A counter resetting method and device based on user equipment parameter update service

Abstract

The present application discloses a counter reset method based on a user equipment parameter update service, which is used to solve the problem that the UDM cannot send the UE parameters or roaming information to be updated to the UE when the counter wraps around because there is no counter reset method in the existing standards. The method includes: receiving a first service message sent by a unified data management UDM, executing a first service; monitoring a first counter value during the execution of the first service; sending an early warning message to the UDM when it is determined that the counter value is greater than a preset count threshold; receiving a first counter reset message sent by the UDM; in response to the counter reset message, sending a counter reset request to the user equipment UE corresponding to the first service through the authentication management function AMF unit; receiving a reset success message sent by the UDM, confirming that the UE has completed the reset of the second counter value according to the reset success message, and resetting the first counter value.

Description

Technical Field

[0001] The present application relates to the field of wireless communication technology, and in particular to a counter resetting method and device based on a user equipment parameter update service. Background Art

[0002] In 5G new radio wireless communications, the Home Public Land Mobile Network (HPLMN) supports the service of UE Parameters Update (UPU) for User Equipment (UE) and the Steering of Roaming (SoR) service.

[0003] UPU service can update the device parameters in the UE. During the UPU service, Unified Data Management (UDM) can update the UE parameters via Network Attached Storage (NAS) signaling (e.g., Down Link NAS Transport (DL NAS Transport)). SoR service guides the roaming UE to roam to the preferred network indicated by the HPLMN. During the SoR service, the HPLMN updates the list of "operator-controlled PLMN selectors with access technology" in the UE via NAS signaling.

[0004] In the UPU service process, in order to reduce the occurrence of replay attacks, the UPU service and counter (CounterUPU) are closely associated with the SoR service and counter (CounterSoR). CounterUPU is used as the freshness input for the derivation of some security tokens (such as UPU-MAC-IAUSF, UPU-XMAC-IUE and UPU-MAC-IUE) in the UPU process; CounterSoR is used as the freshness input for the derivation of related security tokens (SoR-MAC-IAUSF, SoR-XMAC-IUE and SoR-MAC-IUE) in the SoR process.

[0005] However, when CounterUPU / CounterSoR reaches the maximum value of 65535 and wraparound is about to occur, the UPU / SoR protection service will be forcibly suspended. In this case, UDM cannot send UE parameters or roaming information to be updated to the UE until CounterUPU / CounterSoR is updated.

[0006] Currently, the 3rd Generation Partnership Project (3GPP) does not provide an update method for CounterUPU or CounterSoR, nor does it provide a method for resetting the counter. Summary of the invention

[0007] An embodiment of the present application provides a counter resetting method based on a user equipment parameter update service, which is used to solve the problem that the UDM cannot send the UE parameters or roaming information to be updated to the UE when the counter wraps around, because the existing 3GPP standard does not have an update method for CounterUPU or CounterSoR, nor does it provide a method for resetting the counter.

[0008] An embodiment of the present application also provides a related device for resetting a counter based on a user equipment parameter update service, to solve the problem that the UDM cannot send UE parameters or roaming information to be updated to the UE when the counter wraps around, because the existing 3GPP standard does not include an update method for CounterUPU or CounterSoR, nor does it provide a method for resetting the counter.

[0009] An embodiment of the present application also provides a computer-readable storage medium to solve the problem that the UDM cannot send the UE parameters or roaming information to be updated to the UE when the counter wraps around, because the existing 3GPP standard does not provide an update method for CounterUPU or CounterSoR, nor does it provide a method for resetting the counter.

[0010] The present application embodiment adopts the following technical solutions:

[0011] A counter reset method based on a user equipment parameter update service, comprising: an authentication service function AUSF receives a first service message sent by a unified data management (UDM), and executes a first service in response to the first service message; the AUSF monitors a first counter value during the execution of the first service, wherein the first counter is a counter corresponding to the AUSF; when it is determined that the counter value is greater than a preset counting threshold, an early warning message is sent to the UDM; the AUSF receives a first counter reset message sent by the UDM, wherein the first counter reset message carries an ACK identifier corresponding to the first service; the AUSF responds to the counter reset message and sends a counter reset request to a user equipment (UE) corresponding to the first service through an authentication management function (AMF) unit, so that the UE responds to the counter reset request and resets a second counter value of the UE; the AUSF receives a reset success message sent by the UDM, confirms that the UE has completed the reset of the second counter value according to the reset success message, and resets the first counter value.

[0012] A network component for implementing an authentication service function AUSF, comprising: one or more processors, wherein the one or more processors are configured to perform operations including the following items: receiving a first service message sent by a unified data management (UDM), and executing a first service in response to the first service message; monitoring a first counter value during the execution of the first service, wherein the first counter is a counter corresponding to the AUSF; when it is determined that the counter value is greater than a preset counting threshold, sending an early warning message to the UDM; receiving a first counter reset message sent by the UDM, wherein the first counter reset message carries an acknowledgment message ACK identifier corresponding to the first service; in response to the first counter reset message, sending a counter reset request to a user equipment (UE) corresponding to the first service through an authentication management function (AMF) unit, so that the UE resets a second counter value of the UE in response to the counter reset request; receiving a reset success message sent by the UDM, confirming that the UE has completed the reset of the second counter value according to the reset success message, and resetting the first counter value.

[0013] A network component implementing a unified data management (UDM) function comprises: one or more processors, wherein the one or more processors are configured to perform operations including the following items: sending a first service message to a network component implementing an AUSF function; receiving an early warning message sent by the AUSF, and in response to the early warning message, sending a first counter reset message to the AUSF, wherein the first counter reset message carries an acknowledgment message ACK identifier corresponding to the first service; receiving a response message sent by the AUSF, carrying a first security token and an identifier of the first counter; according to the response message, by calling a user data update notification Nudm_SDM_Notification service, sending a counter reset request to a user equipment UE corresponding to the UPU service through an authentication management function AMF unit; receiving a user data message Nudm_SDM_Info request sent by the AMF unit; and after the security verification of the Nudm_SDM_Info request is passed, sending a reset success message to the AUSF.

[0014] A user equipment UE comprises: a transceiver; one or more memories, wherein the one or more memories store computer program codes executable by a processor; one or more processors, wherein the one or more processors are configured to perform operations including the following items: receiving a counter reset request sent by an authentication management function AMF unit, wherein the counter reset request carries a counter reset indication, the first security token and the first counter; performing security authentication on the counter reset request; when the security authentication for the counter reset request passes, resetting the second counter value corresponding to the UE; when the security authentication for the counter reset request fails, discarding the counter reset request.

[0015] A computer-readable storage medium, wherein the computer-readable storage medium stores one or more programs, which, when executed by an electronic device including multiple application programs, enable the electronic device to perform the following operations: receive a first service U message sent by a unified data management (UDM), and execute a first service in response to the first service message; the AUSF monitors a first counter value during the execution of the first service, wherein the first counter is a counter corresponding to the AUSF; when it is determined that the counter value is greater than a preset count threshold, an early warning message is sent to the UDM; the AUSF receives a first counter reset message sent by the UDM, wherein the first counter reset message carries an ACK identifier corresponding to the first service; the AUSF responds to the first counter reset message and, through an authentication management function (AMF) unit, sends a counter reset request to a user equipment (UE) corresponding to the first service, so that the UE responds to the counter reset request and resets a second counter value of the UE; the AUSF receives a reset success message sent by the UDM, confirms that the UE has completed the reset of the second counter value according to the reset success message, and resets the first counter value.

[0016] At least one of the above technical solutions adopted in the embodiments of the present application can achieve the following beneficial effects:

[0017] A counter reset method provided in an embodiment of the present application is adopted. The authentication service function AUSF can monitor and calculate the first counter value during the execution of the corresponding first service (for example, UPU service or SoR service) in response to the received first service message (for example, UPU message or SoR message), and when it is judged that the counter value is greater than the preset counting threshold, that is, before the counter is about to wrap around, it actively sends a warning message to the UDM to inform the UDM that the user equipment parameter update service will fail to continue. Then the UDM will send a counter reset message to the AUSF. The AUSF generates a response message in response to the first counter reset message and sends the response message to the UDM, so that the UDM sends a counter reset request to the user equipment UE corresponding to the first service through the authentication management function AMF unit. After the user equipment UE passes the authentication of the counter reset request, it resets the second counter value and sends a reset success message to the UDM after the reset is completed. The UDM forwards the reset success message to the AUSF, and then the AUSF can complete the synchronous reset of the first counter according to the message. By adopting the counter resetting method provided in the embodiment of the present application, the counter value can be actively reset when the counter reaches the maximum value but before it wraps around, thereby solving the problem in the existing solution that the UDM cannot send the UE parameters or roaming information to be updated to the UE when the counter wraps around. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0019] Figure 1 A schematic diagram of a specific structure of a 5G system architecture;

[0020] Figure 2 A specific flow chart of a counter resetting method based on a user equipment parameter update service provided in an embodiment of the present application;

[0021] Figure 3 A specific interactive logic diagram of a counter resetting method based on a user equipment parameter update service provided in an embodiment of the present application;

[0022] Figure 4 A detailed flowchart of the standardized UPU service process;

[0023] Figure 5 A specific process diagram for the standardized SoR service process;

[0024] Figure 6A specific structural diagram of a counter resetting electronic device based on a user equipment parameter update service provided in an embodiment of the present application. DETAILED DESCRIPTION

[0025] In order to make the purpose, technical solution and advantages of the present application clearer, the technical solution of the present application will be clearly and completely described below in combination with the specific embodiments of the present application and the corresponding drawings. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present application.

[0026] In order to facilitate the understanding of the counter resetting method based on the user equipment parameter update service provided in the embodiment of the present application, the following first introduces the 5G system structure in conjunction with the accompanying drawings, such as Figure 1 The figure shows the architecture diagram of the 5G system, which is composed of several network functions (NF). Among them, the 5G wireless subsystem mainly includes the new generation of wireless base stations (New Radio, NR), and the 5G core network subsystem mainly includes the unified data management function (UDM), access management function (AMF), session management function (SMF), user plane function (UPF), policy control function (PCF), security anchor function (SEAF), authentication server function (AUSF) and authentication credential storage and processing function (ARPF), etc., among which:

[0027] The unified data management function UDM is the permanent storage location for user contract data and is located in the home network where the user has signed a contract. The authentication credential storage and processing function ARPF stores long-term security credentials used for authentication and uses long-term security credentials as input to perform cryptographic operations. UDM / ARPF is located in a secure environment of the operator or third-party system and will not be exposed to unauthorized physical access. ARPF and AUSF interact with each other.

[0028] AMF (Access Management Function) / SEAF (Security Anchor Function): Access management function / security anchor function manages the user's need to access the network, and is responsible for the terminal-to-network non-access stratum (NAS layer) signaling management, user mobility management and other functions. AMF has a security anchor function (SEAF), interacts with AUSF and UE, receives the intermediate key established for the UE authentication process, and for USIM-based authentication methods, AMF obtains security-related data from AUSF.

[0029] AUSF (Authentication Server Function): An authentication function that interacts with the ARPF and terminates requests from the SEAF. The AUSF is located in a secure environment of the operator or third-party system and is not exposed to unauthorized physical access.

[0030] SMF (Session Management Function): Session management function, manages the user's PDU (Packet Data Unit) session, QoS (Quality of Service) flow, formulates packet detection and forwarding rules for UPF, etc.;

[0031] UPF (User Plane Function): User plane function, responsible for routing and forwarding of IP data and non-IP data, usage reporting, etc.

[0032] PCF (Policy Control Function): Policy control function, responsible for providing policy rules at various levels for AMF and SMF.

[0033] DN (Data Network): data network, such as operator services, network access, and third-party services.

[0034] AF (Application Function) application function manages AF sessions.

[0035] In order to solve the problem that the UDM cannot send the UE parameters or roaming information to be updated to the UE when the counter wraps around because there is no update method for CounterUPU or CounterSoR in the existing 3GPP standard and no method for resetting the counter, an embodiment of the present application provides a counter resetting method based on a user equipment parameter update service. The technical solutions provided by the embodiments of the present application are described in detail below in conjunction with the accompanying drawings.

[0036] Specifically, the specific implementation flow chart of the counter reset method based on the user equipment parameter update service provided in this application is as follows: Figure 2 As shown, it mainly includes the following steps:

[0037] Step 11, the authentication service function AUSF receives a first service message sent by the unified data management UDM, and executes a first service in response to the first service message;

[0038] In an embodiment of the present application, the first service message may refer to a user equipment parameter update (UPU) message. In this case, the first service corresponding to the first service message may refer to a UPU service. In addition, the first service message may also refer to a roaming oriented service (SoR) message. In this case, the first service corresponding to the first service message may refer to a SoR service.

[0039] Specifically, when UDM decides to perform UPU service, UDM may send a Nausf_UPUProctection message to AUSF, wherein the Nausf_UPU Proctection message may include a user permanent identifier (SUPI) and UPU data. In one embodiment, the UPU data delivered by UDM to the UE may include: one or more UE parameters, an indication of "UE confirmation required" or an indication of "re-registration required".

[0040] Optionally, the Nausf_UPUProctection message may further include an Acknowledge character indication (ACK indication) to indicate that the UDM requests the terminal device to confirm that the security check of the received UPU data is successful.

[0041] In another embodiment, when the SoR service needs to be performed, the UDM sends a Nausf_SoRProtection message to the HPLMN AUSF. The Nausf_SoRProtection message includes the SUPI and the bootstrap information list. Optionally, if the HPLMN determines that the UE needs to confirm that the security check of the received bootstrap information list is successful, the Nausf_SoRProtection message needs to include an ACK Indication.

[0042] In one embodiment, the complete counter resetting method based on the user equipment parameter update service is as follows: Figure 3 As shown, the following will be combined Figure 3, the counter resetting method provided in the embodiment of the present application is introduced in detail.

[0043] Step 12, the AUSF monitors a value of a first counter during the execution of the first service, wherein the first counter is a counter corresponding to the AUSF;

[0044] After receiving the Nausf_UPUProctection message sent by UDM, AUSF will send a Nausf_UPU Proctection Response message to UDM. The Nausf_UPU Proctection Response message may include: security token UPU-MAC-IAUSF and timer identifier CounterUPU. Specifically, UPU-MAC-IAUSF is the message authentication code (MAC) generated after integrity protection of UPU data, and CounterUPU is the counter used in the process of integrity protection of UPU data.

[0045] Optionally, when the Nausf_UPUProctection message also includes ACK indication, the Nausf_UPUProctection Response message may also include UPU-XMAC-IUE. UPU-MAC-IAUSF is calculated based on UPU data, CounterUPU and KAUSF. UPU-XMAC-IUE is calculated based on ACK indication, CounterUPU and KAUSF.

[0046] In another embodiment, when AUSF receives the Nausf_SoRProtection message sent by UDM, AUSF will send a Nausf_SoRProtection Response message to UDM. The Nausf_SoRProtectionResponse message includes: SoR-MAC-IAUSF and CounterSoR. Optionally, when the Nausf_SoRProtection message includes ACK Indication, the Nausf_SoRProtection Response message also includes SoR-XMAC-IUE. SoR-MAC-IAUSF is calculated based on the boot information list, CounterSoR and KAUSF. SoR-XMAC-IUE is calculated based on the SOR success confirmation message, CounterSoR and KAUSF.

[0047] At the same time, AUSF will try to increase the value of CounterUPU / CounterSoR and calculate that CounterUPU / CounterSoR will reach the maximum value in the next one or several UPU / SoR services.

[0048] Step 13, when it is determined by executing step 12 that the counter value is greater than a preset counting threshold, sending an early warning message to the UDM;

[0049] AUSF provides UDM with an early warning that "CounterUPU / CounterSoR will reach the maximum value". UDM will realize that the current UPU / SoR service can continue, but the next UPU / SoR service will fail.

[0050] Specifically, when AUSF should send an indication that "CounterUPU / CounterSoR will reach the maximum value", that is, what is the critical value of the counter, depends on the specific service, such as:

[0051] -The critical value of CounterUPU should be less than or equal to 65533, because resetting the UPU counter still requires calling a UPU process;

[0052] -The critical value of CounterSoR should be less than or equal to 65534.

[0053] After sending the warning message to UDM, AUSF will continue to complete the UPU service process or SoR service process according to the standard.

[0054] Among them, the standardized UPU service process is as follows Figure 4 As shown, it mainly includes:

[0055] Sub-step 1301, UDM sends Nudm_SDM_Notification message to AMF. The Nudm_SDM_Notification message includes: UPU data, UPU-MAC-IAUSF and CounterUPU;

[0056] Sub-step 1302, AMF sends a DL NAS Transport message to the UE. The DL NAS Transport message includes UPU data, CounterUPU and UPU-MAC-IAUSF;

[0057] In sub-step 1303, the UE calculates the UPU-MAC-IAUSF according to the received UPU data and CounterUPU in the same manner as AUSF, and verifies whether the calculated UPU-MAC-IAUSF is the same as the received UPU-MAC-IAUSF. When the calculated UPU-MAC-IAUSF is the same as the received UPU-MAC-IAUSF, the verification is successful. In the case of successful verification, if the UPU data contains parameters protected by a secure packet, the ME in the UE sends the parameters protected by the secure packet to the USIM card in the UE. In the case of successful verification, if the UPU data does not contain parameters protected by a secure packet, the ME in the UE updates its stored parameters according to the parameters in the UPU data. When the UDM has requested the UE to confirm that the security check of the received UPU data is successful, after the UE has successfully verified the UPU-MAC-IAUSF and updated the parameters according to the UPU data, the UE should execute sub-step 1304;

[0058] In sub-step 1304, the UE sends a UL NAS Transport message to the AMF. The UL NAS Transport message includes a transparent container, and the transparent container includes UPU-MAC-IUE. It should be noted that UPU-MAC-IUE is calculated based on UPU Acknowledgement, CounterUPU and KAUSF;

[0059] Sub-step 1305, AMF sends a Nudm_SDM_Info Request message to UDM. The Nudm_SDM_Info Request message includes a transparent container, and the transparent container includes UPU-MAC-IUE;

[0060] In sub-step 1306, UDM compares the received UPU-MAC-IUE and the stored UPU-XMAC-IUE to see if they are consistent. If they are inconsistent, it indicates that there is a security risk in the network. The UPU service is completed. It should be noted here that the above process belongs to the standard process recorded in Section 6.15 of 3GPPTS 33.501, and the specific implementation details are not repeated here.

[0061] In another embodiment, the standardized SoR service process is as follows Figure 5 As shown, it mainly includes:

[0062] Sub-step 13-a, UDM sends a Nudm_SDM_Notification message to AMF. The Nudm_SDM_Notification message includes: a boot information list, SoR-MAC-IAUSF, and CounterSoR;

[0063] In sub-step 13-b, the AMF sends a DL NAS Transport message to the UE, wherein the DL NAS Transport message includes: a boot information list, a SOR header, a SoR-MAC-IAUSF, and a CounterSoR.

[0064] In sub-step 13-c, the UE calculates the SOR-MAC-IAUSF according to the received bootstrap information list, SOR header and CounterSoR in the same manner as AUSF, and verifies whether the calculated SoR-MAC-IAUSF is the same as the received SoR-MAC-IAUSF. If the calculated SoR-MAC-IAUSF is the same as the received SoR-MAC-IAUSF, it means that the received SoR-MAC-IAUSF has passed the verification. When the UDM has requested the UE to confirm that the security check of the received bootstrap information list is successful, S207 should be executed after the UE has successfully verified the SoR-MAC-IAUSF.

[0065] In sub-step 13-d, the UE sends a UL NAS Transport message to the AMF, wherein the UL NAS Transport message includes a transparent container, and the transparent container includes SOR-MAC-IUE.

[0066] In sub-step 13-e, the AMF sends a Nudm_SDM_Info Request message to the UDM, wherein the Nudm_SDM_Info Request message includes a transparent container, and the transparent container includes the SOR-MAC-IUE.

[0067] In sub-step 13-f, UDM compares the received SOR-MAC-IUE and the stored SOR-XMAC-IUE to see if they are consistent. If they are inconsistent, it means that there is a security risk in the network. The SOR service is completed by executing the above steps. It should be noted here that the above SOR service process belongs to the standard process recorded in Section 6.15 of 3GPP TS33.501, and the specific implementation details are not repeated here.

[0068] Step 14, AUSF receives a first counter reset message sent by the UDM, wherein the first counter reset message carries an ACK identifier of a confirmation message corresponding to the UPU service;

[0069] Specifically, when UDM receives the warning message sent by executing step 13, UDM will send Nausf_CounterUPURefresh_Request / Nausf_CounterSoRRefresh_Request (i.e., the first counter reset message mentioned above) to AUSF, and send SUPI, CounterUPU / CounterSoR refresh indication (i.e., CounterUPURefresh Ind / CounterSoR Refresh Ind) and a flag indicating that the UPU service requires an ACK response.

[0070] Step 15, the AUSF sends a counter reset request to the user equipment UE corresponding to the UPU service through the authentication management function AMF unit in response to the first counter reset message obtained by executing step 14, so that the UE responds to the counter reset request and resets the second counter value of the UE;

[0071] In one embodiment, after receiving the counter reset message sent by the UDM, the AUSF generates a response message based on the reset message and sends the response message to the UDM. Specifically, in an embodiment of the present application, the specific implementation method of step 15 may include: the AUSF generates a response message in response to the first counter reset message; the AUSF sends the response message to the UDM, so that the UDM sends a counter reset request to the user equipment UE corresponding to the UPU service through the authentication management function AMF unit.

[0072] In this embodiment of the present application, AUSF can generate a first security token through a first counter, and generate a response message according to the identifier of the first security token and the first counter.

[0073] Specifically, after receiving the counter reset message sent by UDM, AUSF will first use CounterUPU to generate UPU-MAC-IAUSF and UPU-XMAC-IUE according to the provisions in 3GPP TS33.501A.19 and A.20. Then, AUSF can send Nausf_CounterUPURefresh_response / Nausf_CounterSoR Refresh_response messages to UDM. These response messages consist of UPU-MAC-IAUSF, CounterUPU and UPU-XMAC-IUE.

[0074] After receiving the response information, the counter may be reset by the following steps, which may include:

[0075] Sub-step 1501, after receiving the response message sent by AUSF, UDM can call the user data update notification Nudm_SDM_Notification service, and send a counter reset request to the user equipment UE corresponding to the UPU service through the AMF unit, wherein the Nudm_SDM_Notification service includes a counter reset indication, the first security token and an identifier of the first counter.

[0076] In one implementation, the Nudm_SDM_Notification service may include data that needs to be transmitted to the UE, for example, specifically including:

[0077] 1. CounterUPU / CounterSoR refresh request indication (CounterUPU Refresh Ind / CounterSoRRefresh Ind); 2. UPU-MAC-IAUSF generated by the unrefreshed CounterUPU; 3. CounterUPU.

[0078] Sub-step 1502, AMF sends a DL NAS TRANSPORT message to the UE, which may specifically include: 1. CounterUPU / CounterSoR refresh request indication (CounterUPU Refresh Ind / CounterSoR Refresh Ind); 2. UPU-MAC-IAUSF; 3. CounterUPU.

[0079] In sub-step 1503, the UE verifies whether the refresh indication received from the AMF is provided by a legitimate UDM based on the mechanism defined in TS 33.501;

[0080] If the security verification passes, the UE generates UPU-MAC-IUE using the received CounterUPU / CounterSoR, and then resets CounterUPU / CounterSoR to 0x00 0x00.

[0081] If the security verification fails, the UE discards CounterUPU / CounterSoR.

[0082] Sub-step 1504, the UE sends a UL NAS TRANSPORT message including UE confirmation information to the AMF;

[0083] Sub-step 1505, when the AMF receives the UL NAS TRANSPORT message carrying UE confirmation information from the UE, the AMF sends a Nudm_SDM_Info request to the UDM;

[0084] Sub-step 1506, when UDM receives the Nudm_SDM_Info request message sent by AMF, UDM shall compare the received UPU-MAC-IUE with the UPU-XMAC-IUE carried in the response message sent by AUSF after UDM executes sub-step 1501. If the UPU-MAC-IUE verification passes, continue to execute sub-step 1507;

[0085] Sub-step 1507, UDM sends a reset success message to AUSF;

[0086] In one implementation, the reset success message may be a Nausf_CounterUPURefresh_Complete / Nausf_CounterSoR Refresh_Complete message, which carries a SUPI and a CounterUPURefresh Complete Ind / CounterSoR Refresh Complete Ind indication.

[0087] Step 16, AUSF receives the reset success message sent by the UDM, confirms that the UE completes the resetting of the second counter value according to the reset success message, and resets the first counter value.

[0088] When AUSF receives the Nausf_CounterUPURefresh_Complete / CounterSoRRefresh Complete Ind indication from UDM and confirms that the UE has successfully reset CounterUPU / CounterSoR, AUSF resets CounterUPU / CounterSoR to 0x000x01, thus completing the counter reset in the user equipment parameter update service process.

[0089] A counter reset method provided in an embodiment of the present application is adopted. The authentication service function AUSF can monitor and calculate the first counter value during the execution of the corresponding first service (for example, UPU service or SoR service) in response to the received first service message (for example, UPU message or SoR message), and when it is judged that the counter value is greater than the preset counting threshold, that is, before the counter is about to wrap around, it actively sends a warning message to the UDM to inform the UDM that the user equipment parameter update service will fail to continue. Then the UDM will send a counter reset message to the AUSF. The AUSF generates a response message in response to the first counter reset message and sends the response message to the UDM, so that the UDM sends a counter reset request to the user equipment UE corresponding to the first service through the authentication management function AMF unit. After the user equipment UE passes the authentication of the counter reset request, it resets the second counter value and sends a reset success message to the UDM after the reset is completed. The UDM forwards the reset success message to the AUSF, and then the AUSF can complete the synchronous reset of the first counter according to the message. By adopting the counter resetting method provided in the embodiment of the present application, the counter value can be actively reset when the counter reaches the maximum value but before it wraps around, thereby solving the problem in the existing solution that the UDM cannot send the UE parameters or roaming information to be updated to the UE when the counter wraps around.

[0090] In one implementation, the embodiment of the present application further provides a network component for implementing an authentication service function AUSF, to solve the problem that the UDM cannot send UE parameters or roaming information to be updated to the UE when the counter wraps around because there is no update method for CounterUPU or CounterSoR in the existing 3GPP standard, and no method for resetting the counter is provided. The network component for implementing the authentication service function AUSF includes: one or more processors, wherein the one or more processors are configured to perform operations including the following items:

[0091] Receive a first service message sent by a unified data management (UDM), and execute a first service in response to the first service message; monitor a first counter value during the execution of the first service, wherein the first counter is a counter corresponding to the AUSF; when it is determined that the counter value is greater than a preset counting threshold, send an early warning message to the UDM; receive a first counter reset message sent by the UDM, wherein the first counter reset message carries an acknowledgment message ACK identifier corresponding to the first service; in response to the first counter reset message, send a counter reset request to a user equipment (UE) corresponding to the first service through an authentication management function (AMF) unit, so that the UE resets the second counter value of the UE in response to the counter reset request; receive a reset success message sent by the UDM, confirm that the UE has completed the resetting of the second counter value according to the reset success message, and reset the first counter value.

[0092] Among them, the network component that implements the authentication service function AUSF is specifically used to: generate a response message in response to the first counter reset message; send the response message to the UDM, so that the UDM sends a counter reset request to the user equipment UE corresponding to the UPU service through the authentication management function AMF unit.

[0093] In one embodiment, the network component implementing the authentication service function AUSF is specifically configured to: generate a first security token through a first counter; and generate a response message according to the first security token and an identifier of the first counter.

[0094] A network component for implementing an authentication service function AUSF provided in an embodiment of the present application is adopted. The authentication service function AUSF can monitor and calculate the value of a first counter during the execution of a corresponding first service (e.g., UPU service or SoR service) in response to a received first service message (e.g., UPU message or SoR message), and when it is determined that the counter value is greater than a preset counting threshold, that is, before the counter is about to wrap around, it actively sends a warning message to the UDM to inform the UDM that the user equipment parameter update service will fail to continue. The UDM will send a counter reset message to the AUSF. The AUSF generates a response message in response to the first counter reset message and sends the response message to the UDM, so that the UDM sends a counter reset request to the user equipment UE corresponding to the first service through the authentication management function AMF unit. After the user equipment UE passes the authentication of the counter reset request, the second counter value is reset, and after the reset is completed, the reset success message is sent to the UDM. The UDM forwards the reset success message to the AUSF, and then the AUSF can complete the synchronous reset of the first counter according to the message. By adopting the counter resetting method provided in the embodiment of the present application, the counter value can be actively reset when the counter reaches the maximum value but before it wraps around, thereby solving the problem in the existing solution that the UDM cannot send the UE parameters or roaming information to be updated to the UE when the counter wraps around.

[0095] In addition, in one implementation, the embodiment of the present application further provides a network component implementing a unified data management (UDM) function, to solve the problem that the UDM cannot send UE parameters or roaming information to be updated to the UE when the counter wraps around because there is no update method for CounterUPU or CounterSoR in the existing 3GPP standard, and no method for resetting the counter is provided. The network component implementing the unified data management (UDM) function includes: one or more processors, wherein the one or more processors are configured to perform operations including the following items:

[0096] Send a first service message to a network component that implements the AUSF function; receive an early warning message sent by the AUSF, and in response to the early warning message, send a first counter reset message to the AUSF, wherein the first counter reset message carries an acknowledgment message ACK identifier corresponding to the first service; receive a response message sent by the AUSF, carrying a first security token and an identifier of the first counter; according to the response message, by calling the user data update notification Nudm_SDM_Notification service, send a counter reset request to the user equipment UE corresponding to the first service through the authentication management function AMF unit; receive a user data message Nudm_SDM_Info request sent by the AMF unit; after the security verification of the Nudm_SDM_Info request is passed, send a reset success message to the AUSF.

[0097] In another embodiment, the embodiment of the present application further provides a user equipment UE, which is used to solve the problem that the UDM cannot send the UE parameters or roaming information to be updated to the UE when the counter wraps around because there is no update method for CounterUPU or CounterSoR in the existing 3GPP standard, and no method for resetting the counter is provided. The user equipment UE includes: a transceiver; one or more memories, the one or more memories storing computer program codes that can be executed by a processor; one or more processors, the one or more processors being configured to perform operations including the following items:

[0098] Receive a counter reset request sent by an authentication management function AMF unit, wherein the counter reset request carries a counter reset indication, the first security token and the first counter; perform security authentication on the counter reset request; when the security authentication for the counter reset request passes, reset the second counter value corresponding to the UE; when the security authentication for the counter reset request fails, discard the counter reset request.

[0099] Using a user equipment UE provided in an embodiment of the present application, the authentication service function AUSF can monitor and calculate the first counter value during the execution of the corresponding first service (for example, UPU service or SoR service) in response to a received first service message (for example, a UPU message or a SoR message), and when it is judged that the counter value is greater than a preset counting threshold, that is, before the counter is about to wrap around, it actively sends a warning message to the UDM to inform the UDM that the user equipment parameter update service will fail to continue. Then the UDM will send a counter reset message to the AUSF. The AUSF generates a response message in response to the first counter reset message and sends the response message to the UDM, so that the UDM sends a counter reset request to the user equipment UE corresponding to the first service through the authentication management function AMF unit. After the user equipment UE passes the authentication of the counter reset request, it resets the second counter value and sends a reset success message to the UDM after the reset is completed. The UDM forwards the reset success message to the AUSF, and then the AUSF can complete the synchronous reset of the first counter according to the message. By adopting the counter resetting method provided in the embodiment of the present application, the counter value can be actively reset when the counter reaches the maximum value but before it wraps around, thereby solving the problem in the existing solution that the UDM cannot send the UE parameters or roaming information to be updated to the UE when the counter wraps around.

[0100] Figure 6 This is a schematic diagram of the structure of an electronic device according to an embodiment of the present application. Figure 6 At the hardware level, the electronic device includes a processor, and optionally also includes an internal bus, a network interface, and a memory. The memory may include a memory, such as a high-speed random access memory (RAM), and may also include a non-volatile memory (non-volatile memory), such as at least one disk storage. Of course, the electronic device may also include hardware required for other services.

[0101] The processor, network interface and memory can be interconnected through an internal bus, which can be an ISA (Industry Standard Architecture) bus, a PCI (Peripheral Component Interconnect) bus or an EISA (Extended Industry Standard Architecture) bus. The bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 6Only one bidirectional arrow is used in the diagram, but this does not mean that there is only one bus or only one type of bus.

[0102] The memory is used to store the program. Specifically, the program may include a program code, and the program code includes a computer operation instruction. The memory may include a memory and a non-volatile memory, and provides instructions and data to the processor.

[0103] The processor reads the corresponding computer program from the non-volatile memory into the memory and then runs it, forming a counter reset device at the logical level. The processor executes the program stored in the memory and is specifically used to perform the following operations:

[0104] A first service message is received from a unified data management (UDM), and in response to the first service message, a first service is executed; the AUSF monitors a first counter value during the execution of the first service, wherein the first counter is a counter corresponding to the AUSF; when it is determined that the counter value is greater than a preset count threshold, an early warning message is sent to the UDM; the AUSF receives a first counter reset message sent by the UDM, wherein the first counter reset message carries an acknowledgment message ACK identifier corresponding to the first service; the AUSF responds to the first counter reset message by sending a counter reset request to a user equipment (UE) corresponding to the first service through an authentication management function (AMF) unit, so that the UE responds to the counter reset request and resets the second counter value of the UE; the AUSF receives a reset success message sent by the UDM, confirms that the UE has completed the reset of the second counter value according to the reset success message, and resets the first counter value.

[0105] The above application Figure 6The method for executing the counter reset electronic device disclosed in the illustrated embodiment can be applied to a processor or implemented by a processor. The processor may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by an integrated logic circuit of hardware in the processor or an instruction in the form of software. The above processor can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The methods, steps and logic block diagrams disclosed in the embodiments of the present application can be implemented or executed. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor, etc. The steps of the method disclosed in the embodiments of the present application can be directly embodied as a hardware decoding processor for execution, or a combination of hardware and software modules in the decoding processor for execution. The software module can be located in a storage medium mature in the art such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, or an electrically erasable programmable memory, a register, etc. The storage medium is located in the memory, and the processor reads the information in the memory and completes the steps of the above method in combination with its hardware.

[0106] Of course, in addition to software implementation methods, the electronic device of the present application does not exclude other implementation methods, such as logic devices or a combination of software and hardware, etc. That is to say, the execution subject of the following processing flow is not limited to each logic unit, but can also be hardware or logic devices.

[0107] The embodiment of the present application also provides a computer-readable storage medium, which stores one or more programs, wherein the one or more programs include instructions, which, when executed by a portable electronic device including a plurality of application programs, enable the portable electronic device to execute Figure 1 The method of the embodiment shown is specifically used to perform the following operations:

[0108] The authentication service function AUSF receives a first service message sent by the unified data management UDM, and executes a first service in response to the first service message; the AUSF monitors the value of a first counter in the process of executing the first service, wherein the first counter is the counter corresponding to the AUSF; when it is determined that the counter value is greater than a preset counting threshold, an early warning message is sent to the UDM; the AUSF receives a first counter reset message sent by the UDM, wherein the first counter reset message carries an acknowledgment message ACK identifier corresponding to the first service; the AUSF responds to the first counter reset message and sends a counter reset request to the user equipment UE corresponding to the first service through the authentication management function AMF unit, so that the UE responds to the counter reset request and resets the second counter value of the UE; the AUSF receives a reset success message sent by the UDM, confirms that the UE has completed the resetting of the second counter value according to the reset success message, and resets the first counter value.

[0109] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0110] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0111] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1A function specified in one or more boxes.

[0112] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0113] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0114] The memory may include non-permanent storage in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.

[0115] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0116] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0117] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that contain computer-usable program code.

[0118] The above is only an embodiment of the present application and is not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included in the scope of the claims of the present application.

Claims

1. A counter resetting method based on a user equipment parameter update service, characterized in that: include: The authentication service function AUSF receives a first service message sent by the unified data management UDM, and executes a first service in response to the first service message; The AUSF monitors a value of a first counter during execution of the first service, wherein the first counter is a counter corresponding to the AUSF; When it is determined that the counter value is greater than a preset count threshold, a warning message is sent to the UDM; The AUSF receives a first counter reset message sent by the UDM, wherein the first counter reset message carries an ACK identifier of a confirmation message corresponding to the UPU service; The AUSF sends a counter reset request to a user equipment UE corresponding to the first service through an authentication management function AMF unit in response to the first counter reset message, so that the UE resets a second counter value of the UE in response to the counter reset request; The AUSF receives the reset success message sent by the UDM, confirms that the UE completes the resetting of the second counter value according to the reset success message, and resets the first counter value.

2. The method according to claim 1, characterized in that The AUSF sends a counter reset request to a user equipment UE corresponding to the first service through an authentication management function AMF unit in response to the counter reset message, specifically including: The AUSF generates a response message in response to the first counter reset message; The AUSF sends the response message to the UDM, so that the UDM sends a counter reset request to the user equipment UE corresponding to the first service through the authentication management function AMF unit.

3. The method according to claim 2, characterized in that The AUSF generates a response message in response to the counter reset message, specifically including: The AUSF generates a first security token through a first counter; The AUSF generates a response message according to the first security token and the identifier of the first counter.

4. The method according to claim 2, characterized in that: The AUSF sends the response message to the UDM, so that the UDM sends a counter reset request to the user equipment UE corresponding to the UPU service through the authentication management function AMF unit, specifically including: The UDM sends a counter reset request to the user equipment UE corresponding to the UPU service through the AMF unit by calling the user data update notification Nudm_SDM_Notification service according to the response message, wherein the Nudm_SDM_Notification service includes a counter reset indication, a first security token, and an identifier of the first counter.

5. The method according to claim 4, characterized in that The sending, by the AMF unit, a counter reset request to a user equipment UE corresponding to the UPU service specifically includes: The AMF unit sends a counter reset request carrying a counter reset indication, the first security token, and an identifier of the first counter to the user equipment UE, so that the user equipment UE resets the second counter value after the authentication of the counter reset request is passed.

6. A network component implementing an authentication service function AUSF, comprising: One or more processors configured to perform operations including: receiving a first service message sent by a unified data management (UDM), and executing a first service in response to the first service message; Monitoring a value of a first counter during the execution of the first service, wherein the first counter is a counter corresponding to the AUSF; When it is determined that the counter value is greater than a preset count threshold, a warning message is sent to the UDM; Receive a first counter reset message sent by the UDM, wherein the first counter reset message carries an ACK identifier of a confirmation message corresponding to the first service; In response to the first counter reset message, sending a counter reset request to a user equipment UE corresponding to the UPU service through an authentication management function AMF unit, so that the UE resets a second counter value of the UE in response to the counter reset request; Receive a reset success message sent by the UDM, confirm that the UE completes resetting the second counter value according to the reset success message, and reset the first counter value.

7. The network component according to claim 6, characterized in that The network component implementing the authentication service function AUSF is specifically used for: generating a response message in response to the first counter reset message; The response message is sent to the UDM, so that the UDM sends a counter reset request to the user equipment UE corresponding to the first service through the authentication management function AMF unit.

8. A network component implementing a unified data management (UDM) function, comprising: One or more processors configured to perform operations including: sending a first service message to a network component implementing an AUSF function, so that the AUSF executes a first service in response to the first service message, and monitors a value of a first counter in the process of executing the first service, where the first counter is a counter corresponding to the AUSF, and generates an early warning message when it is determined that the value of the counter is greater than a preset counting threshold; receiving the warning message sent by the AUSF, and sending a first counter reset message to the AUSF in response to the warning message, so that the AUSF generates a response message carrying a first security token and an identifier of the first counter in response to the first counter reset message, wherein the first counter reset message carries an ACK identifier of a confirmation message corresponding to the UPU service; Receiving the response message sent by the AUSF; According to the response message, by calling the user data update notification Nudm_SDM_Notification service, through the authentication management function AMF unit, a counter reset request is sent to the user equipment UE corresponding to the UPU service, so that the UE responds to the counter reset request, resets the second counter value of the UE, and sends a UL NAS TRANSPORT message containing the UE confirmation information to the AMF unit, where the counter reset request carries a counter reset indication, the first security token, and the first counter; Receiving a user data message Nudm_SDM_Info request sent by the AMF unit after receiving the UL NAS TRANSPORT message; After the security verification of the Nudm_SDM_Info request is passed, a reset success message is sent to the AUSF, so that the AUSF confirms that the UE has completed the resetting of the second counter value according to the reset success message, and resets the first counter value.

9. A user equipment UE, comprising: Transceiver; one or more memories storing computer program code executable by the processor; One or more processors configured to perform operations including: Receiving a counter reset request sent by the AUSF through the authentication management function AMF unit in response to a first counter reset message, the AUSF receiving a first service message sent by the unified data management UDM before responding to the first counter reset message, executing a first service in response to the first service message, and monitoring a first counter value during the execution of the first service, wherein the first counter is a counter corresponding to the AUSF, and when it is determined that the counter value is greater than a preset count threshold, sending an early warning message to the UDM, and receiving the first counter reset message sent by the UDM, wherein the first counter reset message carries a confirmation message ACK identifier corresponding to the UPU service; wherein the counter reset request carries a counter reset indication, a first security token, and a first counter; Performing security authentication on the counter reset request; When the security authentication for the counter reset request is passed, the second counter value corresponding to the UE is reset, the AUSF receives a reset success message sent by the UDM, confirms that the UE completes the reset of the second counter value according to the reset success message, and resets the first counter value; When the security authentication for the counter reset request fails, the counter reset request is discarded.

10. A computer-readable storage medium storing one or more programs, which, when executed by an electronic device including a plurality of application programs, enable the electronic device to execute the method as claimed in any one of claims 1 to 5.

Images