A data transmission method, user equipment, related network equipment and storage medium

Abstract

The embodiment of the present invention discloses a data transmission method, user equipment, related network equipment and storage medium. The method comprises: a user equipment (UE) sends a first message for access authentication to an access and mobility management function (AMF), wherein the first message includes identity information of the UE and a first identifier, and the first identifier is used to indicate an authentication method supported by the UE.

Description

Technical Field

[0001] The present invention relates to the field of wireless communication technology, and in particular to a data transmission method, user equipment, related network equipment and a storage medium. Background Art

[0002] The authentication methods used in 5G networks may include, for example, Authentication and Key Agreement (AKA) and Improved Extensible Authentication Protocol-Authentication and Key Agreement (EAP-AKA'). At present, the authentication method used by the user equipment (UE) is pre-configured in the Unified Data Management (UDM). For the UE side, the secret key is also pre-written before the card is issued, and the secret key is activated when the user first accesses the network, thereby performing encrypted communication.

[0003] With the development of 5G, it needs to be deeply integrated with more vertical industries. There will be a demand for various authentication methods, requiring the core network to provide support for different authentication methods. Summary of the invention

[0004] In order to solve the existing technical problems, the embodiments of the present invention provide a data transmission method, a user device, a related network device and a storage medium.

[0005] To achieve the above object, the technical solution of the embodiment of the present invention is implemented as follows:

[0006] In a first aspect, an embodiment of the present invention provides a data transmission method, the method comprising:

[0007] The UE sends a first message for access authentication to an access and mobility management function (AMF), where the first message includes identity information and a first identifier of the UE, where the first identifier is used to indicate an authentication method supported by the UE.

[0008] In the above solution, the specific field in the first message is used to indicate the first identifier, and different values ​​of the first identifier correspond to different authentication methods.

[0009] In a second aspect, an embodiment of the present invention further provides a data transmission method, the method comprising:

[0010] The AMF receives a first message for access authentication sent by the UE, where the first message includes identity information and a first identifier of the UE, where the first identifier is used to indicate an authentication method supported by the UE;

[0011] The AMF sends a second message to the first authentication service function (AUSF, Authentication Server Function) to which the UE belongs, and the second message includes at least the identity information of the UE and the first identifier.

[0012] In the above solution, before the AMF sends the second message to the first AUSF to which the UE belongs, the method further includes:

[0013] The AMF determines the first AUSF to which the UE belongs based on the identity information of the UE and the information of the public land mobile network PLMN.

[0014] In a third aspect, an embodiment of the present invention further provides a data transmission method, the method comprising:

[0015] The first AUSF receives a second message sent by the AMF for UE access authentication, where the second message includes at least identity information of the UE and the first identifier; the first identifier is used to indicate an authentication method supported by the UE;

[0016] The first AUSF finds the corresponding authentication method based on the first identifier, and performs the authentication process with the UE according to the authentication method; or, the first AUSF finds the corresponding second AUSF based on the first identifier, and sends a third message to the second AUSF, wherein the third message includes the identity information of the UE and the first identifier, and the third message is used for the second AUSF to perform the authentication process with the UE according to the authentication method.

[0017] In the above scheme, before the first AUSF finds the corresponding second AUSF based on the first identifier, the method also includes: associating the second AUSF with the first AUSF, and the first AUSF obtains the configuration file of the second AUSF.

[0018] In the above scheme, the first AUSF finds the corresponding second AUSF based on the first identifier, including: the first AUSF searches for the configuration files of the associated second AUSF based on the authentication method represented by the first identifier, and determines the second AUSF corresponding to the authentication method; wherein the configuration file includes at least the authentication method supported by the second AUSF.

[0019] In a fourth aspect, an embodiment of the present invention also provides a UE, wherein the UE includes a first sending unit for sending a first message for access authentication to the AMF, wherein the first message includes identity information and a first identifier of the UE, and the first identifier is used to indicate an authentication method supported by the UE.

[0020] In the above solution, the specific field in the first message is used to indicate the first identifier, and different values ​​of the first identifier correspond to different authentication methods.

[0021] In a fifth aspect, an embodiment of the present invention further provides an AMF, wherein the AMF includes: a first receiving unit and a second sending unit; wherein:

[0022] The first receiving unit is configured to receive a first message for access authentication sent by the UE, where the first message includes identity information and a first identifier of the UE, where the first identifier is used to indicate an authentication method supported by the UE;

[0023] The second sending unit is used to send a second message to the first AUSF to which the UE belongs, and the second message includes at least the identity information of the UE and the first identifier.

[0024] In the above scheme, the AMF also includes a determination unit, which is used to determine the first AUSF to which the UE belongs according to the identity information of the UE and the information of the public land mobile network PLMN before the second sending unit sends the second message to the first AUSF to which the UE belongs.

[0025] In a sixth aspect, an embodiment of the present invention further provides an AUSF, wherein the AUSF is a first AUSF, and the AUSF includes: a communication unit and a processing unit; wherein:

[0026] The communication unit is used to receive a second message sent by the AMF for UE access authentication, where the second message includes at least the identity information of the UE and the first identifier; the first identifier is used to indicate an authentication method supported by the UE;

[0027] The processing unit is configured to find a corresponding authentication method based on the first identifier, and perform an authentication process with the UE according to the authentication method; or find a corresponding second AUSF based on the first identifier;

[0028] The communication unit is also used to send a third message to the second AUSF, wherein the third message includes the identity information of the UE and the first identifier, and the third message is used for the second AUSF to perform an authentication process with the UE according to the authentication method.

[0029] In the above scheme, the processing unit is also used to associate the second AUSF with the first AUSF to obtain the configuration file of the second AUSF.

[0030] In the above scheme, the processing unit is used to search for configuration files of each associated second AUSF based on the authentication method represented by the first identifier, and determine the second AUSF corresponding to the authentication method; wherein the configuration file includes at least the authentication method supported by the second AUSF.

[0031] In the seventh aspect, an embodiment of the present invention further provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the method described in the first aspect, the second aspect or the third aspect of the embodiment of the present invention.

[0032] In an eighth aspect, an embodiment of the present invention further provides a UE, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the steps of the method described in the first aspect of the embodiment of the present invention are implemented.

[0033] In the ninth aspect, an embodiment of the present invention further provides a network device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the steps of the method described in the second aspect or the third aspect of the embodiment of the present invention are implemented.

[0034] The data transmission method, user equipment, related network equipment and storage medium provided by the embodiment of the present invention include: UE sends a first message for access authentication to access and AMF, the first message includes the identity information and the first identifier of the UE, and the first identifier is used to indicate the authentication method supported by the UE; AMF sends a second message to the first AUSF to which the UE belongs, the second message includes at least the identity information and the first identifier of the UE; the first AUSF finds the corresponding authentication method based on the first identifier, and performs the authentication process with the UE according to the authentication method; or, the first AUSF finds the corresponding second AUSF based on the first identifier, sends a third message to the second AUSF, the third message includes the identity information and the first identifier of the UE, and the third message is used for the second AUSF to perform the authentication process with the UE according to the authentication method. The technical solution of this embodiment is adopted, on the one hand, without modifying the existing NRF function, the UE notifies the AUSF of the supported authentication method, so that the network side performs authentication according to the authentication method supported by the UE; on the other hand, the AUSF can be deployed in multiple levels, and different authentication methods can correspond to different secondary AUSFs, so that terminals with different authentication methods can be authenticated on the corresponding AUSF. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] Figure 1 The data transmission method according to the embodiment of the present invention is shown in FIG. Figure 1 ;

[0036] Figure 2 The data transmission method according to the embodiment of the present invention is shown in FIG. Figure 2 ;

[0037] Figure 3 The data transmission method according to the embodiment of the present invention is shown in FIG. Figure 3 ;

[0038] Figure 4 The data transmission method according to the embodiment of the present invention is shown in FIG. Figure 4 ;

[0039] Figure 5 The interactive process diagram of the data transmission method according to the embodiment of the present invention is as follows Figure 1 ;

[0040] Figure 6 The interactive process diagram of the data transmission method according to the embodiment of the present invention is as follows Figure 2 ;

[0041] Figure 7 A schematic diagram of the structure of a UE according to an embodiment of the present invention;

[0042] Figure 8 A schematic diagram of the composition structure of the AMF according to an embodiment of the present invention;

[0043] Fig. 9 A schematic diagram of the composition structure of the AUSF according to an embodiment of the present invention;

[0044] Fig.10 A schematic diagram of the hardware structure of a UE according to an embodiment of the present invention;

[0045] Fig.11 The figure is a schematic diagram of the hardware structure of the network device according to the embodiment of the present invention. DETAILED DESCRIPTION

[0046] The present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments.

[0047] An embodiment of the present invention provides a data transmission method. Figure 1 The data transmission method according to the embodiment of the present invention is shown in FIG. Figure 1 ;like Figure 1 As shown, the method includes:

[0048] Step 101: The UE sends a first message for access authentication to the AMF, where the first message includes identity information and a first identifier of the UE, where the first identifier is used to indicate an authentication method supported by the UE.

[0049] Exemplarily, the identity information of the UE includes but is not limited to a subscription concealed identifier (SUCI), a subscription permanent identifier (SUPI), and the like.

[0050] The data transmission method of this embodiment is applicable to the UE access authentication process. The UE sends a data packet carrying identity information. The AMF finds the UE's home network through the identity information and sends the identity information and service network information to the corresponding AUSF. The AUSF matches the access authentication method according to the UE's identity and starts the corresponding authentication process from the network side.

[0051] In this embodiment, the data packet sent by the UE to the AMF includes identity information and a first identifier for indicating the authentication method supported by the UE, so that the network side can match the access authentication method based on the UE's identity information and the first identifier.

[0052] In some optional embodiments, the specific field in the first message is used to indicate the first identifier, and different values ​​of the first identifier correspond to different authentication methods.

[0053] In this embodiment, the authentication method supported by the UE is described by adding a specific field. Exemplarily, the specific field may be an Au_Type field, and the Au_Type field indicates the authentication method supported by the UE, which may be, for example, EAP-AKA', EAP-TLS, 5G AKA, EAP-PEAP, etc.

[0054] In this embodiment, different binary values ​​in a specific field may represent different authentication methods. For example, as shown in Table 1, a binary identifier "001" may represent a 5G AKA authentication method, a binary identifier "010" may represent an EAP-AKA' authentication method, and so on.

[0055] Table 1

[0056] Au_Type OID 5G AKA 001 EAP-AKA' 010 EAP-TLS 011 EAP-PEAP 100 …… ……

[0057] It should be noted that each UE supports one authentication method by default, and the authentication method supported by each UE can be stored on a subscriber identification module (SIM, Subscriber Identification Module) card or on the UE through the Au_Type field.

[0058] Based on the above embodiments, an embodiment of the present invention further provides a data transmission method. Figure 2 The data transmission method according to the embodiment of the present invention is shown in FIG. Figure 2 ;like Figure 2 As shown, the method includes:

[0059] Step 201: AMF receives a first message for access authentication sent by a UE, where the first message includes identity information and a first identifier of the UE, where the first identifier is used to indicate an authentication method supported by the UE;

[0060] Step 202: The AMF sends a second message to the first AUSF to which the UE belongs, and the second message includes at least the identity information of the UE and the first identifier.

[0061] In some optional embodiments of the present invention, before the AMF sends the second message to the first AUSF to which the UE belongs, the method also includes: the AMF determines the first AUSF to which the UE belongs based on the identity information of the UE and information of the Public Land Mobile Network (PLMN).

[0062] In this embodiment, after the AMF receives the first message sent by the UE for access authentication, it determines the network to which the UE belongs based on the UE's identity information (such as SUPI or SUCI, etc.) and PLMN information (such as PLMN identifier) ​​in the first message, thereby determining the first AUSF to which the UE belongs. Further, the AMF sends a second message to the first AUSF to which the UE belongs, and the second message includes at least the UE's identity information and the first identifier. Optionally, the second message also includes information about the serving network (SN); the information about the SN may be, for example, a serving network name (SNN, Serving Network Name).

[0063] Based on the above embodiments, an embodiment of the present invention further provides a data transmission method, which is applied to a first AUSF, where the first AUSF is an AUSF for authenticating with a UE. Figure 3 The data transmission method according to the embodiment of the present invention is shown in FIG. Figure 3 ;like Figure 3 As shown, the method includes:

[0064] Step 301: The first AUSF receives a second message sent by the AMF for UE access authentication, where the second message includes at least the identity information of the UE and the first identifier; the first identifier is used to indicate the authentication method supported by the UE;

[0065] Step 302: The first AUSF finds the corresponding authentication method based on the first identifier, and performs the authentication process with the UE according to the authentication method.

[0066] In this embodiment, after receiving the first message sent by the UE for access authentication, the AMF determines the network to which the UE belongs based on the identity information of the UE (such as SUPI or SUCI, etc.) and the information of the PLMN (such as the PLMN identifier) ​​in the first message, thereby determining the first AUSF to which the UE belongs. Further, the AMF sends a second message to the first AUSF to which the UE belongs, and the second message includes at least the identity information of the UE and the first identifier. Optionally, the second message also includes information of the SN (such as the SNN).

[0067] In this embodiment, the first AUSF can find the corresponding authentication method according to the first identifier carried in the second message (i.e., the authentication method supported by the UE), and start to execute the corresponding authentication process with the UE according to the corresponding authentication method according to the identity information of the UE.

[0068] Based on the above embodiments, an embodiment of the present invention further provides a data transmission method, which is applied to a first AUSF, where the first AUSF is a first-level AUSF or a general AUSF. Figure 4 The data transmission method according to the embodiment of the present invention is shown in FIG. Figure 4 ;like Figure 4 As shown, the method includes:

[0069] Step 401: The first AUSF receives a second message sent by the AMF for UE access authentication, where the second message includes at least the identity information of the UE and the first identifier; the first identifier is used to indicate an authentication method supported by the UE;

[0070] Step 402: The first AUSF finds the corresponding second AUSF based on the first identifier, and sends a third message to the second AUSF, wherein the third message includes the identity information of the UE and the first identifier, and the third message is used for the second AUSF to perform the authentication process with the UE according to the authentication method.

[0071] In this embodiment, after receiving the first message sent by the UE for access authentication, the AMF determines the network to which the UE belongs based on the identity information of the UE (such as SUPI or SUCI, etc.) and the information of the PLMN (such as the PLMN identifier) ​​in the first message, thereby determining the first AUSF to which the UE belongs. Further, the AMF sends a second message to the first AUSF to which the UE belongs, and the second message includes at least the identity information of the UE and the first identifier. Optionally, the second message also includes information of the SN (such as the SNN).

[0072] In this embodiment, the network supports multi-level AUSF deployment. The first AUSF is a general AUSF or a first-level AUSF, and the first AUSF knows all second-level AUSFs under the management domain. The second AUSF in this embodiment is a second-level AUSF.

[0073] In some optional embodiments of the present invention, before the first AUSF finds the corresponding second AUSF based on the first identifier, the method further includes: associating the second AUSF with the first AUSF, and the first AUSF obtains the configuration file of the second AUSF.

[0074] In some optional embodiments of the present invention, the first AUSF searches for the corresponding second AUSF based on the first identifier, including: the first AUSF searches for configuration files of the associated second AUSFs based on the authentication method represented by the first identifier, and determines the second AUSF corresponding to the authentication method; wherein the configuration file includes at least the authentication method supported by the second AUSF.

[0075] In this embodiment, the first AUSF can search for the corresponding secondary AUSF according to the first identifier (authentication method supported by UE) carried in the second message. It can be understood that each secondary AUSF can correspond to one authentication method, and each authentication method can correspond to one secondary AUSF. Then the first AUSF obtains the configuration files of each secondary AUSF in advance, and the configuration files at least include the authentication method corresponding to the secondary AUSF. Then the first AUSF determines the second AUSF corresponding to the authentication method represented by the first identifier by searching the configuration files of each secondary AUSF; further sends a third message carrying the identity information of the UE and the first identifier to the second AUSF; the second AUSF can determine the corresponding authentication method according to the first identifier (i.e., the authentication method supported by UE) carried in the third message, and start to execute the corresponding authentication process with the UE according to the corresponding authentication method according to the identity information of the UE.

[0076] By adopting the technical solution of this embodiment, on the one hand, there is no need to modify the existing NRF function. The UE can inform the AUSF of the supported authentication methods, thereby realizing the network side to authenticate according to the authentication methods supported by the UE. On the other hand, AUSF can adopt multi-level deployment, and different authentication methods can correspond to different secondary AUSFs, thereby realizing that terminals with different authentication methods can be authenticated on the corresponding AUSF.

[0077] The data transmission method according to the embodiment of the present invention is described below with reference to specific examples.

[0078] Figure 5 The interactive process diagram of the data transmission method according to the embodiment of the present invention is as follows Figure 1 ;like Figure 5 As shown, the method includes:

[0079] Step 501: When the UE first accesses authentication, it sends a first message to the AMF, wherein the first message includes identity information and a first identifier. Exemplarily, the first identifier may be represented by the Au_Type field; the Au_Type field indicates the authentication method supported by the UE; the identity information may be SUCI or SUPI.

[0080] Step 502 to step 503: AMF starts the NRF process based on the identity information and PLMN information (such as PLMNID) carried in the first message, and determines the network to which the UE belongs from the network storage function (NRF, NF Repository Function).

[0081] Step 504: After the AMF finds the AUSF to which the UE belongs, the AMF sends a second message to the AUSF, where the second message includes: identity information, SN information and the first identifier.

[0082] Step 505 to step 506: AUSF finds the corresponding authentication method according to the first identifier, and AUSF starts to execute the authentication process according to the corresponding authentication method based on the identity information of the UE.

[0083] Figure 6 The interactive process diagram of the data transmission method according to the embodiment of the present invention is as follows Figure 2 ;like Figure 6 As shown, the method includes:

[0084] Step 601: When the UE first accesses authentication, it sends a first message to the AMF, wherein the first message includes identity information and a first identifier. Exemplarily, the first identifier may be represented by the Au_Type field; the Au_Type field indicates the authentication method supported by the UE; the identity information may be SUCI or SUPI.

[0085] Step 602 to step 603: AMF starts the NRF process according to the identity information and PLMN information (such as PLMNID) carried in the first message, determines the network to which the UE belongs from the network storage function (NRF), and determines the general AUSF (ie, the first AUSF) to which the UE belongs.

[0086] Step 604: After the AMF finds the first AUSF to which the UE belongs, the AMF sends a second message to the first AUSF, where the second message includes: identity information, SN information and a first identifier;

[0087] Among them, the first AUSF knows the configuration files of all secondary AUSFs under the management domain.

[0088] Step 605 Step 606: The first AUSF finds the secondary AUSF (second AUSF) of the corresponding authentication method according to the first identifier, and sends a third message to the second AUSF, wherein the second message includes: identity information and the first identifier.

[0089] Step 607: The second AUSF starts to execute the authentication process according to the corresponding authentication method based on the identity information of the UE.

[0090] Based on the foregoing method embodiment, the embodiment of the present invention further provides a UE. Figure 7 FIG. 1 is a schematic diagram of the composition structure of a UE according to an embodiment of the present invention; Figure 7 As shown, the UE includes a first sending unit 11, which is used to send a first message for access authentication to the AMF, wherein the first message includes identity information and a first identifier of the UE, and the first identifier is used to indicate an authentication method supported by the UE.

[0091] In some optional embodiments of the present invention, the specific field in the first message is used to indicate the first identifier, and different values ​​of the first identifier correspond to different authentication methods.

[0092] In the embodiment of the present invention, the first sending unit 11 in the UE can be implemented through a communication module (including: a basic communication suite, an operating system, a communication module, a standardized interface and protocol, etc.) and a transceiver antenna in actual application.

[0093] Based on the aforementioned method embodiment, the embodiment of the present invention also provides an AMF. Figure 8 Schematic diagram of the composition structure of the AMF of an embodiment of the present invention; Figure 8 As shown, the AMF includes: a first receiving unit 21 and a second sending unit 22; wherein,

[0094] The first receiving unit 21 is used to receive a first message for access authentication sent by the UE, where the first message includes identity information and a first identifier of the UE, where the first identifier is used to indicate an authentication method supported by the UE;

[0095] The second sending unit 22 is used to send a second message to the first AUSF to which the UE belongs, and the second message at least includes the identity information of the UE and the first identifier.

[0096] In some optional embodiments of the present invention, the AMF also includes a determination unit 23, which is used to determine the first AUSF to which the UE belongs based on the identity information of the UE and the information of the PLMN before the second sending unit 22 sends the second message to the first AUSF to which the UE belongs.

[0097] In an embodiment of the present invention, the determination unit 23 in the AMF can be implemented by a central processing unit (CPU), a digital signal processor (DSP), a microcontroller unit (MCU) or a programmable gate array (FPGA) in the AMF in actual applications; the first receiving unit 21 and the second sending unit 22 in the AMF can be implemented by a communication module (including: a basic communication kit, an operating system, a communication module, a standardized interface and protocol, etc.) and a transceiver antenna in actual applications.

[0098] Based on the aforementioned method embodiment, the embodiment of the present invention also provides an AUSF. Fig. 9 FIG. 1 is a schematic diagram of the composition structure of the AUSF according to an embodiment of the present invention; Fig. 9 As shown, the AUSF is a first AUSF, and the AUSF includes: a communication unit 31 and a processing unit 32; wherein,

[0099] The communication unit 31 is used to receive a second message sent by the AMF for UE access authentication, where the second message includes at least the identity information of the UE and the first identifier; the first identifier is used to indicate the authentication method supported by the UE;

[0100] The processing unit 32 is configured to find a corresponding authentication method based on the first identifier, and perform an authentication process with the UE according to the authentication method; or find a corresponding second AUSF based on the first identifier;

[0101] The communication unit 31 is also used to send a third message to the second AUSF, wherein the third message includes the identity information of the UE and the first identifier, and the third message is used for the second AUSF to perform an authentication process with the UE according to the authentication method.

[0102] In some optional embodiments of the present invention, the processing unit 32 is further used to associate the second AUSF with the first AUSF to obtain a configuration file of the second AUSF.

[0103] In some optional embodiments of the present invention, the processing unit 32 is used to search for configuration files of each associated second AUSF based on the authentication method represented by the first identifier, and determine the second AUSF corresponding to the authentication method; wherein the configuration file includes at least the authentication method supported by the second AUSF.

[0104] In an embodiment of the present invention, the processing unit 32 in the AUSF can be implemented by the CPU, DSP, MCU or FPGA in the AUSF in actual applications; the communication unit 31 in the AUSF can be implemented by a communication module (including: basic communication kit, operating system, communication module, standardized interface and protocol, etc.) and a transceiver antenna in actual applications.

[0105] It should be noted that: when the UE or network device provided in the above embodiment performs data transmission, only the division of the above program modules is used as an example. In practical applications, the above processing can be assigned to different program modules as needed, that is, the internal structure of the UE or network device is divided into different program modules to complete all or part of the processing described above. In addition, the UE or network device provided in the above embodiment belongs to the same concept as the data transmission method embodiment, and its specific implementation process is detailed in the method embodiment, which will not be repeated here.

[0106] The embodiment of the present invention further provides a UE. Exemplarily, the UE may be a mobile phone, a computer, a digital broadcast terminal, an information transceiver device, a game console, a tablet device, a medical device, a fitness device, a personal digital assistant, etc. The UE includes a memory, a processor, and a computer program stored in the memory and executable on the processor, and when the processor executes the program, the steps of the data transmission method described in the embodiment of the present invention are implemented.

[0107] Fig.10 FIG. 1 is a schematic diagram of the hardware structure of the UE according to an embodiment of the present invention; Fig.10As shown, UE 800 may include one or more of the following components: a processing component 802 , a memory 804 , a power component 806 , a multimedia component 808 , an audio component 810 , an input / output (I / O) interface 812 , a sensor component 814 , and a communication component 816 .

[0108] The processing component 802 generally controls the overall operation of the UE 800, such as operations associated with display, phone calls, data communications, camera photography, and information recording. The processing component 802 may include one or more processors 820 to execute computer programs to complete all or part of the steps of the above method. In addition, the processing component 802 may include one or more modules to facilitate the interaction between the processing component 802 and other components. For example, the processing component 802 may include a multimedia module to facilitate the interaction between the processing component 802 and the multimedia component 808.

[0109] The power supply component 806 provides power to various components of the UE 800 .

[0110] The multimedia component 808 includes a screen provided as an output interface between the UE 800 and the user. In some embodiments, the screen may include a liquid crystal display (LCD) and a touch panel (TP). In some embodiments, the multimedia component 808 may include a front camera and / or a rear camera.

[0111] The audio component 810 is used to output and / or input audio signals. For example, the audio component 810 includes a microphone (MIC). In some embodiments, the audio component 810 may also include a speaker for outputting audio signals.

[0112] The I / O interface 812 provides an interface for information exchange between the processing component 802 and a peripheral interface module, which may be a keyboard, a mouse, a trackball, a click wheel, keys, buttons, etc.

[0113] The sensor component 814 includes one or more sensors for providing various aspects of status evaluation for the UE 800. For example, the sensor component 814 can detect the on / off state of the information reminder device 800, the relative positioning of the components, etc. In some embodiments, the sensor component 814 can include a proximity sensor for detecting the presence of nearby objects without any physical contact. In some embodiments, the sensor component 814 can also include a light sensor, etc.

[0114] The communication component 816 is used for wired or wireless communication between the UE 800 and other devices. The information reminder device 800 can access a wireless network based on a communication standard, such as WiFi, 2G / 3G / 4G / 5G, or a combination thereof. In an exemplary embodiment, the communication component 816 also includes a near field communication (NFC) module to facilitate short-range communication.

[0115] An embodiment of the present invention also provides a network device, which may be an AMF or an AUSF. Fig.11 FIG. 1 is a schematic diagram of the hardware structure of the network device according to an embodiment of the present invention. Fig.11 As shown, the network device 700 includes a memory 702, a processor 701, and a computer program stored in the memory 702 and executable on the processor 701. When the processor 701 executes the program, the steps of the data transmission method applied in AMF or AUSF in an embodiment of the present invention are implemented.

[0116] Optionally, the network device 700 further includes one or more network interfaces 703. The various components in the network device 700 are coupled together via a bus system 704. It is understood that the bus system 704 is used to achieve connection and communication between these components. In addition to the data bus, the bus system 704 also includes a power bus, a control bus, and a status signal bus. However, for the sake of clarity, the bus system 704 is not described in detail. Fig.11 Various buses are labeled as bus system 704 .

[0117] For the aforementioned UE or network equipment, it can be understood that the memory can be a volatile memory or a non-volatile memory, and can also include both volatile and non-volatile memories. Among them, the non-volatile memory can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), a magnetic random access memory (FRAM), a flash memory, a magnetic surface memory, an optical disc, or a read-only optical disc (CD-ROM); the magnetic surface memory can be a disk memory or a tape memory. The volatile memory can be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of RAM are available, such as static random access memory (SRAM), synchronous static random access memory (SSRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDRSDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM, SyncLink Dynamic Random Access Memory), and direct RAMbus random access memory (DRRAM, Direct Rambus Random Access Memory).The memories described in the embodiments of the present invention are intended to include, but are not limited to, these and any other suitable types of memories.

[0118] The method disclosed in the above embodiment of the present invention can be applied to a processor or implemented by a processor. The processor may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by an integrated logic circuit of hardware in the processor or instructions in software form. The above processor may be a general-purpose processor, a DSP, or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components, etc. The processor can implement or execute the methods, steps and logic block diagrams disclosed in the embodiments of the present invention. A general-purpose processor may be a microprocessor or any conventional processor, etc. In combination with the steps of the method disclosed in the embodiment of the present invention, it can be directly embodied as a hardware decoding processor to execute, or it can be executed by a combination of hardware and software modules in the decoding processor. The software module can be located in a storage medium, which is located in a memory, and the processor reads the information in the memory and completes the steps of the above method in combination with its hardware.

[0119] In an exemplary embodiment, the UE or network device may be implemented by one or more application specific integrated circuits (ASIC), DSP, programmable logic device (PLD), complex programmable logic device (CPLD), FPGA, general purpose processor, controller, MCU, microprocessor, or other electronic components to perform the aforementioned method.

[0120] In an exemplary embodiment, the embodiment of the present invention further provides a computer-readable storage medium, such as a memory 804 (or memory 702) including a computer program, and the computer program can be executed by the processor 820 of the UE 800 or the processor 701 of the network device 700 to complete the steps of the aforementioned method. The computer-readable storage medium can be a memory such as FRAM, ROM, PROM, EPROM, EEPROM, Flash Memory, magnetic surface memory, optical disk, or CD-ROM; it can also be various devices including one or any combination of the above memories.

[0121] An embodiment of the present invention also provides a computer-readable storage medium on which a computer program is stored. When the program is executed by a processor, the steps of the data transmission method applied in the UE, AMF or AUSF by the embodiment of the present invention are implemented.

[0122] The methods disclosed in several method embodiments provided in this application can be arbitrarily combined without conflict to obtain new method embodiments.

[0123] The features disclosed in several product embodiments provided in this application can be arbitrarily combined without conflict to obtain new product embodiments.

[0124] The features disclosed in several method or device embodiments provided in this application can be arbitrarily combined without conflict to obtain new method embodiments or device embodiments.

[0125] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. The device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as: multiple units or components can be combined, or can be integrated into another system, or some features can be ignored or not executed. In addition, the coupling, direct coupling, or communication connection between the components shown or discussed can be through some interfaces, and the indirect coupling or communication connection of the devices or units can be electrical, mechanical or other forms.

[0126] The units described above as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units; some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0127] In addition, all functional units in the embodiments of the present invention may be integrated into one processing unit, or each unit may be separately used as a unit, or two or more units may be integrated into one unit; the above-mentioned integrated units may be implemented in the form of hardware or in the form of hardware plus software functional units.

[0128] A person of ordinary skill in the art can understand that: all or part of the steps of implementing the above-mentioned method embodiment can be completed by hardware related to program instructions, and the aforementioned program can be stored in a computer-readable storage medium, which, when executed, executes the steps of the above-mentioned method embodiment; and the aforementioned storage medium includes: various media that can store program codes, such as mobile storage devices, ROM, RAM, disks or optical disks.

[0129] Alternatively, if the above-mentioned integrated unit of the present invention is implemented in the form of a software function module and sold or used as an independent product, it can also be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the embodiment of the present invention can be essentially or partly reflected in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the methods described in each embodiment of the present invention. The aforementioned storage medium includes: various media that can store program codes, such as mobile storage devices, ROM, RAM, magnetic disks or optical disks.

[0130] The above is only a specific embodiment of the present invention, but the protection scope of the present invention is not limited thereto. Any person skilled in the art who is familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed by the present invention, which should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims

1. A data transmission method, characterized in that: The method comprises: The user equipment UE sends a first message for access authentication to the access and mobility management function AMF, wherein the first message includes the identity information of the UE and a first identifier, the identity information of the UE is used by the AMF to determine the first authentication service function AUSF to which the UE belongs, and the first identifier is used to indicate the authentication method supported by the UE, so that the first authentication service function AUSF can find the corresponding authentication method and perform the authentication process with the UE according to the authentication method, or find the corresponding second AUSF so that the second AUSF can perform the authentication process with the UE according to the authentication method.

2. The method according to claim 1, characterized in that The specific field in the first message is used to indicate the first identifier, and different values ​​of the first identifier correspond to different authentication methods.

3. A data transmission method, characterized in that: The method comprises: The AMF receives a first message for access authentication sent by the UE, where the first message includes identity information and a first identifier of the UE, where the first identifier is used to indicate an authentication method supported by the UE; The AMF determines the first authentication service function AUSF to which the UE belongs based on the identity information of the UE, and sends a second message to the first authentication service function AUSF, where the second message includes at least the identity information of the UE and the first identifier, so that the first authentication service function AUSF can find the corresponding authentication method and perform the authentication process with the UE according to the authentication method, or find the corresponding second AUSF so that the second AUSF can perform the authentication process with the UE according to the authentication method.

4. The method according to claim 3, characterized in that The AMF determines, based on the identity information of the UE, a first authentication service function AUSF to which the UE belongs, including: The AMF determines the first AUSF to which the UE belongs based on the identity information of the UE and the information of the public land mobile network PLMN.

5. A data transmission method, characterized in that: The method comprises: The first AUSF receives a second message for UE access authentication sent by the AMF, where the second message includes at least the identity information of the UE and a first identifier; the first identifier is used to indicate an authentication method supported by the UE; the first AUSF is the AUSF to which the UE belongs, determined by the AMF based on the identity information of the UE; The first AUSF finds the corresponding authentication method based on the first identifier, and performs the authentication process with the UE according to the authentication method; or, the first AUSF finds the corresponding second AUSF based on the first identifier, and sends a third message to the second AUSF, wherein the third message includes the identity information of the UE and the first identifier, and the third message is used for the second AUSF to perform the authentication process with the UE according to the authentication method.

6. The method according to claim 5, characterized in that Before the first AUSF finds the corresponding second AUSF based on the first identifier, the method further includes: The second AUSF is associated with the first AUSF, and the first AUSF obtains the configuration file of the second AUSF.

7. The method according to claim 6, characterized in that The first AUSF searches for a corresponding second AUSF based on the first identifier, including: The first AUSF searches for configuration files of associated second AUSFs based on the authentication method represented by the first identifier, and determines the second AUSF corresponding to the authentication method; wherein the configuration file includes at least the authentication methods supported by the second AUSF.

8. A UE, characterized in that: The UE includes a first sending unit, which is used to send a first message for access authentication to the AMF, wherein the first message includes identity information and a first identifier of the UE, the identity information of the UE is used by the AMF to determine a first AUSF to which the UE belongs, and the first identifier is used to indicate an authentication method supported by the UE, so that the first AUSF can find a corresponding authentication method and perform an authentication process with the UE according to the authentication method, or find a corresponding second AUSF so that the second AUSF can perform an authentication process with the UE according to the authentication method.

9. The UE according to claim 8, characterized in that The specific field in the first message is used to indicate the first identifier, and different values ​​of the first identifier correspond to different authentication methods.

10. An AMF, characterized in that: The AMF comprises: a first receiving unit, a determining unit and a second sending unit; wherein, The first receiving unit is configured to receive a first message for access authentication sent by the UE, where the first message includes identity information and a first identifier of the UE, where the first identifier is used to indicate an authentication method supported by the UE; The determining unit is configured to determine a first AUSF to which the UE belongs based on the identity information of the UE; The second sending unit is used to send a second message to the first AUSF to which the UE belongs, and the second message includes at least the identity information of the UE and the first identifier, so that the first AUSF can find the corresponding authentication method and perform the authentication process with the UE according to the authentication method, or find the corresponding second AUSF so that the second AUSF can perform the authentication process with the UE according to the authentication method.

11. The AMF according to claim 10, characterized in that The determining unit is used to determine the first AUSF to which the UE belongs according to the identity information of the UE and the information of the public land mobile network PLMN.

12. An AUSF, characterized in that: The AUSF is a first AUSF, and the AUSF includes: a communication unit and a processing unit; wherein, The communication unit is used to receive a second message sent by the AMF for UE access authentication, wherein the second message includes at least the identity information of the UE and a first identifier; the first identifier is used to indicate an authentication method supported by the UE; the first AUSF is the AUSF to which the UE belongs, determined by the AMF based on the identity information of the UE; The processing unit is configured to find a corresponding authentication method based on the first identifier, and perform an authentication process with the UE according to the authentication method; or find a corresponding second AUSF based on the first identifier; The communication unit is also used to send a third message to the second AUSF, wherein the third message includes the identity information of the UE and the first identifier, and the third message is used for the second AUSF to perform an authentication process with the UE according to the authentication method.

13. The AUSF according to claim 12, wherein: The processing unit is further used to associate the second AUSF with the first AUSF to obtain a configuration file of the second AUSF.

14. The AUSF according to claim 13, wherein: The processing unit is used to search for configuration files of each associated second AUSF based on the authentication method represented by the first identifier, and determine the second AUSF corresponding to the authentication method; wherein the configuration file includes at least the authentication method supported by the second AUSF.

15. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the steps of the method according to claim 1 or 2 are implemented; or, When the program is executed by a processor, the steps of the method according to claim 3 or 4 are implemented; or When the program is executed by a processor, the steps of the method according to any one of claims 5 to 7 are implemented.

16. A UE comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the program, the steps of the method according to claim 1 or 2 are implemented.

17. A network device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the program, the steps of the method described in claim 3 or 4 are implemented; or, when the processor executes the program, the steps of the method described in any one of claims 5 to 7 are implemented.

Images