Internet subscription signaling topology hiding method, restoring method, device and medium

Abstract

The application provides an inter-network subscription signaling topology hiding method, a restoring method, a device and a medium, relates to the technical field of communication, and is used for solving the problem that the prior art lacks a scheme for hiding the topology of the local network lNRF network element in the inter-network subscription signaling, which may cause the sensitive information of the local network to be leaked to the foreign network. The hiding method comprises the following steps: receiving a first inter-network subscription signaling from the local network; obtaining the real address of the local network local network registration function lNRF network element from the first inter-network subscription signaling; performing topology hiding on the real address of the local network lNRF network element to obtain a hidden address of the local network lNRF network element; replacing the real address of the local network lNRF network element in the first inter-network subscription signaling with the hidden address of the local network lNRF network element to obtain a second inter-network subscription signaling; and sending the second inter-network subscription signaling to the foreign network. The application avoids the real address of the local network lNRF network element that needs to be kept secret from being leaked to the foreign network, and ensures the safety of the information of the local network.

Description

Technical Field

[0001] This invention relates to the field of communication technology, and in particular to an inter-network subscription signaling topology hiding method, an inter-network subscription signaling topology restoration method, an inter-network subscription signaling topology hiding device, an inter-network subscription signaling topology restoration device, and a computer-readable storage medium. Background Technology

[0002] 3GPP (3rd generation partnership project) requires that SEPP (Security Edge Protection Proxy) should perform topology hiding by restricting the internal topology information visible to external parties. This standard is implemented in 5G (5th Generation Mobile Communication Technology) SA (Standalone) network sharing and international roaming architectures.

[0003] However, current standards and technologies do not clearly define a specific implementation scheme for SEPP topology hiding. Especially for PLMN (Public Land Mobile Network) inter-network subscription procedures, existing technologies may consider hiding NF (Network Functions) element topology information in the inter-network subscription signaling. However, if NRF (Network Functions) element topology information is added to the inter-network subscription signaling for some reason...

[0004] Repository Function (NRF) network element topology information: Current technology lacks corresponding topology hiding schemes, which may lead to the leakage of confidential NRF network element topology information to other networks, affecting the information security of the local network. Summary of the Invention

[0005] The technical problem to be solved by this invention is to address the above-mentioned shortcomings of the prior art by providing a method for hiding the topology of inter-network subscription signaling and a method for restoring the topology of inter-network subscription signaling.

[0006] The invention comprises an inter-network subscription signaling topology hiding device, an inter-network subscription signaling topology restoration device, and a computer-readable storage medium, to address the problem that existing technologies lack a solution for topology hiding of the local network's 1NRF network element topology information in inter-network subscription signaling, which may lead to the leakage of sensitive information of the local network to other networks.

[0007] In a first aspect, the present invention provides an inter-network subscription signaling topology hiding method, applied to the Security Edge Protection Proxy (SEPP) network element of the local network, comprising:

[0008] Receive the first inter-network subscription signal from this network;

[0009] Obtain the real address of the local network registration function (lNRF) network element from the first inter-network subscription signaling;

[0010] Perform topology hiding on the real addresses of the INRF network elements in this network to obtain the hidden addresses of the INRF network elements in this network;

[0011] The hidden address of the local INRF network element is used to replace the real address of the local INRF network element in the first inter-network subscription signaling in order to obtain the second inter-network subscription signaling.

[0012] Send a second inter-network subscription signal to another network.

[0013] Optionally, receiving the first inter-network subscription signaling from this network, specifically including:

[0014] Receive a first inter-network subscription signaling from an iNRF network element at the boundary of this network. The first inter-network subscription signaling includes a second subscription identifier ID. The second subscription ID includes a first subscription ID and a first routing label. The first subscription ID is used to indicate the subscription resources of this network that the iNRF network element allows to be accessed by other networks. The first routing label includes the real address of the iNRF network element.

[0015] Optional:

[0016] The real address of the INRF network element of this network is obtained from the first inter-network subscription signaling, specifically including:

[0017] Obtain the second subscription ID from the first inter-network subscription signaling, obtain the first routing label from the second subscription ID, and obtain the real address of the local INRF network element from the first routing label;

[0018] The second inter-network subscription signaling is obtained by replacing the real address of the local INRF network element in the first inter-network subscription signaling with the hidden address of the local INRF network element, specifically including:

[0019] Replace the real address of the local INRF network element in the first routing label with the hidden address of the local INRF network element to obtain the second routing label. Replace the first routing label of the second subscription ID with the second routing label to obtain the third subscription ID. Replace the second subscription ID in the first inter-network subscription signaling with the third subscription ID to obtain the second inter-network subscription signaling.

[0020] Optionally, this network is the Home Public Land Mobile Network (HPLMN), and the other network is the Visited Virtual Land Mobile Network (VPLMN). The first subscription ID is determined by the inNRF network element of this network based on the request for subscription or update subscription of resources of this network from the other network.

[0021] Sending a second inter-network subscription signaling to another network, specifically including:

[0022] The second inter-network subscription signaling is sent to the SEPP network element of the other network so that the other network can obtain the third subscription ID.

[0023] Optionally, topology hiding is performed on the real addresses of the INRF network elements in this network to obtain the hidden addresses of the INRF network elements in this network, specifically including:

[0024] Perform topology hiding on the real addresses of local INRF network elements in Fully Qualified Domain Name (FQDN) format or Internet Protocol (IP) address format to obtain the hidden addresses of local INRF network elements in FQDN format.

[0025] Secondly, this invention provides an inter-network subscription signaling topology restoration method, applied to the Security Edge Protection Proxy (SEPP) network element of this network, comprising:

[0026] Receive fourth-party inter-network subscription signals from other networks;

[0027] Obtain the hidden address of the local network registration function (lNRF) network element from the fourth inter-network subscription signaling;

[0028] Perform topology restoration on the hidden addresses of the INRF network elements in this network to obtain the real addresses of the INRF network elements in this network.

[0029] Replace the hidden address of the INRF element in the fourth inter-network subscription signaling with the real address of the INRF element of this network to obtain the fifth inter-network subscription signaling;

[0030] Send the fifth inter-network subscription signal on this network.

[0031] Optionally, receiving fourth-party inter-network subscription signaling from other networks, specifically including:

[0032] Receive the fourth inter-network subscription signaling from the SEPP network element of the other network. The fourth inter-network subscription signaling includes the third subscription identifier ID. The third subscription ID includes the first subscription ID and the second routing label. The first subscription ID is used to indicate the subscription resources of this network that the local INRF network element allows the other network to access. The second routing label includes the hidden address of the local INRF network element.

[0033] Optional:

[0034] The hidden address of the local network element is obtained from the fourth inter-network subscription signaling, specifically including:

[0035] Obtain the third subscription ID from the fourth inter-network subscription signaling, obtain the second routing label from the third subscription ID, and obtain the hidden address of the local network's INRF element from the second routing label;

[0036] The fifth inter-network subscription signaling is obtained by replacing the hidden address of the local INRF network element in the fourth inter-network subscription signaling with the real address of the local INRF network element, specifically including:

[0037] The hidden address of the local INRF network element in the second routing label is replaced with the real address of the local INRF network element to obtain the first routing label. The second routing label of the third subscription ID is replaced with the first routing label to obtain the second subscription ID. The third subscription ID in the fourth inter-network subscription signaling is replaced with the second subscription ID to obtain the fifth inter-network subscription signaling.

[0038] Optionally, this network is the Home Public Land Mobile Network (HPLMN), and the other network is the Visiting VPLMN. The inter-network subscription signaling between the fourth and fifth networks also includes requests to update or unsubscribe from resources of this network.

[0039] Sending fifth-party subscription signals on this network, specifically including:

[0040] The fifth inter-network subscription signaling is sent to the iNRF network element at the boundary of this network, so that the iNRF network element of this network sends the update or unsubscribe request for this network resource in the fifth inter-network subscription signaling to the iNRF network element of this network according to the real address of the iNRF network element of this network.

[0041] Optionally, topology restoration is performed on the hidden addresses of the INRF network elements in this network to obtain the real addresses of the INRF network elements in this network, specifically including:

[0042] Perform topology restoration on the hidden addresses of local INRF network elements in FQDN format to obtain the real addresses of local INRF network elements in FQDN format or Internet Protocol IP address format.

[0043] Thirdly, the present invention provides an inter-network subscription signaling topology hiding device, comprising:

[0044] The first receiving module is used to receive the first inter-network subscription signaling from this network;

[0045] The first acquisition module, connected to the first receiving module, is used to obtain the real address of the local network registration function (lNRF) network element of this network from the first inter-network subscription signaling.

[0046] The topology hiding module, connected to the first acquisition module, is used to perform topology hiding on the real address of the INRF network element of this network in order to obtain the hidden address of the INRF network element of this network.

[0047] The first replacement module, connected to the topology hiding module, is used to replace the real address of the local network lNRF element in the first inter-network subscription signaling with the hidden address of the local network lNRF element, so as to obtain the second inter-network subscription signaling;

[0048] The first sending module, connected to the first replacement module, is used to send the second inter-network subscription signaling to the other network.

[0049] Fourthly, the present invention provides an inter-network subscription signaling topology restoration device, comprising:

[0050] The second receiving module is used to receive fourth inter-network subscription signaling from other networks;

[0051] The second acquisition module, connected to the second receiving module, is used to obtain the hidden address of the local network registration function (INRF) network element of this network from the fourth inter-network subscription signaling.

[0052] The topology restoration module, connected to the second acquisition module, is used to perform topology restoration on the hidden addresses of the INRF network elements in this network in order to obtain the real addresses of the INRF network elements in this network.

[0053] The second replacement module, connected to the topology restoration module, is used to replace the hidden address of the local network lNRF element in the fourth inter-network subscription signaling with the real address of the local network lNRF element in order to obtain the fifth inter-network subscription signaling.

[0054] The second sending module, connected to the second replacement module, is used to send the fifth network inter-network subscription signaling within this network.

[0055] Fifthly, the present invention provides a computer-readable storage medium having a computer program stored thereon, wherein when the computer program is executed by a processor, it implements the inter-network subscription signaling topology hiding method as described in the first aspect above, and / or the inter-network subscription signaling topology restoration method as described in the second aspect above.

[0056] This invention provides an inter-network subscription signaling topology hiding method, an inter-network subscription signaling topology hiding device, and a computer-readable storage medium. By using the local network's SEPP network element to perform topology hiding on inter-network subscription signaling from the local network, the real address of the local network's INRF network element is hidden. This ensures that the inter-network subscription signaling sent to other networks only contains the hidden address of the local network's INRF network element, thereby preventing the leakage of the confidential real address of the local network's INRF network element to other networks and ensuring the information security of the local network.

[0057] This invention provides an inter-network subscription signaling topology restoration method, an inter-network subscription signaling topology restoration device, and a computer-readable storage medium. It performs topology restoration on inter-network subscription signaling from other networks using the local network's SEPP network element to restore the hidden addresses of the local network's INRF network elements. This ensures that the inter-network subscription signaling sent from the local network contains the real addresses of the local network's INRF network elements, thereby enabling the subscription signaling from other networks to be correctly forwarded and processed within the local network. Attached Figure Description

[0058] Figure 1This is a flowchart of an inter-network subscription signaling topology hiding method according to an embodiment of the present invention;

[0059] Figure 2 This is a flowchart of an inter-network subscription method according to an embodiment of the present invention;

[0060] Figure 3 This is a flowchart of an inter-network subscription signaling topology restoration method according to an embodiment of the present invention;

[0061] Figure 4 This is a flowchart of an inter-network subscription update or cancellation method according to an embodiment of the present invention;

[0062] Figure 5 This is a schematic diagram of the structure of an inter-network subscription signaling topology hiding device according to an embodiment of the present invention;

[0063] Figure 6 This is a schematic diagram of the structure of an inter-network subscription signaling topology restoration device according to an embodiment of the present invention. Detailed Implementation

[0064] To enable those skilled in the art to better understand the technical solution of the present invention, the embodiments of the present invention will be further described in detail below with reference to the accompanying drawings.

[0065] It is understood that the specific embodiments and accompanying drawings described herein are merely for explaining the invention and are not intended to limit the invention.

[0066] It is understood that, without conflict, the various embodiments and features in the embodiments of the present invention can be combined with each other.

[0067] It is understood that, for ease of description, only the parts related to the present invention are shown in the accompanying drawings, while the parts unrelated to the present invention are not shown in the drawings.

[0068] It is understood that each unit or module involved in the embodiments of the present invention may correspond to only one entity structure, or may be composed of multiple entity structures, or multiple units or modules may be integrated into one entity structure.

[0069] It is understood that, without conflict, the functions and steps marked in the flowcharts and block diagrams of this invention may occur in a different order than that marked in the accompanying drawings.

[0070] It is understood that the flowcharts and block diagrams of this invention illustrate the possible architecture, functions, and operations of systems, apparatuses, devices, and methods according to various embodiments of this invention. Each block in the flowchart or block diagram may represent a unit, module, program segment, or code, containing executable instructions for implementing the specified function. Furthermore, each block or combination of blocks in the block diagram and flowchart can be implemented using a hardware-based system to achieve the specified function, or using a combination of hardware and computer instructions.

[0071] Example 1:

[0072] like Figure 1 As shown, Embodiment 1 of the present invention provides an inter-network subscription signaling topology hiding method, applied to the Security Edge Protection Proxy (SEPP) network element of this network, including:

[0073] S11. Receive the first inter-network subscription signaling from this network;

[0074] S12. Obtain the real address of the local network registration function (lNRF) network element from the first inter-network subscription signaling;

[0075] S13. Perform topology hiding on the real address of the INRF network element of this network to obtain the hidden address of the INRF network element of this network.

[0076] S14. Replace the real address of the INRF element in the first inter-network subscription signaling with the hidden address of the INRF element of this network to obtain the second inter-network subscription signaling;

[0077] S15. Send a second inter-network subscription signal to another network.

[0078] Specifically, in this embodiment, "inter-network" refers to the relationship between two PLMNs, such as... Figure 2As shown, the two PLMNs can be a VPLMN (Visited PLMN) and an HPLMN (Home PLMN). The VPLMN and HPLMN directly interact via SEPP network elements. The VPLMN's SEPP network element is denoted as vSEPP, and the HPLMN's SEPP network element is denoted as hSEPP. If either SEPP network element discovers an inter-network subscription signaling message to be sent from its own network to the peer network (i.e., the local SEPP network element receives an inter-network subscription signaling message from its own network), it checks whether it contains sensitive information about its own network. Existing technologies already have solutions for hiding some of this sensitive information. The first inter-network subscription signaling message in this application does not include the sensitive information about its own network that has already been hidden in existing technologies (i.e., the first inter-network subscription signaling message is not a signaling message already existing in the prior art), but rather includes the local INRF (local network RF). The real address of the INRF network element is hidden. Therefore, the SEPP network element of this network performs topology hiding to hide the real address of the INRF network element in the first inter-network subscription signaling. This ensures that the second inter-network subscription signaling sent to the other network only contains the hidden address of the INRF network element of this network, thereby preventing the leakage of the real address of the INRF network element of this network, which needs to be kept confidential, to the other network and ensuring the information security of this network.

[0079] Optionally, receiving the first inter-network subscription signaling from this network, specifically including:

[0080] Receive a first inter-network subscription signaling from an iNRF network element at the boundary of this network. The first inter-network subscription signaling includes a second subscription identifier ID. The second subscription ID includes a first subscription ID and a first routing label. The first subscription ID is used to indicate the subscription resources of this network that the iNRF network element allows to be accessed by other networks. The first routing label includes the real address of the iNRF network element.

[0081] Optional:

[0082] The real address of the INRF network element of this network is obtained from the first inter-network subscription signaling, specifically including:

[0083] Obtain the second subscription ID from the first inter-network subscription signaling, obtain the first routing label from the second subscription ID, and obtain the real address of the local INRF network element from the first routing label;

[0084] The second inter-network subscription signaling is obtained by replacing the real address of the local INRF network element in the first inter-network subscription signaling with the hidden address of the local INRF network element, specifically including:

[0085] Replace the real address of the local INRF network element in the first routing label with the hidden address of the local INRF network element to obtain the second routing label. Replace the first routing label of the second subscription ID with the second routing label to obtain the third subscription ID. Replace the second subscription ID in the first inter-network subscription signaling with the third subscription ID to obtain the second inter-network subscription signaling.

[0086] Optionally, this network is the Home Public Land Mobile Network (HPLMN), and the other network is the Visited Virtual Land Mobile Network (VPLMN). The first subscription ID is determined by the inNRF network element of this network based on the request for subscription or update subscription of resources of this network from the other network.

[0087] Sending a second inter-network subscription signaling to another network, specifically including:

[0088] The second inter-network subscription signaling is sent to the SEPP network element of the other network so that the other network can obtain the third subscription ID.

[0089] Optionally, topology hiding is performed on the real addresses of the INRF network elements in this network to obtain the hidden addresses of the INRF network elements in this network, specifically including:

[0090] Perform topology hiding on the real addresses of local INRF network elements in Fully Qualified Domain Name (FQDN) format or Internet Protocol (IP) address format to obtain the hidden addresses of local INRF network elements in FQDN format.

[0091] Specifically, in this embodiment, the method is mainly applied to scenarios where NRF is deployed hierarchically within the local network, such as... Figure 2As shown, when HPLMN's NRFs are hierarchically networked, they include multiple levels such as h-iNRF, h-hNRF, and h-lNRF. h-iNRF is the inter-network boundary NRF of the home network, h-hNRF is the higher-level NRF (or first-level NRF) of the home network, and h-lNRF is the local NRF (or second-level NRF). When the visited network's NRFs are hierarchically networked, they include multiple levels such as v-iNRF, v-hNRF, and v-lNRF. v-iNRF is the inter-network boundary NRF of the visited network, v-hNRF is the higher-level NRF (or first-level NRF) of the visited network, and v-lNRF is the local NRF (or second-level NRF). The method described is mainly applied to the inter-network NF subscription process across PLMNs, especially when there are multiple levels of NRFs, and when the visited network subscribes to the NF notification of the home network, for example, vAMF (Access and Mobility Management Function) subscribing to hUDM (Unified Data Management Function). In the context of NRF (Network Management) notifications, current international standards lack a method for notifying vAMFs of the local NRF's address or routing information when deploying hierarchical NRFs. For example, in cross-PLMN notification processes, a relatively efficient approach is to fill in the RouteTag in the subscriptionID. However, the RouteTag contains the local NRF's IP (Internet Protocol) address. Therefore, topology hiding of the local NRF's IP address in the subscriptionID is necessary. When the pSEPP (producer SEPP) sends a service response to the inter-network, the IP address in the subscriptionID is replaced with the hidden FQDN (Fully Qualified Domain Name).

[0092] like Figure 2 As shown, a more specific example of a visited network subscribing to its home network's NF is as follows:

[0093] Step (101): The vNF network element (such as vAMF) of the visited network (VPLMN) initiates a subscription request to the hNF network element (such as hUDM / hAUSF (Authentication Server Function)) of the home network (HPLMN). The subscription request carries the nfInstanceId (Network Function Instance ID) of h-iNRF. The vNF network element first sends the subscription request to v-iNRF.

[0094] Step (102): v-lNRF forwards the subscription request to v-hNRF;

[0095] Step (103): v-hNRF forwards the subscription request to v-iNRF;

[0096] Step (104): v-iNRF forwards the subscription request to vSEPP, at which point the subscription request carries the h-iNRF FQDN;

[0097] Step (105): vSEPP forwards the subscription request to hSEPP;

[0098] Step (106): hSEPP forwards the subscription request to h-iNRF;

[0099] Step (107): h-iNRF forwards the subscription request to h-hNRF;

[0100] Step (108): h-hNRF forwards the subscription request to h-lNRF, h-lNRF completes the subscription, generates the subscriptionID of the subscribed resource (at this time, it is the first subscription ID, which only includes information indicating the subscribed resource, and this information will not disclose the topology information of the subscribed resource to other networks), and returns the subscription response. In the subscription response, the apiRoot of the location points to h-lNRF (i.e., the real address of the h-lNRF network element);

[0101] Step (109): h-lNRF sends a subscription response to h-hNRF;

[0102] Step (110): h-hNRF forwards the subscription response to h-iNRF;

[0103] Step (111): h-iNRF adds routing information to subscriptionID. This routing information can be used for subsequent processing of subscription update and unsubscription requests. This routing information points to hl-NRF. Specifically, the apiRoot of the location is encoded as the routing information RouteTag (the first routing label, which includes the real address of hl-NRF) into subscriptionID (at this time, it has been formed into the second subscription ID, which includes the first subscription ID and the first routing label), and the subscription response (at this time, it has been formed into the first inter-network subscription signaling, which includes the second subscription ID. iNRF and SEPP are both network elements responsible for processing inter-network signaling) is forwarded to hSEPP;

[0104] Step (112): If the RouteTag in the subscriptionID uses the apiRoot information in the location of the subscription response, then the RouteTag contains the topology information or IP address information of h-lNRF. If no special processing is done on the home network side, it may be leaked to the visited network. Therefore, in this case, hSEPP needs to perform topology hiding on the IP address contained in the subscriptionID and replace it with the hidden FQDN (that is, convert the first route label to the second route label, which includes the hidden address of h-lNRF, and at the same time, convert the second subscription ID to the third subscription ID, which includes the first subscription ID and the second route label). hSEPP forwards the subscription response (at this time, the second inter-network subscription signaling has been formed, which includes the third subscription ID) to vSEPP. In this step, hSEPP actually performs the following: Figure 1 The steps S11-S15 shown and all the technical features included in Embodiment 1, the specific topology hiding method can adopt a symmetric encryption algorithm, and the symmetric encryption and decryption can be achieved by pre-setting the correspondence between the key and the key identifier of the symmetric encryption algorithm. The process of this example is not the prior art, but the content that this application seeks to protect is the technical content of topology hiding for the process of this example.

[0105] Step (113): vSEPP forwards the subscription response (second inter-network subscription signaling) to v-iNRF;

[0106] Step (114): v-iNRF adds the hPLMN prefix (fourth subscription ID, which includes the third subscription ID and the hPLMN prefix) to the subscriptionID (third subscription ID), and at the same time modifies the apiRoot in the location to point to v-iNRF, and forwards the subscription response (third inter-network subscription signaling) to v-hNRF;

[0107] Step (115): v-hNRF forwards the subscription response to v-lNRF;

[0108] Step (116): v-lNRF forwards the subscription response to vAMF, and vAMF saves the subscription information (including the fourth subscription ID).

[0109] Example 2:

[0110] like Figure 3 As shown, Embodiment 2 of the present invention provides an inter-network subscription signaling topology restoration method, applied to the Security Edge Protection Proxy (SEPP) network element of this network, including:

[0111] S21. Receive inter-network subscription signaling from another network;

[0112] S22. Obtain the hidden address of the local network registration function (lNRF) network element from the fourth inter-network subscription signaling;

[0113] S23. Perform topology restoration on the hidden addresses of the INRF network elements in this network to obtain the real addresses of the INRF network elements in this network.

[0114] S24. Replace the hidden address of the INRF element in the fourth inter-network subscription signaling with the real address of the INRF element of this network to obtain the fifth inter-network subscription signaling;

[0115] S25. Send the fifth inter-network subscription signal on this network.

[0116] Specifically, in this embodiment, "inter-network" refers to the relationship between two PLMNs, such as... Figure 4 As shown, the two PLMNs can be VPLMN and HPLMN, respectively. VPLMN and HPLMN directly interact with each other via SEPP network elements. The SEPP network element of VPLMN is denoted as vSEPP, and the SEPP network element of HPLMN is denoted as hSEPP. If either SEPP network element detects an inter-network subscription signaling sent from the peer network (i.e., the local SEPP network element receives inter-network subscription signaling from a different network), it checks whether it contains hidden information of its own network. Existing technologies already have schemes for restoring some of this hidden information. The fourth inter-network subscription signaling in this application does not include the hidden information of its own network that has already been restored using existing technologies (i.e., the fourth inter-network subscription signaling is not a signaling method already existing in the prior art). Instead, it includes the hidden address of the local network's INRF network element. Therefore, the local network's SEPP network element performs topology restoration to restore the hidden address of the local network's INRF network element in the fourth inter-network subscription signaling, so that the fifth inter-network subscription signaling sent by the local network contains the real address of the local network's INRF network element, thereby enabling subscription signaling from other networks to be correctly forwarded and processed by the local network. Optionally, the hidden address of the local network's INRF network element carried in the fourth inter-network subscription signaling originates from the second inter-network subscription signaling received by the other network as described in Embodiment 1. That is, the fourth inter-network subscription signaling is sent by the other network based on the hidden address of the local network's INRF network element in the second inter-network subscription signaling after receiving the second inter-network subscription signaling sent by the local network's SEPP network element according to the inter-network subscription signaling topology hiding method described in Embodiment 1.

[0117] Optionally, receiving fourth-party inter-network subscription signaling from other networks, specifically including:

[0118] Receive the fourth inter-network subscription signaling from the SEPP network element of the other network. The fourth inter-network subscription signaling includes the third subscription identifier ID. The third subscription ID includes the first subscription ID and the second routing label. The first subscription ID is used to indicate the subscription resources of this network that the local INRF network element allows the other network to access. The second routing label includes the hidden address of the local INRF network element.

[0119] Optional:

[0120] The hidden address of the local network element is obtained from the fourth inter-network subscription signaling, specifically including:

[0121] Obtain the third subscription ID from the fourth inter-network subscription signaling, obtain the second routing label from the third subscription ID, and obtain the hidden address of the local network's INRF element from the second routing label;

[0122] The fifth inter-network subscription signaling is obtained by replacing the hidden address of the local INRF network element in the fourth inter-network subscription signaling with the real address of the local INRF network element, specifically including:

[0123] The hidden address of the local INRF network element in the second routing label is replaced with the real address of the local INRF network element to obtain the first routing label. The second routing label of the third subscription ID is replaced with the first routing label to obtain the second subscription ID. The third subscription ID in the fourth inter-network subscription signaling is replaced with the second subscription ID to obtain the fifth inter-network subscription signaling.

[0124] Optionally, this network is the Home Public Land Mobile Network (HPLMN), and the other network is the Visiting VPLMN. The inter-network subscription signaling between the fourth and fifth networks also includes requests to update or unsubscribe from resources of this network.

[0125] Sending fifth-party subscription signals on this network, specifically including:

[0126] The fifth inter-network subscription signaling is sent to the iNRF network element at the boundary of this network, so that the iNRF network element of this network sends the update or unsubscribe request for this network resource in the fifth inter-network subscription signaling to the iNRF network element of this network according to the real address of the iNRF network element of this network.

[0127] Optionally, topology restoration is performed on the hidden addresses of the INRF network elements in this network to obtain the real addresses of the INRF network elements in this network, specifically including:

[0128] Perform topology restoration on the hidden addresses of local INRF network elements in FQDN format to obtain the real addresses of local INRF network elements in FQDN format or Internet Protocol IP address format.

[0129] Specifically, in this embodiment, the method is mainly applied to scenarios where NRF is deployed hierarchically within the local network, such as... Figure 4As shown, the NRF hierarchical networking structures of HPLMN and VPLMN are respectively... Figure 2 The method is similar; it is mainly applied to the process of canceling or changing NF subscriptions across PLMNs, especially when there are multi-level NRF networks. Since the current international standard does not have a method to notify the vAMF of the address or routing information of the local NRF when subscribing to such hierarchical NRF deployments, there is no corresponding topology hiding method, and consequently, no corresponding topology restoration method. In the case of visiting network canceling or changing subscription notifications of the home network, such as when the information of a hUDM registered with the hNRF changes, the home network's NRF needs to notify the vAMF, and the vAMF will also initiate subscription cancellation or change to the hNRF. In the subscription cancellation (subscription update) process, the HPLMN needs to restore the topology-hidden FQDN of the subscriptionID in the subscription cancellation signaling or subscription change signaling from the VPLMN to the IP address of the home network's local NRF. When pSEPP receives such subsequent inter-network service requests, it restores and restores the hidden FQDN in the subscriptionID to the IP address.

[0130] like Figure 4 As shown, in Figure 2 Following the illustrated process, a more concrete example of a visited network subscribing to and updating (or unsubscribing from) the home network's NFs is as follows:

[0131] Step (201): The vNF (e.g., vAMF) initiates a cross-network roaming update subscription (or subscription cancellation) request to the v-iNRF, carrying the subscriptionID (fourth subscription ID, which includes the third subscription ID and the hPLMN prefix);

[0132] Step (202): v-iNRF removes the hPLMN prefix from the subscriptionID (converting it into a third subscription ID, which includes the first subscription ID and the second routing label, the second routing label including the hidden address of hl-NRF), and then forwards the update subscription (or subscription cancellation) request (fourth inter-network subscription signaling, which includes the third subscription ID) to vSEPP;

[0133] Step (203): vSEPP forwards the update subscription (or subscription cancellation) request to hSEPP;

[0134] Step (204): hSEPP performs topology restoration on the hidden address (the hidden address of hl-NRF) in the subscriptionID (third subscription ID) of the update subscription (or subscription cancellation) request (fourth inter-network subscription signaling), restoring it to the IP address of h-lNRF (the real address of hl-NRF). hSEPP forwards the update subscription (or subscription cancellation) request (which has been converted into the fifth inter-network subscription signaling, including the second subscription ID, which includes the first subscription ID and the first routing label, the first routing label including the real address of hl-NRF) to h-iNRF; In this step, hSEPP actually performs the following... Figure 3 The steps S21-S25 shown and all the technical features included in Embodiment 2, the specific topology restoration method corresponds to the topology hiding method in Embodiment 1, the process of this example is not prior art, but the content claimed in this application is the technical content of topology restoration for the process of this example.

[0135] Step (205): h-iNRF retrieves the routing information RouteTag (first routing label) from the subscription ID (second subscription ID) in the subscription update (or subscription cancellation) request (fifth inter-network subscription signaling). The RouteTag contains the IP address information of h-iNRF. The RouteTag in the subscription ID is removed (the second subscription ID is converted to the first subscription ID, which only includes information indicating the subscribed resource). Based on the IP address information (the real address of h-iNRF in the first routing label), the subscription update (or subscription cancellation) request (sixth inter-network subscription signaling) is forwarded to h-iNRF.

[0136] Step (206): h-lNRF sends a subscription update (or subscription cancellation) response to h-iNRF;

[0137] Step (207): h-iNRF forwards the subscription update (or subscription cancellation) response to hSEPP;

[0138] Step (208): hSEPP forwards the subscription update (or subscription cancellation) response to vSEPP;

[0139] Step (209): vSEPP forwards the subscription update (or subscription cancellation) response to v-iNRF;

[0140] Step (210): v-iNRF forwards subscription update (or subscription cancellation) responses to vNF (e.g., vAMF).

[0141] Example 3:

[0142] like Figure 5As shown, Embodiment 3 of the present invention provides an inter-network subscription signaling topology hiding device, comprising:

[0143] The first receiving module 11 is used to receive the first inter-network subscription signaling from this network;

[0144] The first acquisition module 12 is connected to the first receiving module 11 and is used to obtain the real address of the local network registration function (INRF) network element of this network from the first inter-network subscription signaling.

[0145] Topology hiding module 13, connected to the first acquisition module 12, is used to perform topology hiding on the real address of the local INRF network element to obtain the hidden address of the local INRF network element.

[0146] The first replacement module 14 is connected to the topology hiding module 13 and is used to replace the real address of the local network lNRF network element in the first inter-network subscription signaling with the hidden address of the local network lNRF network element to obtain the second inter-network subscription signaling.

[0147] The first sending module 15, connected to the first replacement module 14, is used to send a second inter-network subscription signaling to another network.

[0148] Optionally, the first receiving module 11 is specifically used for:

[0149] Receive a first inter-network subscription signaling from an iNRF network element at the boundary of this network. The first inter-network subscription signaling includes a second subscription identifier ID. The second subscription ID includes a first subscription ID and a first routing label. The first subscription ID is used to indicate the subscription resources of this network that the iNRF network element allows to be accessed by other networks. The first routing label includes the real address of the iNRF network element.

[0150] Optional:

[0151] The first acquisition module 12 is specifically used for:

[0152] Obtain the second subscription ID from the first inter-network subscription signaling, obtain the first routing label from the second subscription ID, and obtain the real address of the local INRF network element from the first routing label;

[0153] The first replacement module 14 is specifically used for:

[0154] Replace the real address of the local INRF network element in the first routing label with the hidden address of the local INRF network element to obtain the second routing label. Replace the first routing label of the second subscription ID with the second routing label to obtain the third subscription ID. Replace the second subscription ID in the first inter-network subscription signaling with the third subscription ID to obtain the second inter-network subscription signaling.

[0155] Optionally, this network is the Home Public Land Mobile Network (HPLMN), and the other network is the Visited Virtual Land Mobile Network (VPLMN). The first subscription ID is determined by the inNRF network element of this network based on the request for subscription or update subscription of resources of this network from the other network.

[0156] The first transmitting module 15 is specifically used for:

[0157] The second inter-network subscription signaling is sent to the SEPP network element of the other network so that the other network can obtain the third subscription ID.

[0158] Optionally, the topology hiding module 13 is specifically used for:

[0159] Perform topology hiding on the real addresses of local INRF network elements in Fully Qualified Domain Name (FQDN) format or Internet Protocol (IP) address format to obtain the hidden addresses of local INRF network elements in FQDN format.

[0160] Example 4:

[0161] like Figure 6 As shown, Embodiment 4 of the present invention provides an inter-network subscription signaling topology restoration device, comprising:

[0162] The second receiving module 21 is used to receive the fourth inter-network subscription signaling from another network;

[0163] The second acquisition module 22, connected to the second receiving module 21, is used to obtain the hidden address of the local network registration function (INRF) network element of this network from the fourth inter-network subscription signaling.

[0164] Topology restoration module 23, connected to the second acquisition module 22, is used to perform topology restoration on the hidden address of the local INRF network element to obtain the real address of the local INRF network element.

[0165] The second replacement module 24 is connected to the topology restoration module 23 and is used to replace the hidden address of the local network lNRF network element in the fourth inter-network subscription signaling with the real address of the local network lNRF network element in order to obtain the fifth inter-network subscription signaling.

[0166] The second sending module 25, connected to the second replacement module 24, is used to send the fifth inter-network subscription signaling within the network.

[0167] Optionally, the second receiving module 21 is specifically used for:

[0168] Receive the fourth inter-network subscription signaling from the SEPP network element of the other network. The fourth inter-network subscription signaling includes the third subscription identifier ID. The third subscription ID includes the first subscription ID and the second routing label. The first subscription ID is used to indicate the subscription resources of this network that the local INRF network element allows the other network to access. The second routing label includes the hidden address of the local INRF network element.

[0169] Optional:

[0170] The second acquisition module 22 is specifically used for:

[0171] Obtain the third subscription ID from the fourth inter-network subscription signaling, obtain the second routing label from the third subscription ID, and obtain the hidden address of the local network's INRF element from the second routing label;

[0172] The second replacement module 24 is specifically used for:

[0173] The hidden address of the local INRF network element in the second routing label is replaced with the real address of the local INRF network element to obtain the first routing label. The second routing label of the third subscription ID is replaced with the first routing label to obtain the second subscription ID. The third subscription ID in the fourth inter-network subscription signaling is replaced with the second subscription ID to obtain the fifth inter-network subscription signaling.

[0174] Optionally, this network is the Home Public Land Mobile Network (HPLMN), and the other network is the Visiting VPLMN. The inter-network subscription signaling between the fourth and fifth networks also includes requests to update or unsubscribe from resources of this network.

[0175] The second transmitting module 25 is specifically used for:

[0176] The fifth inter-network subscription signaling is sent to the iNRF network element at the boundary of this network, so that the iNRF network element of this network sends the update or unsubscribe request for this network resource in the fifth inter-network subscription signaling to the iNRF network element of this network according to the real address of the iNRF network element of this network.

[0177] Optionally, the topology restoration module 23 is specifically used for:

[0178] Perform topology restoration on the hidden addresses of local INRF network elements in FQDN format to obtain the real addresses of local INRF network elements in FQDN format or Internet Protocol IP address format.

[0179] Example 5:

[0180] Embodiment 5 of the present invention provides a computer-readable storage medium storing a computer program thereon. When the computer program is executed by a processor, it implements the inter-network subscription signaling topology hiding method as described in Embodiment 1, and / or the inter-network subscription signaling topology restoration method as described in Embodiment 2.

[0181] Specifically, in this embodiment, the inter-network subscription signaling topology hiding method and / or the inter-network subscription signaling topology restoration method can be run on the Security Edge Protection Agent (SEPP) network element to hide and restore the local network 1NRF network element topology information in the inter-network subscription signaling. The computer-readable storage medium includes volatile or non-volatile, removable or non-removable media implemented in any method or technology for storing information (such as computer-readable instructions, data structures, computer program modules, or other data). Computer-readable storage media include, but are not limited to, RAM (Random Access Memory), ROM (Read-Only Memory), EEPROM (Electrically Erasable Programmable Read-Only Memory), flash memory or other memory technologies, CD-ROM (Compact Disc Read-Only Memory), DVD or other optical disc storage, magnetic cartridges, magnetic tapes, disk storage or other magnetic storage devices, or any other medium that can be used to store desired information and can be accessed by a computer.

[0182] In addition, the present invention may also provide a computer device, the device including a memory and a processor, wherein the memory stores a computer program, and when the processor runs the computer program stored in the memory, the processor executes the inter-network subscription signaling topology hiding method as described in Embodiment 1, and / or the inter-network subscription signaling topology restoration method as described in Embodiment 2.

[0183] Furthermore, the present invention can also provide a Public Land Mobile Network (PLMN), including a Security Edge Protection Proxy (SEPP) network element, and connecting to other networks through the SEPP network element;

[0184] The SEPP network element of this network includes the first SEPP network element of this network, which implements the inter-network subscription signaling topology hiding method as described in Example 1.

[0185] Optionally, the first SEPP network element of this network implements the inter-network subscription signaling topology restoration method as described in Example 2; or,

[0186] The SEPP network element of this network also includes a second SEPP network element of this network, which implements the inter-network subscription signaling topology restoration method as described in Example 2.

[0187] Embodiments 1, 3, and 5 of this invention provide an inter-network subscription signaling topology hiding method, an inter-network subscription signaling topology hiding device, and a computer-readable storage medium. By using the SEPP network element of the local network to perform topology hiding on the inter-network subscription signaling from the local network, the real address of the local network lNRF network element is hidden, so that the inter-network subscription signaling sent to the other network only contains the hidden address of the local network lNRF network element, thereby avoiding the leakage of the confidential real address of the local network lNRF network element to the other network and ensuring the information security of the local network.

[0188] Embodiments 2, 4, and 5 of this invention provide an inter-network subscription signaling topology restoration method, an inter-network subscription signaling topology restoration device, and a computer-readable storage medium. By using the SEPP network element of the local network to perform topology restoration on inter-network subscription signaling from other networks, the hidden address of the local network's INRF network element is restored, so that the inter-network subscription signaling sent from the local network contains the real address of the local network's INRF network element, thereby enabling subscription signaling from other networks to be correctly forwarded and processed in the local network.

[0189] It is understood that the above embodiments are merely exemplary implementations used to illustrate the principles of the present invention, and the present invention is not limited thereto. For those skilled in the art, various modifications and improvements can be made without departing from the spirit and essence of the present invention, and these modifications and improvements are also considered to be within the scope of protection of the present invention.

Claims

1. A method for hiding the topology of inter-network subscription signaling, characterized in that, The method, applied to the Security Edge Protection Agent (SEPP) network element of this network and the NRF hierarchical networking of this network, includes: Receive the first inter-network subscription signaling from this network, specifically including: The system receives a first inter-network subscription signaling message from an iNRF network element at the boundary of this network. This first inter-network subscription signaling message includes a second subscription identifier ID. The second subscription ID includes a first subscription ID and a first routing label. The first subscription ID indicates the iNRF network element's allowed access from other networks, and the first routing label includes the real address of the iNRF network element. The first subscription ID is determined by the iNRF network element of this network based on the request of other networks to subscribe to or update subscriptions to resources of this network, without disclosing the topology information of the resources subscribed to by this network. The first route label is added by the iNRF of this network and points to the iNRF of this network. Obtain the real address of the local network registration function (lNRF) network element from the first inter-network subscription signaling; Perform topology hiding on the real address of the INRF network element in this network to obtain the hidden address of the INRF network element in this network. Convert the first routing label into the second routing label, which includes the hidden address of the INRF network element in this network. Convert the second subscription ID into the third subscription ID, which includes the first subscription ID and the second routing label. The hidden address of the local INRF network element is used to replace the real address of the local INRF network element in the first inter-network subscription signaling to obtain the second inter-network subscription signaling, which includes the third subscription ID. Send a second inter-network subscription signal to another network.

2. The method according to claim 1, characterized in that: The real address of the INRF network element of this network is obtained from the first inter-network subscription signaling, specifically including: Obtain the second subscription ID from the first inter-network subscription signaling, obtain the first routing label from the second subscription ID, and obtain the real address of the local INRF network element from the first routing label; The second inter-network subscription signaling is obtained by replacing the real address of the local INRF network element in the first inter-network subscription signaling with the hidden address of the local INRF network element, specifically including: Replace the real address of the local INRF network element in the first routing label with the hidden address of the local INRF network element to obtain the second routing label. Replace the first routing label of the second subscription ID with the second routing label to obtain the third subscription ID. Replace the second subscription ID in the first inter-network subscription signaling with the third subscription ID to obtain the second inter-network subscription signaling.

3. The method according to claim 2, characterized in that, This network is the home public terrestrial mobile network HPLMN, and other networks are visited VPLMN; Sending a second inter-network subscription signaling to another network, specifically including: The second inter-network subscription signaling is sent to the SEPP network element of the other network so that the other network can obtain the third subscription ID.

4. The method according to any one of claims 1-3, characterized in that, Perform topology hiding on the real addresses of INRF network elements in this network to obtain the hidden addresses of INRF network elements in this network, specifically including: Perform topology hiding on the real addresses of local INRF network elements in Fully Qualified Domain Name (FQDN) format or Internet Protocol (IP) address format to obtain the hidden addresses of local INRF network elements in FQDN format.

5. A method for restoring the topology of inter-network subscription signaling, characterized in that, The method, applied to the Security Edge Protection Agent (SEPP) network element of this network and the NRF hierarchical networking of this network, includes: Receive fourth inter-network subscription signaling from other networks. The fourth inter-network subscription signaling includes a third subscription identifier ID. The third subscription ID includes a first subscription ID and a second routing label. The first subscription ID is used to indicate the subscription resources of this network that the local INRF network element allows the other network to access, without disclosing the topology information of the subscription resources of this network. The second routing label includes the hidden address of this network INRF network element. Obtain the hidden address of the local network registration function (lNRF) network element from the fourth inter-network subscription signaling; Perform topology restoration on the hidden addresses of the INRF network elements in this network to obtain the real addresses of the INRF network elements in this network. The hidden address of the local INRF network element in the fourth inter-network subscription signaling is replaced with the real address of the local INRF network element to obtain the fifth inter-network subscription signaling. The fifth inter-network subscription signaling includes a second subscription ID, which in turn includes a first subscription ID and a first routing label. The first routing label includes the real address of the local INRF network. Among them, the fourth and fifth inter-network subscription signaling also includes requests to update or unsubscribe from resources on this network; Sending fifth-party subscription signals on this network, specifically including: The fifth inter-network subscription signaling is sent to the iNRF network element at the boundary of this network, so that the iNRF network element of this network converts the second subscription ID into the first subscription ID, and sends the update or unsubscribe request for this network resource in the fifth inter-network subscription signaling to the iNRF network element of this network according to the real address of this network iNRF network element in the first routing label.

6. The method according to claim 5, characterized in that: The hidden address of the local network element is obtained from the fourth inter-network subscription signaling, specifically including: Obtain the third subscription ID from the fourth inter-network subscription signaling, obtain the second routing label from the third subscription ID, and obtain the hidden address of the local network's INRF element from the second routing label; The fifth inter-network subscription signaling is obtained by replacing the hidden address of the local INRF network element in the fourth inter-network subscription signaling with the real address of the local INRF network element, specifically including: The hidden address of the local INRF network element in the second routing label is replaced with the real address of the local INRF network element to obtain the first routing label. The second routing label of the third subscription ID is replaced with the first routing label to obtain the second subscription ID. The third subscription ID in the fourth inter-network subscription signaling is replaced with the second subscription ID to obtain the fifth inter-network subscription signaling.

7. The method according to claim 6, characterized in that, This network is the Home Public Land Mobile Network (HPLMN), and other networks are visited VPLMNs; receiving fourth-party inter-network subscription signaling from other networks specifically includes: Receives fourth inter-network subscription signaling from SEPP network elements in other networks.

8. The method according to any one of claims 5-7, characterized in that, Perform topology restoration on the hidden addresses of INRF network elements in this network to obtain the real addresses of the INRF network elements in this network, specifically including: Perform topology restoration on the hidden addresses of local INRF network elements in FQDN format to obtain the real addresses of local INRF network elements in FQDN format or Internet Protocol IP address format.

9. A network subscription signaling topology hiding device, characterized in that, The device is a Security Edge Protection Proxy (SEPP) network element of this network, and the network uses NRF layered networking. The device includes: The first receiving module is used to receive the first inter-network subscription signaling from this network, specifically including: The system receives a first inter-network subscription signaling message from an iNRF network element at the boundary of this network. This first inter-network subscription signaling message includes a second subscription identifier ID. The second subscription ID includes a first subscription ID and a first routing label. The first subscription ID indicates the iNRF network element's allowed access from other networks, and the first routing label includes the real address of the iNRF network element. Among them, the first subscription ID is generated by the local iNRF when a subscription request from an external network is completed, without disclosing the topology information of the subscription resources of the local network, and the first route label is added by the local iNRF and points to the local iNRF; The first acquisition module, connected to the first receiving module, is used to obtain the real address of the local network registration function (lNRF) network element of this network from the first inter-network subscription signaling. The topology hiding module, connected to the first acquisition module, is used to perform topology hiding on the real address of the local INRF network element to obtain the hidden address of the local INRF network element, convert the first routing label into a second routing label, the second routing label including the hidden address of the local INRF network element, and convert the second subscription ID into a third subscription ID, the third subscription ID including the first subscription ID and the second routing label. The first replacement module, connected to the topology hiding module, is used to replace the real address of the local network lNRF network element in the first inter-network subscription signaling with the hidden address of the local network lNRF network element to obtain the second inter-network subscription signaling, which includes the third subscription ID. The first sending module, connected to the first replacement module, is used to send the second inter-network subscription signaling to the other network.

10. A network subscription signaling topology restoration device, characterized in that, The device is a Security Edge Protection Proxy (SEPP) network element of this network, and the network uses NRF layered networking. The device includes: The second receiving module is used to receive the fourth inter-network subscription signaling from the other network. The fourth inter-network subscription signaling includes the third subscription identifier ID. The third subscription ID includes the first subscription ID and the second routing label. The first subscription ID is used to indicate the subscription resources of this network that the local INRF network element allows the other network to access, without disclosing the topology information of the subscription resources of this network. The second routing label includes the hidden address of the local INRF network element. The second acquisition module, connected to the second receiving module, is used to obtain the hidden address of the local network registration function (INRF) network element of this network from the fourth inter-network subscription signaling. The topology restoration module, connected to the second acquisition module, is used to perform topology restoration on the hidden addresses of the INRF network elements in this network in order to obtain the real addresses of the INRF network elements in this network. The second replacement module, connected to the topology restoration module, is used to replace the hidden address of the local INRF network element in the fourth inter-network subscription signaling with the real address of the local INRF network element to obtain the fifth inter-network subscription signaling. The fifth inter-network subscription signaling includes a second subscription ID, which includes a first subscription ID and a first routing label. The first routing label includes the real address of the local INRF network. Among them, the fourth and fifth inter-network subscription signaling also includes requests to update or unsubscribe from resources on this network; The second transmitting module, connected to the second replacement module, is used to transmit inter-network subscription signaling within this network, specifically including: The fifth inter-network subscription signaling is sent to the iNRF network element at the boundary of this network, so that the iNRF network element of this network converts the second subscription ID into the first subscription ID, and sends the update or unsubscribe request for this network resource in the fifth inter-network subscription signaling to the iNRF network element of this network according to the real address of this network iNRF network element in the first routing label.

11. A computer-readable storage medium, characterized in that, It stores a computer program, which, when executed by a processor, implements the inter-network subscription signaling topology hiding method as described in any one of claims 1-4, and / or the inter-network subscription signaling topology restoration method as described in any one of claims 5-8.

Images