Core network system

Abstract

Embodiments of the present application disclose a core network system, which can solve the problem of low information transmission efficiency between a terminal and core network functions. The core network system includes a terminal and multiple core network functions, wherein at least one of the terminal and the multiple core network functions directly performs information interaction through a Service-Based Architecture (SBA) interface.

Description

Technical Field

[0001] This application belongs to the field of communication technologies, and particularly relates to a core network system. Background Art

[0002] The only interface between the terminal and the core network entity is the N1 interface between the terminal and the Access and Mobility Management Function (AMF). The terminal and the AMF communicate through the Non-Access Stratum (NAS) protocol.

[0003] The information (or messages, signaling, etc.) transmitted on the N1 interface includes not only the information between the terminal and the AMF, but also the information between the terminal and other core network functions. For example, the session management messages between the terminal and the Session Management Function (SMF), and the short messages between the terminal and the Short Message Service (SMS) function.

[0004] In the related art, the information sent by the terminal to other core network functions needs to be encapsulated in the secure N1 interface NAS message and sent to the AMF uniformly. After the AMF decrypts it, the other information encapsulated in the NAS message is forwarded to the corresponding core network entity. Correspondingly, the downlink messages sent by other core network functions to the terminal must also be sent to the AMF first, and then encapsulated in the N1 interface NAS by the AMF, and then sent to the terminal after integrity protection and encryption processing, which results in low information transmission efficiency between the terminal and the core network functions. Summary of the Invention

[0005] The embodiments of this application provide a core network system, which can solve the problem of low information transmission efficiency between the terminal and the core network functions.

[0006] In a first aspect, a core network system is provided, including: a terminal and multiple core network functions, wherein at least one of the terminal and the multiple core network functions directly performs information interaction through a Service-Based Architecture (SBA) interface.

[0007] In the core network system provided by the embodiments of this application, at least one of the terminal and the multiple core network functions directly performs information interaction through the SBA interface. Compared with the method of forwarding information through the AMF, the information transmission efficiency between the terminal and the core network functions can be improved. At the same time, the embodiments of this application can also solve the problem that the traditional NAS protocol interface cannot be well compatible with the SBA-based core network architecture, and can meet the evolution trend of network-wide programmability. Description of the Drawings

[0008] Figure 1 It is a schematic structural diagram of a core network system according to an embodiment of the present application;

[0009] Figure 2 It is a schematic flowchart of the services that the core network system according to an embodiment of the present application can provide for a terminal;

[0010] Figure 3 It is a schematic flowchart of the services that the core network system according to an embodiment of the present application can provide for a terminal;

[0011] Figure 4 It is a schematic flowchart of the services that the core network system according to an embodiment of the present application can provide for a terminal;

[0012] Figure 5 It is a schematic flowchart of the services that the core network system according to an embodiment of the present application can provide for a terminal;

[0013] Figure 6 It is a schematic flowchart of the services that the core network system according to an embodiment of the present application can provide for a terminal;

[0014] Figure 7 It is a schematic flowchart of the services that the core network system according to an embodiment of the present application can provide for a terminal;

[0015] Figure 8 It is a schematic flowchart of the services that the core network system according to an embodiment of the present application can provide for a terminal;

[0016] Figure 9 It is a schematic flowchart of the services that the core network system according to an embodiment of the present application can provide for a terminal;

[0017] Figure 10 It is a schematic flowchart of the services that the core network system according to an embodiment of the present application can provide for a terminal;

[0018] Figure 11 It is a schematic flowchart of the services that the core network system according to an embodiment of the present application can provide for a terminal. Detailed implementation manners

[0019] Next, the technical solutions in the embodiments of the present application will be clearly described in conjunction with the accompanying drawings in the embodiments of the present application. Obviously, the described embodiments are some, rather than all, of the embodiments of the present application. All other embodiments obtained by those of ordinary skill in the art based on the embodiments in the present application belong to the scope of protection of the present application.

[0020] The following describes the 6th generation (6 thGeneration, 6G) communication system, and the 6G terminology is used in most of the following descriptions, but these technologies can also be applied to applications other than 6G system applications, such as 5G evolution systems, 7G systems, and so on.

[0021] The embodiments of the present application provide a solution for the service-based architecture (SBA) of the Non-Access Stratum (NAS) interface / protocol, introducing a core network system including a terminal. The core network system includes a terminal and multiple core network functions. Among them, at least one of the terminal and the multiple core network functions directly performs information interaction through the SBA interface, or in other words, the terminal and at least one of the multiple core network functions directly communicate through the SBA interface. For example, the terminal and all core network functions in the core network system can directly communicate through the SBA interface.

[0022] In the core network system provided by the embodiments of the present application, at least one of the terminal and multiple core network functions directly performs information interaction through the SBA interface. Compared with the method of forwarding information through the AMF, it can improve the information transmission efficiency between the terminal and the core network functions. At the same time, the embodiments of the present application can also solve the problem that the traditional NAS protocol interface cannot be well compatible with the SBA-based core network architecture, and can meet the evolutionary trend of network-wide programmability.

[0023] It should be noted that the core network functions mentioned in the embodiments of the present application, such as the network element selection function, etc., are usually functional entities that can implement certain functions. Therefore, these core network functions can also be replaced by other technical terms. For example, technical terms such as "network element selection entity" and "core network function selection entity" can be used to replace the "network element selection function", and so on.

[0024] As Figure 1 shown, Figure 1 is a schematic structural diagram of the core network system according to the embodiments of the present application. In this embodiment, the terminal and multiple core network functions are connected through the core network SBA bus, and the terminal can call the services provided by multiple core network functions through the core network SBA bus, and multiple core network functions can provide services for the terminal through the core network SBA bus.

[0025] In Figure 1 the embodiment shown, the core network functions in the core network system include: network element selection function, security management function (or called NAS security function), context management function, statistical information management function, subscription management function, access control function, mobility management function, session management function, location service function, Short Message Service (SMS) function.

[0026] It should be noted that Figure 1 In the core network system shown, a plurality of core network functions are schematically shown. In some other embodiments, the core network system may include some of the above-mentioned core network functions in reality, Figure 1 which is just an optional embodiment, and some of the core network functions therein can also be replaced by other core network functions. In one example, the plurality of core network functions include at least one of the following: network element selection function, security management function (or NAS security function), context management function, statistical information management function. In one example, the plurality of core network functions may also include at least one of the following: access control function, mobility management function. In one example, the plurality of core network functions include at least one of the following: subscription management function; session management function; location service function; short message service function.

[0027] The main functions of the core network functions mentioned in the above-mentioned multiple embodiments will be introduced below.

[0028] 1) The above-mentioned security management function (or NAS security function) is used to provide at least one of the following services: initial authentication and key generation service, security mode establishment service, NAS message encryption service, NAS message decryption service.

[0029] In this embodiment, the NAS security function can be separated from the Access and Mobility Management Function (AMF) as an independent core network function, and the NAS security function supports the SBA interface. Optionally, the NAS security function may also include the AUSF (Authentication Server Function) function for authentication of 3GPP access and non-3GPP access.

[0030] The services provided by the NAS security function to the terminal (or functions, the same hereinafter) include, for example: initial authentication and key generation service; security mode establishment service, etc.

[0031] The services provided by the NAS security function to other core network functions include, for example: security mode establishment service; NAS message encryption service; NAS message decryption service, etc.

[0032] Optionally, the NAS security function can also be used to provide the target core network function with the terminal context (or terminal security context) before the target core network function communicates with the terminal.

[0033] 2) Context management function, which provides services including at least one of the following: terminal context query service, terminal context update service.

[0034] This embodiment introduces a new context management function that supports the SBA interface.

[0035] Services provided by this context management function entity to the terminal include, for example: terminal context query service; terminal context update function. For example, it provides the identifier of the core network function that provides a certain service to the terminal, or provides the context related to a certain service for the terminal.

[0036] Services provided by this context management function to other core network functions include, for example: terminal context query service; terminal context update function. For example, it provides the terminal context for the target core network function, or provides the context related to a certain service of the terminal; also for example, after the target core network function communicates with the terminal and generates a new terminal context or updates the existing terminal context, the target core network function needs to send the latest terminal context to the context management function entity.

[0037] 3) Network function selection function (NF selection function), which provides services including at least one of the following: selecting the required core network function for the terminal according to the terminal's needs, and selecting the core network function that the target network function needs to connect to.

[0038] This embodiment introduces a new network function selection function that supports the SBA interface.

[0039] Services provided by this network function selection function to the terminal include, for example: selecting the core network function that the terminal needs to communicate with according to the terminal's needs.

[0040] Services provided by this network function selection function to other core network functions include, for example: selecting the core network function that the target network function needs to communicate with according to the needs of the target network function. The target network function can be connected to the core network SBA bus in Figure 1 , and the target network function can be a core network function or other network functions, such as an access network function, etc.

[0041] Optionally, the network function selection function is used to select, according to the type of service requested by the terminal, the core network function that can provide the service. For example, if the type of service requested by the terminal is a short message, the network function selection function can select the SMS function for the terminal so that a communication connection is established between the terminal and the SMS function.

[0042] Generally, before the terminal successfully registers, the terminal can select an access control function. After the terminal successfully registers, the terminal can select the core network functions of the related services that have been registered. Generally, the mobility management process is a service provided by default by the network. Optionally, the session management service can also be a service provided by default by the network.

[0043] 4) Statistical information management function, and the services provided include: statistics and / or feedback of target information.

[0044] This embodiment introduces a new statistical information management function that supports the SBA interface.

[0045] This statistical information management function can perform statistics and / or feedback on target information. For example, according to the request of the terminal, it can feedback the target information for which statistics have been completed to the terminal; according to the request of the target core network function, it can feedback the target information for which statistics have been completed to the target core network function, etc.

[0046] 5) Access control function, which is used to provide access services and initial registration services for the terminal.

[0047] 6) Mobility management function, which is used to provide mobility management services for the terminal.

[0048] In one example, the above access control function and mobility management function are the same core network function.

[0049] In another example, the above access control function and mobility management function are two independent core network functions. The following will illustrate the case where the access control function and the mobility management function are independent.

[0050] Optionally, for the access control function, the access services and initial registration services it provides can include at least one of the following 1) to 8).

[0051] 1) Receive the second interface (N2) control plane message, and locally process the N2 control plane message or send the first target information in the N2 control plane message to the first target network function. In this example, the access control function serves as the termination point of the N2 control plane protocol (Termination of RAN CP interface). The first target network function mentioned in this example can be a network function other than the access control function in the core network system, such as the mobility management function, etc.

[0052] 2) Receive the second target information from the second target network function, and send an N2 control plane message including the second target information to the access network device. In this example, the access control function serves as the termination point of the N2 control plane protocol (Termination of RAN CP interface (N2)).

[0053] 3) Send an N2 control plane message to the access network device. In this example, the N2 control plane message can be locally generated by the access control function.

[0054] 4) Encryption and integrity protection services for Non-Access Stratum (NAS) messages. In this example, as the termination point of the NAS protocol (Termination of NAS (N1)), the access control function can perform operations such as ciphering and integrity protection on NAS messages.

[0055] 5) NAS connection management service (Connection management). In this embodiment, since the termination point of the NAS protocol is at the access control function, the NAS connection management service can also be implemented by the access control function.

[0056] 6) Registration management service.

[0057] 7) Security-related services. Optionally, the security-related services can include at least one of the following: Access Authentication; Access Authorization; Security Anchor Functionality; Network Slice-Specific Authentication and Authorization.

[0058] 8) Non-3GPP access support services.

[0059] Optionally, for the mobility management function, the mobility management services it provides can include at least one of the following 1) to 9).

[0060] 1) Reachability management service.

[0061] 2) Mobility Management service.

[0062] 3) UE mobility event notification service.

[0063] 4) Lawful intercept service.

[0064] 5) Session Management (SM) service support. For example, provide transport for SM messages between the UE and the Session Management Function (SMF); transparent proxy for routing SM messages; EPS Bearer ID allocation for interworking with the Evolved Packet Switched System (EPS).

[0065] 6) Short Message Service (SMS) service support function. For example, provide transport for SMS messages between the UE and the Short Message Service Function (SMSF).

[0066] 7) Location service support function. For example, Location Services management for regulatory services; provide transport for Location Services messages between the UE and the Location Management Function (LMF) as well as between the Radio Access Network (RAN) and the LMF).

[0067] 8) Cellular Internet Of Things (CIOT) service support function. For example, support for Control Plane CIoT Optimisation; support for User Plane CIoT Optimisation).

[0068] 9) External parameter configuration function. For example, provide external parameters such as expected UE behavior parameters or network configuration parameters (Provisioning of external parameters, Expected UE Behaviour parameters or Network Configuration parameters).

[0069] Optionally, the access control function mentioned in each of the foregoing embodiments can also be used to receive an uplink NAS message, locally process the uplink NAS message, or send the third target information in the uplink NAS message to a third target network function. For example, the access control function sends the necessary information in the decrypted uplink NAS message to the mobility management function through a service-based interface. The third target network function mentioned in this example can be a network function other than the access control function in the core network system, such as the mobility management function, etc.

[0070] In this embodiment, NAS messages on the N1 interface can all be directly sent by the access network device (such as a base station) to the access control function. After the access control function performs decryption processing, it is locally processed or forwarded to a third target network function for processing.

[0071] Optionally, the access control function mentioned in each of the foregoing embodiments can also be used to send a downlink NAS message to the terminal, and the downlink NAS message can be locally generated by the access control function.

[0072] Optionally, the fourth target network function, which is the mobility management function mentioned in each of the foregoing embodiments, can also be used to send fourth target information to the access control function, and the access control function is further used to send a downlink NAS message including the fourth target information to the terminal. For example, the mobility management function sends the information that needs to be sent to the terminal in plaintext to the access control function through a service-based interface, and the access control function forwards the encrypted downlink NAS message to the terminal after encryption. The fourth target network function mentioned in this example can be a network function other than the access control function in the core network system, such as the location service function, etc.

[0073] In the above embodiments, the access control function can serve as the endpoint of the NAS protocol. The access control function is responsible for the encryption and integrity protection of NAS messages. Therefore, an important function of the interface between the access control function and the mobility management function is that after decrypting the uplink NAS message, the access control function forwards the necessary information to the mobility management function. The mobility management function can send the message to be sent to the terminal to the access control function, which encrypts the message and forwards it to the terminal through the base station. The interaction process between the access control function and the mobility management function can be implemented based on a service-based interface.

[0074] The core network system provided by the embodiments of the present application separates the access control function and the mobility management function by setting them, which can better integrate the SBA core network with the SBA-based management plane and lay the foundation for the integration of the SBA access network and the SBA core network.

[0075] Regarding the above-mentioned "better integration of the SBA core network with the SBA-based management plane", the following will explain it. In this embodiment, the control plane SBA of the access control function retains the modular design principle of the traditional core network (such as the 4G core network). Each sub-network function that the access control function can implement is not a free combination of microservices, but a collection of specific sub-network functions standardized by protocols. These sub-network functions are network functions related to access control, registration, authentication, and authorization. The management plane SBA of the mobility management function is more purely SBA-based. The mobility management function can implement various internal network services (i.e., sub-network functions). When configuring the network, various internal network services (i.e., sub-network functions) can be freely and flexibly combined. By separating the access control function and the mobility management function in the embodiments of the present application, rather than being centrally implemented by a single network function (such as all implemented by the AMF), the SBA core network and the SBA-based management plane can be better integrated.

[0076] Optionally, in the core network system mentioned in the previous embodiments, the terminal and the core network function directly interact with each other through the SBA interface. The NAS message transmitted through the SBA interface includes indication information, which is used to indicate the core network function communicating with the terminal. In this way, different core network functions can be distinguished through this indication information.

[0077] In one example, the first byte of the NAS message is used to carry the Extended protocol discriminator information element (IE). Refer to Table 1. The Extended protocol discriminator IE characterizes and differentiates the communication messages between the terminal and different core network functions through different values. For example: for the uplink and downlink communication messages between the terminal and the mobility management function, the Extended protocol discriminator value can be set to 1; for the uplink and downlink communication messages between the terminal and the session management function, the Extended protocol discriminator value can be set to 2; for the uplink and downlink communication messages between the terminal and the SMS function, the Extended protocol discriminator value can be set to 3; for the uplink and downlink communication messages between the terminal and the Network Exposure Function (NEF), the Extended protocol discriminator value can be set to 4; for the uplink and downlink communication messages between the terminal and the location service function, the Extended protocol discriminator value can be set to 5; for the uplink and downlink communication messages between the terminal and the subscription management function, the Extended protocol discriminator value can be set to 6.

[0078] Table 1 Extended protocol discriminator format

[0079]

[0080] Optionally, the SBA interfaces mentioned in the foregoing embodiments satisfy one of the following: implemented based on the Restful interface; implemented based on the Restful enhanced interface; implemented based on the target SBA service-oriented interface protocol.

[0081] In this embodiment, the SBA interfaces provided by the terminal and multiple core network functions can be implemented based on the Restful interface, and the Restful interface can be implemented based on the Hypertext Transfer Protocol (HTTP) 2.0; or the Restful interface can be the Restful enhanced interface based on HTTP3.0; or, the SBA interface can be implemented based on other SBA service-oriented interface protocols, for example, implemented based on the Packet Forwarding Control Protocol (PFCP).

[0082] Optionally, the core network system provided in each embodiment of the present application can provide the terminal with at least one of the following services 1) to 11).

[0083] 1) Initial registration service of the terminal.

[0084] 2) Authentication and authorization service of the terminal.

[0085] 3) Security establishment service of the terminal.

[0086] 4) Mobility management service of the terminal.

[0087] 5) Session establishment service of the terminal.

[0088] 6) Session modification and release service of the terminal.

[0089] 7) Security update service of the terminal.

[0090] 8) Short message service of the terminal.

[0091] 9) Location service of the terminal.

[0092] 10) Service for updating subscription-related configuration parameters.

[0093] 11) Service for requesting terminal statistical information.

[0094] To illustrate in detail the core network system provided by the embodiments of the present application and the functions of the core network in the core network system, several specific embodiments will be described below.

[0095] Embodiment 1: Initial registration and security establishment process of the terminal

[0096] Figure 2 The illustrated embodiment gives the initial registration process and the security establishment process of the terminal. Some steps are omitted in this embodiment, such as the terminal identification process, the old context request process, the policy establishment and request process, etc. Only the processes related to initial registration and security establishment are introduced. As Figure 2 shown, this embodiment includes the following steps.

[0097] Step 0: Perform an access control function selection process between the terminal and the network element selection function.

[0098] Step 1: The terminal sends an initial registration message to the access control function.

[0099] Step 2: Perform a security management function selection process between the network element selection function and the access control function.

[0100] Step 3: Perform an authentication and security establishment process among the terminal, the security management function, and the subscription management function.

[0101] Step 4: Perform a process of requesting and providing the terminal security context between the access control function and the security management function.

[0102] Step 5: Execute the security management function context update process between the security management function and the context management function.

[0103] Step 6: The access control function sends an initial registration acceptance message to the terminal.

[0104] Step 7: Execute the access control function context update process between the access control function and the context management function.

[0105] Step 8: The network element selection function and the access control function update the registered service types, such as session management service, short message service, control plane data service, location service, etc. After that, the terminal can request to select the core network functions of the registered service types. Among them, the location update service is the default registered service. Optionally, the session management service can also be used as the default registered service.

[0106] Embodiment 2: Mobility registration update process of the terminal.

[0107] This mobility registration update function can also be called the mobility management process. This embodiment will be introduced in two sub - embodiments.

[0108] Sub - embodiment 1, the mobility management function and the access control function are co - located. As Figure 3 shown, this embodiment includes the following steps.

[0109] Step 1: The terminal sends a location update message to the access control function and the mobility management function.

[0110] Step 2: Execute the location update process of the terminal among the terminal, the access control function and the mobility management function.

[0111] Step 3: Execute the request and provision process of the mobility management function context between the mobility management function and the context management function.

[0112] Sub - embodiment 2, the mobility management function and the access control function are separately located. As Figure 4 shown, this embodiment includes the following steps.

[0113] Step 0: Execute the mobility management function selection process between the terminal and the network element selection function.

[0114] Step 1: The terminal sends a location update message to the mobility management function.

[0115] Step 2: Execute the request and provision process of the security context of the terminal between the mobility management function and the security management function.

[0116] Step 3: Execute the mobility registration update process of the terminal between the terminal and the mobility management function.

[0117] Optionally, after step 3, the following steps may further be included: The mobility management function updates the terminal context generated or updated during this process to the context management function.

[0118] Embodiment 3: Session establishment process of the terminal

[0119] Figure 5 The session establishment process of the terminal is given. Some steps are omitted in this embodiment, such as the gateway selection process, the policy establishment and request processes, etc. Only the processes related to session establishment are introduced. As Figure 5 shown, this embodiment includes the following steps.

[0120] Step 0: Execute a session management function selection process between the terminal and the network element selection function.

[0121] In this embodiment, when the network element selection function selects a session management function for the terminal, it may request the required terminal context from the context management function. For example, the already established Protocol Data Unit (PDU) session context, which includes the session management function that has established the PDU session service for the terminal.

[0122] Step 1: The terminal sends a session establishment message to the session management function.

[0123] Step 2: Execute a process of requesting and providing the terminal security context between the session management function and the security management function.

[0124] Step 3: Execute a terminal session establishment process between the terminal and the session management function.

[0125] Step 4: Execute a session management function context update process between the session management function and the context management function.

[0126] Embodiment 4: Session modification and release process of the terminal

[0127] Figure 6 The shown embodiment gives the session modification and release process of the terminal. Some steps are omitted in this embodiment, such as the gateway selection process, the policy establishment and request processes, etc. Only the processes related to session modification and release of the terminal are introduced.

[0128] In addition, this embodiment usually occurs after Embodiment 3, that is, after the terminal has selected a session management function and established a session, the session modification and release process will occur. As Figure 6 shown, this embodiment includes the following steps.

[0129] Step 1: The terminal sends a session modification / release message to the session management function.

[0130] Step 2: Execute the terminal session modification / release process between the terminal and the session management function.

[0131] Step 3: Execute the session management function context update process between the session management function and the context management function.

[0132] Example 5: The security update process of the terminal. As Figure 7 shown, this example includes the following steps.

[0133] Step 0: Trigger the security update process between other network functions and the security management function.

[0134] In this example, the trigger condition can be local trigger or triggered by other network functions, such as subscription change trigger, mobility trigger, etc.

[0135] Step 1: Execute the terminal security update process between the terminal and the security management function.

[0136] Step 2: Execute the security management function context update process between the security management function and the context management function.

[0137] Step 3: Execute the terminal security update process between the security management function and other network functions. For example, update the terminal security algorithm to the core network function that has requested the terminal security.

[0138] Example 6: The short message service process of the terminal. As Figure 8 shown, this example includes the following steps.

[0139] Step 0: Execute the SMS function selection process between the terminal and the network element selection function.

[0140] Step 1: The terminal sends an sms registration message to the SMS function.

[0141] Step 2: Execute the process of requesting and providing the terminal security context between the SMS function and the security management function.

[0142] Step 3: The SMS function sends an sms registration acceptance message to the terminal.

[0143] Step 4: Execute the SMS function context update process between the SMS function and the context management function.

[0144] Step 5: Transmit sms messages between the terminal and the SMS function. For example, the terminal sends an uplink sms message to the SMS function, and the SMS function sends a downlink sms message to the terminal.

[0145] Example 7: The location service process of the terminal. As Figure 9 shown, this example includes the following steps.

[0146] Step 0: Perform a location service function selection process between the terminal and the network element selection function.

[0147] Step 1: The terminal sends a location service registration message to the location service function.

[0148] Step 2: Perform a process of requesting and providing the terminal security context between the location service function and the security management function.

[0149] Step 3: The location service function sends a location service acceptance message to the terminal.

[0150] Step 4: Perform a location service function context update process between the location service function and the context management function.

[0151] Step 5: Transmit location messages between the terminal and the location service function. For example, the terminal sends an uplink location message to the location service function, and the location service function sends a downlink location message to the terminal.

[0152] Embodiment Eight: The process of updating configuration parameters related to subscription. As Figure 10 shown, this embodiment includes the following steps.

[0153] Step 1: Perform a process of requesting and updating the terminal security context between the security management function and the subscription management function.

[0154] Step 2: The subscription management function sends a configuration parameter update message related to subscription to the terminal.

[0155] Step 3: The terminal sends a configuration parameter update confirmation (ACK) message related to subscription to the subscription management function.

[0156] Embodiment Nine: The process of requesting terminal-related statistical information. As Figure 11 shown, this embodiment includes the following steps.

[0157] Step 1: Perform a process of requesting and updating the terminal security context between the security management function and the statistical information management function.

[0158] Step 2: The statistical information management function sends a terminal-related statistical information request message to the terminal.

[0159] Step 3: The terminal sends a terminal-related statistical information response message to the statistical information management.

[0160] The embodiments of the present application have been described above in conjunction with the accompanying drawings. However, the present application is not limited to the above specific embodiments. The above specific embodiments are merely illustrative rather than restrictive. Under the inspiration of the present application, those of ordinary skill in the art can also make many forms without departing from the purpose of the present application and the scope protected by the claims, and all of them fall within the protection scope of the present application.

Claims

1. A core network system, characterized in that, including: a terminal and multiple core network functions, wherein at least one of the terminal and the multiple core network functions directly performs information interaction through a Service-Based Architecture (SBA) interface, and a NAS message transmitted through the SBA interface includes indication information for indicating the core network function communicating with the terminal. The core network function includes at least one of the following: a Non-Access Stratum (NAS) security function, and the services provided thereby include at least one of the following: initial authentication and key generation service, security mode establishment service, NAS message encryption service, NAS message decryption service; a context management function, and the services provided thereby include at least one of the following: terminal context query service, terminal context update service; a network element selection function, and the services provided thereby include at least one of the following: selecting, according to the terminal's requirements, the core network functions required by the terminal, and selecting, for a target network function, the core network functions to be connected; a statistical information management function, and the services provided thereby include: statistics and / or feedback of target information.

2. The core network system according to claim 1, characterized in that, The NAS security function is used to provide a terminal security context for a target core network function before the target core network function communicates with the terminal.

3. The core network system according to claim 1, characterized in that, The network element selection function is used to select, according to the type of service requested by the terminal, the core network function that can provide the service for the terminal.

4. The core network system according to claim 1, characterized in that, The core network function includes at least one of the following: an access control function, which is used to provide an access service and an initial registration service for the terminal; a mobility management function, which is used to provide a mobility management service for the terminal.

5. The core network system according to claim 4, characterized in that, The access control function and the mobility management function are two independent core network functions; or The access control function and the mobility management function are the same core network function.

6. The core network system according to claim 1, characterized in that, The core network function includes at least one of the following: a subscription management function; a session management function; a location service function; a Short Message Service (SMS) function.

7. The core network system according to claim 1, characterized in that, The SBA interface satisfies one of the following: implemented based on a Restful interface; implemented based on a Restful enhanced interface; implemented based on a target SBA service-based interface protocol.

8. The core network system according to claim 1, characterized in that, The services provided by the core network system for the terminal include at least one of the following: the terminal's initial registration service; the terminal's authentication and authorization service; the terminal's security establishment service; the terminal's mobility management service; the terminal's session establishment service; the terminal's session modification or release service; the terminal's security update service; the terminal's short message service; the terminal's location service; a subscription-related configuration parameter update service; the terminal statistical information request service.

Images