Network authentication methods, devices, terminal equipment and base stations

Abstract

This application provides a network authentication method, apparatus, terminal device, and base station. The method includes: sending a registration request to the base station; receiving a current authentication request corresponding to the registration request sent by the base station; determining a current authentication response corresponding to the current authentication request; and, when determining that the current authentication request is the latest authentication request corresponding to the registration request, sending a current authentication response to the base station, the current authentication response being used to enable the base station to determine an authentication result. The method also includes receiving a registration request sent by the terminal device; sending at least one authentication request corresponding to the registration request to the terminal device; receiving a current authentication response sent by the terminal device; and, when determining that the current authentication response is obtained based on the latest authentication request corresponding to the registration request, processing the current authentication response according to the latest authentication request to obtain an authentication result, whereby the authentication result is either acceptance of authentication or rejection of authentication. This improves the accuracy of determining 5G network permissions.

Description

Technical Field

[0001] This application relates to the field of communication technology, and in particular to a network authentication method, apparatus, terminal equipment, and base station. Background Technology

[0002] When a user uses a terminal device to use 5G services, the base station will authenticate the terminal device's permission to use 5G services to determine whether the user can use the corresponding 5G services.

[0003] In related technologies, user permissions to use a 5G network via a terminal device can be determined as follows: When a user uses a 5G service with their terminal device, the terminal device sends a registration request to the base station. Upon receiving the registration request, the base station sends an authentication request. The terminal device processes the authentication request, obtains an authentication value, and sends it to the base station. The base station determines the authentication result based on the authentication value. However, if the base station sends another authentication request during processing, and the terminal device sends an authentication value based on the first authentication request instead of the value from the second request, the 5G base station will determine the authentication result as a rejection, leading to lower accuracy in determining 5G network permissions. Summary of the Invention

[0004] This application provides a network authentication method, apparatus, terminal device, and base station to address the problem of low accuracy in determining 5G network permissions.

[0005] In a first aspect, embodiments of this application provide a network authentication method, including:

[0006] Send a registration request to the base station;

[0007] Receive the current authentication request corresponding to the registration request sent by the base station;

[0008] Determine the current authentication response corresponding to the current authentication request;

[0009] When it is determined that the current authentication request is the latest authentication request corresponding to the registration request, the current authentication response is sent to the base station. The current authentication response is used to enable the base station to determine the authentication result, which is to accept authentication or reject authentication.

[0010] In one possible implementation, when it is determined that the current authentication request is the latest authentication request corresponding to the registration request, the current authentication response is sent to the base station, including:

[0011] The latest authentication request is retrieved from the cache, which stores the authentication request corresponding to the latest registration request received from the base station.

[0012] Determine whether the current authentication request is the same as the latest authentication request;

[0013] If so, the current authentication response is sent to the base station;

[0014] If not, the current authentication request is updated to the latest authentication request, and the current authentication response corresponding to the current authentication request is determined. The current authentication response is sent to the base station when the current authentication request is the same as the latest authentication request in the cache.

[0015] In one possible implementation, the current authentication request includes a current parameter identifier, a current first authentication parameter, and a current second authentication parameter, and the latest authentication request includes a latest parameter identifier, a latest first authentication parameter, and a latest second authentication parameter;

[0016] Determining whether the current authentication request is the same as the latest authentication request includes:

[0017] Determine whether the current parameter identifier and the latest parameter identifier are the same;

[0018] If so, then it is determined that the current authentication request is the same as the latest authentication request;

[0019] If not, determine whether the current first authentication parameter and the latest first authentication parameter are the same. If yes, determine that the current authentication request is the same as the latest authentication request. If no, determine that the current authentication request is different from the latest authentication request.

[0020] In one possible implementation, determining the current authentication response corresponding to the current authentication request includes:

[0021] Obtain the current first authentication parameter and the current second authentication parameter from the current authentication request;

[0022] Generate the current authentication value based on the current first authentication parameter and the current second authentication parameter;

[0023] The current authentication response is determined to include the current parameter identifier and the current authentication value.

[0024] In one possible implementation, after receiving the current authentication request corresponding to the authentication request sent by the base station, the method further includes:

[0025] If the historical authentication request corresponding to the authentication request does not exist in the cache, then the current authentication request is stored in the cache.

[0026] If a historical authentication request corresponding to the authentication request exists in the cache, then the historical authentication request is deleted from the cache, and the current authentication request is stored in the cache.

[0027] In one possible implementation, the method further includes:

[0028] Receive the authentication rejection message sent by the base station;

[0029] Based on the authentication rejection message, the first time of receiving the first authentication request and the second time of receiving the second authentication request are determined, wherein the first authentication request and the second authentication request are the two most recent authentication requests received.

[0030] If the time difference between the first receiving time and the second receiving time is less than or equal to a preset duration, then the network status of the terminal device is determined to be abnormal.

[0031] Secondly, embodiments of this application provide a network authentication method, including:

[0032] Receive registration requests sent by terminal devices;

[0033] Send at least one authentication request corresponding to the registration request to the terminal device;

[0034] Receive the current authentication response sent by the terminal device;

[0035] When it is determined that the current authentication response is obtained based on the latest authentication request corresponding to the registration request, the current authentication response is processed according to the latest authentication request to obtain an authentication result, which is either accepting authentication or rejecting authentication.

[0036] In one possible implementation, when it is determined that the current authentication response is obtained based on the latest authentication request corresponding to the registration request, the current authentication response is processed according to the latest authentication request to obtain an authentication result, including:

[0037] The latest authentication request is retrieved from the cache, which is used to store the authentication request corresponding to the last registration request sent to the terminal device;

[0038] Determine whether the current authentication response is obtained based on the latest authentication request corresponding to the registration request;

[0039] If so, process the current authentication response according to the latest authentication request to obtain the authentication result;

[0040] If not, the current authentication response is updated based on the authentication response received from the terminal device until the current authentication response is determined based on the latest authentication request corresponding to the registration request. Then, the current authentication response is processed according to the latest authentication request to obtain the authentication result.

[0041] In one possible implementation, the current authentication response includes a current parameter identifier; the latest authentication request includes a latest parameter identifier;

[0042] Determining whether the current authentication response is determined based on the latest authentication request corresponding to the registration request includes:

[0043] Determine whether the current parameter identifier and the latest parameter identifier are the same;

[0044] If so, then the current authentication response is determined to be obtained based on the latest authentication request corresponding to the registration request;

[0045] If not, then it is determined that the current authentication response was not obtained based on the latest authentication request corresponding to the registration request.

[0046] In one possible implementation, the current authentication response includes the current authentication value, and the latest authentication request includes the latest authentication parameters;

[0047] The current authentication response is processed based on the latest authentication request to obtain the authentication result, including:

[0048] Generate the latest authentication value based on the latest authentication parameters;

[0049] If the current authentication value and the latest authentication value are the same, then the authentication result is determined to be an acceptance authentication.

[0050] If the current authentication value and the latest authentication value are different, then the authentication result is determined to be authentication rejection.

[0051] Thirdly, embodiments of this application provide a network authentication device, the device comprising:

[0052] The sending module is used to send registration requests to the base station;

[0053] The receiving module is used to receive the current authentication request corresponding to the registration request sent by the base station;

[0054] The processing module is used to determine the current authentication response corresponding to the current authentication request;

[0055] The sending module is further configured to send the current authentication response to the base station when it is determined that the current authentication request is the latest authentication request corresponding to the registration request. The current authentication response is used to enable the base station to determine the authentication result, which is to accept authentication or reject authentication.

[0056] In one possible implementation, the sending module is specifically used for:

[0057] The latest authentication request is retrieved from the cache, which stores the authentication request corresponding to the latest registration request received from the base station.

[0058] Determine whether the current authentication request is the same as the latest authentication request;

[0059] If so, the current authentication response is sent to the base station;

[0060] If not, the current authentication request is updated to the latest authentication request, and the current authentication response corresponding to the current authentication request is determined. The current authentication response is sent to the base station when the current authentication request is the same as the latest authentication request in the cache.

[0061] In one possible implementation, the sending module is specifically used for:

[0062] Determine whether the current parameter identifier and the latest parameter identifier are the same;

[0063] If so, then it is determined that the current authentication request is the same as the latest authentication request;

[0064] If not, determine whether the current first authentication parameter and the latest first authentication parameter are the same. If yes, determine that the current authentication request is the same as the latest authentication request. If no, determine that the current authentication request is different from the latest authentication request.

[0065] In one possible implementation, the processing module is specifically used for:

[0066] Obtain the current first authentication parameter and the current second authentication parameter from the current authentication request;

[0067] Generate the current authentication value based on the current first authentication parameter and the current second authentication parameter;

[0068] The current authentication response is determined to include the current parameter identifier and the current authentication value.

[0069] In one possible implementation, the processing module is further configured to:

[0070] If the historical authentication request corresponding to the authentication request does not exist in the cache, then the current authentication request is stored in the cache.

[0071] If a historical authentication request corresponding to the authentication request exists in the cache, then the historical authentication request is deleted from the cache, and the current authentication request is stored in the cache.

[0072] In one possible implementation, the processing module is further configured to:

[0073] Receive the authentication rejection message sent by the base station;

[0074] Based on the authentication rejection message, the first time of receiving the first authentication request and the second time of receiving the second authentication request are determined, wherein the first authentication request and the second authentication request are the two most recent authentication requests received.

[0075] If the time difference between the first receiving time and the second receiving time is less than or equal to a preset duration, then the network status of the terminal device is determined to be abnormal.

[0076] Fourthly, embodiments of this application provide a network authentication device, the device comprising:

[0077] The receiving module is used to receive registration requests sent by the terminal device;

[0078] The sending module is used to send at least one authentication request corresponding to the registration request to the terminal device;

[0079] The receiving module is also used to receive the current authentication response sent by the terminal device;

[0080] The processing module is configured to, when determining that the current authentication response is obtained based on the latest authentication request corresponding to the registration request, process the current authentication response according to the latest authentication request to obtain an authentication result, wherein the authentication result is either accepting authentication or rejecting authentication.

[0081] In one possible implementation, the processing module is specifically used for:

[0082] The latest authentication request is retrieved from the cache, which is used to store the authentication request corresponding to the last registration request sent to the terminal device;

[0083] Determine whether the current authentication response is obtained based on the latest authentication request corresponding to the registration request;

[0084] If so, process the current authentication response according to the latest authentication request to obtain the authentication result;

[0085] If not, the current authentication response is updated based on the authentication response received from the terminal device until the current authentication response is determined based on the latest authentication request corresponding to the registration request. Then, the current authentication response is processed according to the latest authentication request to obtain the authentication result.

[0086] In one possible implementation, the processing module is specifically used for:

[0087] Determine whether the current parameter identifier and the latest parameter identifier are the same;

[0088] If so, then the current authentication response is determined to be obtained based on the latest authentication request corresponding to the registration request;

[0089] If not, then it is determined that the current authentication response was not obtained based on the latest authentication request corresponding to the registration request.

[0090] In one possible implementation, the processing module is specifically used for:

[0091] Generate the latest authentication value based on the latest authentication parameters;

[0092] If the current authentication value and the latest authentication value are the same, then the authentication result is determined to be an acceptance authentication.

[0093] If the current authentication value and the latest authentication value are different, then the authentication result is determined to be authentication rejection.

[0094] Fifthly, this application provides a chip on which a computer program is stored, and when the computer program is executed by the chip, it implements the method described in any of the first aspects.

[0095] In a sixth aspect, this application provides a chip module on which a computer program is stored, and when the computer program is executed by the chip module, it implements the method described in any of the first aspects.

[0096] In a seventh aspect, this application provides a chip on which a computer program is stored, and when the computer program is executed by the chip, it implements the method described in any of the second aspects.

[0097] Eighthly, this application provides a chip module on which a computer program is stored, and when the computer program is executed by the chip module, it implements the method described in any of the second aspects.

[0098] Ninthly, embodiments of this application provide a terminal device, including:

[0099] At least one processor; and

[0100] A memory communicatively connected to the at least one processor; wherein,

[0101] The memory stores instructions executable by the at least one processor, which, when executed by the at least one processor, enables the at least one processor to perform the method described in any of the first aspects.

[0102] In a tenth aspect, embodiments of this application provide a base station, comprising:

[0103] At least one processor; and

[0104] A memory communicatively connected to the at least one processor; wherein,

[0105] The memory stores instructions that can be executed by the at least one processor to enable the at least one processor to perform the method described in any of the second aspects.

[0106] Eleventhly, embodiments of this application provide a non-transitory computer-readable storage medium storing computer instructions, wherein the computer instructions are used to cause the computer to perform the method described in any one of the first aspects.

[0107] In a twelfth aspect, embodiments of this application provide a non-transitory computer-readable storage medium storing computer instructions, wherein the computer instructions are used to cause the computer to perform the method described in any one of the second aspects.

[0108] In a thirteenth aspect, embodiments of this application provide a computer program product, including a computer program that, when executed by a processor, implements the method described in any one of the first aspects.

[0109] In a fourteenth aspect, embodiments of this application provide a computer program product including a computer program that, when executed by a processor, implements the method described in any one of the second aspects.

[0110] The network authentication method, apparatus, terminal device, and base station provided in this application embodiment involve a terminal device, after receiving a current authentication request corresponding to a registration request, determining the current authentication response corresponding to the current authentication request. If the current authentication request is determined to be the latest authentication request corresponding to the registration request, the terminal device sends the current authentication response to the base station. After receiving the current authentication response sent by the terminal device, the base station, if it determines that the current authentication response was obtained based on the latest authentication request corresponding to the registration request, processes the current authentication response according to the latest authentication request to obtain the authentication result. In the above process, after the terminal device determines the current authentication response corresponding to the authentication request, or after the base station receives the current authentication response, it determines whether the current authentication response was obtained based on the latest authentication request. This avoids situations where the current authentication response is not obtained based on the latest authentication request, leading to inaccurate authentication results. This improves the accuracy of determining 5G network permissions. Attached Figure Description

[0111] Figure 1 A schematic diagram illustrating the application scenarios provided in the embodiments of this application;

[0112] Figure 2 A flowchart illustrating a network authentication method provided in an embodiment of this application;

[0113] Figure 3 A flowchart illustrating another network authentication method provided in this application embodiment;

[0114] Figure 4 A flowchart illustrating yet another network authentication method provided in this application embodiment;

[0115] Figure 5 A flowchart illustrating another network authentication method provided in this application embodiment;

[0116] Figure 6 A schematic diagram of the network authentication process provided in this application embodiment;

[0117] Figure 7 This is a schematic diagram of the structure of a network authentication device provided in an embodiment of this application;

[0118] Figure 8 This is a schematic diagram of another network authentication device provided in an embodiment of this application;

[0119] Figure 9 This is a schematic diagram of the structure of the terminal device provided in the embodiments of this application;

[0120] Figure 10 This is a schematic diagram of the structure of a base station provided in an embodiment of this application. Detailed Implementation

[0121] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numbers in different drawings denote the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with this application. Rather, they are merely examples of apparatuses and methods consistent with some aspects of this application as detailed in the appended claims.

[0122] It should be noted that, in this document, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Unless otherwise specified, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes that element.

[0123] To facilitate understanding, the following will be combined with... Figure 1 The application scenarios applicable to the embodiments of this application will be described.

[0124] Figure 1 This is a schematic diagram illustrating an application scenario provided in an embodiment of this application. Please refer to [link / reference]. Figure 1 The system includes terminal device 101 and base station 102. Terminal device 101 can be a mobile phone, tablet, or other device capable of using 5G services. Base station 102 can be a 5G base station. Terminal device 101 can access the 5G network and use 5G services through base station 102. When terminal device 101 accesses the 5G network and uses 5G services, terminal device 101 sends a registration request to base station 102. After receiving the registration request, base station 102 sends an authentication request corresponding to the registration request to terminal device 101. Based on the authentication request, terminal device 101 sends an authentication response to base station 102. Based on the authentication response, base station 102 determines the authentication result and sends it to terminal device 101. Terminal device 101 determines its permission to use 5G services based on the authentication result.

[0125] In related technologies, user authorization to use a 5G network via a terminal device can be determined as follows: After receiving a registration request from the terminal device, the base station sends an authentication request corresponding to the registration request to the terminal device. The terminal device processes the authentication request, obtains an authentication value, and sends the authentication value to the base station. The base station determines the authentication result of the terminal device based on the authentication value. However, if the base station sends another authentication request during the processing of the second authentication request, and the terminal device sends an authentication value based on the first authentication request instead of the authentication value corresponding to the second authentication request, then the 5G base station will determine the authentication result as a rejection of the authentication request, resulting in low accuracy in determining 5G network access permissions.

[0126] In this embodiment, after receiving the current authentication request corresponding to the registration request, the terminal device determines the current authentication response corresponding to the current authentication request. When it determines that the current authentication request is the latest authentication request corresponding to the registration request, it sends the current authentication response to the base station. After receiving the current authentication response sent by the terminal device, the base station, upon determining that the current authentication response was obtained based on the latest authentication request corresponding to the registration request, processes the current authentication response according to the latest authentication request to obtain the authentication result. In the above process, after the terminal device determines the current authentication response corresponding to the authentication request, or after the base station receives the current authentication response, it determines whether the current authentication response was obtained based on the latest authentication request. This avoids situations where the current authentication response is not obtained based on the latest authentication request, leading to inaccurate authentication results. This improves the accuracy of determining 5G network permissions.

[0127] The method described in this application will now be illustrated through specific embodiments. It should be noted that the following embodiments may exist independently or in combination with each other; identical or similar content will not be repeated in different embodiments.

[0128] Figure 2 This is a flowchart illustrating a network authentication method provided in an embodiment of this application. Please refer to [link / reference]. Figure 2 The method may include:

[0129] S201. The terminal device sends a registration request to the base station.

[0130] The registration request is used to indicate whether the terminal device has permission to use 5G services through the 5G network.

[0131] For example, a user uses terminal device A to make a voice call on a 5G network. Before making a voice call, terminal device A can send a registration request 1 to the base station. Registration request 1 indicates whether the terminal device has permission to use the voice call service through the 5G network.

[0132] S202. The terminal device receives the current authentication request corresponding to the registration request sent by the base station.

[0133] The current authentication request includes the current parameter identifier, the current first authentication parameter, and the current second authentication parameter.

[0134] The current parameter identifier can be auth_index, the current first authentication parameter can be a RAND value, and the current second authentication parameter can be an AUTN value.

[0135] For example, based on the authentication request 1 illustrated above, the base station determines the current authentication request corresponding to authentication request 1 as shown in Table 1:

[0136] Table 1

[0137] Current parameter identifier Current first authentication parameter Current second authentication parameter auth_index1 RAND1 AUTN1

[0138] S203. The terminal device determines the current authentication response corresponding to the current authentication request.

[0139] The current authentication response corresponding to the current authentication request can be determined in the following way: obtain the current first authentication parameter and the current second authentication parameter from the current authentication request; generate the current authentication value based on the current first authentication parameter and the current second authentication parameter; determine that the current authentication response includes the current parameter identifier and the current authentication value.

[0140] After receiving the current authentication request, the terminal device caches the request in its cache. The terminal device's Universal Subscriber Identity Module (USIM) card generates a current authentication value based on the current authentication parameters and then generates a current authentication response. The current authentication response includes the current parameter identifier and the current authentication value.

[0141] For example, the current authentication request received by terminal device A can be as shown in Table 1 above. After receiving the current authentication request, terminal device A's USIM card obtains the current first authentication parameter RAND1 and the current second authentication parameter AUTN1 from the current authentication request. Terminal device A's USIM card generates the current authentication value AUTH_RES1 based on the current first authentication parameter RAND1 and the current second authentication parameter AUTN1. Terminal device A's USIM card determines that the current authentication response includes the current parameter identifier auth_index1 and the current authentication value AUTH_RES1.

[0142] S204. When the terminal device determines that the current authentication request is the latest authentication request corresponding to the registration request, it sends the current authentication response to the base station.

[0143] The current authentication response is used to enable the base station to determine the authentication result, which is to accept the authentication or reject the authentication.

[0144] The latest authentication request includes the latest parameter identifier, the latest first authentication parameter, and the latest second authentication parameter.

[0145] After receiving the current authentication request corresponding to the registration request sent by the base station, if the base station sends a new authentication request to the terminal device, the terminal device's buffer will update the previously cached current authentication request to reflect the new authentication request sent by the base station. In other words, the terminal device's buffer stores the last authentication request sent by the base station within a historical time period.

[0146] After determining the current authentication response to the current authentication request, the terminal device first checks whether the latest authentication request cached in its buffer is the current authentication request. If so, it means that the corresponding authentication result can be determined based on the current authentication response, and the terminal device directly sends the current authentication response to the base station. If not, it means that the authentication result determined based on the current authentication response is not the same as the authentication result determined based on the latest authentication request, resulting in a mismatch between the authentication result and the authentication request. In this case, it is necessary to determine the current authentication response corresponding to the latest authentication request, and so on, until the current authentication request matches the latest authentication request in the buffer, before sending the current authentication response to the base station.

[0147] For example, suppose the current authentication request cached in the terminal device's buffer is Authentication Request 1. When the terminal device's USIM card determines the current authentication response based on Authentication Request 1, the base station sends Authentication Request 2 to the terminal device. At this time, the terminal device's buffer updates Authentication Request 1 to the latest Authentication Request 2. After the terminal device's USIM card determines the current authentication response 1 based on Authentication Request 1, it determines that the latest Authentication Request 2 cached in the terminal device's buffer is not Authentication Request 1. Therefore, the terminal device determines the current authentication response 2 based on the latest Authentication Request 2. Since the current authentication response 2 is obtained based on the latest Authentication Request 2, it can send the current authentication response 2 to the base station.

[0148] The network authentication method provided in this application involves a terminal device sending a registration request to a base station. The terminal device receives a current authentication request corresponding to the registration request sent by the base station. The terminal device determines the current authentication response corresponding to the current authentication request. When the terminal device determines that the current authentication request is the latest authentication request corresponding to the current authentication request, it sends the current authentication response to the base station. In the above process, after determining the current authentication response corresponding to the authentication request, the terminal device determines whether the current authentication response is obtained based on the latest authentication request. It then sends the current authentication response obtained based on the latest authentication request to the base station, avoiding situations where the current authentication response is not obtained based on the latest authentication request, leading to inaccurate authentication results. This improves the accuracy of determining 5G network permissions.

[0149] Based on any of the above embodiments, the following, in conjunction with Figure 3 The process of network authentication for base stations is explained.

[0150] Figure 3 This is a flowchart illustrating another network authentication method provided in an embodiment of this application. Please refer to... Figure 3 The method includes:

[0151] S301. The base station receives the registration request sent by the terminal equipment.

[0152] For example, a user uses terminal device A to access the music playback service on a 5G network. Before playing music, terminal device A can send registration request 2 to the base station. The base station receives registration request 2 from terminal device A. Registration request 2 indicates whether the terminal device has permission to use the music playback service through the 5G network.

[0153] S302. The base station sends at least one authentication request corresponding to the registration request to the terminal device.

[0154] After confirming that the base station has received the registration request from the terminal device, the base station determines the authentication request corresponding to the registration request and sends the authentication request to the terminal device. If the base station does not receive the current authentication response from the terminal device within a preset time period, the base station may resend the authentication request to the terminal device. The authentication requests sent by the base station multiple times may be the same or different.

[0155] The value corresponding to the parameter identifier in each authentication request can be one greater than the value corresponding to the parameter identifier in the previous authentication request.

[0156] For example, after the base station receives registration request 2 sent by terminal device A, the specific authentication request corresponding to registration request 2 can be determined as shown in Table 2:

[0157] Table 2

[0158] Current parameter identifier Current first authentication parameter Current second authentication parameter auth_index2 RAND2 AUTN2

[0159] The base station sends the authentication request shown in Table 2 above to the terminal device. If the base station does not receive the current authentication response from the terminal device within a preset time period, the base station may resend the authentication request to the terminal device. The resent authentication request can be detailed in Table 3:

[0160] Table 3

[0161] Current parameter identifier Current first authentication parameter Current second authentication parameter auth_index3 RAND2 AUTN3

[0162] S303, The base station receives the current authentication response sent by the terminal equipment.

[0163] For example, the base station sends the authentication request shown in Table 2 above to terminal device A. Terminal device A determines that the current authentication response corresponding to the authentication request shown in Table 2 is authentication response 2. The base station receives authentication response 2 sent by terminal device A.

[0164] S304. When the base station determines that the current authentication response is obtained based on the latest authentication request corresponding to the registration request, it processes the current authentication response according to the latest authentication request to obtain the authentication result.

[0165] The authentication result is either accepting the authentication or rejecting the authentication.

[0166] When a base station sends an authentication request corresponding to a registration request to a terminal device, it stores the sent authentication request in a buffer. If the base station sends the same authentication request to the terminal device again, its buffer will be updated with the latest authentication request sent by the base station to the terminal device. In other words, the base station's buffer stores the last authentication request sent by the base station within a historical time period.

[0167] For example, after receiving registration request 2 from terminal device A, the base station determines that the authentication request corresponding to registration request 2 can be as shown in Table 2 above. The base station sends the authentication request shown in Table 2 to terminal device A and stores the sent authentication request in the buffer. If the base station sends the authentication request shown in Table 3 to the terminal device again, the base station's buffer will update the authentication request shown in Table 2 to the authentication request shown in Table 3.

[0168] After receiving the current authentication response from the terminal device, the base station first checks the latest authentication request cached in its buffer and determines whether the current authentication response is derived from the latest authentication request corresponding to the registration request. If yes, the corresponding authentication result can be determined based on the current authentication response. If no, the authentication result determined by the current authentication response is not the same as the authentication result determined by the latest authentication request corresponding to the registration request, resulting in a mismatch between the authentication result and the authentication request. In this case, the base station waits for the terminal device to send a new current authentication response until the received current authentication response is derived from the latest authentication request. Then, the base station processes the current authentication response according to the latest authentication request to obtain the authentication result.

[0169] The network authentication method provided in this application involves a base station receiving a registration request from a terminal device. The base station sends at least one authentication request corresponding to the registration request to the terminal device. It then receives the current authentication response from the terminal device. When it is determined that the current authentication response was obtained based on the latest authentication request corresponding to the registration request, the base station processes the current authentication response according to the latest authentication request to obtain an authentication result. In this process, after receiving the current authentication response, the base station determines whether the current authentication response was obtained based on the latest authentication request. This avoids situations where the current authentication response is not obtained based on the latest authentication request, leading to inaccurate authentication results. This improves the accuracy of determining 5G network permissions.

[0170] Based on any of the above embodiments, the following, in conjunction with Figure 4 The detailed process of network authentication for terminal devices is explained.

[0171] Figure 4 This is a flowchart illustrating another network authentication method provided in an embodiment of this application. Please refer to... Figure 4 The method includes:

[0172] S401, Send a registration request to the base station.

[0173] It should be noted that the execution process of S401 can be found in S201, and will not be repeated here.

[0174] S402, Receive the current authentication request corresponding to the registration request sent by the base station.

[0175] The current authentication request includes the current parameter identifier, the current first authentication parameter, and the current second authentication parameter.

[0176] S403. Determine the current authentication response corresponding to the current authentication request.

[0177] The current authentication response includes the current parameter identifier and the current authentication value.

[0178] S404. Retrieve the latest authentication request from the cache.

[0179] The latest authentication request includes the latest parameter identifier, the latest first authentication parameter, and the latest second authentication parameter.

[0180] The cache is used to store the authentication request corresponding to the latest registration request received from the base station.

[0181] After receiving the current authentication request sent by the base station, if the terminal device does not have a historical authentication request corresponding to the registration request in the cache, it stores the current authentication request in the cache; if the historical authentication request corresponding to the registration request exists in the cache, it deletes the historical authentication request from the cache and stores the current authentication request in the cache.

[0182] S405. Determine whether the current parameter identifier and the latest parameter identifier are the same.

[0183] If so, execute S407.

[0184] If not, proceed with S406.

[0185] S406. Determine whether the current first authentication parameter and the latest first authentication parameter are the same.

[0186] If so, execute S407.

[0187] If not, proceed with S408.

[0188] S407. Determine that the current authentication request is the same as the latest authentication request.

[0189] If the current parameter identifier is the same as the latest parameter identifier, then it can be determined that the current authentication request is the same as the latest authentication request.

[0190] For example, the current authentication request received by terminal device A and the latest authentication request in the cache can be specifically shown in Table 4:

[0191] Table 4

[0192]

[0193] Based on Table 4, we can determine that the current parameter identifier of the current authentication request is auth_index1, and the latest parameter identifier of the latest authentication request is auth_index1. Therefore, we can conclude that the current parameter identifier and the latest parameter identifier are the same, and thus the current authentication request and the latest authentication request are the same.

[0194] If the current parameter identifier is different from the latest parameter identifier, but the current authentication parameter is the same as the latest authentication parameter, then it can be determined that the current authentication request is the same as the latest authentication request.

[0195] For example, the current authentication request received by terminal device B and the latest authentication request in the cache can be specifically shown in Table 5:

[0196] Table 5

[0197]

[0198] Based on Table 5, we can determine that the current parameter identifier of the current authentication request is auth_index1, and the latest parameter identifier of the latest authentication request is auth_index2. The current first authentication parameter of the current authentication request is RAND1, and the latest first authentication parameter of the latest authentication request is RAND1. Therefore, we can conclude that the current parameter identifier and the latest parameter identifier are different, while the current first authentication parameter and the latest first authentication parameter are the same, thus confirming that the current authentication request and the latest authentication request are identical.

[0199] After S407, execute S411.

[0200] S408. Determine that the current authentication request is different from the latest authentication request.

[0201] If the current parameter identifier is different from the latest parameter identifier, and the current authentication parameters are different from the latest authentication parameters, then it can be determined that the current authentication request is different from the latest authentication request.

[0202] For example, the current authentication request received by terminal device C and the latest authentication request in the cache can be specifically shown in Table 6:

[0203] Table 6

[0204]

[0205] Based on Table 6, we can determine that the current parameter identifier of the current authentication request is auth_index2, and the latest parameter identifier of the latest authentication request is auth_index3. The current first authentication parameter of the current authentication request is RAND2, and the latest first authentication parameter of the latest authentication request is RAND3. Therefore, we can conclude that the current parameter identifier and the latest parameter identifier are different, and the current authentication parameter and the latest authentication parameter are also different, thus confirming that the current authentication request and the latest authentication request are different.

[0206] S409. Update the current authentication request to the latest authentication request.

[0207] For example, based on the current authentication request and the latest authentication request shown in Table 6 above, if it is determined that the current authentication request and the latest authentication request are different, then the current authentication request will be updated to the latest authentication request. The updated current authentication request can be shown in Table 7:

[0208] Table 7

[0209] Current parameter identifier Current first authentication parameter Current second authentication parameter auth_index3 RAND3 AUTN3

[0210] S410. Determine the current authentication response corresponding to the current authentication request.

[0211] For example, based on the updated current authentication request shown in Table 7 above, the USIM card of terminal device C obtains the current first authentication parameter RAND3 and the current second authentication parameter AUTN3 from the current authentication request. The USIM card of terminal device C generates the current authentication value AUTH_RES3 based on the current first authentication parameter RAND3 and the current second authentication parameter AUTN3. The USIM card of terminal device C determines that the current authentication response corresponding to the current authentication request includes the current parameter identifier auth_index3 and the current authentication value AUTH_RES3.

[0212] After S410, execute S403.

[0213] S411, Send the current authentication response to the base station.

[0214] When the terminal device determines that the current authentication request is the latest authentication request corresponding to the authentication request, it sends the current authentication response to the base station.

[0215] For example, the current authentication response shown in Table 7 above includes the current parameter identifier auth_index3 and the current authentication value AUTH_RES3. When the terminal device determines that both the current authentication request and the latest authentication request are authentication requests as shown in Table 7 above, it sends a current authentication response to the base station. The current authentication response includes the current parameter identifier auth_index3 and the current authentication value AUTH_RES3.

[0216] S412, Receive the authentication rejection message sent by the base station.

[0217] After the terminal device sends the current authentication response to the base station, the base station processes the current authentication response according to the latest authentication request to obtain the authentication result. If the authentication result is authentication rejection, the base station sends an authentication rejection message to the terminal device.

[0218] S413. Based on the authentication rejection message, determine the first time of receiving the first authentication request and the second time of receiving the second authentication request.

[0219] The first and second authentication requests are the two most recent authentication requests received.

[0220] For example, after receiving the authentication rejection message sent by the base station, terminal device A determines that the first time to receive the first authentication request is 14:00:01 on 2022 / 2 / 24, and the second time to receive the second authentication request is 14:00:02 on 2022 / 2 / 24.

[0221] S414. If the time difference between the first reception time and the second reception time is less than or equal to the preset duration, then the network status of the terminal device is determined to be abnormal.

[0222] For example, assuming a preset duration of 3 seconds, based on the first and second reception times shown above, the time difference between the first and second reception times is determined to be 1 second. If the time difference between the first and second reception times is less than the preset duration of 3 seconds, then the network status of the terminal device is determined to be abnormal.

[0223] The network authentication method provided in this application sends a registration request to a base station. It receives the current authentication request corresponding to the registration request sent by the base station. It determines the current authentication response corresponding to the current authentication request. If the current authentication request is the same as the latest authentication request, it sends the current authentication response to the base station. If the current authentication request is different from the latest authentication request, it updates the current authentication request to the latest authentication request and determines the current authentication response corresponding to the current authentication request. This process continues until the current authentication request is the same as the latest authentication request in the cache, at which point the current authentication response is sent to the base station. In this process, after determining the current authentication response corresponding to the authentication request, the terminal device determines whether the current authentication response is obtained based on the latest authentication request. It then sends the current authentication response obtained based on the latest authentication request to the base station, avoiding situations where the current authentication response is not obtained based on the latest authentication request, leading to inaccurate authentication results. This improves the accuracy of determining 5G network permissions.

[0224] Based on any of the above embodiments, the following, in conjunction with Figure 5 The detailed process of network authentication for base stations is explained.

[0225] Figure 5 This is a flowchart illustrating another network authentication method provided in an embodiment of this application. Please refer to... Figure 5 The method includes:

[0226] S501, Receive the registration request sent by the terminal device.

[0227] It should be noted that the execution process of S501 can be found in S301, and will not be repeated here.

[0228] S502. Send at least one authentication request corresponding to the registration request to the terminal device.

[0229] If the base station does not receive the current authentication response from the terminal device within the preset time period, the base station can send the authentication request to the terminal device again.

[0230] S503, Receive the current authentication response sent by the terminal device.

[0231] For example, the current authentication response sent by terminal device A to the base station can be shown in Table 8:

[0232] Table 8

[0233] Current parameter identifier Current authentication value auth_index1 AUTH_RES1

[0234] S504. Retrieve the latest authentication request from the cache.

[0235] The cache is used to store the authentication request corresponding to the last registration request sent to the terminal device.

[0236] S505. Determine whether the current parameter identifier and the latest parameter identifier are the same.

[0237] If so, execute S507.

[0238] If not, proceed with S506.

[0239] S506. Determine that the current authentication response is not obtained based on the latest authentication request corresponding to the registration request.

[0240] For example, the latest authentication requests stored in the base station's cache can be shown in Table 9:

[0241] Table 9

[0242] Latest parameter identifier Latest First Authentication Parameters Latest Second Authentication Parameters auth_index2 RAND2 AUTN2

[0243] Assuming the base station receives the current authentication response from terminal device A as shown in Table 8 above, then according to Table 8, the current parameter identifier is determined to be auth_index1. According to Table 9, the latest parameter identifier is determined to be auth_index2. If the current parameter identifier and the latest parameter identifier are different, then it is determined that the current authentication response is not obtained based on the latest authentication request corresponding to the registration request.

[0244] If it is determined that the current authentication response is not obtained based on the latest authentication request corresponding to the authentication request, repeat the above steps until the current parameter identifier is the same as the latest parameter identifier, and then determine that the current authentication response is obtained based on the latest authentication request corresponding to the registration request.

[0245] After S506, S503 is executed.

[0246] S507. Determine that the current authentication response is obtained based on the latest authentication request corresponding to the registration request.

[0247] For example, the latest authentication requests stored in the base station's cache can be shown in Table 10:

[0248] Table 10

[0249] Latest parameter identifier Latest First Authentication Parameters Latest Second Authentication Parameters auth_index1 RAND1 AUTN1

[0250] Assuming the base station receives the current authentication response from terminal device A as shown in Table 8 above, then according to Table 8, the current parameter identifier is determined to be auth_index1. According to Table 10, the latest parameter identifier is also determined to be auth_index1. Since the current parameter identifier and the latest parameter identifier are the same, the current authentication response is determined to be the latest authentication request corresponding to the registration request.

[0251] S508. Generate the latest authentication value based on the latest authentication parameters.

[0252] Authentication parameters and corresponding authentication values ​​can be set in advance and stored in the base station's preset storage space.

[0253] When it is determined that the current authentication response is obtained based on the latest authentication request corresponding to the registration request, the authentication value corresponding to the latest authentication parameter is obtained from the base station's preset storage space according to the latest parameter identifier.

[0254] For example, based on the current authentication parameters shown in Table 8 and the latest authentication request shown in Table 10, the current authentication response is determined to be obtained from the latest authentication request corresponding to the registration request. At this time, based on the latest parameter identifier auth_index1, the authentication value corresponding to the latest authentication parameter is retrieved from the base station's preset storage space as AUTH_RES1.

[0255] S509. Determine whether the current authentication value and the latest authentication value are the same.

[0256] If so, execute S510.

[0257] If not, execute S511.

[0258] S510. Confirm the authentication result as "accept authentication".

[0259] For example, according to Table 8 above, the current authentication value is AUTH_RES1. Based on the latest parameter identifier auth_index1, the authentication value corresponding to the latest authentication parameter is retrieved from the base station's preset storage space, and the latest authentication value is AUTH_RES1. If the current authentication value and the latest authentication value are the same, then the authentication result can be determined as reception authentication.

[0260] S511. The authentication result is determined to be a rejection of authentication.

[0261] For example, according to Table 8 above, the current authentication value is AUTH_RES1. Based on the latest parameter identifier auth_index1, the latest authentication parameter corresponding to the authentication value AUTH_RES2 is retrieved from the base station's preset storage space. If the current authentication value and the latest authentication value are different, then the authentication result can be determined as authentication rejection.

[0262] The network authentication method provided in this application embodiment receives a registration request sent by a terminal device. It sends at least one authentication request corresponding to the registration request to the terminal device. It receives the current authentication response sent by the terminal device. It retrieves the latest authentication request from the cache. If the current authentication response is determined based on the latest authentication request corresponding to the registration request, it is processed according to the latest authentication request to obtain an authentication result. If the current authentication response is not determined based on the latest authentication request corresponding to the registration request, it is updated according to the authentication response received from the terminal device until the current authentication response is determined based on the latest authentication request corresponding to the registration request. Then, it is processed according to the latest authentication request to obtain an authentication result. In the above process, after receiving the current authentication response, the base station determines whether the current authentication response is determined based on the latest authentication request corresponding to the registration request. This avoids situations where the current authentication response is not determined based on the latest authentication request corresponding to the registration request, resulting in inaccurate authentication results. This improves the accuracy of determining 5G network permissions.

[0263] Based on any of the above embodiments, the following, in conjunction with Figure 6 The detailed process of online authentication is illustrated with examples.

[0264] Figure 6 This is a schematic diagram illustrating the network authentication process provided in an embodiment of this application. Please refer to [link / reference]. Figure 6 This includes terminal device 601 and base station 602. Terminal device 601 can be a mobile phone, tablet, etc., capable of using 5G services. Base station 602 can be a 5G base station. Terminal device 601 contains a USIM card. Both terminal device 601 and base station 602 have buffers. The network authentication process includes two scenarios.

[0265] Scenario 1: The terminal device determines that the current authentication request is the latest authentication request corresponding to the registration request.

[0266] Users utilize terminal device 601 to access 5G network voice call services. Before initiating a voice call, terminal device A can send registration request 1 to base station 602. Terminal device 601 receives the current authentication request corresponding to registration request 1 sent by base station 602. The specific details of the current authentication request are shown in Table 11.

[0267] Table 11

[0268] Current parameter identifier Current first authentication parameter Current second authentication parameter auth_index1 RAND1 AUTN1

[0269] Terminal device 601 caches the current authentication request in its cache area. The USIM card of terminal device 601 obtains the current first authentication parameter RAND1 and the current second authentication parameter AUTN1 from the current authentication request. The USIM card of terminal device 601 generates the current authentication value AUTH_RES1 based on the current first authentication parameter RAND1 and the current second authentication parameter AUTN1. The specific details of the current authentication response determined by the USIM card of terminal device 601 are shown in Table 12.

[0270] Table 12

[0271] Current parameter identifier Current authentication value auth_index1 AUTH_RES1

[0272] The latest authentication request retrieved by terminal device 601 from the cache is shown in Table 13:

[0273] Table 13

[0274] Latest parameter identifier Latest First Authentication Parameters Latest Second Authentication Parameters auth_index2 RAND2 AUTN2

[0275] According to Table 11, terminal device 601 determines that the current parameter identifier of the current authentication request is auth_index1, and the current first authentication parameter of the current authentication request is RAND1. According to Table 12, the latest parameter identifier of the latest authentication request is auth_index2, and the latest first authentication parameter of the latest authentication request is RAND2. Therefore, it can be determined that the current parameter identifier is different from the latest parameter identifier, and the current first authentication parameter is different from the latest first authentication parameter. Terminal device 601 determines that the current authentication request is different from the latest authentication request. At this time, terminal device 601 updates the current authentication request to the latest authentication request shown in Table 13. The specific current authentication parameters corresponding to the updated current authentication request determined by the USIM card of terminal device 601 are shown in Table 14.

[0276] Table 14

[0277] Current parameter identifier Current authentication value auth_index2 AUTH_RES2

[0278] At this point, terminal device 601 determines that the current authentication request is the same as the latest authentication request and directly sends the current authentication response to base station 602. Base station 602 processes the current authentication response, obtains the authentication result, and sends it to terminal device 601.

[0279] Scenario 2: The base station determines that the current authentication response is obtained based on the latest authentication request corresponding to the registration request.

[0280] After receiving registration request 2 from the terminal device, base station 602 sends the authentication request corresponding to registration request 2 to terminal device 601 and stores it in the cache. The specific authentication requests corresponding to the registration request are shown in Table 15.

[0281] Table 15

[0282] Current parameter identifier Current first authentication parameter Current second authentication parameter auth_index3 RAND3 AUTN3

[0283] The USIM card of terminal device 601 determines the current authentication response corresponding to the authentication request shown in Table 15 and sends it to base station 602. The specific current authentication response can be shown in Table 16:

[0284] Table 16

[0285] Current parameter identifier Current authentication value auth_index3 AUTH_RES3

[0286] Base station 602 retrieves the latest authentication request from the buffer and determines that the latest authentication request is the current authentication request shown in Table 15. According to Table 15, the latest parameter identifier is determined to be auth_index3, and according to Table 16, the current parameter identifier is also determined to be auth_index3. Since base station 602 determines that the current parameter identifier and the latest parameter identifier are the same, it can then determine that the current authentication response is obtained based on the latest authentication request corresponding to the registration request.

[0287] Base station 602 retrieves the latest authentication parameter auth_index3 from the preset storage space, corresponding to the authentication value AUTH_RES3. If base station 602 determines that the current authentication value and the latest authentication value are the same, then the authentication result is confirmed as receive authentication. Base station 602 then sends the authentication result to terminal device 601.

[0288] The network authentication method provided in this application involves a terminal device sending a registration request to a base station. The terminal device receives a current authentication request corresponding to the registration request sent by the base station. The terminal device determines the current authentication response corresponding to the current authentication request. When the terminal device determines that the current authentication request is the latest authentication request corresponding to the registration request, it sends the current authentication response to the base station. In this process, after determining the current authentication response corresponding to the authentication request, the terminal device determines whether the current authentication response is obtained based on the latest authentication request. It then sends the current authentication response obtained based on the latest authentication request to the base station, avoiding situations where the current authentication response is not obtained based on the latest authentication request, leading to inaccurate authentication results. This improves the accuracy of determining 5G network permissions.

[0289] Figure 7 This is a schematic diagram illustrating the structure of a network authentication device provided in an embodiment of this application. The network authentication device can be a chip or a chip module. Please refer to... Figure 7 The network authentication device 10 may include:

[0290] Sending module 11 is used to send a registration request to the base station;

[0291] The receiving module 12 is used to receive the current authentication request corresponding to the registration request sent by the base station;

[0292] Processing module 13 is used to determine the current authentication response corresponding to the current authentication request;

[0293] The sending module 11 is further configured to send the current authentication response to the base station when it is determined that the current authentication request is the latest authentication request corresponding to the registration request. The current authentication response is used to enable the base station to determine the authentication result, which is to accept authentication or reject authentication.

[0294] The network authentication device provided in this application embodiment can execute the technical solution shown in the above method embodiment. Its implementation principle and beneficial effects are similar, and will not be described again here.

[0295] In one possible implementation, the sending module 11 is specifically used for:

[0296] The latest authentication request is retrieved from the cache, which stores the authentication request corresponding to the latest registration request received from the base station.

[0297] Determine whether the current authentication request is the same as the latest authentication request;

[0298] If so, the current authentication response is sent to the base station;

[0299] If not, the current authentication request is updated to the latest authentication request, and the current authentication response corresponding to the current authentication request is determined. The current authentication response is sent to the base station when the current authentication request is the same as the latest authentication request in the cache.

[0300] In one possible implementation, the sending module 11 is specifically used for:

[0301] Determine whether the current parameter identifier and the latest parameter identifier are the same;

[0302] If so, then it is determined that the current authentication request is the same as the latest authentication request;

[0303] If not, determine whether the current first authentication parameter and the latest first authentication parameter are the same. If yes, determine that the current authentication request is the same as the latest authentication request. If no, determine that the current authentication request is different from the latest authentication request.

[0304] In one possible implementation, the processing module 13 is specifically used for:

[0305] Obtain the current first authentication parameter and the current second authentication parameter from the current authentication request;

[0306] Generate the current authentication value based on the current first authentication parameter and the current second authentication parameter;

[0307] The current authentication response is determined to include the current parameter identifier and the current authentication value.

[0308] In one possible implementation, the processing module 13 is further configured to:

[0309] If the historical authentication request corresponding to the authentication request does not exist in the cache, then the current authentication request is stored in the cache.

[0310] If a historical authentication request corresponding to the authentication request exists in the cache, then the historical authentication request is deleted from the cache, and the current authentication request is stored in the cache.

[0311] In one possible implementation, the processing module 13 is further configured to:

[0312] Receive the authentication rejection message sent by the base station;

[0313] Based on the authentication rejection message, the first time of receiving the first authentication request and the second time of receiving the second authentication request are determined, wherein the first authentication request and the second authentication request are the two most recent authentication requests received.

[0314] If the time difference between the first receiving time and the second receiving time is less than or equal to a preset duration, then the network status of the terminal device is determined to be abnormal.

[0315] The network authentication device provided in this application embodiment can execute the technical solution shown in the above method embodiment. Its implementation principle and beneficial effects are similar, and will not be described again here.

[0316] Figure 8 This is a schematic diagram illustrating the structure of another network authentication device provided in an embodiment of this application. The network authentication device can be a chip or a chip module. Please refer to... Figure 8 The network authentication device 20 may include:

[0317] The receiving module 21 is used to receive the registration request sent by the terminal device;

[0318] Sending module 22 is used to send at least one authentication request corresponding to the registration request to the terminal device;

[0319] The receiving module 21 is also used to receive the current authentication response sent by the terminal device;

[0320] Processing module 23 is used to process the current authentication response according to the latest authentication request when it is determined that the current authentication response is obtained according to the latest authentication request corresponding to the registration request, and obtain an authentication result, wherein the authentication result is to accept authentication or reject authentication.

[0321] The network authentication device provided in this application embodiment can execute the technical solution shown in the above method embodiment. Its implementation principle and beneficial effects are similar, and will not be described again here.

[0322] In one possible implementation, the processing module 23 is specifically used for:

[0323] The latest authentication request is retrieved from the cache, which is used to store the authentication request corresponding to the last registration request sent to the terminal device;

[0324] Determine whether the current authentication response is obtained based on the latest authentication request corresponding to the registration request;

[0325] If so, process the current authentication response according to the latest authentication request to obtain the authentication result;

[0326] If not, the current authentication response is updated based on the authentication response received from the terminal device until the current authentication response is determined based on the latest authentication request corresponding to the registration request. Then, the current authentication response is processed according to the latest authentication request to obtain the authentication result.

[0327] In one possible implementation, the processing module 23 is specifically used for:

[0328] Determine whether the current parameter identifier and the latest parameter identifier are the same;

[0329] If so, then the current authentication response is determined to be obtained based on the latest authentication request corresponding to the registration request;

[0330] If not, then it is determined that the current authentication response was not obtained based on the latest authentication request corresponding to the registration request.

[0331] In one possible implementation, the processing module 23 is specifically used for:

[0332] Generate the latest authentication value based on the latest authentication parameters;

[0333] If the current authentication value and the latest authentication value are the same, then the authentication result is determined to be an acceptance authentication.

[0334] If the current authentication value and the latest authentication value are different, then the authentication result is determined to be authentication rejection.

[0335] The network authentication device provided in this application embodiment can execute the technical solution shown in the above method embodiment. Its implementation principle and beneficial effects are similar, and will not be described again here.

[0336] Figure 9 This is a schematic diagram of the structure of the terminal device provided in an embodiment of this application. Please refer to... Figure 9 The terminal device 30 may include a memory 31 and a processor 32. Exemplarily, the memory 31 and the processor 32 are interconnected via a bus 33.

[0337] Memory 31 is used to store program instructions;

[0338] The processor 32 is used to execute the program instructions stored in the memory, so that the terminal device 30 performs the method shown in the above method embodiment.

[0339] The terminal device provided in this application embodiment can execute the technical solution shown in the above method embodiment. Its implementation principle and beneficial effects are similar, and will not be described again here.

[0340] Figure 10 This is a schematic diagram of the base station structure provided in an embodiment of this application. Please refer to... Figure 10 The base station 40 may include a memory 41 and a processor 42. Exemplarily, the memory 41 and the processor 42 are interconnected via a bus 43.

[0341] Memory 41 is used to store program instructions;

[0342] The processor 42 is used to execute the program instructions stored in the memory, so that the base station 40 performs the method shown in the above method embodiment.

[0343] The base station provided in this application embodiment can execute the technical solution shown in the above method embodiment. Its implementation principle and beneficial effects are similar, and will not be repeated here.

[0344] This application provides a computer-readable storage medium storing computer-executable instructions, which are used to implement the above-described method when executed by a processor.

[0345] This application embodiment may also provide a computer program product, including a computer program that, when executed by a processor, can implement the above-described method.

[0346] All or part of the steps in the above-described method embodiments can be implemented by hardware related to program instructions. The aforementioned program can be stored in a readable memory. When the program is executed, it performs the steps of the above-described method embodiments; and the aforementioned memory (storage medium) includes: read-only memory (ROM), random access memory (RAM), flash memory, hard disk, solid-state drive, magnetic tape, floppy disk, optical disk, and any combination thereof.

[0347] This application describes embodiments with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this application. It should be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processing unit of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processing unit of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart illustrations. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0348] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0349] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0350] Obviously, those skilled in the art can make various modifications and variations to the embodiments of this application without departing from the spirit and scope of this application. Therefore, if these modifications and variations to the embodiments of this application fall within the scope of the claims of this application and their equivalents, this application also intends to include these modifications and variations.

[0351] In this application, the term "comprising" and its variations can refer to non-limiting inclusion; the term "or" and its variations can refer to "and / or". The terms "first", "second", etc., in this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. In this application, "multiple" refers to two or more. "And / or" describes the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent: A existing alone, A and B existing simultaneously, and B existing alone. The character " / " generally indicates that the preceding and following related objects have an "or" relationship.

Claims

1. A network authentication method, characterized in that, include: Send a registration request to the base station; Receive the current authentication request corresponding to the registration request sent by the base station; The current authentication request is stored in a cache, which is used to store the authentication request corresponding to the latest registration request received from the base station; Determine the current authentication response corresponding to the current authentication request; Retrieve the latest authentication request corresponding to the registration request from the cache; Determine whether the current authentication request is the same as the latest authentication request; If so, the current authentication response is sent to the base station; If not, update the current authentication request to the latest authentication request, and return to the step of determining the current authentication response corresponding to the current authentication request, until the current authentication request is the same as the latest authentication request in the cache, and then send the current authentication response to the base station. The current authentication response is used to enable the base station to determine the authentication result, which is to accept authentication or reject authentication.

2. The method according to claim 1, characterized in that, The current authentication request includes the current parameter identifier, the current first authentication parameter, and the current second authentication parameter, and the latest authentication request includes the latest parameter identifier, the latest first authentication parameter, and the latest second authentication parameter; Determining whether the current authentication request is the same as the latest authentication request includes: Determine whether the current parameter identifier and the latest parameter identifier are the same; If so, then it is determined that the current authentication request is the same as the latest authentication request; If not, determine whether the current first authentication parameter and the latest first authentication parameter are the same. If yes, determine that the current authentication request is the same as the latest authentication request. If no, determine that the current authentication request is different from the latest authentication request.

3. The method according to claim 2, characterized in that, Determining the current authentication response corresponding to the current authentication request includes: Obtain the current first authentication parameter and the current second authentication parameter from the current authentication request; Generate the current authentication value based on the current first authentication parameter and the current second authentication parameter; The current authentication response is determined to include the current parameter identifier and the current authentication value.

4. The method according to any one of claims 1-3, characterized in that, After receiving the current authentication request corresponding to the authentication request sent by the base station, the method further includes: If the historical authentication request corresponding to the authentication request does not exist in the cache, then the current authentication request is stored in the cache. If a historical authentication request corresponding to the authentication request exists in the cache, then the historical authentication request is deleted from the cache, and the current authentication request is stored in the cache.

5. The method according to any one of claims 1-3, characterized in that, The method further includes: Receive the authentication rejection message sent by the base station; Based on the authentication rejection message, the first time of receiving the first authentication request and the second time of receiving the second authentication request are determined, wherein the first authentication request and the second authentication request are the two most recent authentication requests received. If the time difference between the first receiving time and the second receiving time is less than or equal to a preset duration, then the network status of the terminal device is determined to be abnormal.

6. A network authentication method, characterized in that, include: Receive registration requests sent by terminal devices; Send at least one authentication request corresponding to the registration request to the terminal device; The authentication request corresponding to the last registration request sent to the terminal device is stored in the cache as the latest authentication request; Receive the current authentication response sent by the terminal device; Retrieve the latest authentication request from the cache; Determine whether the current authentication response is obtained based on the latest authentication request corresponding to the registration request; If so, the current authentication response is processed according to the latest authentication request to obtain the authentication result; If not, wait to receive a new current authentication response from the terminal device, and return to execute the judgment step until the current authentication response is determined according to the latest authentication request corresponding to the registration request. Then, process the current authentication response according to the latest authentication request to obtain the authentication result. The authentication result is either accepting the authentication or rejecting the authentication.

7. The method according to claim 6, characterized in that, The current authentication response includes the current parameter identifier; The latest authentication request includes the latest parameter identifier; Determining whether the current authentication response is determined based on the latest authentication request corresponding to the registration request includes: Determine whether the current parameter identifier and the latest parameter identifier are the same; If so, then the current authentication response is determined to be obtained based on the latest authentication request corresponding to the registration request; If not, then it is determined that the current authentication response was not obtained based on the latest authentication request corresponding to the registration request.

8. The method according to any one of claims 6-7, characterized in that, The current authentication response includes the current authentication value, and the latest authentication request includes the latest authentication parameters; The current authentication response is processed based on the latest authentication request to obtain the authentication result, including: Generate the latest authentication value based on the latest authentication parameters; If the current authentication value and the latest authentication value are the same, then the authentication result is determined to be an acceptance authentication. If the current authentication value and the latest authentication value are different, then the authentication result is determined to be authentication rejection.

9. A network authentication device, characterized in that, The device includes: The sending module is used to send registration requests to the base station; The receiving module is configured to receive the current authentication request corresponding to the registration request sent by the base station, and store the current authentication request in a cache, wherein the cache is used to store the latest authentication request corresponding to the registration request received from the base station; The processing module is used to determine the current authentication response corresponding to the current authentication request; The sending module is also used to obtain the latest authentication request corresponding to the registration request from the cache; Determine whether the current authentication request is the same as the latest authentication request; If so, the current authentication response is sent to the base station; If not, update the current authentication request to the latest authentication request, and return to the step of determining the current authentication response corresponding to the current authentication request, until the current authentication request is the same as the latest authentication request in the cache, and then send the current authentication response to the base station. The current authentication response is used to enable the base station to determine the authentication result, which is to accept authentication or reject authentication.

10. A network authentication device, characterized in that, The device includes: The receiving module is used to receive registration requests sent by the terminal device; The sending module is used to send at least one authentication request corresponding to the registration request to the terminal device; and to store the authentication request corresponding to the registration request sent to the terminal device last time as the latest authentication request in the cache. The receiving module is also used to receive the current authentication response sent by the terminal device; The processing module is used to obtain the latest authentication request from the cache; Determine whether the current authentication response is obtained based on the latest authentication request corresponding to the registration request; If so, the current authentication response is processed according to the latest authentication request to obtain the authentication result; If not, wait to receive a new current authentication response from the terminal device, and return to execute the judgment step until the current authentication response is determined according to the latest authentication request corresponding to the registration request. Then, process the current authentication response according to the latest authentication request to obtain the authentication result. The authentication result is either accepting the authentication or rejecting the authentication.

11. A terminal device, characterized in that, include: At least one processor; as well as A memory communicatively connected to the at least one processor; wherein, The memory stores instructions that can be executed by the at least one processor to enable the at least one processor to perform the method of any one of claims 1 to 5.

12. A base station, characterized in that, include: At least one processor; as well as A memory communicatively connected to the at least one processor; wherein, The memory stores instructions executable by the at least one processor to enable the at least one processor to perform the method of any one of claims 6 to 8.

13. A non-transitory computer-readable storage medium storing computer instructions, characterized in that, in, The computer instructions are used to cause the computer to perform the method according to any one of claims 1 to 5, or the method according to any one of claims 6 to 8.

14. A computer program product, comprising a computer program, characterized in that, When executed by a processor, the computer program implements the method according to any one of claims 1 to 5, or the method according to any one of claims 6 to 8.

Images