Private network access method and device, computer equipment and storage medium

Abstract

The invention discloses a private network access method and device, computer equipment and a storage medium. Belongs to the technical field of mobile communication. The method specifically comprises the following steps: receiving an access transfer message sent by public network mobile management equipment of a public network; wherein the access transfer message is sent after the public network mobile management equipment receives an access request message of a private network user. The access transfer message carries a user identifier of the private network user. And based on the user identifier of the private network user, sending the device identifier of the private network mobile management device associated with the private network user to the private network user, and the private network user accessing the target private network based on the device identifier of the private network mobile management device. The private network user can also access the target private network without interaction between the private network mobile management equipment and the public network mobile management equipment, the method can be applied to a scene where security isolation exists between the private network and the public network, and the problem that the private network user cannot access the target private network in the scene is effectively solved.

Description

Technical Field

[0001] The present application relates to the field of mobile communication technology, and in particular to a private network access method, device, computer equipment and storage medium. Background Art

[0002] Driven by data security and deployment costs, hybrid private networks with some network functions dedicated and some shared have become the choice of most industry customers. For hybrid private network industry customers with dedicated core networks, their base stations and other resources are still shared with public network users. After private network users access from shared base stations, they need to interact with public and private network mobility management devices (for example, AMF (Access and Mobility Management Function) network elements or MME (Mobility Management Entity) network elements) to access the private network and access services.

[0003] However, in order to achieve secure management of private network services, industry customers have proposed strict end-to-end isolation of private network services, that is, requiring that the private network and the public network be isolated from each other and no longer interact. Therefore, there is an urgent need for a method to achieve private network access while safely isolating the private network and the public network. Summary of the invention

[0004] Based on this, it is necessary to provide a private network access method, device, computer equipment and storage medium for realizing private network terminal access to a private network without interaction between the mobile management devices of the private network and the public network to address the above technical problems.

[0005] In a first aspect, the present application provides a private network access method, which is applied to a redirection gateway of a target network, where the target network includes a public network and a private network, and the method includes:

[0006] Receiving an access transfer message sent by a public network mobility management device of a public network; wherein the access transfer message is sent by the public network mobility management device after receiving an access request message from a private network user; the access transfer message carries a user identifier of the private network user;

[0007] Based on the user identifier of the private network user, the device identifier of the private network mobility management device associated with the private network user is sent to the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobility management device.

[0008] In one of the embodiments, if the target network is a 5G communication network, the redirection gateway is an AMF network element.

[0009] In one of the embodiments, the access request message is a registration request message; wherein the registration request message carries a user identifier of a private network user; the registration request message is used to instruct the public network mobile management device to determine the target slice subscribed by the private network user based on the user identifier of the private network user, and to determine the redirection gateway for receiving the access transfer message based on the slice identifier of the NSSF network element and the target slice when the public network mobile management device cannot support the target slice.

[0010] In one of the embodiments, based on the user identifier of the private network user, sending the device identifier of the private network mobility management device associated with the private network user to the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobility management device, includes:

[0011] Based on the user identification of the private network user, a registration reception message and a deregistration request are sent to the private network user; wherein the registration reception message carries the device identification of the private network mobile management device associated with the private network user; the deregistration request is used to instruct the private network user to initiate a re-registration request to the private network mobile management device based on the device identification of the private network mobile management device, and access the target private network if the registration is successful.

[0012] In one of the embodiments, if the target network is a 4G communication network, the redirection gateway is an MME network element.

[0013] In one of the embodiments, the access transfer message is an uninstallation indication message; the access request message is an attachment request message; wherein the attachment request message carries a user identifier of a private network user; the attachment request message is used to instruct the public network mobile management device to determine a redirection gateway for receiving the access transfer message based on pre-configuration information and the user identifier of the private network user; the pre-configuration information includes a mapping relationship between the user identifier and the redirection gateway.

[0014] In one of the embodiments, based on the user identifier of the private network user, sending the device identifier of the private network mobility management device associated with the private network user to the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobility management device, includes:

[0015] Based on the user identification of the private network user, an attachment reception message and a detachment request are sent to the private network user; wherein the attachment reception message carries the device identification of the private network mobile management device associated with the private network user; the detachment request is used to instruct the private network user to initiate a reattachment request to the private network mobile management device based on the device identification of the private network mobile management device, and access the target private network if the attachment is successful.

[0016] In one embodiment, the method further comprises:

[0017] Determine the target private network associated with the private network user according to the user ID of the private network user;

[0018] According to the target private network, determine the device identifier of the private network mobile management device associated with the private network user.

[0019] In a second aspect, the present application provides another private network access method, which is applied to a public network mobility management device of a target network, where the target network includes a public network and a private network, and the method includes:

[0020] Receive access request messages sent by private network users;

[0021] Based on the access request message, an access transfer message carrying the user identifier of the private network user is sent to the redirect gateway; wherein the access transfer message is used to instruct the redirect gateway to send the device identifier of the private network mobile management device associated with the private network user to the private network user based on the user identifier of the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobile management device.

[0022] In one of the embodiments, if the target network is a 5G communication network, the public network mobility management device is an AMF network element.

[0023] In one embodiment, the access request message is a registration request message; wherein the registration request message carries a user identifier of the private network user;

[0024] Correspondingly, based on the access request message, an access transfer message carrying the user identifier of the private network user is sent to the redirection gateway, including:

[0025] Based on the user ID of the private network user, determine the target slice subscribed by the private network user;

[0026] In the case where the public network mobility management device cannot support the target slice, a redirection gateway for receiving the access transfer message is determined based on the slice identifier of the NSSF network element and the target slice;

[0027] An access transfer message carrying the user identifier of the private network user is sent to the redirection gateway.

[0028] In one of the embodiments, if the target network is a 4G communication network, the public network mobility management device is an MME network element.

[0029] In one embodiment, the access transfer message is an uninstallation indication message; the access request message is an attachment request message; wherein the attachment request message carries a user identifier of a private network user;

[0030] Correspondingly, based on the access request message, an access transfer message carrying the user identifier of the private network user is sent to the redirection gateway, including:

[0031] Determine the redirection gateway based on the pre-configuration information and the user identifier of the private network user; wherein the pre-configuration information includes a mapping relationship between the user identifier and the redirection gateway;

[0032] An access transfer message carrying the user identifier of the private network user is sent to the redirection gateway.

[0033] In a third aspect, the present application provides a private network access device, the device comprising:

[0034] The first receiving module is used to receive an access transfer message sent by a public network mobility management device of a public network; wherein the access transfer message is sent by the public network mobility management device after receiving an access request message from a private network user; the access transfer message carries a user identifier of the private network user;

[0035] The first sending module is used to send the device identifier of the private network mobile management device associated with the private network user to the private network user based on the user identifier of the private network user, so that the private network user can access the target private network pointed to by the device identifier of the private network mobile management device based on the device identifier of the private network mobile management device.

[0036] In a fourth aspect, the present application provides another private network access device, the device comprising:

[0037] A second receiving module is used to receive an access request message sent by a private network user;

[0038] The second sending module is used to send an access transfer message carrying the user identifier of the private network user to the redirection gateway based on the access request message; wherein the access transfer message is used to instruct the redirection gateway to send the device identifier of the private network mobile management device associated with the private network user to the private network user based on the user identifier of the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobile management device.

[0039] In a fifth aspect, the present application further provides a computer device, the computer device comprising a memory and a processor, the memory storing a computer program, and the processor implementing the following steps when executing the computer program:

[0040] Receiving an access transfer message sent by a public network mobility management device of a public network; wherein the access transfer message is sent by the public network mobility management device after receiving an access request message from a private network user; the access transfer message carries a user identifier of the private network user;

[0041] Based on the user identifier of the private network user, the device identifier of the private network mobility management device associated with the private network user is sent to the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobility management device.

[0042] In a sixth aspect, the present application further provides another computer device, the computer device comprising a memory and a processor, the memory storing a computer program, and the processor implementing the following steps when executing the computer program:

[0043] Receive access request messages sent by private network users;

[0044] Based on the access request message, an access transfer message carrying the user identifier of the private network user is sent to the redirect gateway; wherein the access transfer message is used to instruct the redirect gateway to send the device identifier of the private network mobile management device associated with the private network user to the private network user based on the user identifier of the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobile management device.

[0045] In a seventh aspect, the present application further provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented:

[0046] Receiving an access transfer message sent by a public network mobility management device of a public network; wherein the access transfer message is sent by the public network mobility management device after receiving an access request message from a private network user; the access transfer message carries a user identifier of the private network user;

[0047] Based on the user identifier of the private network user, the device identifier of the private network mobility management device associated with the private network user is sent to the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobility management device.

[0048] In an eighth aspect, the present application further provides another computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented:

[0049] Receive access request messages sent by private network users;

[0050] Based on the access request message, an access transfer message carrying the user identifier of the private network user is sent to the redirect gateway; wherein the access transfer message is used to instruct the redirect gateway to send the device identifier of the private network mobile management device associated with the private network user to the private network user based on the user identifier of the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobile management device.

[0051] In a ninth aspect, the present application further provides a computer program product, the computer program product comprising a computer program, and when the computer program is executed by a processor, the following steps are implemented:

[0052] Receiving an access transfer message sent by a public network mobility management device of a public network; wherein the access transfer message is sent by the public network mobility management device after receiving an access request message from a private network user; the access transfer message carries a user identifier of the private network user;

[0053] Based on the user identifier of the private network user, the device identifier of the private network mobility management device associated with the private network user is sent to the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobility management device.

[0054] In a tenth aspect, the present application further provides another computer program product, the computer program product comprising a computer program, and when the computer program is executed by a processor, the following steps are implemented:

[0055] Receive access request messages sent by private network users;

[0056] Based on the access request message, an access transfer message carrying the user identifier of the private network user is sent to the redirect gateway; wherein the access transfer message is used to instruct the redirect gateway to send the device identifier of the private network mobile management device associated with the private network user to the private network user based on the user identifier of the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobile management device.

[0057] The above-mentioned private network access method, device, computer equipment and storage medium receive the access transfer message sent by the public network mobile management device of the public network through the redirection gateway. Among them, the access transfer message is sent by the public network mobile management device after receiving the access request message of the private network user. The access transfer message carries the user identifier of the private network user. Based on the user identifier of the private network user, the device identifier of the private network mobile management device associated with the private network user is sent to the private network user, and the private network user accesses the target private network based on the device identifier of the private network mobile management device. In this application, the access transfer message sent by the public network mobile management device of the public network is received based on the redirection gateway, and the device identifier of the private network mobile management device associated with the private network user is sent to the private network user through the redirection gateway, and the private network user accesses the target private network based on the device identifier of the private network mobile management device. In other words, in this application, there is no need for the private network mobile management device to interact with the public network mobile management device, and the private network user can also access the target private network. It can be applied to the scenario where there is a security isolation between the private network and the public network, which effectively solves the problem that the private network user cannot access the target private network in this scenario. BRIEF DESCRIPTION OF THE DRAWINGS

[0058] Figure 1 An application environment diagram of a private network access method provided in this embodiment;

[0059] Figure 2 A schematic diagram of the process of the first private network access method provided in this embodiment;

[0060] Figure 3 A schematic diagram of a process for accessing a target private network when the target network is a 5G communication network provided for this embodiment;

[0061] Figure 4 A schematic diagram of a process for accessing a target private network when the target network is a 4G communication network provided in this embodiment;

[0062] Figure 5 A schematic diagram of the process of the second private network access method provided in this embodiment;

[0063] Figure 6 A schematic diagram of a process for sending an access transfer message carrying a user identifier of a private network user to a redirection gateway provided in this embodiment when the target network is a 5G communication network;

[0064] Figure 7 A schematic diagram of a process of sending an access transfer message carrying a user identifier of a private network user to a redirection gateway provided in this embodiment when the target network is a 4G communication network;

[0065] Figure 8 A signaling interaction diagram of a private network access method provided for this embodiment when the target network is a 5G communication network;

[0066] Fig. 9 A signaling interaction diagram of a private network access method provided in this embodiment when the target network is a 4G communication network;

[0067] Fig.10 A structural block diagram of the first private network access device provided in this embodiment;

[0068] Fig.11 A structural block diagram of a second private network access device provided in this embodiment;

[0069] Fig.12 This is a diagram of the internal structure of the computer device provided in this embodiment. DETAILED DESCRIPTION

[0070] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0071] The private network access method provided in the embodiment of the present application can be applied to Figure 1In the application environment shown. The redirection gateway receives an access transfer message sent by a public network mobile management device of a public network; the access transfer message is sent by the public network mobile management device after receiving an access request message from a private network user; the access transfer message carries a user ID of the private network user. Based on the user ID of the private network user, the redirection gateway sends the device ID of the private network mobile management device associated with the private network user to the private network user, so that the private network user can access the target private network based on the device ID of the private network mobile management device.

[0072] The redirection gateway may be a gateway device applicable to the target network. It may also be a mobile management device in the target network. For example, if the target network is a 5G network, the redirection gateway may be an AMF network element. For example, if the target network is a 4G network, the redirection gateway may be an MME network element.

[0073] The public network refers to the public network in the target network. The public network mobile management device refers to the network element device with mobile management function authority in the public network. If the target network is a 5G network, the public network mobile management device can be a public network AMF network element. For example, if the target network is a 4G network, the public network mobile management device can be a public network MME network element.

[0074] A private network refers to a private network in the target network. The number of private networks is more than one. A private network mobile management device refers to a network element device with mobile management function authority in a private network. If the target network is a 5G network, the private network mobile management device can be a private network AMF network element. For example, if the target network is a 4G network, the private network mobile management device can be a private network MME network element.

[0075] In one embodiment, Figure 2 is a flow chart of a private network access method provided according to an embodiment of the present application, in which the method is applied to Figure 1 Taking the redirection gateway in the example as an example, the method includes the following steps:

[0076] S201, receiving an access transfer message sent by a public network mobility management device in a public network.

[0077] Among them, the access transfer message is a message for transferring the access of a private network user. The access transfer message is sent by the public network mobile management device after receiving the access request message of the private network user; the access transfer message carries the user identifier of the private network user. The public network mobile management device refers to a network element device with mobile management function authority in the public network. If the target network is a 5G network, the public network mobile management device can be a public network AMF network element. For example, if the target network is a 4G network, the public network mobile management device can be a public network MME network element. A private network user refers to a user terminal device that needs to access a private network. The user identifier refers to the unique identity identifier of a private network user, for example, it can be SUCI (SUbs cription Concealed Identifier). The access request message refers to a request message from a private network user requesting access to the network.

[0078] Optionally, in this embodiment, the redirection gateway directly or indirectly receives an access transfer message sent by a public network mobility management device of the public network.

[0079] Optionally, in this embodiment, the access transfer message further includes TAI (Tracing Area Identity / Tracking Area Indicator) information of the private network.

[0080] S202: Based on the user identifier of the private network user, send the device identifier of the private network mobility management device associated with the private network user to the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobility management device.

[0081] Among them, the device identifier refers to the unique identifier of the private network mobile management device.

[0082] Optionally, in this embodiment, an optional implementation method for determining the device identification of the private network mobile management device associated with the private network user is to determine the target private network associated with the private network user according to the user identification of the private network user, for example, according to the user identification, determine the private network subscribed by the user identification, and use the subscribed private network as the target private network. According to the target private network, determine the device identification of the private network mobile management device associated with the private network user.

[0083] Optionally, in this embodiment, according to the target private network, an optional implementation method for determining the device identifier of the private network mobile management device associated with the private network user is that if there is only one private network mobile management device in the target private network, the device identifier of the mobile management device is used as the device identifier of the private network mobile management device associated with the private network user. If there are more than two private network mobile management devices in the target network, the device identifier of the private network mobile management device that is closer to the private network user is used as the device identifier of the private network mobile management device associated with the private network user.

[0084] Optionally, in this embodiment, another optional implementation method for determining the device identifier of the private network mobile management device associated with the private network user based on the target private network is to use the device identifier corresponding to the private network mobile management device to which the private network user has been historically connected as the device identifier of the private network mobile management device associated with the private network user based on the target private network.

[0085] As an optional implementation method of the present application, a private network user is located based on the user identifier of the private network user, and the device identifier of the private network mobile management device associated with the private network user is sent to the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobile management device.

[0086] Optionally, in this embodiment, the device identifier of a private network mobile management device associated with the private network user is sent to the private network user so that the private network user can access the target private network based on the device identifier of the private network mobile management device. An optional implementation method is to locate the private network mobile management device according to the device identifier of the private network mobile management device associated with the private network user, and send a registration request to the private network mobile management device. If the registration is successful, access the target private network.

[0087] The above-mentioned private network access method receives the access transfer message sent by the public network mobile management device of the public network through the redirection gateway. Among them, the access transfer message is sent by the public network mobile management device after receiving the access request message of the private network user. The access transfer message carries the user identifier of the private network user. Based on the user identifier of the private network user, the device identifier of the private network mobile management device associated with the private network user is sent to the private network user, and the private network user accesses the target private network based on the device identifier of the private network mobile management device. In this application, the access transfer message sent by the public network mobile management device of the public network is received based on the redirection gateway, and the device identifier of the private network mobile management device associated with the private network user is sent to the private network user through the redirection gateway, and the private network user accesses the target private network based on the device identifier of the private network mobile management device. In other words, in this application, there is no need for the private network mobile management device to interact with the public network mobile management device, and the private network user can also access the target private network. It can be applied to the scenario where there is a security isolation between the private network and the public network, which effectively solves the problem that the private network user cannot access the target private network in this scenario.

[0088] In one of the embodiments, when the target network is a 5G communication network, an optional implementation of a private network access method includes:

[0089] The access request message is a registration request message; wherein, the registration request message carries the user identifier of the private network user; the registration request message is used to instruct the public network mobile management device to determine the target slice subscribed by the private network user based on the user identifier of the private network user, and when the public network mobile management device cannot support the target slice, determine the redirection gateway to receive the access transfer message based on the NSSF network element and the slice identifier of the target slice.

[0090] The registration request message refers to the registration message sent when a private network user requests to access the network. The target slice refers to the network slice subscribed by the private network user. The main function of the NSSF (Network Slice Selection Function) network element is to determine the network slice instance that the UE is allowed to access based on the UE's slice selection auxiliary information, contract information, etc.

[0091] Optionally, the access transfer message in this embodiment carries the user identifier (such as SUCI) and TAI information of the private network user, as well as the slice selection subscription information of the private network user.

[0092] Optionally, the registration request message in this embodiment also carries a user identifier (such as SUCI) and TAI information of the private network user.

[0093] Optionally, in this embodiment, the public network mobility management device determines the target slice to which the private network user subscribes based on the user identifier of the private network user by sending a subscription information query request to the UDM network element, wherein the subscription information query request carries the user identifier of the private network user. Based on the subscription information query request, the UDM network element feeds back the slice selection subscription information of the private network user to the public network mobility management device. The public network mobility management device determines the target slice to which the private network user subscribes based on the slice selection subscription information.

[0094] Optionally, in this embodiment, the public network mobile management device determines whether to support the target slice in an optional implementation manner as follows: the public network mobile management device matches the slice identifier of the target slice with the slice identifier in the local slice list. If the match is successful, it indicates that the target slice is supported. In this case, the target slice can be accessed through the public network mobile management device; if the match fails, it indicates that the target slice is not supported. In this case, it is necessary to query the mobile management device that supports the target slice. Among them, the local slice list records the supported network slices and the corresponding slice identifiers.

[0095] Optionally, in this embodiment, based on the slice identifier of the NSSF network element and the target slice, an optional implementation method for determining the redirection gateway that receives the access transfer message is as follows: the public network mobility management device sends a slice information query request to the NSSF network element based on the slice identifier. The NSSF network element feeds back the AMF network element that supports the target slice to the public network mobility management device based on the slice identifier, and uses the AMF network element that supports the target slice as the redirection gateway.

[0096] In this embodiment, in the 5G communication network, the access request message is a registration request message; wherein, the registration request message carries the user identifier of the private network user; the registration request message is used to instruct the public network mobile management device to determine the target slice subscribed by the private network user based on the user identifier of the private network user, and when the public network mobile management device cannot support the target slice, based on the NSSF network element and the slice identifier of the target slice, determine the redirection gateway to receive the access transfer message, thereby realizing the selection of the redirection gateway.

[0097] Based on the above embodiments, Figure 3 As shown, based on the user identifier of the private network user, an optional implementation method of sending the device identifier of the private network mobility management device associated with the private network user to the private network user so that the private network user can access the target private network based on the device identifier of the private network mobility management device includes:

[0098] S301, based on the user identifier of the private network user, sending a registration reception message and a deregistration request to the private network user.

[0099] The registration reception message carries the device identifier of the private network mobility management device associated with the private network user, and the device identifier can be GUAMI (Globally Unique AMF Identifier). The deregistration request is used to instruct the private network user to initiate a re-registration request to the private network mobility management device based on the device identifier of the private network mobility management device, and access the target private network if the registration is successful.

[0100] Optionally, in this embodiment, the registration reception message also includes a unique identifier of the private network user in the redirection gateway.

[0101] As an optional implementation of the embodiment of the present application, based on the user identifier of the private network user, the private network user is located, and a registration reception message and a deregistration request are sent to the private network user. Specifically, a registration reception message is first sent to the private network user, and then a deregistration request is sent to the private network user.

[0102] In this embodiment, based on the user ID of the private network user, a registration reception message and a deregistration request are sent to the private network user. Based on the device ID of the private network mobile management device, the private network user initiates a re-registration request to the private network mobile management device, and accesses the target private network if the registration is successful. This enables 5G private network users to directly access the 5GC private network without interaction between the target private network and the public network.

[0103] In one embodiment, when the target network is a 4G communication network, an optional implementation of a private network access method includes:

[0104] The access transfer message is an uninstall indication message; the access request message is an attach request message.

[0105] Among them, the attachment request message carries the user identifier of the private network user, and the user identifier may be IMSI (International Mobile Subscriber Identity). In addition, the attachment request information may also include TAI information of the private network user. The attachment request message is used to instruct the public network mobile management device to determine the redirection gateway for receiving the access transfer message based on the pre-configuration information and the user identifier of the private network user; the pre-configuration information includes the mapping relationship between the user identifier and the redirection gateway. Optionally, the pre-configuration information in this embodiment may be O&M (Operations & Maintenance) pre-configuration information. The uninstallation indication message refers to an indication message for uninstalling the private network user to the redirection gateway.

[0106] In this embodiment, when the target network is a 4G communication network, the uninstall indication message can be used as an access transfer message; the attachment request message can be used as an access request message to implement the application of this technology in the 4G communication network. The public network mobility management device determines the redirection gateway that receives the access transfer message based on the pre-configuration information and the user identifier of the private network user, thereby implementing the selection of the redirection gateway in the case of a 4G communication network.

[0107] Based on the above embodiments, Figure 4 As shown, based on the user identifier of the private network user, an optional implementation method of sending the device identifier of the private network mobility management device associated with the private network user to the private network user so that the private network user can access the target private network based on the device identifier of the private network mobility management device includes:

[0108] S401, sending an attachment reception message and a detachment request to the private network user based on the user identifier of the private network user.

[0109] The attachment reception message carries the device identification of the private network mobility management device associated with the private network user. The detachment request is used to instruct the private network user to initiate a reattachment request to the private network mobility management device based on the device identification of the private network mobility management device, and access the target private network if the attachment is successful.

[0110] Optionally, the device identifier of the private network mobility management device in this embodiment may be GUMMEI (Globally Unique MME Identity). The attach reception message may also include a unique identifier of the private network user in the redirect gateway.

[0111] As an optional implementation of the embodiment of the present application, based on the user identifier of the private network user, the private network user is located, and an attachment reception message and a detachment request are sent to the private network user. Specifically, an attachment reception message is first sent to the private network user, and a detachment request is then sent to the private network user.

[0112] In this embodiment, based on the user ID of the private network user, an attachment reception message and a detachment request are sent to the private network user. Based on the device ID of the private network mobility management device, the private network user initiates a reattachment request to the private network mobility management device, and accesses the target private network if the reattachment is successful. This enables the 4G private network user to directly access the 4G private network without interaction between the target private network and the public network.

[0113] In one embodiment, Figure 5 is a flow chart of a private network access method provided according to an embodiment of the present application, in which the method is applied to Figure 1 Taking the public network mobile management device in as an example, the method includes the following steps:

[0114] S501, receiving an access request message sent by a private network user.

[0115] Among them, the access request message refers to the request message from a private network user requesting to access the target private network.

[0116] S502: Based on the access request message, an access transfer message carrying a user identifier of the private network user is sent to the redirection gateway.

[0117] Among them, the access transfer message is used to instruct the redirection gateway to send the device identifier of the private network mobile management device associated with the private network user to the private network user based on the user identifier of the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobile management device.

[0118] Optionally, based on the access request message, a redirection gateway for receiving the access transfer message is determined, and the access transfer message carrying the user identifier of the private network user is sent to the redirection gateway.

[0119] Optionally, in this embodiment, an optional implementation method for determining the device identification of the private network mobile management device associated with the private network user is to determine the target private network associated with the private network user according to the user identification of the private network user, for example, according to the user identification, determine the private network subscribed by the user identification, and use the subscribed private network as the target private network. According to the target private network, determine the device identification of the private network mobile management device associated with the private network user.

[0120] Optionally, in this embodiment, according to the target private network, an optional implementation method for determining the device identifier of the private network mobile management device associated with the private network user is that if there is only one private network mobile management device in the target private network, the device identifier of the mobile management device is used as the device identifier of the private network mobile management device associated with the private network user. If there are more than two private network mobile management devices in the target network, the device identifier of the private network mobile management device that is closer to the private network user is used as the device identifier of the private network mobile management device associated with the private network user.

[0121] Optionally, in this embodiment, another optional implementation method for determining the device identifier of the private network mobile management device associated with the private network user based on the target private network is to use the device identifier corresponding to the private network mobile management device to which the private network user has been historically connected as the device identifier of the private network mobile management device associated with the private network user based on the target private network.

[0122] Optionally, in this embodiment, the device identifier of a private network mobile management device associated with the private network user is sent to the private network user so that the private network user can access the target private network based on the device identifier of the private network mobile management device. An optional implementation method is to locate the private network mobile management device according to the device identifier of the private network mobile management device associated with the private network user, and send a registration request to the private network mobile management device. If the registration is successful, access the target private network.

[0123] In this embodiment, the public network mobile management device receives an access request message sent by a private network user. Based on the access request message, an access transfer message carrying the user identifier of the private network user is sent to the redirection gateway; wherein the access transfer message is used to instruct the redirection gateway to send the device identifier of the private network mobile management device associated with the private network user to the private network user based on the user identifier of the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobile management device. The target private network can be accessed without the public network mobile management device interacting with the private network mobile management device.

[0124] In one embodiment, when the target network is a 5G communication network, the public network mobility management device is an AMF network element. The access request message may be a registration request message. The access transfer message carries the user identifier (e.g., SUCI) and TAI information of the private network user, as well as the slice selection subscription information of the private network user. The registration request message also carries the user identifier (e.g., SUCI) and TAI information of the private network user. On this basis, Figure 6 As shown, an optional implementation of S502 includes:

[0125] S601, based on the user identifier of the private network user, determine the target slice subscribed by the private network user.

[0126] Optionally, in this embodiment, a subscription information query request is sent to the UDM network element, wherein the subscription information query request carries the user identifier of the private network user. Based on the subscription information query request, the UDM network element feeds back the slice selection subscription information of the private network user to the public network mobile management device. The public network mobile management device determines the target slice to which the private network user subscribes based on the slice selection subscription information.

[0127] Optionally, in this embodiment, the public network mobile management device determines whether to support the target slice in an optional implementation manner as follows: the public network mobile management device matches the slice identifier of the target slice with the slice identifier in the local slice list. If the match is successful, it indicates that the target slice is supported. In this case, the target slice can be accessed through the public network mobile management device; if the match fails, it indicates that the target slice is not supported. In this case, it is necessary to query the mobile management device that supports the target slice. Among them, the local slice list records the supported network slices and the corresponding slice identifiers.

[0128] S602: When the public network mobile management device cannot support the target slice, determine the redirection gateway that receives the access transfer message based on the slice identifier of the NSSF network element and the target slice.

[0129] Optionally, in this embodiment, the public network mobility management device sends a slice information query request to the NSSF network element based on the slice identifier. The NSSF network element feeds back the AMF network element that supports the target slice to the public network mobility management device based on the slice identifier, and uses the AMF network element that supports the target slice as the redirection gateway.

[0130] S603: Send an access transfer message carrying the user identifier of the private network user to the redirection gateway.

[0131] In this embodiment, based on the user identifier of the private network user, the target slice subscribed by the private network user is determined, and when the public network mobility management device cannot support the target slice, based on the slice identifier of the NSSF network element and the target slice, the redirection gateway receiving the access transfer message is determined. An access transfer message carrying the user identifier of the private network user is sent to the redirection gateway. A solution for sending an access transfer message to a private network user in the case of a 5G communication network is implemented.

[0132] In one of the embodiments, when the target network is a 4G communication network, the public network mobile management device is an MME network element, the access transfer message is an uninstallation indication message; the access request message is an attachment request message; the attachment request message carries a user identifier of a private network user; the user identifier may be an IMSI; the attachment request message may also include TAI information of the private network user; the uninstallation indication message refers to an indication message for uninstalling the private network user to a redirection gateway. On this basis, Figure 7 As shown, an optional implementation of S502 includes:

[0133] S701, determining a redirection gateway based on pre-configuration information and a user identifier of a private network user.

[0134] The pre-configuration information includes a mapping relationship between a user identifier and a redirection gateway. The pre-configuration information may be O&M (Operations & Maintenance) pre-configuration information.

[0135] Optionally, in this embodiment, the user identifier of the private network user may be matched with the pre-configuration information, and the MME network element obtained by the match may be used as a redirection gateway.

[0136] S702: Send an access transfer message carrying a user identifier of the private network user to the redirection gateway.

[0137] In this embodiment, based on the pre-configured information and the user ID of the private network user, the redirection gateway can be quickly determined, and then an access transfer message carrying the user ID of the private network user is sent to the redirection gateway, effectively improving the efficiency of sending the access transfer message.

[0138] In one embodiment, when the target network is a 5G communication network, Figure 8 As shown, an optional implementation of a private network access method includes:

[0139] S801, a public network mobility management device receives a registration request message carrying a user identifier of a private network user, sent by a private network user.

[0140] S802, the public network mobile management device determines the target slice subscribed by the private network user based on the user identifier of the private network user.

[0141] S803, when the public network mobility management device cannot support the target slice, the public network mobility management device determines the redirection gateway to receive the access transfer message based on the NSSF network element and the slice identifier of the target slice.

[0142] S804, the public network mobility management device sends an access transfer message carrying the user identifier of the private network user to the redirection gateway.

[0143] S805, the redirection gateway sends a registration reception message to the private network user based on the user ID of the private network user, wherein the registration reception message carries the device ID of the private network mobility management device associated with the private network user.

[0144] S806, the redirection gateway sends a deregistration request to the private network user based on the user ID of the private network user, wherein the deregistration request is used to instruct the private network user to initiate a reregistration request to the private network mobility management device based on the device ID of the private network mobility management device, and access the target private network if the registration is successful.

[0145] In one embodiment, when the target network is a 4G communication network, Fig. 9 As shown, another optional implementation of a private network access method includes:

[0146] S901, a public network mobility management device receives an attach request message carrying a user identifier of a private network user, sent by a private network user.

[0147] S902: The public network mobility management device determines a redirection gateway based on pre-configuration information and a user identifier of the private network user, wherein the pre-configuration information includes a mapping relationship between the user identifier and the redirection gateway.

[0148] S903, the public network mobility management device sends an uninstallation instruction message carrying the user identifier of the private network user to the redirection gateway.

[0149] S904, the redirection gateway sends an attachment reception message to the private network user based on the user identifier of the private network user, wherein the attachment reception message carries the device identifier of the private network mobility management device associated with the private network user.

[0150] S905, the redirection gateway sends a detach request to the private network user based on the user ID of the private network user. The detach request is used to instruct the private network user to initiate a reattach request to the private network mobility management device based on the device ID of the private network mobility management device, and access the target private network if the attachment is successful.

[0151] In this embodiment, an access transfer message sent by a public network mobile management device of a public network is received through a redirection gateway. Among them, the access transfer message is sent by the public network mobile management device after receiving the access request message of the private network user. The access transfer message carries the user identifier of the private network user. Based on the user identifier of the private network user, the device identifier of the private network mobile management device associated with the private network user is sent to the private network user, and the private network user accesses the target private network based on the device identifier of the private network mobile management device. In this application, an access transfer message sent by a public network mobile management device of a public network is received based on a redirection gateway, and the device identifier of the private network mobile management device associated with the private network user is sent to the private network user through the redirection gateway, and the private network user accesses the target private network based on the device identifier of the private network mobile management device. In other words, in this application, there is no need for the private network mobile management device to interact with the public network mobile management device, and the private network user can also access the target private network. It can be applied to scenarios where there is security isolation between the private network and the public network, which effectively solves the problem that the private network user cannot access the target private network in this scenario.

[0152] It should be understood that, although the steps in the flowcharts involved in the above embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps is not strictly limited in order, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above embodiments may include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.

[0153] Based on the same inventive concept, the embodiment of the present application also provides a private network access device for implementing the private network access method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in one or more private network access device embodiments provided below can refer to the limitations on the private network access method above, and will not be repeated here.

[0154] In one embodiment, by Fig.10 FIG. 1 shows a structural block diagram of a private network access device in an embodiment. Fig.10 As shown, a private network access device 1 is provided, the device comprising: a first receiving module 11 and a first sending module 12, wherein:

[0155] The first receiving module 11 is used to receive an access transfer message sent by a public network mobility management device of a public network; wherein the access transfer message is sent by the public network mobility management device after receiving an access request message from a private network user; the access transfer message carries a user identifier of the private network user;

[0156] The first sending module 12 is used to send the device identifier of the private network mobile management device associated with the private network user to the private network user based on the user identifier of the private network user, so that the private network user can access the target private network pointed to by the device identifier of the private network mobile management device based on the device identifier of the private network mobile management device.

[0157] In one of the embodiments, if the target network is a 5G communication network, the redirection gateway is an AMF network element.

[0158] In one of the embodiments, the access request message is a registration request message; wherein the registration request message carries a user identifier of a private network user; the registration request message is used to instruct the public network mobile management device to determine the target slice subscribed by the private network user based on the user identifier of the private network user, and to determine the redirection gateway for receiving the access transfer message based on the slice identifier of the NSSF network element and the target slice when the public network mobile management device cannot support the target slice.

[0159] In one embodiment, Fig.10 The first sending module 12 is also specifically used for:

[0160] Based on the user identification of the private network user, a registration reception message and a deregistration request are sent to the private network user; wherein the registration reception message carries the device identification of the private network mobile management device associated with the private network user; the deregistration request is used to instruct the private network user to initiate a re-registration request to the private network mobile management device based on the device identification of the private network mobile management device, and access the target private network if the registration is successful.

[0161] In one of the embodiments, if the target network is a 4G communication network, the redirection gateway is an MME network element.

[0162] In one of the embodiments, the access transfer message is an uninstallation indication message; the access request message is an attachment request message; wherein the attachment request message carries a user identifier of a private network user; the attachment request message is used to instruct the public network mobile management device to determine a redirection gateway for receiving the access transfer message based on pre-configuration information and the user identifier of the private network user; the pre-configuration information includes a mapping relationship between the user identifier and the redirection gateway.

[0163] In one embodiment, Fig.10 The first sending module 12 is also specifically used for:

[0164] Based on the user identification of the private network user, an attachment reception message and a detachment request are sent to the private network user; wherein the attachment reception message carries the device identification of the private network mobile management device associated with the private network user; the detachment request is used to instruct the private network user to initiate a reattachment request to the private network mobile management device based on the device identification of the private network mobile management device, and access the target private network if the attachment is successful.

[0165] In one embodiment, Fig.10 The private network access device 1 further comprises:

[0166] A first determination module is used to determine a target private network associated with the private network user according to a user identifier of the private network user;

[0167] The second determination module is used to determine the device identifier of the private network mobility management device associated with the private network user according to the target private network.

[0168] In one embodiment, by Fig.11 FIG. 1 shows a structural block diagram of a private network access device in an embodiment. Figure 1 As shown, a private network access device 2 is provided, the device comprising: a second receiving module 21 and a second sending module 22, wherein:

[0169] The second receiving module 21 is used to receive an access request message sent by a private network user;

[0170] The second sending module 22 is used to send an access transfer message carrying the user identifier of the private network user to the redirection gateway based on the access request message; wherein the access transfer message is used to instruct the redirection gateway to send the device identifier of the private network mobile management device associated with the private network user to the private network user based on the user identifier of the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobile management device.

[0171] In one of the embodiments, if the target network is a 5G communication network, the public network mobility management device is an AMF network element.

[0172] In one embodiment, the access request message is a registration request message; wherein the registration request message carries a user identifier of the private network user; on this basis, Fig.11 The second sending module 22 is further specifically used for:

[0173] Based on the user ID of the private network user, determine the target slice subscribed by the private network user;

[0174] In the case where the public network mobility management device cannot support the target slice, a redirection gateway for receiving the access transfer message is determined based on the slice identifier of the NSSF network element and the target slice;

[0175] An access transfer message carrying the user identifier of the private network user is sent to the redirection gateway.

[0176] In one of the embodiments, if the target network is a 4G communication network, the public network mobility management device is an MME network element.

[0177] In one embodiment, the access transfer message is an uninstallation indication message; the access request message is an attachment request message; wherein the attachment request message carries a user identifier of a private network user; on this basis, Fig.11 The second sending module 22 is further specifically used for:

[0178] Determine the redirection gateway based on the pre-configuration information and the user identifier of the private network user; wherein the pre-configuration information includes a mapping relationship between the user identifier and the redirection gateway;

[0179] An access transfer message carrying the user identifier of the private network user is sent to the redirection gateway.

[0180] Each module in the above-mentioned private network access device can be implemented in whole or in part by software, hardware and their combination. Each of the above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory in the computer device in the form of software, so that the processor can call and execute the corresponding operations of each of the above modules.

[0181] In one embodiment, a computer device is provided. The computer device may be a platform side, and its internal structure diagram may be as shown in FIG. Fig.12 As shown. The computer device includes a processor, a memory and a network interface connected through a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The database of the computer device is used to store relevant information of the computing power node. The network interface of the computer device is used to communicate with the external user side through a network connection. When the computer program is executed by the processor, a private network access method is implemented.

[0182] Those skilled in the art will understand that Fig.12 The structure shown in the figure is merely a block diagram of a portion of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. Specifically, the computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0183] In one embodiment, a computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and when the processor executes the computer program, the following steps are implemented:

[0184] Receiving an access transfer message sent by a public network mobility management device of a public network; wherein the access transfer message is sent by the public network mobility management device after receiving an access request message from a private network user; the access transfer message carries a user identifier of the private network user;

[0185] Based on the user identifier of the private network user, the device identifier of the private network mobility management device associated with the private network user is sent to the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobility management device.

[0186] In one embodiment, when the processor executes the computer program, the following steps are also implemented: if the target network is a 5G communication network, the redirection gateway is an AMF network element.

[0187] In one of the embodiments, the access request message is a registration request message; wherein the registration request message carries a user identifier of a private network user; the registration request message is used to instruct the public network mobile management device to determine the target slice subscribed by the private network user based on the user identifier of the private network user, and to determine the redirection gateway for receiving the access transfer message based on the slice identifier of the NSSF network element and the target slice when the public network mobile management device cannot support the target slice.

[0188] In one embodiment, when the processor executes the computer program, the following steps are further implemented: based on the user identifier of the private network user, sending the device identifier of the private network mobility management device associated with the private network user to the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobility management device, including:

[0189] Based on the user identification of the private network user, a registration reception message and a deregistration request are sent to the private network user; wherein the registration reception message carries the device identification of the private network mobile management device associated with the private network user; the deregistration request is used to instruct the private network user to initiate a re-registration request to the private network mobile management device based on the device identification of the private network mobile management device, and access the target private network if the registration is successful.

[0190] In one embodiment, when the processor executes the computer program, the following steps are also implemented: if the target network is a 4G communication network, the redirection gateway is an MME network element.

[0191] In one embodiment, when the processor executes the computer program, the following steps are also implemented: the access transfer message is an uninstall indication message; the access request message is an attachment request message; wherein the attachment request message carries the user identifier of the private network user; the attachment request message is used to instruct the public network mobile management device to determine the redirection gateway for receiving the access transfer message based on the pre-configuration information and the user identifier of the private network user; the pre-configuration information includes a mapping relationship between the user identifier and the redirection gateway.

[0192] In one embodiment, when the processor executes the computer program, the following steps are further implemented: based on the user identifier of the private network user, sending the device identifier of the private network mobility management device associated with the private network user to the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobility management device, including:

[0193] Based on the user identification of the private network user, an attachment reception message and a detachment request are sent to the private network user; wherein the attachment reception message carries the device identification of the private network mobile management device associated with the private network user; the detachment request is used to instruct the private network user to initiate a reattachment request to the private network mobile management device based on the device identification of the private network mobile management device, and access the target private network if the attachment is successful.

[0194] In one embodiment, when the processor executes the computer program, the processor further implements the following steps:

[0195] Determine the target private network associated with the private network user according to the user ID of the private network user;

[0196] According to the target private network, determine the device identifier of the private network mobile management device associated with the private network user.

[0197] In one embodiment, another computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and when the processor executes the computer program, the following steps are implemented:

[0198] Receive access request messages sent by private network users;

[0199] Based on the access request message, an access transfer message carrying the user identifier of the private network user is sent to the redirect gateway; wherein the access transfer message is used to instruct the redirect gateway to send the device identifier of the private network mobile management device associated with the private network user to the private network user based on the user identifier of the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobile management device.

[0200] In one embodiment, when the processor executes the computer program, the following steps are also implemented: if the target network is a 5G communication network, the public network mobile management device is an AMF network element.

[0201] In one embodiment, when the processor executes the computer program, the following steps are further implemented: the access request message is a registration request message; wherein the registration request message carries a user identifier of the private network user;

[0202] Correspondingly, based on the access request message, an access transfer message carrying the user identifier of the private network user is sent to the redirection gateway, including:

[0203] Based on the user ID of the private network user, determine the target slice subscribed by the private network user;

[0204] In the case where the public network mobility management device cannot support the target slice, a redirection gateway for receiving the access transfer message is determined based on the slice identifier of the NSSF network element and the target slice;

[0205] An access transfer message carrying the user identifier of the private network user is sent to the redirection gateway.

[0206] In one embodiment, when the processor executes the computer program, the following steps are also implemented: if the target network is a 4G communication network, the public network mobility management device is an MME network element.

[0207] In one embodiment, when the processor executes the computer program, the following steps are further implemented: the access transfer message is an uninstallation indication message; the access request message is an attachment request message; wherein the attachment request message carries a user identifier of the private network user;

[0208] Correspondingly, based on the access request message, an access transfer message carrying the user identifier of the private network user is sent to the redirection gateway, including:

[0209] Determine the redirection gateway based on the pre-configuration information and the user identifier of the private network user; wherein the pre-configuration information includes a mapping relationship between the user identifier and the redirection gateway;

[0210] An access transfer message carrying the user identifier of the private network user is sent to the redirection gateway.

[0211] In one embodiment, a computer readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented:

[0212] Receiving an access transfer message sent by a public network mobility management device of a public network; wherein the access transfer message is sent by the public network mobility management device after receiving an access request message from a private network user; the access transfer message carries a user identifier of the private network user;

[0213] Based on the user identifier of the private network user, the device identifier of the private network mobility management device associated with the private network user is sent to the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobility management device.

[0214] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: if the target network is a 5G communication network, the redirection gateway is an AMF network element.

[0215] In one of the embodiments, the access request message is a registration request message; wherein the registration request message carries a user identifier of a private network user; the registration request message is used to instruct the public network mobile management device to determine the target slice subscribed by the private network user based on the user identifier of the private network user, and to determine the redirection gateway for receiving the access transfer message based on the slice identifier of the NSSF network element and the target slice when the public network mobile management device cannot support the target slice.

[0216] In one embodiment, when the processor executes the computer program, the following steps are further implemented: based on the user identifier of the private network user, sending the device identifier of the private network mobility management device associated with the private network user to the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobility management device, including:

[0217] Based on the user identification of the private network user, a registration reception message and a deregistration request are sent to the private network user; wherein the registration reception message carries the device identification of the private network mobile management device associated with the private network user; the deregistration request is used to instruct the private network user to initiate a re-registration request to the private network mobile management device based on the device identification of the private network mobile management device, and access the target private network if the registration is successful.

[0218] In one embodiment, when the processor executes the computer program, the following steps are also implemented: if the target network is a 4G communication network, the redirection gateway is an MME network element.

[0219] In one embodiment, when the processor executes the computer program, the following steps are also implemented: the access transfer message is an uninstall indication message; the access request message is an attachment request message; wherein the attachment request message carries the user identifier of the private network user; the attachment request message is used to instruct the public network mobile management device to determine the redirection gateway for receiving the access transfer message based on the pre-configuration information and the user identifier of the private network user; the pre-configuration information includes a mapping relationship between the user identifier and the redirection gateway.

[0220] In one embodiment, when the processor executes the computer program, the following steps are further implemented: based on the user identifier of the private network user, sending the device identifier of the private network mobility management device associated with the private network user to the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobility management device, including:

[0221] Based on the user identification of the private network user, an attachment reception message and a detachment request are sent to the private network user; wherein the attachment reception message carries the device identification of the private network mobile management device associated with the private network user; the detachment request is used to instruct the private network user to initiate a reattachment request to the private network mobile management device based on the device identification of the private network mobile management device, and access the target private network if the attachment is successful.

[0222] In one embodiment, when the processor executes the computer program, the processor further implements the following steps:

[0223] Determine the target private network associated with the private network user according to the user ID of the private network user;

[0224] According to the target private network, determine the device identifier of the private network mobile management device associated with the private network user.

[0225] In one embodiment, another computer-readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented:

[0226] Receive access request messages sent by private network users;

[0227] Based on the access request message, an access transfer message carrying the user identifier of the private network user is sent to the redirect gateway; wherein the access transfer message is used to instruct the redirect gateway to send the device identifier of the private network mobile management device associated with the private network user to the private network user based on the user identifier of the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobile management device.

[0228] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: if the target network is a 5G communication network, the public network mobile management device is an AMF network element.

[0229] In one embodiment, when the computer program is executed by the processor, the following steps are further implemented: the access request message is a registration request message; wherein the registration request message carries a user identifier of the private network user;

[0230] Correspondingly, based on the access request message, an access transfer message carrying the user identifier of the private network user is sent to the redirection gateway, including:

[0231] Based on the user ID of the private network user, determine the target slice subscribed by the private network user;

[0232] In the case where the public network mobility management device cannot support the target slice, a redirection gateway for receiving the access transfer message is determined based on the slice identifier of the NSSF network element and the target slice;

[0233] An access transfer message carrying the user identifier of the private network user is sent to the redirection gateway.

[0234] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: if the target network is a 4G communication network, the public network mobility management device is an MME network element.

[0235] In one embodiment, when the computer program is executed by the processor, the following steps are further implemented: the access transfer message is an uninstallation indication message; the access request message is an attachment request message; wherein the attachment request message carries a user identifier of the private network user;

[0236] Correspondingly, based on the access request message, an access transfer message carrying the user identifier of the private network user is sent to the redirection gateway, including:

[0237] Determine the redirection gateway based on the pre-configuration information and the user identifier of the private network user; wherein the pre-configuration information includes a mapping relationship between the user identifier and the redirection gateway;

[0238] An access transfer message carrying the user identifier of the private network user is sent to the redirection gateway.

[0239] In one embodiment, a computer program product is provided, comprising a computer program, which, when executed by a processor, implements the following steps:

[0240] Receiving an access transfer message sent by a public network mobility management device of a public network; wherein the access transfer message is sent by the public network mobility management device after receiving an access request message from a private network user; the access transfer message carries a user identifier of the private network user;

[0241] Based on the user identifier of the private network user, the device identifier of the private network mobility management device associated with the private network user is sent to the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobility management device.

[0242] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: if the target network is a 5G communication network, the redirection gateway is an AMF network element.

[0243] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: the access request message is a registration request message; wherein the registration request message carries the user identifier of the private network user; the registration request message is used to instruct the public network mobile management device to determine the target slice subscribed by the private network user based on the user identifier of the private network user, and when the public network mobile management device cannot support the target slice, determine the redirection gateway for receiving the access transfer message based on the NSSF network element and the slice identifier of the target slice.

[0244] In one embodiment, when the computer program is executed by the processor, the following steps are further implemented: based on the user identifier of the private network user, sending the device identifier of the private network mobility management device associated with the private network user to the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobility management device, including:

[0245] Based on the user identification of the private network user, a registration reception message and a deregistration request are sent to the private network user; wherein the registration reception message carries the device identification of the private network mobile management device associated with the private network user; the deregistration request is used to instruct the private network user to initiate a re-registration request to the private network mobile management device based on the device identification of the private network mobile management device, and access the target private network if the registration is successful.

[0246] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: if the target network is a 4G communication network, the redirection gateway is an MME network element.

[0247] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: the access transfer message is an uninstall indication message; the access request message is an attachment request message; wherein the attachment request message carries the user identifier of the private network user; the attachment request message is used to instruct the public network mobile management device to determine the redirection gateway for receiving the access transfer message based on the pre-configuration information and the user identifier of the private network user; the pre-configuration information includes a mapping relationship between the user identifier and the redirection gateway.

[0248] In one embodiment, when the computer program is executed by the processor, the following steps are further implemented: based on the user identifier of the private network user, sending the device identifier of the private network mobility management device associated with the private network user to the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobility management device, including:

[0249] Based on the user identification of the private network user, an attachment reception message and a detachment request are sent to the private network user; wherein the attachment reception message carries the device identification of the private network mobile management device associated with the private network user; the detachment request is used to instruct the private network user to initiate a reattachment request to the private network mobile management device based on the device identification of the private network mobile management device, and access the target private network if the attachment is successful.

[0250] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:

[0251] Determine the target private network associated with the private network user according to the user ID of the private network user;

[0252] According to the target private network, determine the device identifier of the private network mobile management device associated with the private network user.

[0253] In one embodiment, another computer program product is provided, including a computer program, which, when executed by a processor, implements the following steps:

[0254] Receive access request messages sent by private network users;

[0255] Based on the access request message, an access transfer message carrying the user identifier of the private network user is sent to the redirect gateway; wherein the access transfer message is used to instruct the redirect gateway to send the device identifier of the private network mobile management device associated with the private network user to the private network user based on the user identifier of the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobile management device.

[0256] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: if the target network is a 5G communication network, the public network mobile management device is an AMF network element.

[0257] In one embodiment, the access request message is a registration request message; wherein the registration request message carries a user identifier of the private network user;

[0258] Correspondingly, based on the access request message, an access transfer message carrying the user identifier of the private network user is sent to the redirection gateway, including:

[0259] Based on the user ID of the private network user, determine the target slice subscribed by the private network user;

[0260] In the case where the public network mobility management device cannot support the target slice, a redirection gateway for receiving the access transfer message is determined based on the slice identifier of the NSSF network element and the target slice;

[0261] An access transfer message carrying the user identifier of the private network user is sent to the redirection gateway.

[0262] In one embodiment, when the computer program is executed by the processor, the following steps are also implemented: if the target network is a 4G communication network, the public network mobility management device is an MME network element.

[0263] In one embodiment, when the computer program is executed by the processor, the following steps are further implemented: the access transfer message is an uninstallation indication message; the access request message is an attachment request message; wherein the attachment request message carries a user identifier of the private network user;

[0264] Correspondingly, based on the access request message, an access transfer message carrying the user identifier of the private network user is sent to the redirection gateway, including:

[0265] Determine the redirection gateway based on the pre-configuration information and the user identifier of the private network user; wherein the pre-configuration information includes a mapping relationship between the user identifier and the redirection gateway;

[0266] An access transfer message carrying the user identifier of the private network user is sent to the redirection gateway.

[0267] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., but are not limited to this.

[0268] The technical features of the above embodiments may be arbitrarily combined. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0269] The above embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.

Claims

1. A private network access method, characterized in that: A redirection gateway applied to a target network, wherein the target network includes a public network and a private network, and the method includes: Receiving an access transfer message sent by a public network mobility management device of a public network; wherein the access transfer message is sent by the public network mobility management device after receiving an access request message from a private network user; the access transfer message carries a user identifier of the private network user; Based on the user identifier of the private network user, the device identifier of the private network mobility management device associated with the private network user is sent to the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobility management device.

2. The method according to claim 1, characterized in that If the target network is a fifth generation mobile communication technology 5G communication network, the redirection gateway is an access and mobility management function AMF network element.

3. The method according to claim 2, characterized in that The access request message is a registration request message; wherein, the registration request message carries the user identifier of the private network user; the registration request message is used to instruct the public network mobile management device to determine the target slice subscribed by the private network user based on the user identifier of the private network user, and when the public network mobile management device cannot support the target slice, determine the redirection gateway to receive the access transfer message based on the network slice selection function NSSF network element and the slice identifier of the target slice.

4. The method according to claim 2, characterized in that: The sending, based on the user identifier of the private network user, the device identifier of the private network mobility management device associated with the private network user to the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobility management device, includes: Based on the user identification of the private network user, a registration reception message and a de-registration request are sent to the private network user; wherein the registration reception message carries the device identification of the private network mobile management device associated with the private network user; the de-registration request is used to instruct the private network user to initiate a re-registration request to the private network mobile management device based on the device identification of the private network mobile management device, and access the target private network if the registration is successful.

5. The method according to claim 1, characterized in that If the target network is a fourth generation mobile communication technology 4G communication network, the redirection gateway is a mobile management node MME network element.

6. The method according to claim 5, characterized in that The access transfer message is an uninstall indication message; the access request message is an attachment request message; wherein the attachment request message carries the user identifier of the private network user; the attachment request message is used to instruct the public network mobile management device to determine the redirection gateway that receives the access transfer message based on the pre-configuration information and the user identifier of the private network user; the pre-configuration information includes a mapping relationship between the user identifier and the redirection gateway.

7. The method according to claim 6, characterized in that The sending, based on the user identifier of the private network user, the device identifier of the private network mobility management device associated with the private network user to the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobility management device, includes: Based on the user identifier of the private network user, an attachment reception message and a detachment request are sent to the private network user; wherein the attachment reception message carries the device identifier of the private network mobile management device associated with the private network user; the detachment request is used to instruct the private network user to initiate a reattachment request to the private network mobile management device based on the device identifier of the private network mobile management device, and access the target private network if the attachment is successful.

8. The method according to any one of claims 1 to 7, characterized in that The method further comprises: Determining a target private network associated with the private network user according to the user identifier of the private network user; According to the target private network, a device identifier of a private network mobility management device associated with the private network user is determined.

9. A private network access method, characterized in that: A public network mobility management device applied to a target network, wherein the target network includes a public network and a private network, and the method includes: Receive access request messages sent by private network users; Based on the access request message, an access transfer message carrying the user identifier of the private network user is sent to the redirect gateway; wherein the access transfer message is used to instruct the redirect gateway to send the device identifier of the private network mobile management device associated with the private network user to the private network user based on the user identifier of the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobile management device.

10. The method according to claim 9, characterized in that If the target network is a 5G communication network, the public network mobile management device is an access and mobility management function AMF network element.

11. The method according to claim 10, characterized in that The access request message is a registration request message; wherein the registration request message carries a user identifier of the private network user; Correspondingly, sending an access transfer message carrying the user identifier of the private network user to the redirection gateway based on the access request message includes: Based on the user identifier of the private network user, determine the target slice subscribed by the private network user; In the case where the public network mobility management device cannot support the target slice, determining a redirection gateway for receiving the access transfer message based on the NSSF network element and the slice identifier of the target slice; An access transfer message carrying the user identifier of the private network user is sent to the redirection gateway.

12. The method according to claim 9, characterized in that If the target network is a 4G communication network, the public network mobility management device is an MME network element.

13. The method according to claim 12, characterized in that The access transfer message is an uninstallation indication message; the access request message is an attachment request message; wherein the attachment request message carries a user identifier of the private network user; Correspondingly, sending an access transfer message carrying the user identifier of the private network user to the redirection gateway based on the access request message includes: Determine the redirection gateway based on the pre-configuration information and the user identifier of the private network user; wherein the pre-configuration information includes a mapping relationship between the user identifier and the redirection gateway; An access transfer message carrying the user identifier of the private network user is sent to the redirection gateway.

14. A private network access device, characterized in that: A redirection gateway configured in a target network, the device comprising: A first receiving module is used to receive an access transfer message sent by a public network mobility management device of a public network; wherein the access transfer message is sent by the public network mobility management device after receiving an access request message from a private network user; the access transfer message carries a user identifier of the private network user; The first sending module is used to send the device identifier of the private network mobile management device associated with the private network user to the private network user based on the user identifier of the private network user, so that the private network user can access the target private network pointed to by the device identifier of the private network mobile management device based on the device identifier of the private network mobile management device.

15. A private network access device, characterized in that: A public network mobility management device configured in a target network, the device comprising: A second receiving module is used to receive an access request message sent by a private network user; The second sending module is used to send an access transfer message carrying the user identifier of the private network user to the redirection gateway based on the access request message; wherein the access transfer message is used to instruct the redirection gateway to send the device identifier of the private network mobile management device associated with the private network user to the private network user based on the user identifier of the private network user, so that the private network user can access the target private network based on the device identifier of the private network mobile management device.

16. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 13 are implemented.

17. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 13 are implemented.

18. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 13 are implemented.

Images