Method and device for establishing a logical private network for a 5G messaging system

By identifying and associating the terminal and private network applications of the 5G message system, and establishing a logical private network, the problem of inefficient user access rights control in the existing technology is solved, and more efficient and flexible permission management is achieved.

CN114980121BActive Publication Date: 2025-04-25CHINA MOBILE GROUP SHAIHAI +1
View PDF 2 Cites 0 Cited by

Patent Information

Application Number
CN202110192164.9
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2021-02-19
Publication Date
2025-04-25
Estimated Expiration
2041-02-19

AI Technical Summary

Technical Problem

The existing 5G message system lacks a dedicated network mechanism, which makes users able to access all applications. The blacklist management mechanism is inefficient and it is difficult to effectively control user access rights and scope.

Method used

By identifying terminals and private network applications, obtaining terminal private network identifiers and application private network identifiers, and performing association authentication during the associated query, search, uplink message sending and downlink message sending of private network applications, establishing a logical private network of the 5G message system.

Benefits of technology

It realizes convenient control of user access rights and scope, improves the efficiency and generality of access rights management, and significantly improves the operationality and flexibility of the system compared with the traditional blacklisting mechanism.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN114980121B_ABST
    Figure CN114980121B_ABST
Patent Text Reader

Abstract

The present invention provides a method and device for establishing a logical private network of a 5G message system, the method comprising: identifying a terminal and a private network application respectively to obtain a terminal private network identification and an application private network identification; based on the terminal private network identification and the application private network identification, performing association authentication on the terminal and the private network application during private network application association query, private network application search, uplink message sending, and downlink message sending to establish a logical private network of the 5G message system. The device is used to execute the above method. The method and device for establishing a logical private network of a 5G message system provided by the present invention identify private network applications and terminals, and perform association authentication during private network application query, search, and uplink and downlink message sending to form a logical private network of the 5G message system. Compared with the traditional restriction of private network user access to application permissions through a blacklist mechanism, it can realize convenient control of access permissions and scope, and is more versatile.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the field of mobile communication technologies, and in particular to a method and device for establishing a logical private network for a 5G message system. Background Art

[0002] 5G messages can not only realize the multimedia nature of messages, but also its message service forms are like Apple iMessage and Tencent WeChat, as well as public accounts, service accounts and mini-programs. However, compared with its competitors (interactive software such as WeChat), 5G messages have outstanding advantages such as service capability innovation, customer installation-free, mobile phone number as user ID, and real-name authentication of industry entrances. It is conducive to seizing market opportunities, seizing information service and application entrances, and improving customer experience, which is of great significance to the development of the company. 5G messages enable thousands of industries through industry promotion and ecological construction, and are a new tool for creating a trillion-dollar industry. On April 8, 2020, China Telecom, China Mobile, and China Unicom jointly released the "5G Message White Paper" on the 8th, laying the foundation for the three major operators to work with industry partners to jointly build a 5G message ecosystem.

[0003] 5G messages will be the entrance to operators' subsequent information services and applications, but 5G messages currently have no private network mechanism or concept. In theory, users can access all applications.

[0004] Currently, 5G messages only use a blacklist management mechanism when managing the access of 5G message applications (Chatbot). The blacklist is divided into the user's blacklist for Chatbot and the Chatbot's blacklist for the sending user.

[0005] The user's blacklist for Chatbot may include the local blacklist configured on the user terminal, the blacklist configured on the network side for the terminal (configured by the network side and sent to the terminal), and the network blacklist (configured by the network side and not sent to the terminal). Chatbots added to the blacklist cannot exchange messages with users and cannot be searched and viewed by users.

[0006] The Chatbot's blacklist of sending users is configured on the network side, which can restrict a Chatbot from actively sending messages to users in the blacklist.

[0007] This blacklist mechanism is more suitable for restricting a small number of applications. However, 5G messaging applications (Chatbot) will flourish and cover all industries. The types and number of applications will exceed people's imagination. Therefore, for some private network applications, only using this blacklist mechanism to restrict user access to application permissions will be extremely inefficient and wasteful, and the blacklist mechanism may cause the problem of endless screening. Summary of the invention

[0008] The method and device for establishing a logical private network for a 5G message system provided by the present invention are used to overcome the defects of low applicability, low efficiency and waste in the prior art of restricting private network user access to application permissions through a blacklist mechanism. It can conveniently control user access permissions and scope and is more versatile.

[0009] The present invention provides a method for establishing a logical private network of a 5G message system, comprising:

[0010] Identify the terminal and the private network application respectively to obtain the terminal private network identification and the application private network identification;

[0011] Based on the terminal private network identifier and the application private network identifier, the terminal and the private network application are associated and authenticated during private network application association query, private network application search, uplink message sending and downlink message sending to establish a logical private network of the 5G message system.

[0012] According to a method for establishing a logical private network of a 5G message system provided by the present invention,

[0013] The performing association authentication on the terminal and the private network application during the private network application association query includes:

[0014] Performing logical private network identification mapping according to the mapping relationship between the terminal number segment and the logical private network, determining the logical private network to which the terminal belongs, and identifying the terminal according to the logical private network to determine the terminal private network identifier;

[0015] Performing association authentication according to the terminal private network identifier and the application private network identifier to verify whether the terminal private network identifier and the application private network identifier are consistent;

[0016] Among them, the mapping relationship between the terminal number segment and the logical private network is the mapping relationship between the terminal and the logical private network obtained after the terminal is divided into logical private networks based on the terminal number segment.

[0017] According to a method for establishing a logical private network of a 5G message system provided by the present invention, the association authentication of the terminal and the private network application during the private network application association query includes:

[0018] Obtaining the private network identifier of the terminal according to the contract information of the terminal on the business support system BOSS;

[0019] In the case where the terminal initiates a call, querying a private network application pool carrying an application private network identifier that is consistent with the terminal private network identifier according to the received terminal private network identifier;

[0020] In the case where the private network application initiates a call, a terminal carrying a terminal private network identifier that is consistent with the application private network identifier is queried.

[0021] According to a method for establishing a logical private network of a 5G message system provided by the present invention, the association authentication of the terminal and the private network application during the private network application search includes:

[0022] Obtaining information about a directory list of private network applications according to a private network application search request received from a terminal;

[0023] According to the terminal private network identifier, the private network application directory list information carrying the application private network identifier consistent with the terminal private network identifier is searched, and the search result is fed back to the terminal.

[0024] According to a method for establishing a logical private network of a 5G message system provided by the present invention, the associating and authenticating the terminal and the private network application when sending an uplink message includes:

[0025] According to the terminal private network identifier carried in the received uplink MOAT message sent by the terminal, the association authentication between the terminal and the target private network application is performed to determine whether the terminal private network identifier is consistent with the application private network identifier of the target private network application;

[0026] If the terminal private network identifier is consistent with the application private network identifier of the target private network application, the uplink MOAT process is executed.

[0027] According to a method for establishing a logical private network of a 5G message system provided by the present invention, the association authentication of the terminal and the private network application when sending a downlink message includes:

[0028] According to the application private network identifier carried in the received downlink message sent by the private network application, the association authentication between the target terminal and the private network application is performed, and according to the target terminal private network identifier and the application private network identifier, it is determined whether the target terminal and the private network application belong to the same logical private network;

[0029] If it is determined that the target terminal and the private network application belong to the same logical private network, the downlink message sending process is executed.

[0030] According to a method for establishing a logical private network of a 5G message system provided by the present invention, the subscription information of the terminal is obtained in the following manner:

[0031] According to the 5G message private network service activation information and private network service contract information of the terminal on the BOSS, the contract information of the terminal on the BOSS is obtained;

[0032] Acquiring the contract information of the terminal according to the contract information synchronized by the mesh network;

[0033] The mesh network synchronized contract information is obtained after the BOSS synchronizes the contract information of the terminal on the BOSS.

[0034] The present invention also provides a method for processing logical private network information of a 5G message system, comprising:

[0035] Send a private network application search request to the server;

[0036] Receiving search results returned by the server;

[0037] The search result is obtained by the server searching the private network application directory list information according to the terminal private network identifier in the private network application search request;

[0038] The private network application directory list information includes the application private network identifier of the private network application that is consistent with the terminal private network identifier.

[0039] A logical private network information processing method for a 5G message system provided by the present invention also includes:

[0040] Sending the uplink MOAT message to the target private network application through the server;

[0041] Among them, the target private network application is a private network application that is determined to be consistent with the terminal private network identifier in the uplink message based on the association authentication result of the terminal and the private network application by the server when the uplink message is sent.

[0042] A logical private network information processing method for a 5G message system provided by the present invention also includes:

[0043] Sending a 5G message private network service activation request to the server;

[0044] Receive the 5G message private network service activation result fed back by the server;

[0045] The 5G message private network service activation result is obtained in the following way:

[0046] The mesh network sends the 5G message private network service activation request to the BOSS;

[0047] The BOSS performs terminal authentication according to the received 5G message private network service activation request, performs service processing on the 5G message private network service activation request according to the authentication result, and feeds back the 5G message private network service activation result to the mesh network;

[0048] The mesh network feeds back the activation result of the 5G message private network service to the server.

[0049] The present invention also provides a 5G message system logic private network establishment system, comprising:

[0050] 5GMC and MaaP, the 5GMC is communicatively connected with the MaaP;

[0051] The 5GMC or the MaaP is used to identify the terminal and the private network application respectively to obtain the terminal private network identification and the application private network identification; and based on the terminal private network identification and the application private network identification, the terminal and the private network application are associated and authenticated during private network application association query, private network application search, uplink message sending and downlink message sending to establish a logical private network of the 5G message system.

[0052] A logical private network establishment system for a 5G messaging system provided by the present invention further includes: a mesh network, which is communicatively connected to the 5GMC, and is used to synchronize the subscription information of the terminal to the 5GMC;

[0053] BOSS, which is in communication connection with the mesh network and is used to synchronize the contract information of the terminal to the mesh network;

[0054] The 5GMC is also used to perform association authentication based on the terminal private network identifier and the application private network identifier to verify whether the terminal private network identifier and the application private network identifier are consistent.

[0055] A logical private network establishment system for a 5G message system provided by the present invention also includes:

[0056] A MaaP management module, used to synchronize the private network identification information after the private network application is identified to the MaaP platform, and synchronize the application private network identification to the MaaP platform;

[0057] a network operator module, which is in communication connection with the MaaP platform, and is used to divide the terminal into logical private networks according to the terminal number segment to determine the mapping relationship between the terminal number segment and the logical private network, so that the MaaP platform can determine the logical private network to which the terminal belongs according to the mapping relationship and the terminal number segment, and identify the terminal according to the logical private network to determine the terminal private network identifier;

[0058] The MaaP platform is used to perform association authentication according to the terminal private network identifier and the application private network identifier to verify whether the terminal private network identifier and the application private network identifier are consistent.

[0059] A logical private network establishment system for a 5G message system provided by the present invention also includes:

[0060] The MaaP platform is further configured to receive a private network application search request sent by a terminal, send a contract information query request of the terminal to the 5GMC, obtain the private network identifier of the terminal according to the feedback result of the 5GMC, and search for the private network application directory list information carrying an application private network identifier consistent with the terminal private network identifier according to the received private network application search request sent by the terminal, and feed back the search result to the terminal;

[0061] The 5GMC is also used to query the contract information of the terminal according to the contract information query request of the terminal sent by the MaaP platform, and feed back the acquired contract information of the terminal to the MaaP platform.

[0062] A logical private network establishment system for a 5G message system provided by the present invention also includes:

[0063] The MaaP platform is further used to perform association authentication between the terminal and the target private network application according to the received uplink MOAT message carrying the terminal private network identifier, determine whether the terminal private network identifier is consistent with the application private network identifier of the target private network application, and if it is determined that the target terminal and the private network application belong to the same logical private network, send the authentication to the 5GMC through a receipt;

[0064] The 5GMC is also used to receive an uplink MOAT message sent by the terminal, query the contract information of the terminal based on the terminal number segment to obtain the terminal private network identifier, add the terminal private network identifier to the uplink MOAT message and send it to the MaaP platform, and execute the uplink MOAT process through a receipt based on the authentication.

[0065] A logical private network establishment system for a 5G message system provided by the present invention also includes:

[0066] The MaaP platform is further configured to receive a downlink message carrying the application private network identifier sent by the private network application, and route the downlink message to the 5GMC;

[0067] The 5GMC is also used to determine whether the target terminal and the private network application belong to the same logical private network based on the application private network identifier and the terminal private network identifier carried in the received downlink message. If it is determined that the target terminal and the private network application belong to the same logical private network, the downlink message sending process is executed.

[0068] The present invention also provides a logical private network establishment device for a 5G message system, comprising: an acquisition module and an associated authentication module;

[0069] The acquisition module is used to identify the terminal and the private network application respectively to obtain the private network identification of the terminal and the private network identification of the private network application;

[0070] The association authentication module is used to perform association authentication on the terminal and the private network application based on the terminal private network identifier and the application private network identifier during private network application association query, private network application search, uplink message sending and downlink message sending to establish a logical private network of the 5G message system.

[0071] The present invention also provides a logical private network information processing device of a 5G message system, characterized in that it includes: a sending module and a receiving module;

[0072] The sending module is used to send a private network application search request to the server;

[0073] The receiving module is used to receive the search results of the server;

[0074] The search result is obtained by the server searching the private network application directory list information according to the terminal private network identifier in the private network application search request;

[0075] The private network application directory list information includes the application private network identifier of the private network application that is consistent with the terminal private network identifier.

[0076] The present invention also provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the steps of the method for establishing a logical private network of a 5G message system as described above are implemented.

[0077] The present invention also provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the steps of the logical private network information processing method of the 5G message system as described above are implemented.

[0078] The present invention also provides a non-transitory computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of the method for establishing a logical private network of a 5G message system as described in any of the above-mentioned methods are implemented.

[0079] The present invention also provides a non-transitory computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of the logical private network information processing method of the 5G message system as described in any one of the above-mentioned methods are implemented.

[0080] The method and device for establishing a logical private network for a 5G message system provided by the present invention identify private network applications and terminals, and perform associated authentication when private network applications are queried, searched, and uplink and downlink messages are sent, to form a logical private network for the 5G message system. Compared with the traditional method of restricting private network user access to applications through a blacklist mechanism, the logical private network of the 5G message system established by the present invention can conveniently control access rights and scope and is more versatile. BRIEF DESCRIPTION OF THE DRAWINGS

[0081] In order to more clearly illustrate the technical solutions in the present invention or the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0082] Figure 1 It is a flowchart of a method for establishing a logical private network of a 5G message system provided by the present invention;

[0083] Figure 2 It is a schematic diagram of the terminal identification and associated authentication process based on terminal number segment division provided by the present invention;

[0084] Figure 3 It is a schematic diagram of the terminal identification and associated authentication process based on the contract information of the terminal provided by the present invention;

[0085] Figure 4 It is a schematic diagram of the private network application search process provided by the present invention;

[0086] Figure 5 This is a schematic diagram of the private network Chatbot activation process provided by the present invention;

[0087] Figure 6 It is a schematic diagram of the uplink P2A private network message service process provided by the present invention;

[0088] Figure 7 It is a schematic diagram of the downlink A2P private network message service process provided by the present invention;

[0089] Figure 8 It is a schematic diagram of the synchronization process of signing a contract with a private network user provided by the present invention;

[0090] Fig. 9 It is a flow chart of the logical private network information processing method of the 5G message system provided by the present invention;

[0091] Fig.10 It is a schematic diagram of the private network user activation process provided by the present invention;

[0092] Fig.11It is a structural diagram of a logical private network establishment device for a 5G message system provided by the present invention;

[0093] Fig.12 It is a structural diagram of a logical private network information processing device of a 5G message system provided by the present invention;

[0094] Fig.13 It is one of the structural schematic diagrams of the electronic device provided by the present invention;

[0095] Fig.14 This is the second structural schematic diagram of the electronic device provided by the present invention;

[0096] Fig.15 This is the third structural schematic diagram of the electronic device provided by the present invention. DETAILED DESCRIPTION

[0097] In order to make the purpose, technical solution and advantages of the present invention clearer, the technical solution of the present invention will be clearly and completely described below in conjunction with the drawings of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. The embodiments of the present invention and all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0098] To facilitate understanding of the technical solution of this application, the following contents are now introduced:

[0099] 5G messaging is implemented based on GSMA RCS UP2.4 and related standards, built on the IMS network, and provides users with a collection of multiple services such as voice, messaging, and status presentation. The 5G messaging system mainly includes terminals, 5G messaging center (5GMC), MaaP platform, billing calculation, message supervision, and network intercommunication, among which: Terminal: The terminal accesses the 5G messaging center (5GMC) through the 3G / 4G / 5G network or WLAN, and the user uses the mobile phone number as the communication identifier;

[0100] 5G Message Center: The 5G Message Center has the functions of 5G message management, distribution, routing, etc., and provides a unified interface between terminals and networks. The 5G Message Center includes functions such as IMS access, RCS AS, content storage and configuration management.

[0101] Messaging as a Platform (MaaP): The MaaP platform is hosted on the 5G message center and opens a unified interface to Chatbots. It is responsible for the review and authentication of industry customer Chatbots, the upload and storage of multimedia content in industry messages, and supports terminals to query Chatbot directories and information.

[0102] Chatbot: is a service provided by industry customers to user terminals in the form of conversation. This service is usually based on artificial intelligence software, simulating human intelligent conversation and providing specific service functions to users;

[0103] Billing calculation: used for billing and settlement of 5G messages. The billing points of 5G messages are in the 3G / 4G / 5G packet domain, 5G message center, MaaP platform and network interconnection network management;

[0104] Message supervision: used to implement compliance review of message content and filtering and blocking strategies for bad messages;

[0105] Inter-network interconnection: used to realize the interconnection of 5G message services between different operators.

[0106] Figure 1 It is a flow chart of the method for establishing a logical private network of a 5G message system provided by the present invention, such as Figure 1 As shown, the method includes:

[0107] S1. Identify the terminal and the private network application respectively to obtain the terminal private network identification and the application private network identification;

[0108] S2. Based on the terminal private network identifier and the application private network identifier, the terminal and the private network application are associated and authenticated during private network application association query, private network application search, uplink message sending and downlink message sending to establish a logical private network for the 5G message system.

[0109] It should be noted that the execution subject of the above method can be a 5G message system or a MaaP platform. The following takes the execution of the above method by a 5G message center or MaaP as an example to describe the technical solution of the present application in detail.

[0110] Optionally, the 5G message center or the MaaP platform identifies the user terminal based on the number segment of the user terminal or based on the contract information of the user terminal in the business operation support system (BOSS) (the user terminal is signed to one or several 5G message private networks) to obtain the terminal private network identifier.

[0111] Since 5G message applications cover all walks of life, it is possible to classify the applications in the large network application pool to obtain private network application pools of various categories, and identify the private network applications in the private network application pool of the same category to obtain the application private network identification.

[0112] It should be noted that the application private network identification of private network applications in the private network application pool of the same category uses the same identification. In the present invention, the terminal and the private network application can be identified in the form of text or pictures, and the present invention does not make specific limitations on this.

[0113] The MaaP platform or 5G message center will associate and authenticate the terminal and private network application according to the terminal private network identifier and the application private network identifier during private network application association query, private network application search, uplink message sending and downlink message sending, and verify whether the terminal private network identifier is consistent with the corresponding application private network identifier, thereby closing the loop between the private network user terminal and the private network application and establishing a logical private network for the 5G message system.

[0114] The logical private network establishment method of the 5G message system provided by the present invention can conveniently realize a certain industry private network terminal, including but not limited to: student learning private network terminal, special duty industry terminal, etc. The industry terminal realized by the present invention can conveniently control access rights and scope, and 5G messages as the only entrance to terminal application services can simplify terminal functions and reduce the cost of industry terminals.

[0115] For example, based on the implementation of the 5G message learning private network, students can only access the approved learning private network application pool through the 5G message entrance. 5G message is the only entrance to the Internet information services and applications of smart terminals (other entrances are blocked), so the smart terminal will be a learning smart terminal that parents can rest assured.

[0116] The method for establishing a logical private network for a 5G message system provided by the present invention identifies private network applications and terminals, and performs associated authentication when private network applications are queried, searched, and uplink and downlink messages are sent, to form a logical private network for the 5G message system. Compared with the traditional method of restricting private network user access to applications through a blacklist mechanism, the logical private network of the 5G message system established by the present invention can conveniently control access rights and scope and is more versatile.

[0117] Further, in one embodiment, the association authentication between the terminal and the private network application during the private network application association query in step S2 may specifically include: Figure 2 The method flow shown:

[0118] S200, performing logical private network identification mapping according to the mapping relationship between the terminal number segment and the logical private network, determining the logical private network to which the terminal belongs, and identifying the terminal according to the logical private network to determine the terminal private network identifier;

[0119] S201, performing association authentication according to the terminal private network identifier and the application private network identifier to verify whether the terminal private network identifier and the application private network identifier are consistent;

[0120] Among them, the mapping relationship between the terminal number segment and the logical private network is the mapping relationship between the terminal and the logical private network obtained after the terminal is divided into logical private networks based on the terminal number segment.

[0121] Optionally, the subsequent related processes in the present invention involve the MaaP platform (or 5GMC) performing association query authentication between the private network application pool and the private network user terminal to determine whether the terminal private network identifier and the application private network identifier are consistent. The MaaP platform (or 5GMC) can perform association query authentication based on the terminal number segment or the terminal's contract information.

[0122] The process of identifying and associating private network users based on user number segment division on the MaaP platform and 5GMC is basically similar. The following is an example of the terminal identification and associating authentication process based on terminal number segment division on the MaaP platform:

[0123] The network operator divides the logical private network based on the terminal number segment, assigns the terminal number segment to the corresponding private network, and obtains the mapping relationship between the terminal and the logical private network.

[0124] The MaaP platform performs logical private network identification mapping based on the code information (terminal code number) carried by the user terminal and the number segment to which it belongs, and determines the logical private network to which the terminal belongs based on the mapping relationship between the terminal number segment and the logical private network, and identifies the terminal to obtain the terminal private network identification.

[0125] The MaaP platform performs association authentication based on the received application private network identifier of the private network application and the terminal private network identifier of the user terminal, and verifies whether the application private network identifier of the private network application and the terminal private network identifier of the user terminal are consistent.

[0126] For example, association authentication can be performed based on the received application private network identifier of the Chatbot and the terminal private network identifier of the user terminal to verify whether the application private network identifier of the Chatbot and the terminal private network identifier of the user terminal are consistent.

[0127] The method for establishing a logical private network of a 5G message system provided by the present invention determines the terminal private network identifier based on the terminal number segment, so as to perform association authentication on the terminal and the private network application when the private network application is queried, so that a closed loop of the terminal and the private network application is formed when the private network application is queried, and a logical private network of the 5G message system is established. Compared with the traditional restriction of private network user access to application permissions through a blacklist mechanism, the logical private network of the 5G message system established by the present invention can effectively control access permissions based on the association authentication results of the terminal and the private network application when the private network application is queried.

[0128] Further, in one embodiment, in step S2, the terminal and the private network application are associated and authenticated during the private network application association query, which may specifically include: Figure 3 The method flow shown:

[0129] S202, obtaining the terminal private network identifier according to the contract information of the terminal on the business support platform BOSS;

[0130] S203, when the terminal initiates a call, querying a private network application pool carrying an application private network identifier that is consistent with the terminal private network identifier according to the received terminal private network identifier;

[0131] S204: When a private network application initiates a call, query a terminal that carries a terminal private network identifier that is consistent with the application private network identifier.

[0132] Optionally, the user identification and association authentication process based on the terminal's contract information can be performed on the MaaP platform or on the 5GMC, which are described in examples below.

[0133] Optionally, the MaaP platform identifies and associates the authentication process of the terminal based on the contract information of the terminal. The contract information (including private network information, etc.) of the terminal on the BOSS is synchronized to the MaaP platform for one or several 5G message private networks signed by the user terminal on the BOSS, so that the MaaP platform obtains the terminal private network identifier of the user terminal. Specifically, a connection can be established directly between the BOSS and the MaaP platform, or the BOSS can synchronize or feedback the contract information of the terminal to the MaaP platform through the 5GMC, or the MaaP platform can query the 5GMC for the contract information of the terminal.

[0134] If the user terminal initiates a call, the 5GMC identifies the user terminal's private network and carries the user's terminal private network identifier when routing uplink messages to the MaaP platform; if a private network application initiates a call, the MaaP platform identifies the private network of the private network application.

[0135] The MaaP platform performs association authentication based on the application private network identifier of the received private network application and the terminal private network identifier of the user. Considering that if an association query is performed on the full mapping of the terminal's contract information and the private network application, for example, whether the terminal private network identifier in the terminal's contract information is consistent with the private network information of a certain private network application (including the application private network identifier), the query workload will be very large. In order to reduce the workload of the association query, it is proposed to control the scope of the association query, and control the scope of the association query within the scope of the corresponding private network by using a certain (or several) private network information (terminal private network identifier and application private network identifier) ​​that is known to be carried.

[0136] For example, if a private network application carrying a certain (or multiple) application private network identifier sends a message to a certain user terminal, the MaaP platform can only associate and query the user carrying the application private network identifier. If no message is found, it is considered inconsistent. Similarly, if a private network user carrying a certain (or multiple) application private network identifier sends a message to a target Chatbot private network application, the MaaP platform can only associate and query the private network application pool carrying the terminal private network identifier. If no message is found, it is considered inconsistent.

[0137] Optionally, 5GMC performs terminal identification and association authentication processes based on the terminal's contract information, and the user terminal signs up for one or several 5G message private networks on BOSS.

[0138] The contract information of the terminal on BOSS (including activation, private network and other information) is synchronized to 5GMC, so that 5GMC obtains the private network identification of the terminal.

[0139] If a private network application initiates a call, the MaaP platform will carry the application private network identifier of the private network application when routing the message to 5GMC; if a user terminal initiates a call, 5GMC will identify the private network of the user terminal.

[0140] 5GMC performs an association authentication query based on the private network identifier of the private network application and the private network identifier of the terminal. The process of association authentication is consistent with the above-mentioned MaaP platform's association authentication method based on the private network identifier of the private network application received and the private network identifier of the user's terminal, so it will not be repeated here.

[0141] The method for establishing a logical private network of a 5G message system provided by the present invention obtains a terminal private network identifier based on the contract information of the terminal, so as to perform association authentication on the terminal and the private network application when the private network application is queried, so that a closed loop of the terminal and the private network application is formed when the private network application is queried, and a logical private network of the 5G message system is established. Compared with the traditional restriction on the access rights of private network users to applications through a blacklist mechanism, the logical private network of the 5G message system established by the present invention can effectively control access rights based on the association authentication results of the terminal and the private network application when the private network application is queried.

[0142] Further, in one embodiment, in step S2, the associated authentication of the terminal and the private network application during the private network application search may specifically include:

[0143] S205. Obtaining private network application directory list information according to the private network application search request received from the terminal;

[0144] S206. According to the terminal private network identifier, search for private network application directory list information that carries an application private network identifier that is consistent with the terminal private network identifier, and feed back the search result to the terminal.

[0145] Optionally, the private network application search process of the private network user terminal mainly involves the identification and judgment of the private network user terminal, which can be based on the terminal number segment division or the terminal contract information. The terminal contract information can be obtained by establishing a connection between the BOSS and MaaP systems or by querying the 5GMC for the user's private network contract information, as described above. The following uses the example of querying the 5GMC for the contract information of the private network user terminal to explain the private network application search process of the private network user terminal. Figure 4 As shown, specifically:

[0146] The private network user sends a private network application search request to the Maap platform to obtain the private network application directory list information; the MaaP platform queries the 5GMC for the contract information of the private network user terminal; the 5GMC synchronizes the contract information of the terminal through the interface with the BOSS to obtain the contract information of the terminal, including the contract information of the 5G private network, and the 5GMC feeds back the query results to the MaaP platform.

[0147] The MaaP platform identifies and judges private network users, for example, based on the terminal's International Mobile Subscriber Identity (IMSI) and International Mobile Equipment Identity (IMEI). Different private networks use different IMSI number segments, or based on the terminal's contract information, identifies the logical private network to which the terminal belongs.

[0148] The MaaP platform searches for the private network application directory list information (including the private network application directory list and private network application directory list details) with the terminal private network identifier fed back by the 5GMC, and feeds back the search results to the private network user terminal;

[0149] If the user is not a private network user, search and feedback will be conducted according to the general network process;

[0150] Verify whether the terminal private network ID is consistent with the application private network ID in the private network application directory list information based on the search results.

[0151] The private network application directory list and the private network application directory list details in the present invention are constructed in the following manner, specifically: Figure 5 This is a schematic diagram of the private network Chatbot activation process provided by the present invention. Figure 5 As shown:

[0152] The private network application is activated on the industry private network BBOSS, and the private network identification is added to the activation parameters of the BBOSS and business management platform interfaces; or BBOSS directly transmits business activation data with the MaaP management module interface, with the private network identification attribute;

[0153] The private network application creates a private network service on the business management platform. The private network attributes can be identified during the creation. The classification and identification of private networks can be uniformly planned and identified by the business department. A private network application can belong to one or more private networks at the same time, or belong to the big network at the same time. The business management platform synchronizes the application private network identification to the MaaP management module through the inter-platform interface (interface between the business management platform and the MaaP management module), and adds the application private network identification information based on the information transmitted by the original inter-platform interface (interface between the business management platform and the MaaP management module), as shown in Table 1:

[0154] Table 1: Parameters for enabling message delivery

[0155]

[0156] The MaaP management module receives data from the business management platform, stores and forwards it, and constructs a business activation information synchronization interface message. The key field of the relationship includes the application private network identifier, as shown in Table 1. The MaaP management module can also construct different private network application directory lists and private network application directory detail lists based on the application private network identifiers of different private network applications. It should be noted that the same private network application carries at least one application private network identifier.

[0157] The MaaP management module synchronizes the service activation information with the private network identification to the MaaP platform through the inter-platform interface (the interface between the MaaP management module and the MaaP platform). The MaaP management module and the MaaP platform can also synchronize the private network application directory information.

[0158] The method for establishing a logical private network in a 5G message system provided by the present invention performs association authentication on the terminal and the private network application when searching for the private network application based on the search request sent by the terminal, establishes a private network application pool and a private network application directory list information in the 5G message system, identifies the 5G private network user, and then associates the 5G private network user with the private network application pool in a closed-loop process, thereby realizing the establishment of a logical private network in the 5G message system.

[0159] Further, in one embodiment, in step S2, the association authentication between the terminal and the private network application when the uplink message is sent may specifically include:

[0160] S207, according to the terminal private network identifier carried in the uplink MOAT message sent by the terminal, perform association authentication between the terminal and the target private network application, and determine whether the terminal private network identifier is consistent with the application private network identifier of the target private network application;

[0161] S208. If the terminal private network identifier is consistent with the application private network identifier of the target private network application, the uplink MOAT process is executed.

[0162] Optionally, the association authentication process can be based on 5GMC or on the MaaP platform. The following takes the user private network message carried by the MaaP platform based on the 5GMC uplink message as an example to illustrate the uplink P2A message service process. Figure 6 As shown, specifically:

[0163] The private network user terminal sends an uplink MOAT message to the target private network application;

[0164] 5GMC queries the private network contract information based on the terminal number segment to obtain the private network contract attributes of the user terminal; 5GMC routes to the MaaP platform to which the private network application belongs according to the private network application number, and the uplink message MOAT carries the terminal private network identifier of the user terminal;

[0165] The MaaP platform performs association authentication between the user terminal and the private network application, and determines whether the terminal private network identifier of the user terminal is consistent with the application private network identifier of the target private network application. If they are inconsistent, a failure receipt is returned to the 5GMC;

[0166] If the terminal private network identifier and the application private network identifier are consistent, the normal uplink MOAT process is performed;

[0167] The 5GMC call record file adds relevant private network identifiers so that the corresponding private network billing strategy can be matched later.

[0168] The method for establishing a logical private network of a 5G message system provided by the present invention, based on the terminal private network identifier carried in the uplink MOAT message sent by the received terminal, associates and authenticates the terminal and the target private network application that communicates with the terminal, so that a closed loop between the terminal and the target private network application is formed when the uplink message is sent, and the logical private network of the 5G message system is established. After the authentication is passed, the normal uplink MOAT process is executed to establish a communication connection between the terminal and the target private network application.

[0169] Further, in one embodiment, in step S1, the association authentication between the terminal and the private network application when the downlink message is sent may specifically include:

[0170] S209, performing association authentication between the target terminal and the private network application according to the application private network identifier carried in the received downlink message sent by the private network application, and determining whether the target terminal and the private network application belong to the same logical private network according to the target terminal private network identifier and the application private network identifier;

[0171] S210: If it is determined that the target terminal and the private network application belong to the same logical private network, execute the downlink message sending process.

[0172] Optionally, the association authentication process can be based on the 5GMC or the MaaP platform. The following takes the 5GMC platform for association authentication as an example to illustrate the downlink A2P message service process. Figure 7 As shown:

[0173] The private network application sends downlink messages to the target terminal through the MaaP platform;

[0174] The MaaP platform routes to the corresponding 5GMC based on the terminal number segment and other information, where the downlink message carries the application private network identifier of the private network application;

[0175] 5GMC performs an associated query and authentication based on the private network identification of the private network application and the IMSI number of the target terminal, and only allows downlink messages to be sent to the target terminal that is consistent with the private network identification of the private network application. 5GMC determines whether the downlink message counterpart user (target terminal) belongs to the same logical private network as the private network application based on the downlink terminal query. If the target terminal and the private network application do not belong to the same logical private network, the message will be rejected.

[0176] If it is determined that they belong to the same logical private network, the MaaP platform obtains the 5G center to which the target user belongs and sends the message to the corresponding 5G message center, following the normal process.

[0177] The 5G message center sends the message to the target terminal, following the normal process.

[0178] The private network identifier can be added to the call record file output by the MaaP platform and sent to the BOSS system so that the corresponding private network strategy can be matched later.

[0179] The method for establishing a logical private network of a 5G message system provided by the present invention, based on the application private network identifier carried in the downlink message sent by the received private network application, associates and authenticates the private network application and the target terminal communicating with the private network application, so that a closed loop between the private network application and the target terminal is formed when the downlink message is sent, and the logical private network of the 5G message system is established. After the authentication is passed, the normal downlink process is executed to establish a communication connection between the private network application and the target terminal.

[0180] Furthermore, in one embodiment, the contract information of the terminal is obtained in the following manner:

[0181] According to the 5G message private network service activation information and private network service contract information of the terminal on BOSS, obtain the contract information of the terminal on BOSS;

[0182] Acquire the contract information of the terminal according to the contract information synchronized by the mesh network;

[0183] The contract information synchronized by the mesh network is obtained after the BOSS synchronizes the contract information of the terminal on the BOSS.

[0184] Optionally, the private network user terminal signing and activating synchronization process is as follows Figure 8 As shown:

[0185] Personal private network user terminals use BOSS to activate 5G message services and sign private network service contracts;

[0186] BOSS synchronizes subscription and contract information through the mesh network, and synchronizes the contract information of the user terminal to the mesh network. In addition to synchronizing the 5G message private network service activation information and private network service contract information of the user terminal to the mesh network, the 5G message private network contract attribute will be added to the synchronization message field to the mesh network;

[0187] The mesh network forwards the synchronization information received from BOSS to 5GMC (including: 5G message private network service activation information of the user terminal, private network service contract information and message field adding 5G message private network contract attribute), and 5GMC obtains the contract information of the terminal according to the received synchronization information;

[0188] 5GMC will send the contract synchronization confirmation back to the mesh network;

[0189] The mesh network forwards the terminal contract information and simultaneously confirms it to BOSS.

[0190] The method for establishing a logical private network of a 5G message system provided by the present invention clarifies the activation and signing process of a user terminal on the BOSS, and forwards the signing information of the terminal to the 5GMC through a synchronization process, so as to obtain the terminal private network identifier based on the subsequent signing information of the terminal, so as to perform association authentication on the terminal and the private network application when the private network application is queried, thereby forming a closed loop between the terminal and the private network application when the private network application is queried, laying the foundation for establishing a logical private network of the 5G message system.

[0191] The present invention also provides a method for obtaining information of a 5G message system, which specifically includes: sending a contract information query request of a terminal to a 5GMC to obtain the contract information of the terminal; or

[0192] According to the synchronization result of the 5GMC on the contract information of the terminal, obtain the contract information of the terminal; or

[0193] Obtain the terminal's contract information based on the terminal's 5G message private network service contract information on BOSS;

[0194] The contract information of the terminal is obtained in the following way:

[0195] 5GMC obtains the contract information of the terminal on BOSS based on the 5G message private network service activation information and private network service contract information of the terminal on BOSS;

[0196] Acquire the contract information of the terminal according to the contract information synchronized by the mesh network;

[0197] The contract information synchronized by the mesh network is obtained after the BOSS synchronizes the contract information of the terminal on the BOSS.

[0198] The information acquisition method of the 5G message system provided by the present invention forwards the contract information of the terminal to the 5GMC through a synchronization process, so as to obtain the terminal private network identifier based on the contract information of the terminal, so as to perform association authentication on the terminal and the private network application when the private network application is queried, so that a closed loop between the terminal and the private network application is formed when the private network application is queried, laying the foundation for establishing the logical private network of the 5G message system.

[0199] Fig. 9 It is a flow chart of the logical private network information processing method of the 5G message system provided by the present invention, such as Fig. 9 As shown, the method includes:

[0200] S3. Send a private network application search request to the server;

[0201] S4. Receive search results returned by the server;

[0202] The search result is obtained by the server after searching the private network application directory list information according to the terminal private network identifier in the private network application search request;

[0203] The private network application directory list information includes the application private network identifier of the private network application that is consistent with the terminal private network identifier.

[0204] Optionally, the private network user terminal server sends a private network application search request, wherein the server may be 5GMC or MaaP. The following is a case where the private network user terminal sends a private network application search request to MaaP and receives the search results of MaaP for illustration:

[0205] The terminal sends a private network application search request to the Maap platform, and the MaaP platform queries the 5GMC for the contract information of the private network user terminal; 5GMC synchronizes the contract information of the terminal through the interface with the BOSS to obtain the contract information of the terminal, including the contract information of the 5G private network, and 5GMC feeds back the query results to the MaaP platform.

[0206] The MaaP platform identifies and judges private network users, for example, based on the terminal's International Mobile Subscriber Identity (IMSI) and International Mobile Equipment Identity (IMEI). Different private networks use different IMSI number segments, or based on the terminal's contract information, identifies the logical private network to which the terminal belongs.

[0207] The MaaP platform searches for the private network application directory list information (including the private network application directory list and private network application directory list details) with the terminal private network identifier fed back by the 5GMC, and feeds back the search results to the private network user terminal;

[0208] If you are not a private network user, search and feedback will be performed according to the large network process.

[0209] The logical private network information processing method of the 5G message system provided by the present invention realizes interaction with the server when searching for private network applications by sending a private network application search request to the server and receiving the search results of the private network application fed back by the server.

[0210] Furthermore, in one embodiment, the logical private network information processing method of the 5G message system provided by the present invention further includes:

[0211] S5. Send the uplink MOAT message to the target private network application through the server;

[0212] Among them, the target private network application is a private network application that is determined to be consistent with the terminal private network identifier in the uplink message based on the association authentication result of the terminal and the private network application by the server when the uplink message is sent.

[0213] Optionally, the private network user terminal sends an uplink MOAT message to a target private network application through a server, wherein the server may be specifically 5GMC or MaaP. The following takes the private network user terminal sending an uplink MOAT message to a target private network application through 5GMC as an example for explanation:

[0214] 5GMC queries the private network subscription information based on the terminal number segment carried in the uplink MOAT message sent by the private network user terminal, and obtains the private network subscription attributes of the user terminal; and routes to the MaaP platform to which the private network application belongs according to the private network application number. The uplink MOAT message carries the terminal private network identifier of the user terminal;

[0215] According to the result of the association authentication between the user terminal and the private network application on the MaaP platform, if it is determined that the terminal private network identifier of the user terminal is consistent with the application private network identifier of the target private network application, the receipt of the successful association authentication is fed back to the 5GMC, and the 5GMC sends the uplink MOAT message to the target private network application based on the receipt;

[0216] If it is determined that the terminal private network identifier of the user terminal is inconsistent with the application private network identifier of the target private network application, a receipt of failed association authentication is returned to 5GMC, and 5GMC refuses to send the uplink MOAT message to the private network application based on the receipt.

[0217] The logical private network information processing method of the 5G message system provided by the present invention performs association authentication on the terminal and the target private network application communicating with the terminal according to the terminal private network identifier carried in the uplink MOAT message sent by the received terminal, and executes the normal uplink MOAT process after the authentication is passed to establish a communication connection between the terminal and the target private network application through the server.

[0218] Furthermore, in one embodiment, the logical private network information processing method of the 5G message system provided by the present invention further includes:

[0219] Send a 5G message private network service activation request to the server;

[0220] Receive the 5G message private network service activation result fed back by the server;

[0221] Among them, the 5G message private network service activation result is obtained in the following way:

[0222] The mesh network sends the 5G message private network service activation request to BOSS;

[0223] BOSS performs terminal authentication based on the received 5G message private network service activation request, processes the 5G message private network service activation request based on the authentication result, and feeds back the 5G message private network service activation result to the mesh network;

[0224] The mesh network feeds back the results of the 5G message private network service activation to the server.

[0225] Optionally, the contract activation of the private network user terminal can be applied for activation through BOSS channels (physical business hall, SMS, 10086 seats, online hall, mobile business hall, etc.), and then BOSS will synchronize the contract subscription relationship to 5GMC; or the user terminal directly sends an activation request to 5GMC to apply for a private network activation, and then 5GMC accepts it and initiates a private network service activation request to BOSS through the mesh network, such as Fig.10 FIG. 1 is a schematic diagram of a private network user activation process provided by the present invention, specifically:

[0226] The terminal can actively send a 5G message private network service activation request to 5GMC, or trigger the selection of a 5G message private network service activation request after receiving a 5G message private network service activation inquiry from 5GMC (for example, receiving a private network list sent by 5GMC);

[0227] 5GMC processes the user terminal's 5G message private network service activation request and sends the service activation request to the mesh network;

[0228] The mesh network forwards the 5G message private network service activation request to BOSS;

[0229] After receiving the 5G message private network service activation request, BOSS performs terminal authentication (when it is determined to be a valid terminal), performs service processing, and feeds back the 5G message private network service activation result to the mesh network;

[0230] The mesh network forwards the 5G message private network service activation feedback to 5GMC;

[0231] 5GMC will feed back the activation results of the 5G message private network service to the terminal.

[0232] The logical private network information processing method of the 5G message system provided by the present invention authenticates the terminal by sending a 5G message private network service activation request according to the terminal, and activates the 5G message private network service for the authenticated terminal, thereby realizing the authority management of the terminal accessing the 5G message system.

[0233] The present invention also provides a 5G message system logic private network establishment system, comprising:

[0234] 5GMC and MaaP, 5GMC and MaaP communication connection;

[0235] 5GMC or MaaP is used to identify the terminal and private network application respectively to obtain the terminal private network identification and the application private network identification; and based on the terminal private network identification and the application private network identification, the terminal and the private network application are associated and authenticated during private network application association query, private network application search, uplink message sending and downlink message sending to establish the logical private network of the 5G message system.

[0236] The logical private network establishment system of the 5G message system provided by the present invention identifies private network applications and terminals, and performs associated authentication when private network applications are queried, searched, and uplink and downlink messages are sent, to form a logical private network of the 5G message system. Compared with the traditional restriction of private network user access to application permissions through a blacklist mechanism, the logical private network of the 5G message system established by the present invention can conveniently control access permissions and scopes and is more versatile.

[0237] Furthermore, in one embodiment, the logical private network establishment system of the 5G message system may further specifically include:

[0238] The mesh network is connected to the 5GMC for synchronizing the terminal's contract information to the 5GMC;

[0239] BOSS, which is connected to the mesh network for synchronizing the contract information of the terminal to the mesh network;

[0240] 5GMC is also used to perform association authentication based on the terminal private network identifier and the application private network identifier to verify whether the terminal private network identifier and the application private network identifier are consistent.

[0241] The logical private network establishment system of the 5G message system provided by the present invention can effectively control access rights based on the associated authentication results of the terminal and the private network application when the private network application is queried.

[0242] Furthermore, in one embodiment, the logical private network establishment system of the 5G message system may further specifically include:

[0243] The MaaP management module is used to synchronize the private network identification information after the private network application is identified to the MaaP platform, and synchronize the application private network identification to the MaaP platform;

[0244] The network operator module is in communication with the MaaP platform and is used to divide the terminal into logical private networks according to the terminal number segment to determine the mapping relationship between the terminal number segment and the logical private network, so that the MaaP platform can determine the logical private network to which the terminal belongs according to the mapping relationship and the terminal number segment, and identify the terminal according to the logical private network to determine the terminal private network identifier;

[0245] The MaaP platform is used to perform association authentication based on the terminal private network identifier and the application private network identifier to verify whether the terminal private network identifier and the application private network identifier are consistent.

[0246] The logical private network establishment system of the 5G message system provided by the present invention determines the terminal private network identifier based on the terminal number segment, so as to perform association authentication on the terminal and the private network application when the private network application is queried, so that a closed loop of the terminal and the private network application is formed when the private network application is queried, and the logical private network of the 5G message system is established. Compared with the traditional restriction of the access rights of private network users to applications through a blacklist mechanism, the logical private network of the 5G message system established by the present invention can effectively control access rights based on the association authentication results of the terminal and the private network application when the private network application is queried.

[0247] Furthermore, in one embodiment, the logical private network establishment system of the 5G message system may further specifically include:

[0248] The MaaP platform is also used to receive a private network application search request sent by the terminal, send a contract information query request of the terminal to the 5GMC, obtain the terminal private network identifier according to the 5GMC feedback result, and search for private network application directory list information carrying an application private network identifier consistent with the terminal private network identifier according to the private network application search request received from the terminal, and feed back the search result to the terminal;

[0249] 5GMC is also used to query the contract information of the terminal according to the contract information query request of the terminal sent by the MaaP platform, and feed back the acquired contract information of the terminal to the MaaP platform.

[0250] The logical private network establishment system of the 5G message system provided by the present invention performs association authentication on the terminal and the private network application when searching for the private network application based on the search request sent by the terminal, establishes a private network application pool and a private network application directory list information in the 5G message system, identifies the 5G private network users, and then associates the 5G private network users with the private network application pool in a closed-loop process, thereby realizing the establishment of a logical private network in the 5G message system.

[0251] Furthermore, in one embodiment, the logical private network establishment system of the 5G message system may further specifically include:

[0252] The MaaP platform is also used to perform association authentication between the terminal and the target private network application according to the received uplink MOAT message carrying the terminal private network identifier, determine whether the terminal private network identifier is consistent with the application private network identifier of the target private network application, and if it is determined that the target terminal and the private network application belong to the same logical private network, send the authentication to the 5GMC through a receipt;

[0253] 5GMC is also used to receive the uplink MOAT message sent by the terminal, query the terminal's contract information based on the terminal number segment to obtain the terminal's private network identifier, add the terminal's private network identifier to the uplink MOAT message and send it to the MaaP platform, and execute the uplink MOAT process through the receipt based on authentication.

[0254] The logical private network establishment system of the 5G message system provided by the present invention, based on the terminal private network identifier carried in the uplink MOAT message sent by the received terminal, associates and authenticates the terminal and the target private network application that communicates with the terminal, so that a closed loop between the terminal and the target private network application is formed when the uplink message is sent, and the logical private network of the 5G message system is established. After the authentication is passed, the normal uplink MOAT process is executed to establish a communication connection between the terminal and the target private network application.

[0255] Furthermore, in one embodiment, the logical private network establishment system of the 5G message system may further specifically include:

[0256] The MaaP platform is also used to receive downlink messages sent by private network applications and carry application private network identifiers, and route the downlink messages to the 5GMC;

[0257] 5GMC is also used to determine whether the target terminal and the private network application belong to the same logical private network based on the application private network identifier and the terminal private network identifier carried in the received downlink message. If it is determined that the target terminal and the private network application belong to the same logical private network, the downlink message sending process is executed.

[0258] The logical private network establishment system of the 5G message system provided by the present invention, based on the application private network identifier carried in the downlink message sent by the received private network application, associates and authenticates the private network application and the target terminal communicating with the private network application, so that a closed loop between the private network application and the target terminal is formed when the downlink message is sent, and the logical private network of the 5G message system is established. After the authentication is passed, the normal downlink process is executed to establish a communication connection between the private network application and the target terminal.

[0259] The following is a description of the logical private network establishment device for the 5G message system provided by the present invention. The logical private network establishment device for the 5G message system described below and the logical private network establishment method for the 5G message system described above can be referenced to each other.

[0260] Fig.11 It is a structural diagram of a logical private network establishment device of a 5G message system provided by the present invention, such as Fig.11 As shown, it includes: an acquisition module 1110 and an associated authentication module 1120;

[0261] The acquisition module 1110 is used to identify the terminal and the private network application respectively to obtain the private network identification of the terminal and the private network identification of the private network application;

[0262] The association authentication module 1120 is used to perform association authentication on the terminal and the private network application based on the terminal private network identifier and the application private network identifier during private network application association query, private network application search, uplink message sending and downlink message sending to establish a logical private network of the 5G message system.

[0263] The device for establishing a logical private network for a 5G message system provided by the present invention identifies private network applications and terminals, and performs associated authentication when private network applications are queried, searched, and uplink and downlink messages are sent, thereby forming a logical private network for the 5G message system. Compared with the traditional method of restricting the access rights of private network users to applications through a blacklist mechanism, the logical private network of the 5G message system established by the present invention can conveniently control the access rights and scope, and is more versatile.

[0264] The following is a description of the logical private network information processing device of the 5G message system provided by the present invention. The logical private network information processing device of the 5G message system described below and the logical private network information processing method of the 5G message system described above can be referenced to each other.

[0265] Fig.12 It is a structural diagram of a logical private network information processing device of a 5G message system provided by the present invention, such as Fig.12 As shown, it includes: a sending module 1210 and a receiving module 1220;

[0266] The sending module 1210 is used to send a private network application search request to the server;

[0267] The receiving module 1220 is used to receive the search results of the server;

[0268] The search result is obtained by the server after searching the private network application directory list information according to the terminal private network identifier in the private network application search request;

[0269] The private network application directory list information includes the application private network identifier of the private network application that is consistent with the terminal private network identifier.

[0270] The logical private network information processing device of the 5G message system provided by the present invention realizes interaction with the server when searching for private network applications by sending a private network application search request to the server and receiving the search results of the private network application fed back by the server.

[0271] Fig.13 It is one of the structural schematic diagrams of the electronic device provided by the present invention, such as Fig.13 As shown, the electronic device may include: a processor 1310, a communication interface 1311, a memory 1312 and a bus 1313, wherein the processor 1310, the communication interface 1311 and the memory 1312 communicate with each other through the bus 1313. The processor 1310 may call the logic instructions in the memory 1312 to execute the following method:

[0272] Identify the terminal and the private network application respectively to obtain the terminal private network identification and the application private network identification;

[0273] Based on the terminal private network identifier and the application private network identifier, the terminal and the private network application are associated and authenticated during private network application association query, private network application search, uplink message sending and downlink message sending to establish a logical private network for the 5G message system.

[0274] Fig.14This is a second structural diagram of the electronic device provided by the present invention, such as Fig.14 As shown, the electronic device may include: a processor 1410, a communication interface 1411, a memory 1412 and a bus 1413, wherein the processor 1410, the communication interface 1411 and the memory 1412 communicate with each other through the bus 1413. The processor 1410 may call the logic instructions in the memory 1412 to execute the following method:

[0275] Send a request for querying the contract information of the terminal to 5GMC to obtain the contract information of the terminal; or

[0276] According to the synchronization result of the 5GMC on the contract information of the terminal, obtain the contract information of the terminal; or

[0277] Obtain the terminal's contract information based on the terminal's 5G message private network service contract information on BOSS;

[0278] The contract information of the terminal is obtained in the following way:

[0279] 5GMC obtains the contract information of the terminal on BOSS based on the 5G message private network service activation information and private network service contract information of the terminal on BOSS;

[0280] Acquire the contract information of the terminal according to the contract information synchronized by the mesh network;

[0281] The contract information synchronized by the mesh network is obtained after the BOSS synchronizes the contract information of the terminal on the BOSS.

[0282] Fig.15 This is the third structural diagram of the electronic device provided by the present invention, such as Fig.15 As shown, the electronic device may include: a processor 1510, a communication interface 1511, a memory 1512 and a bus 1513, wherein the processor 1510, the communication interface 1511 and the memory 1512 communicate with each other through the bus 1513. The processor 1510 may call the logic instructions in the memory 1512 to execute the following method:

[0283] Send a private network application search request to the server;

[0284] Receive search results returned by the server;

[0285] The search result is obtained by the server after searching the private network application directory list information according to the terminal private network identifier in the private network application search request;

[0286] The private network application directory list information includes the application private network identifier of the private network application that is consistent with the terminal private network identifier.

[0287] In addition, the logic instructions in the above-mentioned memory can be implemented in the form of software functional units and can be stored in a computer-readable storage medium when sold or used as an independent product. In this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for enabling a computer power screen (which can be a personal computer, a server, or a network power screen, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, etc., various media that can store program codes.

[0288] Furthermore, the present invention discloses a computer program product, which includes a computer program stored on a non-transitory computer-readable storage medium, and the computer program includes program instructions. When the program instructions are executed by a computer, the computer can execute the method for establishing a logical private network of a 5G message system provided by the above-mentioned method embodiments, for example, including:

[0289] Identify the terminal and the private network application respectively to obtain the terminal private network identification and the application private network identification;

[0290] Based on the terminal private network identifier and the application private network identifier, the terminal and the private network application are associated and authenticated during private network application association query, private network application search, uplink message sending and downlink message sending to establish a logical private network for the 5G message system.

[0291] Furthermore, the present invention discloses a computer program product, the computer program product comprising a computer program stored on a non-transitory computer-readable storage medium, the computer program comprising program instructions, when the program instructions are executed by a computer, the computer can execute the information acquisition method of the 5G message system provided by the above-mentioned method embodiments, for example, including:

[0292] Send a request for querying the contract information of the terminal to 5GMC to obtain the contract information of the terminal; or

[0293] According to the synchronization result of the 5GMC on the contract information of the terminal, obtain the contract information of the terminal; or

[0294] Obtain the terminal's contract information based on the terminal's 5G message private network service contract information on BOSS;

[0295] The contract information of the terminal is obtained in the following way:

[0296] 5GMC obtains the contract information of the terminal on BOSS based on the 5G message private network service activation information and private network service contract information of the terminal on BOSS;

[0297] Acquire the contract information of the terminal according to the contract information synchronized by the mesh network;

[0298] The contract information synchronized by the mesh network is obtained after the BOSS synchronizes the contract information of the terminal on the BOSS.

[0299] Furthermore, the present invention discloses a computer program product, which includes a computer program stored on a non-transitory computer-readable storage medium, and the computer program includes program instructions. When the program instructions are executed by a computer, the computer can execute the logical private network information processing method of the 5G message system provided by the above-mentioned method embodiments, for example, including:

[0300] Send a private network application search request to the server;

[0301] Receive search results returned by the server;

[0302] The search result is obtained by the server after searching the private network application directory list information according to the terminal private network identifier in the private network application search request;

[0303] The private network application directory list information includes the application private network identifier of the private network application that is consistent with the terminal private network identifier.

[0304] On the other hand, the present invention also provides a non-transitory computer-readable storage medium having a computer program stored thereon, which is implemented when the computer program is executed by the processor to execute the method for establishing a logical private network of the 5G message system provided in the above embodiments, for example, including:

[0305] Identify the terminal and the private network application respectively to obtain the terminal private network identification and the application private network identification;

[0306] Based on the terminal private network identifier and the application private network identifier, the terminal and the private network application are associated and authenticated during private network application association query, private network application search, uplink message sending and downlink message sending to establish a logical private network for the 5G message system.

[0307] On the other hand, the present invention also provides a non-transitory computer-readable storage medium having a computer program stored thereon, which is implemented when the computer program is executed by a processor to execute the information acquisition method of the 5G message system provided in the above embodiments, for example, including:

[0308] Send a request for querying the contract information of the terminal to 5GMC to obtain the contract information of the terminal; or

[0309] According to the synchronization result of the 5GMC on the contract information of the terminal, obtain the contract information of the terminal; or

[0310] Obtain the terminal's contract information based on the terminal's 5G message private network service contract information on BOSS;

[0311] The contract information of the terminal is obtained in the following way:

[0312] 5GMC obtains the contract information of the terminal on BOSS based on the 5G message private network service activation information and private network service contract information of the terminal on BOSS;

[0313] Acquire the contract information of the terminal according to the contract information synchronized by the mesh network;

[0314] The contract information synchronized by the mesh network is obtained after the BOSS synchronizes the contract information of the terminal on the BOSS.

[0315] On the other hand, the present invention also provides a non-transitory computer-readable storage medium having a computer program stored thereon, which is implemented when the computer program is executed by the processor to execute the logical private network information processing method of the 5G message system provided in the above embodiments, for example, including:

[0316] Send a private network application search request to the server;

[0317] Receive search results returned by the server;

[0318] The search result is obtained by the server after searching the private network application directory list information according to the terminal private network identifier in the private network application search request;

[0319] The private network application directory list information includes the application private network identifier of the private network application that is consistent with the terminal private network identifier.

[0320] The device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Ordinary technicians in this field can understand and implement it without paying creative labor.

[0321] Through the description of the above implementation methods, those skilled in the art can clearly understand that each implementation method can be implemented by means of software plus a necessary general hardware platform, and of course, by hardware. With this understanding, the above technical solution can essentially or in other words be embodied in the form of a software product that contributes to the prior art. The computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, a magnetic disk, an optical disk, etc., and includes several instructions for enabling a computer power screen (which can be a personal computer, a server, or a network power screen, etc.) to execute the methods described in each embodiment or some parts of the embodiments.

[0322] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A method for establishing a logical private network of a 5G message system, characterized in that: include: Identify the terminal and the private network application respectively to obtain the terminal private network identification and the application private network identification; Based on the terminal private network identifier and the application private network identifier, the terminal and the private network application are associated and authenticated during private network application association query, private network application search, uplink message sending, and downlink message sending to establish a logical private network of the 5G message system; Among them, the terminal private network identifier is obtained by identifying the user terminal based on the number segment of the user terminal, or based on the contract information of the user terminal in the business support system; the application private network identifier is obtained by identifying the private network application based on the category of the application.

2. The method for establishing a logical private network of a 5G message system according to claim 1, characterized in that: The performing association authentication on the terminal and the private network application during the private network application association query includes: Performing logical private network identification mapping according to the mapping relationship between the terminal number segment and the logical private network, determining the logical private network to which the terminal belongs, and identifying the terminal according to the logical private network to determine the terminal private network identifier; Performing association authentication according to the terminal private network identifier and the application private network identifier to verify whether the terminal private network identifier and the application private network identifier are consistent; Among them, the mapping relationship between the terminal number segment and the logical private network is the mapping relationship between the terminal and the logical private network obtained after the terminal is divided into logical private networks based on the terminal number segment.

3. The method for establishing a logical private network of a 5G message system according to claim 1, characterized in that: The performing association authentication on the terminal and the private network application during the private network application association query includes: Obtaining the private network identifier of the terminal according to the contract information of the terminal on the business support system BOSS; In the case where the terminal initiates a call, querying a private network application pool carrying an application private network identifier that is consistent with the terminal private network identifier according to the received terminal private network identifier; In the case where the private network application initiates a call, a terminal carrying a terminal private network identifier that is consistent with the application private network identifier is queried.

4. The method for establishing a logical private network of a 5G message system according to claim 1, characterized in that: The associating and authenticating the terminal and the private network application when searching for the private network application includes: Obtaining information about a directory list of private network applications according to a private network application search request received from a terminal; According to the terminal private network identifier, the private network application directory list information carrying the application private network identifier consistent with the terminal private network identifier is searched, and the search result is fed back to the terminal.

5. The method for establishing a logical private network of a 5G message system according to claim 1, characterized in that: The associating and authenticating the terminal and the private network application when sending an uplink message includes: According to the terminal private network identifier carried in the received uplink MOAT message sent by the terminal, the association authentication between the terminal and the target private network application is performed to determine whether the terminal private network identifier is consistent with the application private network identifier of the target private network application; If the terminal private network identifier is consistent with the application private network identifier of the target private network application, the uplink MOAT process is executed.

6. The method for establishing a logical private network of a 5G message system according to claim 1, characterized in that: The associating and authenticating the terminal and the private network application when sending a downlink message includes: According to the application private network identifier carried in the received downlink message sent by the private network application, the association authentication between the target terminal and the private network application is performed, and according to the target terminal private network identifier and the application private network identifier, it is determined whether the target terminal and the private network application belong to the same logical private network; If it is determined that the target terminal and the private network application belong to the same logical private network, the downlink message sending process is executed.

7. A method for obtaining information in a 5G message system, characterized in that: include: Send a contract information query request of the terminal to 5GMC to obtain the contract information of the terminal; or Acquire the contract information of the terminal according to the synchronization result of the contract information of the terminal by 5GMC; or According to the 5G message private network service contract information of the terminal on BOSS, the contract information of the terminal is obtained; The contract information of the terminal is obtained in the following manner: The 5GMC obtains the contract information of the terminal on the BOSS according to the 5G message private network service activation information and private network service contract information of the terminal on the BOSS; Acquiring the contract information of the terminal according to the contract information synchronized by the mesh network; The contract information synchronized by the mesh network is obtained after the BOSS synchronizes the contract information of the terminal on the BOSS; The 5G message private network is a logical private network established using the logical private network establishment method of the 5G message system as described in any one of claims 1 to 6.

8. A method for processing logical private network information of a 5G message system, characterized in that: The logical private network is a logical private network established by the logical private network establishment method of the 5G message system according to any one of claims 1 to 6, including: Send a private network application search request to the server; Receiving search results returned by the server; The search result is obtained by the server searching the private network application directory list information according to the terminal private network identifier in the private network application search request; The private network application directory list information includes the application private network identifier of the private network application that is consistent with the terminal private network identifier.

9. The method for processing logical private network information of the 5G message system according to claim 8, characterized in that: Also includes: Sending the uplink MOAT message to the target private network application through the server; Among them, the target private network application is a private network application that is determined to be consistent with the terminal private network identifier in the uplink message based on the association authentication result of the terminal and the private network application by the server when the uplink message is sent.

10. The method for processing logical private network information of the 5G message system according to claim 8, characterized in that: Also includes: Sending a 5G message private network service activation request to the server; Receive the 5G message private network service activation result fed back by the server; The 5G message private network service activation result is obtained in the following way: The mesh network sends the 5G message private network service activation request to the BOSS; The BOSS performs terminal authentication according to the received 5G message private network service activation request, performs service processing on the 5G message private network service activation request according to the authentication result, and feeds back the 5G message private network service activation result to the mesh network; The mesh network feeds back the activation result of the 5G message private network service to the server.

11. A logical private network establishment device for a 5G message system, characterized in that: include: Acquisition module and associated authentication module; The acquisition module is used to identify the terminal and the private network application respectively to obtain the private network identification of the terminal and the private network identification of the private network application; The association authentication module is used to associate and authenticate the terminal and the private network application based on the terminal private network identifier and the application private network identifier during private network application association query, private network application search, uplink message sending, and downlink message sending to establish a logical private network of the 5G message system; Among them, the terminal private network identifier is obtained by identifying the user terminal based on the number segment of the user terminal, or based on the contract information of the user terminal in the business support system; the application private network identifier is obtained by identifying the private network application based on the category of the application.

12. A logical private network information processing device for a 5G message system, characterized in that: The logical private network is a logical private network established by the logical private network establishment method of the 5G message system as claimed in any one of claims 1 to 6, including: a sending module and a receiving module; The sending module is used to send a private network application search request to the server; The receiving module is used to receive the search results of the server; The search result is obtained by the server searching the private network application directory list information according to the terminal private network identifier in the private network application search request; The private network application directory list information includes the application private network identifier of the private network application that is consistent with the terminal private network identifier.

13. A logical private network establishment system for a 5G messaging system, characterized in that: comprising a 5GMC and a MaaP, wherein the 5GMC is communicatively connected with the MaaP; The 5GMC or the MaaP is used to identify the terminal and the private network application respectively to obtain the terminal private network identification and the application private network identification; and based on the terminal private network identification and the application private network identification, the terminal and the private network application are associated and authenticated during private network application association query, private network application search, uplink message sending and downlink message sending to establish a logical private network of the 5G message system; Among them, the terminal private network identifier is obtained by identifying the user terminal based on the number segment of the user terminal, or based on the contract information of the user terminal in the business support system; the application private network identifier is obtained by identifying the private network application based on the category of the application.

14. The logical private network establishment system of the 5G message system according to claim 13, characterized in that: Also includes: A mesh network, in communication connection with the 5GMC, for synchronizing the subscription information of the terminal to the 5GMC; BOSS, which is in communication connection with the mesh network and is used to synchronize the contract information of the terminal to the mesh network; The 5GMC is also used to perform association authentication based on the terminal private network identifier and the application private network identifier to verify whether the terminal private network identifier and the application private network identifier are consistent.

15. The logical private network establishment system of the 5G message system according to claim 13, characterized in that: Also includes: A MaaP management module, used to synchronize the private network identification information after the private network application is identified to the MaaP platform, and synchronize the application private network identification to the MaaP platform; a network operator module, which is in communication connection with the MaaP platform, and is used to divide the terminal into logical private networks according to the terminal number segment to determine the mapping relationship between the terminal number segment and the logical private network, so that the MaaP platform can determine the logical private network to which the terminal belongs according to the mapping relationship and the terminal number segment, and identify the terminal according to the logical private network to determine the terminal private network identifier; The MaaP platform is used to perform association authentication according to the terminal private network identifier and the application private network identifier to verify whether the terminal private network identifier and the application private network identifier are consistent.

16. The logical private network establishment system of the 5G message system according to claim 13, characterized in that: Also includes: The MaaP platform is further configured to receive a private network application search request sent by a terminal, send a contract information query request of the terminal to the 5GMC, obtain the private network identifier of the terminal according to the feedback result of the 5GMC, and search for the private network application directory list information carrying an application private network identifier consistent with the terminal private network identifier according to the received private network application search request sent by the terminal, and feed back the search result to the terminal; The 5GMC is also used to query the contract information of the terminal according to the contract information query request of the terminal sent by the MaaP platform, and feed back the acquired contract information of the terminal to the MaaP platform.

17. The logical private network establishment system of the 5G message system according to claim 13, characterized in that: Also includes: The MaaP platform is further used to perform association authentication between the terminal and the target private network application according to the received uplink MOAT message carrying the terminal private network identifier, determine whether the terminal private network identifier is consistent with the application private network identifier of the target private network application, and if it is determined that the target terminal and the private network application belong to the same logical private network, send the authentication to the 5GMC through a receipt; The 5GMC is also used to receive an uplink MOAT message sent by the terminal, query the contract information of the terminal based on the terminal number segment to obtain the terminal private network identifier, add the terminal private network identifier to the uplink MOAT message and send it to the MaaP platform, and execute the uplink MOAT process through a receipt based on the authentication.

18. The logical private network establishment system of the 5G message system according to claim 13, characterized in that: Also includes: The MaaP platform is further configured to receive a downlink message carrying the application private network identifier sent by the private network application, and route the downlink message to the 5GMC; The 5GMC is also used to determine whether the target terminal and the private network application belong to the same logical private network based on the application private network identifier and the terminal private network identifier carried in the received downlink message. If it is determined that the target terminal and the private network application belong to the same logical private network, the downlink message sending process is executed.

19. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein: When the processor executes the computer program, it implements the steps of the method for establishing a logical private network of the 5G message system as described in any one of claims 1 to 6, or implements the steps of the method for obtaining information of the 5G message system as described in claim 7, or implements the steps of the method for processing information of the logical private network of the 5G message system as described in any one of claims 8 to 10.

20. A non-transitory computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by the processor, it implements the steps of the method for establishing a logical private network of the 5G message system as described in any one of claims 1 to 6, or implements the steps of the method for obtaining information of the 5G message system as described in claim 7, or implements the steps of the method for processing information of the logical private network of the 5G message system as described in any one of claims 8 to 10.

Citation Information

Patent Citations

  • Method, system and device for controlling short message service

    CN102780980A

  • Hotspot sharing method, device and system

    CN109151825A