A method and system for emergency management based on data security

Abstract

The present invention provides an emergency management method and system based on data security, which belongs to the field of data security technology and is used to ensure data security when there is a security risk in the data network. The method includes: when the NM receives the first data emergency processing instruction from the application server AS, the NM receives the target service data of the user equipment UE; the first data emergency processing instruction is used to instruct the NM to store the service data of the UE in an emergency in the mobile communication network where the NM is located, the target service data is the service data that the UE should send to the data network DN through the user plane, the DN is a network outside the mobile communication network where the NM is located, and the AS is deployed in the DN; in response to the first data emergency processing instruction, the NM stores the target service data in the data management function UDM, and the UDM and the NM are located in the same mobile communication network.

Description

Technical Field

[0001] The present invention relates to the technical field of data security, and in particular to an emergency management method and system based on data security. Background Art

[0002] In today's information society, wireless communication networks have become an indispensable part of people's daily life and work. Wireless communication networks allow user equipment (UE) to communicate with peer devices in data networks (DN), such as servers and cloud platforms, through wireless transmission. Wireless communication networks usually include access networks (AN), such as base stations, and core networks (CN). The base station is the interface between the wireless communication network and the wired communication network, responsible for converting the UE's signal into a signal that can be processed by the wired communication network. The core network is responsible for managing, controlling and routing the data transmission of the UE.

[0003] Wireless communication networks can ensure network security and secure data transmission through security mechanisms. For example, encryption technology: by encrypting the transmitted data, even if the data is intercepted, it cannot be interpreted by unauthorized persons. Common encryption technologies include symmetric encryption, asymmetric encryption, and hybrid encryption. Authentication technology: through authentication technology, the identities of both parties in communication between UE and data network are verified to prevent identity impersonation and man-in-the-middle attacks. For example, digital certificates and public key infrastructure (PKI) are used for identity authentication. Security protocol: security protocols are designed to ensure the integrity and confidentiality of data transmission. For example, security protocols such as Transport Layer Security (TLS) and IPsec are used. Physical layer security technology: physical layer technologies such as radio frequency identification (RFID) and radio frequency fingerprint recognition are used for device identity authentication and data encryption.

[0004] However, if the data network cannot guarantee data security, even if the wireless communication network can guarantee data security, the data transmitted to the data network will still be subject to security risks. Summary of the invention

[0005] The embodiments of the present invention provide a data security-based emergency management method and system, which are used to ensure data security when there are security risks in the data network.

[0006] In order to achieve the above object, the present invention adopts the following technical scheme:

[0007] In a first aspect, a data security-based emergency management method is provided, which is applied to an access management function NM, and the method includes: when the NM receives a first data emergency processing indication from an application server AS, the NM receives target service data of a user equipment UE; the first data emergency processing indication is used to instruct the NM to urgently store the service data of the UE in a mobile communication network where the NM is located, and the target service data is service data that the UE should send to a data network DN through a user plane, and the DN is a network other than the mobile communication network where the NM is located, and the AS is deployed in the DN; in response to the first data emergency processing indication, the NM stores the target service data in a data management function UDM, and the UDM and the NM are located in the same mobile communication network.

[0008] Optionally, the target service data is data encrypted by the UE, and the NM stores the target service data in the UDM, including: the NM decrypts the target service data; and the NM stores the target service data in the UDM according to a failure in decrypting the target service data.

[0009] Optionally, the NM receives target service data of the UE, including: the NM receives a non-access layer NAS message from the UE, the NAS message includes an identifier of the UE and target service data; accordingly, the NM decrypts the target service data, including: the NM obtains the security context of the UE according to the identifier of the UE carried in the NAS message; the NM uses the NAS confidentiality key of the UE in the security context of the UE to decrypt the target service data, the target service data is data encrypted by the UE using an application side key that is aligned between the UE and the AS.

[0010] Optionally, the NAS message also includes a first message verification MAC, and the method also includes: the NM uses the NAS integrity key of the UE in the security context of the UE to calculate the target business data to obtain a second MAC; the NM verifies whether the first MAC is the same as the second MAC; wherein, if the first MAC is the same as the second MAC, it indicates that the integrity check of the target business data passes, otherwise, if the first MAC is different from the second MAC, it indicates that the integrity check of the target business data fails; accordingly, the NM stores the target business data in the UDM based on the failure to decrypt the target business data, including: the NM stores the target business data in the UDM based on the failure to decrypt the target business data and the integrity check of the target business data passes.

[0011] Optionally, the NAS message also includes a freshness parameter R1, which is a parameter randomly generated by the UE. The NM uses the NAS integrity key of the UE in the security context of the UE to calculate the target service data and obtain a second MAC, including: the NM uses the NAS integrity key of the UE in the security context of the UE to calculate the target service data, the freshness parameter R1 and the freshness parameter R2 to obtain the second MAC; the freshness parameter R2 is a parameter randomly generated in advance by the NM and sent to the UE.

[0012] Optionally, when NM receives the first data emergency processing indication from AS, the method also includes: NM determines that AS is authorized by the mobile communication network where NM is located for data emergency storage, and AS is authorized by the mobile communication network where NM is located for data emergency storage means that the service data of the UE corresponding to AS can be emergency stored in the mobile communication network where NM is located.

[0013] Optionally, the mobile communication network where the NM is located is a distributed subnet that relies on a central network for implementation, and the method further includes: the NM selects a UDM located in the distributed subnet.

[0014] Optionally, when the AS determines that the DN has a data security risk, the AS is configured to send a first data emergency processing indication to the NM.

[0015] According to a second aspect, a data security-based emergency management method is provided, which is applied to a user equipment UE, and the method includes: when the UE receives a second data emergency processing indication from an application server AS, in response to the second data emergency processing indication, the UE determines the target service data of the UE; the second data emergency processing indication is used to indicate that the UE needs to store the UE's service data in a mobile communication network on an emergency basis, and the target service data is the service data that the UE should send to a data network DN through a user plane, and the AS is deployed in the DN; the UE sends the target service data to an access management function NM, and the mobile communication network where the NM is located is different from the DN.

[0016] Optionally, the UE determines target service data of the UE, including: the UE encrypts plain text service data to obtain the target service data.

[0017] Optionally, the UE encrypts the plaintext service data to obtain the target service data, including: the UE uses the application side key aligned between the UE and the AS to encrypt the plaintext service data to obtain the target service data. Correspondingly, the UE sends the target service data to the NM, including: the UE sends a non-access layer NAS message to the NM, and the NAS message includes the target service data.

[0018] Optionally, the method includes: the UE uses the NAS integrity key of the UE in the security context of the UE to calculate the target service data and obtain a first message authentication code MAC, and the NAS message also includes a first MAC.

[0019] Optionally, the UE uses the NAS integrity key of the UE in the security context of the UE to calculate the target service data and obtain a first MAC, including: the UE randomly generates a freshness parameter R1, the UE uses the NAS integrity key of the UE in the security context of the UE to calculate the target service data, freshness parameter R1 and freshness parameter R2 to obtain the first MAC; the freshness parameter R2 is a parameter randomly generated in advance by the NM and sent to the UE, and the NAS message also includes the freshness parameter R1.

[0020] According to a third aspect, a data security-based emergency management system is provided, the system comprising a user equipment UE and an access management function NM, the system being configured as follows: when the UE receives a second data emergency processing indication from an application server AS, in response to the second data emergency processing indication, the UE determines the target service data of the UE; the second data emergency processing indication is used to indicate that the UE needs to store the service data of the UE in a mobile communication network in an emergency, the target service data is the service data that the UE should send to a data network DN through a user plane, and the AS is deployed in the DN; the UE sends the target service data to the NM; when the NM receives a first data emergency processing indication from the application server AS, the NM receives the target service data; the first data emergency processing indication is used to indicate that the NM stores the service data of the UE in an emergency in the mobile communication network where the NM is located, and the DN is a network other than the mobile communication network where the NM is located; in response to the first data emergency processing indication, the NM stores the target service data in a data management function UDM, and the UDM and the NM are located in the same mobile communication network.

[0021] Optionally, the target service data is data encrypted by the UE, and the NM stores the target service data in the UDM, including: the NM decrypts the target service data; and the NM stores the target service data in the UDM according to a failure in decrypting the target service data.

[0022] Optionally, the NM receives target service data of the UE, including: the NM receives a non-access layer NAS message from the UE, the NAS message includes an identifier of the UE and target service data; accordingly, the NM decrypts the target service data, including: the NM obtains the security context of the UE according to the identifier of the UE carried in the NAS message; the NM uses the NAS confidentiality key of the UE in the security context of the UE to decrypt the target service data, the target service data is data encrypted by the UE using an application side key that is aligned between the UE and the AS.

[0023] Optionally, the NAS message also includes a first message verification MAC, and the system is configured as: NM uses the NAS integrity key of the UE in the security context of the UE to calculate the target business data to obtain a second MAC; NM verifies whether the first MAC is the same as the second MAC; wherein, if the first MAC is the same as the second MAC, it indicates that the integrity check of the target business data passes, otherwise, if the first MAC is different from the second MAC, it indicates that the integrity check of the target business data fails; accordingly, NM stores the target business data in UDM based on the failure to decrypt the target business data, including: NM stores the target business data in UDM based on the failure to decrypt the target business data and the integrity check of the target business data passes.

[0024] Optionally, the NAS message also includes a freshness parameter R1, which is a parameter randomly generated by the UE. The NM uses the NAS integrity key of the UE in the security context of the UE to calculate the target service data and obtain a second MAC, including: the NM uses the NAS integrity key of the UE in the security context of the UE to calculate the target service data, the freshness parameter R1 and the freshness parameter R2 to obtain the second MAC; the freshness parameter R2 is a parameter randomly generated in advance by the NM and sent to the UE.

[0025] Optionally, when NM receives the first data emergency processing indication from AS, the system is configured as follows: NM determines that AS is authorized by the mobile communication network where NM is located for data emergency storage, and AS is authorized by the mobile communication network where NM is located for data emergency storage means that the service data of the UE corresponding to the AS can be emergency stored in the mobile communication network where NM is located.

[0026] Optionally, the mobile communication network where the NM is located is a distributed subnet that relies on the central network for implementation, and the system is configured as follows: the NM selects a UDM located in the distributed subnet.

[0027] Optionally, when the AS determines that the DN has a data security risk, the AS is configured to send a first data emergency processing indication to the NM.

[0028] Optionally, the UE determines target service data of the UE, including: the UE encrypts plain text service data to obtain the target service data.

[0029] Optionally, the UE encrypts the plaintext service data to obtain the target service data, including: the UE encrypts the plaintext service data using the application side key aligned between the UE and the AS to obtain the target service data. Correspondingly, the UE sends the target service data to the NM, including: the UE sends a NAS message to the NM, and the NAS message includes the target service data.

[0030] Optionally, the method includes: the UE uses a NAS integrity key of the UE in a security context of the UE to calculate target service data to obtain a first MAC, and the NAS message also includes the first MAC.

[0031] Optionally, the UE uses the NAS integrity key of the UE in the security context of the UE to calculate the target service data and obtain a first MAC, including: the UE randomly generates a freshness parameter R1, the UE uses the NAS integrity key of the UE in the security context of the UE to calculate the target service data, freshness parameter R1 and freshness parameter R2 to obtain the first MAC; the freshness parameter R2 is a parameter randomly generated in advance by the NM and sent to the UE, and the NAS message also includes the freshness parameter R1.

[0032] In a third aspect, an electronic device is provided, comprising: a processor and a memory; the memory is used to store a computer program, and when the processor executes the computer program, the electronic device executes the method of the first aspect.

[0033] In a possible design solution, the electronic device of the third aspect may further include a transceiver. The transceiver may be a transceiver circuit or an interface circuit. The transceiver may be used for the electronic device of the third aspect to communicate with other electronic devices.

[0034] In an embodiment of the present invention, the electronic device of the third aspect may be a terminal, or a chip (system) or other parts or components that may be arranged in the terminal, or a system including the terminal.

[0035] In a fourth aspect, a computer-readable storage medium is provided, comprising: a computer program or instructions; when the computer program or instructions are executed on a computer, the computer is caused to execute the method of the first aspect.

[0036] In summary, the above method and system have the following technical effects:

[0037] When the AS determines that the DN where it is located has a security risk, the AS can instruct the mobile communication network to temporarily store the data, such as sending a first data emergency processing instruction to the NM in the mobile communication network. In this way, when the NM receives the target service data of the UE, even if the target service data is the service data that the UE should send to the DN through the user plane, the NM can temporarily store the target service data in the UDM located in the same mobile communication network as the NM, so as to avoid the target service data from being exposed in the DN, so as to ensure data security when the DN has a security risk. BRIEF DESCRIPTION OF THE DRAWINGS

[0038] Figure 1 A schematic diagram of the architecture of an emergency management system based on data security provided by an embodiment of the present invention;

[0039] Figure 2 A schematic diagram of a process flow of an emergency management method based on data security provided by an embodiment of the present invention;

[0040] Figure 3 A schematic diagram of the structure of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0041] The technical solution of the present invention will be described below in conjunction with the accompanying drawings.

[0042] In the embodiment of the present invention, "indication" may include direct indication and indirect indication, and may also include explicit indication and implicit indication. The information indicated by a certain information is called information to be indicated. In the specific implementation process, there are many ways to indicate the information to be indicated, such as but not limited to, the information to be indicated can be directly indicated, such as the information to be indicated itself or the index of the information to be indicated. The information to be indicated can also be indirectly indicated by indicating other information, wherein there is an association relationship between the other information and the information to be indicated. It is also possible to indicate only a part of the information to be indicated, while the other parts of the information to be indicated are known or agreed in advance. For example, the indication of specific information can also be achieved by means of the arrangement order of each information agreed in advance (for example, specified by the protocol), thereby reducing the indication overhead to a certain extent. At the same time, the common parts of each information can also be identified and indicated uniformly to reduce the indication overhead caused by indicating the same information separately.

[0043] In addition, the specific indication method may also be various existing indication methods, such as but not limited to the above-mentioned indication methods and various combinations thereof. The specific details of the various indication methods can refer to the prior art and will not be repeated herein. As can be seen from the above, for example, when it is necessary to indicate multiple information of the same type, different indication methods may be used for different information. In the specific implementation process, the desired indication method can be selected according to specific needs. The embodiment of the present invention does not limit the selected indication method. In this way, the indication method involved in the embodiment of the present invention should be understood to cover various methods that can enable the party to be indicated to obtain the information to be indicated.

[0044] It should be understood that the information to be indicated can be sent as a whole or divided into multiple sub-information and sent separately, and the sending period and / or sending time of these sub-information can be the same or different. The specific sending method is not limited in the embodiment of the present invention. Among them, the sending period and / or sending time of these sub-information can be pre-defined, for example, pre-defined according to a protocol, or can be configured by the sending end device by sending configuration information to the receiving end device.

[0045] "Pre-definition" or "pre-configuration" can be implemented by pre-saving corresponding codes, tables or other methods that can be used to indicate relevant information in the device, and the embodiments of the present invention do not limit the specific implementation method. Among them, "saving" can mean saving in one or more memories. One or more memories can be set separately or integrated in an encoder or decoder, a processor, or an electronic device. One or more memories can also be partially set separately and partially integrated in a decoder, a processor, or an electronic device. The type of memory can be any form of storage medium, which is not limited by the embodiments of the present invention.

[0046] The "protocol" involved in the embodiments of the present invention may refer to a protocol family in the communication field, a standard protocol with a similar protocol family frame structure, or a related protocol applied in future systems, and the embodiments of the present invention do not specifically limit this.

[0047] In the embodiments of the present invention, descriptions such as "when...", "in the case of...", "if" and "if" all mean that the device will perform corresponding processing under certain objective circumstances, but do not limit the time, nor do they require the device to perform judgment actions when implementing, nor do they mean the existence of other limitations.

[0048] In the description of the embodiments of the present invention, unless otherwise specified, " / " indicates that the objects associated before and after are in an "or" relationship, for example, A / B can represent A or B; "and / or" in the embodiments of the present invention is only a kind of association relationship describing the associated objects, indicating that there can be three relationships, for example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone, where A and B can be singular or plural. In addition, in the description of the embodiments of the present invention, unless otherwise specified, "multiple" refers to two or more than two. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single items or plural items. For example, at least one of a, b or c can represent: a, b, c, ab, ac, bc, or abc, where a, b, c can be single or multiple. In addition, in order to facilitate the clear description of the technical solution of the embodiments of the present invention, in the embodiments of the present invention, the words "first" and "second" are used to distinguish the same or similar items with basically the same functions and effects. Those skilled in the art will appreciate that words such as "first" and "second" do not limit the quantity and execution order, and words such as "first" and "second" do not necessarily limit the difference. At the same time, in the embodiments of the present invention, words such as "exemplary" or "for example" are used to indicate examples, illustrations or explanations. Any embodiment or design described as "exemplary" or "for example" in the embodiments of the present invention should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present related concepts in a concrete way for easy understanding.

[0049] The network architecture and business scenarios described in the embodiments of the present invention are intended to more clearly illustrate the technical solutions of the embodiments of the present invention, and do not constitute a limitation on the technical solutions provided by the embodiments of the present invention. A person of ordinary skill in the art can appreciate that with the evolution of the network architecture and the emergence of new business scenarios, the technical solutions provided by the embodiments of the present invention are equally applicable to similar technical problems.

[0050] To facilitate understanding of the embodiments of the present invention, first Figure 1 Taking the data security-based emergency management system shown in as an example, Figure 1 A schematic diagram of the architecture of a data security-based emergency management system applicable to the data security-based emergency management method provided in an embodiment of the present invention.

[0051] like Figure 1 As shown, the data security-based emergency management system may include: user equipment (UEsrequipment, UE) and network management (Network Management, NM).

[0052] UE can also be understood as a terminal. The terminal can be a terminal with transceiver functions, or a chip or chip system that can be set in the terminal. The terminal can also have other forms, such as access terminal, subscriber unit, user station, mobile station (MS), mobile station, remote station, remote terminal, mobile device, user terminal, terminal, wireless communication device, user agent or user device. The terminal in the embodiments of the present application can be a mobile phone, a cellular phone, a smart phone, a tablet computer, a wireless data card, a personal digital assistant (PDA), a wireless modem, a handset, a laptop computer, a machine type communication (MTC) terminal, a computer with wireless transceiver function, a virtual reality (VR) terminal, an augmented reality (AR) terminal, a wireless terminal in industrial control, a wireless terminal in self driving, a wireless terminal in remote medical, a wireless terminal in smart grid, a wireless terminal in transportation safety, a wireless terminal in smart city, a wireless terminal in smart home, a vehicle-mounted terminal, a road side unit (RSU) with terminal function, etc. The terminal of the present application may also be a vehicle-mounted module, a vehicle-mounted module, a vehicle-mounted component, a vehicle-mounted chip or a vehicle-mounted unit built into a vehicle as one or more components or units. Alternatively, the terminal may also be customer-premises equipment (CPE).

[0053] NM is a functional entity separated from the Access and Mobility Management Function (AMF), which is mainly responsible for access management and can also be called an access management entity / function. The mobility management of AMF is implemented by other entities / network elements, such as Mobility Management (MM). The advantage of this is that it can make the network deployment structure more flexible, such as being applicable to subnet scenarios. That is, the existing core network can see the large network, and some entities / network elements in the large network are deployed in the subnet. Among them, NM is responsible for access management, that is, the interface of Non-Access Stratum (NAS) signaling. In order to realize the control plane signaling interaction between UE and subnet, NM needs to be deployed in each subnet. As for other network elements in the large network, each subnet can be deployed on demand, such as Subnet #1 deploys User Data Management (UDM) and Session Management Function (SMF), and Subnet #2 deploys UDM and Policy Control Function (PCF).

[0054] NM and UE can communicate through the access network, such as access network equipment. The access network equipment can specifically be a next-generation mobile communication system, or in the next-generation mobile communication system, the access network equipment can also have other naming methods, which are all included in the protection scope of the embodiments of the present application, and the present application does not impose any restrictions on this. Alternatively, the access network equipment can also include 5G, such as a gNB in ​​a new radio (NR) system, or one or a group of antenna panels (including multiple antenna panels) of a base station in 5G, or it can also be a network node constituting a gNB, a transmission point (transmission and reception point, TRP or transmission point, TP) or a transmission measurement function (transmission measurement function, TMF), such as a centralized unit (central unit, CU), a distributed unit (distributed unit, DU), a CU-control plane (control plane, CP), a CU-user plane (user plane, UP), or a radio unit (radio unit, RU), an RSU with base station function, or a wired access gateway, or a 5G core network element, etc. Alternatively, the network devices may also include: access points (APs) in WiFi systems, wireless relay nodes, wireless backhaul nodes, various forms of macro base stations, micro base stations (also called small stations), relay stations, access points, wearable devices, vehicle-mounted devices, etc.

[0055] CU and DU may be separately configured, or may be included in the same network element, such as a baseband unit (BBU). RU may be included in a radio frequency device or a radio frequency unit, such as a remote radio unit (RRU), an active antenna unit (AAU), or a remote radio head (RRH). It is understood that the network device may be a CU node, a DU node, or a device including a CU node and a DU node. In addition, CU may be divided into a network device in an access network RAN, or CU may be divided into a network device in a core network CN, without limitation. In different systems, CU (or CU-CP and CU-UP), DU or RU may also have different names, but those skilled in the art may understand their meanings. For example, in an ORAN system, CU may also be referred to as O-CU (open CU), DU may also be referred to as O-DU, CU-CP may also be referred to as O-CU-CP, CU-UP may also be referred to as O-CU-UP, and RU may also be referred to as O-RU. For the convenience of description, this application takes CU, CU-CP, CU-UP, DU and RU as examples for description. Any unit in the CU (or CU-CP, CU-UP), DU and RU in this application can be implemented by a software module, a hardware module, or a combination of a software module and a hardware module. In the embodiment of the present application, the form of the network device is not limited. The device for implementing the function of the network device may be a network device; it may also be a device that can support the network device to implement the function, such as a chip system. The device can be installed in a network device or used in combination with a network device.

[0056] Figure 2 A flow chart of a method provided by an embodiment of the present invention. The data security-based emergency management method is applicable to the above-mentioned data security-based emergency management system, and involves the interaction between the access network device and the terminal. The specific process is as follows:

[0057] S201: When a UE receives a second data emergency processing instruction from an AS, the UE determines target service data of the UE in response to the second data emergency processing instruction.

[0058] The second data emergency processing indication is used to indicate that the UE needs to store the UE's service data in a mobile communication network, such as the mobile communication network to which the UE is currently registered. The target service data of the UE is the service data that the UE should send to the DN through the user plane, and the AS is deployed in the DN. The DN is a network other than the mobile communication network where the NM is located, which can be understood as a third-party network.

[0059] When the AS determines that there is a data security risk in the DN, the AS is configured to send a second data emergency processing indication to the UE. The AS can be a server for a third-party application. In some scenarios, the AS can be a data processing platform with relatively high data security requirements, such as a public security data verification platform. In this case, the AS is very sensitive to whether there is a data security risk in the current DN. The AS can determine whether there is data theft or tampering in the DN through reports from other devices in the DN. For example, other devices can report that the data of the current XX device has been stolen or tampered with. Based on this, the AS can determine that there is a data security risk in the current DN.

[0060] In response to the second data emergency processing instruction, the UE encrypts the plaintext service data to obtain the target service data. The service data may be data obtained by the application layer of the UE, such as video streams, images, environmental data, user data, etc. For example, the UE uses the application side key aligned between the UE and the AS to encrypt the plaintext service data to obtain the target service data. The application side key aligned between the UE and the AS can be understood as the key used for secure communication between the UE and the AS. The key is different from the key in the security context of the UE. The key in the security context of the UE, such as the NAS confidentiality key and the NAS integrity key, is the key negotiated between the UE and the mobile communication network after the UE is authenticated in the mobile communication network, which is used to securely protect the communication between the UE and the mobile communication network. In other words, if the mobile communication network is to be used for emergency storage, or to temporarily store the service data of the UE, then in order to ensure data security, the service data cannot be perceived by the mobile communication network, so the UE will use the application side key aligned between the UE and the AS to encrypt the plaintext service data.

[0061] In order to let the mobile communication network know that the target service data is data that needs to be saved by the mobile communication network in an emergency, rather than data that needs to be discarded by the mobile communication network due to incorrect encryption, the UE also needs to add more features to the target service data. For example, the UE can use the NAS integrity key of the UE in the security context of the UE to perform integrity protection on the target service data. Specifically, the UE can use the NAS integrity key of the UE in the security context of the UE to calculate the target service data and obtain a first MAC, that is, the NAS integrity key and the target service data are hashed as input parameters to obtain the first MAC. To further improve security, such as avoiding replay attacks, the UE can also randomly generate a freshness parameter R1. The UE uses the NAS integrity key of the UE in the security context of the UE to calculate the target service data, freshness parameter R1 and freshness parameter R2 to obtain a first MAC, such as taking the NAS integrity key, target service data, freshness parameter R1 and freshness parameter R2 as input parameters, and then hashing the input parameters to obtain the first MAC. Among them, the freshness parameter R2 is a parameter randomly generated by the NM in advance and sent to the UE.

[0062] S202, the UE sends target service data of the UE to the NM. When the NM receives the first data emergency processing instruction from the AS, the NM receives the target service data of the UE.

[0063] The first data emergency processing indication can be used to instruct the NM to urgently store the service data of the UE in the mobile communication network where the NM is located. When the AS determines that there is a data security risk in the DN, the AS is also configured to send the first data emergency processing indication to the NM. The AS can send the first data emergency processing indication to the NM through the NEF. For example, the UE can send a NAS message to the NM. Accordingly, the NM can receive a NAS message from the UE, and the NAS message includes an identifier of the UE (such as SUPI / SUCI) and target service data. Optionally, the NAS message can also include a first MAC, and optionally, the NAS message can also include a freshness parameter R1.

[0064] That is to say, under the triggering of the second data emergency processing indication, the UE will not perform regular data transmission, but will send the service data that originally needs to be sent to the user plane function (UserPlaneFunction, UPF) through the user plane to the NM of the control plane through the NAS message.

[0065] Optionally, when the NM receives the first data emergency processing indication from the AS, the NM can also determine whether the AS is authorized by the mobile communication network where the NM is located for data emergency storage, such as obtaining the mobile communication network's policy for the AS from the network element of the management domain, such as indicating in the policy whether the AS is authorized by the mobile communication network where the NM is located for data emergency storage. The AS is authorized by the mobile communication network where the NM is located for data emergency storage means that the service data of the UE corresponding to the AS can be stored in the mobile communication network where the NM is located for emergency storage, that is, S203 is executed only when authorized, otherwise, it is not executed, so as to further ensure security.

[0066] S203: In response to the first data emergency processing instruction, the NM stores the target service data of the UE in the UDM.

[0067] Since the target service data is the data encrypted by the UE, the NM can decrypt the target service data, and on this basis, the NM can store the target service data to the UDM according to the failure of decrypting the target service data. The UDM and the NM are located in the same mobile communication network.

[0068] For example, the NM can obtain the security context of the UE according to the UE identifier carried in the NAS message, such as obtaining the security context corresponding to the identifier from the local, that is, the security context of the UE. The NM uses the UE's NAS confidentiality key in the UE's security context to decrypt the UE's target service data. Since the UE's target service data is not encrypted using the UE's NAS confidentiality key, the NM fails to decrypt the UE's target service data.

[0069] NM can use the NAS integrity key of the UE in the security context of the UE to calculate the target service data and obtain a second MAC. For example, NM can use the NAS integrity key of the UE in the security context of the UE to calculate the target service data, freshness parameter R1 and freshness parameter R2 to obtain a second MAC, such as taking the NAS integrity key, target service data, freshness parameter R1 and freshness parameter R2 as input parameters, hashing the input parameters to obtain a second MAC. NM can verify whether the first MAC is the same as the second MAC, that is, perform an integrity check on the target service data. Among them, if the first MAC is the same as the second MAC, it means that the integrity check of the target service data passes, otherwise, if the first MAC is different from the second MAC, it means that the integrity check of the target service data fails.

[0070] On this basis, NM can store the target business data in UDM based on the failure to decrypt the target business data and the passing of the integrity check of the target business data. In other words, when the first data emergency processing indication is received, the decryption of the target business data fails and the passing of the integrity check of the target business data indicates that the target business data is not erroneous data, but data that needs to be urgently / temporarily stored in UDM. Of course, if NM does not receive the first data emergency processing indication, then if the decryption of the target business data fails and the integrity check of the target business data passes, then according to conventional logic, NM will still consider the target business data to be erroneous data, and thus discard the target business data. In other words, the solution of the present application implements special processing for the target business data by sending the first data emergency processing indication.

[0071] The mobile communication network where NM is located is a distributed subnet that relies on the central network (big network) to be implemented. NM is deployed to the subnet, so NM can also select the UDM located in the distributed subnet and store the target data in the UDM to ensure that the data does not leave the subnet, thereby further improving data security and reducing data security risks.

[0072] In summary, when the AS determines that the DN where it is located has a security risk, the AS can instruct the mobile communication network to temporarily store the data, such as sending a first data emergency processing instruction to the NM in the mobile communication network. In this way, when the NM receives the target service data of the UE, even if the target service data is the service data that the UE should send to the DN through the user plane, the NM can temporarily store the target service data in the UDM located in the same mobile communication network as the NM, so as to avoid the target service data from being exposed in the DN, so as to ensure data security when the DN has a security risk.

[0073] Combination of the above Figure 2 The method provided by the embodiment of the present invention is described in detail. The following is a detailed description of a data security-based emergency management system for executing the method provided by the embodiment of the present invention.

[0074] The system includes a user equipment UE and an access management function NM, and the system is configured as follows: when the UE receives a second data emergency processing indication from an application server AS, in response to the second data emergency processing indication, the UE determines the target service data of the UE; the second data emergency processing indication is used to indicate that the UE needs to store the UE's service data in a mobile communication network in an emergency, and the target service data is the service data that the UE should send to a data network DN through a user plane, and the AS is deployed in the DN; the UE sends the target service data to the NM; when the NM receives a first data emergency processing indication from the application server AS, the NM receives the target service data; the first data emergency processing indication is used to indicate that the NM stores the UE's service data in an emergency in the mobile communication network where the NM is located, and the DN is a network other than the mobile communication network where the NM is located; in response to the first data emergency processing indication, the NM stores the target service data in a data management function UDM, and the UDM and the NM are located in the same mobile communication network.

[0075] Optionally, the target service data is data encrypted by the UE, and the NM stores the target service data in the UDM, including: the NM decrypts the target service data; and the NM stores the target service data in the UDM according to a failure in decrypting the target service data.

[0076] Optionally, the NM receives target service data of the UE, including: the NM receives a non-access layer NAS message from the UE, the NAS message includes an identifier of the UE and target service data; accordingly, the NM decrypts the target service data, including: the NM obtains the security context of the UE according to the identifier of the UE carried in the NAS message; the NM uses the NAS confidentiality key of the UE in the security context of the UE to decrypt the target service data, the target service data is data encrypted by the UE using an application side key that is aligned between the UE and the AS.

[0077] Optionally, the NAS message also includes a first message verification MAC, and the system is configured as: NM uses the NAS integrity key of the UE in the security context of the UE to calculate the target business data to obtain a second MAC; NM verifies whether the first MAC is the same as the second MAC; wherein, if the first MAC is the same as the second MAC, it indicates that the integrity check of the target business data passes, otherwise, if the first MAC is different from the second MAC, it indicates that the integrity check of the target business data fails; accordingly, NM stores the target business data in UDM based on the failure to decrypt the target business data, including: NM stores the target business data in UDM based on the failure to decrypt the target business data and the integrity check of the target business data passes.

[0078] Optionally, the NAS message also includes a freshness parameter R1, which is a parameter randomly generated by the UE. The NM uses the NAS integrity key of the UE in the security context of the UE to calculate the target service data and obtain a second MAC, including: the NM uses the NAS integrity key of the UE in the security context of the UE to calculate the target service data, the freshness parameter R1 and the freshness parameter R2 to obtain the second MAC; the freshness parameter R2 is a parameter randomly generated in advance by the NM and sent to the UE.

[0079] Optionally, when NM receives the first data emergency processing indication from AS, the system is configured as follows: NM determines that AS is authorized by the mobile communication network where NM is located for data emergency storage, and AS is authorized by the mobile communication network where NM is located for data emergency storage means that the service data of the UE corresponding to the AS can be emergency stored in the mobile communication network where NM is located.

[0080] Optionally, the mobile communication network where the NM is located is a distributed subnet that relies on the central network for implementation, and the system is configured as follows: the NM selects a UDM located in the distributed subnet.

[0081] Optionally, when the AS determines that the DN has a data security risk, the AS is configured to send a first data emergency processing indication to the NM.

[0082] Optionally, the UE determines target service data of the UE, including: the UE encrypts plain text service data to obtain the target service data.

[0083] Optionally, the UE encrypts the plaintext service data to obtain the target service data, including: the UE encrypts the plaintext service data using the application side key aligned between the UE and the AS to obtain the target service data. Correspondingly, the UE sends the target service data to the NM, including: the UE sends a NAS message to the NM, and the NAS message includes the target service data.

[0084] Optionally, the method includes: the UE uses a NAS integrity key of the UE in a security context of the UE to calculate target service data to obtain a first MAC, and the NAS message also includes the first MAC.

[0085] Optionally, the UE uses the NAS integrity key of the UE in the security context of the UE to calculate the target service data and obtain a first MAC, including: the UE randomly generates a freshness parameter R1, the UE uses the NAS integrity key of the UE in the security context of the UE to calculate the target service data, freshness parameter R1 and freshness parameter R2 to obtain the first MAC; the freshness parameter R2 is a parameter randomly generated in advance by the NM and sent to the UE, and the NAS message also includes the freshness parameter R1.

[0086] Figure 3The schematic diagram of the structure of the electronic device provided by the embodiment of the present invention. For example, the electronic device may be a network device, or a chip (system) or other components or assemblies that can be set in the network device. Figure 3 As shown, the electronic device 400 may include a processor 401. Optionally, the electronic device 400 may further include a memory 402 and / or a transceiver 403. The processor 401 is coupled with the memory 402 and the transceiver 403, such as being connected via a communication bus.

[0087] Combine the following Figure 3 The components of the electronic device 400 are described in detail:

[0088] The processor 401 is the control center of the electronic device 400, and may be a processor or a general term for multiple processing elements. For example, the processor 401 is one or more central processing units (CPUs), or an application specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present invention, such as one or more microprocessors (digital signal processors, DSPs), or one or more field programmable gate arrays (FPGAs).

[0089] Optionally, the processor 401 can execute various functions of the electronic device 400 by running or executing the software program stored in the memory 402 and calling the data stored in the memory 402, such as executing the above Figure 2 The data security-based emergency management method shown.

[0090] In a specific implementation, as an embodiment, the processor 401 may include one or more CPUs, such as Figure 3 CPU0 and CPU1 are shown in FIG.

[0091] In a specific implementation, as an embodiment, the electronic device 400 may also include multiple processors. Each of these processors may be a single-core processor (single-CPU) or a multi-core processor (multi-CPU). The processor here may refer to one or more devices, circuits, and / or processing cores for processing data (such as computer program instructions).

[0092] The memory 402 is used to store the software program for executing the solution of the present invention, and the execution is controlled by the processor 401. The specific implementation method can refer to the above method embodiment, which will not be repeated here.

[0093] Optionally, the memory 402 may be a read-only memory (ROM) or other types of static storage devices that can store static information and instructions, a random access memory (RAM) or other types of dynamic storage devices that can store information and instructions, or an electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disc storage, optical disc storage (including compressed optical disc, laser disc, optical disc, digital versatile disc, Blu-ray disc, etc.), a magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited thereto. The memory 402 may be integrated with the processor 401, or may exist independently and access the computer through the interface circuit ( Figure 3 The processor 401 is coupled to the processor 401 (not shown), which is not specifically limited in this embodiment of the present invention.

[0094] The transceiver 403 is used for communication with other electronic devices. For example, if the electronic device 400 is a terminal, the transceiver 403 can be used to communicate with a network device, or with another terminal device. For another example, if the electronic device 400 is a network device, the transceiver 403 can be used to communicate with a terminal, or with another network device.

[0095] Optionally, the transceiver 403 may include a receiver and a transmitter ( Figure 3 The receiver is used to implement a receiving function, and the transmitter is used to implement a sending function.

[0096] Optionally, the transceiver 403 may be integrated with the processor 401, or may exist independently and communicate with the electronic device 400 through an interface circuit ( Figure 3 The processor 401 is coupled to the processor 401 (not shown), which is not specifically limited in this embodiment of the present invention.

[0097] Understandably, Figure 3 The structure of the electronic device 400 shown in the figure does not constitute a limitation on the electronic device, and the actual electronic device may include more or fewer components than those shown in the figure, or combine certain components, or arrange the components differently.

[0098] In addition, the technical effects of the electronic device 400 can refer to the technical effects of the method in the above method embodiment, which will not be repeated here.

[0099] It should be understood that the processor in the embodiment of the present invention may be a central processing unit (CPU), and the processor may also be other general-purpose processors, digital signal processors (DSP), application specific integrated circuits (ASIC), field programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc.

[0100] It should also be understood that the memory in the embodiments of the present invention may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memories. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of random access memory (RAM) are available, such as static RAM (SRAM), dynamic random access memory (DRAM), synchronous DRAM (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link DRAM (SLDRAM), and direct rambus RAM (DR RAM).

[0101] The above embodiments can be implemented in whole or in part by software, hardware (such as circuits), firmware or any other combination. When implemented by software, the above embodiments can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions or computer programs. When a computer instruction or computer program is loaded or executed on a computer, a process or function according to an embodiment of the present invention is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. Computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, computer instructions can be transmitted from one website, computer, server or data center to another website, computer, server or data center by wired (such as infrared, wireless, microwave, etc.). The computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device such as a server or data center that contains one or more available media sets. The available medium can be a magnetic medium (for example, a floppy disk, a hard disk, a tape), an optical medium (for example, a DVD), or a semiconductor medium. The semiconductor medium can be a solid-state hard disk.

[0102] It should be understood that the term "and / or" in this article is only a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. A and B can be singular or plural. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship, but it may also indicate an "and / or" relationship. Please refer to the context for specific understanding.

[0103] In the present invention, "at least one" means one or more, and "plurality" means two or more. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single items or plural items. For example, at least one of a, b, or c can mean: a, b, c, ab, ac, bc, or abc, where a, b, and c can be single or multiple.

[0104] It should be understood that in various embodiments of the present invention, the size of the serial numbers of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present invention.

[0105] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0106] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0107] In the several embodiments provided by the present invention, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic, for example, the division of units is only a logical function division, and there may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0108] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0109] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0110] If the function is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods of various embodiments of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), disk or optical disk, etc., various media that can store program codes.

[0111] The above are only specific embodiments of the present invention, but the protection scope of the present invention is not limited thereto. Any person skilled in the art who is familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed by the present invention, which should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims

1. An emergency management method based on data security, characterized in that: Applied to the access management function NM, the method comprises: In a case where the NM receives a first data emergency processing indication from an application server AS, the NM receives target service data of a user equipment UE; the first data emergency processing indication is used to instruct the NM to store the service data of the UE in an emergency manner in a mobile communication network where the NM is located, the target service data is service data that the UE should send to a data network DN through a user plane, the DN is a network other than the mobile communication network where the NM is located, and the AS is deployed in the DN; In response to the first data emergency processing indication, the NM stores the target service data in a data management function UDM, the UDM and the NM are located in the same mobile communication network; the target service data is data encrypted by the UE, and the NM stores the target service data in the UDM, including: the NM decrypts the target service data; the NM stores the target service data in the UDM according to a failure in decrypting the target service data; the NM receives a non-access layer NAS message from the UE, the NAS message includes an identifier of the UE and the target service data; correspondingly, the NM decrypts the target service data, including: the NM obtains a security context of the UE according to the identifier of the UE carried in the NAS message; the NM uses the NAS confidentiality key of the UE in the security context of the UE to decrypt the target service data, and the target service data The target service data is data encrypted by the UE using an application-side key aligned between the UE and the AS; the NAS message also includes a first MAC, and the method further includes: the NM uses the NAS integrity key of the UE in the security context of the UE to calculate the target service data to obtain a second MAC; the NM verifies whether the first MAC is the same as the second MAC; wherein, if the first MAC is the same as the second MAC, it indicates that the integrity check of the target service data passes, otherwise, if the first MAC is different from the second MAC, it indicates that the integrity check of the target service data fails; accordingly, the NM stores the target service data in the UDM based on the failure to decrypt the target service data, including: the NM stores the target service data in the UDM based on the failure to decrypt the target service data and the integrity check of the target service data passes.

2. The method according to claim 1, characterized in that The NAS message further includes a freshness parameter R1, where the freshness parameter R1 is a parameter randomly generated by the UE, and the NM uses the NAS integrity key of the UE in the security context of the UE to calculate the target service data to obtain a second MAC, including: The NM uses the NAS integrity key of the UE in the security context of the UE to calculate the target service data, the freshness parameter R1 and the freshness parameter R2 to obtain the second MAC; the freshness parameter R2 is a parameter randomly generated in advance by the NM and sent to the UE.

3. The method according to any one of claims 1 to 2, characterized in that In a case where the NM receives a first data emergency processing instruction from the AS, the method further includes: The NM determines that the AS is authorized by the mobile communication network where the NM is located for emergency data storage, and the AS is authorized by the mobile communication network where the NM is located for emergency data storage means that the service data of the UE corresponding to the AS can be emergency stored in the mobile communication network where the NM is located.

4. The method according to any one of claims 1 to 2, characterized in that The mobile communication network where the NM is located is a distributed subnet that relies on a central network for implementation, and the method further includes: The NM selects the UDM located in the distributed subnet.

5. The method according to any one of claims 1 to 2, characterized in that When the AS determines that the DN has a data security risk, the AS is configured to send the first data emergency processing indication to the NM.

6. An emergency management method based on data security, characterized in that: Applied to user equipment UE, the method includes: In a case where the UE receives a second data emergency processing indication from the application server AS, in response to the second data emergency processing indication, the UE determines target service data of the UE; the second data emergency processing indication is used to indicate that the UE needs to store the service data of the UE in a mobile communication network in an emergency manner, the target service data is service data that the UE should send to the data network DN through the user plane, and the AS is deployed in the DN; The UE sends target service data to an access management function NM, and the mobile communication network where the NM is located is different from the DN; the target service data is data encrypted by the UE, and the NM stores the target service data in the UDM, including: the NM decrypts the target service data; the NM stores the target service data in the UDM according to failure to decrypt the target service data; the NM receives a non-access layer NAS message from the UE, and the NAS message includes the identifier of the UE and the target service data; accordingly, the NM decrypts the target service data, including: the NM obtains the security context of the UE according to the identifier of the UE carried in the NAS message; the NM uses the NAS confidentiality key of the UE in the security context of the UE to decrypt the target service data, and the target service data is the data encrypted by the UE using the NAS confidentiality key of the UE. UE and the AS are aligned with the application side key encrypted data; the NAS message also includes a first MAC, and the method also includes: the NM uses the NAS integrity key of the UE in the security context of the UE to calculate the target business data to obtain a second MAC; the NM verifies whether the first MAC is the same as the second MAC; wherein, if the first MAC is the same as the second MAC, it indicates that the integrity check of the target business data passes, otherwise, if the first MAC is different from the second MAC, it indicates that the integrity check of the target business data fails; accordingly, the NM stores the target business data in the UDM according to the failure to decrypt the target business data, including: the NM stores the target business data in the UDM according to the failure to decrypt the target business data and the integrity check of the target business data passes.

7. An emergency management system based on data security, characterized in that: The system comprises a user equipment UE and an access management function NM, and the system is configured to: In a case where the UE receives a second data emergency processing indication from the application server AS, in response to the second data emergency processing indication, the UE determines target service data of the UE; the second data emergency processing indication is used to indicate that the UE needs to store the service data of the UE in a mobile communication network in an emergency manner, the target service data is service data that the UE should send to the data network DN through the user plane, and the AS is deployed in the DN; The UE sends target service data to the NM; In a case where the NM receives the first data emergency processing instruction of the AS, the NM receives the target service data; the first data emergency processing instruction is used to instruct the NM to store the service data of the UE in an emergency in the mobile communication network where the NM is located, and the DN is a network other than the mobile communication network where the NM is located; In response to the first data emergency processing instruction, the NM stores the target service data in a data management function UDM, where the UDM and the NM are located in the same mobile communication network; The target service data is data encrypted by the UE, and the NM stores the target service data in the UDM, including: the NM decrypts the target service data; the NM stores the target service data in the UDM according to failure to decrypt the target service data; the NM receives a non-access layer NAS message from the UE, and the NAS message includes the identifier of the UE and the target service data; correspondingly, the NM decrypts the target service data, including: the NM obtains the security context of the UE according to the identifier of the UE carried in the NAS message; the NM uses the NAS confidentiality key of the UE in the security context of the UE to decrypt the target service data, and the target service data is data encrypted by the UE using the application side key aligned between the UE and the AS; The NAS message also includes a first MAC, and the system also includes: the NM uses the NAS integrity key of the UE in the security context of the UE to calculate the target business data to obtain a second MAC; the NM verifies whether the first MAC is the same as the second MAC; wherein, if the first MAC is the same as the second MAC, it indicates that the integrity check of the target business data passes, otherwise, if the first MAC is different from the second MAC, it indicates that the integrity check of the target business data fails; accordingly, the NM stores the target business data in the UDM based on the failure to decrypt the target business data, including: the NM stores the target business data in the UDM based on the failure to decrypt the target business data and the integrity check of the target business data passes.

Images