Method, device and system for pNF to authenticate cNF through NRF in 5G core network

Abstract

The invention discloses a method, device and system for a pNF to authenticate a cNF through an NRF in a 5G core network, the device and system are used for implementing the method, the method is thatthe cNF is registered in a cNRF network, the pNF is registered in a pNRF network, and the method comprises the following steps: when the cNF sends a request for obtaining the pNF service to the pNF, the pNF requests the pNRF to inquire the cNF data; if the pNRF cannot inquire the cNF data, intermediate forwarding and / or intermediate redirection forwarding is carried out on the pNRF discovery request to find the cNRF registered by the cNF; and the pNF judges whether to allow the cNF to access the service of the pNF according to the feedback condition of the pNRF discovery request. According tothe invention, the identity of the cNF is verified through the information among the cNF, the pNF, the cNRF and the pNRF, and the security of mutual service access between network functions NFs in a 5G core network is enhanced.

Description

technical field [0001] The present invention relates to the field of mobile communication technologies, and in particular to a method, device and system for pNF in a 5G core network to authenticate cNF through NRF. Background technique [0002] According to the 5G security architecture and process protocol TS 3GPP 33501-g30, there are a large number of network function NFs (NF, Network Function) in the 5G core network. ), a large number of NFs use the http2 protocol for communication, and use TLS as the data transport layer encryption protocol (the TLS protocol only performs TLS negotiation verification on the cNF at the transport layer, and does not verify the cNF identity and configuration data at the application layer). Therefore, the service consumer cNF (cNF, consumer Network Function, NF for accessing and invoking services is the NF service user) connects to the service provider pNF (pNF, provider Network Function, the NF for providing services is the NF service provid...

AI Technical Summary

Problems solved by technology

But in this way, it is difficult to avoid the potential safety hazard that the cNF disguised by an illegal program obtains the services provided by the pNF by illegal means

[0003] In the prior art, static configuration parameters such as the IP address that restricts cNF access are also configured on the pNF, but there are too few parameters that can be verified, and the cNF is not verified at the application layer, so the security is still not high

Images