Routing and addressing methods, apparatuses, and related devices

Abstract

The application discloses a routing addressing method and device and related equipment, and relates to the wireless safety technical field, to solve the problem of long time delay of opening physical layer encryption. The method is applied to a first network element, and comprises the following steps: sending a query message to a second network element, wherein the query message is used for querying routing information and state information, the state information is used for representing whether a terminal and a target access side device have physical layer encryption capability, the target access side device is an access side device accessed by the terminal, and the second network element pre-stores the state information; receiving the routing information and the state information sent by the second network element; and in the case that the terminal and the target access side device both have physical layer encryption capability, instructing the target access side device and the terminal to negotiate to open physical layer encryption. The embodiment of the application can shorten the time delay of opening physical layer encryption.

Description

Technical Field

[0001] This invention relates to the field of wireless security technology, and in particular to a routing addressing method, apparatus, and related equipment. Background Technology

[0002] In the voice call and voice SMS process of Voice over Long-Term Evolution (VoLTE) / VoNR, the physical layer encryption function can only be successfully enabled if both the terminal-side and access-side devices have physical layer encryption capabilities.

[0003] In related technologies, an invitation (INVITE) message carrying an instruction to enable physical layer encryption negotiation needs to be sent to the access-side device in order to query whether both the terminal-side and access-side devices have physical layer encryption capabilities, which results in a long delay in enabling physical layer encryption. Summary of the Invention

[0004] This invention provides a routing addressing method, apparatus, and related equipment to solve the problem of long latency in enabling physical layer encryption.

[0005] In a first aspect, embodiments of the present invention provide a routing addressing method, applied to a first network element, comprising:

[0006] A query message is sent to the second network element. The query message is used to query routing information and status information. The status information is used to characterize whether the terminal and the target access side device have physical layer encryption capabilities. The target access side device is the access side device to which the terminal accesses. The second network element pre-stores the status information.

[0007] Receive the routing information and status information sent by the second network element;

[0008] If both the terminal and the target access device have physical layer encryption capabilities, instruct the target access device and the terminal to negotiate and enable physical layer encryption.

[0009] Optionally, sending a query message to the second network element includes:

[0010] Upon receiving an invitation message from the network server, a query message is sent to the second network element. The invitation message carries first indication information, which instructs the first network element to query the status information.

[0011] When both the terminal and the target access-side device have physical layer encryption capabilities, instructing the target access-side device and the terminal to negotiate and enable physical layer encryption includes:

[0012] When both the terminal and the target access device have physical layer encryption capabilities, an invitation message carrying second indication information is sent to the target access device. The second indication information is used to instruct the target access device and the terminal to negotiate to enable physical layer encryption.

[0013] Optionally, after receiving the routing information and the status information sent by the second network element, the method further includes:

[0014] If at least one of the terminal and the target access-side device does not have physical layer encryption capability, a first invitation reply message carrying a first result is sent to the network server. The first result is used to indicate that the physical layer encryption of the target access-side device and the terminal has failed to be enabled.

[0015] Optionally, after instructing the target access-side device and the terminal to negotiate and enable physical layer encryption when both the terminal and the target access-side device have physical layer encryption capabilities, the method further includes:

[0016] The system receives a second invitation reply message from the target access side device, which carries a second result. The second result is used to characterize the physical layer encryption negotiation start result between the target access side device and the terminal.

[0017] Send the second invitation reply message carrying the second result to the network server.

[0018] Secondly, embodiments of the present invention provide a routing addressing method applied to a second network element, comprising:

[0019] The first network element receives a query message sent by the second network element. The query message is used to query routing information and status information. The status information is used to characterize whether the terminal and the target access side device have physical layer encryption capabilities. The second network element pre-stores the status information.

[0020] Query the routing information and the status information;

[0021] The routing information and the status information are sent to the first network element.

[0022] Optionally, before receiving the query message sent by the first network element, the method further includes:

[0023] Receive status information sent by a third network element, the status information being used to characterize whether the terminal and the target access-side device have physical layer encryption capabilities;

[0024] Store the status information.

[0025] Thirdly, embodiments of the present invention provide a routing addressing method applied to a third network element, including:

[0026] The system receives first identification information sent by a target access-side device, the first identification information being used to characterize whether the target access-side device has physical layer encryption capability, and receives second identification information sent by a terminal, the second identification information being used to characterize whether the terminal has physical layer encryption capability.

[0027] Status information is generated based on the first identification information and the second identification information. The status information 0 is used to characterize whether the terminal and the target access side device have physical layer encryption capabilities.

[0028] The status information is sent to the second network element.

[0029] Optionally, the first identification information received from the target access side device includes:

[0030] Receive a first network access request message carrying the first identification information sent by the target access side device, and / or receive a configuration update message carrying the first identification information sent by the target access side device.

[0031] Optionally, the second identification information sent by the receiving terminal includes:

[0032] Receive the second network access request message carrying the second identification information sent by the terminal, and / or

[0033] Alternatively, it may receive a tracking area update request message carrying the second identification information sent by the terminal.

[0034] Fourthly, embodiments of the present invention provide a routing addressing device, wherein a first network element includes the routing addressing device, comprising:

[0035] The first sending module is used to send a query message to the second network element. The query message is used to query routing information and status information. The status information is used to characterize whether the terminal and the target access side device have physical layer encryption capabilities. The target access side device is the access side device to which the terminal accesses. The second network element pre-stores the status information.

[0036] 5. A first receiving module, configured to receive the routing information and the status information sent by the second network element;

[0037] The instruction module is used to instruct the target access side device and the terminal to negotiate and enable physical layer encryption when both the terminal and the target access side device have physical layer encryption capabilities.

[0038] Fifthly, embodiments of the present invention provide a routing addressing device, wherein a second network element includes the routing addressing device, comprising:

[0039] The second receiving module is used to receive a query message sent by the first network element. The query message is used to query routing information and status information. The status information is used to characterize whether the terminal and the target access side device have physical layer encryption capabilities. The second network element pre-stores the status information.

[0040] The query module is used to query the routing information and the status information;

[0041] The second sending module is used to send the routing information and the status information to the first network element.

[0042] Sixthly, embodiments of the present invention provide a routing addressing device, wherein a third network element includes the routing addressing device, comprising:

[0043] The third receiving module is used to receive first identification information sent by the target access side device, the first identification information being used to characterize whether the target access side device has physical layer encryption capability, and to receive second identification information sent by the terminal, the second identification information being used to characterize whether the terminal has physical layer encryption capability.

[0044] A generation module is used to generate status information based on the first identification information and the second identification information, wherein the status information is used to characterize whether the terminal and the target access side device have physical layer encryption capabilities;

[0045] The third sending module is used to send the status information to the second network element.

[0046] In a seventh aspect, embodiments of the present invention provide a network element device, the network element device being a first network element, comprising: a transceiver, a memory, a processor, and a computer program stored in the memory and executable on the processor;

[0047] The processor is configured to read a program from memory to implement the steps described in the first aspect of the method.

[0048] Eighthly, embodiments of the present invention provide a network element device, which is a second network element, including: a transceiver, a memory, a processor, and a computer program stored in the memory and executable on the processor;

[0049] The processor is configured to read a program from memory to implement the steps described in the second aspect of the method.

[0050] Ninthly, embodiments of the present invention provide a network element device, which is a third network element, including: a transceiver, a memory, a processor, and a computer program stored in the memory and executable on the processor;

[0051] The processor is used to read a program from memory to implement the steps in the method described in the third aspect.

[0052] In a tenth aspect, embodiments of the present invention provide a readable storage medium for storing a program, which, when executed by a processor, implements the steps of the method described in the first, second, or third aspect.

[0053] In this embodiment, the first network element sends a query message to the second network element, the query message being used to query routing information and status information; the first network element receives the routing information and status information sent by the second network element. When both the terminal and the target access-side device have physical layer encryption capabilities, the first network element instructs the target access-side device and the terminal to negotiate and enable physical layer encryption. Through this setting, the first network element can pre-determine whether to trigger the target access-side device and the terminal to negotiate and enable physical layer encryption during the routing stage, improving the efficiency of the determination and effectively reducing the connection latency for enabling terminal physical layer encryption. Attached Figure Description

[0054] To more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the description of the embodiments of the present invention will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0055] Figure 1 This is one of the flowcharts of the routing addressing method provided in the embodiments of the present invention;

[0056] Figure 2 This is the second flowchart of the routing addressing method provided in the embodiments of the present invention;

[0057] Figure 3 This is the third flowchart of the routing addressing method provided in the embodiments of the present invention;

[0058] Figure 4 This is the fourth flowchart of the routing addressing method provided in the embodiments of the present invention;

[0059] Figure 5 This is the fifth flowchart of the routing addressing method provided in the embodiments of the present invention;

[0060] Figure 6 This is the sixth flowchart of the routing addressing method provided in the embodiments of the present invention;

[0061] Figure 7 This is the seventh flowchart of the routing addressing method provided in the embodiments of the present invention;

[0062] Figure 8 This is one of the structural diagrams of the routing addressing device provided in the embodiments of the present invention;

[0063] Figure 9 This is the second structural diagram of the routing addressing device provided in the embodiments of the present invention;

[0064] Figure 10 This is the third structural diagram of the routing addressing device provided in the embodiments of the present invention;

[0065] Figure 11 This is one of the structural diagrams of the network element device provided in the embodiments of the present invention;

[0066] Figure 12 This is the second structural diagram of the network element device provided in the embodiment of the present invention;

[0067] Figure 13 This is the third structural diagram of the network element device provided in the embodiments of the present invention. Detailed Implementation

[0068] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, not all embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of this application are within the scope of protection of this application.

[0069] The terms "first," "second," etc., used in the specification and claims of this application are used to distinguish similar objects and not to describe a specific order or sequence. It should be understood that such terms can be used interchangeably where appropriate so that embodiments of this application can be implemented in orders other than those illustrated or described herein, and the objects distinguished by "first" and "second" are generally of the same class, not limited in number; for example, a first object can be one or more. Furthermore, in the specification and claims, "and / or" indicates at least one of the connected objects, and the character " / " generally indicates that the preceding and following objects are in an "or" relationship.

[0070] This invention provides a routing addressing method, apparatus, and related equipment to solve the problem of long latency in enabling physical layer encryption.

[0071] See Figure 1 , Figure 1 This is one of the flowcharts of a routing addressing method provided in an embodiment of the present invention, used for a first network element, such as... Figure 1 As shown, the method includes the following steps:

[0072] Step 101: Send a query message to the second network element. The query message is used to query routing information and status information. The status information is used to characterize whether the terminal and the target access side device have physical layer encryption capabilities. The target access side device is the access side device to which the terminal accesses. The second network element pre-stores the status information.

[0073] Step 102: Receive the routing information and status information sent by the second network element.

[0074] Step 103: If both the terminal and the target access device have physical layer encryption capabilities, instruct the target access device and the terminal to negotiate and enable physical layer encryption.

[0075] The first network element sends a query message to the second network element, and the second network element receives the query message from the first network element. The query message is used to query routing information and status information. The second network element responds to the query message, querying routing information and status information.

[0076] It should be understood that the query message carries terminal identification information, which is used to identify the terminal corresponding to the routing information and status information to be queried. The target access-side device is the access-side device that the terminal is currently connected to.

[0077] In this embodiment, the specific process by which the second network element queries routing information in response to a query message can be found in the descriptions in related technologies, and will not be repeated here. For example, in some embodiments, the second network element can query routing information based on the Session Initialization Protocol (SIP).

[0078] For ease of understanding, the physical layer encryption capability will be explained first. In some embodiments, the physical layer encryption capability may also be referred to as wireless physical layer encryption capability. In related technologies, by designing and modifying the terminal and access-side equipment, the terminal and access-side equipment can be endowed with physical layer encryption capability. The physical layer encryption negotiation operation between the terminal and access-side equipment will only be triggered if both the terminal and access-side equipment possess physical layer encryption capability. Only if the negotiation is successful can the terminal's physical layer encryption be successfully enabled.

[0079] The status information is used to characterize whether the terminal and the target access-side device have physical layer encryption capabilities. In some embodiments, the status information includes terminal identification information and access-side device identification information, wherein the terminal identification information is used to identify whether the terminal has physical layer encryption capabilities, and the access-side device identification information is used to identify whether the target access-side device has physical layer encryption capabilities.

[0080] In other embodiments, the status information is integrated identification information used to characterize whether the terminal supports enabling physical layer encryption in the current access environment. It should be understood that as the physical location of the terminal moves, the terminal may be in different access environments at different times, that is, the access-side devices accessed by the terminal may be different.

[0081] The status information is used to characterize that the terminal has physical layer encryption capability only when the terminal has physical layer encryption capability and the target access device to which the current terminal is connected also has physical layer encryption capability.

[0082] After obtaining the routing and status information, the second network element sends the routing and status information to the first network element. The first network element receives the routing and status information sent by the second network element. Upon receiving the routing and status information, the first network element determines, based on the status information, whether both the terminal and the target access-side device have physical layer encryption capabilities.

[0083] When both the terminal and the target access-side device have physical layer encryption capabilities, the first network element instructs the target access-side device and the terminal to negotiate and enable physical layer encryption. This method triggers the physical layer encryption negotiation operation between the terminal and the access-side device.

[0084] In this embodiment, the first network element sends a query message to the second network element, the query message being used to query routing information and status information; the first network element receives the routing information and status information sent by the second network element. When both the terminal and the target access-side device have physical layer encryption capabilities, the first network element instructs the target access-side device and the terminal to negotiate and enable physical layer encryption. Through this setting, the first network element can pre-determine whether to trigger the target access-side device and the terminal to negotiate and enable physical layer encryption during the routing stage, improving the efficiency of the determination and effectively reducing the connection latency for enabling terminal physical layer encryption.

[0085] Optionally, in some embodiments, step 101 includes:

[0086] Upon receiving an invitation message from the network server, a query message is sent to the second network element. The invitation message carries first indication information, which instructs the first network element to query the status information.

[0087] Step 103 includes: when both the terminal and the target access device have physical layer encryption capabilities, sending an invitation message carrying second indication information to the target access device, wherein the second indication information is used to instruct the target access device and the terminal to negotiate to enable physical layer encryption.

[0088] In this embodiment, upon receiving an invitation message from the network server, the first network element sends a query message to the second network element and receives routing information and status information from the second network element. When both the terminal and the target access-side device have physical layer encryption capabilities, the first network element sends an invitation message carrying indication information to the target access-side device. This indication information instructs the target access-side device and the terminal to negotiate and enable physical layer encryption.

[0089] It should be understood that the invitation message can be the signaling specified in the relevant protocol. For example, in some embodiments, the invitation message is the INVITE message in the SIP protocol. In this embodiment, by carrying first indication information in the invitation message, the first network element can be instructed to query status information without modifying the signaling itself.

[0090] It should be understood that the first indication information is used to instruct the first network element to query the status information, and then instruct the first network element to instruct the target access-side device and the terminal to negotiate to enable physical layer encryption. For example, in some embodiments, the first indication information is an indication to enable wireless physical layer encryption negotiation.

[0091] In this embodiment, upon receiving an invitation message carrying first indication information, the first network element sends a query message to the second network element, thereby instructing the target access-side device and the terminal to negotiate and enable physical layer encryption. When physical layer encryption is not required, the invitation message does not carry the first indication information. This configuration improves the flexibility and convenience of enabling physical layer encryption.

[0092] Optionally, in some embodiments, after step 102, the method further includes:

[0093] If at least one of the terminal and the target access-side device does not have physical layer encryption capability, a first invitation reply message carrying a first result is sent to the network server. The first result is used to indicate that the physical layer encryption of the target access-side device and the terminal has failed to be enabled.

[0094] If at least one of the terminal and the target access-side device lacks physical layer encryption capability, it is known that the terminal cannot enable physical layer encryption. In this case, the first network element directly sends a first invitation reply message carrying the first result to the network server to notify the network server that the physical layer encryption of the target access-side device and the terminal has failed to be enabled.

[0095] It should be noted that the first invitation reply message is the response message corresponding to the invitation message, and its specific content can be found in the description in related technologies, which will not be repeated here. For example, in some embodiments, the invitation message is an INVITE message, and the first invitation reply message is a 183 message carrying a first result.

[0096] In this embodiment, when at least one of the terminal and the target access-side device lacks physical layer encryption capability, the first network element sends a first invitation reply message carrying a first result to the network server. The first result indicates that physical layer encryption has failed to be enabled between the target access-side device and the terminal. Through this setting, the first network element can directly determine that physical layer encryption has failed to be enabled even when at least one of the terminal and the target access-side device lacks physical layer encryption capability, without waiting for a reply from the access-side device. This allows for advance judgment on whether service can be continued, effectively reducing the latency of the called party enabling wireless physical layer encryption and improving system paging efficiency.

[0097] Optionally, in some embodiments, after step 103, the method further includes:

[0098] The system receives a second invitation reply message from the target access side device, which carries a second result. The second result is used to characterize the physical layer encryption negotiation start result between the target access side device and the terminal.

[0099] Send the second invitation reply message carrying the second result to the network server.

[0100] It should be understood that when both the terminal and the target access-side device have physical layer encryption capabilities, a physical layer encryption negotiation operation between the terminal and the target access-side device can be triggered. However, depending on the negotiation result, the result of the physical layer encryption negotiation between the target access-side device and the terminal can be either successful or unsuccessful.

[0101] It should be noted that the second invitation reply message is the response message corresponding to the invitation message, and its specific content can be found in the description in related technologies, which will not be repeated here. For example, in some embodiments, the invitation message is an INVITE message, and the second invitation reply message is a 183 message carrying a second result.

[0102] In related technologies, the second network element does not pre-store status information, thus preventing it from determining whether the terminal has physical layer encryption capabilities in the current access environment. Furthermore, the first network element cannot obtain status information from the second network element. When either the terminal or the target access-side device does not support physical layer encryption, the first network element still needs to send an invitation message to the terminal before determining whether to enable the called party's physical layer encryption service. This results in a longer latency for enabling physical layer encryption and lower routing efficiency.

[0103] In this embodiment of the application, the second network element has pre-stored status information. Therefore, the first network element can determine whether the terminal has physical layer encryption capability in the current access environment by querying the status information from the second network element, thereby improving routing efficiency.

[0104] See Figure 2 , Figure 2 This is a second flowchart of a routing addressing method provided in an embodiment of the present invention, used for a second network element, such as... Figure 2 As shown, the method includes the following steps:

[0105] Step 201: Receive a query message sent by the first network element. The query message is used to query routing information and status information. The status information is used to characterize whether the terminal and the target access side device have physical layer encryption capabilities. The second network element pre-stores the status information.

[0106] Step 202: Query the routing information and the status information.

[0107] Step 203: Send the routing information and the status information to the first network element.

[0108] It should be understood that this embodiment is as a comparison with... Figure 1 The implementation method corresponding to the second network element side of the illustrated embodiment can be found in the following examples. Figure 1 The relevant descriptions in the illustrated embodiments are provided. This implementation method can also be applied to... Figure 1 The corresponding embodiments achieve the same beneficial effects.

[0109] It should be understood that the specific structure of the second network element is not limited here. For example, in some embodiments, the second network element is a Home Subscriber Server (HSS) or a Unified Data Management (UDM).

[0110] Optionally, in some embodiments, before step 201, the method further includes:

[0111] Receive status information sent by a third network element, the status information being used to characterize whether the terminal and the target access-side device have physical layer encryption capabilities;

[0112] Store the status information.

[0113] It should be understood that, in some embodiments, prior to step 201, the method further includes:

[0114] The system receives first identification information sent by a target access-side device, the first identification information being used to characterize whether the target access-side device has physical layer encryption capability, and receives second identification information sent by a terminal, the second identification information being used to characterize whether the terminal has physical layer encryption capability.

[0115] Status information is generated based on the first identification information and the second identification information. The status information is used to characterize whether the terminal and the target access side device have physical layer encryption capabilities.

[0116] In this embodiment, the terminal and the target access-side device directly send the first identification information and the second identification information to the second network element. The second network element performs information integration of the first identification information and the second identification information.

[0117] See Figure 3 , Figure 3 This is the third flowchart of a routing addressing method provided in an embodiment of the present invention, used for a third network element, such as... Figure 3 As shown, the method includes the following steps:

[0118] The system receives first identification information sent by a target access-side device, the first identification information being used to characterize whether the target access-side device has physical layer encryption capability, and receives second identification information sent by a terminal, the second identification information being used to characterize whether the terminal has physical layer encryption capability.

[0119] Status information is generated based on the first identification information and the second identification information. The status information is used to characterize whether the terminal and the target access side device have physical layer encryption capabilities.

[0120] The status information is sent to the second network element.

[0121] It should be understood that the specific structure of the third network element is not limited here. For example, in some embodiments, the third network element is a Mobility Management Entity (MME) or an Authentication Management Function (AMF).

[0122] It should be noted that in some embodiments, the second network element is HSS and the third network element is MME. In other embodiments, the second network element is UDM and the third network element is AMF.

[0123] Optionally, in some embodiments, receiving the first identification information sent by the target access side device includes:

[0124] Receive a first network access request message carrying the first identification information sent by the target access side device.

[0125] When an access-side device accesses the network and establishes a connection with a network-side device (such as a third network element), it carries first identification information in its first network access request to report whether it has physical layer encryption capabilities.

[0126] It should be noted that the specific content of the first network access request message can be found in the description in the relevant technologies, and will not be repeated here. For example, the first network access request is a request message (S1 SETUP REQUEST / NG SETUP REQUEST) sent in the network access procedure (S1 Setup procedure / NG Setup procedure) when the access side device (Evolved NodeB (eNB) / Next Generation Radio Access Network (NG-RAN)) accesses the network and establishes a connection with the network side in the 4th Generation mobile communication technology (4G) / 5th Generation mobile communication technology (5G) and the future 6th Generation (6G) mobile communication system.

[0127] In this embodiment, when an access-side device accesses the network and establishes a connection with a network-side device, the access-side device sends a first network access request message carrying first identification information to a third network element. Through this setting, when a target access-side device accesses the network, it reports to the third network element whether it possesses physical layer encryption capabilities, allowing the third network element to pre-store the first identification information without repeatedly querying whether the target access-side device possesses physical layer encryption capabilities.

[0128] Optionally, in some embodiments, receiving the first identification information sent by the target access side device includes:

[0129] Receive a configuration update message carrying the first identification information sent by the target access side device.

[0130] When an access-side device undergoes a configuration update, it needs to report a configuration update message to a third-party network element. The configuration update message carries the first identification information, which enables the third-party network element to update the access-side device's information in a timely manner, ensuring the accuracy and real-time nature of the first identification information.

[0131] It should be noted that the specific content of the configuration update message can be found in the descriptions in the relevant technologies, and will not be repeated here. For example, the configuration update message is a request message (ENB CONFIGURAION UPDATE / RANCONFIGURAION UPDATE) sent in the configuration update procedure (eNB Configuration Update procedure / RANConfiguration Update procedure) when the access side equipment (eNB / NG-RAN) undergoes a configuration update in 4G / 5G and future 6G mobile communication systems.

[0132] Optionally, in some embodiments, the second identification information sent by the receiving terminal includes:

[0133] Receive a second network access request message sent by the terminal, which carries the second identification information.

[0134] When a terminal accesses the network and establishes a connection with a network-side device (such as a third network element), it carries second identification information in the second network access request to report whether it has physical layer encryption capabilities.

[0135] It should be noted that the specific content of the first network access request message can be found in the description in the relevant technologies, and will not be repeated here. For example, the second network access request is the request message (Attach Request / Registration Request) involved in the network access procedure (Attach procedure / Registration procedure) of the terminal in the 4 / 5G mobile communication system.

[0136] It should be noted that all messages sent by the terminal to the third network element need to be forwarded through the access-side device to which the terminal is currently connected. Therefore, the third network element can determine the target access-side device after receiving the message sent by the terminal.

[0137] In this embodiment, when a terminal accesses the network and establishes a connection with the network-side device, the terminal sends a second network access request message carrying the second identification information to the third network element. Through this setting, when the terminal accesses the network, it reports to the third network element whether it possesses physical layer encryption capabilities, allowing the third network element to pre-store the second identification information without repeatedly querying whether the terminal has physical layer encryption capabilities.

[0138] Optionally, in some embodiments, the second identification information sent by the receiving terminal includes:

[0139] Receive the tracking area update request message sent by the terminal, which carries the second identification information.

[0140] It should be noted that the specific content of the Tracking Area Update Request message can be found in the description in the relevant technologies, and will not be repeated here. For example, the Tracking Area Update Request message is a request message (TAU Request) sent in the 4G Tracking Area Update procedures.

[0141] In this embodiment of the application, when the terminal is tracking an area update, it can report whether it has physical layer encryption capability by carrying the second identification information in the tracking area update request message. This enables the third network element to update the terminal's information in a timely manner, ensuring the accuracy and real-time nature of the second identification information.

[0142] To facilitate understanding, examples will be provided below. For instance, please refer to... Figure 4 and Figure 5 In this embodiment, the third network element is MME / AMF, and the second network element is HSS / UDM. The access-side device (Access Stratum (AS)) has reported whether it has physical layer encryption capability through the first identification information when joining the network, and the MME / AMF stores the first identification information.

[0143] After the MME / AMF receives the second identification information reported by the terminal upon network access, it queries the MME / AMF to check whether the access-side device currently accessed by the terminal has physical layer encryption capabilities. If the access-side device currently accessed by the terminal has physical layer encryption capabilities, it generates status information characterizing that the terminal has physical layer encryption capabilities in the current access environment, and reports this status information to the HSS / UDM via an Update Location Request message or a Nudm_UECM_Registration message. The HSS / UDM stores this status information. For example, this status information is "PHYEncryption Status = Support".

[0144] If the access-side device currently connected to by the terminal does not have physical layer encryption capabilities, a status information indicating that the terminal does not have physical layer encryption capabilities in the current access environment is generated, and this status information is reported to the HSS / UDM via an Update LocationRequest message or a Nudm_UECM_Registration message. The HSS / UDM stores this status information. For example, this status information is "PHY Encryption Status = No Support".

[0145] With the above-mentioned improved design, it will no longer only report whether the terminal itself has physical layer encryption capabilities, but will also report the status information of whether the terminal supports enabling physical layer encryption in the current access environment, so as to improve the efficiency of service activation judgment when addressing the called service in the future.

[0146] To facilitate understanding, examples will be provided below. For instance, please refer to... Figure 6 In this embodiment, the third network element is the MME, and the second network element is the HSS. The AS has reported whether it has physical layer encryption capability through the first identification information when joining the network, and the MME / AMF stores the first identification information.

[0147] The location update process in a 4G mobile communication system is similar to the network access process. When the MME receives a location update from the terminal, it first determines whether the access-side device (ASM) the terminal is currently connected to has physical layer encryption (PHY) capabilities. If the ASM does have PHY, it generates status information indicating that the terminal possesses PHY capabilities in the current access environment and reports this status information to the HSS via an Update Location Request message. The HSS stores this status information. For example, this status information is "PHYEncryption Status = Support".

[0148] If the access-side device currently connected to by the terminal does not have physical layer encryption capabilities, a status information indicating that the terminal does not have physical layer encryption capabilities in the current access environment is generated, and this status information is reported to the HSS via an Update Location Request message. The HSS stores this status information. For example, this status information is "PHY Encryption Status = No Support".

[0149] As a specific implementation example, the following description uses the called party service routing process as an example. Please refer to [link / reference]. Figure 7In this embodiment, the first network element is the Interrogating-Call Session Control Function (I-CSCF), the second network element is the HSS, and the target access side device is denoted as AS.

[0150] like Figure 7 As shown, the I-CSCF receives an INVITE message (exemplarily, the INVITE message is INVITE from user1 to sip:game1@home1.net) sent by the IP Multimedia Subsystem (IMS) network server. This INVITE message carries first indication information, which, exemplarily, is an indication to enable wireless physical layer encryption negotiation.

[0151] After receiving the INVITE message, the I-CSCF sends a query message (e.g., a Query command) to the HSS. The HSS responds to the Query command by querying routing information (AS address) and status information, and then sends the retrieved routing and status information back to the I-CSCF via a Response command. The status information indicates whether the called terminal supports enabling physical layer encryption in the current access environment.

[0152] After receiving the status information, the I-CSCF determines whether the called terminal supports enabling physical layer encryption in the current access environment (for example, the status information is PHY Encryption Status = Support or PHY Encryption Status = No Support).

[0153] If the I-CSCF determines that the called terminal supports enabling physical layer encryption in the current access environment (this status information is PHY Encryption Status = Support), the I-CSCF, based on the routing information obtained from the query, forwards the received INVITE message carrying the instruction to enable wireless physical layer encryption negotiation to the target access-side device for subsequent service processing. After the target access-side device forwards the message to the terminal, the terminal processes the called service's wireless physical layer encryption enabling procedure and then returns a 183 message carrying the second result to the calling side (IMS network server).

[0154] If the I-CSCF determines that the called terminal does not support enabling physical layer encryption in the current access environment (the status information is PHY Encryption Status = No Support), it will directly return a 183 message carrying the first result to the calling side.

[0155] In this embodiment, the determination of whether the called terminal supports enabling physical layer encryption in the current access environment is moved forward to the routing addressing process (I-SCSF to HSS / UDM routing query stage) for the called user, thereby realizing the determination of whether the service can be continued in advance, effectively reducing the latency of the called party enabling wireless physical layer encryption and improving the paging efficiency of the system.

[0156] See Figure 8 , Figure 8 This is one of the structural schematic diagrams of a routing addressing device provided in an embodiment of the present invention, wherein the first network element includes the routing addressing device 800. For example... Figure 8 As shown, the routing addressing device 800 includes:

[0157] The first sending module 801 is used to send a query message to the second network element. The query message is used to query routing information and status information. The status information is used to characterize whether the terminal and the target access side device have physical layer encryption capabilities. The target access side device is the access side device accessed by the terminal. The second network element pre-stores the status information.

[0158] The first receiving module 802 is used to receive the routing information and the status information sent by the second network element;

[0159] The instruction module 803 is used to instruct the target access side device and the terminal to negotiate and enable physical layer encryption when both the terminal and the target access side device have physical layer encryption capabilities.

[0160] Optionally, the first transmitting module 801 includes:

[0161] The first sending unit is configured to send a query message to the second network element upon receiving an invitation message from the network server. The invitation message carries first indication information, which instructs the first network element to query the status information.

[0162] The indicator module 803 includes:

[0163] The second sending unit is configured to send an invitation message carrying second indication information to the target access side device when both the terminal and the target access side device have physical layer encryption capabilities. The second indication information is used to instruct the target access side device and the terminal to negotiate to enable physical layer encryption.

[0164] Optionally, the routing addressing device 800 further includes:

[0165] The fourth sending module is used to send a first invitation reply message carrying a first result to the network server when at least one of the terminal and the target access side device does not have physical layer encryption capability. The first result is used to indicate that the physical layer encryption of the target access side device and the terminal has failed to be enabled.

[0166] Optionally, the routing addressing device 800 method further includes:

[0167] The fourth receiving module is used to receive a second invitation reply message carrying a second result sent by the target access side device, wherein the second result is used to characterize the physical layer encryption negotiation start result between the target access side device and the terminal;

[0168] The fifth sending module is used to send the second invitation reply message carrying the second result to the network server.

[0169] The routing addressing device 800 can achieve Figure 1 The various processes implemented in the method embodiments shown can achieve the same beneficial effects, and will not be described again here to avoid repetition.

[0170] See Figure 9 , Figure 9 This is a second schematic diagram of a routing addressing device provided in an embodiment of the present invention, wherein the second network element includes the routing addressing device 900. For example... Figure 9 As shown, the routing addressing device 900 includes:

[0171] The second receiving module 901 is used to receive a query message sent by the first network element. The query message is used to query routing information and status information. The status information is used to characterize whether the terminal and the target access side device have physical layer encryption capabilities. The second network element pre-stores the status information.

[0172] Query module 902 is used to query the routing information and the status information;

[0173] The second sending module 903 is used to send the routing information and the status information to the first network element.

[0174] Optionally, the routing addressing device 900 further includes:

[0175] The fifth receiving module is used to receive status information sent by the third network element. The status information is used to characterize whether the terminal and the target access side device have physical layer encryption capabilities.

[0176] A storage module is used to store the status information.

[0177] The routing addressing device 900 can achieve Figure 2The various processes implemented in the method embodiments shown can achieve the same beneficial effects, and will not be described again here to avoid repetition.

[0178] See Figure 10 , Figure 10 This is a third schematic diagram of a routing addressing device provided in an embodiment of the present invention, wherein the second network element includes the routing addressing device 1000. Figure 10 As shown, the routing addressing device 1000 includes:

[0179] The third receiving module 1001 is used to receive first identification information sent by the target access side device, the first identification information being used to characterize whether the target access side device has physical layer encryption capability, and to receive second identification information sent by the terminal, the second identification information being used to characterize whether the terminal has physical layer encryption capability.

[0180] The generation module 1002 is used to generate status information based on the first identification information and the second identification information, wherein the status information is used to characterize whether the terminal and the target access side device have physical layer encryption capabilities;

[0181] The third sending module 1003 is used to send the status information to the second network element.

[0182] Optionally, the third receiving module 1001 is specifically used for:

[0183] Receive a first network access request message carrying the first identification information sent by the target access side device, and / or receive a configuration update message carrying the first identification information sent by the target access side device.

[0184] Optionally, the third receiving module 1001 is specifically used for:

[0185] Receive a second network access request message carrying the second identification information sent by the terminal, and / or receive a tracking area update request message carrying the second identification information sent by the terminal.

[0186] The routing addressing device 100 can achieve Figure 3 The various processes implemented in the method embodiments shown can achieve the same beneficial effects, and will not be described again here to avoid repetition.

[0187] This invention also provides a network element device, which is a first network element. The network element device includes: a processor, a memory, and a program stored in the memory and executable on the processor. When the program is executed by the processor, it implements the above-described... Figure 1 The various processes of the embodiments shown can achieve the same technical effect, and will not be described again here to avoid repetition.

[0188] For details, see Figure 11 As shown, this embodiment of the invention also provides a network element device, which is a first network element. The network element device includes a bus 1101, a transceiver 1102, an antenna 1103, a bus interface 1104, a processor 1105, and a memory 1106.

[0189] The transceiver 1102 is used to send a query message to the second network element. The query message is used to query routing information and status information. The status information is used to characterize whether the terminal and the target access side device have physical layer encryption capabilities. The target access side device is the access side device to which the terminal accesses. The second network element pre-stores the status information.

[0190] Receive the routing information and status information sent by the second network element;

[0191] The processor 1105 is configured to instruct the target access side device and the terminal to negotiate and enable physical layer encryption when both the terminal and the target access side device have physical layer encryption capabilities.

[0192] Optionally, the transceiver 1102 is further configured to:

[0193] Upon receiving an invitation message from the network server, a query message is sent to the second network element. The invitation message carries first indication information, which instructs the first network element to query the status information.

[0194] When both the terminal and the target access device have physical layer encryption capabilities, an invitation message carrying second indication information is sent to the target access device. The second indication information is used to instruct the target access device and the terminal to negotiate to enable physical layer encryption.

[0195] Optionally, the transceiver 1102 is further configured to:

[0196] If at least one of the terminal and the target access-side device does not have physical layer encryption capability, a first invitation reply message carrying a first result is sent to the network server. The first result is used to indicate that the physical layer encryption of the target access-side device and the terminal has failed to be enabled.

[0197] Optionally, the transceiver 1102 is further configured to:

[0198] The system receives a second invitation reply message from the target access side device, which carries a second result. The second result is used to characterize the physical layer encryption negotiation start result between the target access side device and the terminal.

[0199] Send the second invitation reply message carrying the second result to the network server.

[0200] exist Figure 11 In this document, a bus architecture (represented by bus 1101) is used. Bus 1101 may include any number of interconnected buses and bridges, linking various circuits including one or more processors 1105 (represented by processor 1105) and memory 1106 (represented by memory 1106). Bus 1101 may also link various other circuits such as peripheral devices, voltage regulators, and power management circuits, which are well known in the art and therefore will not be described further herein. Bus interface 1104 provides an interface between bus 1101 and transceiver 1102. Transceiver 1102 may be a single element or multiple elements, such as multiple receivers and transmitters, providing a unit for communicating with various other devices over a transmission medium. Data processed by processor 1105 is transmitted over a wireless medium via antenna 1103, which further receives data and transmits it to processor 1105.

[0201] Processor 1105 is responsible for managing bus 1101 and general processing, and can also provide various functions, including timing, peripheral interface, voltage regulation, power management, and other control functions. Memory 1106 can be used to store data used by processor 1105 during operation.

[0202] Optionally, the processor 1105 may be a central processing unit (CPU), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA), or a complex programmable logic device (CPLD).

[0203] This invention also provides a network element device, which is a second network element. The network element device includes: a processor, a memory, and a program stored in the memory and executable on the processor. When the program is executed by the processor, it implements the above-described... Figure 2 The various processes of the embodiments shown can achieve the same technical effect, and will not be described again here to avoid repetition.

[0204] For details, see Figure 12As shown, this embodiment of the invention also provides a network element device, which is a second network element. The network element device includes a bus 1201, a transceiver 1202, an antenna 1203, a bus interface 1204, a processor 1205, and a memory 1206.

[0205] The transceiver 1202 is used to receive a query message sent by the first network element. The query message is used to query routing information and status information. The status information is used to characterize whether the terminal and the target access side device have physical layer encryption capabilities. The second network element pre-stores the status information.

[0206] Send the routing information and the status information to the first network element;

[0207] The processor 1205 is used to query the routing information and the status information;

[0208] Optionally, the transceiver 1202 is further configured to:

[0209] Receive status information sent by a third network element, the status information being used to characterize whether the terminal and the target access-side device have physical layer encryption capabilities;

[0210] The processor 1205 is also used to store the status information.

[0211] exist Figure 12 In this document, a bus architecture (represented by bus 1201) is used. Bus 1201 can include any number of interconnected buses and bridges, linking various circuits including one or more processors 1205 (represented by processor 1205) and memory 1206. Bus 1201 can also link various other circuits such as peripheral devices, voltage regulators, and power management circuits, which are well known in the art and therefore will not be described further herein. Bus interface 1204 provides an interface between bus 1201 and transceiver 1202. Transceiver 1202 can be a single element or multiple elements, such as multiple receivers and transmitters, providing a unit for communicating with various other devices over a transmission medium. Data processed by processor 1205 is transmitted over a wireless medium via antenna 1203, which further receives data and transmits it to processor 1205.

[0212] Processor 1205 is responsible for managing bus 1201 and general processing, and can also provide various functions, including timing, peripheral interface, voltage regulation, power management, and other control functions. Memory 1206 can be used to store data used by processor 1205 during operation.

[0213] Alternatively, the processor 1205 may be a CPU, ASIC, FPGA, or CPLD.

[0214] This invention also provides a network element device, which is a third network element. The network element device includes: a processor, a memory, and a program stored in the memory and executable on the processor. When the program is executed by the processor, it implements the above-described... Figure 3 The various processes of the embodiments shown can achieve the same technical effect, and will not be described again here to avoid repetition.

[0215] For details, see Figure 13 As shown, this embodiment of the invention also provides a network element device, which is a third network element. The network element device includes a bus 1301, a transceiver 1302, an antenna 1303, a bus interface 1304, a processor 1305, and a memory 1306.

[0216] The transceiver 1302 is used for:

[0217] The system receives first identification information sent by a target access-side device, the first identification information being used to characterize whether the target access-side device has physical layer encryption capability, and receives second identification information sent by a terminal, the second identification information being used to characterize whether the terminal has physical layer encryption capability.

[0218] Send the status information to the second network element;

[0219] The processor 1305 is used to generate status information based on the first identification information and the second identification information, and the status information is used to characterize whether the terminal and the target access side device have physical layer encryption capabilities.

[0220] Optionally, the transceiver 1302 is further configured to:

[0221] Receive a first network access request message carrying the first identification information sent by the target access side device, and / or receive a configuration update message carrying the first identification information sent by the target access side device.

[0222] Optionally, the transceiver 1302 is further configured to:

[0223] Receive a second network access request message carrying the second identification information sent by the terminal, and / or receive a tracking area update request message carrying the second identification information sent by the terminal.

[0224] exist Figure 13In this document, a bus architecture (represented by bus 1301) is used. Bus 1301 can include any number of interconnected buses and bridges, linking various circuits including one or more processors 1305 (represented by processor 1305) and memory 1306. Bus 1301 can also link various other circuits such as peripheral devices, voltage regulators, and power management circuits, which are well known in the art and therefore will not be described further herein. Bus interface 1304 provides an interface between bus 1301 and transceiver 1302. Transceiver 1302 can be a single element or multiple elements, such as multiple receivers and transmitters, providing a unit for communicating with various other devices over a transmission medium. Data processed by processor 1305 is transmitted over a wireless medium via antenna 1303, which further receives data and transmits it to processor 1305.

[0225] Processor 1305 manages bus 1301 and general processing, and also provides various functions, including timing, peripheral interface, voltage regulation, power management, and other control functions. Memory 1306 can be used to store data used by processor 1305 during operation.

[0226] Alternatively, the processor 1305 may be a CPU, ASIC, FPGA, or CPLD.

[0227] This invention also provides a computer-readable storage medium storing a computer program. When executed by a processor, this computer program implements the various processes of the above-described encryption negotiation method embodiments and achieves the same technical effects. To avoid repetition, it will not be described again here. The computer-readable storage medium may be, for example, ROM, RAM, a magnetic disk, or an optical disk.

[0228] In the several embodiments provided in this application, it should be understood that the disclosed methods and apparatus can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be through some interfaces; the indirect coupling or communication connection between devices or units may be electrical, mechanical, or other forms.

[0229] Furthermore, the functional units in the various embodiments of the present invention can be integrated into one processing unit, or each unit can be physically comprised separately, or two or more units can be integrated into one unit. The integrated unit described above can be implemented in hardware or in the form of hardware plus software functional units.

[0230] The integrated units implemented as software functional units described above can be stored in a computer-readable storage medium. These software functional units, stored in a storage medium, include several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute some steps of the transmission and reception methods described in the various embodiments of this invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0231] The above description represents the preferred embodiments of the present invention. It should be noted that those skilled in the art can make various improvements and modifications without departing from the principles of the present invention, and these improvements and modifications should also be considered within the scope of protection of the present invention.

Claims

1. A routing addressing method, applied to a first network element, characterized in that, include: A query message is sent to the second network element. The query message is used to query routing information and status information. The status information is used to characterize whether the terminal and the target access side device have physical layer encryption capabilities. The target access side device is the access side device to which the terminal accesses. The second network element pre-stores the status information. Receive the routing information and status information sent by the second network element; If both the terminal and the target access device have physical layer encryption capabilities, instruct the target access device and the terminal to negotiate and enable physical layer encryption.

2. The method according to claim 1, characterized in that, Sending a query message to the second network element includes: Upon receiving an invitation message from the network server, a query message is sent to the second network element. The invitation message carries first indication information, which instructs the first network element to query the status information. When both the terminal and the target access-side device have physical layer encryption capabilities, instructing the target access-side device and the terminal to negotiate and enable physical layer encryption includes: When both the terminal and the target access device have physical layer encryption capabilities, an invitation message carrying second indication information is sent to the target access device. The second indication information is used to instruct the target access device and the terminal to negotiate to enable physical layer encryption.

3. The method according to claim 2, characterized in that, After receiving the routing information and status information sent by the second network element, the method further includes: If at least one of the terminal and the target access-side device does not have physical layer encryption capability, a first invitation reply message carrying a first result is sent to the network server. The first result is used to indicate that the physical layer encryption of the target access-side device and the terminal has failed to be enabled.

4. The method according to claim 2, characterized in that, When both the terminal and the target access-side device have physical layer encryption capabilities, after instructing the target access-side device and the terminal to negotiate and enable physical layer encryption, the method further includes: The system receives a second invitation reply message from the target access side device, which carries a second result. The second result is used to characterize the physical layer encryption negotiation start result between the target access side device and the terminal. Send the second invitation reply message carrying the second result to the network server.

5. A routing addressing method applied to a second network element, characterized in that, include: The first network element receives a query message sent by the second network element. The query message is used to query routing information and status information. The status information is used to characterize whether the terminal and the target access side device have physical layer encryption capabilities. The second network element pre-stores the status information. Query the routing information and the status information; The routing information and the status information are sent to the first network element.

6. The method according to claim 5, characterized in that, Before receiving the query message sent by the first network element, the method further includes: Receive status information sent by a third network element, the status information being used to characterize whether the terminal and the target access-side device have physical layer encryption capabilities; Store the status information.

7. A routing addressing method applied to a third network element, characterized in that, include: The system receives first identification information sent by a target access-side device, the first identification information being used to characterize whether the target access-side device has physical layer encryption capability, and receives second identification information sent by a terminal, the second identification information being used to characterize whether the terminal has physical layer encryption capability. Status information is generated based on the first identification information and the second identification information. The status information is used to characterize whether the terminal and the target access side device have physical layer encryption capabilities. The status information is sent to the second network element.

8. The method according to claim 7, characterized in that, The first identification information received from the target access side device includes: Receive a first network access request message carrying the first identification information sent by the target access side device, and / or receive a configuration update message carrying the first identification information sent by the target access side device.

9. The method according to claim 7, characterized in that, The second identification information sent by the receiving terminal includes: Receive a second network access request message carrying the second identification information sent by the terminal, and / or receive a tracking area update request message carrying the second identification information sent by the terminal.

10. A routing addressing device, applied to a first network element, characterized in that, include: The first sending module is used to send a query message to the second network element. The query message is used to query routing information and status information. The status information is used to characterize whether the terminal and the target access side device have physical layer encryption capabilities. The target access side device is the access side device to which the terminal accesses. The second network element pre-stores the status information. The first receiving module is used to receive the routing information and the status information sent by the second network element; The instruction module is used to instruct the target access side device and the terminal to negotiate and enable physical layer encryption when both the terminal and the target access side device have physical layer encryption capabilities.

11. A routing addressing device, applied to a second network element, characterized in that, include: The second receiving module is used to receive a query message sent by the first network element. The query message is used to query routing information and status information. The status information is used to characterize whether the terminal and the target access side device have physical layer encryption capabilities. The second network element pre-stores the status information. The query module is used to query the routing information and the status information; The second sending module is used to send the routing information and the status information to the first network element.

12. A routing addressing device, applied to a third network element, characterized in that, include: The third receiving module is used to receive first identification information sent by the target access side device, the first identification information being used to characterize whether the target access side device has physical layer encryption capability, and to receive second identification information sent by the terminal, the second identification information being used to characterize whether the terminal has physical layer encryption capability. A generation module is used to generate status information based on the first identification information and the second identification information, wherein the status information is used to characterize whether the terminal and the target access side device have physical layer encryption capabilities; The third sending module is used to send the status information to the second network element.

13. A network element device, wherein the network element device is a first network element, comprising: A transceiver, a memory, a processor, and a computer program stored in the memory and executable on the processor; characterized in that, The processor is configured to read a program from memory to implement the steps of the method as described in any one of claims 1 to 4.

14. A network element device, wherein the network element device is a second network element, comprising: A transceiver, a memory, a processor, and a computer program stored in the memory and executable on the processor; characterized in that, The processor is used to read a program from the memory to implement the steps of the method as described in claim 5 or 6.

15. A network element device, wherein the network element device is a third network element, comprising: A transceiver, a memory, a processor, and a computer program stored in the memory and executable on the processor; characterized in that, The processor is configured to read a program from memory to implement the steps of the method as described in any one of claims 7 to 9.

16. A readable storage medium for storing a program, characterized in that, When the program is executed by the processor, it implements the steps of the method as described in any one of claims 1 to 9.

Images