Network access method, related device and system

Abstract

The embodiment of the present application discloses a network access method, which may include: a data management network element receives a request message sent by an access and mobility management function network element, the request message includes identification information of a user device and identification information of a home gateway to which the user device is connected; the data management network element determines the subscription data of the home gateway according to the identification information of the home gateway; the data management network element determines the subscription type of the user device according to the subscription data of the home gateway and the identification information of the user device; the data management network element sends indication information of the subscription type to the access and mobility management function network element; the subscription type includes a subscription user or a non-subscription user of the home gateway. This solution can enable UE to access 5GC through the home gateway, so that 5GC supports more access methods and improves the integration of fixed and mobile networks.

Description

Technical Field

[0001] The present application relates to the field of wireless communication technology, and in particular to a network access method, related devices and systems. Background Art

[0002] The universal functional design and forward-compatible "access network-core network" interface enable the universal 5G core network (5th generation core, 5GC) to work with different access networks. In addition to supporting the radio access network (RAN), 5GC also needs to support access to fixed networks / wired networks, such as 5G residential gateway (5G RG) / customer premise equipment (CPE) accessing 5GC through the wired 5G access network (W-5GAN).

[0003] In the scenario where the home gateway accesses 5GC through a wired 5G access network, a 5GC-capable UE can access 5GC through the 5G home gateway. At this time, the 5GC-capable UE is a remote device and the 5G home gateway is a relay device. In order to enable remote devices to access 5GC through relay devices, a technical solution is urgently needed to support this access method. Summary of the invention

[0004] The embodiments of the present application provide a network access method, related devices and systems, which can enable user equipment (UE) to access 5GC through a home gateway, so that 5GC supports more access methods and improves the integration of fixed and mobile networks.

[0005] In a first aspect, the present application provides a network access method, which is applied to a unified data management network element side, and the method may include: the unified data management network element receives a request message sent by an access and mobility management function network element, and the request message includes identification information of a user device and identification information of a home gateway to which the user device is connected. The unified data management network element determines the subscription data of the home gateway based on the identification information of the home gateway, and determines the classification type of the user device based on the subscription data of the home gateway and the identification information of the user device. Then, the unified data management network element sends indication information of the subscription type to the access and mobility management function network element. The subscription type includes a subscription user or a non-subscription user of the home gateway.

[0006] In some embodiments of the first aspect, the classification type of the user equipment includes a subscription type. The subscription type includes a subscribed user or a non-subscribed user of the home gateway.

[0007] In combination with the first aspect, in some optional embodiments, the subscription data of the home gateway may include identification information of a user device of a subscriber of the home gateway. At this time, the unified data management network element determines the subscription type of the user device according to the subscription data of the home gateway and the identification information of the user device, which may specifically include: if the identification information of the user device belongs to the identification information of the user device of the subscriber of the home gateway, then the unified data management network element determines that the user device is a subscriber of the home gateway.

[0008] In combination with the first aspect, in some optional embodiments, the subscription data may further include indication information of an access type of the home gateway, where the access type indicates whether the home gateway allows access by non-subscribed users.

[0009] In combination with the first aspect, in some optional embodiments, the unified data management network element may determine whether the user equipment is allowed to access the access network device in the following ways:

[0010] Optionally, if the identification information of the user equipment belongs to the identification information of the user equipment of the contracted user of the home gateway, the unified data management network element determines that the user equipment is allowed to access the home gateway. Because, regardless of whether the home gateway is an open type (allowing non-contracted users to access) or a private type (not allowing non-contracted users to access), contracted users can access it.

[0011] Optionally, if the identification information of the user device does not belong to the identification information of the user device of the contracted user of the home gateway, but the access type of the home gateway indicates that the home gateway allows access by non-contracted users, the unified data management network element determines that the user device is allowed to access the home gateway.

[0012] Optionally, if the identification information of the user device does not belong to the identification information of the user device of the contracted user of the home gateway, and the access type of the home gateway indicates that the home gateway does not allow non-contracted users to access, the unified data management network element determines that the user device is not allowed to access the home gateway.

[0013] The content of the subscription data of the home gateway is not limited to the subscription user list and the indication information of the access type of the home gateway. The content of the subscription data of the home gateway can also be implemented in other forms, as long as it can indicate which subscription users of the home gateway are and which users are allowed to access the home gateway. For example, the subscription data may include a mapping table, which contains identification information of multiple UEs and indication information of the subscription types corresponding to the identification information of the multiple UEs, wherein the identification information of the multiple UEs may include the identification information of the UEs of the subscription users and may also include the identification information of the UEs of the non-subscription users. In this way, the subscription type corresponding to the specific UE can be found from the mapping table according to the identification information of the specific UE.

[0014] In combination with the first aspect, in some optional embodiments, the method described in the first aspect may further include: the unified data management network element sends access indication information to the access and mobility management function network element. The access indication information may indicate whether the user equipment is allowed to access the home gateway.

[0015] Specifically, the access indication information may be a security key, so that the W-5GAN can determine that the UE's authentication is successful based on the received security key, and thus determine that the UE is allowed to access. Alternatively, the access indication information may be an EAP-Success message, so that the 5G-RG can determine that the UE's authentication is successful based on the received EAP-success message, and thus determine that the UE is allowed to access.

[0016] In combination with the first aspect, in some optional embodiments, the method described in the first aspect may also include: the unified data management network element sends the subscription data to the access and mobility management function network element, so that the access and mobility management function network element can also determine the subscription type of the UE based on the subscription data, and whether the UE is allowed to access the home gateway.

[0017] In combination with the first aspect or the second aspect, in some optional embodiments, the subscription data of the home gateway stored in the unified data management network element is updated. For example, the access type of the home gateway is changed from an open type to a private type, or the subscription user list is updated.

[0018] Optionally, the unified data management network element may redetermine the subscription type of the user device based on the updated subscription data of the home gateway, and redetermine whether the user device is allowed to access the home gateway. Optionally, the unified data management network element may also send the updated subscription data of the home gateway to the access and mobility management network element, and the access and mobility management network element redetermines the subscription type of the user device and whether the user device is allowed to access the home gateway based on the updated subscription data of the home gateway.

[0019] Under the condition that the subscription data of the home gateway is updated, the unified data management network element may send an access update message to the access and mobility management network element according to the identification information of the access and mobility management network element.

[0020] Specifically, the access update message is implemented as follows:

[0021] 1) If the access type of the home gateway is changed from an open type to a private type, and the subscription type of the user equipment is a non-subscribed user, the access update message may include an access rejection indication.

[0022] 2) If the updated home gateway's list of subscribed users indicates that the user equipment's subscription has changed, the access update message may include an indication of the user equipment's updated subscription type to notify the access and mobility management network element to adjust the user equipment's access model and the user equipment's service management policy.

[0023] 3) The access update message may include at least one item in the updated access type of the home gateway and the updated subscribed user list. The access and mobility management network element determines the subscription type of the user device and whether the user device is allowed to access the home gateway based on the updated access type of the home gateway and / or the updated subscribed user list.

[0024] After receiving the access update message, the access and mobility management network element may send a notification message to the user equipment. The notification message may be used to notify the user equipment of the changed subscription type of the user equipment. Under the condition that the user equipment can no longer use the home gateway to access the core network, the notification message may carry a reselection indication, which is used to notify the user equipment to reselect the home gateway for access.

[0025] Implementing the method described in the first aspect or various possible implementations of the first aspect, UDM can distinguish different access models of UE to facilitate subsequent different service controls, such as different QoS controls. Especially when network resources are limited, the network side can give priority to guaranteeing the access of contracted users and restricting the access of non-contracted users. This application does not limit the differentiated service management policies (such as host policies and guest policies) implemented by 5GC on UE, which can be determined specifically according to the application scenarios supported by 5G or NR.

[0026] In a second aspect, the present application provides a network access method, which is applied to a unified data management network element side, and the method may include: the data management network element receives a request message sent by an access and mobility management function network element, and the request message includes identification information of a home gateway to which a user device is connected. The data management network element determines the subscription data of the home gateway according to the identification information of the home gateway, and sends the subscription data to the access and mobility management function network element, and the subscription data is used by the mobility management function network element to determine the subscription type of the user device. The subscription type includes a subscribed user or a non-subscribed user of the home gateway.

[0027] In a third aspect, the present application provides a network access method, which is applied to an access and mobility management function network element side, and the method may include: the access and mobility management function network element sends a request message to a unified data management network element, and the request message includes identification information of a user device and identification information of a home gateway to which the user device is connected. The access and mobility management function network element receives indication information of a classification type of the user device sent by the unified data management network element, and determines whether the user device is allowed to access the home gateway and / or a service management policy of the user device according to the classification type of the user device.

[0028] In some embodiments of the third aspect, the classification type of the user equipment includes a subscription type.

[0029] In combination with the third aspect, in some optional embodiments, the access and mobility management function network element determines whether the user equipment is allowed to access the home gateway according to the subscription type of the user equipment, which may specifically include: if the subscription type of the user equipment is a subscribed user of the home gateway, the access and mobility management function network element determines that the user equipment is allowed to access the home gateway. Because, regardless of whether the home gateway is an open type (allowing non-subscribed users to access) or a private type (not allowing non-subscribed users to access), subscribed users can access it.

[0030] In combination with the third aspect, in some optional embodiments, the access and mobility management function network element determines the service management policy of the user device according to the contract type of the user device, which may specifically include: if the contract type is a non-contracted user, the access and mobility management function network element determines that the service management policy of the user device is the service management policy corresponding to the non-contracted user; or, if the contract type is a contracted user, the access and mobility management function network element determines that the service management policy of the user device is the service management policy corresponding to the contracted user.

[0031] In combination with the third aspect, in some optional embodiments, the method described in the third aspect may also include: the access and mobility management function network element receives access indication information sent by the unified data management network element, and / or indication information of the service management policy of the user device, and the access indication information indicates whether the user device is allowed to access the home gateway.

[0032] In combination with the third aspect, in some optional embodiments, the method described in the third aspect may also include: the access and mobility management function network element receives the subscription data of the home gateway sent by the unified data management network element, and determines whether the user device is allowed to access the home gateway based on the subscription data of the home gateway and the identification information of the user device.

[0033] In combination with the third aspect, in some optional embodiments, the subscription data of the home gateway may include identification information of a user equipment of a subscriber of the home gateway.

[0034] In combination with the third aspect, in some optional embodiments, the subscription data of the home gateway may further include indication information of the access type of the home gateway, where the access type indicates whether the home gateway allows non-subscribed users to access.

[0035] In conjunction with the third aspect, in some optional embodiments, the access and mobility management function network element may determine whether the user equipment is allowed to access the access network device in the following ways:

[0036] Optionally, if the identification information of the user equipment belongs to the identification information of the user equipment of the subscriber of the home gateway, the access and mobility management function network element determines that the user equipment is allowed to access the home gateway. Because, regardless of whether the home gateway is an open type (allowing non-subscribers to access) or a private type (not allowing non-subscribers to access), subscribers can access it.

[0037] Optionally, if the identification information of the user equipment does not belong to the identification information of the user equipment of the contracted user of the home gateway, but the access type of the home gateway indicates that the home gateway allows access by non-contracted users, the access and mobility management function network element determines that the user equipment is allowed to access the home gateway.

[0038] Optionally, if the identification information of the user equipment does not belong to the identification information of the user equipment of the contracted user of the home gateway, and the access type of the home gateway indicates that the home gateway does not allow non-contracted users to access, the access and mobility management function network element determines that the user equipment is not allowed to access the home gateway.

[0039] The content of the subscription data of the home gateway is not limited to the subscription user list and the indication information of the access type of the home gateway. The content of the subscription data of the home gateway can also be implemented in other forms, as long as it can indicate which subscription users of the home gateway are and which users are allowed to access the home gateway. For example, the subscription data may include a mapping table, which contains identification information of multiple UEs and indication information of the subscription types corresponding to the identification information of the multiple UEs, wherein the identification information of the multiple UEs may include the identification information of the UEs of the subscription users and may also include the identification information of the UEs of the non-subscription users. In this way, the subscription type corresponding to the specific UE can be found from the mapping table according to the identification information of the specific UE.

[0040] In combination with the third aspect, in some optional embodiments, the method described in the third aspect may also include: the access and mobility management function network element sends access indication information, and / or indication information of the service management policy of the user device to the access network device or the home gateway, and the access indication information indicates whether the user device is allowed to access the home gateway.

[0041] In conjunction with the third aspect, in some optional embodiments, the identification information of the home gateway carried in the request message sent by the access and mobility management function network element is permanent identification information. The method described in the third aspect may also include: the access and mobility management function network element may obtain temporary identification information of the home gateway, and obtain permanent identification information from the context of the home gateway based on the temporary identification information.

[0042] Optionally, the access and mobility management function network element may obtain the temporary identification information from NAS signaling sent by the user equipment, that is, the temporary identification information of the home gateway obtained by the access and mobility management function network element is sent by the user equipment.

[0043] Optionally, the access and mobility management function network element can obtain the temporary identification information from the signaling sent by the access network device to which the home gateway accesses. That is, the temporary identification information of the home gateway obtained by the access and mobility management function network element is sent by the access network device. Among them, the temporary identification information included in the signaling sent by the access network device is sent by the home gateway to the access network device; or, it is identified by the access network device based on the IP address of the user device, the line identifier or VLAN identifier of the fixed network gateway connection, or the access point identifier of the user device.

[0044] Implementing the method described in the third aspect or various possible implementations of the third aspect, AMF can distinguish different access models of UE to facilitate subsequent different service controls, such as different QoS controls. Especially when network resources are limited, the network side can give priority to guaranteeing the access of contracted users and restricting the access of non-contracted users. This application does not limit the differentiated service management policies (such as host policies and guest policies) implemented by 5GC on UE, which can be determined specifically according to the application scenarios supported by 5G or NR.

[0045] In a fourth aspect, the present application provides a network access method, which is applied to an access and mobility management function network element side, and the method may include: the access and mobility management function network element receives a request message sent by an access network device, and the request message includes identification information of a home gateway. The access and mobility management function network element obtains the subscription data of the home gateway according to the identification information of the home gateway, and determines the classification type of the user equipment and / or the service management policy of the user equipment according to the subscription data of the home gateway and the identification information of the user equipment.

[0046] In some embodiments of the fourth aspect, the classification type of the user equipment includes a subscription type.

[0047] In combination with the fourth aspect, in some optional embodiments, the method described in the fourth aspect may also include: the access and mobility management function network element sends indication information of the subscription type of the user equipment and / or indication information of the service management policy of the user equipment to the access network device or the home gateway.

[0048] In combination with the fourth aspect, in some optional embodiments, the access and mobility management function network element obtains the contract data of the home gateway based on the identification information of the home gateway, which may specifically include: the access and mobility management function network element receives the contract data of the home gateway sent by the unified data management network element based on the identification information of the home gateway.

[0049] In combination with the fourth aspect, in some optional embodiments, the access and mobility management function network element obtains the contract data of the home gateway based on the identification information of the home gateway, which may specifically include: the access and mobility management function network element obtains the contract data of the home gateway from the context of the home gateway based on the identification information of the home gateway.

[0050] In conjunction with the fourth aspect, in some optional embodiments, the subscription data of the home gateway may include identification information of a user device of a subscriber of the home gateway. At this time, the access and mobility management function network element determines the subscription type of the user device according to the subscription data of the home gateway, which may specifically include: if the identification information of the user device belongs to the identification information of the user device of the subscriber of the home gateway, then the access and mobility management function network element determines that the user device is a subscriber of the home gateway.

[0051] In combination with the fourth aspect, in some optional embodiments, the subscription data of the home gateway may further include indication information of the access type of the home gateway, where the access type indicates whether the home gateway allows non-subscribed users to access.

[0052] In conjunction with the fourth aspect, in some optional embodiments, the access and mobility management function network element may determine whether the user equipment is allowed to access the access network device in the following ways:

[0053] Optionally, if the identification information of the user equipment belongs to the identification information of the user equipment of the subscriber of the home gateway, the access and mobility management function network element determines that the user equipment is allowed to access the home gateway. Because, regardless of whether the home gateway is an open type (allowing non-subscribers to access) or a private type (not allowing non-subscribers to access), subscribers can access it.

[0054] Optionally, if the identification information of the user equipment does not belong to the identification information of the user equipment of the contracted user of the home gateway, but the access type of the home gateway indicates that the home gateway allows access by non-contracted users, the access and mobility management function network element determines that the user equipment is allowed to access the home gateway.

[0055] Optionally, if the identification information of the user equipment does not belong to the identification information of the user equipment of the contracted user of the home gateway, and the access type of the home gateway indicates that the home gateway does not allow non-contracted users to access, the access and mobility management function network element determines that the user equipment is not allowed to access the home gateway.

[0056] The content of the subscription data of the home gateway is not limited to the subscription user list and the indication information of the access type of the home gateway. The content of the subscription data of the home gateway can also be implemented in other forms, as long as it can indicate which subscription users of the home gateway are and which users are allowed to access the home gateway. For example, the subscription data may include a mapping table, which contains identification information of multiple UEs and indication information of the subscription types corresponding to the identification information of the multiple UEs, wherein the identification information of the multiple UEs may include the identification information of the UEs of the subscription users and may also include the identification information of the UEs of the non-subscription users. In this way, the subscription type corresponding to the specific UE can be found from the mapping table according to the identification information of the specific UE.

[0057] In conjunction with the fourth aspect, in some optional embodiments, the method described in the fourth aspect may further include: the access and mobility management function network element sends access indication information and / or indication information of the service management policy of the user equipment to the access network device or the home gateway. The access indication information indicates whether the user equipment is allowed to access the home gateway.

[0058] In conjunction with the fourth aspect, in some optional embodiments, the identification information of the home gateway included in the request message sent by the access network device is temporary identification information. The method described in the fourth aspect may also include: the access and mobility management function network element obtains the temporary identification information of the home gateway, and determines the subscription data from the context of the home gateway based on the temporary identification information.

[0059] Optionally, the access and mobility management function network element may obtain the temporary identification information from NAS signaling sent by the user equipment, that is, the temporary identification information of the home gateway obtained by the access and mobility management function network element is sent by the user equipment.

[0060] Optionally, the access and mobility management function network element can obtain the temporary identification information from the signaling sent by the access network device to which the home gateway accesses. That is, the temporary identification information of the home gateway obtained by the access and mobility management function network element is sent by the access network device. Among them, the temporary identification information included in the signaling sent by the access network device is sent by the home gateway to the access network device; or, it is identified by the access network device based on the IP address of the user device, the line identifier or VLAN identifier of the fixed network gateway connection, or the access point identifier of the user device.

[0061] In the fifth aspect, the present application provides a network access method, which is applied to the access network device side. The method may include: the access network device obtains temporary identification information of a home gateway to which a user device is connected, and sends a message to an access and mobility management function network element, the message including: temporary identification information of the home gateway and identification information of the user device; the identification information of the user device comes from the user device.

[0062] In combination with the fifth aspect, in some optional embodiments, the access network device obtains the temporary identification information of the home gateway to which the user device is connected, which may specifically include: the access network device receives the temporary identification information sent by the user device; or, the access network device receives the temporary identification information sent by the home gateway.

[0063] Optionally, the access network device can obtain the temporary identification information from the NAS signaling sent by the user equipment. That is, the temporary identification information of the home gateway obtained by the access network device is sent by the user equipment. Optionally, the access network device can obtain the temporary identification information from the signaling sent by the home gateway. That is, the temporary identification information of the home gateway obtained by the access network device is sent by the access network device.

[0064] Optionally, the temporary identification information may also be identified by the access network device based on the IP address of the user equipment, the line identification or VLAN identification of the fixed network gateway connection, or the access point identification of the user equipment.

[0065] In a sixth aspect, the present application provides a network access method, applied to a user device side, the method may include: the user device obtains temporary identification information of a home gateway to which the user device is connected, the user device sends a request message to an access network device, the request message includes: the temporary identification information of the home gateway and the identification information of the user device.

[0066] In combination with the sixth aspect, in some optional embodiments, the user equipment obtains temporary identification information of a home gateway to which the user equipment is connected, which may specifically include: the user equipment receives temporary identification information of the home gateway sent by the home gateway.

[0067] Specifically, after establishing a connection with the home gateway, the user equipment can query and obtain the temporary identification information of the home gateway through the Access Network Query Protocol (ANQP). Specifically, the user equipment can receive an ANQP message or EAP message sent by the home gateway, which contains the temporary identification information of the home gateway. Alternatively, the user equipment can obtain the temporary identification information of the home gateway through an EAP message. Specifically, the home gateway carries the temporary identification of the home gateway in the EAP message sent to the user equipment. The EAP message can be an EAP-Request / Identity message or an EAP-request / 5G-start message.

[0068] In a seventh aspect, the present application provides a network access method, which is applied to an access network device side, and the method may include: the access network device receives a request message, and the request message includes identification information of a packet data unit PDU session. The access network device sends a response message to a terminal device, and the response message includes an address of the access network device corresponding to the PDU session; the address of the access network device corresponding to the PDU session is used as the target address of the user plane data packet of the PDU session sent by the terminal device.

[0069] In combination with the seventh aspect, in some optional embodiments, the method may further include: the access network device stores the correspondence between the identification information of the PDU session and the address information of the access network device corresponding to the PDU session.

[0070] In combination with the seventh aspect, in some optional embodiments, the method may also include: the access network device receives identification information of the terminal device; the access network device allocates an address to the terminal device based on the identification information of the terminal device; the access network device sends the address of the terminal device to the terminal device; the address of the terminal device is used as the source address of the user plane data packet of the PDU session sent by the terminal device.

[0071] In combination with the seventh aspect, in some optional embodiments, the method may also include: the access network device receives the user plane data packet of the PDU session sent by the terminal device, the destination address included in the user plane data packet is the address of the access network device corresponding to the PDU session; the access network device identifies the PDU session based on the address information of the access network device corresponding to the PDU session.

[0072] In an eighth aspect, the present application provides a network access method, which is applied to an access network device side, and the method may include: the access network device allocates a user plane address of a terminal device corresponding to the access network device; the access network device sends the user plane address of the access network device to the terminal device, and the user plane address is used as the destination address of the user plane data packet of the PDU session sent by the terminal device.

[0073] In combination with the eighth aspect, in some optional embodiments, the method may also include: the access network device receives identification information of the terminal device; the access network device allocates an address to the terminal device based on the identification information of the terminal device; the access network device sends the address of the terminal device to the terminal device, and the address of the terminal device is used as the source address of the user plane data packet of the PDU session sent by the terminal device.

[0074] In combination with the eighth aspect, in some optional embodiments, the method may also include: the access network device receives the user plane data packet sent by the terminal device, the destination address in the user plane data packet is the address of the user plane of the access network device, and the user plane data packet also includes identification information of the PDU session; the access network device identifies the PDU session based on the identification information of the PDU session.

[0075] In the ninth aspect, the present application provides a network access method, which is applied to the terminal device side. The method may include: the user device receives the user plane address of the access network device sent by the access network device; the access network device sends a user plane data packet of the PDU session to the access network device, and the destination address included in the user plane data packet is the user plane address of the access network device.

[0076] In combination with the ninth aspect, in some optional embodiments, the method may also include: the user equipment sends the identification information of the user equipment to the access network equipment; the user equipment receives the address of the user equipment allocated and sent by the access network equipment; the source address included in the user plane data packet is the address of the user equipment.

[0077] In the tenth aspect, the present application provides a network access method, which is applied to the terminal device side, and the method may include: the user device receives the address of the access network device sent by the access network device; the access network device sends a user plane data packet of the PDU session to the access network device, and the destination address included in the user plane data packet is the address of the access network device, and the user plane data packet also includes identification information of the PDU session.

[0078] In combination with the tenth aspect, in some optional embodiments, the method may also include: the user equipment sends the identification information of the user equipment to the access network equipment; the user equipment receives the address of the user equipment allocated and sent by the access network equipment; the source address included in the user plane data packet is the address of the user equipment.

[0079] In the eleventh aspect, the present application provides a method for sending a service management policy, which is applied to the policy control network element side, and the method may include: the policy control network element receives a first message sent by an access and mobility management function network element or a session management network element, and the first message includes indication information of a device type of a user device; the policy control network element sends a second message to the session management network element, and the second message includes the service management policy of the user device determined by the policy control network element based on the indication information of the device type of the user device.

[0080] In combination with the eleventh aspect, in some optional embodiments, the service management policy includes: a QoS policy and / or a local resource access policy of a home gateway.

[0081] In combination with the eleventh aspect, in some optional embodiments, the service management policy includes: a local resource access policy of a home gateway; the method may also include: the policy control network element sending the local resource access policy to the access and mobility management function network element.

[0082] In the twelfth aspect, the present application provides a network access, which is applied to the home gateway side. The method may include: the home gateway receives the identification information of the user equipment and the indication information of the device type of the user equipment sent by the access and mobility management function network element; the home gateway obtains the local resource access policy of the home gateway; the home gateway controls the user equipment to access local resources according to the indication information of the device type of the user equipment and the local resource access policy.

[0083] In combination with the twelfth aspect, in some optional embodiments, the home gateway obtains the local resource access policy of the home gateway, which may specifically include: the home gateway receives the local resource access policy of the home gateway sent by the access and mobility management function network element or the session management network element.

[0084] In combination with the twelfth aspect, in some optional embodiments, the home gateway obtains the local resource access policy of the home gateway, which may specifically include: the home gateway configures the local resource access policy.

[0085] In combination with the twelfth aspect, in some optional embodiments, the local resource access policy includes address information of a device connected to the home gateway.

[0086] In combination with the twelfth aspect, in some optional embodiments, the method may also include: the home gateway receives a request message sent by the user device, the request message including identification information of the user device; the home gateway controls the user device's access to local resources based on the indication information of the device type of the user device and the local resource access policy, including: the home gateway determines the device type of the user device based on the identification information of the user device and the indication information of the device type of the user device; the home gateway controls the user device's access to local resources based on the device type of the user device and the local resource access policy.

[0087] In a thirteenth aspect, the present application provides a core network device, comprising a plurality of functional units, for correspondingly executing the method provided in any one of the possible implementations of the first aspect, the second aspect, the third aspect, the fourth aspect, or the eleventh aspect. The core network device can be implemented as a unified data management network element in the first aspect, the second aspect, the third aspect, the fourth aspect, or the eleventh aspect. Access and mobility management network element.

[0088] In a fourteenth aspect, the present application provides an access network device, comprising multiple functional units, for correspondingly executing a method provided in any one of the possible implementations of the fifth aspect, the seventh aspect, or the eighth aspect.

[0089] In a fifteenth aspect, the present application provides a user device comprising a plurality of functional units, for correspondingly executing any one of the methods provided in any possible implementation manners of the sixth aspect.

[0090] In the sixteenth aspect, the present application provides a terminal device comprising multiple functional units, which are used to correspondingly execute the method provided in any one of the possible implementations of the ninth aspect or the tenth aspect.

[0091] In the seventeenth aspect, the present application provides a core network device for executing the network access method described in any one of the possible implementation methods of the first aspect or the second aspect or the third aspect or the fourth aspect. The core network device can be implemented as a unified data management network element in the first aspect or the second aspect or the third aspect or the fourth aspect or the eleventh aspect. Access and mobility management network element. The core network device may include: a memory and a processor and a transceiver coupled to the memory, wherein: the transceiver is used to communicate with other communication devices (such as access network devices). The memory is used to store the implementation code of the network access method described in any one of the possible implementation methods of the first aspect or the second aspect or the third aspect or the fourth aspect, and the processor is used to execute the program code stored in the memory, that is, to execute the method provided in any one of the possible implementation methods of the first aspect or the second aspect or the third aspect or the fourth aspect or the eleventh aspect.

[0092] In the eighteenth aspect, the present application provides an access network device for executing any one of the network access methods described in the possible implementation methods of the fifth aspect. The application server may include: a memory and a processor and a transceiver coupled to the memory, wherein: the transceiver is used to communicate with other communication devices (such as core network devices, home gateways). The memory is used to store the implementation code of the network access method described in any one of the possible implementation methods of the fifth aspect, the seventh aspect, or the eighth aspect, and the processor is used to execute the program code stored in the memory, that is, to execute the method provided in any one of the possible implementation methods of the fifth aspect, the seventh aspect, or the eighth aspect.

[0093] In a nineteenth aspect, the present application provides a user equipment for executing any one of the network access methods described in the possible implementations of the sixth aspect. The user equipment may include: a memory, a processor coupled to the memory, and a transceiver, wherein: the transceiver is used to communicate with other communication devices (such as a home gateway). The memory is used to store the implementation code of the network access method described in any one of the possible implementations of the sixth aspect, and the processor is used to execute the program code stored in the memory, that is, to execute any one of the methods provided in the possible implementations of the sixth aspect.

[0094] In the twentieth aspect, the present application provides a terminal device for executing the network access method described in any one of the possible implementations of the sixth aspect. The terminal may include: a memory and a processor and a transceiver coupled to the memory, wherein: the transceiver is used to communicate with other communication devices (such as a home gateway). The memory is used to store the implementation code of the network access method described in any one of the possible implementations of the ninth or tenth aspect, and the processor is used to execute the program code stored in the memory, that is, to execute the method provided in any one of the possible implementations of the ninth or tenth aspect.

[0095] In a twenty-first aspect, the present application provides a communication system, the communication system comprising: a user device, a home gateway, an access network device and a core network device, wherein: the core network device may be the core network device described in the thirteenth aspect or the seventeenth aspect. The access network device may be the access network device described in the fourteenth aspect or the eighteenth aspect. The user device may be the user device described in the fifteenth aspect or the nineteenth aspect. The home gateway may be the terminal device described in the sixteenth aspect or the twentieth aspect.

[0096] In the twenty-second aspect, the present application provides a computer-readable storage medium, which stores instructions. When the instructions are executed on a computer, the computer executes the network access method described in any one of the first to twelfth aspects above.

[0097] In the twenty-third aspect, the present application provides a computer program product comprising instructions, which, when executed on a computer, enables the computer to execute the network access method described in any one of the first to twelfth aspects above. BRIEF DESCRIPTION OF THE DRAWINGS

[0098] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the embodiments of the present application or the background technology will be described below.

[0099] Figure 1A-Figure 1C It is a schematic diagram of the architecture of the wireless communication system involved in this application;

[0100] Figure 2 It is a flowchart of a network access method provided by the present application;

[0101] Figure 3 It is a flowchart of another network access method provided by the present application;

[0102] Figure 4 It is a flowchart of another network access method provided by the present application;

[0103] Figure 5 It is a flowchart of another network access method provided by the present application;

[0104] Figure 6 is a schematic diagram of the architecture of a user equipment provided by an embodiment of the present application;

[0105] Figure 7 This is a schematic diagram of the architecture of a home gateway provided by an embodiment of the present application;

[0106] Figure 8 It is a schematic diagram of the architecture of an access network device provided by an embodiment of the present application;

[0107] Fig. 9 It is a schematic diagram of the architecture of a core network device provided by an embodiment of the present application;

[0108] Fig.10 This is a functional block diagram of a communication system and related communication devices provided by the present application;

[0109] Fig.11 It is a flowchart of a method for obtaining identification information of a home gateway on a network side provided by the present application;

[0110] Fig.12 It is a flowchart of another network access method provided by the present application;

[0111] Fig.13It is a flowchart of a method for issuing business management policies on the network side provided by this application. DETAILED DESCRIPTION

[0112] The terms used in the implementation section of this application are only used to explain the specific embodiments of this application and are not intended to limit this application.

[0113] Figure 1A-Figure 1C The system architecture of the communication system involved in this application is shown. Figure 1A shows a non-roaming system architecture, Figure 1B A local breakout roaming system architecture is shown. Figure 1C A home routed roaming system architecture is shown. Figure 1A-Figure 1C The system architecture shown not only supports the access of wireless access technologies (such as LTE, 5G RAN, next generation RAN (NG RAN), etc.) defined by the 3GPP standard group to the core network (CN), but also supports non-3GPP (non-3GPP) access technologies to the core network through non-3GPP interworking function (N3IWF) or next generation access gateway (ngPDG). Figure 1A-Figure 1C As shown in Figure 1, the system architecture also supports access to fixed networks / wired networks, such as 5G home gateway (5G RG) / CPE accessing the core network through a wired 5G access network (W-5GAN). In the scenario where the 5G home gateway accesses the 5GC through the wired 5G access network, the 5GC capable UE can access the 5GC through the 5G home gateway. At this time, the 5GC capable UE is a remote device and the 5G home gateway is a relay device.

[0114] Not limited to 5G communication systems, Figure 1A-Figure 1C The system architecture shown may also be a new radio (NR) system or a machine to machine (M2M) system that will evolve in the future. Figure 1A-Figure 1C As shown, the system architecture may include 5GC-capable user equipment, 5G RG, NG RAN equipment, W-5G AN equipment and core network equipment. Among them:

[0115] 5GC capable UE: A user equipment (UE) that has the ability to access the 5G core network (5GC) defined by 3GPP. 5GC capable UE can access the core network through NG RAN or 5G RG. 5GC capable UE can be a handheld terminal, a subscriber unit, a cellular phone, a smartphone, a machine type communication (MTC) terminal device, etc. A wireless data card, a personal digital assistant (PDA) computer, a tablet computer, a wireless modem, a handheld device, a laptop computer, a cordless phone or a wireless local loop (WLL) station, or other devices that can access the network. In addition to 5GC capable UE, the system architecture can also support terminal devices with only 3GPP defined wireless access capabilities to access the core network, and can also support terminal devices with only non-3GPP defined access capabilities (such as tablets) to access the core network.

[0116] 5G RG: is a home gateway that can access 5GC through W-5G AN. In this application, 5G RG can also support 5GC-capable user equipment to access 5GC through 5G RG. The home gateway is the core of the entire home network. It mainly implements Internet access and connection of heterogeneous subnets within the home, as well as remote control and management functions.

[0117] NG RAN equipment: It is a RAN equipment that is mainly responsible for wireless resource management, quality of service (QoS) management, data compression and encryption on the air interface side. In addition to NG RAN equipment, the system architecture can also support other 3GPP-defined wireless access network equipment, such as 5G RAN equipment. RAN equipment may include: macro base stations, micro base stations (also known as small stations), relay stations, etc. In systems using different wireless access technologies, the names of devices with base station functions may be different. For example, in the fifth generation (5G) system, it is called gNB; in the LTE system, it is called evolved NodeB (eNB or eNodeB); in the third generation (3G) system, it is called Node B, etc.

[0118] W-5G AN device: is a device with AN. AN device can be an access network device defined by non-3GPP. AN device allows the terminal device and the 3GPP core network to interconnect and communicate using non-3GPP technologies, such as wireless fidelity (Wi-Fi), worldwide interoperability for microwave access (WiMAX), code division multiple access (CDMA) networks, etc. In addition to W-5G AN devices, the system architecture can also support other non-3GPP defined access network devices, such as Wi-Fi routers.

[0119] Core network equipment can be Figure 1A-Figure 1C The following are UPF, AMF, UDM, SMF, PCF, AUSF, etc. These core network devices constitute 5GC, which can support 3gpp access network and non-3gpp access network.

[0120] User plane function (UPF) network element: responsible for forwarding and receiving data packets. UPF network elements can receive user data from the data network and transmit it to the terminal device through the access network equipment; UPF network elements can also receive user data from the terminal device through the access network equipment and forward it to the data network. The transmission resources and scheduling functions in the UPF network element that provide services to the terminal device are managed and controlled by the SMF network element. UPF network elements can cache data packets.

[0121] Access and mobility management function (AMF) network element: It belongs to the core network element and is mainly responsible for signaling processing, such as access control, mobility management, attachment and detachment, and gateway selection. When the AMF network element provides services for a session in a terminal device, it will provide control plane storage resources for the session to store the session identifier, the SMF network element identifier associated with the session identifier, etc.

[0122] Unified data management (UDM) network element: Unified data management consists of two parts, one is called the application front end (FE), and the other is called the user data repository (UDR). FE can access the subscription user information stored in UDR, and supports authentication credit processing, user identity processing, access authorization, subscription management, short message management, etc. UDR is a user subscription data storage server that provides subscription data storage services.

[0123] Session management function (SMF) network element: responsible for user plane network element selection, user plane network element redirection, Internet protocol (IP) address allocation, data transmission channel establishment, modification and release, and QoS control. SMF network elements can cache data packets.

[0124] Policy control function (PCF) network element: mainly supports providing a unified policy framework to control network behavior, provides policy rules to control layer devices and terminal devices to provide policy information, and is responsible for obtaining user contract information related to policy decisions.

[0125] Authentication server function (AUSF) network element: mainly provides authentication and authorization functions.

[0126] In addition, the system architecture also includes a data network (DN), which is a network composed of application functions and provides application data servers to terminal devices.

[0127] To simplify the drawing, the unstructured data storage network function (UDSF), structured data storage network function (SDSF) and NF repository function (NRF) in the core network are not shown.

[0128] Figure 1A-Figure 1C The naming of the various members in the system architecture shown (such as 5G capable UE, 5G RG, W-5G AN, etc.) may change in future communication standards, which does not affect the applicability of the technical solution provided in this application.

[0129] Figure 1A-Figure 1C The system architecture shown is only for more clearly illustrating the technical solution of the present application and does not constitute a limitation of the present application. A person skilled in the art will appreciate that with the evolution of network architecture and the emergence of new business scenarios, the technical solution provided by the present application is also applicable to similar technical problems.

[0130] The present application provides a network access method, which can enable user equipment (UE) to access 5GC through a home gateway, so that 5GC supports more access methods and improves the integration of fixed and mobile networks.

[0131] In the scenario where the UE accesses the core network through a home gateway, the UE can Figure 1A-Figure 1C In the system architecture shown in the figure, the 5GC capable UE and the home gateway can be Figure 1A-Figure 1C 5G RG in the system architecture shown.

[0132] The main inventive principles of this application may include: determining the following two issues based on the contract data of 5G RG: 1) determining whether the home gateway allows UE access. 2) when 5G RG allows UE access, determining the UE access model (including contracted user access and non-contracted user access). Contracted user access refers to family members accessing 5GC through 5G RG, and non-contracted user access refers to non-family members (such as guest users or strangers) accessing 5GC through 5G RG.

[0133] In this application, the subscription data of the 5G RG may indicate which users the 5G RG has subscribed to. The subscription data of the 5G RG may indicate which users the 5G RG allows to access.

[0134] Specifically, the subscription data of 5G RG may include the following information:

[0135] 1) Subscribed user list: that is, the identification information of the user equipment of the subscribed users of the 5G RG. The identification information of the user equipment in the subscribed user list indicates that the user equipment is a subscribed user, that is, a family member. The identification information of the user equipment can be at least one of the permanent identification information of the UE or the international ISDN / PSTN number (Mobile Subscriber International ISDN / PSTN number, MSISDN) of the mobile subscribed user of the UE. Here, ISDN is the abbreviation of Integrated Service Digital Network, and PSTN is the abbreviation of Public Switched Telephone Network.

[0136] 2) Indication information of the access type of the 5G RG. The access type of the 5G RG may include an open type, a closed type / private type. The closed type / private type indicates that the 5G RG only allows access by contracted users and does not allow access by non-contracted users. The open type indicates that the 5G RG allows access by both contracted users and non-contracted users.

[0137] Among them, the subscription user list can be used by the network side to determine the subscription type of the UE (subscription user or non-subscription user), thereby determining the access model of the UE, that is, whether it is subscription user access or non-subscription user access.

[0138] Among them, the access type of 5G RG can be used by the network side to determine whether the UE is allowed to access the 5G RG. If the access type of 5G RG is open, it means that the UE is allowed to access the 5G RG. If the access type of 5G RG is closed / private, it is also necessary to determine whether the UE is allowed to access the 5G RG in combination with the subscribed user list. If the UE's identification information belongs to the subscribed user list, the UE is allowed to access the 5G RG, otherwise, the UE is not allowed to access the 5G RG.

[0139] It should be understood that if the identification information of the UE connected to the 5G RG belongs to the list of subscribed users, the network side can determine that the UE is allowed to access the 5G RG. That is, the subscribed user is allowed to access the 5G RG, regardless of whether the access type of the 5G RG is open or closed / private.

[0140] Not limited to 1) and 2), the content of the subscription data of 5G RG can also be implemented in other forms. Please refer to the subsequent embodiments for details, which will not be described here.

[0141] In the present application, the indication information of the contract type may be terminal device classification information, and the terminal device classification information may be terminal device classification list information, or terminal device classification indication information. Specifically, the terminal device classification list information includes at least one terminal device identifier, and the terminal devices belong to the same terminal device classification. For example, the terminal device classification list may be a list of contracted terminal devices or a list of uncontracted terminal devices. The indication information of the terminal device classification may be an identifier of the terminal device classification. For example, the indication information of the terminal device classification may be the indication information of the contracted terminal device or the indication information of the uncontracted terminal device. In this way, the core network device may determine whether the terminal device is allowed to access or perform policy control (such as QoS policy control or home gateway local policy control) based on the classification of the terminal device. Specifically, if the identification information of the terminal device belongs to the contracted terminal device classification list, the remote device is allowed to access; if the identification information of the terminal device does not belong to the contracted terminal device classification list, the remote device is not allowed to access.

[0142] In this application, 5GC can enforce different host policies (Host policy) or guest policies (Guest policy) on UE, such as different QoS controls, permission to use specific resources (such as printers), or being allowed to access the Internet. Host policies are provided to UEs of subscribers belonging to 5G RG, such as user devices of family members. Guest policies are provided to UEs of subscribers not belonging to 5G RG, such as user devices of guests.

[0143] It is understandable that the network side distinguishes different access models of UE to facilitate subsequent different service controls, such as different QoS controls. Especially when network resources are limited, the network side can give priority to access of contracted users and restrict access of non-contracted users. Regarding the differentiated service management policies (such as host policies and guest policies) implemented by 5GC on UE, this application does not limit it, and it can be determined according to the application scenarios supported by 5G or NR.

[0144] The network access method provided by the present application is described in detail below through embodiments. Subsequent embodiments will involve UDM registered by UE and UDM network elements registered by 5G RG, which may be the same UDM network element or different UDM network elements. When the UE and 5G RG belong to different network operators respectively, the UDM network elements registered by the UE and 5G RG are different UDM network elements. When the UE and 5G RG belong to the same network operator, the UDM network elements registered by the UE and 5G RG may be the same UDM network element or different UDM network elements. Similarly, the AMF network element serving the UE and the AMF network element serving the 5G RG that will be involved in subsequent embodiments may be the same AMF network element or different AMF network elements. In the subsequent content, the UDM network element is simply referred to as UDM, and the AMF network element is simply referred to as AMF.

[0145] For the purpose of distinction, in the subsequent embodiments, the UDM registered by the 5G RG is referred to as UDM1, and the UDM registered by the UE is referred to as UDM2. Similarly, the AMF serving the 5G RG is referred to as AMF1, and the AMF serving the UE is referred to as AMF2.

[0146] (I) Embodiment 1

[0147] In this embodiment, the UDM is responsible for determining the access model of the UE (including access by a subscribed user and access by a non-subscribed user), and determining whether the home gateway allows the UE to access. Figure 2 As shown, the network access method provided in the first embodiment may include:

[0148] (1) Phase 1: The UE initiates an access request. This may include:

[0149] S101, the UE establishes a connection with the 5G RG, such as establishing a connection through a WLAN interface. Optionally, the W-5G AN device to which the 5G RG or 5GRG accesses may allocate an IP address to the UE.

[0150] Before S101, 5G RG can register with 5GC, and the core network element registered by 5G RG is AMF1. For the process of 5G RG registering with 5GC, please refer to the registration process defined by the 3gpp standard protocol, which will not be repeated here.

[0151] S103-S105, UE establishes a connection with the W-5G AN device.

[0152] This application does not limit the way in which the UE establishes a connection with the W-5G AN device.

[0153] For example, the UE can establish a connection with the W-5G AN device through an IKEv2 message. As shown in S103-S105, the UE sends an IKE security connection initialization (IKE_SA_INIT) message to the W-5G AN device, and then the W-5G AN device sends an IKE_SA_INIT reply message. Then, the UE sends an authentication request (IKE_AUTH request) message to the W-5G AN device. Here, IKE represents the Internet Key Exchange protocol.

[0154] For another example, after the UE establishes a connection with the 5G-RG, the UE can exchange Extensible Authentication Protocol (EAP) messages with the 5G-RG and the W-5GAN to establish a connection between the W-5G AN devices. The EAP message may include an EAP-request / response message, an EAP-request / identity message, or an EAP-response / identity message, or an EAP-Request / 5G start message, or an EAP-Response / 5G-NAS message, etc. The UE sends the EAP message to the W-5GAN, which carries an AN parameter (AN-parameter) and a non-access stratum (NAS) message. The NAS message is a registration request message, a mobile registration update request message, a periodic location update request message, or a service request message, etc.

[0155] S106, the UE may send a request message to the W-5G AN device based on the connection established between the UE and the W-5G AN device. The request message may be a NAS message. The request message may be carried in an EAP message and sent to the W-5G AN, see S103-105 for details. The request message may include the identification information of the UE for requesting access to the core network (5GC). The W-5G AN device may forward the NAS message to AMF2, for details, refer to S109.

[0156] (2) The second stage: The network side obtains the identification information and contract data of the 5G RG. Specifically, it may include:

[0157] S107, the 5G RG sends the temporary identification information of the 5G RG to the W-5G AN device.

[0158] The temporary identification information of 5G RG can be used to index the context of 5G RG on the core network side. The temporary identification of 5G RG may include a globally unique temporary identifier (GUTI), that is, a temporary identifier allocated to 5G RG by the network side (5GC). This application does not limit how 5G RG sends the temporary identification information of 5G RG. For example, 5G RG sends a point-to-point message over Ethernet (PPPoE) or other control plane message, which may carry the temporary identification information of 5G RG. Optionally, the message may also carry the IP address of the UE.

[0159] Optionally, the request message sent by the UE to the W-5G AN device in S106 may also carry the temporary identification information of the 5G RG, and the temporary identification information of the 5G RG may be obtained by the UE. As shown in S102, after establishing a connection with the 5G RG, the UE can query and obtain the temporary identification information of the 5G RG through the Access Network Query Protocol (ANQP). Specifically, the UE may receive an ANQP message or EAP message sent by the 5G RG, which contains the temporary identification of the 5G RG. Alternatively, the UE can obtain the temporary identification information of the 5G-RG through an EAP message. Specifically, the 5G-RG carries the temporary identification of the 5G-RG in the EAP message sent to the UE. The EAP message may be an EAP-Request / Identity message or an EAP-request / 5G-start message.

[0160] S108, the W-5G AN device can select AMF2 for the UE. Specifically, the W-5G AN device can select AMF2 based on the slice selection information or the UE identification information or the AMF identification information. When based on the slice selection information, the message sent by the UE to the W-5GAN contains the slice information requested by the UE. Different AMFs on the network side are responsible for different slices, so the W-5GAN can select the AMF2 responsible for the slice based on the slice information. Alternatively, the UE sends the UE identification information to the W-5GAN, and the above UE identification information contains the AMF identification, and the W-5GAN selects the AMF2 corresponding to the AMF identification. Alternatively, the UE directly sends the AMF identification information to the W-5GAN, and the W-5GAN selects the AMF2 corresponding to the AMF identification.

[0161] S109, the W-5G AN device may send a request message to AMF2, which may include the identification information of the UE and the temporary identification information of the 5G RG, for the UE to request access to the core network. The request message may be an N2 message, where N2 is the reference point between the W-5G AN device and the AMF. Optionally, the W-5G AN device may carry the NAS message (see S106) sent by the UE in the N2 message, so that the W-5G AN device may forward the NAS message to AMF2, for the UE to request access to the core network from AMF2.

[0162] S110-S111, AMF2 obtains the permanent identification information of 5G RG based on the temporary identification information of 5G RG. The permanent identification information of 5G RG is used to subsequently obtain the contract data of 5G RG.

[0163] From the above steps, it can be seen that AMF2 can first obtain the temporary identification information of 5G RG in the following way:

[0164] Method 1: AMF2 obtains the temporary identification information of 5G RG from the NAS signaling sent by the UE.

[0165] Specifically, the UE obtains the temporary identification information of the 5G RG (refer to S102), and then carries the temporary identification information of the 5G RG through a NAS message (forwarded by the W-5GAN device) and sends it to AMF2.

[0166] Mode 2: AMF2 obtains temporary identification information of 5G RG from W-5G AN device. The temporary identification information may be sent by 5GRG to W-5G AN device, and details may refer to S107.

[0167] After obtaining the temporary identification information of the 5G RG, AMF2 can obtain the permanent identification information of the 5G RG from the context of the 5G RG based on the temporary identification information.

[0168] In the case where AMF1 and AMF2 are not the same AMF, as shown in S110-S111, the context of 5G RG is stored on AMF1, and AMF2 can find the AMF1 serving 5G RG based on the temporary identification information of 5G RG, and send a request message to AMF1. Optionally, the request message may also include a SUPI request indication, indicating a request to obtain the permanent identification information of 5G RG. Correspondingly, AMF1 can search for the context of 5G RG based on the temporary identification information of 5G RG, obtain the permanent identification information of 5G RG from the context, and send the permanent identification information to AMF2. The request message carries the temporary identification information of 5G RG. Optionally, the request message may also carry an indication of requesting permanent identification information. The permanent identification information may be a subscriber permanent identifier (SUPI).

[0169] It should be understood that when AMF1 and AMF2 are the same AMF, the interaction process shown in S110-S111 is no longer required, and the AMF can directly obtain the permanent identification information of the 5G RG from the locally stored context of the 5G RG based on the temporary identification information of the 5G RG.

[0170] S112, AMF2 can complete the authentication of the UE based on the authentication process. Specifically, AMF2 finds out the UDM2 responsible for storing the UE's contract data based on the UE's identification information. Then, UDM2 and AUSF complete the UE's authentication process based on the authentication vector in the UE's contract data. The authentication process can be specifically referred to the relevant protocols in the 3gpp standard, which will not be repeated here.

[0171] S113, AMF2 finds out UDM1 responsible for storing the subscription data of 5G RG based on the permanent identification information of 5G RG, and sends a request message to UDM1, which may include the identification information of UE and the permanent identification information of 5G RG. Optionally, the request message may also carry an access request indication, indicating that the UE represented by the identification information of the UE requests to access the core network using the 5G RG represented by the 5G RGSUPI. Optionally, the request message may also carry the identification information of AMF2, so that UDM1 can store the identification information of AMF2, which can be used to notify AMF2 to update the subscription type of UE when the subscription data of 5G RG is updated subsequently. Accordingly, UDM1 receives the request message sent by AMF2.

[0172] (3) The third stage: The core network determines the UE access model based on the subscription data of the 5G RG. Specifically, it may include:

[0173] S114-S115, after receiving the request message sent by AMF2, UDM1 can determine the subscription data of 5G RG based on the permanent identification information of 5G RG. Then, UDM1 can determine the subscription type of UE based on the subscription data of 5G RG. UDM1 can also determine whether UE is allowed to access 5G RG based on the subscription data of 5G RG.

[0174] The subscription data of 5G RG may include the following information:

[0175] 1) Subscribed user list: identification information of user equipment of the subscribed user of the 5G RG. The identification information of the user equipment in the subscribed user list indicates that the user equipment is a subscribed user, that is, a family member.

[0176] 2) Indication information of the access type of the 5G RG. The access type of the 5G RG may include an open type and a closed type / private type. The closed type / private type indicates that the 5G RG only allows access by contracted users and does not allow access by non-contracted users. The open type indicates that the 5G RG allows access not only by contracted users but also by non-contracted users. In other words, the access type can be used to indicate whether the 5G RG allows access by non-contracted users.

[0177] Specifically, UDM1 can determine the access model of the UE based on the access model of the subscribed user list. If the identification information of the UE belongs to the identification information of the user equipment of the subscribed user in the subscribed user list, UDM1 can determine that the UE is a subscribed user of the 5GRG.

[0178] Specifically, UDM1 can determine whether the UE is allowed to access the 5G RG in the following ways:

[0179] 1) If the UE's identification information belongs to the above-mentioned subscribed user list (i.e., the identification information of the user equipment of the subscribed user of the 5G RG), UDM1 can determine that the UE is allowed to access the 5G RG, regardless of whether the access type of the 5G RG is an open type or a closed type / private type.

[0180] 2) If the UE's identification information belongs to the above-mentioned subscribed user list (i.e., the identification information of the user equipment of the subscribed user of the 5G RG), but the access type of the 5G RG indicates that the 5G RG allows non-subscribed users to access (i.e., the access type is an open type), then UDM1 can determine that the UE is allowed to access the 5G RG.

[0181] 3) If the UE's identification information does not belong to the above-mentioned subscribed user list (i.e., the identification information of the user equipment of the subscribed user of the 5G RG), and the access type of the 5G RG indicates that the 5G RG does not allow non-subscribed users to access (i.e., the access type is a private type), then UDM1 can determine that the UE is not allowed to access the 5G RG.

[0182] The content of the subscription data of the 5G RG can be implemented in other forms as long as it can indicate which subscribers the 5G RG has and which users the 5G RG allows to access. For example, the subscription data may include a mapping table, which contains identification information of multiple UEs and indication information of the subscription types corresponding to the identification information of the multiple UEs, wherein the identification information of the multiple UEs may include identification information of UEs of subscribers and identification information of UEs of non-subscribers. In this way, UDM1 can find out the subscription type corresponding to the specific UE from the mapping table according to the identification information of the specific UE.

[0183] S116, UDM1 may send a response message to AMF2. The response message may include indication information of the subscription type of the UE. Accordingly, AMF2 may receive the response message sent by UDM1 and determine the service management policy (such as QoS control) of the UE according to the subscription type of the UE. In this way, the network side can distinguish different access models of the UE to facilitate subsequent different service controls.

[0184] Optionally, under the condition that the UE is a subscribed user, AMF2 can also determine that the UE is allowed to access the 5G RG.

[0185] Specifically, the response message may also include access indication information, which indicates whether the UE is allowed to access the 5G RG. When the UE is not allowed to access, the access indication information is an access rejection indication; when the UE is allowed to access, the access indication information is an access permission indication. Optionally, for the UE allowed to access, AMF2 may store the subscription type of the UE in the context of the UE.

[0186] In some optional embodiments, UDM1 may also send the subscription data of the 5G RG to AMF2, and AMF2 determines the subscription type of the UE and whether the UE is allowed to access the 5G RG. Specifically, the implementation method of AMF2 determining the subscription type of the UE and whether the UE is allowed to access the 5G RG may be the same as that of UDM1, and specific reference may be made to S114-S115, which will not be repeated here.

[0187] In some optional embodiments, UDM1 may also send the subscribed user list to AMF2 after determining that the UE is allowed to access the 5G RG, so that AMF2 can determine the access model of the UE accessing the 5G RG based on the subscribed user list, and adopt corresponding service management strategies, such as QoS control.

[0188] S117-S118, AMF2 completes the UE access process based on the existing registration process or mobile registration update process or periodic registration update process, such as allowing the access process or rejecting the access process. Regarding the existing registration process or mobile registration update process or periodic registration update process, please refer to the relevant protocols in the 3gpp standard, which will not be repeated here.

[0189] Optionally, AMF2 may send access indication information to the W-5G AN device or 5G RG, and the access indication information is used to indicate whether the UE is allowed to access the 5G RG. Specifically, the indication information may be a security key, so that the W-5GAN can determine that the UE's authentication is successful based on the receipt of the security key, and thus determine that the UE is allowed to access. Alternatively, the indication information may be an EAP-Success message, so that the 5G-RG can determine that the UE's authentication is successful based on the receipt of the EAP-success message, and thus determine that the UE is allowed to access. Optionally, AMF2 may also send indication information of the UE's subscription type and / or indication information of the UE's service management policy (such as QoS control, or local resource access rights, etc.) to the W-5G AN device or 5G RG or UE. Specifically, the above-mentioned access indication information, or / and the indication information of the UE's subscription type and / or the UE's service management policy are sent by AMF2 to the W-5GAN via an N2 interface message, or are sent by AMF2 to the 5G-RG or UE via a NAS (Non-Access-Stratum) message.

[0190] Optionally, after receiving the access indication information, the indication information of the subscription type of the UE and / or the indication information of the service management policy of the UE, the W-5G AN device may send the access indication information, the indication information of the subscription type of the UE and / or the indication information of the service management policy of the UE to the 5G RG or the UE. Specifically, the indication information may be a security key, so that the W-5GAN can determine that the authentication of the UE is successful based on the receipt of the security key, and thus determine that the UE is allowed to access. Alternatively, the indication information may be an EAP-Success message, so that the 5G-RG or the UE can determine that the authentication of the UE is successful based on the receipt of the EAP-success message, and thus determine that the UE is allowed to access. Alternatively, the indication information may be a NAS success message, so that the UE can determine that the UE is allowed to access based on the NAS success message. Specifically, the access indication information, or / and the indication information of the subscription type of the UE and / or the service management policy of the UE are sent by the W-5GAN to the 5G-RG or the UE through an access side message. The access side message may be a PPPoE message or an EAP message or other fixed network access side message.

[0191] Optionally, after receiving access indication information, indication information of the UE's subscription type and / or indication information of the UE's service management policy, the 5G RG may send access indication information, indication information of the UE's subscription type and / or indication information of the UE's service management policy to the UE. Specifically, the indication information may be an EAP-Success message, so that the UE can determine that the UE's authentication is successful based on the receipt of the EAP-success message, and thus determine that the UE is allowed to access. Alternatively, the indication information may be a NAS success message, so that the UE can determine that the UE is allowed to access based on the NAS success message. Specifically, the access indication information, or / and the indication information of the UE's subscription type and / or the UE's service management policy are sent to the UE by the 5G-RG via an air interface side message. The air interface side message may be a PC5 interface message, an EAP message, a WLAN interface message, or a Bluetooth interface message, etc.

[0192] (4) The fourth stage: The contract data of 5G RG is updated. Specifically, it may include:

[0193] S119, the subscription data of the 5G RG stored in UDM1 is updated. For example, the access type of the 5G RG is changed from an open type to a private type, or the subscription user list is updated.

[0194] Optionally, UDM1 can redetermine the UE's subscription type based on the updated subscription data of the 5G RG, and redetermine whether the UE is allowed to access the 5G RG.

[0195] Optionally, UDM1 may also send the updated subscription data of the 5G RG to AMF2, and AMF2 may re-determine the subscription type of the UE and whether the UE is allowed to access the 5G RG based on the updated subscription data of the 5G RG.

[0196] S120: When the subscription data of 5G RG is updated, UDM1 may send an access update message to AMF2 according to the identification information of AMF2.

[0197] Specifically, the access update message is implemented as follows:

[0198] 1) If the access type of the 5G RG changes from an open type to a private type, and the subscription type of the UE is a non-subscribed user, the access update message may include an access rejection indication.

[0199] 2) If the updated 5G RG's subscribed user list indicates that the UE's subscription has changed, the access update message may include an indication of the UE's updated subscription type to notify AMF2 to adjust the UE's access model and the UE's service management policy.

[0200] 3) The access update message may include at least one item in the updated access type of the 5G RG and the updated subscribed user list. AMF2 determines the subscription type of the UE and whether the UE is allowed to access the 5G RG based on the updated access type of the 5G RG and / or the updated subscribed user list.

[0201] S121, AMF2 sends a notification message to the UE. The notification message can be used to notify the UE of the changed subscription type of the UE. Under the condition that the UE can no longer use the 5G RG to access the core network, the notification message can carry a reselection indication, which is used to notify the UE to reselect the 5G RG for access.

[0202] S122, optionally, if a reselection indication sent by AMF2 is received, the UE may release the connection with the source 5G RG and select another 5G RG to access the 5GC.

[0203] pass Figure 2 In the first embodiment shown, UDM can distinguish different access models of UE based on the subscription data of 5G RG to facilitate subsequent different service controls, such as different QoS controls. Especially when network resources are limited, the network side can give priority to access of subscribed users and restrict access of non-subscribed users. In this way, 5GC can support more access methods and improve the integration of fixed and mobile networks.

[0204] (II) Embodiment 2

[0205] The main difference between Example 2 and Example 1 is that the way in which AMF2 obtains the identification information of 5G RG is different.

[0206] like Figure 3 As shown, the network access method provided in Embodiment 2 may include:

[0207] (1) Phase 1: UE initiates access request.

[0208] S201, the UE establishes a connection with the 5G RG, such as establishing a connection through a WLAN interface. Optionally, the 5G RG or a W-5G AN device to which the 5G RG accesses may allocate an IP address to the UE.

[0209] Before S201, 5G RG can register with 5GC, and the core network element registered by 5G RG is AMF1. For the process of 5G RG registering with 5GC, please refer to the registration process defined by the 3gpp standard protocol, which will not be repeated here.

[0210] S202-S104, UE establishes a connection with the W-5G AN device. For details, please refer to S103-S105 in Example 1, which will not be repeated here.

[0211] S205, the UE may send a request message to the W-5G AN device based on the connection established between the UE and the W-5G AN device. The request message may include the identification information of the UE for requesting access to the core network (5GC). The request message may be a NAS message. The W-5G AN device may forward the NAS message to AMF1, and specific reference may be made to S207.

[0212] (2) The second stage: The network side obtains the identification information and contract data of the 5G RG. Specifically, it may include:

[0213] S206-S207, the W-5G AN device identifies the 5G RG, obtains temporary identification information such as the line ID of the 5G RG, or the 5G RG GUTI or the N2 interface 5G RG temporary identification. In addition, the W-5GAN determines the 5G RG context, obtains the AMF1 connected to the 5G RG from the 5G RG context, and sends a request message to AMF1. The request message may include the identification information of the UE and the temporary identification information of the 5G RG. The temporary identification information of the above-mentioned 5G RG includes at least one of the line ID of the 5G RG, or the 5G RG GUTI, or the N2 interface 5G RG temporary identification. The request message may be an N2 message, and N2 is the reference point between the W-5GAN device and the AMF. Optionally, the W-5G AN device may carry the NAS message sent by the UE (refer to S205) in the N2 message, so that the W-5G AN device can forward the NAS message to AMF2 for the UE to request AMF2 to access the core network.

[0214] Correspondingly, AMF1 receives the request message sent by the W-5G AN device, indexes the 5G RG context based on the temporary identification information of the 5G RG, and obtains the permanent identification information of the 5G RG from the context of the 5G RG.

[0215] Specifically, W-5GAN's solutions for identifying 5G RG include but are not limited to the following:

[0216] 1) W-5GAN identifies the 5G RG based on the local IP address of the UE, that is, identifies which 5G RG allocates the IP address space to which the above IP address belongs, thereby determining the 5G RG.

[0217] 2) The IP address of the UE is allocated by the W-5G AN device based on the DHCP process. During the IP address allocation process, the W-5G AN device can obtain the line ID of the 5G RG connection from the DHCP message. The W-5G AN device can identify the 5G RG based on the correspondence between the line ID and the 5G RG.

[0218] Optionally, the W-5G AN device can also identify the 5G RG based on the virtual local area network (VLAN) identifier of the 5G RG or the current access point identifier of the UE.

[0219] S208, AMF1 may select AMF2 for the UE. Specifically, AMF1 may select AMF2 based on the slice selection information or the identification information of the UE.

[0220] S209, AMF1 sends a notification message to AMF2, which may include the identification information of the UE and the permanent identification information of the 5G RG. The notification message may be an N1 notification message (N1messageNotify), where N1 is the reference point between the UE and the AMF. Optionally, AMF1 may carry the NAS message sent by the UE (see S205) in the N1 notification message.

[0221] Correspondingly, AMF2 can receive the notification message sent by AMF2 and obtain the permanent identification information of the 5G RG carried therein.

[0222] The subsequent process (S210-S220) is the same as S112-S122 in the first embodiment, and will not be repeated here.

[0223] (III) Embodiment 3

[0224] In this embodiment, AMF1 is responsible for determining the access model of the UE (including contracted user access and non-contracted user access) and determining whether the home gateway allows the UE to access. Unlike the first and second embodiments, this embodiment does not require AMF2 to interact with UDM1 to determine the contract data of the 5G RG.

[0225] like Figure 4 As shown, the network access method provided in Embodiment 3 may include:

[0226] S301-S306: UE initiates an access request.

[0227] For details, please refer to the first stage in Example 1, which will not be described again here.

[0228] S307-S309, AMF2 obtains temporary identification information of 5G RG. This is the same as S107-S109 in Embodiment 1 and will not be described again here.

[0229] S310, AMF2 can find AMF1 based on the temporary identification information of the 5G RG and send a request message to AMF1. The request message may include the identification information of the UE and the temporary identification information of the 5G RG. Optionally, the request message may also include an access request indication, indicating that the UE represented by the identification information of the UE requests to access the core network using the 5G RG represented by the temporary identification information of the 5G RG.

[0230] S311-S313, AMF1 can search for the context of 5G RG based on the temporary identification information of 5G RG. The context of the 5G RG contains the subscription data of the 5G RG obtained from UDM1. Then, AMF1 can determine the subscription type of the UE and whether the UE is allowed to access the 5G RG based on the subscription data of the 5G RG. Specifically, the implementation method of AMF1 determining the subscription type of the UE and whether the UE is allowed to access the 5G RG based on the subscription data of the 5G RG is the same as the method adopted by UDM in Example 1, which will not be repeated here.

[0231] After determining the subscription type of the UE and whether the UE is allowed to access the 5G RG, AMF1 can send a response message to AMF2. The response message may include indication information of the subscription type of the UE. Accordingly, AMF2 can receive the response message sent by AMF1 and determine the service management policy (such as QoS control) of the UE according to the subscription type of the UE. In this way, the network side can distinguish different access models of the UE to facilitate subsequent different service controls.

[0232] Optionally, under the condition that the UE is a subscribed user, AMF2 can also determine that the UE is allowed to access the 5G RG.

[0233] Specifically, the response message may also include access indication information, which indicates whether the UE is allowed to access the 5G RG. When the UE is not allowed to access, the access indication information is an access rejection indication; when the UE is allowed to access, the access indication information is an access permission indication. Optionally, for the UE allowed to access, AMF2 may store the subscription type of the UE in the context of the UE.

[0234] S314, optionally, AMF 1 can store the identification information of AMF2, which can be used to notify AMF2 to update the subscription type of the UE when the subscription data of the subsequent 5G RG is updated. AMF1 can also store the identification information of the UE, which can be used to determine whether the subscription data of the UE has changed. If the subscription type of the UE changes from a subscribed user to a non-subscribed user, the UE needs to be notified in a targeted manner.

[0235] S315, AMF2 can complete the authentication of the UE based on the authentication process. For the authentication process, please refer to the relevant 3gpp protocols, which will not be repeated here.

[0236] S316-S317, AMF2 completes the UE access process based on the existing registration process or mobile registration update process or periodic registration update process, such as allowing the access process or rejecting the access process. For the existing registration process or mobile registration update process or periodic registration update process, please refer to the relevant protocols in the 3gpp standard, which will not be repeated here.

[0237] Optionally, AMF2 may send access indication information to the W-5G AN device or 5G RG, and the access indication information may be used to indicate whether the UE is allowed to access the 5G RG, as described above in S117-S118. Optionally, AMF2 may also send indication information of the UE's subscription type and / or the UE's service management policy (such as QoS control, or local resource access rights, etc.) to the W-5G AN device or 5G RG or UE. Specifically, the access indication information and / or the indication information of the UE's subscription type and / or the UE's service management policy are sent by AMF2 to the W-5GAN via an N2 interface message, or by AMF2 to the 5G-RG or UE via a NAS (Non-Access-Stratum) message.

[0238] Optionally, after receiving the access indication information, the indication information of the UE's subscription type and / or the indication information of the UE's service management policy, the W-5G AN device may send the access indication information, the indication information of the UE's subscription type and / or the indication information of the UE's service management policy to the 5G RG or UE. Specifically, the access indication information and / or the indication information of the UE's subscription type and / or the UE's service management policy are sent by the W-5GAN to the 5G-RG or UE via an access side message. The above-mentioned access side messages include PPPoE messages or EAP (Extensible Authentication Protocol) messages or other fixed network access side messages.

[0239] Optionally, after receiving access indication information, indication information of the UE's subscription type and / or indication information of the UE's service management policy, the 5G RG may send access indication information, indication information of the UE's subscription type and / or indication information of the UE's service management policy to the UE. Specifically, the access indication information and / or indication information of the UE's subscription type and / or the UE's service management policy are sent by the 5G-RG to the UE via an air interface side message. The above-mentioned air interface side messages include PC5 interface messages, EAP messages, WLAN interface messages, Bluetooth interface messages, etc.

[0240] S318, the subscription data of the 5G RG stored in UDM1 is updated. For example, the access type of the 5G RG is changed from an open type to a private type, or the subscription user list is updated.

[0241] S319, UDM1 sends a subscription data update message to AMF1, which may carry the updated subscription data of the 5G RG.

[0242] S320-S321, accordingly, AMF1 receives the subscription data update message sent by UDM1, and determines the subscription type of the UE and whether the UE is allowed to access the 5G RG based on the updated subscription data of the 5G RG. Then, AMF1 can send an access update message to AMF2 according to the identification information of AMF2. The access update message implementation can be specifically referred to the access update message mentioned in Example 1, which will not be repeated here.

[0243] S322, AMF2 sends a notification message to the UE. The notification message can be used to notify AMF2 of the changed subscription type of the UE. Under the condition that the UE can no longer use the 5G RG to access the core network, the notification message can carry a reselection indication, which is used to notify the UE to reselect the 5G RG for access.

[0244] S323, optionally, if a reselection indication is received from AMF2, the UE may release the connection with the source 5G RG and select another 5G RG to access the 5GC.

[0245] pass Figure 4 In the first embodiment shown, AMF can distinguish different access models of UE based on the subscription data of 5G RG to facilitate subsequent different service controls, such as different QoS controls. Especially when network resources are limited, the network side can give priority to access of subscribed users and restrict access of non-subscribed users. In this way, 5GC can support more access methods and improve the integration of fixed and mobile networks.

[0246] Not limited to Figure 4 As shown, in Example 3, AMF2 can also use the method described in Example 2 to obtain the temporary identification information of 5GRG.

[0247] In addition, the present application also provides another network access method. In this method, whether the UE can use the current access point to access the 5GC and the subscription type of the UE can be determined based on the subscription data of the UE. Figure 5 As shown, the method may include:

[0248] (1) Phase 1: The UE initiates an access request. This may include:

[0249] S401, the UE establishes a connection with the 5G RG, such as establishing a connection through a WLAN interface. Optionally, the 5G RG or a W-5G AN device to which the 5G RG accesses may allocate an IP address to the UE.

[0250] Before S401, 5G RG can register with 5GC, and the core network element registered by 5G RG is AMF1. For the process of 5G RG registering with 5GC, please refer to the registration process defined by the 3gpp standard protocol, which will not be repeated here.

[0251] S403-S405, UE establishes a connection with the W-5G AN device. For details, please refer to S103-S105 in the first embodiment, which will not be repeated here.

[0252] S406, the UE may send a request message to the W-5G AN device based on the connection established between the UE and the W-5G AN device. The request message may include the identification information of the UE for requesting access to the core network (5GC). The request message may be a NAS message. The W-5G AN device may forward the NAS message to AMF2, for details, please refer to S409.

[0253] (2) The second stage: The network side obtains the identification information and subscription data of the UE's current access point. Specifically, it may include:

[0254] S407, 5G RG sends the identification information of the UE's current access point to the W-5G AN device. The UE's current access point is the 5G RG to which the UE is currently connected. The identification information of the UE's current access point can be used to index the UE's contract data on the core network side. The access point identifier may include a service set identifier (SSID), a homogeneous extended service set identifier (HESSID), etc. This application does not limit how to obtain the identifier of the UE's current access point. For example, the 5G RG sends a PPPoE message, or other control plane message, which may carry the identification information of the UE's current access point. Optionally, the message may also carry the UE's IP address.

[0255] Optionally, the request message sent by the UE to the W-5G AN device in S406 may also carry the identification information of the UE's current access point, and the identification information of the current access point may be obtained by the UE. As shown in S402, after establishing a connection with the 5G RG, the UE may obtain the identification information of the current access point through an ANQP query. Specifically, the UE may receive an ANQP message or an EAP message sent by the 5G RG, which contains the identification information of the current access point.

[0256] S408, the W-5G AN device may select AMF2 for the UE. Specifically, the W-5G AN device may select AMF2 based on the slice selection information or the identification information of the UE.

[0257] S409, the W-5G AN device may send a request message to AMF2, which may include the identification information of the UE and the identification information of the current access point of the UE, for the UE to request access to the core network. The request message may be an N2 message, where N2 is the reference point between the W-5G AN device and the AMF. Optionally, the W-5G AN device may carry the NAS message (see S406) sent by the UE in the N2 message, so that the W-5G AN device may forward the NAS message to AMF2, for the UE to request access to the core network from AMF2.

[0258] S410, AMF2 sends a request message to UDM2, where the request message may include identification information of the UE and identification information of the current access point of the UE.

[0259] (3) The third stage: The core network determines the UE access model based on the UE's subscription data. Specifically, it may include:

[0260] S411, accordingly, UDM2 receives the request message sent by AMF2. UDM2 can obtain the subscription data of the UE based on the identification information of the current access point contained in the request message. UDM2 can determine the subscription type of the UE based on the subscription data of the UE. UDM2 can also determine whether the UE is allowed to access the current access point based on the subscription data of the UE.

[0261] In the present application, the subscription data of the UE may be used to indicate the access points for which the UE is a subscriber.

[0262] Specifically, the UE subscription data may include the following information:

[0263] 1) Subscribed access point list: contains identification information of at least one access point, indicating that the UE is a subscribed user of the at least one access point. If the identification information of the UE's current access point belongs to the identification information of the at least one access point, it indicates that the UE is a subscribed user of the current access point. It should be understood that if the UE is a subscribed user of the current access point, the UE is allowed to access the current access point.

[0264] 2) Non-contracted access point list: contains identification information of at least one access point, indicating that the UE is a non-contracted user of the at least one access point. If the identification information of the current access point of the UE belongs to the identification information of the at least one access point, it indicates that the UE is a non-contracted user of the current access point.

[0265] In this application, if the identification information of the current access point of the UE does not belong to any of the above lists, it means that the UE is not allowed to connect to the current access point. The access point list (contracted access point list or non-contracted access point list) contains the identification of the access points that the UE can access. When the UE is only allowed to access a few access points, the whitelist method can be used to shorten the list length and save parameter storage space. Here, the whitelist only records the identification information of the access points that the UE can access.

[0266] S412, UDM2 can complete the UE authentication process based on the authentication vector in the UE's subscription data. For the authentication process, please refer to the relevant protocols in the 3gpp standard, which will not be described here.

[0267] S413, UDM2 may send a response message to AMF2. The response message may include indication information of the subscription type of the UE. Accordingly, AMF2 may receive the response message sent by UDM2 and determine the service management policy (such as QoS control) of the UE according to the subscription type of the UE. In this way, the network side can distinguish different access models of the UE to facilitate subsequent different service controls.

[0268] Optionally, under the condition that the UE is a subscribed user, UDM2 can also determine that the UE is allowed to access the 5G RG.

[0269] Specifically, the response message may also include access indication information, which indicates whether the UE is allowed to access the current access point. When the UE is not allowed to access, the access indication information is an access rejection indication; when the UE is allowed to access, the access indication information is an access permission indication. Optionally, for the UE allowed to access, UDM2 may store the subscription type of the UE in the context of the UE.

[0270] In some optional embodiments, UDM2 may also send the above-mentioned contracted access point list and / or the above-mentioned non-contracted access point list to AMF2, and AMF2 determines the contract type of the UE and whether the UE is allowed to access the current access point. Specifically, the implementation method of AMF2 determining the contract type of the UE and whether the UE is allowed to access the current access point may be the same as the method adopted by UDM2, which will not be repeated here.

[0271] S414-S415, AMF2 completes the UE access process based on the existing registration process or mobile registration update process or periodic registration update process, such as allowing the access process or rejecting the access process. Regarding the existing registration process or mobile registration update process or periodic registration update process, please refer to the relevant protocols in the 3gpp standard, which will not be repeated here.

[0272] Optionally, AMF2 may send an indication of the UE's subscription type and / or the UE's service management policy (such as QoS control) to the W-5G AN device or 5G RG. Optionally, AMF2 may also send an access indication to the W-5G AN device or 5G RG, which is used to indicate whether the UE is allowed to access the current access point.

[0273] (4) The fourth stage: the UE's subscription data is updated. Specifically, it may include:

[0274] S416: The subscription data of the UE stored in the UDM2 is updated. For example, the subscription access point list and / or the non-subscription access point list is updated.

[0275] Optionally, UDM2 may redetermine the subscription type of the UE based on the updated subscription data of the UE, and redetermine whether the UE is allowed to access the current access point.

[0276] Optionally, UDM2 may also send the updated UE subscription data to AMF2, and AMF2 may re-determine the UE subscription type and whether the UE is allowed to access the current access point based on the updated UE subscription data.

[0277] S417: Under the condition that the UE's subscription data is updated, UDM2 can send an access update message to AMF2 according to the identification information of AMF2.

[0278] Specifically, the access update message is implemented as follows:

[0279] 1) If the updated signed access point list and / or non-signed access point list indicates that the UE's subscription has changed, the access update message may include an indication of the UE's updated subscription type to notify AMF2 to adjust the UE's access model and the UE's service management policy.

[0280] 2) If the identification information of the current access point does not belong to any item in the updated subscription access point list and the non-subscription access point list, the access update message may include an access rejection indication.

[0281] S418, AMF2 sends a notification message to the UE. The notification message may be used to notify the UE of the changed subscription type of the UE. If the UE can no longer use the current access point to access the core network, the notification message may carry a reselection indication, which is used to notify the UE to reselect an access point for access.

[0282] S419, optionally, if a reselection indication is received from AMF2, the UE may release the connection with the current access point and select another access point to access 5GC.

[0283] pass Figure 5 In the fourth embodiment shown, the core network can distinguish different access models of UE based on the UE's subscription data to facilitate subsequent different service controls, such as different QoS controls. Especially when network resources are limited, the network side can give priority to access of subscribed users and restrict access of non-subscribed users. This enables 5GC to support more access methods and improves the integration of fixed and mobile networks.

[0284] In the aforementioned solution for determining whether the home gateway allows UE access based on the subscription data of 5G RG, the network side can also obtain the identification information of 5G RG in the following way: UE sends a NAS message to the core network, and the NAS message contains 5G-RG identification information. The identification information of the 5G-RG can be sent by 5G-RG to the UE, or it can be sent by 5G-RG to the UE via the W-5G AN device. The above-mentioned 5G RG identification information (i.e., 5G RG ID) includes 5G RG 5G-GUTI, or 5G RGSUCI (Subscription Concealed Identifier encrypted identification), or 5G-RG N2 interface identification, etc.

[0285] like Fig.11 As shown, the specific process of the network side obtaining the identification information of the 5G RG may include:

[0286] S501, UE establishes a layer 2 (L2) connection with 5G-RG.

[0287] S502, the 5G-RG sends an EAP request or an Identity request to the UE. The optional EAP request or Identity request may include identification information of the 5G RG, such as the 5G-RG ID.

[0288] S503, after receiving the EAP request message or Identity request message sent by 5G-RG, the UE replies with an EAP response message / Identity message to 5G-RG.

[0289] S504, 5G-RG sends an authentication, authorization, and accounting (AAA) message, such as an authentication request message, to W-5G AN. The AAA message may carry an EAP message to W-5G AN. Optionally, the AAA message may also carry a 5G-RG ID.

[0290] S505, W-5GAN sends an EAP request / 5G-Start message. The EAP request / 5G-Start message may include a 5G-RG ID. The 5G-RG ID may be received in S504, such as a 5G RG 5G-GUTI, or a 5G RG SUCI (an encrypted identifier of a Subscription Concealed Identifier). The 5G-RG ID may also be other 5G-RG identifiers, such as a 5G-RG N2 interface identifier.

[0291] S506-S507, 5G-RG forwards the EAP request / 5G-Start message to the UE. Optionally, as shown in S506, the 5G-RG can parse the EAP request / 5G-Start message, and if there is no 5G-RG ID in the EAP request / 5G-Start message, the 5G-RG can add the 5G-RG ID in the EAP request / 5G-Start message.

[0292] S508, UE receives EAP-Req / 5G-Sart message, obtains 5G-RG ID from the message, and sends NAS message, which carries 5G-RG ID. The above 5G-RG ID is used by AMF to find 5G RG context information, so as to obtain 5G RG permanent identification (ie 5G RG SUPI).

[0293] Optionally, the NAS message may also carry a Host UE indication. The Host UE indicates that the UE requests to access the core network as a host UE (i.e., a contracted user identity). In this way, the core network can trigger the determination process of the UE access model based on the Host UE indication, and specific reference may be made to the aforementioned embodiments one to three. Optionally, the 5G-RG ID can be used as a Host UE indication, that is, the 5G-RGID indicates that the UE requests to access the core network as a host UE. The AMF determines whether the UE requests to access the core network as a host UE based on the Host UE indication or based on the 5G-RG ID information contained in the above NAS message. The network side determines whether the UE is a host UE based on the above embodiment scheme. If the UE requests access as a host, but the above UE is not a Host UE, the AMF rejects the UE's access request. In addition, the 5G-RG ID can also be used to indicate that the UE accesses the core network through the 5G RG. The AMF determines that the UE accesses the core network through the 5G RG based on the 5G-RG ID information contained in the above NAS message. When the UE accesses the core network through the 5G RG, the AMF determines the device type of the UE, that is, whether the UE is a contracted user device or a non-contracted user device.

[0294] AMF searches for 5G RG context based on 5G RG ID. If the context information of the above 5G RG is not stored on AMF, AMF selects another AMF (target AMF) that stores the 5G RG context based on 5G RG ID. Specifically, AMF sends a request message to the target AMF, and the above request message contains 5G RG ID and permanent identification request indication (such as SUPI requested). The target AMF searches for 5G RG context based on 5G RG ID, and replies with the 5G RG permanent identification to AMF.

[0295] In the aforementioned embodiments 1 to 3, the process executed by AMF can also be executed by SMF, that is, AMF in the aforementioned embodiments 1 to 3 can be replaced by SMF. Alternatively, AMF can also notify SMF of the Host UE indication, specifically: AMF2 can send the Host UE or Guest UE indication to PCF or SMF, and PCF issues QoS policy based on the Host UE or Guest UE indication. If AMF2 sends the Host UE or Guest UE indication to SMF, SMF reports the Host UE or Guest UE indication to PCF, and PCF issues different QoS policies based on the Host / Guest UE indication. For example, for Host UE, PCF assigns high priority parameters in the QoS policy, such as QoS parameters set to resources that are not allowed to be preempted, or that other user resources can be preempted, etc. For Guest UE, PCF assigns low priority parameters in the QoS policy, such as QoS parameters set to resources that are allowed to be preempted, or that other user resources cannot be preempted, etc.

[0296] In addition, when the 5G RG ID is SUCI, AMF2 can search for the UDM storing the 5G RG subscription data based on SUCI. And send a request message to UDM. The above message contains the 5G RG SUCI and the UE identifier. UDM searches for the 5G RG subscription data based on the 5G RG SUCI, and determines the device type of the UE based on the above subscription data, as in the previous embodiment. UDM sends a reply message to AMF2. In addition to the parameters described in the previous embodiment, the above reply message also contains the AMF1 identifier to which the 5G RG is attached, that is, the AMF1 identifier serving the 5G RG. AMF2 stores the 5G RG ID and the AMF1 identifier.

[0297] Before the network side executes the UE access model determination process, the terminal device (UE or 5G RG) also needs to register with the network and obtain the access network side parameters related to the PDU session. The following takes 5G RG as an example to describe the relevant technical solutions (UE involves the same process and is not repeated here). Fig.12 As shown, specifically including:

[0298] S601, 5G-RG registers with AMF1. AMF1 provides services for 5G-RG.

[0299] S602, after W-5GAN learns that 5G-RG authentication is successful (such as W-5GAN obtains an authentication success indication from the N2 interface, which may be a security key Key), W-5GAN may allocate NAS IP address information corresponding to 5G-RG. W-5GAN may also allocate a user plane address corresponding to 5G RG, such as a user plane IP address. Then, W-5GAN may send a message (such as an EAP message) to the 5G-RG, which may carry the NAS IP address information corresponding to 5G-RG. Optionally, the message may also include user plane address information corresponding to 5G RG.

[0300] Among them, the NAS IP address information corresponding to the 5G-RG is used to carry the subsequent NAS messages sent by the 5G-RG. The user plane address information corresponding to the 5G-RG is used to carry the user plane data packets sent by the 5G-RG. When the 5G-RG encapsulates the user plane data packet, an IP header is added, and the destination address in the newly added IP header is set to the user plane IP address corresponding to the 5G-RG.

[0301] Optionally, W-5GAN can allocate a UE IP address to the 5G RG. The message (such as an EAP message) can also carry the UE IP address allocated to the 5G RG.

[0302] S603, 5G-RG sends a request message to W-5G AN, which may be a DHCP discover message or a DHCP request message, etc., for requesting W-5G AN to allocate a UE IP address to 5G-RG. The request message may carry UE identification information, such as the UE's Network Access Identity (NAI), or the UE MAC address, or the UE IP address (which may be obtained from S602).

[0303] Optionally, the request message may carry the NAS IP address corresponding to the 5G-RG and / or the user plane IP address corresponding to the 5G-RG. Optionally, the request message may also carry at least one of a NAS indication or a user plane indication, the NAS indication being used to indicate that the address carried in the message is a NAS IP address, and the user plane indication being used to indicate that the address carried in the message is a user plane IP address.

[0304] S604, W-5GAN allocates a UE IP address to the 5G RG based on the identification information of the 5G RG.

[0305] Specifically, W-5GAN can obtain the identification information of 5G RG from the DHCP message header sent in S603, and search the UE context based on the identification information of 5G RG, and the UE context contains the indication information of successful authentication of 5G RG. W-5GAN allocates the UE IP address to the 5G RG that has been successfully authenticated. If the UE IP address has been allocated to the 5G RG in S602, W-5GAN can allocate the same or different UE IP address in the current step.

[0306] S605, W-5GAN sends a response message (EAP message or DHCP ACK message) to the 5G RG, where the response message carries the UE IP address allocated by W-5GAN to the 5G RG.

[0307] S606, 5G-RG initiates a NAS message, such as a PDU session establishment request message, and uses the UE IP address allocated by W-5GAN to 5G RG as the source address for encapsulating the NAS message, and uses the NAS IP address of the corresponding 5G RG allocated by W-5GAN as the destination address for encapsulating the NAS message.

[0308] In this way, W-5GAN can identify that the IP data packet carries a NAS message based on the NAS IP address in the IP header, and forward the NAS message to AMF through the N2 interface. Then, AMF can process the NAS message and complete the PDU session establishment process of 5G-RG based on the existing process. In this process, AMF sends the identification information of the PDU session (such as PDU session ID) to W-5GAN through the N2 interface, so that W-5GAN can obtain the PDU session ID of the PDU session.

[0309] S607, after 5G-RG receives the PDU session establishment accept message (PDU session establishmentAccept), 5G-RG initiates a request message to W-5GAN, which may be a DHCP request message (DHCPrequest) or a DHCP information message (DHCP information). The request message may carry identification information of the PDU session (such as PDU session ID). The request message is used to request W-5GAN to allocate the W-5GAN IP address corresponding to the PDU session.

[0310] S608, after receiving the request message sent by 5G-RG, W-5GAN can allocate the W-5GAN IP address corresponding to the PDU session based on the PDU session ID in the request message, and store the correspondence between the W-5GAN IP address and the PDU session ID. The W-5GAN IP address corresponding to the PDU session is the address information of the W-5GAN corresponding PDU session.

[0311] Optionally, the W-5GAN IP address corresponding to the PDU session can be used as identification information of the PDU session, and can be used in the user plane to establish a correspondence between the session resources allocated by the W-5GAN for the PDU session and the PDU session.

[0312] S609, W-5GAN sends a response message (such as a DHCP ACK message) to 5G-RG, and the response message may carry the address information of the PDU session corresponding to W-5GAN. Optionally, the response message may also carry the PDU session ID corresponding to the W-5GAN IP address.

[0313] Among them, the address information of the PDU session corresponding to W-5GAN is used as the target IP address of the user plane data packet sent by 5G-RG for the PDU session.

[0314] S610, 5G RG sends a user plane data packet. The specific implementation will be described in detail in the subsequent content.

[0315] From the above steps, it can be seen that the destination address required for the terminal device (5G RG or UE) to send a user plane data packet can include two implementation forms: 1. The user plane address information of the corresponding terminal device (obtained through S602); 2. The address information of the W-5GAN corresponding PDU session (obtained through S607-S608). Among them, the address information of the W-5GAN corresponding PDU session is a more fine-grained address, which can directly indicate which PDU session the user plane data packet is sent to.

[0316] The following introduces these two implementation forms based on the destination address, respectively describing how 5G-RG sends user plane data packets.

[0317] 1) Method 1: The user plane data packet is encapsulated with a Generic Routing Encapsulation (GRE) header, and the GRE header is encapsulated with an IP header. The GRE header can carry QoS flow identification information (QoS flow ID, QFI) / reflective QoS indication (reflective QoS indication, RQI). Among them, the source address in the IP header is the UE IP address, and the destination address in the IP header is the address information of the PDU session corresponding to the W-5GAN.

[0318] After W-5GAN receives the user plane data packet of the PDU session sent by 5G RG, W-5GAN can identify the PDU session based on the address information of the PDU session corresponding to the W-5GAN, and after removing the GRE header and the IP header, use the tunnel corresponding to the identified PDU session to send the user plane data packet of the PDU session.

[0319] The address information of the W-5GAN corresponding PDU session mentioned in this method 1 is obtained through S607-S608.

[0320] 2) Mode 2: The user plane data packet is encapsulated with a GRE header, and the GRE header is encapsulated with an IP header. The GRE header can carry QoS flow identification information (QoS flow ID, QFI) / (reflective QoS indication, RQI). Among them, the GRE header carries the PDU session ID. The source address in the IP header is the UE IP address, and the destination address in the IP header is the user plane address information.

[0321] After W-5GAN receives the user plane data packet sent by 5G RG, W-5GAN can identify the PDU session based on the PDU session ID, and after removing the GRE header and the IP header, send the user plane data packet of the PDU session using the tunnel corresponding to the PDU session ID.

[0322] The user plane address information mentioned in the second method is obtained through S602.

[0323] After the network side executes the UE access model determination process, the core network also needs to issue service management policies for the UE, such as QoS policies or local resource control policies, which will refine how the network side implements different QoS controls and local service controls based on Host UE / Guest UE. Fig.13 , describe the relevant technical solutions.

[0324] S701, through Fig.12The illustrated embodiment registers the 5G RG to AMF2, and after AMF2 determines the access model of the UE based on the aforementioned embodiments one to three, AMF2 may send a first message to the PCF, such as a policy association setup / modify message. The first message may include indication information of the device classification of the UE. Not limited to the Host UE / Guest UE indication information, the indication information of the device classification may also include indication information of the device type, and the present application does not limit the manner in which the device classification is based. The first message may be used to request the PCF to issue a service management policy for the UE, and the service management policy may include at least one of a QoS policy and a local resource control policy.

[0325] Optionally, AMF2 may also send the indication information of the device classification of the UE to SMF, and the SMF sends a first message carrying the indication information of the device classification to the PCF.

[0326] S702, PCF sends a second message to AMF2 or SMF, and the second message may include a service management policy for the UE determined by PCF based on the device classification of the UE. That is, after receiving the first message sent by AMF or SMF, PCF may send a second message to SMF or AMF.

[0327] S703-S707, AMF2 completes the UE registration process. For the UE that has successfully authenticated, W-5GAN allocates a NAS IP address and an optional user plane IP address. For details, please refer to Fig.12 S602 in the embodiment.

[0328] S708, AMF2 sends the indication information of the UE device classification (such as Host UE / Guest UE indication information) and the UE identification information to AMF1. The UE identification information may be the UE MAC address, or the UE 5G GUTI, or the UE SUPI, or at least one of other identification information.

[0329] Optionally, AMF2 may send the identification information of the UE to AMF1. AMF1 may determine the classification of the UE, such as whether the UE is a Host UE or a Guest UE.

[0330] S709, based on the service control policy obtained from PCF in S701-S702, AMF1 can send service management policies for UE, such as QoS policy or local resource control policy, to 5G-RG based on the indication information of UE device classification (such as Host UE / Guest UE indication information). Specifically, AMF1 can send service management policies for UE by sending UE configuration update messages (UE configurationupdate) or NAS notification messages. The UE configuration update message or NAS notification message can carry the identification information of the UE and the indication information of the device classification of the UE.

[0331] Optionally, the local resource control policy may include a local device list, such as a local device MAC address list, or a local device IP address list, etc. The local device may only allow the Host UE to access. The local device may be a local printer or other device.

[0332] Correspondingly, after receiving the UE configuration update message or NAS notification message sent by AMF1, 5G-RG can store the UE identification information and the indication information of the UE device classification (such as Host UE / Guest UE indication information) accordingly. Optionally, 5G-RG can also store the UE identification information and the service policy issued by the network side accordingly.

[0333] In some optional embodiments, 5G-RG can control UE access based on the local resource control policy. The specific process may include: 5G-RG can receive the UE identification information and the indication information of the UE's device classification sent by the AMF, and then obtain the local resource access policy, and finally control the UE's access to local resources according to the indication information of the UE's device classification and the local resource access policy.

[0334] Optionally, 5G-RG can receive the local resource access policy of 5G RG sent by AMF or SMF.

[0335] Optionally, if the AMF does not send a local resource control policy for the UE, the 5G-RG can configure a local resource control policy. The local resource control policy may include a local device MAC address list, or a local device IP address list, etc., where the local device may only allow the Host UE to access. The local device may be a local printer or other device.

[0336] Subsequently, the UE initiates a local service, that is, the UE initiates a request to the 5G-RG, and the request carries the identification information. The 5G-RG can identify the UE based on the identification information, and determine the classification of the UE (such as whether the UE is a Host UE) based on the stored UE identification information and the indication information of the UE's device classification (such as Host UE / Guest UE indication information). Optionally, if the UE is a host UE, a connection can be established between the UE and the local device. Optionally, the 5G-RG can also reply to the UE with the local device MAC address or IP address.

[0337] S710, UE initiates a PDU session to the core network and allocates the corresponding PDU session ID. After the PDU session is successfully established, the UE can send a request message to the W-5GAN to request the W-5GAN IP address corresponding to the PDU session allocated by the W-5GAN. For details, please refer to Fig.12 S607-S609 in the embodiment will not be described in detail here.

[0338] refer to Figure 6 , Figure 6 FIG. 2 shows a terminal 200 provided in some embodiments of the present application. Figure 6 As shown, the terminal 200 may include: an input and output module (including an audio input and output module 218, a key input module 216, and a display 220, etc.), a user interface 202, one or more terminal processors 204, a transmitter 208, a receiver 210, a coupler 212, an antenna 214, and a memory 206. These components may be connected via a bus or other means. Figure 6 Take bus connection as an example.

[0339] The communication interface 201 may be used for the terminal 200 to communicate with other communication devices, such as a base station. Specifically, the base station may be Figure 6The network device 400 shown. The communication interface 201 refers to the interface between the terminal processor 204 and the transceiver system (composed of a transmitter 208 and a receiver 210), such as the X1 interface in LTE. In a specific implementation, the communication interface 201 may include: one or more of the Global System for Mobile Communication (GSM) (2G) communication interface, the Wideband Code Division Multiple Access (WCDMA) (3G) communication interface, and the Long Term Evolution (LTE) (4G) communication interface, etc., and may also be a communication interface of 4.5G, 5G or a future new air interface. Not limited to a wireless communication interface, the terminal 200 may also be configured with a wired communication interface 201, such as a local access network (LAN) interface.

[0340] The antenna 214 can be used to convert electromagnetic energy in the transmission line into electromagnetic waves in free space, or convert electromagnetic waves in free space into electromagnetic energy in the transmission line. The coupler 212 is used to divide the mobile communication signal received by the antenna 214 into multiple paths and distribute them to multiple receivers 210.

[0341] The transmitter 208 can be used to transmit the signal output by the terminal processor 204, for example, modulate the signal into a signal in an authorized frequency band, or modulate the signal into a signal in an unauthorized frequency band. The receiver 210 can be used to receive and process the mobile communication signal received by the antenna 214. For example, the receiver 210 can demodulate the received signal modulated in an unauthorized frequency band, or demodulate the received signal modulated in an authorized frequency band. In some embodiments of the present application, the transmitter 208 and the receiver 210 can be regarded as a wireless modem. In the terminal 200, the number of the transmitter 208 and the receiver 210 can be one or more.

[0342] Apart from Figure 6 In addition to the transmitter 208 and the receiver 210 shown, the terminal 200 may also include other communication components, such as a GPS module, a Bluetooth module, a wireless high-fidelity (Wireless Fidelity, Wi-Fi) module, etc. Not limited to the wireless communication signals described above, the terminal 200 may also support other wireless communication signals, such as satellite signals, shortwave signals, etc. Not limited to wireless communication, the terminal 200 may also be configured with a wired network interface (such as a LAN interface) to support wired communication.

[0343] The input / output module can be used to realize the interaction between the terminal 200 and the user / external environment, and can mainly include an audio input / output module 218, a key input module 216, and a display 220. In a specific implementation, the input / output module can also include: a camera, a touch screen, and a sensor. The input / output modules communicate with the terminal processor 204 through the user interface 202.

[0344] The memory 206 is coupled to the terminal processor 204 and is used to store various software programs and / or multiple groups of instructions. In a specific implementation, the memory 206 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more disk storage devices, flash memory devices or other non-volatile solid-state storage devices. The memory 206 can store an operating system (hereinafter referred to as system), such as an embedded operating system such as ANDROID, IOS, WINDOWS, or LINUX. The memory 206 can also store a network communication program, which can be used to communicate with one or more additional devices, one or more terminal devices, and one or more network devices. The memory 206 can also store a user interface program, which can display the content of the application program vividly through a graphical operation interface, and receive user control operations on the application program through input controls such as menus, dialog boxes, and buttons.

[0345] In some embodiments of the present application, the memory 206 may be used to store an implementation program of the signal transmission method provided by one or more embodiments of the present application on the terminal 200 side. For the implementation of the signal transmission method provided by one or more embodiments of the present application, please refer to the subsequent embodiments.

[0346] The terminal processor 204 can be used to read and execute computer-readable instructions. Specifically, the terminal processor 204 can be used to call a program stored in the memory 206, such as an implementation program of the signal transmission method provided in one or more embodiments of the present application on the terminal 200 side, and execute the instructions contained in the program.

[0347] It is understandable that the terminal 200 may be Figure 2 The terminal 103 in the wireless communication system 100 shown may be implemented as a mobile device, a mobile station, a mobile unit, a wireless unit, a remote unit, a user agent, a mobile client, and the like.

[0348] Need to explain, Figure 6 The terminal 200 shown is only one implementation of the present application. In actual applications, the terminal 200 may also include more or fewer components, which is not limited here.

[0349] refer to Figure 7 , Figure 7 FIG. 3 shows a home gateway 300 provided by some embodiments of the present application. Figure 7 As shown, the home gateway 300 may include: one or more processors 301, a memory 302, a wired home network interface 303, a wireless home network 305 and an Ethernet module 306. These components may be connected via a bus 304 or other means. Figure 7 Take bus connection as an example.

[0350] The Ethernet module 306 realizes the physical connection between the home gateway and the external network, and the user can remotely access and control the home internal network through the Internet. The connection between the home gateway and the Internet can be achieved by wired mode or by mobile wireless communication.

[0351] The wireless home network interface 303 and the wired home network interface 305 are both home network networking methods. Among them, the wired methods are twisted pair, telephone line, power line, etc. The wireless methods are represented by IrDA, Bluetooth, IEEE802.11, Zigbee, UWB, etc. Wireless connection is the most ideal way to realize home network, which can avoid rewiring in the home.

[0352] The memory 302 is coupled to the processor 301 and is used to store various software programs and / or multiple groups of instructions. Specifically, the memory 302 may include FLASH and SDRAM chips, and the FLASH chip may be used to store the embedded operating system in the home gateway, the Common Gateway Interface (CGI) gateway application, the home network server, and the file system required to support various services. The memory 302 may store an operating system, such as uCOS, VxWorks, RTLinux and other embedded operating systems. The memory 302 may also store a network communication program, which may be used to communicate with one or more additional devices, one or more terminal devices, and one or more network devices.

[0353] In some embodiments of the present application, the memory 302 may be used to store the network access method provided by one or more embodiments of the present application, and the network access method provided by one or more embodiments of the present application. Figure 11-13 The implementation procedure of the technical solution provided in the embodiment on the home gateway 300 side. Regarding the network access method provided by one or more embodiments of the present application, and the Figure 11-13 For implementation of the technical solutions provided in the embodiments, please refer to the relevant embodiments.

[0354] The processor 301 may be used to read and execute computer-readable instructions. Specifically, the processor 301 may be used to call a program stored in the memory 302, such as the network access method provided in one or more embodiments of the present application, and the Figure 11-13 The technical solution provided in the embodiment is implemented in a program on the home gateway 300 side, and the instructions contained in the program are executed.

[0355] It is understandable that the home gateway 300 may be Figure 1A-Figure 1C The 5G RG in the communication system architecture is shown. Figure 7 The home gateway 300 shown is only one implementation of the embodiment of the present application. In actual applications, the home gateway 300 may also include more or fewer components, which is not limited here.

[0356] refer to Figure 8 , Figure 8 4 shows an access network device 400 provided in some embodiments of the present application. Figure 8 As shown, the access network device 400 may include: one or more processors 401, a memory 403, and a communication interface 405. These components may be connected via a bus 404 or other means. Figure 8 Take bus connection as an example.

[0357] The communication interface 405 can be used for the access network device 400 to communicate with other communication devices, such as a home gateway and a core network device. Specifically, the home gateway can be Figure 7 The application server 300 shown in FIG. 1 may be a core network device. Fig. 9 The core network device 500 shown. Specifically, the communication interface 405 may include a wired communication interface, such as a wide area network (WAN) interface, a local access network (LAN) interface, etc. Not limited to a wired communication interface, in some possible embodiments, the communication interface 405 may also include a wireless communication interface, such as a wireless local area network (WLAN) interface, etc.

[0358] The memory 403 is coupled to the processor 401 and is used to store various software programs and / or multiple groups of instructions. Specifically, the memory 403 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more disk storage devices, flash memory devices or other non-volatile solid-state storage devices. The memory 403 can store an operating system (hereinafter referred to as system), such as an embedded operating system such as uCOS, VxWorks, RTLinux, etc. The memory 403 can also store a network communication program, which can be used to communicate with one or more additional devices, one or more terminal devices, and one or more network devices.

[0359] In some embodiments of the present application, the memory 403 may be used to store the network access method provided by one or more embodiments of the present application, and the network access method provided by one or more embodiments of the present application. Figure 11-13 The implementation procedure of the technical solution provided in the embodiment on the access network device 400 side. Regarding the network access method provided by one or more embodiments of the present application, and the Figure 11-13 For implementation of the technical solutions provided in the embodiments, please refer to the relevant embodiments.

[0360] The processor 401 may be used to read and execute computer-readable instructions. Specifically, the processor 401 may be used to call a program stored in the memory 405, such as the network access method provided in one or more embodiments of the present application, and the Figure 11-13 The technical solution provided in the embodiment implements a program on the access network device 400 side and executes the instructions contained in the program.

[0361] It is understandable that the access network device 400 may be Figure 1A-Figure 1C W-5G AN in the system architecture shown. Figure 8 The access network device 400 shown is only one implementation of the embodiment of the present application. In actual applications, the access network device 400 may also include more or fewer components, which is not limited here.

[0362] refer to Fig. 9 , Fig. 9 FIG. 5 shows a core network device 500 provided in some embodiments of the present application. Fig. 9 As shown, the core network device 500 may include: one or more processors 501, a memory 503, and a communication interface 505. These components may be connected via a bus 504 or other means. Fig. 9 Take bus connection as an example.

[0363] The communication interface 505 can be used for the core network device 500 to communicate with other communication devices, such as access network devices. Specifically, the access network device can be Figure 8 The access network device 400 shown. Specifically, the communication interface 505 may include a wired communication interface, such as a wide area network (WAN) interface, a local access network (LAN) interface, etc. Not limited to a wired communication interface, in some possible embodiments, the communication interface 505 may also include a wireless communication interface, such as a wireless local area network (WLAN) interface, etc.

[0364] The memory 503 is coupled to the processor 501 and is used to store various software programs and / or multiple groups of instructions. Specifically, the memory 503 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more disk storage devices, flash memory devices or other non-volatile solid-state storage devices. The memory 503 can store an operating system (hereinafter referred to as system), such as an embedded operating system such as uCOS, VxWorks, RTLinux, etc. The memory 503 can also store a network communication program, which can be used to communicate with one or more additional devices, one or more terminal devices, and one or more network devices.

[0365] In some embodiments of the present application, the memory 503 may be used to store the network access method provided by one or more embodiments of the present application, and the network access method provided by one or more embodiments of the present application. Figure 11-13 The implementation procedure of the technical solution provided in the embodiment on the core network device 500 side. Regarding the network access method provided by one or more embodiments of the present application, and the Figure 11-13 For implementation of the technical solutions provided in the embodiments, please refer to the relevant embodiments.

[0366] The processor 501 may be used to read and execute computer-readable instructions. Specifically, the processor 501 may be used to call a program stored in the memory 505, such as the network access method provided in one or more embodiments of the present application, and the Figure 11-13 The technical solution provided in the embodiment is implemented in a program on the core network device 500 side, and the instructions contained in the program are executed.

[0367] It is understandable that the core network device 500 may be Figure 1A-Figure 1C The core network equipment in the system architecture shown can be implemented as AMF network elements, UDM network elements, etc. Fig. 9 The core network device 500 shown is only one implementation method of the embodiment of the present application. In actual applications, the core network device 500 may also include more or fewer components, which is not limited here.

[0368] refer to Fig.10 , Fig.10 The present application provides a communication system and a communication device. The communication system 10 may include the following communication devices: user equipment 60, home gateway 70, access network equipment 80, access and mobility management network element 90 and unified data management network element 100. The communication system 10 and the communication device therein may be used to implement Figure 2-Figure 4 A network access method described in each corresponding embodiment is described below.

[0369] When the communication system 10 and the communication device therein can be used to implement Figure 2-Figure 3When a network access method is described in each corresponding embodiment, the specific implementation of each communication device can be as follows:

[0370] like Fig.10 As shown, the user equipment 60 may include: a processing unit 61 and a communication unit 63. Among them:

[0371] The processing unit 61 may be used to generate information to be sent by the user equipment 60 and analyze information received by the user equipment 60;

[0372] The communication unit 63 may be used to obtain temporary identification information of the home gateway 70 to which the user equipment 60 is connected;

[0373] The communication unit 63 may also be used to send a request message to the access network device 80 to request access to the core network. The request message may include: temporary identification information of the home gateway 70 and identification information of the user equipment 60.

[0374] In some optional embodiments, the communication unit 63 may be used to receive temporary identification information of the home gateway 70 sent by the home gateway 70. Specifically, after establishing a connection with the home gateway 70, the communication unit 63 may obtain the temporary identification information of the home gateway 70 through an access network query protocol (ANQP). Specifically, the communication unit 63 may receive an ANQP message or an EAP message sent by the home gateway 70, which contains the temporary identification of the home gateway 70. Alternatively, the communication unit 63 may obtain the temporary identification information of the 5G-RG through an EAP message. Specifically, the 5G-RG carries the temporary identification of the 5G-RG in the EAP message sent to the UE. The EAP message may be an EAP-Request / Identity message or an EAP-request / 5G-start message.

[0375] It can be understood that the specific implementation of each functional unit of the user equipment 60 can be referred to Figure 2-Figure 3 The corresponding method embodiments are not described in detail here.

[0376] like Fig.10 As shown, the home gateway 70 may include: a processing unit 71 and a communication unit 73. Among them:

[0377] The processing unit 71 may be used to generate information to be sent by the home gateway 70 and to parse information received by the home gateway 70;

[0378] The communication unit 73 may be used to send temporary identification information of the home gateway 70 to the access network device 80 .

[0379] Specifically, the temporary identification information of the home gateway 70 can be used to index the context of the home gateway 70 on the core network side. The temporary identification of the home gateway 70 may include a GUTI. Regarding how the communication unit 73 sends the temporary identification information of the home gateway 70, this application does not limit this. For example, the communication unit 73 may send a PPPoE message, or other control plane message, which may carry the temporary identification information of the home gateway 70. Optionally, the message may also carry the IP address of the UE.

[0380] It can be understood that the specific implementation of each functional unit of the home gateway 70 can be referred to Figure 2-Figure 3 The corresponding method embodiments are not described in detail here.

[0381] like Fig.10 As shown, the access network device 80 may include: a processing unit 81 and a communication unit 83. Among them:

[0382] The processing unit 81 may be used to generate information to be sent by the access network device 80 and to analyze information received by the access network device 80;

[0383] The communication unit 83 may be used to obtain temporary identification information of the home gateway 70 to which the user equipment 60 is connected;

[0384] The communication unit 83 may also be used to send a message to the access and mobility management function network element 90 , the message including: temporary identification information of the home gateway 70 and identification information of the user equipment 60 . The identification information of the user equipment 60 comes from the user equipment 60 .

[0385] In some optional embodiments, in order to obtain the temporary identification information of the home gateway 70 , the communication unit 83 may be specifically used to receive the temporary identification information sent by the user equipment 60 , or to receive the temporary identification information sent by the home gateway 70 .

[0386] In some optional embodiments, in order to obtain temporary identification information of the home gateway 70, the processing unit 81 can be specifically used to identify the temporary identification information based on the IP address of the user device 60 or the line identification or VLAN identification of the fixed network gateway connection or the identification information of the access point of the user device 60.

[0387] It can be understood that the specific implementation of each functional unit of the access network device 80 can be referred to Figure 2-Figure 3 The corresponding method embodiments are not described in detail here.

[0388] like Fig.10 As shown, the access and mobility management network element 90 may include: a processing unit 91 and a communication unit 93. Among them:

[0389] The communication unit 93 may be used to send a request message to the unified data management network element 100, where the request message includes identification information of the user equipment 60 and identification information of the home gateway 70 to which the user equipment 60 is connected;

[0390] The communication unit 93 may also be used to receive the indication information of the subscription type of the user equipment 60 sent by the unified data management network element 100;

[0391] The processing unit 91 may be configured to determine whether the user equipment 60 is allowed to access the home gateway 70 and / or the service management policy of the user equipment 60 according to the subscription type of the user equipment 60 .

[0392] In some optional embodiments, the processing unit 91 may be specifically configured to determine that the user equipment 60 is allowed to access the home gateway 70 if the subscription type of the user equipment 60 is a subscriber of the home gateway 70 .

[0393] In some optional embodiments, the processing unit 91 may be specifically used to determine that the service management policy of the user device 60 is the service management policy corresponding to the non-contracted user if the contract type is a non-contracted user; or, if the contract type is a contracted user, determine that the service management policy of the user device 60 is the service management policy corresponding to the contracted user.

[0394] In some optional embodiments, the communication unit 93 may also be used to receive access indication information sent by the unified data management network element 100, and / or indication information of the service management policy of the user equipment 60, where the access indication information indicates whether the user equipment 60 is allowed to access the home gateway 70. In this way, the access and mobility management network element 90 may notify the UE whether it can access and what the subscription type is.

[0395] In some optional embodiments, the communication unit 93 may also be used to receive the subscription data of the home gateway 70 sent by the unified data management network element 100, and the processing unit 91 may also be used to determine whether the user equipment 60 is allowed to access the home gateway 70 according to the subscription data of the home gateway 70 and the identification information of the user equipment 60. Here, the way in which the access and mobility management network element 90 determines the subscription type of the user equipment 60 and whether the user equipment 60 is allowed to access the home gateway 70 is similar to

[0396] In some optional embodiments, the communication unit 93 may also be used to send access indication information, and / or indication information of a service management policy of the user device 60 to the access network device 80 or the home gateway 70, wherein the access indication information indicates whether the user device 60 is allowed to access the home gateway 70.

[0397] In the present application, the identification information of the home gateway 70 carried in the request message sent by the communication unit 93 to the unified data management network element 100 is permanent identification information.

[0398] The communication unit 93 may be specifically configured to obtain temporary identification information of the home gateway 70 , and obtain permanent identification information from the context of the home gateway 70 according to the temporary identification information.

[0399] In order to obtain the temporary identification information of the home gateway 70, the specific implementation of the communication unit 93 may include but is not limited to: the communication unit 93 may be specifically used to obtain the temporary identification information from the NAS signaling sent by the user equipment 60; or, the communication unit 93 may be specifically used to obtain the temporary identification information from the signaling sent by the access network device 80 accessed by the home gateway 70. The temporary identification information included in the signaling sent by the access network device 80 is sent by the home gateway 70 to the access network device 80; or, the temporary identification information included in the signaling sent by the access network device 80 is identified by the access network device 80 based on the IP address of the user equipment 60 or the line identifier or VLAN identifier of the fixed network gateway connection or the access point identifier of the user equipment 60.

[0400] It can be understood that the specific implementation of each functional unit of the access and mobility management network element 90 can be referred to Figure 2-Figure 3 The corresponding method embodiments are not described in detail here.

[0401] like Fig.10 As shown, the unified data management network element 100 may include: a processing unit 101 and a communication unit 103. Among them:

[0402] The communication unit 103 may be used to receive a request message sent by the access and mobility management function network element 90, where the request message includes identification information of the user equipment 60 and identification information of the home gateway 70 to which the user equipment 60 is connected;

[0403] The processing unit 101 may be used to determine the subscription data of the home gateway 70 according to the identification information of the home gateway 70;

[0404] The processing unit 101 may also be used to determine the subscription type of the user equipment 60 according to the subscription data of the home gateway 70 and the identification information of the user equipment 60;

[0405] The communication unit 103 may also be used to send indication information of the subscription type to the access and mobility management function network element; the subscription type includes a subscribed user or a non-subscribed user of the home gateway 70 .

[0406] In some optional embodiments, the subscription data of the home gateway 70 may include identification information of the user equipment 60 of the subscriber of the home gateway 70. At this time, the processing unit 101 may be specifically configured to determine that the user equipment 60 is a subscriber of the home gateway 70 if the identification information of the user equipment 60 belongs to the identification information of the user equipment 60 of the subscriber of the home gateway 70.

[0407] Furthermore, the subscription data of the home gateway 70 may include an access type of the home gateway 70 , and the access type indicates whether the home gateway 70 allows non-subscribed users to access.

[0408] The processing unit 101 may also be used to determine whether the user equipment 60 is allowed to access the home gateway 70. The details may be as follows:

[0409] The processing unit 101 may be specifically configured to determine that the user equipment 60 is allowed to access the home gateway 70 if the identification information of the user equipment 60 belongs to the identification information of the user equipment 60 of a subscriber of the home gateway 70 .

[0410] The processing unit 101 may be specifically configured to determine that the user equipment 60 is allowed to access the home gateway 70 if the identification information of the user equipment 60 belongs to the identification information of the user equipment 60 of a subscriber of the home gateway 70 .

[0411] The processing unit 101 can be specifically used to determine that the user device 60 is allowed to access the home gateway 70 if the identification information of the user device 60 does not belong to the identification information of the user device 60 of the contracted user of the home gateway 70, but the access type of the home gateway 70 indicates that the home gateway 70 allows non-contracted users to access.

[0412] The processing unit 101 can be specifically used to determine that the user device 60 is not allowed to access the home gateway 70 if the identification information of the user device 60 does not belong to the identification information of the user device 60 of the contracted user of the home gateway 70, and the access type of the home gateway 70 indicates that the home gateway 70 does not allow non-contracted users to access.

[0413] In some optional embodiments, under the condition that the processing unit 101 determines whether the user equipment 60 is allowed to access the home gateway 70, the communication unit 103 can also be used to send access indication information; the access indication information indicates whether the user equipment 60 is allowed to access the home gateway 70.

[0414] In some optional embodiments, the communication unit 103 may also be used to send subscription data to the access and mobility management function network element. In this way, the access and mobility management function network element may also determine the subscription type of the UE and whether the UE is allowed to access the home gateway 70 based on the subscription data of the home gateway 70.

[0415] It is understandable that the specific implementation of each functional unit of the unified data management network element 100 can be referred to Figure 2-Figure 3 The corresponding method embodiments are not described in detail here.

[0416] When the communication system 10 and the communication device therein can be used to implement Figure 4When a network access method is described in the embodiment, the specific implementation of the user equipment 60, the home gateway 70 and the access network device 80 can refer to the above content. The subscription type of the UE and whether the UE is allowed to access the home gateway 70 are determined by the access and mobility management network element 90. The specific implementation of the access and mobility management network element 90 can be as follows:

[0417] The access and mobility management network element 90 may include: a processing unit 91 and a communication unit 93. Among them:

[0418] The communication unit 93 may be used to receive a request message sent by the access network device 80 (W-5G AN), where the request message includes identification information of the home gateway 70 and identification information of the user equipment 60;

[0419] The communication unit 93 may also be used to obtain the contract data of the home gateway 70 according to the identification information of the home gateway 70;

[0420] The processing unit 91 may be used to determine the subscription type of the user equipment 60 and / or the service management policy of the user equipment 60 according to the subscription data of the home gateway 70 and the identification information of the user equipment 60;

[0421] The communication unit 93 may also be used to send indication information of the subscription type and / or indication information of the service management policy of the user equipment 60 to the access network device 80 or the home gateway 70 ; the subscription type includes a subscribed user or a non-subscribed user of the home gateway 70 .

[0422] In some optional embodiments, in order to obtain the contract data of the home gateway 70 , the communication unit 93 may be specifically used to receive the contract data of the home gateway 70 sent by the unified data management network element 100 according to the identification information of the home gateway 70 .

[0423] In some optional embodiments, in order to obtain the contract data of the home gateway 70, under the condition that the contract data of the home gateway 70 is included in the context of the home gateway 70, the processing unit 91 can be specifically used to obtain the contract data of the home gateway 70 from the context of the home gateway 70 according to the identification information of the home gateway 70.

[0424] In some optional embodiments, the subscription data of the home gateway 70 may include identification information of the user equipment 60 of the subscriber of the home gateway 70. To determine the subscription type of the user equipment 60, the processing unit 91 may be specifically configured to determine that the user equipment 60 is a subscriber of the home gateway 70 if the identification information of the user equipment 60 belongs to the identification information of the user equipment 60 of the subscriber of the home gateway 70.

[0425] In some optional embodiments, the subscription data further includes an access type of the home gateway 70 , and the access type indicates whether the home gateway 70 allows non-subscribed users to access.

[0426] In some optional embodiments, in order to determine whether the user device 60 is allowed to access the home gateway 70, the processing unit 91 can be specifically used to determine whether the user device 60 is allowed to access the home gateway 70 if the identification information of the user device 60 belongs to the identification information of the user device 60 of the contracted user of the home gateway 70.

[0427] In some optional embodiments, in order to determine whether the user device 60 is allowed to access the home gateway 70, the processing unit 91 may be specifically used to determine that the user device 60 is allowed to access the home gateway 70 if the identification information of the user device 60 does not belong to the identification information of the user device 60 of the contracted user of the home gateway 70, but the access type of the home gateway 70 indicates that the home gateway 70 allows non-contracted users to access.

[0428] In some optional embodiments, in order to determine whether the user device 60 is allowed to access the home gateway 70, the processing unit 91 may be specifically used to determine that the user device 60 is not allowed to access the home gateway 70 if the identification information of the user device 60 does not belong to the identification information of the user device 60 of the contracted user of the home gateway 70, and the access type of the home gateway 70 indicates that the home gateway 70 does not allow non-contracted users to access.

[0429] In some optional embodiments, the communication unit 93 can also be used to send access indication information, and / or indication information of the service management policy of the user device 60 to the access network device 80 or the home gateway 70; the access indication information indicates whether the user device 60 is allowed to access the home gateway 70.

[0430] In this application, the identification information of the home gateway 70 carried in the request message sent by the access network device 80 (W-5G AN) is temporary identification information. The communication unit 93 can also be used to obtain the temporary identification information of the home gateway 70, and determine the contract data from the context of the home gateway 70 according to the temporary identification information.

[0431] In order to obtain the temporary identification information of the home gateway 70, the communication unit 93 can be specifically used for the access and mobility management function network element to receive the temporary identification information sent by the user equipment 60; or, to receive the temporary identification information sent by the access network device 80 accessed by the home gateway 70. Among them, the temporary identification information sent by the access network device 80 can be sent by the home gateway 70 to the access network device 80, or it can be identified by the access network device 80 based on the IP address of the user equipment 60 or the line identifier or VLAN identifier of the fixed network gateway connection or the access point identifier of the home gateway 70.

[0432] It can be understood that the specific implementation of each functional unit of the access and mobility management network element 90 can be referred to Figure 4 The method embodiments are not described in detail here.

[0433] When the communication system 10 and the communication device therein can be used to implement Fig.12 When describing the technical solution in the embodiment, the specific implementation of each communication device can be as follows:

[0434] like Fig.10 As shown, the access network device 80 may include: a processing unit 81 and a communication unit 83. Among them:

[0435] The communication unit 83 may be configured to receive a request message, where the request message includes identification information of a packet data unit (PDU) session.

[0436] The communication unit 83 can also be used to send a response message to the terminal device, wherein the response message includes the address information of the access network device corresponding to the PDU session. The address information of the access network device corresponding to the PDU session is used as the target address of the user plane data packet of the PDU session sent by the home gateway 70.

[0437] In some embodiments, the processing unit 81 may be used to store the correspondence between the identification information of the PDU session and the address information of the access network device.

[0438] In some embodiments, the communication unit 83 may also be used to receive identification information of the home gateway 70. The processing unit 81 may be used to allocate an address to the home gateway 70 according to the identification information of the home gateway 70. The communication unit 83 may also be used to send the address of the home gateway 70 to the home gateway 70; the address of the home gateway 70 is used as the source address of the user plane data packet of the PDU session sent by the home gateway 70.

[0439] In some embodiments, the communication unit 83 may also be used to receive a user plane data packet of the PDU session sent by the home gateway 70, wherein the destination address included in the user plane data packet is the address information of the PDU session corresponding to the access network device. The processing unit 81 may also be used to identify the PDU session based on the address information of the PDU session corresponding to the access network device.

[0440] In another solution, the processing unit 81 may be used to allocate the user plane address information of the access network device corresponding to the home gateway 70. The communication unit 83 may also be used to send a message to the home gateway 70, the message including the user plane address information; the user plane address information is used as the destination address of the user plane data packet of the PDU session sent by the home gateway 70.

[0441] In some embodiments, the communication unit 83 may also be used to receive identification information of the home gateway 70. The processing unit 81 may also be used to assign an address to the home gateway 70 according to the identification information of the home gateway 70. The communication unit 83 may also be used to send the address of the home gateway 70 to the home gateway 70; the address of the home gateway 70 is used as the source address of the user plane data packet of the PDU session sent by the home gateway 70.

[0442] In some embodiments, the communication unit 83 may also be used to receive the user plane data packet sent by the home gateway 70, the destination address in the user plane data packet being the address information of the user plane of the access network device; the user plane data packet also includes identification information of the PDU session. The processing unit 81 may also be used to identify the PDU session based on the identification information of the PDU session. The communication unit 83 may also be used to send the user plane data packet using the tunnel corresponding to the identified PDU session.

[0443] like Fig.10 As shown, the home gateway 70 may include: a processing unit 71 and a communication unit 73. Wherein (the user equipment 60 may be implemented similarly, and will not be described in detail):

[0444] The communication unit 73 may be configured to send a request message to the access network device 80 , where the request message includes identification information of a packet data unit (PDU) session.

[0445] The communication unit 73 can also be used to receive a response message sent by the access network device 80, wherein the response message includes the address information of the access network device corresponding to the PDU session. The address information of the access network device corresponding to the PDU session is used as the target address of the user plane data packet of the PDU session sent by the home gateway 70.

[0446] In some embodiments, the communication unit 73 may also be used to send identification information of the home gateway 70. The communication unit 73 may also be used to receive the address of the home gateway 70; the address of the home gateway 70 is used as the source address of the user plane data packet of the PDU session sent by the home gateway 70.

[0447] In some embodiments, the communication unit 73 may also be used to send a user plane data packet of the PDU session, wherein the destination address included in the user plane data packet is the address information of the PDU session corresponding to the access network device. The processing unit 71 may also be used to identify the PDU session based on the address information of the PDU session corresponding to the access network device.

[0448] In another solution, the communication unit 73 can also be used to receive a message sent by the home gateway 70, the message including the user plane address information; the user plane address information is used as the destination address of the user plane data packet of the PDU session sent by the home gateway 70.

[0449] In some embodiments, the communication unit 73 may also be used to send identification information of the home gateway 70. The communication unit 73 may also be used to receive the address of the home gateway 70; the address of the home gateway 70 is used as the source address of the user plane data packet of the PDU session sent by the home gateway 70.

[0450] In some embodiments, the communication unit 73 may also be used to send the user plane data packet, the destination address in the user plane data packet being the address information of the user plane of the access network device; the user plane data packet also includes identification information of the PDU session.

[0451] When the communication system 10 and the communication device therein can be used to implement Fig.13 In the technical solution described in the embodiment, the communication system 10 may further include a policy control network element 200 (not shown) and a session management network element 300 (not shown), and the specific implementation of each communication device may be as follows:

[0452] like Fig.10 As shown, the policy control network element 200 may include: a processing unit 201 and a communication unit 203. Among them:

[0453] The communication unit 203 may be configured to receive a first message sent by an access and mobility management function network element or a session management network element 300, where the first message includes indication information of a device type of a user equipment;

[0454] The communication unit 203 may also be configured to send a second message to the session management network element 300 , where the second message includes a service management policy of the user equipment determined by the policy control network element based on the indication information of the device type of the user equipment.

[0455] The service management policy includes: QoS policy and / or local resource access policy of the home gateway.

[0456] In some embodiments, the communication unit 203 may also be configured to send the local resource access policy to the access and mobility management function network element.

[0457] like Fig.10 As shown, the session management network element 300 may include: a processing unit 301 and a communication unit 303. Among them:

[0458] The communication unit 303 may also be configured to receive identification information of a user equipment and indication information of a device type of the user equipment sent by an access and mobility management function network element, and acquire a local resource access policy of the home gateway.

[0459] The processing unit 301 may be configured to control the user equipment to access local resources according to the indication information of the device type of the user equipment and the local resource access policy.

[0460] In some embodiments, the communication unit 303 may be specifically configured to receive the local resource access policy of the home gateway sent by the access and mobility management function network element or the session management network element.

[0461] In some embodiments, the processing unit 301 may be used to configure the local resource access policy.

[0462] In some embodiments, the local resource access policy includes address information of a device connected to the home gateway.

[0463] In some embodiments, the communication unit 303 may also be used to receive a request message sent by the user equipment, wherein the request message includes identification information of the user equipment. The processing unit 301 may be specifically used to determine the device type of the user equipment according to the identification information of the user equipment and the indication information of the device type of the user equipment, and control the user equipment to access the local resource according to the device type of the user equipment and the local resource access policy.

[0464] It can be seen that by implementing Fig.10 In the communication system 10 and the communication device therein shown, 5GC can distinguish different access models of user equipment based on the contract data of the home gateway to facilitate subsequent different service controls, such as different QoS controls. Especially when network resources are limited, the network side can give priority to access of contracted users and restrict access of non-contracted users. In this way, 5GC can support more access methods and improve the integration of fixed and mobile networks.

[0465] In addition, the communication system 10 and the communication device therein can also be used to implement Figure 5 Another network access method described in the embodiment. When the communication system 10 and the communication device therein can be used to implement Figure 5 When describing a network access method in the embodiment, the specific implementation of each communication device can refer to Figure 5 The embodiments are not described in detail here.

[0466] It should be understood that Fig.10 The communication system 10 shown may be implemented as Figure 1A-Figure 1C The system architecture shown in FIG. 7 is a home gateway 70. Figure 1A-Figure 1C In the 5G RG in the system architecture shown, the user equipment 60 may be a UE connected to the 5G RG, and the access network device 80 may be Figure 1A-Figure 1C In the W-5G AN in the system architecture shown, the access and mobility management network element 90 may be an AMF, and the unified data management network element 100 may be a UDM. Among them, the access and mobility management network element 90 may include an AMF serving the user equipment and an AMF serving the home gateway, and these two AMFs may be the same AMF or different AMFs. Similarly, the unified data management network element 100 may include a UDM registered with the user equipment and a UDM registered with the home gateway, and these two UDMs may be the same UDM or different UDMs.

[0467] In summary, the implementation of the technical solution provided in this application can enable 5GC to support more access methods and improve the integration of fixed and mobile networks.

[0468] Those skilled in the art can understand that to implement all or part of the processes in the above-mentioned embodiments, the processes can be completed by computer programs to instruct related hardware, and the programs can be stored in computer-readable storage media. When the programs are executed, they can include the processes of the above-mentioned method embodiments. The aforementioned storage media include: ROM or random access memory RAM, magnetic disk or optical disk and other media that can store program codes.

Claims

1. A communication method, characterized in that: include: The access and mobility management function network element sends a request message to the unified data management network element, where the request message includes identification information of the user equipment and identification information of the home gateway to which the user equipment is connected; The access and mobility management function network element receives the subscription data of the home gateway from the unified data management network element, where the subscription data of the home gateway includes identification information of a user equipment of a subscriber of the home gateway; The access and mobility management function network element determines whether the user equipment connected to the home gateway is allowed to access the home gateway based on the subscription data of the home gateway and the identification information of the user equipment. If the identification information of the user equipment connected to the home gateway belongs to a subscribed user of the home gateway, it is determined that the user equipment connected to the home gateway is allowed to access the home gateway.

2. The method according to claim 1, characterized in that Also includes: The access and mobility management function network element sends access indication information and / or indication information of the service management policy of the user equipment to the access network device or the home gateway, and the access indication information indicates whether the user equipment is allowed to access the home gateway.

3. The method according to claim 2, characterized in that The identification information of the home gateway is permanent identification information; The method further includes: the access and mobility management function network element acquiring temporary identification information of the home gateway, and acquiring the permanent identification information from the context of the home gateway according to the temporary identification information.

4. The method according to claim 3, characterized in that The access and mobility management function network element obtains the temporary identification information of the home gateway, including: The access and mobility management function network element obtains the temporary identification information from non-access layer NAS signaling sent by the user equipment; or, The access and mobility management function network element obtains the temporary identification information from the signaling sent by the access network device accessed by the home gateway.

5. The method according to claim 4, characterized in that The temporary identification information contained in the signaling sent by the access network device is sent by the home gateway to the access network device; or, the temporary identification information contained in the signaling sent by the access network device is identified by the access network device based on the IP address of the user device or the line identifier or VLAN identifier of the fixed network gateway connection or the access point identifier of the user device.

6. A communication method, characterized in that: include: The access and mobility management function network element receives a request message sent from the access network device, where the request message includes identification information of the home gateway; The home gateway accesses the core network through the access network device, and the core network includes the access and mobility management function network element; The access and mobility management function network element obtains the subscription data of the home gateway according to the identification information of the home gateway; the subscription data of the home gateway includes the identification information of the user equipment of the subscriber of the home gateway; The access and mobility management function network element determines the subscription type of the user equipment and / or the service management policy of the user equipment according to the subscription data of the home gateway and the identification information of the user equipment connected to the home gateway; The subscription type includes a subscribed user or a non-subscribed user of the home gateway; The service management policy includes: QoS policy and / or local resource access policy of the home gateway.

7. The method according to claim 6, characterized in that The access and mobility management function network element obtains the subscription data of the home gateway according to the identification information of the home gateway, including: The access and mobility management function network element receives the subscription data of the home gateway from the unified data management network element according to the identification information of the home gateway.

8. The method according to claim 6, characterized in that The access and mobility management function network element obtains the subscription data of the home gateway according to the identification information of the home gateway, including: The access and mobility management function network element obtains the subscription data of the home gateway from the context of the home gateway according to the identification information of the home gateway.

9. The method according to any one of claims 6 to 8, characterized in that The access and mobility management function network element determines the subscription type of the user equipment according to the subscription data of the home gateway, including: If the identification information of the user equipment belongs to the identification information of the user equipment of the subscriber of the home gateway, the access and mobility management function network element determines that the user equipment is the subscriber of the home gateway.

10. The method according to claim 9, characterized in that The subscription data also includes an access type of the home gateway, where the access type indicates whether the home gateway allows non-subscribed users to access.

11. The method according to claim 10, characterized in that Also includes: The access and mobility management function network element sends access indication information and / or indication information of the service management policy of the user equipment to the access network device or the home gateway; The access indication information indicates whether the user equipment is allowed to access the home gateway.

12. The method according to claim 11, characterized in that The identification information of the home gateway is temporary identification information; the method further includes: the access and mobility management function network element acquiring the temporary identification information of the home gateway.

13. The method according to claim 12, characterized in that The access and mobility management function network element obtains the temporary identification information of the home gateway, including: The access and mobility management function network element obtains the temporary identification information from NAS signaling sent by the user equipment; or, The access and mobility management function network element obtains the temporary identification information from the signaling sent by the access network device accessed by the home gateway.

14. The method according to claim 13, characterized in that The temporary identification information contained in the signaling sent by the access network device is sent by the home gateway to the access network device; or, the temporary identification information contained in the signaling sent by the access network device is identified by the access network device based on the IP address of the user device or the line identifier or VLAN identifier of the fixed network gateway connection or the access point identifier of the user device.

15. A communication method, characterized in that: include: The unified data management network element receives a request message from an access and mobility management function network element, wherein the request message includes identification information of a user equipment and identification information of a home gateway to which the user equipment is connected; The unified data management network element determines the subscription data of the home gateway according to the identification information of the home gateway; the subscription data of the home gateway includes the identification information of the user equipment of the subscriber of the home gateway and the indication information of the access type of the home gateway; the indication information of the access type indicates whether the home gateway allows non-subscribed users to access; The unified data management network element determines the subscription type of the user equipment according to the subscription data of the home gateway and the identification information of the user equipment; The subscription type includes a subscribed user or a non-subscribed user of the home gateway; The unified data management network element sends indication information of the subscription type to the access and mobility management function network element; The subscription type of the user equipment is used to determine whether the user equipment is allowed to access the home gateway and / or the service management policy of the user equipment; The service management policy includes: QoS policy and / or local resource access policy of the home gateway.

16. The method according to claim 15, characterized in that The subscription data of the home gateway includes identification information of a user equipment of a subscriber of the home gateway; The unified data management network element determines the subscription type of the user equipment according to the subscription data of the home gateway and the identification information of the user equipment, including: If the identification information of the user equipment belongs to the identification information of the user equipment of the subscriber of the home gateway, the unified data management network element determines that the user equipment is the subscriber of the home gateway.

17. The method according to claim 15, characterized in that Also includes: If the identification information of the user equipment belongs to the identification information of the user equipment of the subscriber of the home gateway, the unified data management network element determines that the user equipment is allowed to access the home gateway.

18. The method according to claim 15, characterized in that Also includes: If the identification information of the user equipment does not belong to the identification information of the user equipment of the contracted user of the home gateway, but the access type of the home gateway indicates that the home gateway allows non-contracted users to access, the unified data management network element determines that the user equipment is allowed to access the home gateway.

19. The method according to claim 18, characterized in that Also includes: If the identification information of the user equipment does not belong to the identification information of the user equipment of the contracted user of the home gateway, and the access type of the home gateway indicates that the home gateway does not allow non-contracted users to access, the unified data management network element determines that the user equipment is not allowed to access the home gateway.

20. The method of claim 15, wherein: Also includes: The unified data management network element sends access indication information to the access and mobility management function network element; The access indication information indicates whether the user equipment is allowed to access the home gateway.

21. The method of claim 15, wherein: The method further includes: the unified data management network element sending the subscription data to the access and mobility management function network element.

22. A communication device, comprising: Memory for storing computer-executable instructions; A processor, configured to execute the computer-executable instructions stored in the memory, so that the network device executes the method according to any one of claims 1 to 5.

23. A communication device, comprising: Memory for storing computer-executable instructions; A processor, configured to execute the computer-executable instructions stored in the memory, so that the network device executes the method according to any one of claims 6 to 14.

24. A communication device, comprising: Memory for storing computer-executable instructions; A processor, configured to execute the computer-executable instructions stored in the memory, so that the network device executes the method according to any one of claims 15 to 21.

25. A computer-readable storage medium comprising instructions, which, when executed on a computer, causes the computer to perform the method of any one of claims 1 to 5, 6 to 14, and 15 to 21.

26. A communication system comprising: An access and mobility management function network element, configured to execute the method according to any one of claims 1 to 5, The unified data management network element is used to execute the request message sent by the access and mobility management function network element, wherein the request message includes identification information of the user equipment and identification information of the home gateway to which the user equipment is connected.

Images