Authentication method, data configuration method, electronic equipment and storage medium

Abstract

The invention provides an authentication method, a data configuration method, electronic equipment and a storage medium, and relates to the technical field of wireless communication. The authentication method comprises the steps that acquired to-be-authenticated data are analyzed, configuration information in the to-be-authenticated data is determined, and the configuration information comprises modification information of network configuration parameters; and according to the configuration information in the to-be-authenticated data, performing authentication by adopting an authentication mode corresponding to the configuration information. According to the invention, the authentication mode corresponding to the configuration information can be selectively used for authentication, the authentication duration of the to-be-authenticated data is reduced, and the authentication efficiency is effectively improved.

Description

Technical Field

[0001] The present application relates to the field of wireless communication technology, and in particular to an authentication method, a data configuration method, an electronic device and a storage medium. Background Art

[0002] In a communication network, different network element devices can control the capacity and service functions of the network through configuration data. For example, communication operators use the method of obtaining licenses to authenticate the configuration data of network element devices. When a communication operator (or enterprise customer) purchases a license from an equipment manufacturer, the communication operator can use the software functions corresponding to the license provided by the equipment manufacturer based on the authorization of the equipment manufacturer.

[0003] However, in the existing license-based device authentication method, the modification time of configuration data is too long, which reduces the efficiency of data configuration. Especially when there are many devices in the communication network and a large amount of data needs to be modified in batches at one time, it greatly affects the efficiency of operation and maintenance. Summary of the invention

[0004] The present application provides an authentication method, a data configuration method, an electronic device and a storage medium.

[0005] An embodiment of the present application provides an authentication method, which includes: analyzing the acquired data to be authenticated, determining configuration information in the data to be authenticated, the configuration information including modification information of network configuration parameters; and performing authentication according to the configuration information in the data to be authenticated using an authentication method corresponding to the configuration information.

[0006] An embodiment of the present application provides a data configuration method, which includes: sending data to be authenticated to an authentication management device, wherein the data to be authenticated includes configuration information, and the configuration information includes modification information of network configuration parameters; based on an authentication result of the authentication management device on the data to be authenticated, determining to use the configuration information in the data to be authenticated to configure a device.

[0007] An embodiment of the present application provides an electronic device, including: one or more processors; a memory, on which one or more programs are stored. When the one or more programs are executed by the one or more processors, the one or more processors implement any one of the authentication methods or data configuration methods in the embodiments of the present application.

[0008] An embodiment of the present application provides a readable storage medium, which stores a computer program. When the computer program is executed by a processor, any one of the authentication methods or data configuration methods in the embodiments of the present application is implemented.

[0009] According to the authentication method, electronic device and storage medium of the embodiment of the present application, the configuration information in the data to be authenticated is determined by analyzing the acquired data to be authenticated, and the configuration information includes modification information of network configuration parameters, so as to obtain the modification information of network configuration parameters and clarify the data to be authenticated that needs to be authenticated; according to the configuration information in the data to be authenticated, the authentication method corresponding to the configuration information is adopted for authentication, and the authentication method corresponding to the configuration information can be selectively used for authentication, thereby reducing the authentication time of the data to be authenticated and effectively improving the authentication efficiency.

[0010] According to the data configuration method, electronic device and storage medium of the embodiment of the present application, by sending the data to be authenticated to the authentication management device, the data to be authenticated includes configuration information, and the configuration information includes modification information of network configuration parameters, so that the authentication management device can obtain the modification information of the network configuration parameters, and clarify the data that needs to be authenticated in the data to be authenticated, so that the authentication management device can selectively use the authentication method corresponding to the configuration information for authentication, thereby reducing the authentication time of the authentication data and effectively improving the authentication efficiency; further, based on the authentication result of the authentication management device on the authentication data obtained, it is determined to use the data to be authenticated to configure the device, which can improve the configuration effectiveness of the device and improve the operation and maintenance efficiency of the device.

[0011] With regard to the above embodiments and other aspects of the present application and their implementation, further description is provided in the accompanying drawings, detailed description and claims. BRIEF DESCRIPTION OF THE DRAWINGS

[0012] Figure 1 A flow chart of the authentication method provided in an embodiment of the present application is shown.

[0013] Figure 2 A flow chart showing a data configuration method provided in an embodiment of the present application is shown.

[0014] Figure 3 A block diagram showing the composition of an authentication device provided in an embodiment of the present application is shown.

[0015] Figure 4 A block diagram showing the composition of a data configuration device provided in an embodiment of the present application is shown.

[0016] Figure 5 A block diagram showing the composition of the authentication system provided in an embodiment of the present application is shown.

[0017] Figure 6 A schematic diagram of the interaction process between various devices in the authentication system provided in an embodiment of the present application is shown.

[0018] Figure 7 A flow chart of the authentication method provided in an embodiment of the present application is shown.

[0019] Figure 8 A flow chart of the authentication method provided in an embodiment of the present application is shown.

[0020] Fig. 9 A block diagram showing the composition of a computing device provided in an embodiment of the present application is shown. DETAILED DESCRIPTION

[0021] In order to make the purpose, technical solution and advantages of the present application more clear, the embodiments of the present application will be described in detail below with reference to the accompanying drawings. It should be noted that the embodiments and features in the embodiments of the present application can be combined with each other arbitrarily without conflict.

[0022] In a communication network, the capacity and service functions of the communication network are usually controlled based on configuration data, wherein the management of the license can be achieved by authenticating the configuration data. In the existing management methods for licenses, any modification of the configuration data requires authentication, that is, to determine whether the configuration data meets the authorization permission of the license. If it is determined that the configuration data does not meet the authorization permission of the license, the configuration data will be prohibited from taking effect. However, the above processing method will cause the modification time of the configuration data to be too long, reducing the configuration efficiency of the data, especially in the case of batch configuration of multiple network element devices, which greatly affects the operation and maintenance efficiency in the communication network.

[0023] The present application provides an authentication method, a data configuration method, an electronic device and a storage medium to solve the above problems.

[0024] Figure 1 The flowchart of the authentication method provided by the embodiment of the present application is shown. The authentication method can be applied to an authentication device, which can be set in any device among a base station, a network management device, and an authentication control center server. Figure 1 As shown, the authentication method in the embodiment of the present application includes but is not limited to the following steps.

[0025] Step S101: Analyze the acquired data to be authenticated to determine the configuration information in the data to be authenticated.

[0026] The configuration information includes modification information of network configuration parameters.

[0027] The data to be authenticated may be data carried in a request message sent by an operation and maintenance management module in the base station; or data carried in a request message sent by a network management device to the base station, wherein the modification information of network configuration parameters includes modification information of single-station configuration parameters of the base station, and / or modification information of configuration parameters of all base stations within the jurisdiction of the network management device.

[0028] In some embodiments, the data to be authenticated may also be data carried in a request message in which the operation and maintenance personnel use a local maintenance terminal (Local Maintenance Terminal, LMT) to modify the configuration parameters of the base station; the authentication request may also be data carried in a request message in which the operation and maintenance personnel use a third-party tool to call a preset application interface provided by the base station to modify the configuration parameters of the base station.

[0029] The above data to be authenticated are only examples, which can be specifically set according to actual needs. Other unspecified data to be authenticated are also within the protection scope of this application and will not be described in detail here.

[0030] Step S102: Perform authentication according to the configuration information in the data to be authenticated by using an authentication method corresponding to the configuration information.

[0031] In this embodiment, the acquired data to be authenticated is analyzed to determine the configuration information in the data to be authenticated, the configuration information includes the modification information of the network configuration parameters, so as to obtain the modification information of the network configuration parameters and clarify the data to be authenticated that needs to be authenticated; according to the configuration information in the data to be authenticated, the authentication method corresponding to the configuration information is adopted for authentication, and the authentication method corresponding to the configuration information can be selectively used for authentication, thereby reducing the authentication time of the data to be authenticated and effectively improving the authentication efficiency.

[0032] In some exemplary embodiments, authentication in step S102 is performed based on the configuration information in the data to be authenticated using an authentication method corresponding to the configuration information, which can be implemented in the following manner: determining the type of control item contained in the modification information of the network configuration parameters; and performing authentication based on the control item type using an authentication method corresponding to the configuration information.

[0033] Among them, the control item types include key control items and non-key control items. Key control items can be preset license items that determine software revenue and have an impact on basic service functions in the communication network. For example, a key control item can be a license item set for the number of communication cells, or a license item set for the number of carriers, and so on. The above key control items are only examples, and specific settings can be made according to actual conditions. Other unspecified key control items are also within the scope of protection of this application and will not be repeated here.

[0034] By determining the control item type contained in the modification information of the network configuration parameters, the importance of the modification information of the network configuration parameters can be clarified, so that authentication is performed based on the control item type using the authentication method corresponding to the configuration information, so that the authentication method can meet the authentication requirements of the control item type. In addition, due to the importance of key control items, the first authentication method can be used to authenticate the key control items; and for non-key control items with relatively low importance, the second authentication method can be used to authenticate the non-key control items, so that different control item types can be authenticated using different authentication methods, thereby improving authentication efficiency.

[0035] In some exemplary embodiments, authentication is performed based on the control item type using an authentication method corresponding to the configuration information, including: using a first authentication method to authenticate critical control items; and when it is determined that the modification information of the network configuration parameters includes modification information of non-critical control items, using a second authentication method to authenticate the non-critical control items.

[0036] Among them, the key control items correspond to multiple core configuration parameters; the non-key control items correspond to multiple other configuration parameters, and the multiple other configuration parameters are parameters other than the multiple core configuration parameters.

[0037] For example, the key control items correspond to multiple core configuration parameters including the number of communication cells, the number of carriers, frequency band information (eg, the frequency range of the frequency band, etc.), and at least one of energy-saving parameters.

[0038] In a communication system, a license entry may include one or more of a license type, a license code as a unique identifier of the license, a license version number, a license creation date, and a license expiration date. Under each license entry, multiple core configuration parameters may correspond. For example, under a license entry for the number of communication cells, key control items correspond to core configuration parameters such as the number of communication cells and the type of communication cells; under a key control item for the number of carriers, key control items correspond to multiple core configuration parameters such as carrier frequency information, the number of carriers, and carrier corresponding amplitude or phase information.

[0039] If the modification information of the network configuration parameters includes a key control item, the key control item needs to be authenticated; if the modification information of the network configuration parameters does not include a key control item, due to the importance of the key control item, in order to ensure the normal operation of the communication system, the key control item also needs to be authenticated. In other words, full authentication is required for the key control item.

[0040] For non-critical control items, when it is determined that the modification information of the network configuration parameters includes the modification information of non-critical control items, the non-critical control items need to be authenticated to determine whether the modification of the non-critical control items meets the requirements, reduce the data modification time, and improve data configuration efficiency.

[0041] Different authentication methods are used to authenticate key control items and non-key control items respectively, and different authentication processes can be performed on different categories of information in the configuration information, thereby speeding up the processing of authentication data and improving data authentication efficiency.

[0042] In some exemplary embodiments, the key control item is authenticated using a first authentication method, including:

[0043] Determine a target license quantity; and when the target license quantity is less than or equal to a preset license quantity threshold, determine that authentication of the key control item is passed;

[0044] When the target number of licenses is greater than the preset license number threshold and the modification information of the key control item is used to reduce the required number of licenses for the modified key control item, it is determined that the authentication of the key control item is passed; when the target number of licenses is greater than the preset license number threshold and the modification information of the key control item is not used to reduce the required number of licenses for the modified key control item, it is determined that the authentication has failed.

[0045] The authentication failure means that all the data in the authentication data are not authenticated.

[0046] It should be noted that the target license quantity has different meanings in different situations to reflect the impact of modifications to different configuration parameters of key control items and non-key control items on the license quantity.

[0047] For example, if the preset license quantity threshold is set to A, the target license quantity is set to B, and both A and B are integers greater than 1. When B≦A, it can be directly determined that the authentication of the key control item is passed; when B>A, it is necessary to make different judgments based on the impact of the modification information of the key control item on the required license quantity of the modified key control item.

[0048] In some embodiments, determining a target license quantity includes: when the modification information of the network configuration parameters includes the modification information of the key control item, the target license quantity is the required license quantity of the modified key control item determined based on the modification information of the key control item; when the modification information of the network configuration parameters does not include the modification information of the key control item, the target license quantity is the current required license quantity of the key control item.

[0049] If the modification information of the key control item is used to reduce the number of required licenses for the modified key control item, that is, after the modification is made according to the modification information of the key control item, the number of required licenses for the modified key control item is reduced based on the number of licenses that have been originally obtained, then it can be determined that the authentication of the key control item is passed.

[0050] For example, when the modification information of the network configuration parameters does not include the modification information of the key control item, the current required license quantity of the key control item is 3, then the target license quantity at this time is 3, and the preset license quantity threshold is set to 5. At this time, since the target license quantity is less than the preset license quantity threshold, it can be determined that the authentication of the key control item is passed. It is no longer possible to apply for additional license quantities to meet the modification requirements of the key control item. It is also possible to realize the recovery of the license quantity to reduce the waste of license resources.

[0051] If the modification information of the key control item is not satisfied, the number of licenses required for the modified key control item is reduced, that is, after the modification according to the modification information of the key control item, the number of licenses required for the modified key control item needs to be increased based on the number of licenses originally obtained. At this time, the number of licenses originally obtained cannot meet the modification requirements for the key control item, and therefore, it is determined that the authentication fails.

[0052] For example, when the modification information of the network configuration parameters includes the modification information of the key control items, the modification is performed according to the modification information of the key control items, and the required license quantity of the modified key control items is 8, and the target license quantity (e.g., 5) is greater than the preset license quantity threshold (e.g., 6), then it is determined that the authentication fails. Moreover, if it is desired to modify the key control items, it is necessary to apply for more licenses from the authentication control device to further determine whether the authentication of the key control items passes.

[0053] By comparing the target license quantity and the preset license quantity threshold in different situations, and considering the impact of the modification information of the key control item on the required license quantity of the modified key control item, the authentication accuracy of the authentication data can be improved and the occurrence rate of configuration errors of the authentication data can be reduced.

[0054] In some exemplary embodiments, authenticating the non-critical control item using the second authentication method includes: skipping the authentication step if it is determined that the modification information of the non-critical control item is irrelevant to the number of licenses;

[0055] When it is determined that the modification information of the non-critical control items is related to the number of licenses, the target number of licenses is determined; when the target number of licenses is less than or equal to the preset license number threshold, it is determined that the authentication of the non-critical control items is passed; when the target number of licenses is greater than the preset license number threshold, it is determined that the authentication has failed.

[0056] The target license quantity is the required license quantity of the non-critical control item after modification according to the modification information of the non-critical control item. Failure to authenticate the authentication data means that all data in the authentication data are not authenticated.

[0057] Since non-critical control items correspond to multiple other configuration parameters, which are parameters other than multiple core configuration parameters, modifications to non-critical control items will not affect the normal operation of the device. In the process of authenticating the authentication data, if it is determined that the modification information of the non-critical control items is irrelevant to the number of licenses, the authentication step can be skipped directly, which speeds up the processing of the authentication data and reduces the processing time of the authentication data.

[0058] If it is determined that the modification information of non-critical control items is related to the number of licenses, then based on the determined number of target licenses, the non-critical control items that need to be authenticated can be obtained by extracting data related to the usage of licenses in the data to be authenticated. Further, the non-critical control items are modified according to the modification information of the non-critical control items, and the required number of licenses for the modified non-critical control items (i.e., the target number of licenses) is determined, which can effectively reduce the amount of data processing. For other data in the data to be authenticated except the modification information of non-critical control items, since it does not involve the usage of licenses, the authentication step can be skipped for other data in the data to be authenticated except the modification information of non-critical control items, thereby shortening the authentication time and speeding up the processing speed of the data to be authenticated.

[0059] If the target license quantity is less than or equal to the preset license quantity threshold, that is, the number of licenses that the current device can authorize (that is, the preset license quantity threshold) can meet the current authentication needs for non-critical control items, it can be directly determined that the authentication of non-critical control items is passed, thereby shortening the authentication time.

[0060] If the target license quantity exceeds the number of licenses that the current device can be authorized to obtain (i.e., the target license quantity is greater than the preset license quantity threshold), the current device can no longer use the number of licenses that have been obtained to authenticate non-critical control items, and therefore determines that the authentication fails.

[0061] Based on the determination of the number of licenses in the above different situations, non-critical control items can be processed differently according to the situation, thereby speeding up the processing of authentication data and improving data maintenance efficiency.

[0062] In some exemplary embodiments, when the target license quantity is greater than a preset license quantity threshold, the method further includes: applying for a license for authentication from an authentication control device.

[0063] The authentication control device may be an authentication control center server connected to the network management device, or may be a network management device connected to the base station.

[0064] By applying for a license for authentication from the authentication control device, more licenses for authentication can be obtained to meet the authentication requirements for authentication data and speed up the processing of authentication data.

[0065] In some exemplary embodiments, before applying for a license for authentication from the authentication control device, the method further includes: determining a subnet identifier and a group identifier corresponding to the data to be authenticated; determining the number of licenses to be applied for based on the number of licenses acquired by the current device and the number of target licenses, the type of the license being a shared license (e.g., a shared license);

[0066] Applying for a license for authentication from an authentication control device includes: generating an authentication request according to the number of licenses to be applied for and a subnet identifier and a group identifier corresponding to the data to be authenticated; and sending the authentication request to the authentication control device.

[0067] The number of licenses required to be applied for may be a number determined based on the difference between the target number of licenses and the number of licenses currently acquired by the device, and the number of licenses required to be applied for can meet the use requirements for authenticating the authentication data.

[0068] It should be noted that network grouping, operator classification, etc. can be used to distinguish all devices in the communication network where the current device is located, so as to obtain the subnet identifier and group identifier corresponding to the current device. When the current device receives the data to be authenticated and determines that the subnet identifier and group identifier corresponding to the data to be authenticated are the same as the subnet identifier and group identifier corresponding to the current device, an authentication request can be generated based on the number of licenses to be applied for and the subnet identifier and group identifier corresponding to the data to be authenticated; then, the authentication request is sent to the authentication control device, so that the authentication control device issues a license for authentication to the current device, thereby improving the accuracy of processing the authentication data.

[0069] In some exemplary embodiments, before executing step S102 of performing authentication based on the configuration information in the data to be authenticated using an authentication method corresponding to the configuration information, the method also includes: matching the data to be authenticated with the attribute information of the current device; and when it is determined that the data to be authenticated matches the attribute information of the current device, determining that the data to be authenticated needs to be authenticated.

[0070] The attribute information of the current device includes a device identifier corresponding to the current device and a network identifier of the current device in the network in which the current device is located.

[0071] By matching the data to be authenticated with the attribute information of the current device, the proportion of parameter configuration errors in the current device using the data to be authenticated can be reduced; the data to be authenticated only needs to be authenticated when it is determined that the data to be authenticated matches the attribute information of the current device, thereby improving the processing accuracy of the data to be authenticated.

[0072] In some exemplary embodiments, the preset license quantity threshold is the number of licenses that a single base station is allowed to obtain;

[0073] In the case where the modification information of the network configuration parameters includes the modification information of the key control items, the target license quantity is the required license quantity of the modified key control items determined by modifying the core configuration parameters in a single base station according to the modification information of the key control items; in the case where the modification information of the network configuration parameters does not include the modification information of the key control items, the target license quantity is the current required license quantity of the key control items in a single base station.

[0074] Within the scope of a single base station, the acquired data to be authenticated is analyzed, and when it is determined that the modification information of the network configuration parameters includes the modification information of the key control items, the core configuration parameters in the single base station are modified according to the modification information of the key control items to obtain the core configuration parameters corresponding to the modified key control items, and based on the core configuration parameters corresponding to the modified key control items, the required number of licenses for the modified key control items is determined; so as to facilitate rapid authentication processing of the key control items and speed up the processing of the authentication data.

[0075] When it is determined that the configuration information does not include modification information of key control items, the target license quantity is the current required license quantity for key control items within a single base station. In other words, in the process of authenticating the authentication data, it is only necessary to compare the target license quantity within a single base station with the preset license quantity threshold to determine whether the authentication data is authenticated, thereby improving authentication efficiency.

[0076] In some exemplary embodiments, the preset license quantity threshold represents the quantity of licenses allowed to be obtained within the communication network governed by the network management device;

[0077] In the case where the modification information of the network configuration parameters includes the modification information of the key control items, the target license quantity is the required license quantity of the modified key control items determined by modifying the core configuration parameters in the communication network governed by the network management device according to the modification information of the key control items; in the case where the modification information of the network configuration parameters does not include the modification information of the key control items, the target license quantity is the current required license quantity of the key control items in the communication network governed by the network management device.

[0078] The preset license quantity threshold represents the quantity of licenses that all network element devices in the communication network managed by the network management device are allowed to obtain together.

[0079] For example, if the preset license quantity threshold is set to 50, and the communication network managed by the network management device includes 5 network element devices, then the 5 network element devices can share the 50 licenses.

[0080] It should be noted that the obtained preset license quantity threshold licenses are shared within the communication network governed by the network management device. However, the processing based on the shared licenses is also authenticated for the internal configuration parameters of each base station. Therefore, based on whether the modification information of the network configuration parameters includes the modification information of the key control items, the target license quantity is determined respectively, so that the comparison between the target license quantity and the preset license quantity threshold is changed, thereby determining whether the authentication is passed.

[0081] For example, the data of the license corresponding to a base station can be obtained by the difference between the total number of licenses obtained in the communication network governed by the network management device and the data of the licenses corresponding to other base stations; or, the total number of licenses obtained in the communication network governed by the network management device can be determined by the sum of the numbers of licenses corresponding to all base stations.

[0082] Figure 2 The data configuration method provided by the embodiment of the present application is shown in the flowchart. The data configuration method can be applied to a data configuration device, which can be set in a base station, a network management device, a terminal held by an operation and maintenance personnel, and other equipment.

[0083] For example, when the authentication management device is set in the network management equipment, the corresponding data configuration device can be set in the base station; when the authentication management device is set in the authentication control center server, the corresponding data configuration device can be set in the network management equipment; when the authentication management device is set in the OAM module in the base station, the corresponding data configuration device can be set in the terminal held by the operation and maintenance personnel.

[0084] like Figure 2 As shown, the data configuration method in the embodiment of the present application includes but is not limited to the following steps.

[0085] Step S201: sending data to be authenticated to an authentication management device.

[0086] The data to be authenticated includes configuration information, and the configuration information includes modification information of network configuration parameters.

[0087] Step S202: Based on the authentication result of the authentication management device on the data to be authenticated, determine to use the configuration information in the data to be authenticated to configure the device.

[0088] Among them, determining to use the configuration information in the data to be authenticated to configure the device can be to configure the base station (for example, to configure the overall configuration parameters of the base station, etc.), or to configure the data processing module inside the base station (for example, to configure the business data parameters in the data processing module, etc.).

[0089] In this embodiment, by sending the data to be authenticated to the authentication management device, the data to be authenticated includes configuration information, and the configuration information includes modification information of network configuration parameters, so that the authentication management device can obtain the modification information of the network configuration parameters, and clarify the data that needs to be authenticated in the data to be authenticated, so that the authentication management device can selectively use the authentication method corresponding to the configuration information for authentication, thereby reducing the authentication time of the authentication data and effectively improving the authentication efficiency; further, based on the authentication result of the authentication management device on the authentication data obtained, it is determined to use the data to be authenticated to configure the device, which can improve the configuration effectiveness of the device and improve the operation and maintenance efficiency of the device.

[0090] The following is a detailed description of the device according to the embodiment of the present application in conjunction with the accompanying drawings. Figure 3 FIG. 1 is a block diagram showing the composition of the authentication device provided in the embodiment of the present application. Figure 3 As shown, the authentication device 300 includes but is not limited to the following modules.

[0091] The analysis module 301 is configured to analyze the acquired data to be authenticated and determine the configuration information in the data to be authenticated, where the configuration information includes modification information of network configuration parameters.

[0092] The authentication module 302 is configured to perform authentication according to the configuration information in the data to be authenticated, using an authentication method corresponding to the configuration information.

[0093] It should be noted that the authentication device 300 in this embodiment can implement any authentication method in the embodiments of the present application.

[0094] According to the authentication device of the embodiment of the present application, the acquired data to be authenticated is analyzed by the analysis module to determine the configuration information in the data to be authenticated, wherein the configuration information includes the modification information of the network configuration parameters, so as to obtain the modification information of the network configuration parameters and clarify the data to be authenticated that needs to be authenticated; the authentication module is used to perform authentication according to the configuration information in the data to be authenticated, using the authentication method corresponding to the configuration information, and the authentication method corresponding to the configuration information can be selectively used for authentication, thereby reducing the authentication time of the data to be authenticated and effectively improving the authentication efficiency.

[0095] Figure 4 FIG. 1 is a block diagram showing the composition of the data configuration device provided in the embodiment of the present application. Figure 4 As shown, the data configuration device 400 includes but is not limited to the following modules.

[0096] The sending module 401 is configured to send the data to be authenticated to the authentication management device, wherein the data to be authenticated includes configuration information, and the configuration information includes modification information of network configuration parameters.

[0097] The determination module 402 is configured to determine to use the configuration information in the data to be authenticated to configure the device based on the authentication result of the authentication management device on the data to be authenticated.

[0098] It should be noted that the data configuration device 400 in this embodiment can implement any data configuration method in the embodiments of the present application.

[0099] According to the data configuration device of the embodiment of the present application, the data to be authenticated is sent to the authentication management device through a sending module. The data to be authenticated includes configuration information, and the configuration information includes modification information of network configuration parameters, so that the authentication management device can obtain the modification information of the network configuration parameters, and clarify the data that needs to be authenticated in the data to be authenticated, so that the authentication management device can selectively use the authentication method corresponding to the configuration information for authentication, thereby reducing the authentication time of the authentication data and effectively improving the authentication efficiency; further, the determination module is used to determine the use of the data to be authenticated to configure the device based on the authentication result of the authentication management device on the authentication data, which can improve the configuration effectiveness of the device and improve the operation and maintenance efficiency of the device.

[0100] Figure 5 FIG. 1 is a block diagram showing the composition of the authentication system provided in the embodiment of the present application. Figure 5 As shown, the authentication system includes a base station 510, a network management device 520 and an authentication control center server 530 which are in communication connection.

[0101] The base station 510 includes an Operation Administration and Maintenance (OAM) module 511 for communication connection and a license processing module 512 ; the network management device 520 includes a configuration management module 521 for communication connection, a license management module 522 and a license center module 523 .

[0102] The authentication control center server 530 is used to review and approve the license applied for by the network management device 520 or the base station 510 and / or issue the license.

[0103] The configuration management module 521 is used to perform configuration management on information such as parameters of each module inside the base station 510, and supports batch modification and activation of each parameter.

[0104] The license management module 522 is used to receive an authentication request and authenticate the data to be authenticated in the authentication request; query the information of all site licenses stored in the base station 510, and export data reports; and support the import and loading of site license files.

[0105] The data to be authenticated includes configuration information, which includes modification information of network configuration parameters. The site license is a license that is only used by the base station 510 itself and cannot be shared with other network element devices. For example, the site license can be represented in the form of a file; for example, the license authorization quantity of the base station 510 is defined in the site license file, and can be managed by loading the site license file onto the base station 510.

[0106] The license center module 523 is used to centrally manage the shared license in the base station 510, supports importing shared license files of multiple network element devices, and realizes the management and control of shared licenses by parsing and managing shared license files. At the same time, the license center module 523 is also used to query the information of the shared license (such as the authorized number and usage number of the shared license, etc.) and export it in the form of a data report.

[0107] The shared license is a license that can be shared among multiple network element devices, and the shared license is a license that the authentication control center server 530 allocates and authorizes based on the total number of licenses in the communication network where the base station 510 is located. For example, the shared license can be represented in the form of a file; for example, multiple shared licenses are stored in the shared license file, and each shared license can be allocated and shared among multiple network element devices.

[0108] The OAM module 511 is used to provide an external interface related to the operation and maintenance data in the base station 510; when receiving the configuration information issued by the network management device 520, the OAM module 511 authenticates the key control items or non-key control items corresponding to the configuration information by calling the license processing module 512, and determines whether to allow the modification information of the network configuration parameters in the configuration information to take effect in the base station 510 based on the authentication result.

[0109] The license processing module 512 is used to manage the site license file, parse the site license file to obtain the parsed data; authenticate the data to be authenticated in the authentication request, determine the authentication result, and feed back the authentication result to the OAM module 511.

[0110] In some embodiments, the license processing module 512 is further used to store multiple licenses, key control items (or non-key control items) corresponding to the licenses, and authentication scopes corresponding to each license.

[0111] Among them, the key control items can be preset license items that determine the software revenue and have an impact on the basic service functions in the communication network. The key control items correspond to multiple core configuration parameters; the non-key control items correspond to multiple other configuration parameters, and the multiple other configuration parameters are parameters other than the multiple core configuration parameters.

[0112] For example, the key control items correspond to multiple core configuration parameters including the number of communication cells, the number of carriers, frequency band information (eg, the frequency range of the frequency band, etc.), and at least one of energy-saving parameters.

[0113] For key control items, full authentication may be used to authenticate the key control items; in other words, when it is determined that the data to be authenticated includes the key control items, all data in the data to be authenticated are authenticated.

[0114] When the target license quantity is greater than the preset license quantity threshold, and the modification information of the key control items is not satisfied for reducing the required license quantity of the modified key control items, modification of any key control items is not allowed, and the authentication is determined to fail at this time; it is necessary to apply for more licenses from the authentication control center server 530 before the authentication data can continue to be authenticated.

[0115] When the target license quantity is greater than the preset license quantity threshold, and the modification information of the key control item is used to reduce the required license quantity of the modified key control item, it is determined that the authentication of the key control item is passed; at this time, it can be determined that the authentication of the key control item is passed, and no additional license quantity application can be made, and the modification demand for the key control item can be met. Furthermore, the license quantity can be recycled to reduce the resource waste of the license.

[0116] When the target license quantity is less than or equal to the preset license quantity threshold, determining that the authentication of the key control item is passed can speed up the processing speed of the key control item.

[0117] When it is determined that the configuration information includes modification information of non-critical control items, authentication can be performed in the following manner:

[0118] When it is determined that the modification information of non-critical control items is not related to the number of licenses, the authentication step is skipped; when it is determined that the modification information of non-critical control items is related to the number of licenses, the target number of licenses is determined; when the target number of licenses is less than or equal to the preset license number threshold, it is determined that the authentication of non-critical control items is passed; when the target number of licenses is greater than the preset license number threshold, it is determined that the authentication has failed.

[0119] The target license quantity is the required license quantity of the non-critical control item after modification according to the modification information of the non-critical control item.

[0120] By combining incremental authentication with full authentication, the processing time of authentication data can be reduced and the operation and maintenance efficiency of the communication network can be improved.

[0121] It should be noted that when the base station 510 modifies the configuration parameters, each network element device only requests the required license quantity corresponding to the modification of the configuration parameters when applying for a license from the license center module 523 in the network management device 520 based on the number of shared licenses required by itself.

[0122] The license center module 523 authenticates the base station 510 based on the order of the acquired license application messages. If the authentication is determined to be successful, the modified information of the network configuration parameters in the data to be authenticated is determined to be effective in the base station 510; if the authentication is determined to be unsuccessful, the modified information of the network configuration parameters in the data to be authenticated is determined not to be effective in the base station 510.

[0123] Figure 6 The following is a schematic diagram showing the interaction process between various devices in the authentication system provided by the embodiment of the present application. Figure 6 As shown, the interaction process between various devices in the authentication system includes but is not limited to the following steps.

[0124] Step S601 : the configuration management module 521 in the network management device 520 sends a configuration request to the base station 510 .

[0125] Step S602 : After receiving the configuration request, the operation and maintenance management module 511 in the base station 510 verifies the configuration information in the configuration request to determine whether the configuration information meets the use requirements of the base station 510 .

[0126] The verification of the configuration information is to verify the relationship between the configuration information and the corresponding data service.

[0127] Step S603 : When it is determined that the configuration information meets the usage requirements of the base station 510 , the operation and maintenance management module 511 sends an authentication request to the license processing module 512 .

[0128] The authentication request includes data to be authenticated, and the data to be authenticated includes modification information of network configuration parameters.

[0129] Step S604: the license processing module 512 calculates the usage of the license acquired by the base station 510, and authenticates the data to be authenticated in the authentication request.

[0130] The license processing module 512 confirms the license usage amount obtained in the base station 510 to determine whether the license usage amount obtained in the base station 510 can meet the license quantity corresponding to the modification information of the network configuration parameters.

[0131] If it is determined that the license usage amount acquired inside the base station 510 can satisfy the license quantity corresponding to the modification information of the network configuration parameters, it is determined that the authentication is passed; otherwise, it is determined that the authentication is not passed.

[0132] Among them, authentication can be performed by incremental authentication or full authentication.

[0133] For example, for a key control item, the base station 510 first determines a target license quantity; when the target license quantity is less than or equal to a preset license quantity threshold, it is determined that the authentication for the key control item is passed; when the target license quantity is greater than the preset license quantity threshold and the modification information of the key control item is used to reduce the required license quantity for the modified key control item, it is determined that the authentication for the key control item is passed; when the target license quantity is greater than the preset license quantity threshold and the modification information of the key control item is not used to reduce the required license quantity for the modified key control item, it is determined that the authentication has failed.

[0134] Among them, when the modification information of the network configuration parameters includes the modification information of the key control items, the target license quantity is the required license quantity of the modified key control items determined according to the modification information of the key control items; when the modification information of the network configuration parameters does not include the modification information of the key control items, the target license quantity is the current required license quantity of the key control items.

[0135] When it is determined that the modification information of the network configuration parameters includes the modification information of the non-critical control items, the base station 510 skips the authentication step when it is determined that the modification information of the non-critical control items is not related to the number of licenses; when it is determined that the modification information of the non-critical control items is related to the number of licenses, the target number of licenses is determined; when the target number of licenses is less than or equal to the preset license number threshold, it is determined that the authentication of the non-critical control items is passed; when the target number of licenses is greater than the preset license number threshold, it is determined that the authentication has failed.

[0136] The target license quantity is the required license quantity of the non-critical control item after modification according to the modification information of the non-critical control item.

[0137] In step S605 , the license processing module 512 also calculates the usage of the shared licenses corresponding to all network element devices in the communication network where the base station 510 is located, and the usage of the shared license obtained by the base station 510 .

[0138] If it is determined that the usage of the shared license obtained by the base station 510 cannot satisfy the license quantity corresponding to the modification information of the network configuration parameters, the license processing module 512 executes step S606.

[0139] Step S606 : the license processing module 512 applies to the license management module 522 in the network management device 520 for a shared license.

[0140] Step S607: the license management module 522 in the network management device 520 processes the received request for applying for a shared license.

[0141] Among them, the license management module 522 in the network management device 520 matches the data to be authenticated with the attribute information of the base station 510, and when it is determined that the data to be authenticated matches the attribute information of the base station 510, it determines that the data to be authenticated needs to be authenticated, and issues a license for authentication to the base station 510.

[0142] Step S608 : When the license management module 522 in the network management device 520 determines that the usage of the currently acquired license cannot meet the usage demand, the license management module 522 applies to the license center module 523 for obtaining a shared license.

[0143] Step S609: the license center module 523 authenticates the received request for obtaining a shared license.

[0144] For example, the license center module 523 applies for a license for authentication from the authentication control center server 530 , and determines an authentication result (eg, an application result for a shared license) for the authentication data based on an authentication response fed back by the authentication control center server 530 .

[0145] In step S610, the license center module 523 feeds back the application result of the shared license it determines to the license management module 522, and then the license management module 522 feeds back the application result of the shared license to the license processing module 512 in the base station 510; further, the license processing module 512 determines the authentication result based on the obtained application result of the shared license, and feeds back the authentication result to the configuration management module 521.

[0146] Among them, step S603 to step S610 constitute the entire authentication process.

[0147] Step S611 , the configuration management module 521 determines whether the modification information of the network configuration parameters in the base station 510 made by the network management device 520 is effective based on the obtained authentication result, and returns a configuration response to the configuration management module 521 in the network management device 520 .

[0148] Based on the interaction process between various devices in the authentication system, the corresponding authentication method may include Figure 7 The authentication method shown. Figure 7 The following is a flow chart showing the authentication method provided by the embodiment of the present application. Figure 7 As shown, the authentication method includes but is not limited to the following steps.

[0149] Step S701: The base station 510 obtains an authentication request including data to be authenticated, analyzes the data to be authenticated, and obtains configuration information in the data to be authenticated.

[0150] The authentication request may be a request sent by the operation and maintenance management module 511 in the base station 510, or a request sent by the network management device 520 to the base station 510. The configuration information includes modification information of network configuration parameters. The modification information of the network configuration parameters includes modification information of single-station configuration parameters for the base station 510, and / or modification information of configuration parameters of all base stations within its jurisdiction by the network management device 520, etc.

[0151] In some embodiments, the authentication request may also be a request by the operation and maintenance personnel to modify the single-station configuration parameters of the base station 510 using the LMT; the authentication request may also be a request by the operation and maintenance personnel to modify the configuration parameters of the base station 510 by calling a preset application interface provided by the base station 510 using a third-party tool.

[0152] Step S702 , determining whether the data to be authenticated involves information of a license in the base station 510 .

[0153] In the case of determining that the information related to the license in the base station 510 is obtained, step S703 is executed; otherwise, step S705 is executed.

[0154] Step S703: the license processing module 512 authenticates the data to be authenticated inside the base station 510.

[0155] Among them, the preset license quantity threshold is the number of licenses allowed to be obtained by a single base station; when it is determined that the modification information of the network configuration parameters includes the modification information of the key control items, the target license quantity is the required number of licenses for the modified key control items determined in a single base station according to the modification information of the key control items; when it is determined that the modification information of the network configuration parameters does not include the modification information of the key control items, the target license quantity is the current required number of licenses for the key control items in a single base station.

[0156] Among them, the key control items correspond to multiple core configuration parameters; the non-key control items correspond to multiple other configuration parameters, and the multiple other configuration parameters are parameters other than the multiple core configuration parameters.

[0157] For example, the key control items correspond to multiple core configuration parameters including the number of communication cells, the number of carriers, frequency band information (eg, the frequency range of the frequency band, etc.), and at least one of energy-saving parameters.

[0158] In some embodiments, for a key control item, authentication may be performed in the following manner: determining a target license quantity; and determining that authentication of the key control item is passed when the target license quantity is less than or equal to a preset license quantity threshold;

[0159] When the target number of licenses is greater than the preset license number threshold and the modification information of the key control item is used to reduce the required number of licenses for the modified key control item, it is determined that the authentication of the key control item is passed; when the target number of licenses is greater than the preset license number threshold and the modification information of the key control item is not used to reduce the required number of licenses for the modified key control item, it is determined that the authentication has failed.

[0160] Among them, when the configuration information includes modification information of the key control item, the target license quantity is the required license quantity of the modified key control item determined according to the modification information of the key control item; when the configuration information does not include modification information of the key control item, the target license quantity is the current required license quantity of the key control item.

[0161] In some embodiments, for non-critical control items, authentication may be performed in the following manner: if it is determined that the modification information of the non-critical control item is irrelevant to the number of licenses, the authentication step is skipped;

[0162] When it is determined that the modification information of the non-critical control items is related to the number of licenses, the target number of licenses is determined; when the target number of licenses is less than or equal to the preset license number threshold, it is determined that the authentication of the non-critical control items is passed; when the target number of licenses is greater than the preset license number threshold, it is determined that the authentication has failed.

[0163] The target license quantity is the required license quantity of the non-critical control item after modification according to the modification information of the non-critical control item.

[0164] Step S704, determining whether the base station 510 has authenticated the configuration information in the authentication data.

[0165] If it is determined that the authentication is successful, execute step S705; otherwise, execute step S713.

[0166] Step S705 : the license processing module 512 calculates the usage of the shared license corresponding to all network element devices in the communication network where the base station 510 is located.

[0167] It should be noted that the license processing module 512 will also determine the number of required licenses for the modified non-critical control items based on the modification information of the non-critical control items, and / or determine the number of required licenses for the modified critical control items based on the modification information of the critical control items, and determine the calculated number of required licenses for the modified critical control items (or non-critical control items) as the target license number.

[0168] In the case where the configuration information does not include modification information of the key control item, the target license quantity is the current required license quantity of the key control item.

[0169] Step S706 , determining whether the number of shared licenses acquired by the base station 510 is the same as a preset license number threshold.

[0170] If it is determined that the number of shared licenses acquired by the base station 510 is the same as the preset license number threshold, step S707 is executed; if it is determined that the number of shared licenses acquired by the base station 510 is different from the preset license number threshold, step S708 is executed.

[0171] Step S707 : judging whether each network element device has applied for a shared license based on the number of shared licenses acquired by the base station 510 .

[0172] If it is determined that the number of shared licenses obtained by a certain network element device is zero, it is determined that the network element device has not applied for a shared license, and step S712 is executed; if it is determined that the number of shared licenses obtained by a certain network element device is not zero, it is determined that the network element device has applied for a shared license, and step S708 is executed.

[0173] The judgment in step S707 is performed on all network element devices in the communication network where the base station 510 is located, so as to determine whether each network element device has applied for a shared license.

[0174] Step S708: the license processing module 512 applies for a shared license from the network management device 520, wherein the number of shared licenses applied for includes the number of licenses corresponding to all key control items and the number of licenses corresponding to non-key control items.

[0175] The number of licenses corresponding to all key control items is the number of licenses in the case of full authentication; the number of licenses corresponding to non-key control items is the number of licenses in the case of incremental authentication.

[0176] In step S709, the license management module 522 in the network management device 520 matches the data to be authenticated with the attribute information of the base station 510, and if it is determined that the data to be authenticated matches the attribute information of the base station 510, determines that the data to be authenticated needs to be authenticated.

[0177] The attribute information of the base station 510 includes a device identifier corresponding to the current device and a network identifier of the current device in the network in which it is located.

[0178] It should be noted that the license management module 522 can use network grouping, operator classification and other methods to authorize all shared licenses in the communication network where the base station 510 is located. Therefore, the license management module 522 needs to match the data to be authenticated with the attribute information of the base station 510 so that the data to be authenticated can match the attribute information of the base station 510, so as to determine that the data to be authenticated obtained by the base station 510 needs to be authenticated.

[0179] Step S710: When the license management module 522 in the network management device 520 determines that the target license quantity is greater than the preset license quantity threshold, the license management module 522 applies to the license center module 523 (or the authentication control center server 530) for obtaining a shared license.

[0180] The fact that the target license quantity is greater than the preset license quantity threshold indicates that the usage of the license currently acquired by the license management module 522 cannot meet the usage requirement of the license for authenticating the authentication data.

[0181] Step S711, determine whether the authentication data is authenticated.

[0182] If it is determined that the authentication data to be authenticated is successful, execute step S712; otherwise, execute step S713.

[0183] Step S712, determine whether the authentication data is authenticated and return an authentication success response.

[0184] Step S713: determine that the authentication data fails to be authenticated, and return an authentication failure response.

[0185] In this embodiment, the acquired data to be authenticated is analyzed to determine the configuration information in the data to be authenticated, the configuration information includes the modification information of the network configuration parameters, so as to obtain the modification information of the network configuration parameters and clarify the data to be authenticated that needs to be authenticated; according to the configuration information in the data to be authenticated, the authentication method corresponding to the configuration information is adopted for authentication, and the authentication method corresponding to the configuration information can be selectively used for authentication, for example, full authentication and / or incremental authentication can be selectively adopted to authenticate the data to be authenticated, thereby reducing the authentication time of the data to be authenticated and effectively improving the authentication efficiency.

[0186] In some embodiments, license authentication is performed in a network element device supporting the fifth generation mobile communication technology (5th Generation Mobile Communication Technology, 5G). Table 1 shows the license information of the 5G network element device.

[0187] Table 1 License information of 5G network element equipment

[0188]

[0189] The license information includes information for controlling the number of licenses. For example, different control parameters defined in a JSON file, etc. Each piece of license information can be represented by the following code, that is, defined in a .json file as follows:

[0190]

[0191]

[0192] Wherein, "funcId" represents the control item number in Table 1;

[0193] "type" indicates the data type, for example, "number" indicates that the data type is a number;

[0194] "defaultvalue" indicates the default value of the setting;

[0195] "en_name" indicates the English name; "zh_name" indicates the Chinese name;

[0196] "is_shared" indicates whether the license type corresponding to the authentication scope of the data to be authenticated is a shared license. True means "yes", and false means "no";

[0197] "is_key" indicates whether the information type corresponding to the data to be authenticated is a key control type;

[0198] "en_decription" means English explanation; "zh_decription" means Chinese explanation;

[0199] "mo" represents the managed object (MO), which can be represented by the application scenario processing function corresponding to the control item.

[0200] For example, NRPhysicalCellDU.NRCarrier.AntConfig.dlAntNum represents the configuration scenario of the number of antennas of the carrier in the physical cell of the new radio (NewRadio, NR) applied by the control item; NRPhysicalCellDU.duplexMode represents the configuration scenario of the duplex mode in the physical cell of NR applied by the control item, etc.; AAUPowerSaving represents the power saving scenario of AAU; ReplaceableUnit.hwWorkScence represents the working scenario in the replaceable unit; ReplaceableUnit.hwFunction represents the function configuration scenario in the replaceable unit; CarrierESPolicy.autoStartStopNRSwitch represents the starting switch configuration scenario in the carrier priority configuration scenario; CarrierESPolicy.carrierShutdownIRatSwitch represents the stop switch configuration scenario in the carrier priority configuration scenario, and so on.

[0201] It should be noted that in the application scenario where the base station 510 is powered on, the base station 510 needs to perform full configuration verification and license authentication on the data within the base station site. The site license refers to the license that the base station 510 has obtained.

[0202] When the base station 510 is powered on to load configuration data, the base station 510 needs to ensure that the power-on is successful first; then, when it is determined that the base station 510 is powered on successfully, the site license is verified; when it is determined that the site license verification fails, the base station 510 will generate an alarm message and report the alarm message to the terminal held by the operation and maintenance personnel, so that the operation and maintenance personnel can update the license file stored in the base station 510 based on the alarm information to ensure that the base station 510 no longer has abnormal alarms.

[0203] For the shared license, when the base station 510 loads configuration data, the base station 510 needs to calculate the required number of shared licenses (config Value) and the number of acquired shared licenses (granted Value) so as to subsequently authenticate the shared license based on the above two numbers.

[0204] In some embodiments, the base station 510 may not save to disk or replace a single board. In this case, the change amount of the shared license can be calculated by the network management device 520, and the whole network calibration can be performed to improve the calculation accuracy of the change amount of the shared license. The network management device 520 stores the number of shared licenses (granted Value) obtained by multiple base stations and multiple control items.

[0205] For the control items corresponding to the four license information shown in Table 1, the authentication method in this application is updated as follows: Figure 8 The flowchart of the authentication method is shown in FIG. Figure 8 The following is a flow chart showing the authentication method provided by the embodiment of the present application. Figure 8 As shown, the authentication method includes but is not limited to the following steps.

[0206] Step S801: The base station 510 obtains an authentication request including data to be authenticated, analyzes the data to be authenticated, and obtains configuration information in the data to be authenticated.

[0207] The configuration information includes modification information of network configuration parameters, including modification information of single-station configuration parameters for base station 510 and / or modification information of configuration parameters of all base stations within the jurisdiction of network management device 520.

[0208] Step S802: According to the definition in the .json file, determine whether this parameter modification involves NR_GNB_F001 and NR_GNB_F002.

[0209] If it is determined that NR_GNB_F001 is involved, execute step S803; otherwise, execute step S805.

[0210] Step S803, when it is determined that only NR_GNB_F001 is involved, the usage of the license corresponding to NR_GNB_F001 is calculated and authentication is performed.

[0211] Since the data to be authenticated in NR_GNB_F001 includes a key control item (ie, the number of NR cells), the key control item corresponds to multiple core configuration parameters. For example, the key control item corresponds to multiple core configuration parameters including the number of communication cells, the number of carriers, frequency band information (eg, the frequency range of the frequency band, etc.), and at least one of energy-saving parameters.

[0212] The authentication scope of the data to be authenticated is within the base station 510 (that is, the license type corresponding to the authentication scope of the data to be authenticated is a site license). Therefore, the base station 510 needs to authenticate the data to be authenticated based on the number of site licenses it has acquired (that is, the number of licenses that do not need to be shared across the entire network).

[0213] For example, a target license quantity is determined; when the target license quantity is less than or equal to a preset license quantity threshold, it is determined that the authentication of the key control item is passed.

[0214] Among them, when the modification information of the network configuration parameters includes the modification information of the key control items, the target license quantity is the required license quantity of the modified key control items determined by modifying the core configuration parameters in a single base station according to the modification information of the key control items; when the modification information of the network configuration parameters does not include the modification information of the key control items, the target license quantity is the current required license quantity of the key control items in a single base station.

[0215] Step S804, determining whether the authentication data is authenticated.

[0216] If it is determined that the authentication data to be authenticated is successful, execute step S805; otherwise, execute step S813.

[0217] In step S805, the license processing module 512 calculates the number of shared licenses required by NR_F001 and NR_F002.

[0218] In some embodiments, the license processing module 512 will also generate a request message for applying for a shared license based on the calculated number of shared licenses required by NR_F001 and NR_F002, the control item identifier, and the public land mobile network (Public Land Mobile Network, PLMN) identifier corresponding to the control item, etc.; and send the request message for applying for a shared license to the network management device 520, so that the network management device 520 can verify the number of shared licenses obtained.

[0219] Step S806: Determine whether the number of shared licenses required by NR_F001 and NR_F002 is the same as the number of acquired licenses.

[0220] The number of licenses that have been obtained may be set as a preset license number threshold.

[0221] If it is determined that the number of shared licenses required by NR_F001 and NR_F002 is the same as the preset license number threshold, step S807 is executed; if it is determined that the number of shared licenses required by NR_F001 and NR_F002 is different from the preset license number threshold, step S808 is executed.

[0222] Step S807, determine whether the number of shared licenses acquired by NR_F001 is zero.

[0223] When it is determined that the number of shared licenses obtained by NR_F001 is zero, it is determined that NR_F001 has not applied for a shared license, and step S712 is executed; when it is determined that the number of shared licenses obtained by NR_F001 is not zero, it is determined that NR_F001 has applied for a shared license, and step S808 is executed.

[0224] Step S808: When it is determined that the number of shared licenses acquired by NR_F001 is not zero and the number of shared licenses required by NR_F002 is the same as the preset license number threshold, a request for applying for a license is sent to the network management device 520, and the request for applying for a license includes the number of shared licenses required by NR_F001.

[0225] For example, the request for applying for a license includes: NR_F001, the PLMN identifier corresponding to the carrier software package, the number of shared licenses required by NR_F001 (config Value), and the number of shared licenses obtained (grantedValue) and other information.

[0226] In step S809, the license management module 522 in the network management device 520 matches the data to be authenticated corresponding to NR_F001 with the attribute information of the network element device executing NR_F001, and determines that the data to be authenticated needs to be authenticated if it is determined that the data to be authenticated matches the attribute information of the network element device executing NR_F001.

[0227] In some embodiments, the license management module 522 can also process the authentication data. For example, the license management module 522 calculates the group to which NR_F001 belongs based on the information in the shared license file stored in itself, and determines its corresponding group identifier based on the subnet identifier; then, based on the information in the shared license file, it determines the operator information to which NR_F001 belongs, and the number of changes in the license required by NR_F001.

[0228] The information in the shared license file includes multiple groups, subnet information corresponding to each group (such as subnet identification, etc.), control item information corresponding to each group, the number of license authorizations of the operator, and the number of license authorizations supported in network sharing scenarios.

[0229] The number of license changes required by NR_F001 can be calculated based on the difference between config Value and granted Value.

[0230] Step S810, when the license management module 522 in the network management device 520 determines that the target license quantity is greater than the preset license quantity threshold, the license management module 522 applies to the license center module 523 (or the authentication control center server 530) to obtain the number of shared licenses required by NR_F001.

[0231] The fact that the target license quantity is greater than the preset license quantity threshold indicates that the usage of the license currently acquired by the license management module 522 cannot meet the usage requirement of the license for authenticating the authentication data.

[0232] The license management module 522 sends a request to obtain a shared license to the license center module 523 (or the authentication control center server 530), and the request to obtain a shared license includes: a control item identifier (such as NR_F001), a group identifier, a PLMN identifier, and the number of changes in the shared license. When the license center module 523 (or the authentication control center server 530) determines that the authentication is completed, it feeds back the authentication result to the license management module 522, so that the license management module 522 forwards the authentication result to the base station 510.

[0233] Step S811, determine whether the authentication of the data to be authenticated corresponding to NR_F001 is successful.

[0234] If it is determined that the authentication data to be authenticated is successful, execute step S812; otherwise, execute step S813.

[0235] Step S812, determine whether the authentication data is authenticated and return an authentication success response.

[0236] Step S813: determine that the authentication data fails to be authenticated, and return an authentication failure response.

[0237] In this embodiment, through the above-mentioned processing, different authentication methods can be selectively used to authenticate different data to be authenticated, thereby reducing the authentication time of the data to be authenticated. For example, the activation time of the network operation and maintenance configuration parameters in the data to be authenticated is reduced from the original hour level to the minute level (for example, when performing batch configuration of network operation and maintenance configuration parameters for 3,000 network element devices, the activation time of the network operation and maintenance configuration parameters can be reduced from the original 1 hour to within 30 minutes), which can effectively improve the authentication efficiency and the processing efficiency of parameter configuration.

[0238] It should be clear that the present application is not limited to the specific configurations and processes described in the above embodiments and shown in the figures. For the convenience and brevity of description, a detailed description of the known methods is omitted here, and the specific working processes of the systems, modules and units described above can refer to the corresponding processes in the aforementioned method embodiments, which will not be repeated here.

[0239] Fig. 9 A block diagram showing the composition of a computing device provided in an embodiment of the present application is shown.

[0240] like Fig. 9 As shown, the computing device 900 includes an input device 901, an input interface 902, a central processing unit 903, a memory 904, an output interface 905, and an output device 906. The input interface 902, the central processing unit 903, the memory 904, and the output interface 905 are connected to each other via a bus 907, and the input device 901 and the output device 906 are connected to the bus 907 via the input interface 902 and the output interface 905, respectively, and then connected to other components of the computing device 900.

[0241] Specifically, the input device 901 receives input information from the outside and transmits the input information to the central processing unit 903 through the input interface 902; the central processing unit 903 processes the input information based on the computer executable instructions stored in the memory 904 to generate output information, temporarily or permanently stores the output information in the memory 904, and then transmits the output information to the output device 906 through the output interface 905; the output device 906 outputs the output information to the outside of the computing device 900 for user use.

[0242] In one embodiment, Fig. 9The computing device shown can be implemented as an electronic device, which may include: a memory configured to store a program; a processor configured to run the program stored in the memory to execute the authentication method or data configuration method described in the above embodiments.

[0243] In one embodiment, Fig. 9 The computing device shown may be implemented as an authentication system, which may include: a memory configured to store a program; and a processor configured to run the program stored in the memory to execute the authentication method or data configuration method described in the above embodiments.

[0244] The above is only an exemplary embodiment of the present application and is not intended to limit the scope of protection of the present application. In general, various embodiments of the present application can be implemented in hardware or special circuits, software, logic or any combination thereof. For example, some aspects can be implemented in hardware, while other aspects can be implemented in firmware or software that can be executed by a controller, a microprocessor or other computing device, although the present application is not limited thereto.

[0245] Embodiments of the present application may be implemented by a processor executing computer program instructions, such as in a processor entity, or by hardware, or by a combination of software and hardware. The computer program instructions may be assembly instructions, instruction set architecture (ISA) instructions, machine instructions, machine-dependent instructions, microcode, firmware instructions, state setting data, or source code or object code written in any combination of one or more programming languages.

[0246] The block diagram of any logic flow in the accompanying drawings of the present application can represent program steps, or can represent interconnected logic circuits, modules and functions, or can represent a combination of program steps and logic circuits, modules and functions. The computer program can be stored on a memory. The memory can have any type suitable for the local technical environment and can be implemented using any suitable data storage technology, such as but not limited to read-only memory (ROM), random access memory (RAM), optical memory device and system (digital versatile disc DVD or CD disc), etc. Computer-readable media may include non-transient storage media. The processor can be any type suitable for the local technical environment, such as but not limited to a general-purpose computer, a special-purpose computer, a microprocessor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a programmable logic device (FGPA) and a processor based on a multi-core processor architecture.

[0247] By way of exemplary and non-limiting examples, a detailed description of exemplary embodiments of the present application has been provided above. However, various modifications and adjustments to the above embodiments will be apparent to those skilled in the art when considered in conjunction with the accompanying drawings and claims, but will not depart from the scope of the present application. Therefore, the proper scope of the present application will be determined according to the claims.

Claims

1. An authentication method, characterized in that: The method comprises: Analyze the acquired data to be authenticated, and determine configuration information in the data to be authenticated, wherein the configuration information includes modification information of network configuration parameters; According to the configuration information in the data to be authenticated, authentication is performed using an authentication method corresponding to the configuration information.

2. The method according to claim 1, characterized in that The step of performing authentication according to the configuration information in the data to be authenticated using an authentication method corresponding to the configuration information includes: Determining a control item type included in the modification information of the network configuration parameter, the control item type including a critical control item and a non-critical control item; Authentication is performed based on the control item type using an authentication method corresponding to the configuration information.

3. The method according to claim 2, characterized in that The performing authentication based on the control item type and using an authentication method corresponding to the configuration information includes: Authenticating the key control item using a first authentication method, where the key control item corresponds to a plurality of core configuration parameters; When it is determined that the modification information of the network configuration parameters includes the modification information of the non-critical control items, a second authentication method is used to authenticate the non-critical control items, and the non-critical control items correspond to multiple other configuration parameters, and the multiple other configuration parameters are parameters other than the multiple core configuration parameters.

4. The method according to claim 3, characterized in that The adopting the first authentication method to authenticate the key control item includes: Determine target license quantity; When the target license quantity is less than or equal to a preset license quantity threshold, determining that the authentication of the key control item is passed; In a case where the target license quantity is greater than the preset license quantity threshold, and the modification information of the key control item is used to reduce the required license quantity of the modified key control item, determining that the authentication of the key control item is passed; If the target license quantity is greater than the preset license quantity threshold and the modification information of the key control item is not used to reduce the required license quantity of the modified key control item, it is determined that the authentication fails.

5. The method according to claim 4, characterized in that The step of determining the target license quantity includes: In the case where the modification information of the network configuration parameters includes the modification information of the key control item, the target license quantity is the required license quantity of the modified key control item determined by modifying the modification information of the key control item; In the case that the modification information of the network configuration parameters does not include the modification information of the key control item, the target license quantity is the current required license quantity of the key control item.

6. The method according to claim 3, characterized in that The adopting the second authentication method to authenticate the non-critical control item includes: If it is determined that the modification information of the non-critical control item is irrelevant to the number of licenses, skipping the authentication step; In the case where it is determined that the modification information of the non-critical control item is related to the number of the licenses, determining a target number of licenses, the target number of licenses being the required number of licenses for the non-critical control item after modification according to the modification information of the non-critical control item; When the target license quantity is less than or equal to a preset license quantity threshold, determining that the authentication of the non-critical control item is passed; When the target license quantity is greater than a preset license quantity threshold, it is determined that the authentication fails.

7. The method according to any one of claims 4 to 6, characterized in that When the target license quantity is greater than the preset license quantity threshold, the method further includes: Apply to the authentication control device for a license for authentication.

8. The method according to claim 7, characterized in that Before applying to the authentication control device for a license for authentication, the method further includes: Determine the subnet identifier and group identifier corresponding to the data to be authenticated; Determine the number of licenses that need to be applied for based on the number of licenses currently acquired by the device and the target number of licenses; The applying for a license for authentication from the authentication control device includes: Generate an authentication request according to the number of licenses to be applied for, and the subnet identifier and the group identifier corresponding to the data to be authenticated; The authentication request is sent to the authentication control device.

9. The method according to any one of claims 4 to 6, characterized in that The preset license quantity threshold is the number of licenses that a single base station is allowed to obtain; In the case where the modification information of the network configuration parameters includes the modification information of the key control items, the target license quantity is the required license quantity of the modified key control items determined by modifying the core configuration parameters in the single base station according to the modification information of the key control items; In a case where the modification information of the network configuration parameters does not include the modification information of the key control item, the target license quantity is the current required license quantity of the key control item in the single base station.

10. The method according to any one of claims 4 to 6, characterized in that The preset license quantity threshold represents the quantity of licenses allowed to be obtained in the communication network governed by the network management device; In the case where the modification information of the network configuration parameters includes the modification information of the key control items, the target license quantity is the required license quantity of the modified key control items determined by modifying the core configuration parameters in the communication network governed by the network management device according to the modification information of the key control items; In the case that the modification information of the network configuration parameters does not include the modification information of the key control item, the target license quantity is the current required license quantity of the key control item in the communication network managed by the network management device.

11. The method according to claim 1, characterized in that: Before performing authentication according to the configuration information in the data to be authenticated, using an authentication method corresponding to the configuration information, the method further includes: Matching the data to be authenticated with the attribute information of the current device; When it is determined that the data to be authenticated matches the attribute information of the current device, it is determined that the data to be authenticated needs to be authenticated.

12. A data configuration method, characterized in that: The method comprises: Sending data to be authenticated to an authentication management device, wherein the data to be authenticated includes configuration information, and the configuration information includes modification information of network configuration parameters; Based on the obtained authentication result of the authentication management device on the data to be authenticated, it is determined to use the configuration information in the data to be authenticated to configure the device.

13. An electronic device, characterized in that: include: one or more processors; A memory having one or more programs stored thereon, wherein when the one or more programs are executed by the one or more processors, the one or more processors implement the authentication method as described in any one of claims 1 to 11, or the data configuration method as described in claim 12.

14. A readable storage medium, characterized in that: The readable storage medium stores a computer program, and when the computer program is executed by a processor, the authentication method according to any one of claims 1 to 11, or the data configuration method according to claim 12 is implemented.

Images