message to message #1006, and may correspond to message #702, and may be recorded as Nudm_UEAuthentication_Get_Response.

S1009,UE、RAN、AMF和AUSF之间交互,进行鉴权。S1009: UE, RAN, AMF and AUSF interact to perform authentication.

示例性地,步骤S1001至S1009可以对应于步骤S801至步骤S809。Exemplarily, steps S1001 to S1009 may correspond to steps S801 to S809.

S1010,AUSF发送消息#1010;相应地,AMF接收该消息。S1010, AUSF sends message #1010; accordingly, AMF receives the message.

在鉴权成功时,AUSF可以向AMF发送消息#1010。消息#1010可以包括该UE的标识(比如SUPI)、当前使用该UE的用户的user ID以及鉴权成功的指示信息。Upon successful authentication, the AUSF may send message #1010 to the AMF. Message #1010 may include the UE's identifier (e.g., SUPI), the user ID of the user currently using the UE, and an indication that the authentication was successful.

消息#1010可以记作Nausf_UserAuthentication_Authenticate_Response。Message #1010 may be recorded as Nausf_UserAuthentication_Authenticate_Response.

一个实施例中,消息#1010可以作为第一消息的示例。In one embodiment, message #1010 may be used as an example of the first message.

S1011,AMF在其所存储的该UE的数据中增加/更新信息,以指示当前使用该UE的用户。S1011: The AMF adds/updates information in the stored data of the UE to indicate the user currently using the UE.

示例性地,AMF所存储的UE的数据,可以包括UE的上下文信息。AMF根据该UE的标识,可以从其所存储的UE的上下文中查找到该UE的上下文。可以在该UE的上下文中增加/更新信息,以指示当前使用该UE的用户。例如,假设该用户的用户标识为user ID#2,可以在该UE的上下文信息中增加字样“current user:user ID#2”,通过该字样可以指示当前使用该UE的用户。Exemplarily, the UE data stored by the AMF may include UE context information. Based on the UE identifier, the AMF may search for the UE context from its stored UE context. Information may be added/updated in the UE context to indicate the user currently using the UE. For example, assuming the user identifier of the user is user ID#2, the words "current user: user ID#2" may be added to the UE context information to indicate the user currently using the UE.

一个实施例中,步骤S1011可以对应于步骤S403。In one embodiment, step S1011 may correspond to step S403.

S1012,AMF发送消息#1012;相应地,UE接收该消息。S1012, AMF sends message #1012; accordingly, UE receives the message.

AMF可以向UE发送消息通知当前使用该UE的用户以成功注册到网络。消息#1012可以包括user ID。The AMF may send a message to the UE to notify the user currently using the UE that the UE has successfully registered with the network. Message #1012 may include the user ID.

步骤S1012可以对应于步骤S406。Step S1012 may correspond to step S406 .

在本申请实施例中,AMF可以存储当前使用UE的用户的标识。通过该方式,AMF能够向其他网元传递所记录的用户标识,使能UDM、UDR基于该用户标识准确地为用户提供服务。通过该方式,在建立PDU会话过程中,可以降低信令开销,提升通信效率。In an embodiment of the present application, the AMF can store the identifier of the user currently using the UE. In this way, the AMF can pass the recorded user identifier to other network elements, enabling the UDM and UDR to accurately provide services to the user based on the user identifier. In this way, during the establishment of the PDU session, signaling overhead can be reduced and communication efficiency can be improved.

示例性地,以下仍然以AUSF为第二网元且以AMF为第一网元为例,结合图11介绍PDU会话的建立流程。For example, the following still takes AUSF as the second network element and AMF as the first network element as an example, and introduces the process of establishing a PDU session in combination with Figure 11.

图11是本申请实施例提供的另一种通信方法的流程性示意图。该方法1100可以包括以下步骤:FIG11 is a flow chart of another communication method provided by an embodiment of the present application. The method 1100 may include the following steps:

S1101,UE发送消息#1101;相应地,AMF接收该消息。S1101, UE sends message #1101; accordingly, AMF receives the message.

消息#1101可以用于请求建立PDU会话。消息#1101可以包括该PDU会话的标识。Message #1101 may be used to request the establishment of a PDU session and may include an identifier of the PDU session.

一个实施例中,消息#1101可以作为第二请求消息的示例。In one embodiment, message #1101 may be used as an example of a second request message.

S1102,AMF选择SMF。S1102, AMF selects SMF.

示例性地,步骤S1101和S1102,可以对应于步骤S901和S902。Exemplarily, steps S1101 and S1102 may correspond to steps S901 and S902.

S1103,AMF根据所存储的该UE的上下文确认当前使用该UE的用户的user ID。S1103, AMF confirms the user ID of the user currently using the UE based on the stored context of the UE.

S1104,AMF发送消息#1104;相应地,SMF接收该消息。S1104, AMF sends message #1104; accordingly, SMF receives the message.

消息#1104可以包括该PDU会话的标识、SUPI和当前使用该UE的用户的user ID。Message #1104 may include the identifier of the PDU session, the SUPI, and the user ID of the user currently using the UE.

一个实施例中,消息#1104可以作为第三请求消息的示例。In one embodiment, message #1104 may serve as an example of a third request message.

S1105,SMF发送消息#1105;相应地,UDM接收该消息。S1105, SMF sends message #1105; accordingly, UDM receives the message.

消息#1105可以包括当前使用该UE的用户的user ID。消息#1104可以用于查询该用户的签约数据,可以记作Nudm_SDM_Get。Message #1105 may include the user ID of the user currently using the UE. Message #1104 may be used to query the user's subscription data and may be recorded as Nudm_SDM_Get.

UDM可以根据该user ID,从其所存储的用户文件中查找该user ID关联的用户文件。用户文件可以包括签约数据。Based on the user ID, the UDM can search for the user file associated with the user ID from its stored user files. The user file may include contract data.

S1106,UDM发送消息#1106;相应地,SMF接收该消息。S1106, UDM sends message #1106; correspondingly, SMF receives the message.

消息#1106可以包括当前使用该UE的用户的用户文件,用户文件可以包括该用户的签约数据。Message #1106 may include a user file of the user currently using the UE, and the user file may include subscription data of the user.

S1107,SMF发送消息#1107;相应地,AMF接收该消息。S1107, SMF sends message #1107; accordingly, AMF receives the message.

SMF可以根据该用户的签约数据,确定是否允许建立PDU会话。在允许建立PDU会话时,SMF可以为该PDU会话创建会话管理上下文。The SMF can determine whether to allow the establishment of a PDU session based on the user's subscription data. When the establishment of a PDU session is allowed, the SMF can create a session management context for the PDU session.

消息#1107可以包括该PDU会话的会话管理上下文的标识。Message #1107 may include an identifier of the session management context of the PDU session.

一些可能的实现方式中,S1108,对PDU会话进行鉴权。In some possible implementations, S1108 , the PDU session is authenticated.

SMF可以根据用户的签约数据和/或DN相关联的会话管理策略,确定是否需要对该PDU会话进行二次鉴权。在无需对PDU会话进行二次鉴权时,可以跳过步骤S1108。The SMF can determine whether a secondary authentication is required for the PDU session based on the user's subscription data and/or the session management policy associated with the DN. If a secondary authentication is not required for the PDU session, step S1108 can be skipped.

S1109,SMF选择合适的PCF。S1109: The SMF selects a suitable PCF.

示例性地,步骤S1107至S1109可以对应于步骤S907至S909。Exemplarily, steps S1107 to S1109 may correspond to steps S907 to S909.

S1110,SMF发送消息#1110;相应地,PCF接收该消息。S1110, SMF sends message #1110; accordingly, PCF receives the message.

消息#1110中可以包括SUPI、当前使用该UE的用户的user ID以及PDU会话的标识。Message #1110 may include the SUPI, the user ID of the user currently using the UE, and the identifier of the PDU session.

消息#1110可以用于请求更新会话管理控制策略,可以记作Npcf_SMPolicyControl_Update_Request。Message #1110 may be used to request an update of a session management control policy and may be recorded as Npcf_SMPolicyControl_Update_Request.

S1111,PCF发送消息#1111;相应地,UDR接收该消息。S1111, PCF sends message #1111; accordingly, UDR receives the message.

在PCF未存储有与当前使用该UE的用户的user ID相关的订阅数据时,PCF可以向UDR发送消息,以查询与该user ID相关的订阅数据。消息#1111可以记作Nudr_DM_Query_Request。If the PCF does not store subscription data associated with the user ID of the user currently using the UE, the PCF may send a message to the UDR to query the subscription data associated with the user ID. Message #1111 may be recorded as Nudr_DM_Query_Request.

一个实施例中,消息#1111可以包括当前使用该UE的用户的user ID。相应地,该UDR可以根据该user ID查询与该用户的相关数据。In one embodiment, message #1111 may include the user ID of the user currently using the UE. Accordingly, the UDR may query data related to the user based on the user ID.

示例性地,在PCF中存储有与当前使用该UE的用户相关的会话管理策略时,可以跳过步骤S1111和S1112。Exemplarily, when a session management policy related to a user currently using the UE is stored in the PCF, steps S1111 and S1112 may be skipped.

S1112,UDR发送消息#1112;相应地,PCF接收该消息。S1112, UDR sends message #1112; accordingly, PCF receives the message.

UDR可以从其所存储的数据中查询当前使用该UE的用户的相关数据。The UDR can query the relevant data of the user currently using the UE from the data stored therein.

消息#1112可以包括该PDU会话的会话管理控制策略信息,比如,用户等级、DNN/S-NSSAI所对应的QoS流的最大聚合比特率、允许的服务等。Message #1112 may include session management control policy information of the PDU session, such as user level, maximum aggregate bit rate of the QoS flow corresponding to DNN/S-NSSAI, allowed services, etc.

S1113,PCF确定更新该PDU会话关联的策略,或确定向SMF发送新的策略。S1113, PCF determines to update the policy associated with the PDU session, or determines to send a new policy to SMF.

S1114,PCF发送消息#1114;相应地,SMF接收该消息。S1114, PCF sends message #1114; accordingly, SMF receives the message.

消息#1114可以包括该用户的user ID所对应的PDU会话的会话控制策略信息。Message #1114 may include session control policy information for the PDU session corresponding to the user ID of the user.

消息#1114可以包括消息#1110的响应消息,可以记作Npcf_SMPolicyControl_Update_Response。Message #1114 may include a response message to message #1110, which may be recorded as Npcf_SMPolicyControl_Update_Response.

S1115,SMF选择合适的UPF。S1115, SMF selects appropriate UPF.

S1116,建立PDU会话。S1116: Establish a PDU session.

一个实施例中,步骤S1113至S1116可以对应于步骤S913至S916。In one embodiment, steps S1113 to S1116 may correspond to steps S913 to S916.

示例性地,以下结合图12介绍AMF选择SMF的流程。For example, the process of AMF selecting SMF is described below in conjunction with Figure 12.

图12是本申请实施例提供的另一种通信方法的流程性示意图。方法1200可以包括以下步骤:FIG12 is a flow chart of another communication method provided by an embodiment of the present application. The method 1200 may include the following steps:

S1201,AMF向NSSF发送消息#1201。S1201, AMF sends message #1201 to NSSF.

AMF可以向服务PLMN中的NSSF发送消息以查询服务于UE的网络切片的NRF实例,消息#1201可以记作Nnssf_NSSelection_Get。The AMF can send a message to the NSSF in the serving PLMN to query the NRF instance of the network slice serving the UE. Message #1201 can be recorded as Nnssf_NSSelection_Get.

其中,受访PLMN(visited PLMN,VPLMN)的S-NSSAI来自UE请求的allowed NSSAI、SUPI的PLMN ID、UE的跟踪区域标识(tracking area identity,TAI),并指示请求在非漫游或漫游有本地分流场景下的PDU会话建立过程中。The S-NSSAI of the visited PLMN (VPLMN) is derived from the allowed NSSAI requested by the UE, the PLMN ID of the SUPI, and the tracking area identity (TAI) of the UE, and indicates the request during the PDU session establishment process in non-roaming or roaming with local offload scenarios.

S1202,NSSF向AMF发送消息#1202。S1202, NSSF sends message #1202 to AMF.

服务PLMN中的NSSF选择网络切片实例,确定并返回适当的NRF。该NRF可以用于在选定的网络切片实例内选择网元或服务。可选择性地返回与网络切片实例对应的网络特定标识(network-specific identifier,NSI)的ID。The NSSF in the serving PLMN selects a network slice instance, determines and returns an appropriate NRF. This NRF can be used to select network elements or services within the selected network slice instance. Optionally, it returns the ID of the network-specific identifier (NSI) corresponding to the network slice instance.

消息#1202可以包括消息#1201的响应消息。消息#1202可以记作Nnssf_NSSelection_Get_response。Message #1202 may include a response message to message #1201. Message #1202 may be recorded as Nnssf_NSSelection_Get_response.

一个实施例中,在AMF基于配置信息或基于注册过程中所接收的网络切片选择信息已获取PDU会话中的网络切片实例内的NRF时,可以跳过步骤S1201和S1202。In one embodiment, when the AMF has obtained the NRF within the network slice instance in the PDU session based on configuration information or based on network slice selection information received during the registration process, steps S1201 and S1202 can be skipped.

S1203,AMF发送消息#1203;相应地,NRF接收该消息。S1203, AMF sends message #1203; accordingly, NRF receives the message.

AMF可以发送消息以查询服务PLMN中的合适的NRF。The AMF may send a message to query the appropriate NRF in the serving PLMN.

消息#1203可以记作Nnrf_NFDiscoverry_Requst,可以包含PDU会话的VPLMN的S-NSSAI、允许的NSSAI、SUPI的PLMN ID。Message #1203 may be denoted as Nnrf_NFDiscoverry_Requst and may include the S-NSSAI of the VPLMN of the PDU session, the allowed NSSAI, and the PLMN ID of the SUPI.

一些可能的实现方式中,在AMF已经从允许的NSSAI中为该PDU会话存储了CPLMN的S-NSSAI的NSI ID时,消息#1203还可以包含NSI ID。In some possible implementations, message #1203 may also include the NSI ID when the AMF has stored the NSI ID of the CPLMN's S-NSSAI for this PDU session from the allowed NSSAIs.

S1204,NRF发送#1204;相应地,AMF接收该消息。S1204, NRF sends #1204; accordingly, AMF receives the message.

服务PLMN中的NRF可以发送消息以向AMF提供所发现的SMF实例的集合或者SMF服务实例的端点地址的集合,以及可能的对应于用于后续NRF查询的S-NSSAI。例如,端点地址可以包括IP地址或完全限定域名(fully qualified domain name,FQDN)The NRF in the serving PLMN may send a message to provide the AMF with the set of discovered SMF instances or the set of endpoint addresses of SMF service instances, and possibly the corresponding S-NSSAI for subsequent NRF queries. For example, the endpoint address may include an IP address or a fully qualified domain name (FQDN).

消息#1204可以包括消息#1203的响应消息,可以记作Nnrf_NFDiscoverry_Requst_response。Message #1204 may include a response message to message #1203, which may be recorded as Nnrf_NFDiscoverry_Requst_response.

一个实施例中,通过步骤S1201至步骤S1204,AMF可以获得SMF的信息,可以选择适当的SMF。In one embodiment, through steps S1201 to S1204, the AMF can obtain information about the SMF and select an appropriate SMF.

又一个实施例中,在AMF存储有可用的SMF的信息时,可以跳过步骤S1201至S1204。In another embodiment, when the AMF stores information of available SMF, steps S1201 to S1204 may be skipped.

示例性地,以下结合图13介绍会话管理策略的关联流程。Exemplarily, the following describes the association process of the session management policy with reference to FIG13 .

图13是本申请实施例提供另一种通信方法的流程性示意图。方法1300可以包括以下步骤。Figure 13 is a flow chart of another communication method provided by an embodiment of the present application. Method 1300 may include the following steps.

S1301,SMF向PCF发送消息#1301。S1301, SMF sends message #1301 to PCF.

一个实施例中,在确定需要PCC授权时,SMF可以向PCF发送消息以请求创建会话管理策略关联。例如,该场景下,步骤S1301至S1306可以对应于步骤S208。In one embodiment, when it is determined that PCC authorization is required, the SMF may send a message to the PCF to request the creation of a session management policy association. For example, in this scenario, steps S1301 to S1306 may correspond to step S208.

又一个实施例中,SMF可以向PCF发送消息以请求更新会话管理策略。例如,该场景下,步骤S1301可以对应于步骤S910或S1110。In another embodiment, the SMF may send a message to the PCF to request an update of the session management policy. For example, in this scenario, step S1301 may correspond to step S910 or S1110.

S1302,PCF向UDR发送消息#1302。S1302, PCF sends message #1302 to UDR.

在PCF未存储所需的UE的相关订阅信息、所需的user ID所对应的相关订阅信息时,可以向UDR查询所需的信息。When the PCF does not store the required UE-related subscription information and the required user ID-related subscription information, it can query the UDR for the required information.

一个实施例中,消息#1302可以包括数据密钥(data key)和数据集合(data set)。data key可以包括用于查询数据的标识,比如SUPI、user ID等。data set可以包括所需查询的数据。例如,表1示出了一种UDR的存储格式。In one embodiment, message #1302 may include a data key and a data set. The data key may include an identifier for querying data, such as a SUPI, user ID, etc. The data set may include the data to be queried. For example, Table 1 shows a storage format for a UDR.

表1 UDR存储的数据格式
Table 1 Data format stored in UDR

S1303,UDR向PCF发送消息#1303。S1303, UDR sends message #1303 to PCF.

示例性地,UDR可以根据data可以和data set查询对应的签约数据并发送给PCF。For example, the UDR can query the corresponding contract data based on data and data set and send it to the PCF.

S1304,进行支出限额报告检索。S1304, perform expenditure limit report retrieval.

计费功能(charging function,CHF)网元中设置有策略计数器,PCF可以根据策略计数器的状态,启动所需的支出限额报告的检索。A policy counter is set in the charging function (CHF) network element. The PCF can initiate the retrieval of the required expenditure limit report based on the status of the policy counter.

一个实施例中,在未针对订阅用户建立保单计数器状态报告时,可以启动初始支出限额报告检索。In one embodiment, an initial spending limit report retrieval may be initiated when a policy counter status report is not established for the subscribing user.

又一个实施例中,在已经为订阅用户建立保单计数器状态报告,并且PCF确定需要额外保单计数器的状态时,PCF可以启动中间支出限额报告检索。In yet another embodiment, when a policy counter status report has been established for a subscribing user and the PCF determines that the status of an additional policy counter is required, the PCF may initiate an interim spending limit report retrieval.

S1305,确定策略。S1305: Determine the strategy.

一个实施例中,PCF可以建立会话管理策略关联。In one embodiment, the PCF may establish a session management policy association.

又一个实施例中,PCF可以更新会话管理策略关联。In another embodiment, the PCF may update the session management policy association.

S1306,PCF向SMF发送消息#1306。S1306, PCF sends message #1306 to SMF.

消息#1306可以为消息#1301的响应消息。消息#1306可以包括PDU会话的会话管理策略的信息。Message #1306 may be a response message to message #1301. Message #1306 may include information about a session management policy of the PDU session.

以上结合图4至图13详细说明了本申请实施例提供的方法。以下,结合图14和图15详细说明本申请实施例提供的装置。应理解,装置实施例的描述与方法实施例的描述相互对应,因此,未详细描述的内容可以参见上文方法实施例,为了简洁,这里不再赘述。The method provided in the embodiment of the present application is described in detail above in conjunction with Figures 4 to 13. Below, the apparatus provided in the embodiment of the present application is described in detail in conjunction with Figures 14 and 15. It should be understood that the description of the apparatus embodiment corresponds to the description of the method embodiment. Therefore, for matters not described in detail, please refer to the method embodiment above. For the sake of brevity, it will not be repeated here.

图14是本申请实施例提供的一种装置的示意性框图。该装置1400可以对应于第一网元、第二网元、第三网元、SMF或PCF,或者,也可以是实现上述网元的功能的组成部件(例如芯片、处理器或处理电路等)或单元。Figure 14 is a schematic block diagram of an apparatus provided in an embodiment of the present application. Apparatus 1400 may correspond to a first network element, a second network element, a third network element, an SMF, or a PCF, or may be a component (e.g., a chip, a processor, or a processing circuit) or unit that implements the functions of the aforementioned network elements.

可选地,装置1400可以包括通信模块1410,通信模块1410也可以称为收发模块、收发器、收发机、或收发装置等,用于执行接收(或输入)和/或发送(或输出)的操作。Optionally, the device 1400 may include a communication module 1410, which may also be called a transceiver module, a transceiver, a transceiver, or a transceiver device, etc., for performing receiving (or inputting) and/or sending (or outputting) operations.

一个实施例中,装置1400为第一网元,或为应用于第一网元的装置的情况下,通信模块1410,可以用于接收第一消息、发送第一请求消息等。In one embodiment, when the device 1400 is a first network element, or a device applied to a first network element, the communication module 1410 can be used to receive a first message, send a first request message, etc.

又一个实施例中,装置1400为第二网元,或为应用于第二网元的装置的情况下,通信模块1410,可以用于发送第一消息。In another embodiment, when the device 1400 is a second network element, or a device applied to a second network element, the communication module 1410 can be used to send the first message.

又一个实施例中,装置1400为第三网元,或为应用于第三网元的装置的情况下,通信模块1410,可以用于接收第一请求消息、发送第四消息等。In another embodiment, when the device 1400 is a third network element, or a device applied to a third network element, the communication module 1410 can be used to receive the first request message, send the fourth message, etc.

又一个实施例中,装置1400为SMF,或为应用于SMF的装置的情况下,通信模块1410,可以用于发送第二消息、接收第三消息等。In another embodiment, when the device 1400 is an SMF, or a device applied to an SMF, the communication module 1410 can be used to send a second message, receive a third message, etc.

又一个实施例中,装置1400为PCF,或为应用于PCF的装置的情况下,通信模块1410,可以用于发送第四请求消息、接收第五消息。In another embodiment, when the device 1400 is a PCF, or a device applied to a PCF, the communication module 1410 can be used to send the fourth request message and receive the fifth message.

可选地,装置1400可以包括处理模块1420,处理模块可以为处理器,处理单板,处理单元、或处理装置等。Optionally, the apparatus 1400 may include a processing module 1420 , which may be a processor, a processing board, a processing unit, or a processing device.

一个实施例中,装置1400为第一网元,或为应用于第一网元的装置的情况下,处理模块1420,可以用于根据终端设备的标识,确定终端设备的激活用户的用户标识。In one embodiment, when the apparatus 1400 is a first network element, or is an apparatus applied to a first network element, the processing module 1420 may be configured to determine a user identifier of an activated user of the terminal device according to an identifier of the terminal device.

又一个实施例中,装置1400为第三网元,或为应用于第三网元的装置的情况下,处理模块1420,可以用于根据终端设备的标识,确定终端设备的激活用户的用户标识。In another embodiment, when the apparatus 1400 is a third network element, or is an apparatus applied to a third network element, the processing module 1420 may be configured to determine the user identification of the activated user of the terminal device according to the identification of the terminal device.

可选地,装置1400可以包括存储模块1430。存储模块可以为存储器、存储单元或存储装置。Optionally, the apparatus 1400 may include a storage module 1430. The storage module may be a memory, a storage unit, or a storage device.

一个实施例中,装置1400为第一网元,或为应用于第一网元的装置的情况下,存储模块1430,可以用于根据第一消息,确定存储对应的用户标识。In one embodiment, when the device 1400 is a first network element, or a device applied to a first network element, the storage module 1430 can be used to determine and store a corresponding user identifier according to the first message.

又一个实施例中,装置1400为第三网元,或为应用于第三网元的装置的情况下,存储模块1430,可以用于根据第一请求信息,更新第三网元存储的终端设备的签约信息。In another embodiment, when the device 1400 is a third network element, or a device applied to a third network element, the storage module 1430 can be used to update the contract information of the terminal device stored in the third network element according to the first request information.

图15是本申请实施例提供的装置2000的示意性框图。该装置2000包括至少一个处理器2010,以实现前述方法实施例描述的第一网元、第二网元、第三网元、SMF或PCF的功能。Figure 15 is a schematic block diagram of an apparatus 2000 provided in an embodiment of the present application. The apparatus 2000 includes at least one processor 2010 to implement the functions of the first network element, the second network element, the third network element, the SMF, or the PCF described in the aforementioned method embodiment.

可选地,该处理器2010与存储器耦合,存储器可以位于该装置之内,或,存储器可以和处理器集成在一起,或,存储器也可以位于该装置之外。装置2000还可以包括至少一个存储器2020。存储器2020保存实施上述任意一个方法实施例中必要的计算机程序、指令或数据等;处理器2010可以执行存储器2020中存储的计算机程序、指令或数据等,完成上述任一实施例的交织方法或解交织方法。Optionally, the processor 2010 is coupled to a memory, which may be located within the device, integrated with the processor, or external to the device. The device 2000 may further include at least one memory 2020. The memory 2020 stores computer programs, instructions, or data necessary to implement any of the above-described method embodiments. The processor 2010 may execute the computer programs, instructions, or data stored in the memory 2020 to perform the interleaving method or deinterleaving method of any of the above-described embodiments.

可选地,装置2000中还可以包括通信接口2030,装置2000可以通过通信接口2030和其它设备进行信息交互。示例性地,通信接口2030可以是收发器、电路、总线、模块、管脚或其它类型的接口。Optionally, the apparatus 2000 may further include a communication interface 2030, and the apparatus 2000 may exchange information with other devices via the communication interface 2030. Exemplarily, the communication interface 2030 may be a transceiver, circuit, bus, module, pin, or other type of interface.

本申请中的耦合是装置、单元或模块之间的间接耦合或通信连接,可以是电性,机械或其它的形式,用于装置、单元或模块之间的信息交互。处理器2010可能和存储器2020、通信接口2030协同操作。本申请中不限定上述处理器2010、存储器2020以及通信接口2030之间的具体连接介质。Coupling in this application refers to an indirect coupling or communication connection between devices, units, or modules, which can be electrical, mechanical, or other forms, and is used for information exchange between devices, units, or modules. The processor 2010 may operate in conjunction with the memory 2020 and the communication interface 2030. The specific connection medium between the processor 2010, memory 2020, and communication interface 2030 is not limited in this application.

如图16所示,本申请还提供一种芯片(或芯片系统)。芯片(或芯片系统)30可以包括电路31和输入/输入接口32。电路31可以为逻辑电路、集成电路等,输入/输出接口32也可以是输入/输出电路,或为接口电路,可以输入信息(或称,接收信息)和输出信息(或称,发送信息)。可选地,芯片系统可以由芯片构成,也可以包含芯片和其他分立器件。芯片30可用于执行本申请各实施例中由第一网元、第二网元、第三网元、SMF或PCF执行的方法。As shown in Figure 16, the present application also provides a chip (or chip system). The chip (or chip system) 30 may include a circuit 31 and an input/input interface 32. The circuit 31 may be a logic circuit, an integrated circuit, etc., and the input/output interface 32 may also be an input/output circuit, or an interface circuit, which can input information (or receive information) and output information (or send information). Optionally, the chip system can be composed of chips, or it can include chips and other discrete devices. The chip 30 can be used to execute the methods performed by the first network element, the second network element, the third network element, the SMF or the PCF in each embodiment of the present application.

此外,本申请还提供一种计算机可读存储介质,计算机可读存储介质中存储有计算机指令,当计算机指令在计算机上运行时,使得本申请各方法实施例中由第一网元、第二网元、第三网元、SMF或PCF执行的操作和/或处理被执行。In addition, the present application also provides a computer-readable storage medium, which stores computer instructions. When the computer instructions are executed on a computer, the operations and/or processing performed by the first network element, the second network element, the third network element, the SMF or the PCF in the various method embodiments of the present application are executed.

本申请还提供一种计算机程序产品,计算机程序产品包括计算机程序代码或指令,当计算机程序代码或指令在计算机上运行时,使得本申请各方法实施例中由第一网元、第二网元、第三网元、SMF或PCF执行的操作和/或处理被执行。The present application also provides a computer program product, which includes computer program code or instructions. When the computer program code or instructions are run on a computer, the operations and/or processing performed by the first network element, the second network element, the third network element, the SMF or the PCF in the various method embodiments of the present application are executed.

此外,本申请还提供一种芯片,芯片包括处理器。用于存储计算机程序的存储器独立于芯片而设置,处理器用于执行存储器中存储的计算机程序,以使得任意一个方法实施例中由第一网元、第二网元、第三网元、SMF或PCF执行的操作和/或处理被执行。In addition, the present application further provides a chip, comprising a processor. A memory for storing a computer program is provided independently of the chip, and the processor is configured to execute the computer program stored in the memory, so that the operations and/or processes performed by the first network element, the second network element, the third network element, the SMF, or the PCF in any one of the method embodiments are executed.

进一步地,芯片还可以包括通信接口。通信接口可以是输入/输出接口,也可以为接口电路等。进一步地,芯片还可以包括存储器。Furthermore, the chip may further include a communication interface. The communication interface may be an input/output interface, or an interface circuit, etc. Furthermore, the chip may further include a memory.

本申请提供了一种通信系统,包括上述方法实施例中的第一网元、第二网元、第三网元、SMF和PCF中的一项或多项。The present application provides a communication system, including one or more of the first network element, the second network element, the third network element, the SMF and the PCF in the above method embodiment.

在本申请中,处理器可以是通用处理器、数字信号处理器、专用集成电路、现场可编程门阵列或者其他可编程逻辑器件、分立门或者晶体管逻辑器件、分立硬件组件,可以实现或者执行本申请中的公开的各方法、步骤及逻辑框图。通用处理器可以是微处理器或者任何常规的处理器等。结合本申请所公开的方法的步骤可以直接体现为硬件处理器执行完成,或者用处理器中的硬件及软件模块组合执行完成。In this application, a processor may be a general-purpose processor, a digital signal processor, an application-specific integrated circuit, a field-programmable gate array or other programmable logic device, a discrete gate or transistor logic device, or a discrete hardware component, and may implement or execute the methods, steps, and logic block diagrams disclosed in this application. A general-purpose processor may be a microprocessor or any conventional processor. The steps of the methods disclosed in this application may be directly executed by a hardware processor, or by a combination of hardware and software modules within the processor.

存储器可以是非易失性存储器,比如硬盘或固态硬盘等,还可以是易失性存储器,例如随机存取存储器。存储器是能够用于携带或存储具有指令或数据结构形式的期望的程序代码并能够由计算机存取的任何其他介质,但不限于此。本申请中的存储器还可以是电路或者其它任意能够实现存储功能的装置,用于存储程序指令和/或数据。The memory may be a non-volatile memory, such as a hard disk or solid-state drive, or a volatile memory, such as a random access memory. A memory is any other medium that can be used to carry or store desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited thereto. The memory in this application may also be a circuit or any other device capable of performing a storage function, for storing program instructions and/or data.

本领域普通技术人员可以意识到,结合本文中所公开的实施例描述的各示例的单元及算法步骤,能够以电子硬件、或者计算机软件和电子硬件的结合来实现。这些功能究竟以硬件还是软件方式来执行,取决于技术方案的特定应用和设计约束条件。专业技术人员可以对每个特定的应用来使用不同方法来实现所描述的功能,但是这种实现不应认为超出本申请的范围。Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

所属领域的技术人员可以清楚地了解到,为描述的方便和简洁,上述描述的系统、装置和单元的具体工作过程,可以参考前述方法实施例中的对应过程,在此不再赘述。Those skilled in the art will clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

在本申请所提供的几个实施例中,应该理解到,所揭露的系统、装置和方法,可以通过其它的方式实现。例如,以上所描述的装置实施例仅仅是示意性的,例如,所述单元的划分,仅仅为一种逻辑功能划分,实际实现时可以有另外的划分方式,例如多个单元或组件可以结合或者可以集成到另一个系统,或一些特征可以忽略,或不执行。另一点,所显示或讨论的相互之间的耦合或直接耦合或通信连接可以是通过一些接口,装置或单元的间接耦合或通信连接,可以是电性,机械或其它的形式。In the several embodiments provided in this application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are merely schematic. For example, the division of the units is merely a logical function division. In actual implementation, there may be other division methods, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

所述作为分离部件说明的单元可以是或者也可以不是物理上分开的,作为单元显示的部件可以是或者也可以不是物理单元,即可以位于一个地方,或者也可以分布到多个网络单元上。可以根据实际的需要选择其中的部分或者全部单元来实现本实施例方案的目的。The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple network units. Some or all of these units may be selected to achieve the purpose of this embodiment according to actual needs.

另外,在本申请各个实施例中的各功能单元可以集成在一个处理单元中,也可以是各个单元单独物理存在,也可以两个或两个以上单元集成在一个单元中。In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

所述功能如果以软件功能单元的形式实现并作为独立的产品销售或使用时,可以存储在一个计算机可读取存储介质中。基于这样的理解,本申请的技术方案本质上或者说对现有技术做出贡献的部分或者该技术方案的部分可以以软件产品的形式体现出来,该计算机软件产品存储在一个存储介质中,包括若干指令用以使得一台计算机设备(可以是个人计算机,服务器,或者网络设备等)执行本申请各个实施例所述方法的全部或部分步骤。而前述的存储介质包括:U盘、移动硬盘、只读存储器、随机存取存储器、磁碟或者光盘等各种可以存储程序代码的介质。If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions for enabling a computer device (which can be a personal computer, server, or network device, etc.) to execute all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory, a random access memory, a magnetic disk, or an optical disk.

以上所述,仅为本申请的具体实施方式,但本申请的保护范围并不局限于此,任何熟悉本技术领域的技术人员在本申请揭露的技术范围内,可轻易想到变化或替换,都应涵盖在本申请的保护范围之内。因此,本申请的保护范围应以所述权利要求的保护范围为准。The above description is merely a specific embodiment of the present application, but the scope of protection of the present application is not limited thereto. Any changes or substitutions that can be easily conceived by a person skilled in the art within the technical scope disclosed in this application should be included in the scope of protection of this application. Therefore, the scope of protection of this application should be based on the scope of protection of the claims.

Claims (25)

一种通信方法,其特征在于,用于在第一网元执行,所述方法包括:A communication method, characterized in that it is configured to be executed in a first network element, the method comprising: 接收第一消息,所述第一消息指示对终端设备的激活用户的成功鉴权,所述第一消息包括所述激活用户的用户标识;receiving a first message indicating successful authentication of an activated user of a terminal device, the first message including a user identifier of the activated user; 根据所述第一消息,存储所述用户标识。According to the first message, the user identifier is stored. 根据权利要求1所述的方法,其特征在于,所述方法还包括:The method according to claim 1, further comprising: 发送第一请求消息,所述第一请求消息用于请求更新所述终端设备的签约信息,所述第一请求消息包括所述用户标识和所述终端设备的标识。A first request message is sent, where the first request message is used to request updating of the contract information of the terminal device, and the first request message includes the user identifier and the identifier of the terminal device. 根据权利要求2所述的方法,其特征在于,所述方法还包括:The method according to claim 2, further comprising: 接收第二消息,所述第二消息用于查询所述终端设备的签约信息;receiving a second message, where the second message is used to query the contract information of the terminal device; 发送第三消息,所述第三消息包括与所述用户标识关联的签约信息。A third message is sent, where the third message includes the contract information associated with the user identifier. 根据权利要求3所述的方法,其特征在于,所述第三消息包括所述用户标识。The method according to claim 3, characterized in that the third message includes the user identification. 根据权利要求2至4中任一项所述的方法,其特征在于,所述第一网元包括统一数据管理网元。The method according to any one of claims 2 to 4, characterized in that the first network element comprises a unified data management network element. 根据权利要求1所述的方法,其特征在于,所述方法还包括:The method according to claim 1, further comprising: 接收第二请求消息,所述第二请求消息用于请求为所述终端设备建立协议数据单元PDU会话,所述第二请求消息包括所述终端设备的标识;receiving a second request message, where the second request message is used to request establishment of a protocol data unit (PDU) session for the terminal device, and the second request message includes an identifier of the terminal device; 根据所述终端设备的标识,确定所述用户标识;Determining the user identification according to the identification of the terminal device; 发送第三请求消息,所述第三请求消息用于请求为所述PDU会话创建会话管理上下文,所述第三请求消息包括所述PDU会话的标识、所述终端设备的标识和所述用户标识。Send a third request message, where the third request message is used to request creation of a session management context for the PDU session, and the third request message includes an identifier of the PDU session, an identifier of the terminal device, and the user identifier. 根据权利要求6所述的方法,其特征在于,所述第一网元包括移动性管理功能网元。The method according to claim 6 is characterized in that the first network element includes a mobility management function network element. 根据权利要求1至7中任一项所述的方法,其特征在于,所述第一网元存储有所述终端设备的上下文或所述终端设备的签约信息,所述根据所述第一消息存储所述用户标识,包括:The method according to any one of claims 1 to 7, wherein the first network element stores the context of the terminal device or the subscription information of the terminal device, and the storing the user identifier according to the first message comprises: 根据所述第一消息,将所述用户标识存储于所述终端设备的上下文或所述终端设备的签约信息。According to the first message, the user identifier is stored in the context of the terminal device or the contract information of the terminal device. 一种通信方法,其特征在于,用于在第二网元执行,所述方法包括:A communication method, characterized in that it is configured to be executed in a second network element, the method comprising: 在对终端设备的激活用户的鉴权成功时,发送第一消息,所述第一消息指示对终端设备的激活用户的成功鉴权,所述第一消息包括所述激活用户的用户标识。When the authentication of the activated user of the terminal device is successful, a first message is sent, where the first message indicates the successful authentication of the activated user of the terminal device and includes a user identifier of the activated user. 一种通信方法,其特征在于,用于在第三网元执行,所述方法包括:A communication method, characterized in that it is configured to be executed in a third network element, the method comprising: 接收第一请求信息,所述第一请求消息用于请求更新终端设备的签约信息,所述第一请求消息包括所述终端设备的激活用户的用户标识和所述终端设备的标识;Receive a first request message, where the first request message is used to request updating the contract information of the terminal device, and the first request message includes a user identifier of an activated user of the terminal device and an identifier of the terminal device; 根据所述第一请求信息,更新所述第三网元存储的所述终端设备的签约信息。According to the first request information, the contract information of the terminal device stored in the third network element is updated. 根据权利要求10所述的方法,其特征在于,所述方法还包括:The method according to claim 10, further comprising: 发送第四消息,所述第四消息用于指示所述终端设备的签约信息完成更新。A fourth message is sent, where the fourth message is used to indicate that the contract information of the terminal device has been updated. 根据权利要求10或11所述的方法,其特征在于,所述签约信息包括会话管理控制策略信息,所述方法还包括:The method according to claim 10 or 11, wherein the contract information includes session management control policy information, and the method further comprises: 接收第四请求消息,所述第四请求信息用于请求与所述终端设备关联的所述会话管理控制策略信息,所述第四请求信息包括所述终端设备的标识;receiving a fourth request message, where the fourth request message is used to request the session management control policy information associated with the terminal device, and the fourth request message includes an identifier of the terminal device; 根据所述终端设备的标识,确定所述用户标识;Determining the user identification according to the identification of the terminal device; 发送第五消息,所述第五消息包括与所述用户标识关联的所述会话管理控制策略信息。A fifth message is sent, where the fifth message includes the session management control policy information associated with the user identifier. 根据权利要求10或11所述的方法,其特征在于,所述签约信息包括会话管理控制策略信息,所述方法还包括:The method according to claim 10 or 11, wherein the contract information includes session management control policy information, and the method further comprises: 接收第五请求消息,所述第五请求消息用于请求与所述用户标识关联的所述会话管理控制策略信息,所述第五请求信息包括所述用户标识;receiving a fifth request message, the fifth request message being used to request the session management control policy information associated with the user identifier, the fifth request message including the user identifier; 发送第六消息,所述第六消息包括与所述用户标识关联的所述会话管理控制策略信息。A sixth message is sent, where the sixth message includes the session management control policy information associated with the user identifier. 一种通信方法,其特征在于,用于在会话管理功能网元执行,所述方法包括:A communication method, characterized in that it is configured to be executed in a session management function network element, the method comprising: 发送第二消息,所述第二消息用于查询终端设备的签约信息,所述第二消息包括所述终端设备的标识;Sending a second message, where the second message is used to query the contract information of the terminal device, and the second message includes an identifier of the terminal device; 接收第三消息,所述第三消息包括与所述终端设备的激活用户的用户标识关联的签约信息,所述用户标识是根据所述终端设备的标识确定的。A third message is received, where the third message includes contract information associated with a user identifier of an activated user of the terminal device, where the user identifier is determined based on an identifier of the terminal device. 根据权利要求14所述的方法,其特征在于,所述第三消息还包括所述用户标识。The method according to claim 14, characterized in that the third message also includes the user identification. 根据权利要求14或15所述的方法,其特征在于,所述方法还包括:The method according to claim 14 or 15, characterized in that the method further comprises: 发送第六请求消息,所述第六请求消息用于请求为所述终端设备的PDU会话更新会话管理控制策略信息,所述第六请求信息包括所述终端设备的标识和所述PDU会话的标识;Sending a sixth request message, where the sixth request message is used to request updating session management control policy information for the PDU session of the terminal device, the sixth request message including an identifier of the terminal device and an identifier of the PDU session; 接收第七消息,所述第七消息包括与所述用户标识关联的会话管理控制策略信息。A seventh message is received, where the seventh message includes session management control policy information associated with the user identifier. 根据权利要求16所述的方法,其特征在于,所述第六请求信息还包括所述用户标识。The method according to claim 16, characterized in that the sixth request information also includes the user identifier. 根据权利要求14至17中任一项所述的方法,其特征在于,所述方法还包括:The method according to any one of claims 14 to 17, further comprising: 根据与所述用户标识关联的签约信息,确定是否进行二次鉴权。Determine whether to perform secondary authentication based on the contract information associated with the user identifier. 一种通信方法,其特征在于,用于在策略控制功能网元执行,所述方法包括:A communication method, characterized in that it is used to be executed in a policy control function network element, the method comprising: 发送第四请求消息,所述第四请求信息用于请求与终端设备关联的会话管理控制策略信息,所述第四请求信息包括所述终端设备的标识;Sending a fourth request message, where the fourth request message is used to request session management control policy information associated with the terminal device, and the fourth request message includes an identifier of the terminal device; 接收第五消息,所述第五消息包括与所述终端设备的激活用户的用户标识关联的会话管理控制策略信息。A fifth message is received, where the fifth message includes session management control policy information associated with a user identifier of an activated user of the terminal device. 一种通信装置,其特征在于,包括用于执行如权利要求1至19中任一项所述的方法的模块或单元。A communication device, characterized by comprising a module or unit for executing the method according to any one of claims 1 to 19. 一种通信装置,其特征在于,包括至少一个处理器,所述至少一个处理器与至少一个存储器耦合,所述至少一个处理器用于执行所述至少一个存储器中存储的计算机程序或指令,以使所述装置执行如权利要求1至19中任一项所述方法。A communication device, characterized in that it includes at least one processor, the at least one processor is coupled to at least one memory, and the at least one processor is used to execute a computer program or instruction stored in the at least one memory so that the device performs the method according to any one of claims 1 to 19. 一种芯片,其特征在于,包括电路和通信接口,所述通信接口用于接收来自其他装置的信息并输入所述电路,和/或所述通信接口用于将所述电路中的信息发送至其他装置,所述电路用于执行如权利要求1至19中任一项所述方法。A chip, characterized in that it includes a circuit and a communication interface, wherein the communication interface is used to receive information from other devices and input it into the circuit, and/or the communication interface is used to send information in the circuit to other devices, and the circuit is used to execute the method as described in any one of claims 1 to 19. 一种通信系统,其特征在于,包括第一网元、第二网元、第三网元、会话管理功能网元和策略控制功能网元中的一项至多项;A communication system, characterized by comprising one or more of a first network element, a second network element, a third network element, a session management function network element, and a policy control function network element; 其中,所述第一网元用于执行如权利要求1至8中任一项所述的方法;The first network element is configured to perform the method according to any one of claims 1 to 8; 所述第二网元用于执行如权利要求9所述的方法;The second network element is configured to perform the method according to claim 9; 所述第三网元用于执行如权利要求10至13中任一项所述的方法;The third network element is configured to perform the method according to any one of claims 10 to 13; 所述会话管理功能网元用于执行如权利要求14至18中任一项所述的方法;The session management function network element is used to perform the method according to any one of claims 14 to 18; 所述策略控制功能网元用于执行如权利要求19所述的方法。The policy control function network element is used to execute the method according to claim 19. 一种计算机可读存储介质,其特征在于,其上存储有指令或程序代码,所述指令或程序代码被处理器执行时,以使得处理器实现如权利要求1至19中任一项所述的方法。A computer-readable storage medium, characterized in that instructions or program codes are stored thereon, and when the instructions or program codes are executed by a processor, the processor implements the method according to any one of claims 1 to 19. 一种计算机程序产品,其特征在于,所述计算机程序产品包括:计算机程序代码,当所述计算机程序代码被运行时,实现如权利要求1至19中任一项所述的方法。A computer program product, characterized in that the computer program product comprises: computer program code, and when the computer program code is executed, it implements the method according to any one of claims 1 to 19.
PCT/CN2025/075947 2024-02-08 2025-02-06 Communication method and apparatus Pending WO2025167965A1 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN202410179371.4 2024-02-08
CN202410179371.4A CN120456183A (en) 2024-02-08 2024-02-08 Communication method and device

Publications (1)

Publication Number Publication Date
WO2025167965A1 true WO2025167965A1 (en) 2025-08-14

Family

ID=96606453

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2025/075947 Pending WO2025167965A1 (en) 2024-02-08 2025-02-06 Communication method and apparatus

Country Status (2)

Country Link
CN (1) CN120456183A (en)
WO (1) WO2025167965A1 (en)

Also Published As

Publication number Publication date
CN120456183A (en) 2025-08-08

Similar Documents

Publication Publication Date Title
CN112105061B (en) Method, device and system for managing background data transmission strategy
EP3955538B1 (en) Communication method and communication device
WO2020029938A1 (en) Secure conversation method and device
CN113938911B (en) A communication method, device and system
EP3833150A1 (en) User plane security policy implementation method, apparatus, and system
CN113055879B (en) User identification access method and communication device
WO2022088029A1 (en) Key acquisition method and communication apparatus
CN113498217A (en) Communication method and communication device
CN111491394B (en) Method and device for user plane security protection
CN115835218A (en) Method and apparatus for secondary certification
CN113573297B (en) A communication method and device
CN115299168B (en) Method and apparatus for switching
WO2019161939A1 (en) Methods, devices, and computer programs for provisioning or controlling operator profiles in terminals
CN111866870B (en) Key management method and device
CN108243631B (en) A method and device for accessing a network
CN110351722B (en) Information sending method, key generation method and device
CN115707062A (en) Network slice admission control method and device
CN114915960A (en) Method, apparatus, device and readable storage medium for supporting information acquisition
CN112492592A (en) An authorization method in multiple NRF scenarios
WO2024067619A1 (en) Communication method and communication apparatus
WO2025167965A1 (en) Communication method and apparatus
CN116437332A (en) A contract management method and related device
CN116458109B (en) Key acquisition method and communication device
WO2025171639A1 (en) Method, device and system for akma roaming control in communication networks
WO2025145922A1 (en) Communication method and communication apparatus

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 25751564

Country of ref document: EP

Kind code of ref document: A1