A verification method, device, communication equipment and computer storage medium

Abstract

The embodiment of the present invention discloses a verification method, device, communication equipment and computer storage medium. The method comprises: a core network device sends a UE routing selection policy (URSP) to the terminal, wherein the URSP includes verification information.

Description

Technical Field

[0001] The present invention relates to the field of wireless communication technology, and in particular to a verification method, device, communication equipment and computer storage medium. Background Art

[0002] The UE Route Selection Policy (URSP) enables the terminal to select routes based on the rules issued by the network. In the 5G system, the URSP is generated during the slice subscription and activation process, and acts on the terminal in the slice service process to assist the terminal in placing the correct service on the appropriate slice.

[0003] At present, during the terminal activation process, the network side is requested to send URSP. If the information carried in the terminal activation request is false information, the network side cannot identify the false information and still sends URSP, then the terminal may obtain policies beyond its authority, which may lead to fraud risks. Summary of the invention

[0004] To solve the existing technical problems, the embodiments of the present invention provide a verification method, an apparatus, a communication device and a computer storage medium.

[0005] To achieve the above object, the technical solution of the embodiment of the present invention is implemented as follows:

[0006] In a first aspect, an embodiment of the present invention provides a verification method, the method comprising:

[0007] The core network device sends a URSP to the terminal, where the URSP includes verification information.

[0008] In the above solution, the verification information is generated based on the relevant information of the terminal.

[0009] In the above solution, the core network device includes a policy control function (PCF, Policy Control Function);

[0010] The core network device sends a UE routing policy URSP to the terminal, including:

[0011] The PCF receives a first request sent by an access and mobility management function (AMF), where the first request is used to request to obtain a URSP; the first request includes relevant information of the terminal;

[0012] The PCF generates verification information based on the relevant information of the terminal and a preset algorithm, and sends the URSP carrying the verification information to the terminal through the AMF.

[0013] In the above solution, the URSP carrying the verification information is transmitted to the terminal via non-access stratum (NAS) signaling.

[0014] In the above scheme, sending the URSP carrying the verification information to the terminal through the AMF includes: the PCF adds the verification information to the extension field of the URSP, and sends the URSP carrying the verification information to the terminal through the AMF.

[0015] In the above scheme, the PCF adds the verification information to the extension field of the URSP, including: the PCF adds the verification information and the application identifier to the extension field of the URSP, or adds the verification information, the application identifier and the operating system (OS) identifier to the extension field of the URSP.

[0016] In the above scheme, the method also includes: the core network device receives a first message from the terminal; wherein, the first message is a registration completion message, and the registration completion message is sent after the terminal verifies the verification information; or, the first message is a registration failure message, and the registration failure message is sent after the terminal fails to verify the verification information, and the registration failure message carries a reason value.

[0017] In a second aspect, an embodiment of the present invention further provides a verification method, the method comprising:

[0018] The terminal receives a URSP from a core network device, wherein the URSP includes verification information;

[0019] The terminal verifies the verification information to obtain a verification result.

[0020] In the above solution, the verification information is generated based on the relevant information of the terminal.

[0021] In the above solution, the core network equipment includes PCF;

[0022] The receiving of a UE routing policy URSP from a core network device includes:

[0023] The terminal receives the URSP sent by the PCF through the AMF, and the extension field of the URSP carries the verification information.

[0024] In the above scheme, the terminal receives the URSP carrying the verification information transmitted by the AMF through NAS signaling.

[0025] In the above solution, the extension field of the URSP carries the verification information and the application identifier, or the extension field of the URSP carries the verification information, the application identifier and the OS identifier.

[0026] In the above solution, the verification information is a verification value; the terminal verifies the verification information to obtain a verification result, including:

[0027] The terminal parses the check value according to a preset algorithm to obtain first information;

[0028] The terminal compares the information with the relevant information of the terminal, and obtains a verification result indicating that the verification has passed if the comparison is consistent; and obtains a verification result indicating that the verification has failed if the comparison is inconsistent.

[0029] In the above solution, the verification information is signature information; the terminal verifies the verification information to obtain a verification result, including:

[0030] The terminal sends the signature information to a network device, and the network device is used to verify the signature information;

[0031] The terminal receives the verification result sent by the network device.

[0032] In the above scheme, the method also includes: the terminal sends a first message to the core network device; wherein, the first message is a registration completion message, and the registration completion message is sent after the terminal verifies the verification information; or, the first message is a registration failure message, and the registration failure message is sent after the terminal fails to verify the verification information, and the registration failure message carries a reason value.

[0033] In the above scheme, the method further includes: when the verification result indicates a verification failure, the terminal initiates a service using a default protocol data unit (PDU) session, or initiates a service according to a default URSP in the URSP.

[0034] In a third aspect, an embodiment of the present invention further provides a verification device, the device comprising: a first sending unit, configured to send a URSP to the terminal, the URSP comprising verification information.

[0035] In the above solution, the verification information is generated based on the relevant information of the terminal.

[0036] In the above scheme, the verification device is applied to the PCF;

[0037] The device further includes a first receiving unit and a first processing unit; wherein,

[0038] The first receiving unit is configured to receive a first request sent by the AMF, where the first request is used to request to obtain the URSP; the first request includes relevant information of the terminal;

[0039] The first processing unit is used to generate verification information based on the relevant information of the terminal and a preset algorithm;

[0040] The first sending unit is used to send the URSP carrying the verification information to the terminal through the AMF.

[0041] In the above solution, the URSP carrying the verification information is transmitted to the terminal via NAS signaling.

[0042] In the above solution, the first processing unit is used to add the verification information to the extension field of the URSP.

[0043] In the above solution, the first processing unit is used to add the verification information and the application identifier to the extension field of the URSP, or add the verification information, the application identifier and the OS identifier to the extension field of the URSP.

[0044] In the above scheme, the device also includes a second receiving unit, which is used to receive a first message from the terminal; wherein the first message is a registration completion message, and the registration completion message is sent after the terminal verifies the verification information; or, the first message is a registration failure message, and the registration failure message is sent after the terminal fails to verify the verification information, and the registration failure message carries a reason value.

[0045] In a fourth aspect, an embodiment of the present invention further provides a verification device, the device comprising a third receiving unit and a second processing unit; wherein,

[0046] The third receiving unit is configured to receive a URSP from a core network device, wherein the URSP includes verification information;

[0047] The second processing unit is used to verify the verification information to obtain a verification result.

[0048] In the above solution, the verification information is generated based on the relevant information of the terminal.

[0049] In the above solution, the core network equipment includes PCF;

[0050] The third receiving unit is used to receive the URSP sent by the PCF through the AMF, and the extension field of the URSP carries the verification information.

[0051] In the above scheme, the third receiving unit is used to receive the URSP carrying the verification information transmitted by the AMF through NAS signaling.

[0052] In the above solution, the extension field of the URSP carries the verification information and the application identifier, or the extension field of the URSP carries the verification information, the application identifier and the OS identifier.

[0053] In the above solution, the verification information is a verification value;

[0054] The second processing unit is used to parse the verification value according to a preset algorithm to obtain the first information; compare the information with the relevant information of the terminal, and when the comparison is consistent, obtain a verification result indicating that the verification has passed; when the comparison is inconsistent, obtain a verification result indicating that the verification has failed.

[0055] In the above scheme, the verification information is signature information;

[0056] The device also includes a second sending unit;

[0057] The second processing unit is used to send the signature information to the network device through the second sending unit, and the network device is used to verify the signature information; and receive the verification result sent by the network device through the third receiving unit.

[0058] In the above scheme, the device also includes a third sending unit, which is used to send a first message to the core network device; wherein, the first message is a registration completion message, and the registration completion message is sent after the terminal verifies the verification information; or, the first message is a registration failure message, and the registration failure message is sent after the terminal fails to verify the verification information, and the registration failure message carries a reason value.

[0059] In the above solution, the second processing unit is further configured to initiate a service using a default PDU session, or initiate a service according to a default URSP in the URSP, when the verification result indicates a verification failure.

[0060] In a fourth aspect, an embodiment of the present invention further provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the method described in the first aspect of the embodiment of the present invention; or, when executed by a processor, implements the steps of the method described in the second aspect of the embodiment of the present invention.

[0061] In a fifth aspect, an embodiment of the present invention further provides a communication device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the steps of the method described in the first aspect of the embodiment of the present invention are implemented; or, when the processor executes the program, the steps of the method described in the second aspect of the embodiment of the present invention are implemented.

[0062] The verification method, device, communication device and computer storage medium provided by the embodiment of the present invention include: the core network device sends a URSP to the terminal, and the URSP includes verification information; the terminal verifies the verification information to obtain a verification result. In this way, the embodiment of the present invention verifies the authenticity of the terminal using the verification information carried in the URSP sent by the core network device, and the terminal verifies the verification information, which effectively avoids the terminal providing false information to obtain a URSP beyond the authority, thereby reducing the risk of fraud. BRIEF DESCRIPTION OF THE DRAWINGS

[0063] Figure 1 The process diagram of the verification method of the embodiment of the present invention is as follows Figure 1 ;

[0064] Figure 2 The process diagram of the verification method of the embodiment of the present invention is as follows Figure 2 ;

[0065] Figure 3 A schematic diagram of an interactive process of a verification method according to an embodiment of the present invention;

[0066] Figure 4 The structure diagram of the verification device according to the embodiment of the present invention is shown in FIG. Figure 1 ;

[0067] Figure 5 The structure diagram of the verification device according to the embodiment of the present invention is shown in FIG. Figure 2 ;

[0068] Figure 6 The structure diagram of the verification device according to the embodiment of the present invention is shown in FIG. Figure 3 ;

[0069] Figure 7 The structure diagram of the verification device according to the embodiment of the present invention is shown in FIG. Figure 4 ;

[0070] Figure 8 The structure diagram of the verification device according to the embodiment of the present invention is shown in FIG. Figure 5 ;

[0071] Fig. 9 The figure is a schematic diagram of the hardware structure of the communication device according to the embodiment of the present invention. DETAILED DESCRIPTION

[0072] The present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments.

[0073] An embodiment of the present invention provides a verification method. Figure 1 The process diagram of the verification method of the embodiment of the present invention is as follows Figure 1 ;like Figure 1 As shown, the method includes:

[0074] Step 101: The core network device sends a URSP to the terminal, where the URSP includes verification information.

[0075] In some optional embodiments, the verification information is generated based on relevant information of the terminal.

[0076] In some optional embodiments, the core network device includes a PCF; the core network device sends a URSP to the terminal, including: the PCF receives a first request sent by an AMF, the first request is used to request to obtain the URSP; the first request includes relevant information of the terminal; the PCF generates verification information based on the relevant information of the terminal and a preset algorithm, and sends the URSP carrying the verification information to the terminal through the AMF.

[0077] In this embodiment, during the process of the terminal initiating a registration process to the network, for example, the terminal initiates the registration process, sends a registration request (Registration Request) message to the network, and the core network device of the network performs information exchange. Among them, after AMF obtains the user subscription information from UDM, a user equipment policy (UE Policy) connection is established between AMF and PCF, and PCF can send URSP to AMF through this connection, and AMF then sends URSP to the terminal. In this embodiment, PCF generates verification information based on the relevant information of the terminal, and the verification information is carried in URSP. Exemplarily, the relevant information of the terminal includes at least one of the following: user subscription information, terminal type information, policy configuration information, etc. Among them, the user subscription information is subscription information related to a generic public user identifier (GPSI, Generic Public Subscription Identifier) ​​and / or a user permanent identifier (SUPI, Subscription Permanent Identifier), and the above user subscription information is stored in a unified data repository (UDR, Unified Data Repository). Exemplarily, the type information of the terminal can be represented by a permanent equipment identifier (PEI, Permanent Equipment Identifier).

[0078] In this way, the verification information of this embodiment is generated based on the relevant information of the above-mentioned terminal, and is carried in the URSP and transmitted to the terminal. The terminal verifies the verification information, which effectively prevents the terminal from providing false information to obtain URSP beyond its authority, thereby reducing the risk of fraud.

[0079] In some optional embodiments, the verification information is a check value. The AMF initiates a UE Policy Association establishment process to the PCF, and the message sent may carry relevant information of the terminal; the PCF generates a check value based on the relevant information of the terminal and a preset algorithm, and writes the check value into the URSP.

[0080] In some other optional embodiments, the verification information is signature information. The AMF initiates a UE Policy Association establishment process to the PCF, and the message sent may carry relevant information of the terminal; the PCF generates signature information based on the relevant information of the terminal and a preset algorithm, and writes the signature information into the URSP.

[0081] In some optional embodiments of the present invention, sending the URSP carrying the verification information to the terminal through the AMF includes: the PCF adds the verification information to an extension field of the URSP, and sending the URSP carrying the verification information to the terminal through the AMF.

[0082] Exemplarily, if the verification information is a verification value, the PCF adds a verification value field in the URSP. The definition of the verification value field (extended field) is shown in Table 1, and the verification value generated by the PCF is filled into the field.

[0083] Table 1

[0084]

[0085] In some optional embodiments, the PCF adds the verification information to an extension field of the URSP, including: the PCF adds the verification information and an application identifier to the extension field of the URSP, or adds the verification information, the application identifier and the operating system (OS) identifier to the extension field of the URSP.

[0086] In some optional embodiments of the present invention, the URSP carrying the verification information is transmitted to the terminal via NAS signaling.

[0087] In this embodiment, the PCF sends the URSP carrying the verification information to the AMF, which is sent to the terminal through the access network device. The AMF may transmit the URSP carrying the verification information to the terminal through NAS signaling.

[0088] In some optional embodiments of the present invention, the method also includes: the core network device receives a first message from the terminal; wherein, the first message is a registration completion message, and the registration completion message is sent after the terminal verifies the verification information; or, the first message is a registration failure message, and the registration failure message is sent after the terminal fails to verify the verification information, and the registration failure message carries a reason value.

[0089] In this embodiment, if the verification result obtained by the terminal is a verification pass, the terminal can send a registration complete (Registration Complete) message to the PCF through the access network device and AMF in sequence; if the verification result obtained by the terminal is a verification failure, the registration process ends or is interrupted, indicating that the registration fails. Optionally, the terminal can send a registration failure message or a verification failure message to the PCF through the access network device and AMF in sequence; wherein the registration failure message or the verification failure message can carry a reason value, and the reason value indicates that the terminal fails to verify the verification information. Correspondingly, the PCF can receive a registration complete message or a registration failure message (or a parsing failure message) from the terminal.

[0090] In some optional embodiments, if the PCF receives a registration failure message (or a resolution failure message), the PCF decides whether to change the URSP.

[0091] Based on the above embodiments, the embodiments of the present invention further provide a verification method. Figure 2 The process diagram of the verification method of the embodiment of the present invention is as follows Figure 2 ;like Figure 2 As shown, the method includes:

[0092] Step 201: The terminal receives a URSP from a core network device, wherein the URSP includes verification information;

[0093] Step 202: The terminal verifies the verification information to obtain a verification result.

[0094] In some optional embodiments, the verification information is generated based on relevant information of the terminal.

[0095] In some optional embodiments of the present invention, the core network device includes a PCF; the receiving of the URSP from the core network device includes: the terminal receives the URSP sent by the PCF through an AMF, and an extension field of the URSP carries the verification information.

[0096] In this embodiment, during the process of the terminal initiating a registration process to the network, for example, the terminal sends a registration request (Registration Request) message to the network, and the core network equipment of the network performs information exchange. Among them, after AMF obtains the user contract information from UDM, a user equipment policy (UE Policy) connection is established between AMF and PCF. PCF can send URSP to AMF through this connection, and AMF then sends URSP to the terminal. In this embodiment, PCF generates verification information, and the verification information is carried in URSP.

[0097] In some optional embodiments, the verification information is a verification value; the terminal verifies the verification information to obtain a verification result, including: the terminal parses the verification value according to a preset algorithm to obtain first information; the terminal compares the information with relevant information of the terminal, and when the comparison is consistent, obtains a verification result indicating that the verification has passed; when the comparison is inconsistent, obtains a verification result indicating that the verification has failed.

[0098] In this embodiment, the verification information is a verification value, and the PCF generates a verification value according to the relevant information of the terminal and a preset algorithm, writes the verification value into the URSP, and sends the URSP carrying the verification value to the terminal; the terminal obtains the verification value, parses the verification value according to the preset algorithm, and obtains the first information; if the terminal compares the first information and the relevant information of the terminal and they are consistent, it is determined that the verification is passed; otherwise, if the terminal compares the first information and the relevant information of the terminal and they are inconsistent, it is determined that the verification is failed.

[0099] Exemplarily, the terminal is pre-configured with an algorithm that matches the PCF, and the algorithm in the PCF is used to perform encryption according to relevant information of the terminal; the algorithm in the terminal is used to decrypt the check value.

[0100] In other optional embodiments, the verification information is signature information; the terminal verifies the verification information to obtain a verification result, including: the terminal sends the signature information to a network device, and the network device is used to verify the signature information; the terminal receives the verification result sent by the network device.

[0101] In this embodiment, the network device may be a third-party verification device or a trusted verification device. After the terminal obtains the signature information, it sends the signature information to the network device, and the network device verifies the signature information; the terminal obtains the verification result of the signature information sent by the network device. Exemplarily, the PCF and the network device are pre-configured with an image matching algorithm, and the algorithm in the PCF is used to generate signature information based on the relevant information of the terminal; the algorithm in the network device is used to decrypt the signature information.

[0102] Exemplarily, the terminal related information includes at least one of the following: user contract information, terminal type information, policy configuration information, etc. Wherein, the user contract information is contract information related to GPSI and / or SUPI, and the user contract information is stored in UDR. Exemplarily, the terminal type information can be represented by PEI.

[0103] In this way, the verification information of this embodiment is generated by the PCF based on the relevant information of the above-mentioned terminal, and is carried in the URSP and transmitted to the terminal. The terminal verifies the verification information, which effectively prevents the terminal from providing false information to obtain URSP beyond its authority, thereby reducing the risk of fraud.

[0104] In some optional embodiments of the present invention, the extension field of the URSP carries the verification information and the application identifier, or the extension field of the URSP carries the verification information, the application identifier and the OS identifier.

[0105] In some optional embodiments of the present invention, the terminal receives the URSP carrying the verification information transmitted by the AMF through NAS signaling.

[0106] In this embodiment, the PCF sends the URSP carrying the verification information to the AMF, which is sent to the terminal through the access network device. The AMF may transmit the URSP carrying the verification information to the terminal through NAS signaling, that is, the terminal receives the URSP carrying the verification information transmitted by the AMF through NAS signaling.

[0107] In some optional embodiments of the present invention, the method also includes: the terminal sends a first message to the core network device; wherein, the first message is a registration completion message, and the registration completion message is sent after the terminal verifies the verification information; or, the first message is a registration failure message, and the registration failure message is sent after the terminal fails to verify the verification information, and the registration failure message carries a reason value.

[0108] In this embodiment, if the verification result obtained by the terminal is a passed verification, the terminal may send a registration complete (Registration Complete) message to the PCF through the access network device and AMF in sequence; if the verification result obtained by the terminal is a failed verification, the registration process ends or is interrupted, indicating that the registration fails. Optionally, the terminal may send a registration failure message or a verification failure message to the PCF through the access network device and AMF in sequence; wherein the registration failure message or the verification failure message may carry a reason value, and the reason value indicates that the terminal fails to verify the verification information.

[0109] In some optional embodiments of the present invention, the method further includes: when the verification result indicates a verification failure, the terminal initiates a service using a default PDU session, or initiates a service according to a default URSP in the URSP.

[0110] In this embodiment, if the verification result obtained by the terminal is that the verification fails, the terminal initiates the service using the default PDU session, or initiates the service according to the default URSP in the URSP.

[0111] The embodiment of the present invention uses the verification information carried in the URSP sent by the core network device to verify the authenticity of the terminal. Since the core network device generates the verification information using the relevant information provided by the terminal and carries the verification information in the URSP, the terminal verifies the verification information, which effectively avoids the terminal providing false information to obtain the URSP beyond the authorization, thereby reducing the risk of fraud.

[0112] The verification method of the embodiment of the present invention is described below with reference to a specific example.

[0113] Figure 3 FIG. 1 is a schematic diagram of an interactive process of a verification method according to an embodiment of the present invention; Figure 3 As shown, the method may include:

[0114] Step 1: The UE initiates a registration request. The registration request may be used for initial registration, periodic registration, or mobile update registration. The parameters carried in the registration request may vary in different registration types and scenarios.

[0115] Step 2: The access network selects a suitable AMF based on the parameters carried by the UE.

[0116] The access network device may be a radio access network (RAN) or an access network (AN), which is abbreviated as (R)AN in the figure. Exemplarily, the access network device may be a gNB.

[0117] Step 3: The access network sends a Registration Request to the new AMF via the N2 message.

[0118] Step 4-Step 5: The new AMF obtains the UE context information from the old AMF. That is, the new AMF sends a Namf_Communication_UEContextTransfer message to the old AMF, and the old AMF sends a Namf_Communication_UEContextTransfer response message to the new AMF.

[0119] Step 6-Step 7: The new AMF obtains ID information from the UE. That is, the new AMF sends an ID request (IdentityRequest) to the UE, and the UE sends an ID response (IdentityResponse) to the new AMF.

[0120] Step 8: The new AMF selects the Authentication Server Function (AUSF).

[0121] Step 9: Authentication process between UE and core network.

[0122] Step 10: The new AMF notifies the old AMF of the registration result of the UE. That is, the new AMF sends a registration result notification (Namf_Communication_Registration CompleteNotity) message to the old AMF.

[0123] Step 11: The new AMF exchanges messages with the UE. The new AMF sends an ID request (Identity Request) to the UE, and the UE sends an ID response (Identity Response) to the new AMF.

[0124] Step 12: The new AMF requests the Equipment Identity Register (EIR) to check the legitimacy of the equipment identity, that is, the new AMF sends an equipment identity check (N5g-eir_Equipment IdentityCheck_Get) message to the EIR.

[0125] Step 13: Select UDM for the new AMF.

[0126] Step 14a-Step 14c: The new AMF registers the UE to the UDM, that is, the new AMF initiates registration (Nudm_UECM_Registration) to the UDM; the new AMF obtains the UE's access and mobile subscription data, SMF selection subscription data, UE's context information in the SMF, etc. from the UDM, that is, the new AMF and UDM interact to obtain messages (Nudm_SDM_GET); the new AMF sends a subscription (Nudm_SDM_Subscribe) message to the UDM.

[0127] Step 14d: UDM sends a deregistration (Nudm_UECM_DeregistrationNotify) message to the old AMF, and the old AMF deletes the UE context and other information.

[0128] Step 14e: The old AMF sends a Nudm_SDM_Unsubscribe message to the UDM.

[0129] Step 15: The new AMF selects the PCF.

[0130] Step 16: The new AMF does not have valid access and mobility policy information of the UE yet, so the new AMF interacts with the PCF to obtain the access and mobility policy information of the UE from the PCF. The message of the interaction is the AMPolicy Association Establishment during Registration message.

[0131] Step 17: The new AMF and SMF exchange messages for PDU session update. The exchanged messages are PDU session update or PDU session release (Nsmf_PDUSession_UpdateSMContext / Nsmf_PDUSession_ReleaseSMContext) messages.

[0132] Step 18-Step 19: The new AMF sends a UE context modification request (UE_Context Modification Request) message to the non-3GPP interworking function (N3IWF, Non-3GPP InterWorkingFunction), and the N3IWF sends a UE context modification response (UE_Context Modification Response) message to the new AMF.

[0133] Step 19a-Step 19c: The new AMF initiates a registration (Nudm_UECM_Registration) to the UDM; the UDM sends a deregistration (Nudm_UECM_Deregistration) message to the old AMF, and the old AMF sends a cancellation (Nudm_SDM_Unsubscribe) message to the UDM.

[0134] Step 21: The new AMF sends a Registration Accept message to the UE.

[0135] Step 21b: The UE Policy Association Establishment process is performed between the new AMF and the PCF.

[0136] Specifically, the new AMF initiates a UE Policy Association establishment request to the PCF, which carries relevant information of the UE; the PCF generates verification information (such as a verification value or signature information) based on the relevant information of the UE and a preset algorithm, writes the verification information into the extended field of the URSP, and sends the URSP carrying the verification information to the new AMF.

[0137] Step 21c: Terminal verification process.

[0138] Specifically, the new AMF sends the URSP carrying the verification information to the UE via NAS signaling, and the UE verifies the verification information. In one example, the UE can parse the verification value according to the preset algorithm to obtain the first information, and compare the first information with the relevant information of the UE. If the comparison is consistent, it indicates that the verification is passed; otherwise, if the comparison is inconsistent, it indicates that the verification fails. In another example, the UE can send the signature information to the network device, and the network device verifies the signature information and then returns the verification result to the UE.

[0139] Step 22: The UE sends a Registration Complete message to the new AMF.

[0140] Step 23: The new AMF exchanges messages with the UDM. The exchanged messages are (Nudm_SDM_Info) messages, which are used to confirm the UDM.

[0141] Step 23a: The new AMF sends an N2 message to the access network.

[0142] Step 24: The new AMF exchanges messages with the UDM. The exchanged message is a (Nudm_UECM_Update) message, which is used to indicate the same type of support for IMS voice based on PS session.

[0143] Step 25: Network Slice-Specific Authentication and Authorization.

[0144] An embodiment of the present invention further provides a verification device, which is applied to a core network device, and the core network device may specifically be a PCF. Figure 4 The structure diagram of the verification device according to the embodiment of the present invention is shown in FIG. Figure 1 ,like Figure 4 As shown, the device includes: a first sending unit 31, configured to send a URSP to the terminal, wherein the URSP includes verification information.

[0145] In some optional embodiments of the present invention, the verification information is generated based on relevant information of the terminal.

[0146] In some optional embodiments of the present invention, the verification device is applied to PCF;

[0147] The device further includes a first receiving unit 32 and a first processing unit 33; wherein,

[0148] The first receiving unit 32 is configured to receive a first request sent by the AMF, where the first request is used to request to obtain the URSP; the first request includes relevant information of the terminal;

[0149] The first processing unit 33 is used to generate verification information based on the relevant information of the terminal and a preset algorithm;

[0150] The first sending unit 31 is used to send the URSP carrying the verification information to the terminal through the AMF.

[0151] In some optional embodiments of the present invention, the URSP carrying the verification information is transmitted to the terminal via NAS signaling.

[0152] In some optional embodiments of the present invention, the first processing unit 33 is configured to add the verification information to an extension field of the URSP.

[0153] In some optional embodiments of the present invention, the first processing unit 33 is configured to add the verification information and the application identifier to an extension field of the URSP, or to add the verification information, the application identifier and the OS identifier to an extension field of the URSP.

[0154] In some optional embodiments of the present invention, Figure 5As shown, the device also includes a second receiving unit 34, which is used to receive a first message from the terminal; wherein the first message is a registration completion message, and the registration completion message is sent after the terminal verifies the verification information; or, the first message is a registration failure message, and the registration failure message is sent after the terminal fails to verify the verification information, and the registration failure message carries a reason value.

[0155] In the embodiment of the present invention, the first processing unit 33 in the device can be implemented by a central processing unit (CPU), a digital signal processor (DSP), a microcontroller unit (MCU) or a programmable gate array (FPGA) in actual applications; the first sending unit 31, the first receiving unit 32 and the second receiving unit 34 in the device can be implemented by a communication module (including: basic communication kit, operating system, communication module, standardized interface and protocol, etc.) and a transceiver antenna in actual applications.

[0156] The embodiment of the present invention also provides a verification device. Figure 6 The structure diagram of the verification device according to the embodiment of the present invention is shown in FIG. Figure 3 ;like Figure 6 As shown, the device includes a third receiving unit 41 and a second processing unit 42; wherein,

[0157] The third receiving unit 41 is configured to receive a URSP from a core network device, wherein the URSP includes verification information;

[0158] The second processing unit 42 is used to verify the verification information to obtain a verification result.

[0159] In some optional embodiments of the present invention, the verification information is generated based on relevant information of the terminal.

[0160] In some optional embodiments of the present invention, the core network device includes a PCF;

[0161] The third receiving unit 41 is used to receive the URSP sent by the PCF through the AMF, and the extension field of the URSP carries the verification information.

[0162] In some optional embodiments of the present invention, the third receiving unit 41 is used to receive the URSP carrying the verification information transmitted by the AMF through NAS signaling.

[0163] In some optional embodiments of the present invention, the extension field of the URSP carries the verification information and the application identifier, or the extension field of the URSP carries the verification information, the application identifier and the OS identifier.

[0164] In some optional embodiments of the present invention, the verification information is a verification value;

[0165] The second processing unit 42 is used to parse the verification value according to a preset algorithm to obtain the first information; compare the information with the relevant information of the terminal, and when the comparison is consistent, obtain a verification result indicating that the verification has passed; when the comparison is inconsistent, obtain a verification result indicating that the verification has failed.

[0166] In some optional embodiments of the present invention, the verification information is signature information;

[0167] In some optional embodiments of the present invention, Figure 7 As shown, the device further includes a second sending unit 43;

[0168] The second processing unit 42 is used to send the signature information to the network device through the second sending unit 43, and the network device is used to verify the signature information; and receive the verification result sent by the network device through the third receiving unit 41.

[0169] In some optional embodiments of the present invention, Figure 8 As shown, the device also includes a third sending unit 44, which is used to send a first message to the core network device; wherein, the first message is a registration completion message, and the registration completion message is sent after the terminal verifies the verification information; or, the first message is a registration failure message, and the registration failure message is sent after the terminal fails to verify the verification information, and the registration failure message carries a reason value.

[0170] In some optional embodiments of the present invention, the second processing unit 42 is further configured to initiate a service using a default PDU session, or initiate a service according to a default URSP in the URSP, when the verification result indicates a verification failure.

[0171] In an embodiment of the present invention, the second processing unit 42 in the device can be implemented by a CPU, a DSP, an MCU or an FPGA in actual applications; the third receiving unit 41, the second sending unit 43 and the third sending unit 44 in the device can be implemented by a communication module (including: a basic communication kit, an operating system, a communication module, a standardized interface and protocol, etc.) and a transceiver antenna in actual applications.

[0172] It should be noted that: when the verification device provided in the above embodiment performs verification, only the division of the above program modules is used as an example. In actual applications, the above processing can be assigned to different program modules as needed, that is, the internal structure of the device is divided into different program modules to complete all or part of the processing described above. In addition, the verification device provided in the above embodiment and the verification method embodiment belong to the same concept, and the specific implementation process is detailed in the method embodiment, which will not be repeated here.

[0173] An embodiment of the present invention further provides a communication device, which may specifically be a core network device or a terminal; the core network device may be, for example, a PCF. Fig. 9 FIG. 1 is a schematic diagram of the hardware structure of a communication device according to an embodiment of the present invention. Fig. 9 As shown, the communication device includes a memory 52, a processor 51, and a computer program stored in the memory 52 and executable on the processor 51. When the processor 51 executes the program, the steps of the verification method applied to the core network device in the above-mentioned embodiment of the present invention are implemented; or, when the processor 51 executes the program, the steps of the verification method applied to the terminal in the above-mentioned embodiment of the present invention are implemented.

[0174] The communication device also includes one or more network interfaces 53. It is understood that the various components in the communication device are coupled together through a bus system 54. It is understood that the bus system 54 is used to achieve connection and communication between these components. In addition to the data bus, the bus system 54 also includes a power bus, a control bus, and a status signal bus. However, for the sake of clarity, Fig. 9 Various buses are labeled as bus system 54 .

[0175] It can be understood that the memory 52 can be a volatile memory or a non-volatile memory, and can also include both volatile and non-volatile memories. Among them, the non-volatile memory can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), a magnetic random access memory (FRAM), a flash memory, a magnetic surface memory, an optical disk, or a compact disc read-only memory (CD-ROM); the magnetic surface memory can be a disk memory or a tape memory. The volatile memory can be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of RAM are available, such as static random access memory (SRAM), synchronous static random access memory (SSRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDRSDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM, SyncLink Dynamic Random Access Memory), and direct RAM bus random access memory (DRRAM, Direct Rambus Random Access Memory).The memory 52 described in the embodiments of the present invention is intended to include, but is not limited to, these and any other suitable types of memory.

[0176] The method disclosed in the above embodiment of the present invention can be applied to the processor 51, or implemented by the processor 51. The processor 51 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by the hardware integrated logic circuit in the processor 51 or the instruction in the form of software. The above processor 51 can be a general-purpose processor, a DSP, or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components, etc. The processor 51 can implement or execute the methods, steps and logic block diagrams disclosed in the embodiment of the present invention. The general-purpose processor can be a microprocessor or any conventional processor, etc. The steps of the method disclosed in the embodiment of the present invention can be directly embodied as a hardware decoding processor to execute, or the hardware and software modules in the decoding processor can be combined to execute. The software module can be located in a storage medium, which is located in the memory 52. ​​The processor 51 reads the information in the memory 52 and completes the steps of the above method in combination with its hardware.

[0177] In an exemplary embodiment, the communication device may be implemented by one or more application specific integrated circuits (ASIC), DSP, programmable logic device (PLD), complex programmable logic device (CPLD), FPGA, general purpose processor, controller, MCU, microprocessor, or other electronic components to execute the aforementioned method.

[0178] In an exemplary embodiment, the present invention also provides a computer-readable storage medium, such as a memory 52 including a computer program, which can be executed by a processor 51 of a communication device to complete the steps of the aforementioned method. The computer-readable storage medium can be a memory such as FRAM, ROM, PROM, EPROM, EEPROM, Flash Memory, magnetic surface memory, optical disk, or CD-ROM; or it can be various devices including one or any combination of the above memories.

[0179] An embodiment of the present invention also provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the verification method applied to the core network device as described above in the embodiment of the present invention; or, when executed by a processor, implements the steps of the verification method applied to the terminal as described above in the embodiment of the present invention.

[0180] The methods disclosed in several method embodiments provided in this application can be arbitrarily combined without conflict to obtain new method embodiments.

[0181] The features disclosed in several product embodiments provided in this application can be arbitrarily combined without conflict to obtain new product embodiments.

[0182] The features disclosed in several method or device embodiments provided in this application can be arbitrarily combined without conflict to obtain new method embodiments or device embodiments.

[0183] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. The device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as: multiple units or components can be combined, or can be integrated into another system, or some features can be ignored or not executed. In addition, the coupling, direct coupling, or communication connection between the components shown or discussed can be through some interfaces, and the indirect coupling or communication connection of the devices or units can be electrical, mechanical or other forms.

[0184] The units described above as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units; some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0185] In addition, all functional units in the embodiments of the present invention may be integrated into one processing unit, or each unit may be separately used as a unit, or two or more units may be integrated into one unit; the above-mentioned integrated units may be implemented in the form of hardware or in the form of hardware plus software functional units.

[0186] A person of ordinary skill in the art can understand that: all or part of the steps of implementing the above-mentioned method embodiment can be completed by hardware related to program instructions, and the aforementioned program can be stored in a computer-readable storage medium, which, when executed, executes the steps of the above-mentioned method embodiment; and the aforementioned storage medium includes: various media that can store program codes, such as mobile storage devices, ROM, RAM, disks or optical disks.

[0187] Alternatively, if the above-mentioned integrated unit of the present invention is implemented in the form of a software function module and sold or used as an independent product, it can also be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the embodiment of the present invention can be essentially or partly reflected in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the methods described in each embodiment of the present invention. The aforementioned storage medium includes: various media that can store program codes, such as mobile storage devices, ROM, RAM, magnetic disks or optical disks.

[0188] The above is only a specific embodiment of the present invention, but the protection scope of the present invention is not limited thereto. Any person skilled in the art can easily think of changes or substitutions within the technical scope disclosed by the present invention, which should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims

1. A verification method, characterized in that: The method comprises: The core network device sends a UE routing policy URSP to the terminal, wherein the URSP includes verification information; The core network device includes a policy control function PCF; The core network device sends a UE routing policy URSP to the terminal, including: The PCF receives a first request sent by an access and mobility management function AMF, where the first request is used to request to obtain a URSP; the first request includes relevant information of the terminal; The PCF generates verification information based on the relevant information of the terminal and a preset algorithm, and sends the URSP carrying the verification information to the terminal through the AMF.

2. The method according to claim 1, characterized in that The URSP carrying the verification information is transmitted to the terminal via non-access layer NAS signaling.

3. The method according to claim 1, characterized in that The sending, by the AMF, the URSP carrying the verification information to the terminal includes: The PCF adds the verification information to the extension field of the URSP, and sends the URSP carrying the verification information to the terminal through the AMF.

4. The method according to claim 1, characterized in that: The PCF adds the verification information to the extension field of the URSP, including: The PCF adds the verification information and the application identifier to the extension field of the URSP, or adds the verification information, the application identifier and the operating system OS identifier to the extension field of the URSP.

5. The method according to claim 1, characterized in that The method further comprises: The core network device receives a first message from the terminal; wherein the first message is a registration completion message, and the registration completion message is sent after the terminal verifies the verification information; or, the first message is a registration failure message, and the registration failure message is sent after the terminal fails to verify the verification information, and the registration failure message carries a reason value.

6. A verification method, characterized in that: The method comprises: The terminal receives a URSP from a core network device, wherein the URSP includes verification information; The terminal verifies the verification information to obtain a verification result; The core network device includes a policy control function PCF; The receiving of a UE routing policy URSP from a core network device includes: The terminal receives the URSP sent by the PCF through the AMF, where the extension field of the URSP carries the verification information; The verification information is generated by the PCF based on the relevant information of the terminal and a preset algorithm, and the relevant information of the terminal is carried in a first request sent by the AMF to the PCF, and the first request is used to request to obtain the URSP.

7. The method according to claim 6, characterized in that The terminal receives the URSP carrying the verification information transmitted by the AMF through non-access layer NAS signaling.

8. The method according to claim 6, characterized in that The extension field of the URSP carries the verification information and the application identifier, or the extension field of the URSP carries the verification information, the application identifier and the OS identifier.

9. The method according to claim 6, characterized in that The verification information is a verification value; The terminal verifies the verification information to obtain a verification result, including: The terminal parses the check value according to a preset algorithm to obtain first information; The terminal compares the information with the relevant information of the terminal, and obtains a verification result indicating that the verification has passed if the comparison is consistent; and obtains a verification result indicating that the verification has failed if the comparison is inconsistent.

10. The method according to claim 6, characterized in that The verification information is signature information; the terminal verifies the verification information to obtain a verification result, including: The terminal sends the signature information to a network device, and the network device is used to verify the signature information; The terminal receives the verification result sent by the network device.

11. The method according to claim 6, characterized in that The method also includes: the terminal sends a first message to the core network device; wherein the first message is a registration completion message, and the registration completion message is sent after the terminal verifies the verification information; or, the first message is a registration failure message, and the registration failure message is sent after the terminal fails to verify the verification information, and the registration failure message carries a reason value.

12. The method according to claim 6, characterized in that The method further comprises: When the verification result indicates a verification failure, the terminal initiates a service by using a default protocol data unit PDU session, or initiates a service according to a default URSP in the URSP.

13. A verification device, characterized in that: The device comprises: a first sending unit, configured to send a UE routing policy URSP to a terminal, wherein the URSP comprises verification information; The verification device is applied in PCF; The device further includes a first receiving unit and a first processing unit; wherein, The first receiving unit is configured to receive a first request sent by the AMF, where the first request is used to request to obtain the URSP; the first request includes relevant information of the terminal; The first processing unit is used to generate verification information based on the relevant information of the terminal and a preset algorithm; The first sending unit is used to send the URSP carrying the verification information to the terminal through the AMF.

14. The device according to claim 13, characterized in that The URSP carrying the verification information is transmitted to the terminal via non-access layer NAS signaling.

15. The device according to claim 13, characterized in that The first processing unit is configured to add the verification information to an extension field of the URSP.

16. The device according to claim 13, characterized in that The first processing unit is configured to add the verification information and the application identifier to an extension field of the URSP, or to add the verification information, the application identifier and the OS identifier to an extension field of the URSP.

17. The device according to claim 13, characterized in that The device also includes a second receiving unit, used to receive a first message from the terminal; wherein the first message is a registration completion message, and the registration completion message is sent after the terminal verifies the verification information; or, the first message is a registration failure message, and the registration failure message is sent after the terminal fails to verify the verification information, and the registration failure message carries a reason value.

18. A verification device, characterized in that: The device comprises a third receiving unit and a second processing unit; wherein, The third receiving unit is configured to receive a URSP from a core network device, wherein the URSP includes verification information; The second processing unit is used to verify the verification information to obtain a verification result; The core network equipment includes PCF; The third receiving unit is configured to receive, through the AMF, the URSP sent by the PCF, where the extension field of the URSP carries the verification information; The verification information is generated by the PCF based on relevant information of the terminal and a preset algorithm, and the relevant information of the terminal is carried in a first request sent by the AMF to the PCF, and the first request is used to request to obtain the URSP.

19. The device according to claim 18, characterized in that The third receiving unit is used to receive the URSP carrying the verification information transmitted by the AMF through non-access layer NAS signaling.

20. The device according to claim 18, characterized in that The extension field of the URSP carries the verification information and the application identifier, or the extension field of the URSP carries the verification information, the application identifier and the OS identifier.

21. The device according to claim 18, characterized in that The verification information is a verification value; The second processing unit is used to parse the verification value according to a preset algorithm to obtain first information; compare the information with the relevant information of the terminal, and obtain a verification result indicating that the verification has passed if the comparison is consistent; In the case of an inconsistent comparison, a verification result indicating that the verification failed is obtained.

22. The device according to claim 18, characterized in that The verification information is signature information; The device also includes a second sending unit; The second processing unit is used to send the signature information to the network device through the second sending unit, and the network device is used to verify the signature information; The verification result sent by the network device is received by the third receiving unit.

23. The device according to claim 18, characterized in that The device also includes a third sending unit, which is used to send a first message to the core network device; wherein the first message is a registration completion message, and the registration completion message is sent after the terminal verifies the verification information; or, the first message is a registration failure message, and the registration failure message is sent after the terminal fails to verify the verification information, and the registration failure message carries a reason value.

24. The device according to claim 18, characterized in that The second processing unit is further configured to initiate a service using a default protocol data unit (PDU) session, or initiate a service according to a default URSP in the URSP, when the verification result indicates a verification failure.

25. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the steps of the method described in any one of claims 1 to 5 are implemented; or, when the program is executed by a processor, the steps of the method described in any one of claims 6 to 12 are implemented.

26. A communication device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the program, the steps of the method described in any one of claims 1 to 5 are implemented; or, when the processor executes the program, the steps of the method described in any one of claims 6 to 12 are implemented.

Images