Method, device and communication equipment for accessing network and selecting network

Abstract

The embodiment of the present application provides a method, apparatus and communication equipment for accessing a network and selecting a network, the method for accessing a network includes: performing a first operation according to first information; the first operation includes any one of the following: determining information of an access method requested by a terminal, wherein the information of the access method requested by the terminal includes one of the following: a first access method, a first access method of a control plane type, and a first access method of a user plane type; determining that the terminal supports a certificate download method of a control plane type, or determining that the terminal does not support a certificate download method of a control plane type, and determining that the terminal supports a certificate download method of a user plane type; determining that the terminal supports a first access method of a control plane type; the first access method includes: an access method for accessing a first network in order to download a certificate for accessing a second network. According to this embodiment, the terminal can be supported to determine a method for downloading a certificate.

Description

Technical Field

[0001] The embodiments of the present application relate to the field of wireless communication technology, and in particular, to a method, apparatus and communication device for accessing a network and selecting a network. Background Art

[0002] Currently, the way a terminal accesses another network in order to download a certificate for accessing a standalone non-public network (SNPN) can be a control plane type or a user plane type. However, in this case, there is currently no relevant method to support the terminal to determine the way to download the certificate, such as whether to use the control plane type or the user plane type. Summary of the invention

[0003] The embodiments of the present application provide a method, apparatus and communication device for accessing a network and selecting a network, so as to solve the problem of how to support a terminal to determine a method for downloading a certificate.

[0004] In order to solve the above technical problems, this application is implemented as follows:

[0005] In a first aspect, an embodiment of the present application provides a method for accessing a network, which is applied to a first communication device, including:

[0006] Perform a first operation according to the first information;

[0007] Among them, the first information is used to indicate at least one of the following: the key used for communication between the terminal and the first network can be derived according to the default certificate or the key used for communication between the terminal and the first network cannot be derived according to the default certificate; the terminal has the user plane capability or the terminal does not have the user plane capability; the terminal supports the certificate download method of the control plane type or the terminal does not support the certificate download method of the control plane type; the terminal supports the certificate download method of the user plane type or the terminal does not support the certificate download method of the user plane type; the terminal supports the first access method of the control plane type or the terminal does not support the first access method of the control plane type; the terminal supports the first access method of the user plane type or the terminal does not support the first access method of the user plane type;

[0008] The first operation includes any one of the following:

[0009] Determine information about the access method requested by the terminal, wherein the information about the access method requested by the terminal includes one of the following: a first access method, a first access method of a control plane type, and a first access method of a user plane type;

[0010] Determine the type information of the certificate downloading method requested by the terminal, wherein the type information of the certificate downloading method requested by the terminal includes one of the following: a control plane type certificate downloading method, a user plane type certificate downloading method;

[0011] Determine whether the terminal supports the certificate download method of the control plane type, or determines whether the terminal does not support the certificate download method of the control plane type.

[0012] Determine that the terminal supports the certificate download method of the user plane type, or determine that the terminal does not support the certificate download method of the user plane type;

[0013] Determining that the terminal supports a first access method of the control plane type, or determining that the terminal does not support the first access method of the control plane type;

[0014] Determining that the terminal supports a first access method of the user plane type, or determining that the terminal does not support the first access method of the user plane type;

[0015] Among them, the first access method includes: an access method for accessing the first network in order to download a certificate for accessing the second network; the first access method of the control plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the control plane type; the first access method of the user plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the user plane type; the first network and the second network are the same network or different networks.

[0016] In a second aspect, an embodiment of the present application provides a method for accessing a network, which is applied to a second communication device, including:

[0017] Acquire the second information and / or the fifth information; wherein the second information includes at least one of the following: information on the access method requested by the terminal, type information on the certificate download method requested by the terminal, and capability information of the terminal; the fifth information includes at least one of the following: information on the terminal access method requested by the sixth communication device, type information on the terminal certificate download method requested by the sixth communication device, information on the pre-configured terminal access method, and type information on the pre-configured terminal certificate download method;

[0018] Perform a second operation according to the second information and / or the fifth information;

[0019] The second operation includes at least one of the following:

[0020] Determine a type of a first access method, where the type of the first access method includes one of the following: a first access method of a control plane type, and a first access method of a user plane type;

[0021] Determine a type of certificate downloading method, where the type of certificate downloading method includes one of the following: a control plane type certificate downloading method, a user plane type certificate downloading method;

[0022] Executing the first access mode of the determined type;

[0023] Execute the certificate downloading method of the determined type;

[0024] Sending the determined type information of the first access method, where the type information of the first access method is used to indicate one of the following: a first access method of a control plane type, and a first access method of a user plane type;

[0025] Sending the determined type information of the certificate downloading method, where the type information of the certificate downloading method is used to indicate one of the following: a control plane type certificate downloading method, a user plane type certificate downloading method;

[0026] Determine first indication information, where the first indication information is used to indicate one of the following: adopting a first access method of a control plane type, or not adopting the first access method of a control plane type;

[0027] Sending first indication information, where the first indication information is used to indicate one of the following: adopting a first access method of a control plane type, or not adopting the first access method of a control plane type;

[0028] Determine second indication information, where the second indication information is used to indicate one of the following: adopting a control plane type certificate downloading method, or not adopting a control plane type certificate downloading method;

[0029] Sending second indication information, where the second indication information is used to indicate one of the following: adopting a control plane type certificate downloading method, or not adopting a control plane type certificate downloading method;

[0030] The access mode information requested by the terminal includes one of the following: a first access mode, a first access mode of a control plane type, and a first access mode of a user plane type;

[0031] The capability information of the terminal is used to indicate at least one of the following:

[0032] The terminal supports the certificate downloading method of the control plane type or the terminal does not support the certificate downloading method of the control plane type;

[0033] The terminal supports the certificate downloading method of the user plane type or the terminal does not support the certificate downloading method of the user plane type;

[0034] The terminal supports the first access method of the control plane type or the terminal does not support the first access method of the control plane type;

[0035] The terminal supports the first access mode of the user plane type or the terminal does not support the first access mode of the user plane type;

[0036] The terminal has the capability of user plane or the terminal does not have the capability of user plane;

[0037] A key for communication between the terminal and the first network can be derived according to the default certificate, or a key for communication between the terminal and the first network cannot be derived according to the default certificate;

[0038] Among them, the first access method includes: an access method for accessing the first network in order to download a certificate for accessing the second network; the first access method of the control plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the control plane type; the first access method of the user plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the user plane type; the first network and the second network are the same network or different networks.

[0039] In a third aspect, an embodiment of the present application provides a method for accessing a network, which is applied to a third communication device, including:

[0040] Receive third information and / or an access acceptance message; wherein the third information includes at least one of the following: type information of the first access method, type information of the certificate download method, first indication information, and second indication information; wherein the type information of the first access method is used to indicate one of the following: a first access method of a control plane type, a first access method of a user plane type; the type information of the certificate download method is used to indicate one of the following: a certificate download method of a control plane type, a certificate download method of a user plane type; the first indication information is used to indicate one of the following: adopting the first access method of the control plane type, or not adopting the first access method of the control plane type; the second indication information is used to indicate one of the following: adopting the certificate download method of the control plane type, or not adopting the certificate download method of the control plane type;

[0041] Determining whether to perform a third operation according to the third information and / or the access acceptance message;

[0042] Wherein, the third operation includes:

[0043] Requesting the first network to establish a data channel, wherein the data channel is used to download a certificate for accessing the second network;

[0044] Among them, the first access method includes: an access method for accessing the first network in order to download a certificate for accessing the second network; the first access method of the control plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the control plane type; the first access method of the user plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the user plane type; the first network and the second network are the same network or different networks.

[0045] In a fourth aspect, an embodiment of the present application provides a network selection method, which is applied to a fourth communication device, including:

[0046] sending or broadcasting a fourth instruction message;

[0047] The fourth indication information is used to indicate any one of the following:

[0048] The network supports the control plane type certificate download method or the network does not support the control plane type certificate download method;

[0049] The network supports the user plane type certificate download method or the network does not support the user plane type certificate download method;

[0050] The network supports the first access method of the control plane type or the network does not support the first access method of the control plane type;

[0051] The network supports the first access mode of the user plane type or the network does not support the first access mode of the user plane type;

[0052] Among them, the first access method includes: an access method for accessing the first network in order to download a certificate for accessing the second network; the first access method of the control plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the control plane type; the first access method of the user plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the user plane type; the first network and the second network are the same network or different networks.

[0053] In a fifth aspect, an embodiment of the present application provides a network selection method, which is applied to a fifth communication device, including:

[0054] Obtaining fourth instruction information;

[0055] According to the fourth information, performing a network selection operation;

[0056] The fourth information includes at least one of the following: fourth indication information, capability information of the terminal, information of the access method requested by the terminal, and type information of the certificate download method requested by the terminal;

[0057] The fourth indication information is used to indicate any one of the following: the network supports a certificate download method of a control plane type, or the network does not support a certificate download method of a control plane type; the network supports a certificate download method of a user plane type, or the network does not support a certificate download method of a user plane type; the network supports a first access method of a control plane type, or the network does not support a first access method of a control plane type; the network supports a first access method of a user plane type, or the network does not support a first access method of a user plane type;

[0058] The capability information of the terminal is used to indicate at least one of the following: the terminal supports the certificate download mode of the control plane type or the terminal does not support the certificate download mode of the control plane type; the terminal supports the certificate download mode of the user plane type or the terminal does not support the certificate download mode of the user plane type; the terminal supports the first access mode of the control plane type or the terminal does not support the first access mode of the control plane type; the terminal supports the first access mode of the user plane type or the terminal does not support the first access mode of the user plane type; the terminal has the user plane capability or the terminal does not have the user plane capability; the key used for communication between the terminal and the first network can be derived according to the default certificate or the key used for communication between the terminal and the first network cannot be derived according to the default certificate;

[0059] The information of the access method requested by the terminal includes one of the following: a first access method, a first access method of a control plane type, and a first access method of a user plane type;

[0060] The type information of the certificate downloading method requested by the terminal includes one of the following: a control plane type certificate downloading method, a user plane type certificate downloading method;

[0061] Among them, the first access method includes: an access method for accessing the first network in order to download a certificate for accessing the second network; the first access method of the control plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the control plane type; the first access method of the user plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the user plane type; the first network and the second network are the same network or different networks.

[0062] In a sixth aspect, an embodiment of the present application provides an apparatus for accessing a network, which is applied to a first communication device, including:

[0063] A first execution module, configured to execute a first operation according to the first information;

[0064] Among them, the first information is used to indicate at least one of the following: the key used for communication between the terminal and the first network can be derived according to the default certificate or the key used for communication between the terminal and the first network cannot be derived according to the default certificate; the terminal has the user plane capability or the terminal does not have the user plane capability; the terminal supports the certificate download method of the control plane type or the terminal does not support the certificate download method of the control plane type; the terminal supports the certificate download method of the user plane type or the terminal does not support the certificate download method of the user plane type; the terminal supports the first access method of the control plane type or the terminal does not support the first access method of the control plane type; the terminal supports the first access method of the user plane type or the terminal does not support the first access method of the user plane type;

[0065] The first operation includes any one of the following:

[0066] Determine information about the access method requested by the terminal, wherein the information about the access method requested by the terminal includes one of the following: a first access method, a first access method of a control plane type, and a first access method of a user plane type;

[0067] Determine the type information of the certificate downloading method requested by the terminal, wherein the type information of the certificate downloading method requested by the terminal includes one of the following: a control plane type certificate downloading method, a user plane type certificate downloading method;

[0068] Determine whether the terminal supports the certificate download method of the control plane type, or determines whether the terminal does not support the certificate download method of the control plane type.

[0069] Determine that the terminal supports the certificate download method of the user plane type, or determine that the terminal does not support the certificate download method of the user plane type;

[0070] Determining that the terminal supports a first access method of the control plane type, or determining that the terminal does not support the first access method of the control plane type;

[0071] Determining that the terminal supports a first access method of the user plane type, or determining that the terminal does not support the first access method of the user plane type;

[0072] Among them, the first access method includes: an access method for accessing the first network in order to download a certificate for accessing the second network; the first access method of the control plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the control plane type; the first access method of the user plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the user plane type; the first network and the second network are the same network or different networks.

[0073] In a seventh aspect, an embodiment of the present application provides an apparatus for accessing a network, which is applied to a second communication device, including:

[0074] A first acquisition module, configured to acquire second information and / or fifth information; wherein the second information includes at least one of the following: information on an access method requested by the terminal, information on a type of a certificate download method requested by the terminal, and capability information of the terminal; the fifth information includes at least one of the following: information on a terminal access method requested by a sixth communication device, information on a type of a terminal certificate download method requested by the sixth communication device, information on a preconfigured terminal access method, and information on a type of a preconfigured terminal certificate download method;

[0075] A second execution module, configured to execute a second operation according to the second information and / or the fifth information;

[0076] The second operation includes at least one of the following:

[0077] Determine a type of a first access method, where the type of the first access method includes one of the following: a first access method of a control plane type, and a first access method of a user plane type;

[0078] Determine a type of certificate downloading method, where the type of certificate downloading method includes one of the following: a control plane type certificate downloading method, a user plane type certificate downloading method;

[0079] Executing the first access mode of the determined type;

[0080] Execute the certificate downloading method of the determined type;

[0081] Sending the determined type information of the first access method, where the type information of the first access method is used to indicate one of the following: a first access method of a control plane type, and a first access method of a user plane type;

[0082] Sending the determined type information of the certificate downloading method, where the type information of the certificate downloading method is used to indicate one of the following: a control plane type certificate downloading method, a user plane type certificate downloading method;

[0083] Determine first indication information, where the first indication information is used to indicate one of the following: adopting a first access method of a control plane type, or not adopting the first access method of a control plane type;

[0084] Sending first indication information, where the first indication information is used to indicate one of the following: adopting a first access method of a control plane type, or not adopting the first access method of a control plane type;

[0085] Determine second indication information, where the second indication information is used to indicate one of the following: adopting a control plane type certificate downloading method, or not adopting a control plane type certificate downloading method;

[0086] Sending second indication information, where the second indication information is used to indicate one of the following: adopting a control plane type certificate downloading method, or not adopting a control plane type certificate downloading method;

[0087] The access mode information requested by the terminal includes one of the following: a first access mode, a first access mode of a control plane type, and a first access mode of a user plane type;

[0088] The capability information of the terminal is used to indicate at least one of the following:

[0089] The terminal supports the certificate downloading method of the control plane type or the terminal does not support the certificate downloading method of the control plane type;

[0090] The terminal supports the certificate downloading method of the user plane type or the terminal does not support the certificate downloading method of the user plane type;

[0091] The terminal supports the first access method of the control plane type or the terminal does not support the first access method of the control plane type;

[0092] The terminal supports the first access mode of the user plane type or the terminal does not support the first access mode of the user plane type;

[0093] The terminal has the capability of user plane or the terminal does not have the capability of user plane;

[0094] A key for communication between the terminal and the first network can be derived according to the default certificate or a key for communication between the terminal and the first network cannot be derived according to the default certificate;

[0095] Among them, the first access method includes: an access method for accessing the first network in order to download a certificate for accessing the second network; the first access method of the control plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the control plane type; the first access method of the user plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the user plane type; the first network and the second network are the same network or different networks.

[0096] In an eighth aspect, an embodiment of the present application provides an apparatus for accessing a network, which is applied to a third communication device, including:

[0097] a second receiving module, configured to receive third information and / or an access acceptance message; wherein the third information includes at least one of the following: type information of the first access method, type information of the certificate download method, first indication information, and second indication information; wherein the type information of the first access method is used to indicate one of the following: a first access method of a control plane type, a first access method of a user plane type; the type information of the certificate download method is used to indicate one of the following: a certificate download method of a control plane type, a certificate download method of a user plane type; the first indication information is used to indicate one of the following: adopting the first access method of the control plane type, or not adopting the first access method of the control plane type; the second indication information is used to indicate one of the following: adopting the certificate download method of the control plane type, or not adopting the certificate download method of the control plane type;

[0098] A third execution module, used to determine whether to execute a third operation according to the third information and / or the access acceptance message;

[0099] Wherein, the third operation includes:

[0100] Requesting the first network to establish a data channel, wherein the data channel is used to download a certificate for accessing the second network;

[0101] Among them, the first access method includes: an access method for accessing the first network in order to download a certificate for accessing the second network; the first access method of the control plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the control plane type; the first access method of the user plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the user plane type; the first network and the second network are the same network or different networks.

[0102] In a ninth aspect, an embodiment of the present application provides a network selection apparatus, applied to a fourth communication device, including:

[0103] A third sending module, used for sending or broadcasting fourth indication information;

[0104] The fourth indication information is used to indicate any one of the following:

[0105] The network supports the control plane type certificate download method or the network does not support the control plane type certificate download method;

[0106] The network supports the user plane type certificate download method or the network does not support the user plane type certificate download method;

[0107] The network supports the first access method of the control plane type or the network does not support the first access method of the control plane type;

[0108] The network supports the first access mode of the user plane type or the network does not support the first access mode of the user plane type;

[0109] Among them, the first access method includes: an access method for accessing the first network in order to download a certificate for accessing the second network; the first access method of the control plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the control plane type; the first access method of the user plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the user plane type; the first network and the second network are the same network or different networks.

[0110] In a tenth aspect, an embodiment of the present application provides a network selection device, applied to a fifth communication device, including:

[0111] A second acquisition module, used to acquire fourth indication information;

[0112] A fourth execution module, used for executing a network selection operation according to the fourth information;

[0113] The fourth information includes at least one of the following: fourth indication information, capability information of the terminal, information of the access method requested by the terminal, and type information of the certificate download method requested by the terminal;

[0114] The fourth indication information is used to indicate any one of the following: the network supports a certificate download method of a control plane type, or the network does not support a certificate download method of a control plane type; the network supports a certificate download method of a user plane type, or the network does not support a certificate download method of a user plane type; the network supports a first access method of a control plane type, or the network does not support a first access method of a control plane type; the network supports a first access method of a user plane type, or the network does not support a first access method of a user plane type;

[0115] The capability information of the terminal is used to indicate at least one of the following: the terminal supports the certificate download mode of the control plane type or the terminal does not support the certificate download mode of the control plane type; the terminal supports the certificate download mode of the user plane type or the terminal does not support the certificate download mode of the user plane type; the terminal supports the first access mode of the control plane type or the terminal does not support the first access mode of the control plane type; the terminal supports the first access mode of the user plane type or the terminal does not support the first access mode of the user plane type; the terminal has the user plane capability or the terminal does not have the user plane capability; the key used for communication between the terminal and the first network can be derived according to the default certificate or the key used for communication between the terminal and the first network cannot be derived according to the default certificate;

[0116] The information of the access method requested by the terminal includes one of the following: a first access method, a first access method of a control plane type, and a first access method of a user plane type;

[0117] The type information of the certificate downloading method requested by the terminal includes one of the following: a control plane type certificate downloading method, a user plane type certificate downloading method;

[0118] Among them, the first access method includes: an access method for accessing the first network in order to download a certificate for accessing the second network; the first access method of the control plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the control plane type; the first access method of the user plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the user plane type; the first network and the second network are the same network or different networks.

[0119] In the eleventh aspect, an embodiment of the present application provides a communication device, comprising a processor, a memory, and a computer program stored in the memory and executable on the processor, wherein the computer program, when executed by the processor, implements the steps of the method for accessing a network provided in the first aspect, or the steps of the method for accessing a network provided in the second aspect, or the steps of the method for accessing a network provided in the third aspect, or the steps of the method for selecting a network provided in the fourth aspect, or the steps of the method for selecting a network provided in the fifth aspect.

[0120] In the twelfth aspect, an embodiment of the present application provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of the method for accessing a network provided in the first aspect are implemented, or the steps of the method for accessing a network provided in the second aspect are implemented, or the steps of the method for accessing a network provided in the third aspect are implemented, or the steps of the method for selecting a network provided in the fourth aspect are implemented, or the steps of the method for selecting a network provided in the fifth aspect are implemented.

[0121] It is not difficult to understand that, through the embodiments of the present application, it is possible to support a terminal in determining a method for downloading a certificate, and to support a terminal in selecting a network that matches its own capabilities for access. BRIEF DESCRIPTION OF THE DRAWINGS

[0122] Various other advantages and benefits will become apparent to those of ordinary skill in the art by reading the detailed description of the preferred embodiments below. The accompanying drawings are only for the purpose of illustrating the preferred embodiments and are not to be considered as limiting the present application. Also, the same reference symbols are used throughout the accompanying drawings to represent the same components. In the accompanying drawings:

[0123] Figure 1 A schematic diagram of the architecture of a wireless communication system provided in an embodiment of the present application;

[0124] Figure 2 A schematic diagram of a flow chart of a method for accessing a network according to an embodiment of the present application;

[0125] Figure 3 A schematic diagram of a flow chart of a method for accessing a network according to another embodiment of the present application;

[0126] Figure 4 A flowchart of a method for accessing a network according to another embodiment of the present application;

[0127] Figure 5 A flowchart of a network selection method according to another embodiment of the present application;

[0128] Figure 6A flowchart of a network selection method according to another embodiment of the present application;

[0129] Figure 7 This is a flowchart of a method for accessing a network according to a specific embodiment 1 of the present application;

[0130] Figure 8 A flowchart of a method for network selection according to a specific embodiment 1 of the present application;

[0131] Fig. 9 A schematic diagram of the structure of a device for accessing a network provided by the present application;

[0132] Fig.10 A schematic diagram of the structure of another device for accessing a network provided by the present application;

[0133] Fig.11 A schematic diagram of the structure of another device for accessing a network provided by the present application;

[0134] Fig.12 A schematic diagram of the structure of a network selection device provided by the present application;

[0135] Fig.13 A schematic diagram of the structure of another network selection device provided by the present application;

[0136] Fig.14 A structural diagram of a communication device provided in this application. DETAILED DESCRIPTION

[0137] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0138] The terms "first", "second", etc. in the specification and claims of the present application are used to distinguish similar objects, and are not used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable under appropriate circumstances, so that the embodiments of the present application can be implemented in an order other than those illustrated or described here, and the objects distinguished by "first" and "second" are generally of the same type, and the number of objects is not limited. For example, the first object can be one or more. In addition, "and / or" in the specification and claims represents at least one of the connected objects, and the character " / " generally represents that the objects associated with each other are in an "or" relationship.

[0139] Figure 1A block diagram of a wireless communication system applicable to an embodiment of the present application is shown. The wireless communication system includes a terminal 11 and a network side device 12. Among them, the terminal 11 may include a relay supporting a terminal function and / or a terminal supporting a relay function. The terminal 11 may also be referred to as a terminal device or a user terminal (User Equipment, UE). The terminal 11 may be a mobile phone, a tablet computer (Tablet Personal Computer), a laptop computer (Laptop Computer) or a notebook computer, a personal digital assistant (Personal Digital Assistant, PDA), a mobile Internet device (Mobile Internet Device, MID), a handheld computer, a netbook, an ultra-mobile personal computer (ultra-mobile personal computer, UMPC), a mobile Internet device (Mobile Internet Device, MID), a wearable device (Wearable Device) or a vehicle-mounted device (Vehicle User Equipment, VUE), a pedestrian terminal (Pedestrian User Equipment, PUE) and other terminal side devices, and the wearable device includes: a bracelet, a headset, glasses, etc. It should be noted that the specific type of the terminal 11 is not limited in the embodiment of the present application. The network side device 12 can be a base station or a core network, wherein the base station can be referred to as a node B, an evolved node B, an access point, a base transceiver station (Base Transceiver Station, BTS), a radio base station, a radio transceiver, a basic service set (Basic Service Set, BSS), an extended service set (Extended Service Set, ESS), a B node, an evolved B node (eNB), a home B node, a home evolved B node, a WLAN access point, a WiFi node, a transmitting and receiving point (Transmitting Receiving Point, TRP) or some other suitable term in the field. As long as the same technical effect is achieved, the base station is not limited to a specific technical vocabulary. It should be noted that in the embodiment of the present application, only the base station in the NR system is taken as an example, but the specific type of the base station is not limited.

[0140] In some communication scenarios, there are scenarios where the communication device does not have a network certificate but needs to access the network, for example: when a standalone non-public network (SNPN) is deployed, the UE may not have a certificate and UE identity that can be used to access the SNPN. For example, the SNPN deployed in the factory and the terminal just purchased on the market, or the SNPN deployed at the concert site and the audience's terminal.

[0141] In order for this type of UE to obtain a certificate and a UE identity for accessing the SNPN, the UE may access a certain network (hereinafter referred to as a first network) and download a certificate for accessing the SNPN. The first network may be the SNPN.

[0142] Accessing the first network in order to download a certificate for accessing the second network may be called onboarding. The first network and the second network may be the same network.

[0143] Optionally, the first access method includes: an access method of accessing the first network in order to download a certificate for accessing the second network.

[0144] For example, the method of downloading a certificate may include: 1) a control plane (CP) type certificate download method, in which the first network downloads the certificate from a certificate configuration server for the UE and sends it to the UE through control plane signaling; 2) a user plane (UP) type certificate download method, in which the terminal establishes a data channel to the first network and downloads the certificate from the certificate configuration server through the data channel.

[0145] For the control plane certificate download method, both the UE and the first network need to have additional capabilities:

[0146] 1) The first network is capable of interacting with a provision server and downloading a certificate from the provision server on behalf of the UE. The certificate is to be sent to the UE under the protection of a key of a default certificate. For example, the certificate is included in a non-access stratum (NAS) message and sent to the UE; and the NAS message is encrypted and / or integrity protected.

[0147] 2) In addition to supporting authentication between the UE and the default certificate authentication server (DCS), it is also necessary to support the export of keys used for communication between the UE and the first network, such as exporting K SEAF In this way, the first network and the UE can derive K SEAF Used for encryption and / or integrity protection to protect NAS messages, otherwise the control plane type certificate download method cannot be used.

[0148] 3) The UE shall be able to support receiving certificates from NAS messages.

[0149] For the certificate download mode of the user plane type, the certificate download mode of the user plane type may be the default mode:

[0150] 1) The network may not require additional capabilities; the network only needs to configure policies to restrict the established data channel (such as PDU Session) to only connect to the Provision Server.

[0151] 2) The ability of the UE to interact with the Provision Server can be self-configured, and there is no need to inform the network, because the interaction between the UE and the first network only requires the establishment of a data channel (PDU Session).

[0152] Optionally, the network may support a user plane type certificate download method by default.

[0153] Optionally, the UE may support the control plane type certificate downloading party and / or the user plane type certificate downloading method.

[0154] Optionally, when the UE indicates that the first access method may imply support for the first access method of the user plane type, and / or, the network's system information block (SIB) broadcasting the first access method may imply support for the first access method of the user plane type. The network may decide whether to adopt the first access method of the control plane type based on the UE's control plane type certificate download method capability, and / or the network may decide whether to adopt the first access method of the control plane type based on its own control plane type certificate download method capability and policy configuration.

[0155] Optionally, for a UE that has both the control plane type certificate download mode capability and the user plane mode capability, the UE needs to obtain an indication of the control plane type certificate download mode from the network to decide whether to initiate a data channel (such as a PDU session) to establish a download certificate. For example, when an indication of the control plane type certificate download mode is not obtained, a data channel is initiated to the first network to establish a download certificate; when an indication of the control plane type certificate download mode is obtained, the UE can wait for the first network to download the certificate for the UE.

[0156] In the embodiments of the present application, optionally, acquisition can be understood as acquisition from configuration, reception, reception after request, acquisition through self-learning, acquisition by deduction based on information not received, or acquisition after processing of received information, which can be determined according to actual needs and is not limited in the embodiments of the present application. For example, when a certain capability indication information sent by a device is not received, it can be deduced that the device does not support the capability.

[0157] Optionally, the sending may include broadcasting, broadcasting in system messages, and returning after responding to requests.

[0158] In an optional embodiment of the present application, the first network may include one of the following: a non-public network (such as SNPN, or PNI-SNPN), a public network (PLMN).

[0159] In an optional embodiment of the present application, the second network may include one of the following: a non-public network (such as SNPN, or PNI-SNPN), a public network (PLMN).

[0160] In an optional embodiment of the present application, the control plane type certificate download method is a method in which a network element of the first network interacts with a certificate configuration server and sends the certificate to the terminal through control plane signaling (such as NAS signaling).

[0161] In an optional embodiment of the present application, the user plane type certificate download method is a method in which the terminal requests the first network to establish a data channel (such as a PDU session), and the terminal interacts with the certificate configuration server to download the certificate through the data channel. The interaction between the terminal and the certificate configuration server is user plane data for the first network, so it is called a user plane type certificate download method.

[0162] In an optional embodiment of the present application, the user plane capability of the terminal includes at least one of the following: supporting the establishment of a data channel (such as a PDU session) requested from the network, session management functions, etc.

[0163] In an optional embodiment of the present application, the certificate used to access the second network includes: a certificate of the second network.

[0164] In one embodiment of the present application, non-public network is short for non-public network. Non-public network can be referred to as one of the following: non-public communication network. Non-public network can include at least one of the following deployment modes: physical non-public network, virtual non-public network, non-public network implemented on the public network. In one implementation mode, non-public network is a closed access group (Closed Access Group, CAG). A CAG can be composed of a group of terminals.

[0165] In one embodiment of the present application, non-public network service is the abbreviation of non-public network service. Non-public network service can also be referred to as one of the following: network service of non-public network, non-public communication service, non-public network communication service, network service of non-public network or other naming. It should be noted that in the embodiment of the present invention, there is no specific limitation on the naming method. In one implementation mode, the non-public network is a closed access group. In this case, the non-public network service is a network service of the closed access group.

[0166] In one embodiment of the present application, a non-public network may include or be referred to as a private network. A private network may be referred to as one of the following: a private communication network, a private network, a local area network (LAN), a private virtual network (PVN), an isolated communication network, a dedicated communication network, or other names. It should be noted that the naming method is not specifically limited in the embodiments of the present invention.

[0167] In one embodiment of the present application, the public network is the abbreviation of the public network. The public network can be called one of the following: a public communication network or other names. It should be noted that the naming method is not specifically limited in the embodiment of the present invention.

[0168] In an optional embodiment of the present application, the authentication service includes an authentication server (such as a DCS or an AUSF) initiating an authentication request to a terminal. The authentication service network element may be an authentication agent that provides authentication services to the terminal. Optionally, the authentication service network element may include but is not limited to one of the following: AUSF, AAA agent.

[0169] In an optional embodiment of the present application, the communication device may include at least one of the following: a communication network element and a terminal.

[0170] In one embodiment of the present application, the communication network element may include at least one of the following: a core network element and a wireless access network element.

[0171] In the embodiment of the present application, the core network network element (CN network element) may include but is not limited to at least one of the following: core network equipment, core network node, core network function, core network network element, mobility management entity (Mobility Management Entity, MME), access mobility management function (Access Management Function, AMF), session management function (Session Management Function, SMF), user plane function (User Plane Function, UPF), serving gateway (serving GW, SGW), PDN gateway (PDN Gate Way, PDN Gateway), policy control function (Policy Control Function, PCF), policy and charging rules function unit (Policy and Charging Rules Function, PCRF), GPRS service support node (Serving GPRS Support Node, SGSN), gateway GPRS support node (Gateway GPRS Support Node, GGSN), unified data management (Unified Data Management, UDM), unified data storage (Unified Data Repository, UDR), home user server (Home Subscriber Server, HSS) and application function (Application Function, AF).

[0172] In the embodiment of the present application, the RAN network element may include but is not limited to at least one of the following: radio access network equipment, radio access network node, radio access network function, radio access network unit, 3GPP radio access network, non-3GPP radio access network, centralized unit (CU), distributed unit (DU), base station, evolved base station (evolved Node B, eNB), 5G base station (gNB), radio network controller (Radio Network Controller, RNC), base station (NodeB), non-3GPP interworking function (Non-3GPP Inter Working Function, N3IWF), access control (AC) node, access point (AP) device or wireless local area network (WLAN) node, N3IWF.

[0173] The embodiments of the present application are described in detail below.

[0174] Please refer to Figure 2 The embodiment of the present application provides a method for accessing a network, which is applied to a first communication device; the first communication device includes but is not limited to: a UE; the method includes:

[0175] Step 21: Execute a first operation according to the first information.

[0176] Optionally, the first information is used to indicate at least one of the following: the key used for communication between the terminal and the first network can be derived according to the default certificate or the key used for communication between the terminal and the first network cannot be derived according to the default certificate; the terminal has user plane capability or the terminal does not have user plane capability; the terminal supports the control plane type certificate download method or the terminal does not support the control plane type certificate download method; the terminal supports the user plane type certificate download method or the terminal does not support the user plane type certificate download method; the terminal supports the control plane type first access method or the terminal does not support the control plane type first access method; the terminal supports the user plane type first access method or the terminal does not support the user plane type first access method.

[0177] Optionally, the key used for communication between the terminal and the first network includes but is not limited to at least one of the following: K SEAF , K AUSF , K AMF , encryption key, integrity protection key. The key used for communication between the terminal and the first network can be used to derive the encryption key and / or integrity protection key of the communication data between the terminal and the first network.

[0178] Optionally, the first access method includes: an access method of accessing the first network in order to download a certificate for accessing the second network.

[0179] Optionally, the first access method of the control plane type includes: an access method of accessing the first network in order to download a certificate for accessing the second network, and a method of downloading the certificate for accessing the second network is a certificate download method of the control plane type.

[0180] Optionally, the first access method of the user plane type includes: an access method of accessing the first network in order to download a certificate for accessing the second network, and a method of downloading the certificate for accessing the second network is a certificate download method of the user plane type.

[0181] Optionally, the first network and the second network are the same network or different networks.

[0182] Optionally, the first operation includes any one of the following:

[0183] Determine information about the access method requested by the terminal, wherein the information about the access method requested by the terminal includes one of the following: a first access method, a first access method of a control plane type, and a first access method of a user plane type;

[0184] Determine the type information of the certificate downloading method requested by the terminal, wherein the type information of the certificate downloading method requested by the terminal includes one of the following: a control plane type certificate downloading method, a user plane type certificate downloading method;

[0185] Determine whether the terminal supports the certificate download method of the control plane type, or determines whether the terminal does not support the certificate download method of the control plane type.

[0186] Determine that the terminal supports the certificate download method of the user plane type, or determine that the terminal does not support the certificate download method of the user plane type;

[0187] Determining that the terminal supports a first access method of the control plane type, or determining that the terminal does not support the first access method of the control plane type;

[0188] Determine that the terminal supports a first access method of the user plane type, or determine that the terminal does not support the first access method of the user plane type.

[0189] In the embodiment of the present application, optionally, the process of performing the first operation according to the first information may include: determining that the information of the access mode requested by the terminal is a first access mode of the user plane type when at least one of the following is satisfied:

[0190] The first information indicates that a key used for communication between the terminal and the first network cannot be derived according to the default certificate;

[0191] The first information indicates that the terminal does not support a control plane type certificate download method;

[0192] The first information indicates that the terminal does not support a first access mode of the control plane type;

[0193] The first information indicates that the terminal has a user plane capability;

[0194] The first information indicates that the terminal supports a user plane type certificate download method;

[0195] The first information indicates that the terminal supports a first access mode of a user plane type.

[0196] And / or, the process of performing the first operation according to the first information may include: when the first condition is met, determining that the terminal does not support the certificate download method of the control plane type or determining that the terminal does not support the first access method of the control plane type.

[0197] The first condition includes at least one of the following:

[0198] The first information indicates that a key used for communication between the terminal and the first network cannot be derived according to the default certificate;

[0199] The first information indicates that the terminal does not support a control plane type certificate download method;

[0200] The first information indicates that the terminal does not support a first access method of the control plane type.

[0201] In the embodiment of the present application, optionally, the process of performing the first operation according to the first information may include:

[0202] When at least one of the following conditions is met, it is determined that the information of the access method requested by the terminal is a first access method of the control plane type:

[0203] The first information indicates that the terminal does not have a user plane capability;

[0204] The first information indicates that the terminal does not support a user plane type certificate download method;

[0205] The first information indicates that the terminal does not support a first access mode of the user plane type;

[0206] The first information indicates that a key used for communication between the terminal and the first network can be derived according to the default certificate;

[0207] The first information indicates that the terminal supports a control plane type certificate download method;

[0208] The first information indicates that the terminal supports a first access method of a control plane type.

[0209] And / or, the process of performing the first operation according to the first information may include: when the second condition is met, determining that the terminal does not support the certificate download method of the user plane type or determining that the terminal does not support the first access method of the user plane type.

[0210] The second condition includes at least one of the following:

[0211] The first information indicates that the terminal does not have a user plane capability;

[0212] The first information indicates that the terminal does not support a user plane type certificate download method;

[0213] The first information indicates that the terminal does not support a first access mode of the user plane type.

[0214] In the embodiment of the present application, optionally, the method may further include:

[0215] Sending second information; wherein the second information includes at least one of the following: information on the access method requested by the terminal, capability information of the terminal, and type information on the certificate download method requested by the terminal.

[0216] Optionally, the access mode information requested by the terminal includes one of the following: a first access mode, a first access mode of a control plane type, and a first access mode of a user plane type.

[0217] Optionally, the type information of the certificate downloading method requested by the terminal includes one of the following: a control plane type certificate downloading method, a user plane type certificate downloading method.

[0218] Optionally, the capability information of the terminal is used to indicate at least one of the following:

[0219] The terminal supports the certificate downloading method of the control plane type or the terminal does not support the certificate downloading method of the control plane type;

[0220] The terminal supports the certificate downloading method of the user plane type or the terminal does not support the certificate downloading method of the user plane type;

[0221] The terminal supports the first access method of the control plane type or the terminal does not support the first access method of the control plane type;

[0222] The terminal supports the first access mode of the user plane type or the terminal does not support the first access mode of the user plane type;

[0223] The terminal has the capability of user plane or the terminal does not have the capability of user plane;

[0224] The key used for communication between the terminal and the first network can be derived according to the default certificate, or the key used for communication between the terminal and the first network cannot be derived according to the default certificate.

[0225] Furthermore, after sending the second information, the method may further include:

[0226] receiving third information and / or access acceptance message;

[0227] Determine whether to perform a third operation according to the third information and / or the access acceptance message.

[0228] Optionally, the third information includes at least one of the following: type information of the first access method, type information of the certificate download method, first indication information, and second indication information; wherein, the type information of the first access method is used to indicate one of the following: a first access method of a control plane type, a first access method of a user plane type; the type information of the certificate download method is used to indicate one of the following: a certificate download method of a control plane type, a certificate download method of a user plane type; the first indication information is used to indicate one of the following: adopting the first access method of the control plane type, or not adopting the first access method of the control plane type; the second indication information is used to indicate one of the following: adopting the certificate download method of the control plane type, or not adopting the certificate download method of the control plane type.

[0229] In one implementation, the access acceptance message is an access acceptance message obtained after the terminal accesses the first network, including but not limited to a registration acceptance message.

[0230] Optionally, the third operation includes: requesting the first network to establish a data channel, where the data channel is used to download a certificate for accessing the second network.

[0231] Further, determining whether to execute the third operation according to the third information may include: executing the third operation when a fifth condition is met.

[0232] The fifth condition includes at least one of the following:

[0233] The third information includes type information of the first access method, and the type information of the first access method indicates a first access method of a user plane type;

[0234] The third information includes type information of the certificate downloading method, and the type information of the certificate downloading method indicates a certificate downloading method of a user plane type;

[0235] The third information includes first indication information, and the first indication information indicates that a first access method of a control plane type is not adopted;

[0236] The third information includes second indication information, and the second indication information indicates that a control plane type certificate download method is not adopted;

[0237] Only the access acceptance information is received, or the third information is not obtained.

[0238] In an implementation manner, when the terminal and / or the first network supports the first access method, the terminal and / or the first network may support the first access method of the user plane type by default.

[0239] In an implementation manner, when the terminal and / or the first network supports the first access mode, the terminal and / or the first network may support the user plane type certificate download mode by default.

[0240] Further, determining whether to execute the third operation according to the third information may include: when a sixth condition is met, not executing the third operation.

[0241] The sixth condition includes at least one of the following:

[0242] The third information includes type information of the first access method, and the type information of the first access method indicates a first access method of a control plane type;

[0243] The third information includes type information of the certificate downloading method, and the type information of the certificate downloading method indicates a certificate downloading method of a control plane type;

[0244] The third information includes first indication information, and the first indication information indicates a first access method of a control plane type;

[0245] The third information includes second indication information, and the second indication information indicates a control plane type certificate download method.

[0246] In an optional application scenario, the UE and the network both support the first access method of the user plane type or the certificate download method of the user plane type by default, and optionally support the first access method of the control plane type or the certificate download method of the control plane type.

[0247] Optionally, when the UE indicates that the first access method may imply support for the first access method of the user plane type, and / or, the network's system information block (SIB) broadcasting the first access method may imply support for the first access method of the user plane type. The network may decide whether to adopt the first access method of the control plane type based on the UE's control plane type certificate download method capability, and / or the network may decide whether to adopt the first access method of the control plane type based on its own control plane type certificate download method capability and policy configuration.

[0248] Optionally, for a terminal that has both the control plane type certificate download mode capability and the user plane mode capability, the terminal needs to obtain an indication of the control plane type certificate download mode from the network to decide whether to initiate a data channel (such as a PDU session) to establish a download certificate. For example, when an indication of the control plane type certificate download mode is not obtained, a data channel is initiated to the first network to establish a download certificate; when an indication of the control plane type certificate download mode is obtained, the terminal can wait for the first network to download the certificate for the UE.

[0249] It is not difficult to understand that, through this embodiment, the terminal can be supported to determine the method for downloading the certificate.

[0250] Please refer to Figure 3 The embodiment of the present application provides a method for accessing a network, which is applied to a second communication device; the second communication device includes but is not limited to: a CN network element (such as AMF); the CN network element may be a communication device in the first network. The method includes:

[0251] Step 31: Obtain the second information and / or the fifth information.

[0252] Optionally, the second information includes at least one of the following: information about an access method requested by the terminal, type information about a certificate download method requested by the terminal, and capability information of the terminal.

[0253] Optionally, the fifth information includes at least one of the following: information on the terminal access method requested by the sixth communication device, type information on the terminal certificate download method requested by the sixth communication device, information on the preconfigured terminal access method, and type information on the preconfigured terminal certificate download method.

[0254] In one embodiment, the sixth communication device includes but is not limited to one of the following: AF, UDM, PCF, SMF, AUSF, DCS, configuration server (such as PS). In another embodiment, the sixth communication device is a communication device among the certificate owners. In one embodiment, the configuration server configures a certificate for a terminal. The DCS can verify and / or authenticate a terminal that accesses the network through the first access method.

[0255] Optionally, the type information of the terminal certificate downloading method requested by the sixth communication device includes one of the following: a control plane type certificate downloading method, a user plane type certificate downloading method.

[0256] Optionally, the information on the terminal access method requested by the sixth communication device includes one of the following: a first access method, a first access method of a control plane type, and a first access method of a user plane type.

[0257] Optionally, the information of the preconfigured terminal access method includes one of the following: a first access method, a first access method of a control plane type, and a first access method of a user plane type.

[0258] Optionally, the type information of the preconfigured terminal certificate downloading method includes one of the following: a control plane type certificate downloading method, a user plane type certificate downloading method.

[0259] Optionally, the access mode information requested by the terminal includes one of the following: a first access mode, a first access mode of a control plane type, and a first access mode of a user plane type.

[0260] Optionally, the type information of the terminal certificate downloading method requested by the terminal includes one of the following: a control plane type certificate downloading method, a user plane type certificate downloading method.

[0261] Optionally, the capability information of the terminal may be used to indicate at least one of the following:

[0262] The terminal supports the certificate downloading method of the control plane type or the terminal does not support the certificate downloading method of the control plane type;

[0263] The terminal supports the certificate downloading method of the user plane type or the terminal does not support the certificate downloading method of the user plane type;

[0264] The terminal supports the first access method of the control plane type or the terminal does not support the first access method of the control plane type;

[0265] The terminal supports the first access mode of the user plane type or the terminal does not support the first access mode of the user plane type;

[0266] The terminal has the capability of user plane or the terminal does not have the capability of user plane;

[0267] The key used for communication between the terminal and the first network can be derived according to the default certificate, or the key used for communication between the terminal and the first network cannot be derived according to the default certificate.

[0268] Optionally, the key used for communication between the terminal and the first network includes but is not limited to at least one of the following: K SEAF , K AUSF , K AMF , encryption key and / or integrity protection key. The key used for communication between the terminal and the first network can be used to derive the encryption key and / or integrity protection key of the communication data between the terminal and the first network.

[0269] It is not difficult to understand that when the key for communication between the terminal and the first network cannot be derived according to the default certificate, the first access method of the control plane type or the certificate download method of the control plane type cannot be used, because the certificate is not encrypted or integrity protected in the control plane signaling, which is not safe enough. At this time, the first access method of the user plane type or the certificate download method of the user plane type can be used. Because the user plane type can be encrypted at the application layer of the terminal and the configuration server that configures the certificate.

[0270] Optionally, the first access method includes: an access method of accessing the first network in order to download a certificate for accessing the second network.

[0271] Optionally, the first access method of the control plane type includes: an access method of accessing the first network in order to download a certificate for accessing the second network, and a method of downloading the certificate for accessing the second network is a certificate download method of the control plane type.

[0272] Optionally, the first access method of the user plane type includes: an access method of accessing the first network in order to download a certificate for accessing the second network, and a method of downloading the certificate for accessing the second network is a certificate download method of the user plane type.

[0273] Optionally, the first network and the second network are the same network or different networks.

[0274] Step 32: Perform a second operation according to the second information and / or the fifth information.

[0275] Optionally, the second operation includes at least one of the following:

[0276] Determine a type of a first access method, where the type of the first access method includes one of the following: a first access method of a control plane type, and a first access method of a user plane type;

[0277] Determine a type of certificate downloading method, where the type of certificate downloading method includes one of the following: a control plane type certificate downloading method, a user plane type certificate downloading method;

[0278] Executing the first access mode of the determined type;

[0279] Execute the certificate downloading method of the determined type;

[0280] Sending the determined type information of the first access method, where the type information of the first access method is used to indicate one of the following: a first access method of a control plane type, and a first access method of a user plane type;

[0281] Sending the determined type information of the certificate downloading method, where the type information of the certificate downloading method is used to indicate one of the following: a control plane type certificate downloading method, a user plane type certificate downloading method;

[0282] Determine first indication information, where the first indication information is used to indicate one of the following: adopting a first access method of a control plane type, or not adopting the first access method of a control plane type;

[0283] Sending first indication information, where the first indication information is used to indicate one of the following: adopting a first access method of a control plane type, or not adopting the first access method of a control plane type;

[0284] Determine second indication information, where the second indication information is used to indicate one of the following: adopting a control plane type certificate downloading method, or not adopting a control plane type certificate downloading method;

[0285] Send second indication information, where the second indication information is used to indicate one of the following: adopting a control plane type certificate downloading method, or not adopting a control plane type certificate downloading method.

[0286] Optionally, the above-mentioned execution of the second operation according to the second information and / or the fifth information may include: when the third condition is met, executing at least one of the following: determining that the type of the first access method is a first access method of a control plane type, determining that the type of the certificate download method is a certificate download method of a control plane type, determining that the first indication information indicates the use of the first access method of the control plane type, and determining that the second indication information indicates the use of the certificate download method of the control plane type.

[0287] The third condition includes at least one of the following:

[0288] The access mode information requested by the terminal includes one of the following: a first access mode, a first access mode of a control plane type;

[0289] The information of the terminal access mode requested by the sixth communication device includes one of the following: a first access mode, a first access mode of a control plane type;

[0290] The type information of the terminal certificate downloading method requested by the sixth communication device includes: a control plane type certificate downloading method;

[0291] The information of the preconfigured terminal access mode includes one of the following: a first access mode, a first access mode of a control plane type;

[0292] The type information of the pre-configured terminal certificate download method includes: the certificate download method of the control plane type;

[0293] The capability information of the terminal indicates at least one of the following: the terminal supports a certificate download method of a control plane type, the terminal supports a first access method of a control plane type, the terminal does not support a certificate download method of a user plane type, the terminal does not support a first access method of a user plane type, the terminal does not have a user plane capability, and a key for communication between the terminal and the first network can be derived according to a default certificate;

[0294] The first network supports a control plane type certificate download method;

[0295] The first network supports a first access mode of a control plane type;

[0296] The first network does not support the user plane type certificate download method;

[0297] The first network does not support a first access mode of the user plane type.

[0298] Optionally, the above-mentioned execution of the second operation according to the second information and / or the fifth information may include: when the fourth condition is met, executing at least one of the following: determining that the type of the first access method is a first access method of a user plane type, determining that the type of the certificate download method is a certificate download method of a user plane type, determining that the first indication information indicates that the first access method of a control plane type is not adopted, determining that the second indication information indicates that the certificate download method of a control plane type is not adopted, sending the address information of the configuration server to the terminal, sending slice information to the terminal, and sending a data network name (Data Network Name, DNN) to the terminal.

[0299] In one implementation, the configuration server may be a server that configures a certificate for a terminal. In one implementation, the address information of the configuration server may include information for indexing the address of the configuration server.

[0300] In one implementation, the slice information may be slice information used to establish a user plane channel. In another implementation, the slice information is slice information used for the first access mode or slice information used for the first access mode of the user plane type.

[0301] The DNN may be a DNN for establishing a user plane channel. The user plane channel may be a user plane channel for downloading a certificate. In another implementation, the DNN is a DNN for the first access mode or a DNN for the first access mode of the user plane type.

[0302] The fourth condition includes at least one of the following:

[0303] The access mode information requested by the terminal includes one of the following: a first access mode, a first access mode of a user plane type;

[0304] The terminal access mode information requested by the sixth communication device includes one of the following: a first access mode, a first access mode of a user plane type;

[0305] The type information of the terminal certificate downloading method requested by the sixth communication device includes: a user plane type certificate downloading method;

[0306] The information of the preconfigured terminal access mode includes one of the following: a first access mode, a first access mode of a user plane type;

[0307] The type information of the pre-configured terminal certificate download method includes: the certificate download method of the user plane type;

[0308] The capability information of the terminal indicates at least one of the following: the terminal supports a first access method of a user plane type, the terminal supports a certificate download method of a user plane type, the terminal does not support a certificate download method of a control plane type, the terminal does not support the first access method of the control plane type, the terminal has user plane capability, and a key for communication between the terminal and the first network cannot be derived according to a default certificate;

[0309] The first network supports a user plane type certificate download method;

[0310] The first network supports a first access mode of a user plane type;

[0311] The first network does not support the control plane type certificate download method;

[0312] The first network does not support a first access method of the control plane type.

[0313] Optionally, the operations of sending the first indication information and / or sending the second indication information may include:

[0314] When it is determined that the type of the first access method is a first access method of a control plane type, or when it is determined that the type of the certificate download method is a certificate download method of a control plane type, sending first indication information and / or sending second indication information; wherein the first indication information indicates that the first access method of the control plane type is adopted; and the second indication information indicates that the certificate download method of the control plane type is adopted;

[0315] and / or,

[0316] When it is determined that the type of the first access method is a first access method of the user plane type, or when it is determined that the type of the certificate download method is a certificate download method of the user plane type, a first indication message is sent and / or a second indication message is sent; wherein, the first indication message indicates that the first access method of the control plane type is not adopted; and the second indication message indicates that the certificate download method of the control plane type is not adopted.

[0317] In one implementation, the first network supports the first access mode of the user plane type or the certificate download mode of the user plane type by default; the first network optionally supports the first access mode of the control plane type or the certificate download mode of the control plane type. At this time, the first indication information or the second indication information may be sent.

[0318] Further, when it is determined that the type of the first access method is a first access method of a control plane type, or when it is determined that the type of the certificate download method is a certificate download method of a control plane type, the first indication information may indicate the use of the first access method of the control plane type, and the second indication information may indicate the use of the certificate download method of the control plane type.

[0319] Further, when the type of the first access method is determined to be a first access method of a user plane type or the type of the certificate download method is determined to be a certificate download method of a user plane type, the first indication information may indicate that the first access method of a control plane type is not adopted, and the second indication information may indicate that the certificate download method of a control plane type is not adopted.

[0320] In another implementation, the first network may optionally support a first access method of a user plane type and / or a first access method of a control plane type. Alternatively, the first network may optionally support a certificate download method of a user plane type and / or a certificate download method of a control plane type. At this time, the type information of the determined first access method may be sent, and the type information of the first access method is used to indicate one of the following: a first access method of a control plane type, a first access method of a user plane type; and / or, the type information of the determined certificate download method is sent, and the type information of the certificate download method is used to indicate one of the following: a certificate download method of a control plane type, a certificate download method of a user plane type.

[0321] It is not difficult to understand that, through this embodiment, the terminal can be supported to determine the method for downloading the certificate.

[0322] Please refer to Figure 4 The embodiment of the present application provides a method for accessing a network, which is applied to a third communication device; the third communication device includes but is not limited to: a UE; the method includes:

[0323] Step 41: Receive third information and / or access acceptance information.

[0324] Optionally, the third information includes at least one of the following: type information of the first access method, type information of the certificate download method, first indication information, and second indication information; wherein, the type information of the first access method is used to indicate one of the following: a first access method of a control plane type, a first access method of a user plane type; the type information of the certificate download method is used to indicate one of the following: a certificate download method of a control plane type, a certificate download method of a user plane type; the first indication information is used to indicate one of the following: adopting the first access method of the control plane type, or not adopting the first access method of the control plane type; the second indication information is used to indicate one of the following: adopting the certificate download method of the control plane type, or not adopting the certificate download method of the control plane type.

[0325] In one implementation, only the access acceptance information may be received, but the third information may not be received. In another implementation, the third information and the access acceptance information may be received. In another implementation, only the third information may be received, but the access acceptance information may not be received.

[0326] In one implementation, the access acceptance message is an access acceptance message obtained after the terminal accesses the first network, including but not limited to a registration acceptance message.

[0327] Optionally, the first access method includes: an access method of accessing the first network in order to download a certificate for accessing the second network.

[0328] Optionally, the first access method of the control plane type includes: an access method of accessing the first network in order to download a certificate for accessing the second network, and a method of downloading the certificate for accessing the second network is a certificate download method of the control plane type.

[0329] Optionally, the first access method of the user plane type includes: an access method of accessing the first network in order to download a certificate for accessing the second network, and a method of downloading the certificate for accessing the second network is a certificate download method of the user plane type.

[0330] Optionally, the first network and the second network are the same network or different networks.

[0331] Step 42: Determine whether to perform a third operation according to the third information and / or the access acceptance information.

[0332] Optionally, the third operation includes: requesting the first network to establish a data channel, where the data channel is used to download a certificate for accessing the second network.

[0333] Optionally, the access acceptance information is information that the terminal is accepted by the first network. The access acceptance information can be embodied by a registration acceptance message or a service acceptance message.

[0334] Further, the determining whether to execute the third operation according to the third information and / or the access acceptance information may include: executing the third operation when a fifth condition is met.

[0335] The fifth condition includes at least one of the following:

[0336] The third information includes type information of the first access method, and the type information of the first access method indicates a first access method of a user plane type;

[0337] The third information includes type information of the certificate downloading method, and the type information of the certificate downloading method indicates a certificate downloading method of a user plane type;

[0338] The third information includes first indication information, and the first indication information indicates that a first access method of a control plane type is not adopted;

[0339] The third information includes second indication information, and the second indication information indicates that a control plane type certificate download method is not adopted;

[0340] Only the access acceptance information is received, and / or the third information is not received.

[0341] In an implementation manner, when the terminal and / or the first network supports the first access method, the terminal and / or the first network may support the first access method of the user plane type by default.

[0342] In an implementation manner, when the terminal and / or the first network supports the first access mode, the terminal and / or the first network may support the user plane type certificate download mode by default.

[0343] Further, determining whether to execute the third operation according to the third information may include: when a sixth condition is met, not executing the third operation.

[0344] The sixth condition includes at least one of the following:

[0345] The third information includes type information of the first access method, and the type information of the first access method indicates a first access method of a control plane type;

[0346] The third information includes type information of the certificate downloading method, and the type information of the certificate downloading method indicates a certificate downloading method of a control plane type;

[0347] The third information includes first indication information, and the first indication information indicates a first access method of a control plane type;

[0348] The third information includes second indication information, and the second indication information indicates a control plane type certificate download method.

[0349] In the embodiment of the present application, optionally, before receiving the third information, the method may further include:

[0350] Sending second information; wherein the second information includes at least one of the following: information on the access method requested by the terminal and capability information of the terminal.

[0351] Optionally, the access mode information requested by the terminal includes one of the following: a first access mode, a first access mode of a control plane type, and a first access mode of a user plane type.

[0352] Optionally, the capability information of the terminal is used to indicate at least one of the following:

[0353] The terminal supports the certificate downloading method of the control plane type or the terminal does not support the certificate downloading method of the control plane type;

[0354] The terminal supports the certificate downloading method of the user plane type or the terminal does not support the certificate downloading method of the user plane type;

[0355] The terminal supports the first access method of the control plane type or the terminal does not support the first access method of the control plane type;

[0356] The terminal supports the first access mode of the user plane type or the terminal does not support the first access mode of the user plane type;

[0357] The terminal has the capability of user plane or the terminal does not have the capability of user plane;

[0358] The key used for communication between the terminal and the first network can be derived according to the default certificate, or the key used for communication between the terminal and the first network cannot be derived according to the default certificate.

[0359] Optionally, the key used for communication between the terminal and the first network includes but is not limited to at least one of the following: K SEAF , K AUSF , K AMF , encryption key, integrity protection key. The key used for communication between the terminal and the first network can be used to derive the encryption key and / or integrity protection key of the communication data between the terminal and the first network.

[0360] It is not difficult to understand that, through this embodiment, the terminal can be supported to determine the method for downloading the certificate.

[0361] Please refer to Figure 5 The embodiment of the present application provides a network selection method, which is applied to a fourth communication device; the fourth communication device includes but is not limited to: a RAN network element; the RAN network element may be a RAN network element in the first network. The method includes:

[0362] Step 51: Send or broadcast fourth indication information.

[0363] Optionally, the fourth indication information is used to indicate any one of the following:

[0364] The network supports the control plane type certificate download method, or the network does not support the control plane type certificate download method;

[0365] The network supports the user plane type certificate download method, or the network does not support the user plane type certificate download method;

[0366] The network supports the first access method of the control plane type, or the network does not support the first access method of the control plane type;

[0367] The network supports the first access method of the user plane type, or the network does not support the first access method of the user plane type.

[0368] Optionally, the first access method includes: an access method of accessing the first network in order to download a certificate for accessing the second network.

[0369] Optionally, the first access method of the control plane type includes: an access method of accessing the first network in order to download a certificate for accessing the second network, and a method of downloading the certificate for accessing the second network is a certificate download method of the control plane type.

[0370] Optionally, the first access method of the user plane type includes: an access method of accessing the first network in order to download a certificate for accessing the second network, and a method of downloading the certificate for accessing the second network is a certificate download method of the user plane type.

[0371] Optionally, the first network and the second network are the same network or different networks.

[0372] It is not difficult to understand that, through this embodiment, the terminal can be supported to select a network that meets its own capabilities for access.

[0373] Please refer to Figure 6 The embodiment of the present application further provides a network selection method, which is applied to a fifth communication device; the fifth communication device includes but is not limited to: UE; the method includes:

[0374] Step 61: Obtain fourth indication information.

[0375] Optionally, the fourth indication information is used to indicate any one of the following:

[0376] The network supports the control plane type certificate download method, or the network does not support the control plane type certificate download method;

[0377] The network supports the user plane type certificate download method, or the network does not support the user plane type certificate download method;

[0378] The network supports the first access method of the control plane type, or the network does not support the first access method of the control plane type;

[0379] The network supports the first access method of the user plane type, or the network does not support the first access method of the user plane type.

[0380] Optionally, the first access method includes: an access method of accessing the first network in order to download a certificate for accessing the second network.

[0381] Optionally, the first access method of the control plane type includes: an access method of accessing the first network in order to download a certificate for accessing the second network, and a method of downloading the certificate for accessing the second network is a certificate download method of the control plane type.

[0382] Optionally, the first access method of the user plane type includes: an access method of accessing the first network in order to download a certificate for accessing the second network, and a method of downloading the certificate for accessing the second network is a certificate download method of the user plane type.

[0383] Optionally, the first network and the second network are the same network or different networks.

[0384] Step 62: Execute a network selection operation according to the fourth information.

[0385] Optionally, the fourth information may include at least one of the following: fourth indication information, capability information of the terminal, information on the access method requested by the terminal, and type information on the certificate download method requested by the terminal.

[0386] In one implementation, the fourth communication device obtains at least one of the following through configuration: information about the access method requested by the terminal, and type information about the certificate download method requested by the terminal.

[0387] Optionally, the capability information of the terminal is used to indicate at least one of the following: the terminal supports the certificate download method of the control plane type or the terminal does not support the certificate download method of the control plane type; the terminal supports the certificate download method of the user plane type or the terminal does not support the certificate download method of the user plane type; the terminal supports the first access method of the control plane type or the terminal does not support the first access method of the control plane type; the terminal supports the first access method of the user plane type or the terminal does not support the first access method of the user plane type; the terminal has the user plane capability or the terminal does not have the user plane capability; the key used for communication between the terminal and the first network can be derived according to the default certificate or the key used for communication between the terminal and the first network cannot be derived according to the default certificate.

[0388] Optionally, the information on the access method requested by the terminal includes one of the following: a first access method, a first access method of a control plane type, and a first access method of a user plane type.

[0389] Optionally, the type information of the certificate downloading method requested by the terminal includes one of the following: a control plane type certificate downloading method, a user plane type certificate downloading method.

[0390] Optionally, the key used for communication between the terminal and the first network includes but is not limited to at least one of the following: K SEAF , K AUSF , K AMF, encryption key, integrity protection key. The key used for communication between the terminal and the first network can be used to derive the encryption key and / or integrity protection key of the communication data between the terminal and the first network.

[0391] Optionally, the operation of performing network selection according to the fourth information may include at least one of the following:

[0392] Selecting a network, wherein fourth indication information of the selected network conforms to capability information of the terminal;

[0393] Selecting a network, wherein the fourth indication information of the selected network conforms to the information of the access mode requested by the terminal;

[0394] A network is selected, and fourth indication information of the selected network conforms to type information of the certificate downloading method requested by the terminal.

[0395] Further, the fourth indication information of the selected network conforming to the terminal capability information may include at least one of the following:

[0396] 1) The fourth indication information indicates any one of the following: the network supports the certificate download method through the control plane type, the network does not support the certificate download method through the user plane type, the network supports the first access method of the control plane type, and the network does not support the first access method of the user plane type; and the capability information of the terminal indicates any one of the following: the terminal supports the certificate download method of the control plane type, the terminal does not support the certificate download method of the user plane type, the terminal supports the first access method of the control plane type, the terminal does not support the first access method of the user plane type, the terminal does not have the user plane capability, and the key used for communication between the terminal and the first network can be derived according to the default certificate.

[0397] It is not difficult to understand from this that when the network only supports the control plane type certificate download method, only terminals that support the control plane type certificate download method, or terminals that support the control plane type certificate download method and / or support the user plane type at the same time, will select the network.

[0398] 2) The fourth indication information indicates any one of the following: the network does not support the certificate download method through the control plane type; the network supports the certificate download method through the user plane type; the network does not support the first access method of the control plane type; the network supports the first access method of the user plane type; and the capability information of the terminal indicates at least one of the following: the terminal does not support the certificate download method of the control plane type, the terminal supports the certificate download method of the user plane type, the terminal does not support the first access method of the control plane type, the terminal supports the first access method of the user plane type, the terminal has the user plane capability, and the key used for communication between the terminal and the first network cannot be derived according to the default certificate.

[0399] It is not difficult to understand from this that when the network only supports the user plane type certificate download method, only terminals that support the user plane type certificate download method, or terminals that support the control plane type certificate download method and / or support the user plane type at the same time, will select the network.

[0400] 3) The fourth indication information indicates any one of the following: the network supports the certificate download method through the control plane type, the network supports the certificate download method through the user plane type, the network supports the first access method of the control plane type, and the network supports the first access method of the user plane type.

[0401] It is not difficult to understand that when the network supports both the control plane type certificate downloading method and the user plane type certificate downloading method, the network can be selected for terminals supporting the control plane type certificate downloading method and / or supporting the user plane type.

[0402] 4) The capability information of the terminal indicates at least one of the following: the terminal supports a control plane type certificate download method, the terminal supports a user plane type certificate download method, the terminal supports a control plane type first access method, the terminal supports a user plane type first access method, the terminal has user plane capability, and can derive a key for communication between the terminal and the first network based on a default certificate.

[0403] It is not difficult to understand that when the terminal supports both the control plane type certificate downloading method and the user plane type certificate downloading method, the selected network supports the control plane type certificate downloading method and / or the user plane type certificate downloading method.

[0404] Further, the fourth indication information of the selected network conforms to the information of the access mode requested by the terminal and may include at least one of the following:

[0405] 1) The fourth indication information indicates any one of the following: the network supports the certificate download method through the control plane type, the network does not support the certificate download method through the user plane type, the network supports the first access method of the control plane type, and the network does not support the first access method of the user plane type; and the information of the access method requested by the terminal includes any one of the following: the first access method, the first access method of the control plane type.

[0406] 2) The fourth indication information indicates any one of the following: the network does not support the certificate download method through the control plane type; the network supports the certificate download method through the user plane type; the network does not support the first access method of the control plane type; the network supports the first access method of the user plane type; and the information on the access method requested by the terminal includes any one of the following: the first access method, the first access method of the user plane type.

[0407] Further, the fourth indication information of the selected network conforms to the type information of the certificate download mode requested by the terminal and may include at least one of the following:

[0408] 1) The fourth indication information indicates any one of the following: the network supports the certificate download method through the control plane type, the network does not support the certificate download method through the user plane type, the network supports the first access method of the control plane type, and the network does not support the first access method of the user plane type; and the type information of the certificate download method requested by the terminal includes any one of the following: the certificate download method of the control plane type.

[0409] 2) The fourth indication information indicates any one of the following: the network does not support the certificate download method through the control plane type; the network supports the certificate download method through the user plane type; the network does not support the first access method of the control plane type; the network supports the first access method of the user plane type; and the type information of the certificate download method requested by the terminal includes: the certificate download method of the user plane type.

[0410] Optionally, the operation of performing network selection according to the fourth information may include at least one of the following:

[0411] (1) When the terminal supports both the control plane type certificate downloading method and the user plane type certificate downloading method, the selected network supports the control plane type certificate downloading method and / or supports the user plane type certificate downloading method;

[0412] (2) When the terminal only supports the control plane type certificate download method, the selected network at least supports the control plane type certificate download method;

[0413] (3) When the terminal only supports the user plane type certificate download method, the selected network at least supports the user plane type certificate download method;

[0414] (4) When the terminal supports both the first access method of the control plane type and the first access method of the user plane type, the selected network supports the first access method of the control plane type and / or supports the first access method of the user plane type;

[0415] (5) When the terminal supports only the first access method of the control plane type, the selected network supports at least the first access method of the control plane type;

[0416] (6) When the terminal only supports the first access method of the user plane type, the selected network at least supports the first access method of the user plane type.

[0417] In one implementation, at least supporting a control plane type certificate download method includes: supporting a control plane type certificate download method, supporting a control plane type certificate download method, and supporting a user plane type certificate download method.

[0418] In one implementation, at least supporting a user plane type certificate downloading method includes: supporting a user plane type certificate downloading method, supporting a control plane type certificate downloading method, and supporting a user plane type certificate downloading method.

[0419] In one implementation, at least supporting the first access method of the control plane type includes: supporting the first access method of the control plane type, supporting the first access method of the control plane type, and supporting the first access method of the user plane type.

[0420] In one implementation, at least supporting the first access method of the user plane type includes: supporting the first access method of the user plane type, supporting the first access method of the control plane type, and supporting the first access method of the user plane type.

[0421] It is not difficult to understand that, through this embodiment, the terminal can be supported to select a network that meets its own capabilities for access.

[0422] The method provided in this application is described below in conjunction with specific embodiments.

[0423] Example 1

[0424] In this embodiment 1, Figure 7 As shown, the corresponding method process for accessing the network may include:

[0425] Step 71: The UE initiates a registration request message to the first network, wherein the registration request message includes second information, such as Figure 2 Described in the examples.

[0426] Step 72: A CN network element in the first network, such as AMF, performs a second operation, such as sending a registration acceptance message to the UE, according to the second information and / or the fifth information. Figure 3 Described in the examples.

[0427] Optionally, when the UE supports the certificate download method of the user plane type by default, the second information may include the control plane capability of the terminal, such as the terminal supports the certificate download method of the control plane type, or the terminal does not support the certificate download method of the control plane type. The registration acceptance message includes type information of the certificate download method, and the type information of the certificate download method is used to indicate the certificate download method of the control plane type or the certificate download method of the user plane type.

[0428] In one implementation, the registration acceptance message includes third information. The third information is as follows: Figure 3 Described in the examples.

[0429] In another implementation manner, the registration acceptance message does not include the third information.

[0430] Step 73: The UE performs a third operation according to the third information and / or the registration acceptance message. The third operation is as follows: Figure 4 Described in the examples.

[0431] For example, the UE may establish a PDU session according to an indication of a user plane type certificate downloading method or in the absence of an indication of a control plane type certificate downloading method, where the PDU session is used to download a certificate for accessing the second network.

[0432] Example 2

[0433] In this embodiment 2, Figure 8 As shown, the corresponding network selection process may include:

[0434] Step 81: A RAN network element (such as a RAN network element in the first network) broadcasts fourth indication information, such as Figure 5 Described in the examples.

[0435] Step 82: The UE performs a network selection operation according to the fourth information. Optionally, the fourth information may include at least one of the following: fourth indication information and terminal capability information. The terminal capability information is as follows: Figure 5 Described in the examples.

[0436] For example, the SIB broadcast of the RAN network element supports the certificate download mode of the user plane type and / or the certificate download mode of the control plane type. The UE receives the certificate according to the SIB broadcast content and the terminal capability information it has (such as Figure 6 Embodiment), such as the ability of the control plane type certificate download method and / or the ability of the user plane type certificate download method, to perform network selection operations, specifically as Figure 6 The embodiments are described in detail and will not be repeated here.

[0437] Please refer to Fig. 9 , the embodiment of the present application provides a device for accessing a network, which is applied to a first communication device, such as Fig. 9 As shown, the network access device 90 includes:

[0438] A first execution module 91, configured to execute a first operation according to the first information;

[0439] Among them, the first information is used to indicate at least one of the following: the key used for communication between the terminal and the first network can be derived according to the default certificate or the key used for communication between the terminal and the first network cannot be derived according to the default certificate; the terminal has the user plane capability or the terminal does not have the user plane capability; the terminal supports the certificate download method of the control plane type or the terminal does not support the certificate download method of the control plane type; the terminal supports the certificate download method of the user plane type or the terminal does not support the certificate download method of the user plane type; the terminal supports the first access method of the control plane type or the terminal does not support the first access method of the control plane type; the terminal supports the first access method of the user plane type or the terminal does not support the first access method of the user plane type;

[0440] The first operation includes any one of the following:

[0441] Determine information about the access method requested by the terminal, wherein the information about the access method requested by the terminal includes one of the following: a first access method, a first access method of a control plane type, and a first access method of a user plane type;

[0442] Determine the type information of the certificate downloading method requested by the terminal, wherein the type information of the certificate downloading method requested by the terminal includes one of the following: a control plane type certificate downloading method, a user plane type certificate downloading method;

[0443] Determine whether the terminal supports the certificate download method of the control plane type, or determines whether the terminal does not support the certificate download method of the control plane type.

[0444] Determine that the terminal supports the certificate download method of the user plane type, or determine that the terminal does not support the certificate download method of the user plane type;

[0445] Determining that the terminal supports a first access method of the control plane type, or determining that the terminal does not support the first access method of the control plane type;

[0446] Determining that the terminal supports a first access method of the user plane type, or determining that the terminal does not support the first access method of the user plane type;

[0447] Among them, the first access method includes: an access method for accessing the first network in order to download a certificate for accessing the second network; the first access method of the control plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the control plane type; the first access method of the user plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the user plane type; the first network and the second network are the same network or different networks.

[0448] Optionally, the first execution module 91 is specifically configured to: determine that the information of the access mode requested by the terminal is a first access mode of a user plane type when at least one of the following conditions is met:

[0449] The first information indicates that a key used for communication between the terminal and the first network cannot be derived according to the default certificate;

[0450] The first information indicates that the terminal does not support a control plane type certificate download method;

[0451] The first information indicates that the terminal does not support a first access mode of the control plane type;

[0452] The first information indicates that the terminal has a user plane capability;

[0453] The first information indicates that the terminal supports a user plane type certificate download method;

[0454] The first information indicates that the terminal supports a first access mode of a user plane type.

[0455] And / or, the first execution module 91 is specifically used to: when the first condition is met, determine that the terminal does not support the certificate download method of the control plane type or determine that the terminal does not support the first access method of the control plane type;

[0456] The first condition includes at least one of the following:

[0457] The first information indicates that a key used for communication between the terminal and the first network cannot be derived according to the default certificate;

[0458] The first information indicates that the terminal does not support a control plane type certificate download method;

[0459] The first information indicates that the terminal does not support a first access method of the control plane type.

[0460] Optionally, the first execution module 91 is specifically configured to: determine that the information of the access mode requested by the terminal is a first access mode of a control plane type when at least one of the following items is satisfied:

[0461] The first information indicates that the terminal does not have a user plane capability;

[0462] The first information indicates that the terminal does not support a user plane type certificate download method;

[0463] The first information indicates that the terminal does not support a first access mode of the user plane type;

[0464] The first information indicates that a key used for communication between the terminal and the first network can be derived according to the default certificate;

[0465] The first information indicates that the terminal supports a control plane type certificate download method;

[0466] The first information indicates that the terminal supports a first access method of a control plane type.

[0467] And / or, the first execution module 91 is specifically used to: when the second condition is met, determine that the terminal does not support the certificate download mode of the user plane type or determine that the terminal does not support the first access mode of the user plane type;

[0468] The second condition includes at least one of the following:

[0469] The first information indicates that the terminal does not have a user plane capability;

[0470] The first information indicates that the terminal does not support a user plane type certificate download method;

[0471] The first information indicates that the terminal does not support a first access mode of the user plane type.

[0472] Optionally, the network access device 90 further includes:

[0473] A first sending module, used for sending second information;

[0474] The second information includes at least one of the following: information about the access method requested by the terminal, capability information of the terminal, and type information about the certificate download method requested by the terminal.

[0475] The access method information requested by the terminal includes one of the following: a first access method, a first access method of a control plane type, and a first access method of a user plane type;

[0476] The type information of the certificate downloading method requested by the terminal includes one of the following: a control plane type certificate downloading method, a user plane type certificate downloading method;

[0477] The capability information of the terminal is used to indicate at least one of the following:

[0478] The terminal supports the certificate downloading method of the control plane type or the terminal does not support the certificate downloading method of the control plane type;

[0479] The terminal supports the certificate downloading method of the user plane type or the terminal does not support the certificate downloading method of the user plane type;

[0480] The terminal supports the first access method of the control plane type or the terminal does not support the first access method of the control plane type;

[0481] The terminal supports the first access mode of the user plane type or the terminal does not support the first access mode of the user plane type;

[0482] The terminal has the capability of user plane or the terminal does not have the capability of user plane;

[0483] The key used for communication between the terminal and the first network can be derived according to the default certificate, or the key used for communication between the terminal and the first network cannot be derived according to the default certificate.

[0484] Optionally, the network access device 90 further includes:

[0485] A first receiving module is configured to receive third information and / or an access acceptance message; wherein the third information includes at least one of the following: type information of the first access method, type information of the certificate download method, first indication information, and second indication information; wherein the type information of the first access method is used to indicate one of the following: a first access method of a control plane type, a first access method of a user plane type; the type information of the certificate download method is used to indicate one of the following: a certificate download method of a control plane type, a certificate download method of a user plane type; the first indication information is used to indicate one of the following: adopting the first access method of the control plane type, or not adopting the first access method of the control plane type; the second indication information is used to indicate one of the following: adopting the certificate download method of the control plane type, or not adopting the certificate download method of the control plane type;

[0486] The first execution module 91 is further used to: determine whether to execute a third operation according to the third information and / or the access acceptance message;

[0487] The third operation includes: requesting the first network to establish a data channel, where the data channel is used to download a certificate for accessing the second network.

[0488] Optionally, the first execution module 91 is specifically configured to:

[0489] When the fifth condition is met, performing the third operation;

[0490] The fifth condition includes at least one of the following:

[0491] The third information includes type information of the first access method, and the type information of the first access method indicates a first access method of a user plane type;

[0492] The third information includes type information of the certificate downloading method, and the type information of the certificate downloading method indicates a certificate downloading method of a user plane type;

[0493] The third information includes first indication information, and the first indication information indicates that a first access method of a control plane type is not adopted;

[0494] The third information includes second indication information, and the second indication information indicates that a control plane type certificate download method is not adopted;

[0495] Only the access acceptance information is received, and / or the third information is not received.

[0496] Optionally, the first execution module 91 is specifically configured to:

[0497] When the sixth condition is met, the third operation is not performed;

[0498] The sixth condition includes at least one of the following:

[0499] The third information includes type information of the first access method, and the type information of the first access method indicates a first access method of a control plane type;

[0500] The third information includes type information of the certificate downloading method, and the type information of the certificate downloading method indicates a certificate downloading method of a control plane type;

[0501] The third information includes first indication information, and the first indication information indicates a first access method of a control plane type;

[0502] The third information includes second indication information, and the second indication information indicates a control plane type certificate download method.

[0503] In this embodiment, the device 90 for accessing the network can implement the present application Figure 2 The various processes implemented in the illustrated method embodiment and the same beneficial effects achieved are not described again here to avoid repetition.

[0504] Please refer to Fig.10 , the embodiment of the present application provides a device for accessing a network, which is applied to a second communication device, such as Fig.10 As shown, the network access device 100 includes:

[0505] The first acquisition module 101 is used to acquire the second information and / or the fifth information; wherein the second information includes at least one of the following: information on the access method requested by the terminal, type information on the certificate download method requested by the terminal, and capability information of the terminal; the fifth information includes at least one of the following: information on the terminal access method requested by the sixth communication device, type information on the terminal certificate download method requested by the sixth communication device, information on the pre-configured terminal access method, and type information on the pre-configured terminal certificate download method;

[0506] A second execution module 102, configured to execute a second operation according to the second information and / or the fifth information;

[0507] The second operation includes at least one of the following:

[0508] Determine a type of a first access method, where the type of the first access method includes one of the following: a first access method of a control plane type, and a first access method of a user plane type;

[0509] Determine a type of certificate downloading method, where the type of certificate downloading method includes one of the following: a control plane type certificate downloading method, a user plane type certificate downloading method;

[0510] Executing the first access mode of the determined type;

[0511] Execute the certificate downloading method of the determined type;

[0512] Sending the determined type information of the first access method, where the type information of the first access method is used to indicate one of the following: a first access method of a control plane type, and a first access method of a user plane type;

[0513] Sending the determined type information of the certificate downloading method, where the type information of the certificate downloading method is used to indicate one of the following: a control plane type certificate downloading method, a user plane type certificate downloading method;

[0514] Determine first indication information, where the first indication information is used to indicate one of the following: adopting a first access method of a control plane type, or not adopting the first access method of a control plane type;

[0515] Sending first indication information, where the first indication information is used to indicate one of the following: adopting a first access method of a control plane type, or not adopting the first access method of a control plane type;

[0516] Determine second indication information, where the second indication information is used to indicate one of the following: adopting a control plane type certificate downloading method, or not adopting a control plane type certificate downloading method;

[0517] Sending second indication information, where the second indication information is used to indicate one of the following: adopting a control plane type certificate downloading method, or not adopting a control plane type certificate downloading method;

[0518] The access mode information requested by the terminal includes one of the following: a first access mode, a first access mode of a control plane type, and a first access mode of a user plane type;

[0519] The capability information of the terminal is used to indicate at least one of the following:

[0520] The terminal supports the certificate downloading method of the control plane type or the terminal does not support the certificate downloading method of the control plane type;

[0521] The terminal supports the certificate downloading method of the user plane type or the terminal does not support the certificate downloading method of the user plane type;

[0522] The terminal supports the first access method of the control plane type or the terminal does not support the first access method of the control plane type;

[0523] The terminal supports the first access mode of the user plane type or the terminal does not support the first access mode of the user plane type;

[0524] The terminal has the capability of user plane or the terminal does not have the capability of user plane;

[0525] A key for communication between the terminal and the first network can be derived according to the default certificate or a key for communication between the terminal and the first network cannot be derived according to the default certificate;

[0526] Among them, the first access method includes: an access method for accessing the first network in order to download a certificate for accessing the second network; the first access method of the control plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the control plane type; the first access method of the user plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the user plane type; the first network and the second network are the same network or different networks.

[0527] Optionally, the second execution module 102 is specifically configured to:

[0528] When the third condition is met, performing at least one of the following: determining that the type of the first access method is a first access method of a control plane type, determining that the type of the certificate download method is a certificate download method of a control plane type, determining that the first indication information indicates that the first access method of the control plane type is adopted, and determining that the second indication information indicates that the certificate download method of the control plane type is adopted;

[0529] The third condition includes at least one of the following:

[0530] The access mode information requested by the terminal includes one of the following: a first access mode, a first access mode of a control plane type;

[0531] The information of the terminal access mode requested by the sixth communication device includes one of the following: a first access mode, a first access mode of a control plane type;

[0532] The type information of the terminal certificate downloading method requested by the sixth communication device includes: a control plane type certificate downloading method;

[0533] The information of the preconfigured terminal access mode includes one of the following: a first access mode, a first access mode of a control plane type;

[0534] The type information of the pre-configured terminal certificate download method includes: the certificate download method of the control plane type;

[0535] The capability information of the terminal indicates at least one of the following: the terminal supports a certificate download method of a control plane type, the terminal supports a first access method of a control plane type, the terminal does not support a certificate download method of a user plane type, the terminal does not support a first access method of a user plane type, the terminal does not have a user plane capability, and a key for communication between the terminal and the first network can be derived according to a default certificate;

[0536] The first network supports a control plane type certificate download method;

[0537] The first network supports a first access mode of a control plane type;

[0538] The first network does not support the user plane type certificate download method;

[0539] The first network does not support a first access mode of the user plane type.

[0540] Optionally, the second execution module 102 is specifically configured to:

[0541] When the fourth condition is met, performing at least one of the following: determining that the type of the first access method is a first access method of a user plane type, determining that the type of the certificate download method is a certificate download method of a user plane type, determining that the first indication information indicates that the first access method of a control plane type is not adopted, determining that the second indication information indicates that the certificate download method of the control plane type is not adopted, sending address information of the configuration server to the terminal, sending slice information to the terminal, and sending a DNN to the terminal;

[0542] The fourth condition includes at least one of the following:

[0543] The access mode information requested by the terminal includes one of the following: a first access mode, a first access mode of a user plane type;

[0544] The terminal access mode information requested by the sixth communication device includes one of the following: a first access mode, a first access mode of a user plane type;

[0545] The type information of the terminal certificate downloading method requested by the sixth communication device includes: a user plane type certificate downloading method;

[0546] The information of the preconfigured terminal access mode includes one of the following: a first access mode, a first access mode of a user plane type;

[0547] The type information of the pre-configured terminal certificate download method includes: the certificate download method of the user plane type;

[0548] The capability information of the terminal indicates at least one of the following: the terminal supports a first access method of a user plane type, the terminal supports a certificate download method of a user plane type, the terminal does not support a certificate download method of a control plane type, the terminal does not support the first access method of the control plane type, the terminal has user plane capability, and a key for communication between the terminal and the first network cannot be derived according to a default certificate;

[0549] The first network supports a user plane type certificate download method;

[0550] The first network supports a first access mode of a user plane type;

[0551] The first network does not support the control plane type certificate download method;

[0552] The first network does not support a first access method of the control plane type.

[0553] Optionally, the second execution module 102 is specifically configured to:

[0554] When it is determined that the type of the first access method is a first access method of a control plane type, or when it is determined that the type of the certificate download method is a certificate download method of a control plane type, sending first indication information and / or sending second indication information; wherein the first indication information indicates that the first access method of the control plane type is adopted; and the second indication information indicates that the certificate download method of the control plane type is adopted;

[0555] And / or, when it is determined that the type of the first access method is a first access method of a user plane type, or when it is determined that the type of the certificate download method is a certificate download method of a user plane type, a first indication message is sent and / or a second indication message is sent; wherein, the first indication information indicates that the first access method of a control plane type is not adopted; and the second indication information indicates that the certificate download method of a control plane type is not adopted.

[0556] In this embodiment, the network access device 100 can implement the present application Figure 3 The various processes implemented in the illustrated method embodiment and the same beneficial effects achieved are not described again here to avoid repetition.

[0557] Please refer to Fig.11 , the embodiment of the present application provides a device for accessing a network, which is applied to a third communication device, such as Fig.11 As shown, the network access device 110 includes:

[0558] The second receiving module 111 is used to receive third information and / or an access acceptance message; wherein the third information includes at least one of the following: type information of the first access method, type information of the certificate download method, first indication information, and second indication information; wherein the type information of the first access method is used to indicate one of the following: a first access method of a control plane type, a first access method of a user plane type; the type information of the certificate download method is used to indicate one of the following: a certificate download method of a control plane type, a certificate download method of a user plane type; the first indication information is used to indicate one of the following: adopting the first access method of the control plane type, not adopting the first access method of the control plane type; the second indication information is used to indicate one of the following: adopting the certificate download method of the control plane type, not adopting the certificate download method of the control plane type;

[0559] A third execution module 112, configured to determine whether to execute a third operation according to the third information and / or the access acceptance message;

[0560] The third operation includes: requesting the first network to establish a data channel, wherein the data channel is used to download a certificate for accessing the second network;

[0561] Among them, the first access method includes: an access method for accessing the first network in order to download a certificate for accessing the second network; the first access method of the control plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the control plane type; the first access method of the user plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the user plane type; the first network and the second network are the same network or different networks.

[0562] Optionally, the third execution module 112 is specifically configured to:

[0563] When the fifth condition is met, performing the third operation;

[0564] The fifth condition includes at least one of the following:

[0565] The third information includes type information of the first access method, and the type information of the first access method indicates a first access method of a user plane type;

[0566] The third information includes type information of the certificate downloading method, and the type information of the certificate downloading method indicates a certificate downloading method of a user plane type;

[0567] The third information includes first indication information, and the first indication information indicates that a first access method of a control plane type is not adopted;

[0568] The third information includes second indication information, and the second indication information indicates that a control plane type certificate download method is not adopted;

[0569] Only the access acceptance information is received, and / or the third information is not received.

[0570] Optionally, the third execution module 112 is specifically configured to:

[0571] When the sixth condition is met, the third operation is not performed;

[0572] The sixth condition includes at least one of the following:

[0573] The third information includes type information of the first access method, and the type information of the first access method indicates a first access method of a control plane type;

[0574] The third information includes type information of the certificate downloading method, and the type information of the certificate downloading method indicates a certificate downloading method of a control plane type;

[0575] The third information includes first indication information, and the first indication information indicates a first access method of a control plane type;

[0576] The third information includes second indication information, and the second indication information indicates a control plane type certificate download method.

[0577] Optionally, the network access device 110 further includes:

[0578] The second sending module is used to send second information; wherein the second information includes at least one of the following: information on the access method requested by the terminal and capability information of the terminal.

[0579] The access method information requested by the terminal includes one of the following: a first access method, a first access method of a control plane type, and a first access method of a user plane type;

[0580] The capability information of the terminal is used to indicate at least one of the following:

[0581] The terminal supports the certificate downloading method of the control plane type or the terminal does not support the certificate downloading method of the control plane type;

[0582] The terminal supports the certificate downloading method of the user plane type or the terminal does not support the certificate downloading method of the user plane type;

[0583] The terminal supports the first access method of the control plane type or the terminal does not support the first access method of the control plane type;

[0584] The terminal supports the first access mode of the user plane type or the terminal does not support the first access mode of the user plane type;

[0585] The terminal has the capability of user plane or the terminal does not have the capability of user plane;

[0586] A key used for communication between the terminal and the first network can be derived according to the default certificate, or a key used for communication between the terminal and the first network cannot be derived according to the default certificate.

[0587] In this embodiment, the device 110 for accessing the network can implement the present application Figure 4 The various processes implemented in the illustrated method embodiment and the same beneficial effects achieved are not described again here to avoid repetition.

[0588] Please refer to Fig.12 , the embodiment of the present application provides a network selection device, which is applied to a fourth communication device, such as Fig.12 As shown, the network selection device 120 includes:

[0589] The third sending module 121 is used to send or broadcast fourth indication information;

[0590] The fourth indication information is used to indicate any one of the following:

[0591] The network supports the control plane type certificate download method or the network does not support the control plane type certificate download method;

[0592] The network supports the user plane type certificate download method or the network does not support the user plane type certificate download method;

[0593] The network supports the first access method of the control plane type or the network does not support the first access method of the control plane type;

[0594] The network supports the first access mode of the user plane type or the network does not support the first access mode of the user plane type;

[0595] Among them, the first access method includes: an access method for accessing the first network in order to download a certificate for accessing the second network; the first access method of the control plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the control plane type; the first access method of the user plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the user plane type; the first network and the second network are the same network or different networks.

[0596] In this embodiment, the network selection device 120 can implement the present application Figure 5 The various processes implemented in the illustrated method embodiment and the same beneficial effects achieved are not described again here to avoid repetition.

[0597] Please refer to Fig.13 , the embodiment of the present application provides a network selection device, which is applied to a fifth communication device, such as Fig.13 As shown, the network selection device 130 includes:

[0598] The second acquisition module 131 is used to acquire fourth indication information;

[0599] A fourth execution module 132, configured to execute a network selection operation according to the fourth information;

[0600] The fourth information includes at least one of the following: fourth indication information, capability information of the terminal, information of the access method requested by the terminal, and type information of the certificate download method requested by the terminal;

[0601] The fourth indication information is used to indicate any one of the following: the network supports a certificate download method of a control plane type, or the network does not support a certificate download method of a control plane type; the network supports a certificate download method of a user plane type, or the network does not support a certificate download method of a user plane type; the network supports a first access method of a control plane type, or the network does not support a first access method of a control plane type; the network supports a first access method of a user plane type, or the network does not support a first access method of a user plane type;

[0602] The capability information of the terminal is used to indicate at least one of the following: the terminal supports the certificate download mode of the control plane type or the terminal does not support the certificate download mode of the control plane type; the terminal supports the certificate download mode of the user plane type or the terminal does not support the certificate download mode of the user plane type; the terminal supports the first access mode of the control plane type or the terminal does not support the first access mode of the control plane type; the terminal supports the first access mode of the user plane type or the terminal does not support the first access mode of the user plane type; the terminal has the user plane capability or the terminal does not have the user plane capability; the key used for communication between the terminal and the first network can be derived according to the default certificate or the key used for communication between the terminal and the first network cannot be derived according to the default certificate;

[0603] The information of the access method requested by the terminal includes one of the following: a first access method, a first access method of a control plane type, and a first access method of a user plane type;

[0604] The type information of the certificate downloading method requested by the terminal includes one of the following: a control plane type certificate downloading method, a user plane type certificate downloading method;

[0605] Among them, the first access method includes: an access method for accessing the first network in order to download a certificate for accessing the second network; the first access method of the control plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the control plane type; the first access method of the user plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the user plane type; the first network and the second network are the same network or different networks.

[0606] Optionally, the fourth execution module 132 is specifically configured to execute at least one of the following:

[0607] Selecting a network, wherein fourth indication information of the selected network conforms to capability information of the terminal;

[0608] Selecting a network, wherein the fourth indication information of the selected network conforms to the information of the access mode requested by the terminal;

[0609] A network is selected, and fourth indication information of the selected network conforms to type information of the certificate downloading method requested by the terminal.

[0610] Optionally, the fourth indication information of the selected network conforming to the terminal capability information includes at least one of the following:

[0611] The fourth indication information indicates any one of the following: the network supports the certificate download mode through the control plane type, the network does not support the certificate download mode through the user plane type, the network supports the first access mode of the control plane type, and the network does not support the first access mode of the user plane type; and the capability information of the terminal indicates any one of the following: the terminal supports the certificate download mode of the control plane type, the terminal does not support the certificate download mode of the user plane type, the terminal supports the first access mode of the control plane type, the terminal does not support the first access mode of the user plane type, the terminal does not have the user plane capability, and the key used for communication between the terminal and the first network can be derived according to the default certificate;

[0612] The fourth indication information indicates any one of the following: the network does not support the certificate download method through the control plane type; the network supports the certificate download method through the user plane type; the network does not support the first access method of the control plane type; the network supports the first access method of the user plane type; and the capability information of the terminal indicates at least one of the following: the terminal does not support the certificate download method of the control plane type, the terminal supports the certificate download method of the user plane type, the terminal does not support the first access method of the control plane type, the terminal supports the first access method of the user plane type, the terminal has the capability of the user plane, and the key for communication between the terminal and the first network cannot be derived according to the default certificate;

[0613] The fourth indication information indicates any one of the following: the network supports the certificate download mode through the control plane type, the network supports the certificate download mode through the user plane type, the network supports the first access mode of the control plane type, and the network supports the first access mode of the user plane type;

[0614] The capability information of the terminal indicates at least one of the following: the terminal supports a control plane type certificate download method, the terminal supports a user plane type certificate download method, the terminal supports a control plane type first access method, the terminal supports a user plane type first access method, the terminal has user plane capability, and can derive a key for communication between the terminal and the first network based on a default certificate.

[0615] Optionally, the fourth execution module 132 is specifically used for at least one of the following:

[0616] When the terminal supports both the control plane type certificate downloading method and the user plane type certificate downloading method, the selected network supports the control plane type certificate downloading method and / or supports the user plane type certificate downloading method;

[0617] When the terminal only supports the certificate downloading mode of the control plane type, the selected network at least supports the certificate downloading mode of the control plane type;

[0618] When the terminal only supports the certificate download mode of the user plane type, the selected network at least supports the certificate download mode of the user plane type;

[0619] When the terminal supports both the first access mode of the control plane type and the first access mode of the user plane type, the selected network supports the first access mode of the control plane type and / or supports the first access mode of the user plane type;

[0620] When the terminal only supports the first access method of the control plane type, the selected network at least supports the first access method of the control plane type;

[0621] When the terminal only supports the first access mode of the user plane type, the selected network at least supports the first access mode of the user plane type.

[0622] In this embodiment, the communication device 130 can implement the present application Figure 6 The various processes implemented in the illustrated method embodiment and the same beneficial effects achieved are not described again here to avoid repetition.

[0623] See also Fig.14 , Fig.14 is a schematic diagram of the structure of another communication device provided in an embodiment of the present application, such as Fig.14 As shown, the communication device 140 includes: a processor 141, a memory 142, and a computer program stored in the memory 142 and executable on the processor. The components in the communication device 140 are coupled together via a bus interface 143. When the computer program is executed by the processor 141, the above Figure 2 The various processes implemented in the method embodiment shown, or the implementation of the above Figure 3 The various processes implemented in the method embodiment shown, or the implementation of the above Figure 4 The various processes implemented in the method embodiment shown, or the implementation of the above Figure 5 The various processes implemented in the method embodiment shown, or the implementation of the above Figure 6 The various processes implemented in the method embodiment shown can achieve the same technical effect, and will not be described again here to avoid repetition.

[0624] The embodiment of the present application further provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the above Figure 5 The various processes implemented in the method embodiment shown, or the implementation of the above Figure 6 The various processes implemented in the method embodiment shown, or the implementation of the above Figure 7 The various processes implemented in the method embodiment shown, or the implementation of the above Figure 8The various processes implemented in the method embodiment shown, or the implementation of the above Fig. 9 The various processes implemented in the method embodiments shown can achieve the same technical effect, and are not described here to avoid repetition. The computer-readable storage medium is, for example, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0625] It should be noted that, in this article, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the sentence "comprises a ..." does not exclude the existence of other identical elements in the process, method, article or device including the element.

[0626] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present application, or the part that contributes to the prior art, can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, a magnetic disk, or an optical disk), and includes a number of instructions for a terminal (which can be a mobile phone, a computer, a server, an air conditioner, or a network device, etc.) to execute the methods described in each embodiment of the present application.

[0627] The embodiments of the present application are described above in conjunction with the accompanying drawings, but the present application is not limited to the above-mentioned specific implementation methods. The above-mentioned specific implementation methods are merely illustrative and not restrictive. Under the guidance of the present application, ordinary technicians in this field can also make many forms without departing from the purpose of the present application and the scope of protection of the claims, all of which are within the protection of the present application.

Claims

1. A network selection method, applied to a fourth communication device, characterized in that: The fourth communication device is a wireless access network element, and the method includes: Sending or broadcasting fourth instruction information to the terminal; The fourth indication information is used by the terminal to perform a network selection operation, and the fourth indication information is used to indicate any one of the following: The network supports the control plane type certificate download method or the network does not support the control plane type certificate download method; The network supports the user plane type certificate download method or the network does not support the user plane type certificate download method; The network supports the first access method of the control plane type or the network does not support the first access method of the control plane type; The network supports the first access mode of the user plane type or the network does not support the first access mode of the user plane type; Among them, the first access method includes: an access method for accessing the first network in order to download a certificate for accessing the second network; the first access method of the control plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the control plane type; the first access method of the user plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the user plane type; the first network and the second network are the same network or different networks.

2. A network selection method, applied to a fifth communication device, characterized in that: The fifth communication device is a terminal, and the method includes: Obtaining fourth indication information; According to the fourth indication information, perform a network selection operation; or, according to the fourth indication information and at least one of the following, perform a network selection operation: capability information of the terminal, information on the access method requested by the terminal, and type information on the certificate download method requested by the terminal; The fourth indication information is used to indicate any one of the following: the network supports the certificate download method of the control plane type or the network does not support the certificate download method of the control plane type; the network supports the certificate download method of the user plane type or the network does not support the certificate download method of the user plane type; the network supports the first access method of the control plane type or the network does not support the first access method of the control plane type; the network supports the first access method of the user plane type or the network does not support the first access method of the user plane type; The capability information of the terminal is used to indicate at least one of the following: the terminal supports the certificate download mode of the control plane type or the terminal does not support the certificate download mode of the control plane type; the terminal supports the certificate download mode of the user plane type or the terminal does not support the certificate download mode of the user plane type; the terminal supports the first access mode of the control plane type or the terminal does not support the first access mode of the control plane type; the terminal supports the first access mode of the user plane type or the terminal does not support the first access mode of the user plane type; the terminal has the user plane capability or the terminal does not have the user plane capability; the key used for communication between the terminal and the first network can be derived according to the default certificate or the key used for communication between the terminal and the first network cannot be derived according to the default certificate; The information of the access method requested by the terminal includes one of the following: a first access method, a first access method of a control plane type, and a first access method of a user plane type; The type information of the certificate downloading method requested by the terminal includes one of the following: a control plane type certificate downloading method, a user plane type certificate downloading method; Among them, the first access method includes: an access method for accessing the first network in order to download a certificate for accessing the second network; the first access method of the control plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the control plane type; the first access method of the user plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the user plane type; the first network and the second network are the same network or different networks.

3. The method according to claim 2, characterized in that The operation of performing network selection includes at least one of the following: Selecting a network, wherein fourth indication information of the selected network conforms to capability information of the terminal; Selecting a network, wherein the fourth indication information of the selected network conforms to the information of the access mode requested by the terminal; A network is selected, and fourth indication information of the selected network conforms to type information of the certificate downloading method requested by the terminal.

4. The method according to claim 3, characterized in that The fourth indication information of the selected network conforming to the terminal capability information includes at least one of the following: The fourth indication information indicates any one of the following: the network supports the certificate download mode through the control plane type, the network does not support the certificate download mode through the user plane type, the network supports the first access mode of the control plane type, and the network does not support the first access mode of the user plane type; and the capability information of the terminal indicates any one of the following: the terminal supports the certificate download mode of the control plane type, the terminal does not support the certificate download mode of the user plane type, the terminal supports the first access mode of the control plane type, the terminal does not support the first access mode of the user plane type, the terminal does not have the user plane capability, and the key used for communication between the terminal and the first network can be derived according to the default certificate; The fourth indication information indicates any one of the following: the network does not support the certificate download method through the control plane type; the network supports the certificate download method through the user plane type; the network does not support the first access method of the control plane type; the network supports the first access method of the user plane type; and the capability information of the terminal indicates at least one of the following: the terminal does not support the certificate download method of the control plane type, the terminal supports the certificate download method of the user plane type, the terminal does not support the first access method of the control plane type, the terminal supports the first access method of the user plane type, the terminal has the capability of the user plane, and the key for communication between the terminal and the first network cannot be derived according to the default certificate; The fourth indication information indicates any one of the following: the network supports the certificate download mode through the control plane type, the network supports the certificate download mode through the user plane type, the network supports the first access mode of the control plane type, and the network supports the first access mode of the user plane type; The capability information of the terminal indicates at least one of the following: the terminal supports a control plane type certificate download method, the terminal supports a user plane type certificate download method, the terminal supports a control plane type first access method, the terminal supports a user plane type first access method, the terminal has user plane capability, and can derive a key for communication between the terminal and the first network based on a default certificate.

5. The method according to claim 2, characterized in that: The operation of performing network selection includes at least one of the following: When the terminal supports both the control plane type certificate downloading method and the user plane type certificate downloading method, the selected network supports the control plane type certificate downloading method and / or supports the user plane type certificate downloading method; When the terminal only supports the certificate downloading mode of the control plane type, the selected network at least supports the certificate downloading mode of the control plane type; When the terminal only supports the certificate download mode of the user plane type, the selected network at least supports the certificate download mode of the user plane type; When the terminal supports both the first access mode of the control plane type and the first access mode of the user plane type, the selected network supports the first access mode of the control plane type and / or supports the first access mode of the user plane type; When the terminal only supports the first access method of the control plane type, the selected network supports at least the first access method of the control plane type; When the terminal only supports the first access mode of the user plane type, the selected network at least supports the first access mode of the user plane type.

6. A network selection device, applied to a fourth communication device, characterized in that: The fourth communication device is a wireless access network element, and the apparatus includes: A third sending module, used to send or broadcast fourth indication information to the terminal; The fourth indication information is used by the terminal to perform a network selection operation, and the fourth indication information is used to indicate any one of the following: The network supports the control plane type certificate download method or the network does not support the control plane type certificate download method; The network supports the user plane type certificate download method or the network does not support the user plane type certificate download method; The network supports the first access method of the control plane type or the network does not support the first access method of the control plane type; The network supports the first access mode of the user plane type or the network does not support the first access mode of the user plane type; Among them, the first access method includes: an access method for accessing the first network in order to download a certificate for accessing the second network; the first access method of the control plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the control plane type; the first access method of the user plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the user plane type; the first network and the second network are the same network or different networks.

7. A network selection device, applied to a fifth communication device, characterized in that: The fifth communication device is a terminal, and the apparatus includes: A second acquisition module, used to acquire fourth indication information; A fourth execution module, configured to perform a network selection operation according to the fourth indication information; or, perform a network selection operation according to the fourth indication information and at least one of the following: capability information of the terminal, information on the access method requested by the terminal, and type information on the certificate download method requested by the terminal; The fourth indication information is used to indicate any one of the following: the network supports a certificate download method of a control plane type, or the network does not support a certificate download method of a control plane type; the network supports a certificate download method of a user plane type, or the network does not support a certificate download method of a user plane type; the network supports a first access method of a control plane type, or the network does not support a first access method of a control plane type; the network supports a first access method of a user plane type, or the network does not support a first access method of a user plane type; The capability information of the terminal is used to indicate at least one of the following: the terminal supports the certificate download mode of the control plane type or the terminal does not support the certificate download mode of the control plane type; the terminal supports the certificate download mode of the user plane type or the terminal does not support the certificate download mode of the user plane type; the terminal supports the first access mode of the control plane type or the terminal does not support the first access mode of the control plane type; the terminal supports the first access mode of the user plane type or the terminal does not support the first access mode of the user plane type; the terminal has the user plane capability or the terminal does not have the user plane capability; the key used for communication between the terminal and the first network can be derived according to the default certificate or the key used for communication between the terminal and the first network cannot be derived according to the default certificate; The information of the access method requested by the terminal includes one of the following: a first access method, a first access method of a control plane type, and a first access method of a user plane type; The type information of the certificate downloading method requested by the terminal includes one of the following: a control plane type certificate downloading method, a user plane type certificate downloading method; Among them, the first access method includes: an access method for accessing the first network in order to download a certificate for accessing the second network; the first access method of the control plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the control plane type; the first access method of the user plane type includes: an access method for accessing the first network in order to download a certificate for accessing the second network, and the method for downloading the certificate for accessing the second network is a certificate download method of the user plane type; the first network and the second network are the same network or different networks.

8. A communication device, characterized in that: The invention comprises a processor, a memory, and a computer program stored in the memory and executable on the processor, wherein when the computer program is executed by the processor, the steps of the network selection method according to claim 1 are implemented, or the steps of the network selection method according to any one of claims 2 to 5 are implemented.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the computer program implements the steps of the network selection method according to claim 1, or implements the steps of the network selection method according to any one of claims 2 to 5.

Images