Network slice processing method, related equipment, storage medium and computer program product

Abstract

The embodiment of the invention provides a network slice processing method, related equipment, a storage medium and a computer program product, and the method comprises the steps that a universal subscriber identity module (USIM) receives first identification information sent by an application program (APP) and second identification information corresponding to the first identification information; judging whether the second identification information is matched with the third identification information or not to obtain a matching result, and sending the matching result to the APP; wherein the third identification information comprises identification information corresponding to the first identification information stored in the USIM; according to a matching result, allowing or forbidding the APP to use the network slice corresponding to the first identification information; the APP in the terminal equipment sends the first identification information and second identification information corresponding to the first identification information to the USIM; and the matching result sent by the USIM is received, and the network slice corresponding to the first identification information is used under the condition that the matching result is represented to pass, so that the security of network resources is improved.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to a network slicing processing method, related equipment, storage medium and computer program product. Background Art

[0002] Currently, when transmitting data, the APP of the user terminal can choose to use specific network slice resources based on its subscription relationship and network availability. When the APP creates a session, it can use the APP ID (APP identifier) ​​to query the User Routing Selection Policy (URSP) in the terminal to obtain the corresponding Single Network Slice Selection Assistance Information (S-NSSAI). Then, the S-NSSAI can be used to create a session so that the data flow of the APP can use the corresponding network slice resources.

[0003] However, the APP ID is static and filled in by the APP developer, and its privacy and security are difficult to guarantee. If another APP uses the same APP ID to access the network, there is a possibility of creating a session with S-NSSAI that it should not use and using the corresponding network slice resources, thereby encroaching on specific network resources and reducing the security of network resources. Summary of the invention

[0004] The implementing legislation of this application provides a network slicing processing method, related equipment, storage medium and computer program product, which can improve the security of network resources.

[0005] The technical solution of the embodiment of the present application is implemented as follows:

[0006] In a first aspect, an embodiment of the present application provides a method for processing a network slice, the method being applied to a USIM, the method comprising:

[0007] Receive first identification information sent by an APP and second identification information corresponding to the first identification information; wherein the first identification information includes the identification information of the APP, and the second identification information includes the identification information sent to the APP by a server corresponding to the APP;

[0008] Determine whether the second identification information matches the third identification information, obtain a matching result, and send the matching result to the APP; wherein the third identification information includes identification information corresponding to the first identification information stored in the USIM;

[0009] Based on the matching result, the APP is allowed or prohibited from using the network slice corresponding to the first identification information.

[0010] In a second aspect, an embodiment of the present application provides a method for processing a network slice, the method being applied to a terminal device, the terminal device including an APP, and the method including:

[0011] Sending first identification information and second identification information corresponding to the first identification information to the USIM; wherein the first identification information includes the identification information of the APP, and the second identification information includes the identification information sent to the APP by the server corresponding to the APP;

[0012] Receive the matching result sent by the USIM, and if the matching result indicates a pass, use the network slice corresponding to the first identification information.

[0013] In a third aspect, an embodiment of the present application provides a USIM, wherein the USIM includes: a first receiving unit, a judging unit, a first sending unit, and a first using unit; wherein:

[0014] The first receiving unit is used to receive first identification information sent by the APP and second identification information corresponding to the first identification information; wherein the first identification information includes the identification information of the APP, and the second identification information includes the identification information sent to the APP by the server corresponding to the APP;

[0015] The judging unit is configured to judge whether the second identification information matches the third identification information to obtain a matching result; wherein the third identification information includes identification information corresponding to the first identification information stored in the USIM;

[0016] The first sending unit is used to send the matching result to the APP;

[0017] The first using unit is used to allow or prohibit the APP from using the network slice corresponding to the first identification information based on the matching result.

[0018] In a fourth aspect, an embodiment of the present application provides a USIM, wherein the USIM includes: a first processor and a first memory; wherein:

[0019] The first memory is used to store a computer program that can be run on the processor;

[0020] The first processor is used to execute the network slicing processing method as described above when running the computer program.

[0021] In a fifth aspect, an embodiment of the present application provides a terminal device, the terminal device comprising: a second sending unit, a second receiving unit and a second using unit; wherein,

[0022] The second sending unit is used to send the first identification information and the second identification information corresponding to the first identification information to the USIM; wherein the first identification information includes the identification information of the APP, and the second identification information includes the identification information sent to the APP by the server corresponding to the APP;

[0023] The second receiving unit is used to receive the matching result sent by the USIM;

[0024] The second using unit is used to use the network slice corresponding to the first identification information when the matching result characterization passes.

[0025] In a sixth aspect, an embodiment of the present application provides a terminal device, the terminal device comprising: a second processor and a second memory; wherein:

[0026] The second memory is used to store a computer program that can be run on the processor;

[0027] The second processor is used to execute the network slicing processing method as described above when running the computer program.

[0028] In the seventh aspect, an embodiment of the present application provides a computer-readable storage medium, on which a computer program code is stored. When the computer program code is executed by a computer, the network slicing processing method as described above is implemented.

[0029] In an eighth aspect, an embodiment of the present application provides a computer program product, including a computer program, which, when executed by a processor, implements the network slicing processing method as described above.

[0030] The embodiments of the present application provide a method for processing network slices, related devices, storage media and computer program products, wherein the USIM receives first identification information sent by an APP and second identification information corresponding to the first identification information; wherein the first identification information includes the identification information of the APP, and the second identification information includes the identification information sent to the APP by a server corresponding to the APP; it is determined whether the second identification information and the third identification information match, a matching result is obtained, and the matching result is sent to the APP; wherein the third identification information includes the identification information corresponding to the first identification information stored in the USIM; according to the matching result, the APP is allowed or prohibited from using the network slice corresponding to the first identification information; the APP in the terminal device sends the first identification information and the second identification information corresponding to the first identification information to the USIM; the matching result sent by the USIM is received, and when the matching result characterizes passing, the network slice corresponding to the first identification information is used. It can be seen from this that after receiving the first identification information sent by the APP and the second identification information corresponding to the first identification information, the USIM can determine whether the second identification information and the third identification information match, that is, it can determine whether the identification information sent to the APP by the server corresponding to the APP matches the identification information corresponding to the first identification information stored in the USIM, and obtain a matching result, and then can allow or prohibit the APP from using the network slice corresponding to the first identification information based on the matching result; that is, only when the matching result representation of the USIM is passed, can the APP use the network slice corresponding to the first identification information, otherwise the APP is prohibited from using the network slice corresponding to the first identification information, thereby improving the security of network resources. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] Figure 1 A schematic diagram of the URSP acquisition process in the related art;

[0032] Figure 2 Schematic diagram of the network slicing processing method proposed in the embodiment of the present application Figure 1 ;

[0033] Figure 3 Schematic diagram of the network slicing processing method proposed in the embodiment of the present application Figure 2 ;

[0034] Figure 4 Schematic diagram of the network slicing processing method proposed in the embodiment of the present application Figure 3 ;

[0035] Figure 5 Schematic diagram of the network slicing processing method proposed in the embodiment of the present application Figure 4 ;

[0036] Figure 6 A schematic diagram of the APP authentication process proposed in the embodiment of the present application;

[0037] Figure 7 A schematic diagram of a random identification mark update process proposed in an embodiment of the present application;

[0038] Figure 8 Schematic diagram of the structure of the USIM proposed in the embodiment of the present application Figure 1 ;

[0039] Fig. 9 Schematic diagram of the structure of the USIM proposed in the embodiment of the present application Figure 2 ;

[0040] Fig.10 Schematic diagram of the structure of the terminal device proposed in the embodiment of the present application Figure 1 ;

[0041] Fig.11 Schematic diagram of the structure of the terminal device proposed in the embodiment of the present application Figure 2 . DETAILED DESCRIPTION

[0042] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. It is understood that the specific embodiments described herein are only used to explain the related applications, rather than to limit the applications. It should also be noted that, for ease of description, only the parts related to the related applications are shown in the drawings.

[0043] According to relevant technologies, when transmitting data, the APP of the user terminal can choose to use specific slice resources according to its subscription relationship and network availability. After the terminal is stationed on the network, it obtains the slice identifier NSSAI that it can use. When the APP creates a session, it will query the URSP in the terminal to obtain the corresponding S-NSSAI. If this S-NSSAI is in the available slice identifier, it will use this identifier to create a session, so that the data flow of this APP can use the corresponding slice resource.

[0044] The terminal can use dynamic URSP or obtain URSP by presetting. If dynamic URSP is used, after the user signs the contract, the URSP is saved in the Policy Control Function (PCF). Figure 1 A schematic diagram of the URSP acquisition process in the related art is shown in FIG. Figure 1As shown in the figure, when the user registers the network or the URSP changes, the PCF will send the URSP to the terminal through the Access and Mobility Function (AMF). In the URSP, the corresponding relationship between APPID and S-NSSAI can be used to indicate the slice used by this APP. Currently, the APPID is controllably filled in by the APP developer, and the APPID plays a key bridge role in the session creation process, connecting a certain APP to the slice resources it can use.

[0045] APPID is static and is filled in by the APP developer. Its privacy and security are difficult to guarantee, making it possible to be cracked and tampered with. If another APP uses the same APPID to access the network, there is a possibility of creating a session with a slice identifier that it should not use and using the corresponding slice resources to transmit data; this leads to the occupation of specific network resources and reduces the security of network resources. Considering that this behavior may be malicious, a certain mechanism is needed to prevent this from happening.

[0046] In order to solve the current problem of reduced security of network resources, an embodiment of the present application provides a network slicing processing method, related equipment, storage medium and computer program product, where the USIM receives first identification information sent by the APP and second identification information corresponding to the first identification information; wherein the first identification information includes the identification information of the APP, and the second identification information includes the identification information sent to the APP by the server corresponding to the APP; it is determined whether the second identification information and the third identification information match, and a matching result is obtained, and the matching result is sent to the APP; wherein the third identification information includes the identification information corresponding to the first identification information stored in the USIM; according to the matching result, the APP is allowed or prohibited from using the network slice corresponding to the first identification information; the APP in the terminal device sends the first identification information and the second identification information corresponding to the first identification information to the USIM; the matching result sent by the USIM is received, and when the matching result characterizes passing, the network slice corresponding to the first identification information is used. It can be seen from this that after receiving the first identification information sent by the APP and the second identification information corresponding to the first identification information, the USIM can determine whether the second identification information and the third identification information match, that is, it can determine whether the identification information sent to the APP by the server corresponding to the APP matches the identification information corresponding to the first identification information stored in the USIM, and obtain a matching result. Then, based on the matching result, the APP can be allowed or prohibited from using the network slice corresponding to the first identification information. In other words, only when the matching result representation of the USIM is passed, can the APP use the network slice corresponding to the first identification information, otherwise the APP is prohibited from using the network slice corresponding to the first identification information, thereby improving the security of network resources.

[0047] The technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application.

[0048] The embodiment of the present application provides a method for processing network slices, which is applied to USIM. Figure 2 Schematic diagram of the network slicing processing method proposed in the embodiment of the present application Figure 1 ,like Figure 2 As shown, the network slice processing method may include the following steps:

[0049] Step 101, receiving first identification information sent by an APP and second identification information corresponding to the first identification information; wherein the first identification information includes identification information of the APP, and the second identification information includes identification information sent to the APP by a server corresponding to the APP.

[0050] In an embodiment of the present application, the USIM may receive the first identification information sent by the APP and the second identification information corresponding to the first identification information.

[0051] It should be noted that, in an embodiment of the present application, the first identification information includes identification information of the APP, for example, may include an APP ID; wherein the APP ID may be set by the APP developer, and the present application does not specifically limit the size of the APP ID.

[0052] It should be noted that, in an embodiment of the present application, the second identification information may include identification information sent to the APP by the server corresponding to the APP. The identification information sent to the APP by the server corresponding to the APP may be a random identification identifier corresponding to the APP ID, for example, it may be a string of hexadecimal codes of a fixed length. This application does not specifically limit the type and size of the second identification information.

[0053] It should be noted that, in an embodiment of the present application, the second identification information may be the second identification information corresponding to the first identification information sent by the application server to the APP when the APP accesses the application server for the first time.

[0054] Illustratively, in an embodiment of the present application, after a user turns on a terminal device, when using an APP for the first time, the user can receive a random identification identifier (i.e., second identification information) corresponding to the APP ID (i.e., first identification information) sent by an application server corresponding to the APP.

[0055] It should be noted that, in the embodiments of the present application, Figure 3 Schematic diagram of the network slicing processing method proposed in the embodiment of the present application Figure 2 ,like Figure 3As shown, after the USIM receives the first identification information sent by the APP and the second identification information corresponding to the first identification information, that is, after step 101, the USIM may further include the following steps:

[0056] Step 104: Determine whether third identification information corresponding to the first identification information is stored in the memory.

[0057] It should be noted that, in an embodiment of the present application, the third identification information may include a random identification identifier corresponding to the first identification information sent by the application server to the USIM when the APP accesses the application server for the first time.

[0058] That is to say, in an embodiment of the present application, when the APP accesses the application server for the first time, the application server will also send the random identification identifier corresponding to the first identification information to the APP, and may also send it to the USIM for storage.

[0059] It should be noted that, in the embodiment of the present application, the application server corresponding to the APP can send the third identification information to the USIM storage by sending a text message or using an independent transmission protocol (Bearer Independent Protocol, BIP) transmission method.

[0060] Exemplarily, in an embodiment of the present application, the application server corresponding to the APP obtains the ID corresponding to the USIM; and based on the ID corresponding to the USIM, the third identification information is sent to the USIM for storage by sending a text message or using the BIP transmission method.

[0061] It should be noted that, in the embodiment of the present application, after receiving the first identification information sent by the APP and the second identification information corresponding to the first identification information, the USIM may first determine whether the third identification information corresponding to the first identification information is stored in the memory.

[0062] Step 105: When the third identification information is stored, determine whether the second identification information matches the third identification information.

[0063] It should be noted that in an embodiment of the present application, after receiving the first identification information sent by the APP and the second identification information corresponding to the first identification information, the USIM can first determine whether the third identification information corresponding to the first identification information is stored in the memory. If the third identification information is stored, it can further determine whether the second identification information and the third identification information match.

[0064] Step 106: When the third identification information is not stored, the fifth identification information is allocated to the APP, and the fifth identification information is used for the APP to request the default network slice.

[0065] It should be noted that in an embodiment of the present application, when the USIM determines that the third identification information is not stored in the memory, it can allocate fifth identification information to the APP, and the fifth identification information is used for the APP to request the default network slice.

[0066] It should be noted that in an embodiment of the present application, the fifth identification information may be another APP ID assigned by the USIM to the APP, so that subsequent APPs can request a default network slice based on the APP ID assigned by the USIM.

[0067] Step 102: determine whether the second identification information matches the third identification information, obtain a matching result, and send the matching result to the APP; wherein the third identification information includes identification information corresponding to the first identification information stored in the USIM.

[0068] In an embodiment of the present application, after receiving the first identification information sent by the APP and the second identification information corresponding to the first identification information, the USIM can determine whether the second identification information and the third identification information match, and obtain a matching result.

[0069] Step 103: Based on the matching result, allow or prohibit the APP from using the network slice corresponding to the first identification information.

[0070] In an embodiment of the present application, after the USIM determines whether the second identification information and the third identification information match and obtains a matching result, it can allow or prohibit the APP from using the network slice corresponding to the first identification information based on the matching result.

[0071] It should be noted that in an embodiment of the present application, when the matching result indicates that the second identification information and the third identification information match, the USIM may allow the APP to use the network slice corresponding to the first identification information.

[0072] It should be noted that, in an embodiment of the present application, when the matching result indicates that the second identification information and the third identification information do not match, the USIM prohibits the APP from using the network slice corresponding to the first identification information.

[0073] Exemplarily, in an embodiment of the application, when the matching result indicates that the second identification information and the third identification information do not match, the USIM may send a message to the terminal, which may carry the first identification information, so that when the APP uses the first identification information to query the URSP in the terminal, it can refuse to provide the corresponding network slice.

[0074] Further, in an embodiment of the present application, after the USIM prohibits the APP from using the network slice corresponding to the first identification information, a fourth identification information can be allocated to the APP; wherein the fourth identification information is used for the APP to request a default network slice.

[0075] It should be noted that in an embodiment of the present application, the fourth identification information may be another APP ID assigned by the USIM to the APP, so that subsequent APPs can request a default network slice based on the APP ID assigned by the USIM.

[0076] That is to say, in an embodiment of the present application, before the APP uses the first identification information to request the corresponding network slice, the present application adds an authentication process for the APP, that is, if the second identification information corresponding to the first identification information sent by the APP is the same as the identification information corresponding to the first identification information stored in the USIM, the APP is allowed to use the network slice corresponding to the first identification information; if the second identification information corresponding to the first identification information sent by the APP is different from the identification information corresponding to the first identification information stored in the USIM, the APP is prohibited from using the network slice corresponding to the first identification information, and other APP IDs are assigned to it, so that subsequent APPs can request the default network slice based on the APP ID assigned by the USIM, thereby avoiding other APPs from using the first identification information to request available slice resources, thereby protecting the rights and interests of the slice-subscribing user APP and network security.

[0077] It should be noted that in an embodiment of the present application, when the matching result indicates that the second identification information and the third identification information match, the second identification information is discarded, and an identification acquisition request is sent to the server corresponding to the APP; then the sixth identification information corresponding to the first identification information sent by the server can be received; wherein the sixth identification information includes new identification information corresponding to the first identification information generated by the server.

[0078] It should be noted that, in an embodiment of the present application, the sixth identification information may include a new random identification identifier corresponding to the first identification information generated by the application server corresponding to the APP, for example, it may be a string of hexadecimal codes of a fixed length. This application does not specifically limit the type and size of the sixth identification information.

[0079] It should be noted that, in an embodiment of the present application, when the matching result indicates that the second identification information and the third identification information match, the USIM can discard the second identification information and send an identification acquisition request to the server corresponding to the APP; then, a new random identification identifier corresponding to the first identification information sent by the server can be received. That is, in order to maximize the avoidance of the APP ID and its corresponding first identification information from being acquired, the present application can manage the random identification identifier corresponding to the APP ID in a use-and-disposable manner, that is, the used random identification is discarded and updated, thereby effectively enhancing the security of this mechanism.

[0080] It should be noted that in an embodiment of the present application, when the matching result indicates that the second identification information and the third identification information match, the USIM does not need to update the random identification identifier corresponding to the APP ID, thereby effectively reducing the interaction process between the application server corresponding to the APP and the APP / USIM.

[0081] It should be noted that, in an embodiment of the present application, the USIM may update the identification information list corresponding to the first identification information based on the sixth identification information; wherein the identification information list includes at least the second identification information.

[0082] Exemplarily, in an embodiment of the present application, after receiving the sixth identification information corresponding to the first identification information sent by the server, the USIM can update the identification information list corresponding to the first identification information, and update the random identification identifier corresponding to the current first identification information to the sixth identification information.

[0083] It should be noted that, in an embodiment of the present application, if the USIM does not receive the sixth identification information sent by the server, it may send an identification acquisition request to the server again, so that the server resends the sixth identification information based on the identification acquisition request.

[0084] It should be noted that, in an embodiment of the present application, if the USIM receives the sixth identification information sent by the server, it can send a confirmation message (ACK) to the application server corresponding to the APP, indicating that the sixth identification information sent by the server has been successfully received.

[0085] In summary, the present application adds a new authentication process for APP. After receiving the first identification information sent by APP and the second identification information corresponding to the first identification information, USIM can first determine whether the second identification information and the third identification information match, that is, if the second identification information sent by APP is the same as the identification information corresponding to the first identification information stored in USIM, then the APP is allowed to use the network slice corresponding to the first identification information. If the second identification information sent by APP is not the same as the identification information corresponding to the first identification information stored in USIM, then APP is prohibited from using the network slice corresponding to the first identification information, and other APP IDs are assigned to it, so that subsequent APPs can request the default network slice based on the APP ID assigned by USIM, thereby avoiding other APPs from using the first identification information to request available slice resources, thereby protecting the rights and interests of slice-subscribing user APPs and network security; and when the matching result indicates that the second identification information and the third identification information match, USIM can discard the second identification information and send an identification acquisition request to the server corresponding to APP; then it can receive a new random identification corresponding to the first identification information sent by the server, that is, in order to maximize the avoidance of APP ID and its corresponding first identification information from being acquired, the present application can manage APPs by adopting a use-and-disposable manner. The random identification corresponding to the ID, that is, the used random identification is discarded and updated, thereby effectively enhancing the security of this mechanism.

[0086] The embodiment of the present application provides a method for processing network slices, which is applied to USIM, and the USIM receives first identification information sent by APP and second identification information corresponding to the first identification information; wherein the first identification information includes the identification information of APP, and the second identification information includes the identification information sent to APP by the server corresponding to APP; it is judged whether the second identification information and the third identification information match, and a matching result is obtained; wherein the third identification information includes the identification information corresponding to the first identification information stored in USIM; according to the matching result, the APP is allowed or prohibited to use the network slice corresponding to the first identification information. It can be seen that after receiving the first identification information sent by APP and the second identification information corresponding to the first identification information, the USIM can judge whether the second identification information and the third identification information match, that is, it can judge whether the identification information sent to APP by the server corresponding to APP matches the identification information corresponding to the first identification information stored in USIM, and obtain a matching result, and then according to the matching result, the APP can be allowed or prohibited to use the network slice corresponding to the first identification information, that is, only when the matching result of USIM is passed, the APP can use the network slice corresponding to the first identification information, otherwise the APP is prohibited from using the network slice corresponding to the first identification information, thereby improving the security of network resources.

[0087] Based on the above embodiment, another embodiment of the present application provides a method for processing a network slice, which is applied to a terminal device, where the terminal device includes an APP. Figure 4 Schematic diagram of the network slicing processing method proposed in the embodiment of the present application Figure 3 ,like Figure 4 As shown, the network slice processing method may include the following steps:

[0088] Step 201: Send first identification information and second identification information corresponding to the first identification information to the USIM; wherein the first identification information includes identification information of the APP, and the second identification information includes identification information sent to the APP by a server corresponding to the APP.

[0089] In an embodiment of the present application, the APP in the terminal device can send the first identification information and the second identification information corresponding to the first identification information to the USIM.

[0090] It should be noted that, in an embodiment of the present application, the first identification information includes identification information of the APP, for example, may include an APP ID; wherein the APP ID may be set by the APP developer, and the present application does not specifically limit the size of the APP ID.

[0091] It should be noted that, in an embodiment of the present application, the second identification information may include identification information sent to the APP by the server corresponding to the APP. The identification information sent to the APP by the server corresponding to the APP may be a random identification identifier corresponding to the APP ID, for example, it may be a string of hexadecimal codes of a fixed length. This application does not specifically limit the type and size of the second identification information.

[0092] It should be noted that, in an embodiment of the present application, the second identification information may be the second identification information corresponding to the first identification information sent by the application server to the APP when the APP accesses the application server for the first time.

[0093] Exemplarily, in an embodiment of the present application, when the APP in the terminal device accesses the application server for the first time, it can receive the second identification information corresponding to the first identification information sent by the application server, and then the APP can send the first identification information and the second identification information corresponding to the first identification information to the USIM through the internal interface.

[0094] Step 202: Receive the matching result sent by the USIM. If the matching result is passed, use the network slice corresponding to the first identification information.

[0095] In an embodiment of the present application, after the APP in the terminal device sends the first identification information and the second identification information corresponding to the first identification information to the USIM, it can receive the matching result sent by the USIM, and when the matching result characterizes passing, the network slice corresponding to the first identification information is used.

[0096] Exemplarily, in an embodiment of the present application, when the matching result characterization of the USIM passes, the APP in the terminal device can use the first identification information to query the URSP in the terminal to obtain the corresponding S-NSSAI, and then can use the S-NSSAI to create a session so that the data flow of the APP can use the corresponding network slice resources.

[0097] It should be noted that in an embodiment of the present application, when the matching result characterization fails, the APP can receive the fourth identification information assigned by the USIM and request a default network slice based on the fourth identification information; or, receive the fifth identification information assigned by the USIM and request a default network slice based on the fifth identification information.

[0098] It should be noted that in an embodiment of the present application, the fourth identification information may be another APP ID assigned by the USIM to the APP, and the subsequent APP may request a default network slice based on the fourth identification information.

[0099] It should be noted that in an embodiment of the present application, the fifth identification information may be another APP ID assigned by the USIM to the APP, and the subsequent APP may request a default network slice based on the fifth identification information.

[0100] That is to say, in an embodiment of the present application, after the APP in the terminal device sends the first identification information and the second identification information corresponding to the first identification information to the USIM, the APP can use the network slice corresponding to the first identification information if the matching result representation of the USIM passes; if the matching result representation fails, use other APP IDs assigned by the USIM to the APP to request the default network slice, that is, only if the matching result representation of the USIM passes can the APP use the network slice corresponding to the first identification information; otherwise, the APP is prohibited from using the network slice corresponding to the first identification information, thereby improving the security of network resources.

[0101] It should be noted that, in an embodiment of the present application, after the USIM sends an identification acquisition request to the server corresponding to the APP, the APP in the terminal device can receive the sixth identification information corresponding to the first identification information sent by the server.

[0102] It should be noted that, in an embodiment of the present application, the sixth identification information may include a new random identification identifier corresponding to the first identification information generated by the application server corresponding to the APP, for example, it may be a string of hexadecimal codes of a fixed length. This application does not specifically limit the type and size of the sixth identification information.

[0103] It should be noted that, in an embodiment of the present application, if the sixth identification information sent by the server is not received, the APP may send an identification acquisition request to the server so that the server resends the sixth identification information based on the identification acquisition request.

[0104] To summarize, after the APP in the terminal device sends the first identification information and the second identification information corresponding to the first identification information to the USIM, the APP can use the network slice corresponding to the first identification information if the matching result representation of the USIM passes. If the matching result representation fails, use other APP IDs assigned by the USIM to the APP to request the default network slice. That is, only if the matching result representation of the USIM passes can the APP use the network slice corresponding to the first identification information. Otherwise, the APP is prohibited from using the network slice corresponding to the first identification information, thereby improving the security of network resources.

[0105] The embodiment of the present application provides a method for processing network slices, which is applied to a terminal device, wherein the terminal device includes an APP, and the APP in the terminal device sends first identification information and second identification information corresponding to the first identification information to a USIM; wherein the first identification information includes the identification information of the APP, and the second identification information includes the identification information sent to the APP by a server corresponding to the APP; receiving the matching result sent by the USIM, and using the network slice corresponding to the first identification information when the matching result characterization passes. It can be seen that after the APP in the terminal device sends the first identification information and the second identification information corresponding to the first identification information to the USIM, the APP can use the network slice corresponding to the first identification information only when the matching result characterization of the USIM passes, thereby improving the security of network resources.

[0106] Based on the above embodiment, another embodiment of the present application provides a method for processing network slicing, which is applied to a USIM and a terminal device. Figure 5 Schematic diagram of the network slicing processing method proposed in the embodiment of the present application Figure 4 ,like Figure 5 As shown, the network slice processing method may include the following steps:

[0107] Step 301, the APP in the terminal device sends first identification information and second identification information corresponding to the first identification information to the USIM; wherein the first identification information includes the identification information of the APP, and the second identification information includes the identification information sent to the APP by the server corresponding to the APP.

[0108] It should be noted that, in an embodiment of the present application, the first identification information includes identification information of the APP, for example, may include an APP ID; wherein the APP ID may be set by the APP developer, and the present application does not specifically limit the size of the APP ID.

[0109] It should be noted that, in an embodiment of the present application, the second identification information may include identification information sent to the APP by the server corresponding to the APP. The identification information sent to the APP by the server corresponding to the APP may be a random identification identifier corresponding to the APP ID, for example, it may be a string of hexadecimal codes of a fixed length. This application does not specifically limit the type and size of the second identification information.

[0110] It should be noted that, in an embodiment of the present application, the second identification information may be the second identification information corresponding to the first identification information sent by the application server to the APP when the APP accesses the application server for the first time.

[0111] Step 302: The USIM determines whether the second identification information matches the third identification information, obtains a matching result, and sends the matching result to the APP; wherein the third identification information includes identification information corresponding to the first identification information stored in the USIM.

[0112] It should be noted that, in the embodiment of the present application, after receiving the first identification information sent by the APP and the second identification information corresponding to the first identification information, the USIM can determine whether the third identification information corresponding to the first identification information is stored in the memory.

[0113] It should be noted that, in an embodiment of the present application, the third identification information may include a random identification identifier corresponding to the first identification information sent by the application server to the USIM when the APP accesses the application server for the first time.

[0114] That is to say, in an embodiment of the present application, when the APP accesses the application server for the first time, the application server will also send the random identification identifier corresponding to the first identification information to the APP, and may also send it to the USIM for storage.

[0115] It should be noted that, in the embodiment of the present application, the application server corresponding to the APP can send the third identification information to the USIM storage by sending a text message or using the BIP transmission method.

[0116] Exemplarily, in an embodiment of the present application, the application server corresponding to the APP obtains the ID corresponding to the USIM; and based on the ID corresponding to the USIM, the third identification information is sent to the USIM for storage by sending a text message or using the BIP transmission method.

[0117] It should be noted that in an embodiment of the present application, after receiving the first identification information sent by the APP and the second identification information corresponding to the first identification information, the USIM can first determine whether the third identification information corresponding to the first identification information is stored in the memory, and if the third identification information is stored, determine whether the second identification information and the third identification information match; if the third identification information is not stored, the fifth identification information is allocated to the APP, and the fifth identification information is used for the APP to request the default network slice.

[0118] It should be noted that in an embodiment of the present application, when the USIM determines that the third identification information is not stored in the memory, it can allocate fifth identification information to the APP, and the fifth identification information is used for the APP to request the default network slice.

[0119] It should be noted that in an embodiment of the present application, the fifth identification information may be another APP ID assigned by the USIM to the APP, so that subsequent APPs can request a default network slice based on the APP ID assigned by the USIM.

[0120] Step 303: USIM allows or prohibits APP from using the network slice corresponding to the first identification information based on the matching result.

[0121] It should be noted that in an embodiment of the present application, when the matching result indicates that the second identification information and the third identification information match, the USIM may allow the APP to use the network slice corresponding to the first identification information.

[0122] It should be noted that, in an embodiment of the present application, when the matching result indicates that the second identification information and the third identification information do not match, the USIM prohibits the APP from using the network slice corresponding to the first identification information.

[0123] Exemplarily, in an embodiment of the application, when the matching result indicates that the second identification information and the third identification information do not match, the USIM may send a message to the terminal, which may carry the first identification information, so that when the APP uses the first identification information to query the URSP in the terminal, it can refuse to provide the corresponding network slice.

[0124] Further, in an embodiment of the present application, after the USIM prohibits the APP from using the network slice corresponding to the first identification information, a fourth identification information can be allocated to the APP; wherein the fourth identification information is used for the APP to request a default network slice.

[0125] It should be noted that in an embodiment of the present application, the fourth identification information may be another APP ID assigned by the USIM to the APP, so that subsequent APPs can request a default network slice based on the APP ID assigned by the USIM.

[0126] That is to say, in an embodiment of the present application, before the APP uses the first identification information to request the corresponding network slice, the present application adds an authentication process for the APP, that is, if the second identification information corresponding to the first identification information sent by the APP is the same as the identification information corresponding to the first identification information stored in the USIM, the APP is allowed to use the network slice corresponding to the first identification information; if the second identification information corresponding to the first identification information sent by the APP is different from the identification information corresponding to the first identification information stored in the USIM, the APP is prohibited from using the network slice corresponding to the first identification information, and other APP IDs are assigned to it, so that subsequent APPs can request the default network slice based on the APP ID assigned by the USIM, thereby avoiding other APPs from using the first identification information to request available slice resources, thereby protecting the rights and interests of the slice-subscribing user APP and network security.

[0127] It should be noted that in an embodiment of the present application, when the matching result indicates that the second identification information and the third identification information match, the second identification information is discarded, and an identification acquisition request is sent to the server corresponding to the APP; then the sixth identification information corresponding to the first identification information sent by the server can be received; wherein the sixth identification information includes new identification information corresponding to the first identification information generated by the server.

[0128] Exemplarily, in an embodiment of the present application, the sixth identification information may include a new random identification identifier corresponding to the first identification information generated by the application server corresponding to the APP, for example, it may be a string of hexadecimal codes of a fixed length. The present application does not specifically limit the type and size of the sixth identification information.

[0129] It should be noted that, in an embodiment of the present application, when the matching result indicates that the second identification information and the third identification information match, the USIM can discard the second identification information and send an identification acquisition request to the server corresponding to the APP; then, a new random identification identifier corresponding to the first identification information sent by the server can be received. That is, in order to maximize the avoidance of the APP ID and its corresponding first identification information from being acquired, the present application can manage the random identification identifier corresponding to the APP ID in a use-and-disposable manner, that is, the used random identification is discarded and updated, thereby effectively enhancing the security of this mechanism.

[0130] It should be noted that in an embodiment of the present application, when the matching result indicates that the second identification information and the third identification information match, the USIM does not need to update the random identification identifier corresponding to the APP ID, thereby effectively reducing the interaction process between the application server corresponding to the APP and the APP / USIM.

[0131] It should be noted that, in an embodiment of the present application, the USIM may update the identification information list corresponding to the first identification information based on the sixth identification information; wherein the identification information list includes at least the second identification information.

[0132] Exemplarily, in an embodiment of the present application, after receiving the sixth identification information corresponding to the first identification information sent by the server, the USIM can update the identification information list corresponding to the first identification information, and update the random identification identifier corresponding to the current first identification information to the sixth identification information.

[0133] It should be noted that, in an embodiment of the present application, if the USIM does not receive the sixth identification information sent by the server, it may send an identification acquisition request to the server again, so that the server resends the sixth identification information based on the identification acquisition request.

[0134] It should be noted that, in an embodiment of the present application, if the USIM receives the sixth identification information sent by the server, it can send a confirmation message (ACK) to the application server corresponding to the APP, indicating that the sixth identification information sent by the server has been successfully received.

[0135] Step 304: The APP in the terminal device receives the matching result sent by the USIM. If the matching result indicates a pass, the network slice corresponding to the first identification information is used.

[0136] Exemplarily, in an embodiment of the present application, when the matching result characterization of the USIM passes, the APP in the terminal device can use the first identification information to query the URSP in the terminal to obtain the corresponding S-NSSAI, and then can use the S-NSSAI to create a session so that the data flow of the APP can use the corresponding network slice resources.

[0137] It should be noted that in an embodiment of the present application, when the matching result characterization fails, the APP can receive the fourth identification information assigned by the USIM and request a default network slice based on the fourth identification information; or, receive the fifth identification information assigned by the USIM and request a default network slice based on the fifth identification information.

[0138] It should be noted that in an embodiment of the present application, the fourth identification information may be another APP ID assigned by the USIM to the APP, and the subsequent APP may request a default network slice based on the fourth identification information.

[0139] It should be noted that in an embodiment of the present application, the fifth identification information may be another APP ID assigned by the USIM to the APP, and the subsequent APP may request a default network slice based on the fifth identification information.

[0140] That is to say, in an embodiment of the present application, after the APP in the terminal device sends the first identification information and the second identification information corresponding to the first identification information to the USIM, the APP can use the network slice corresponding to the first identification information if the matching result representation of the USIM passes; if the matching result representation fails, use other APP IDs assigned by the USIM to the APP to request the default network slice, that is, only if the matching result representation of the USIM passes can the APP use the network slice corresponding to the first identification information; otherwise, the APP is prohibited from using the network slice corresponding to the first identification information, thereby improving the security of network resources.

[0141] It should be noted that, in an embodiment of the present application, after the USIM sends an identification acquisition request to the server corresponding to the APP, the APP in the terminal device can receive the sixth identification information corresponding to the first identification information sent by the server.

[0142] It should be noted that, in an embodiment of the present application, the sixth identification information may include a new random identification corresponding to the first identification information generated by the application server corresponding to the APP, for example, it may be a string of hexadecimal codes of fixed length, and the present application does not specifically limit the type and size of the sixth identification information. It should be noted that, in an embodiment of the present application, if the sixth identification information sent by the server is not received, the APP may send an identification acquisition request to the server so that the server resends the sixth identification information based on the identification acquisition request.

[0143] In summary, the present application adds a new authentication process for APP. After receiving the first identification information sent by APP and the second identification information corresponding to the first identification information, USIM can first determine whether the second identification information and the third identification information match, that is, if the second identification information sent by APP is the same as the identification information corresponding to the first identification information stored in USIM, then the APP is allowed to use the network slice corresponding to the first identification information. If the second identification information sent by APP is not the same as the identification information corresponding to the first identification information stored in USIM, then APP is prohibited from using the network slice corresponding to the first identification information, and other APP IDs are assigned to it, so that subsequent APPs can request the default network slice based on the APP ID assigned by USIM, thereby avoiding other APPs from using the first identification information to request available slice resources, thereby protecting the rights and interests of slice-subscribing user APPs and network security; and when the matching result indicates that the second identification information and the third identification information match, USIM can discard the second identification information and send an identification acquisition request to the server corresponding to APP; then it can receive a new random identification corresponding to the first identification information sent by the server, that is, in order to maximize the avoidance of APP ID and its corresponding first identification information from being acquired, the present application can manage APPs by adopting a use-and-disposable manner. The random identification corresponding to the ID, that is, the used random identification is discarded and updated, thereby effectively enhancing the security of this mechanism.

[0144] An embodiment of the present application provides a method for processing network slices, which is applied to a USIM and a terminal device, where the USIM receives first identification information sent by an APP and second identification information corresponding to the first identification information; wherein the first identification information includes the identification information of the APP, and the second identification information includes the identification information sent to the APP by a server corresponding to the APP; it is determined whether the second identification information and the third identification information match, a matching result is obtained, and the matching result is sent to the APP; wherein the third identification information includes the identification information corresponding to the first identification information stored in the USIM; according to the matching result, the APP is allowed or prohibited from using the network slice corresponding to the first identification information; the APP in the terminal device sends the first identification information and the second identification information corresponding to the first identification information to the USIM; the matching result sent by the USIM is received, and when the matching result characterizes passing, the network slice corresponding to the first identification information is used. It can be seen from this that after receiving the first identification information sent by the APP and the second identification information corresponding to the first identification information, the USIM can determine whether the second identification information and the third identification information match, that is, it can determine whether the identification information sent to the APP by the server corresponding to the APP matches the identification information corresponding to the first identification information stored in the USIM, and obtain a matching result. Then, based on the matching result, the APP can be allowed or prohibited from using the network slice corresponding to the first identification information. In other words, only when the matching result representation of the USIM is passed, can the APP use the network slice corresponding to the first identification information, otherwise the APP is prohibited from using the network slice corresponding to the first identification information, thereby improving the security of network resources.

[0145] Based on the above embodiments, another embodiment of the present application provides a method for processing network slices. The basic principle of this method is to enhance the security verification of using slice APPs by adding additional random identification identifiers and corresponding steps. Without changing the existing call main process and URSP standard format, other APPs are prevented from using legitimate APP IDs (i.e., first identification information) to request available slice resources, thereby protecting the rights and interests of slice-subscribing user APPs and network security. In addition, the embodiment of the present application can use the server corresponding to the APP to generate a dynamic identification identifier (i.e., second identification information), distribute it to the APP in the USIM and the terminal, add an authentication process before the session is created, allow or deny the APP to use the APPID it requires, and allocate the slice resources it can use accordingly. Furthermore, in order to maximize the avoidance of the APP ID and the security identifier (i.e., second identification information) used by it from being obtained, this proposal adopts a use-and-throw method to manage security identifiers, that is, used security codes are discarded and updated, thereby effectively enhancing the security of this mechanism.

[0146] It should be noted that in the embodiment of the present application, the user's URSP is stored in the PCF (dynamic URSP) or preset by the operator on the terminal side (static URSP), and its content includes the correspondence between the APPID of a certain APP of the user, the IP triplet of the destination address, the slice identifier used, and the data network name (Data Network Name, DNN), etc., where the IP triplet of the destination address is optional. For dynamic URSP, PCF will send it to the terminal through AMF.

[0147] It should be noted that in an embodiment of the present application, the application service provider who has subscribed to the slice generates a random identification identifier (such as a string of hexadecimal codes of fixed length) on its server. When the user terminal accesses the application server with an APP for the first time, the application server sends this identification identifier (i.e., the second identification information) to the user's APP, and at the same time sends this identification identifier to the USIM storage by sending a text message or using the BIP transmission method.

[0148] It should be noted that, in the embodiments of the present application, Figure 6 This is a schematic diagram of the APP authentication process proposed in the embodiment of the present application, such as Figure 6 As shown, the APP authentication process diagram may include the following process: step 401, the APP sends the APPID (i.e., the first identification information) and the previously issued identification identifier (i.e., the second identification information) to the USIM, step 402, the USIM uses the APPID as an index to query the corresponding identification identifier stored therein; step 403, whether the USIM stores the identification identifier corresponding to the APPID (i.e., the third identification information); step 404, if the USIM does not store the identification identifier corresponding to the APPID (i.e., the third identification information), the APP is not allowed to use the APPID, and an APPID (i.e., the fifth identification information) is forcibly allocated; step 405, if the USIM stores the identification identifier corresponding to the APPID, the identification identifier (i.e., the third identification information) stored by the USIM is determined Is it the same as the identification identifier (i.e., the second identification information) sent by the APP? Step 406: If the identification identifier (i.e., the third identification information) is the same as the identification identifier (i.e., the second identification information) sent by the APP, the slice resources corresponding to the APPID carried by the APP itself are allowed to be used; Step 407: If the identification identifier (i.e., the third identification information) is not the same as the identification identifier (i.e., the second identification information) sent by the APP (or the identification identifier sent by the APP is empty), the APP is not allowed to use this APPID (i.e., the first identification information), and an APPID (i.e., the fourth identification information) is forcibly allocated. In the URSP, this APPID generally points to the default slice; Step 408: The APP queries the URSP with the APPID (i.e., the first identification information) to obtain the S-NSSAI and enter the session creation process.

[0149] That is to say, in an embodiment of the present application, before the APP uses the first identification information to request the corresponding network slice, the present application adds an authentication process for the APP, that is, if the second identification information corresponding to the first identification information sent by the APP is the same as the identification information corresponding to the first identification information stored in the USIM, the APP is allowed to use the network slice corresponding to the first identification information; if the second identification information corresponding to the first identification information sent by the APP is different from the identification information corresponding to the first identification information stored in the USIM, the APP is prohibited from using the network slice corresponding to the first identification information, and other APP IDs are assigned to it, so that subsequent APPs can request the default network slice based on the APP ID assigned by the USIM, thereby avoiding other APPs from using the first identification information to request available slice resources, thereby protecting the rights and interests of the slice-subscribing user APP and network security.

[0150] It should be noted that in the embodiment of the present application, when the identification identifier (i.e., the third identification information) corresponding to the APP ID stored in the USIM is correctly compared, the USIM discards the current identification identifier (i.e., the second identification information); if the comparison result is incorrect, the USIM still retains the identification identifier (i.e., the second identification information) corresponding to the current APPID; when the USIM decides to discard the identification identifier (i.e., the second identification information) corresponding to the current APPID, the following process is used to update the random identification identifiers of the APP and the USIM: Figure 7 A schematic diagram of the random identification mark update process proposed in the embodiment of the present application is shown in FIG. Figure 7 As shown, the USIM can notify the application server to generate a new identification identifier via SMS or BIP; the application server then saves the new identification identifier (i.e., the sixth identification information), and the application server can send the new identification identifier (i.e., the sixth identification information) to the terminal APP, and the APP replies ACK to indicate receipt. If the application server does not receive ACK, it resends the identification identifier; the application server sends the new identification identifier (i.e., the sixth identification information) to the USIM via SMS or BIP, and the USIM replies ACK to indicate receipt. If the application server does not receive ACK, it resends the identification identifier; the USIM updates the identification identifier (identification information list) corresponding to the APPID.

[0151] It should be noted that, in the embodiments of the present application, through the above-mentioned random identification identifier update process, the identification identifier corresponding to the APPID in the USIM (i.e., the third identification information) is not updated when it is not correctly compared, which can effectively reduce the interaction process between the application server and APP / USIM, and at the same time avoid the risk of the fixed random identification identifier being detected (for example, during the transmission of the APP ID and the corresponding random identification identifier from the APP to the USIM) and being stolen.

[0152] In summary, the present application adds a new authentication process for APP. After receiving the first identification information sent by APP and the second identification information corresponding to the first identification information, USIM can first determine whether the second identification information and the third identification information match, that is, if the second identification information sent by APP is the same as the identification information corresponding to the first identification information stored in USIM, then the APP is allowed to use the network slice corresponding to the first identification information. If the second identification information sent by APP is not the same as the identification information corresponding to the first identification information stored in USIM, then APP is prohibited from using the network slice corresponding to the first identification information, and other APP IDs are assigned to it, so that subsequent APPs can request the default network slice based on the APP ID assigned by USIM, thereby avoiding other APPs from using the first identification information to request available slice resources, thereby protecting the rights and interests of slice-subscribing user APPs and network security; and when the matching result indicates that the second identification information and the third identification information match, USIM can discard the second identification information and send an identification acquisition request to the server corresponding to APP; then it can receive a new random identification corresponding to the first identification information sent by the server, that is, in order to maximize the avoidance of APP ID and its corresponding first identification information from being acquired, the present application can manage APPs by adopting a use-and-disposable manner. The random identification corresponding to the ID, that is, the used random identification is discarded and updated, thereby effectively enhancing the security of this mechanism.

[0153] An embodiment of the present application provides a method for processing network slices, which is applied to a USIM and a terminal device, where the USIM receives first identification information sent by an APP and second identification information corresponding to the first identification information; wherein the first identification information includes the identification information of the APP, and the second identification information includes the identification information sent to the APP by a server corresponding to the APP; it is determined whether the second identification information and the third identification information match, a matching result is obtained, and the matching result is sent to the APP; wherein the third identification information includes the identification information corresponding to the first identification information stored in the USIM; according to the matching result, the APP is allowed or prohibited from using the network slice corresponding to the first identification information; the APP in the terminal device sends the first identification information and the second identification information corresponding to the first identification information to the USIM; the matching result sent by the USIM is received, and when the matching result characterizes passing, the network slice corresponding to the first identification information is used. It can be seen from this that after receiving the first identification information sent by the APP and the second identification information corresponding to the first identification information, the USIM can determine whether the second identification information and the third identification information match, that is, it can determine whether the identification information sent to the APP by the server corresponding to the APP matches the identification information corresponding to the first identification information stored in the USIM, and obtain a matching result. Then, based on the matching result, the APP can be allowed or prohibited from using the network slice corresponding to the first identification information. In other words, only when the matching result representation of the USIM is passed, can the APP use the network slice corresponding to the first identification information, otherwise the APP is prohibited from using the network slice corresponding to the first identification information, thereby improving the security of network resources.

[0154] Based on the above embodiments, the present application embodiment provides a USIM, Figure 8 The structure of USIM is shown in Figure 1. Figure 1 ,like Figure 8 As shown, the USIM 10 includes: a first receiving unit 11, a judging unit 12, a first sending unit 13 and a first using unit 14; wherein,

[0155] The first receiving unit 11 is used to receive first identification information sent by the APP and second identification information corresponding to the first identification information; wherein the first identification information includes the identification information of the APP, and the second identification information includes the identification information sent to the APP by the server corresponding to the APP;

[0156] The judging unit 12 is configured to judge whether the second identification information matches the third identification information, and obtain a matching result; wherein the third identification information includes identification information corresponding to the first identification information stored in the USIM;

[0157] The first sending unit 13 is used to send the matching result to the APP;

[0158] The first using unit 14 is used to allow or prohibit the APP from using the network slice corresponding to the first identification information according to the matching result.

[0159] In the embodiments of the present application, further, Fig. 9 The structure of USIM is shown in Figure 1. Figure 2 ,like Fig. 9 As shown, the USIM10 proposed in the embodiment of the present application may also include a first processor 15, a first memory 16 storing executable instructions of the first processor 15, and further, the USIM10 may also include a first communication interface 17, and a first bus 18 for connecting the first processor 15, the first memory 16 and the first communication interface 17.

[0160] In an embodiment of the present application, the first processor 15 may be at least one of an Application Specific Integrated Circuit (ASIC), a Digital Signal Processor (DSP), a Digital Signal Processing Device (DSPD), a Programmable Logic Device (PLD), a Field Programmable Gate Array (FPGA), a Central Processing Unit (CPU), a controller, a microcontroller, and a microprocessor. It can be understood that for different devices, the electronic device used to implement the above-mentioned processor function may also be other, and the embodiment of the present application is not specifically limited. The USIM 10 may also include a first memory 16, which may be connected to the first processor 15, wherein the first memory 16 is used to store executable program code, the program code includes computer operation instructions, and the first memory 16 may include a high-speed RAM memory, and may also include a non-volatile memory, for example, at least two disk memories.

[0161] In the embodiment of the present application, the first bus 18 is used to connect the first communication interface 17, the first processor 15 and the first memory 16, and the mutual communication between these devices.

[0162] In the embodiment of the present application, the first memory 16 is used to store instructions and data.

[0163] Further, in an embodiment of the present application, the above-mentioned first processor 15 is used to receive first identification information sent by an APP and second identification information corresponding to the first identification information; wherein, the first identification information includes the identification information of the APP, and the second identification information includes the identification information sent to the APP by the server corresponding to the APP; determine whether the second identification information and the third identification information match, and obtain a matching result; wherein, the third identification information includes the identification information corresponding to the first identification information stored in the USIM; according to the matching result, allow or prohibit the APP from using the network slice corresponding to the first identification information.

[0164] In practical applications, the first memory 16 may be a volatile memory, such as a random access memory (RAM); or a non-volatile memory, such as a read-only memory (ROM), a flash memory, a hard disk drive (HDD) or a solid-state drive (SSD); or a combination of the above types of memories, and provide instructions and data to the first processor 15.

[0165] The embodiment of the present application provides a USIM, the USIM receives the first identification information sent by the APP and the second identification information corresponding to the first identification information; wherein the first identification information includes the identification information of the APP, and the second identification information includes the identification information sent to the APP by the server corresponding to the APP; determines whether the second identification information and the third identification information match, and obtains a matching result; wherein the third identification information includes the identification information corresponding to the first identification information stored in the USIM; and allows or prohibits the APP from using the network slice corresponding to the first identification information according to the matching result. It can be seen from this that after receiving the first identification information sent by the APP and the second identification information corresponding to the first identification information, the USIM can determine whether the second identification information and the third identification information match, that is, it can determine whether the identification information sent to the APP by the server corresponding to the APP matches the identification information corresponding to the first identification information stored in the USIM, and obtain a matching result, and then allows or prohibits the APP from using the network slice corresponding to the first identification information according to the matching result, that is, only when the matching result of the USIM is passed, the APP can use the network slice corresponding to the first identification information, otherwise the APP is prohibited from using the network slice corresponding to the first identification information, thereby improving the security of network resources.

[0166] An embodiment of the present application provides a computer-readable storage medium on which a program is stored, and when the program is executed by a processor, the network slicing processing method as described above is implemented.

[0167] Specifically, a program instruction corresponding to a network slicing processing method in this embodiment may be stored on a storage medium such as a CD, a hard disk, or a USB flash drive. When a program instruction corresponding to a network slicing processing method in the storage medium is read or executed by an electronic device, the following steps are included:

[0168] Receive first identification information sent by an APP and second identification information corresponding to the first identification information; wherein the first identification information includes the identification information of the APP, and the second identification information includes the identification information sent to the APP by a server corresponding to the APP;

[0169] Determine whether the second identification information matches the third identification information, obtain a matching result, and send the matching result to the APP; wherein the third identification information includes identification information corresponding to the first identification information stored in the USIM;

[0170] Based on the matching result, the APP is allowed or prohibited from using the network slice corresponding to the first identification information.

[0171] The embodiment of the present application further provides a computer program product, including a computer program, and the computer program can be executed by the first processor 15 of the USIM 10 to complete the steps of any of the aforementioned methods.

[0172] In the embodiments of the present application, further, Fig.10 Schematic diagram of the terminal device structure Figure 1 ,like Fig.10 As shown, the terminal device 20 includes: a second sending unit 21, a second receiving unit 22 and a second using unit 23; wherein,

[0173] The second sending unit 21 is used to send the first identification information and the second identification information corresponding to the first identification information to the USIM; wherein the first identification information includes the identification information of the APP, and the second identification information includes the identification information sent to the APP by the server corresponding to the APP;

[0174] The second receiving unit 22 is used to receive the matching result sent by the USIM;

[0175] The second usage unit 23 is used to use the network slice corresponding to the first identification information when the matching result characterization passes.

[0176] In the embodiments of the present application, further, Fig.11 Schematic diagram of the terminal device structure Figure 2 ,like Fig.11 As shown, the terminal device 20 proposed in the embodiment of the present application may also include a second processor 24, a second memory 25 storing executable instructions of the second processor 24, and further, the terminal device 20 may also include a second communication interface 26, and a second bus 27 for connecting the second processor 24, the second memory 25 and the second communication interface 26.

[0177] In the embodiment of the present application, the second processor 24 can be at least one of an application-specific integrated circuit (ASIC), a digital signal processor (DSP), a digital signal processing device (DSPD), a programmable logic device (PLD), a field programmable gate array (FPGA), a central processing unit (CPU), a controller, a microcontroller, and a microprocessor. It can be understood that for different devices, the electronic device used to implement the above-mentioned processor function can also be other, and the embodiment of the present application is not specifically limited. The terminal device 20 can also include a second memory 25, which can be connected to the second processor 24, wherein the second memory 25 is used to store executable program code, the program code includes computer operation instructions, and the second memory 25 may include a high-speed RAM memory, and may also include a non-volatile memory, for example, at least two disk memories.

[0178] In the embodiment of the present application, the second bus 27 is used to connect the second communication interface 26, the second processor 24 and the second memory 25, and the mutual communication between these devices.

[0179] In the embodiment of the present application, the second memory 25 is used to store instructions and data.

[0180] Further, in an embodiment of the present application, the above-mentioned second processor 24 is used to send the first identification information and the second identification information corresponding to the first identification information to the USIM; wherein the first identification information includes the identification information of the APP, and the second identification information includes the identification information sent to the APP by the server corresponding to the APP; when the matching result representation of the USIM is passed, the network slice corresponding to the first identification information is used.

[0181] In practical applications, the second memory 25 may be a volatile memory, such as a random access memory (RAM); or a non-volatile memory, such as a read-only memory (ROM), a flash memory, a hard disk drive (HDD) or a solid-state drive (SSD); or a combination of the above types of memories, and provide instructions and data to the second processor 24.

[0182] The embodiment of the present application provides a terminal device, the terminal device includes an APP, the APP in the terminal device sends first identification information and second identification information corresponding to the first identification information to the USIM; wherein the first identification information includes the identification information of the APP, and the second identification information includes the identification information sent to the APP by the server corresponding to the APP; when the matching result representation of the USIM passes, the network slice corresponding to the first identification information is used. It can be seen that after the APP in the terminal device sends the first identification information and the second identification information corresponding to the first identification information to the USIM, the APP can only use the network slice corresponding to the first identification information when the matching result representation of the USIM passes, thereby improving the security of network resources.

[0183] An embodiment of the present application provides a computer-readable storage medium on which a program is stored, and when the program is executed by a processor, the network slicing processing method as described above is implemented.

[0184] Specifically, a program instruction corresponding to a network slicing processing method in this embodiment may be stored on a storage medium such as a CD, a hard disk, or a USB flash drive. When a program instruction corresponding to a network slicing processing method in the storage medium is read or executed by an electronic device, the following steps are included:

[0185] Sending first identification information and second identification information corresponding to the first identification information to the USIM; wherein the first identification information includes the identification information of the APP, and the second identification information includes the identification information sent to the APP by the server corresponding to the APP;

[0186] Receive the matching result sent by the USIM, and if the matching result indicates a pass, use the network slice corresponding to the first identification information.

[0187] The embodiment of the present application further provides a computer program product, including a computer program, which can be executed by the second processor 24 of the terminal device 20 to complete the steps of any of the aforementioned methods.

[0188] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of hardware embodiments, software embodiments, or embodiments in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage and optical storage, etc.) that contain computer-usable program code.

[0189] The present application is described with reference to implementation flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the process in the flowchart. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0190] These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce a manufactured product including an instruction device, which is implemented in the implementation flow diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0191] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operation steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for executing the steps in the flowchart. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0192] The above description is only a preferred embodiment of the present application and is not intended to limit the protection scope of the present application.

Claims

1. A method for processing a network slice, characterized in that: The method is applied to a universal user identity card (USIM), and the method comprises: Receive first identification information sent by an application APP and second identification information corresponding to the first identification information; wherein the first identification information includes the identification information of the APP, and the second identification information includes the identification information sent to the APP by a server corresponding to the APP; Determine whether the second identification information matches the third identification information, obtain a matching result, and send the matching result to the APP; wherein the third identification information includes identification information corresponding to the first identification information stored in the USIM; Based on the matching result, the APP is allowed or prohibited from using the network slice corresponding to the first identification information.

2. The method according to claim 1, characterized in that When the matching result indicates that the second identification information and the third identification information match, the APP is allowed to use the network slice corresponding to the first identification information.

3. The method according to claim 1, characterized in that When the matching result indicates that the second identification information and the third identification information do not match, prohibiting the APP from using the network slice corresponding to the first identification information, the method further includes: Assign fourth identification information to the APP; wherein the fourth identification information is used for the APP to request a default network slice.

4. The method according to claim 1, characterized in that: After receiving the first identification information sent by the APP and the second identification information corresponding to the first identification information, the method further includes: Determining whether the third identification information corresponding to the first identification information is stored in the memory; In the case of storing the third identification information, determining whether the second identification information matches the third identification information; or, When the third identification information is not stored, the fifth identification information is allocated to the APP, and the fifth identification information is used for the APP to request a default network slice.

5. The method according to claim 1, characterized in that The method further comprises: If the matching result indicates that the second identification information matches the third identification information, discard the second identification information and send an identification acquisition request to the server corresponding to the APP; Receive sixth identification information corresponding to the first identification information sent by the server; wherein the sixth identification information includes new identification information corresponding to the first identification information generated by the server.

6. The method according to claim 5, characterized in that The method further comprises: The identification information list corresponding to the first identification information is updated based on the sixth identification information; wherein the identification information list at least includes the second identification information.

7. The method according to claim 5, characterized in that The method further comprises: If the sixth identification information sent by the server is not received, the identification acquisition request is sent to the server again, so that the server resends the sixth identification information based on the identification acquisition request.

8. A method for processing a network slice, characterized in that: The method is applied to a terminal device, the terminal device includes an APP, and the method includes: Sending first identification information and second identification information corresponding to the first identification information to the USIM; wherein the first identification information includes the identification information of the APP, and the second identification information includes the identification information sent to the APP by the server corresponding to the APP; Receive the matching result sent by the USIM, and if the matching result indicates a pass, use the network slice corresponding to the first identification information.

9. The method according to claim 8, characterized in that The method further comprises: If the matching result characterization fails, receiving fourth identification information assigned by the USIM, and requesting a default network slice based on the fourth identification information; or, Receive the fifth identification information assigned by the USIM, and request a default network slice based on the fifth identification information.

10. The method according to claim 8, characterized in that The method further comprises: After the USIM sends an identification acquisition request to the server corresponding to the APP, sixth identification information corresponding to the first identification information sent by the server is received.

11. The method according to claim 10, characterized in that The method further comprises: If the sixth identification information sent by the server is not received, the identification acquisition request is sent to the server, so that the server resends the sixth identification information based on the identification acquisition request.

12. A USIM, characterized in that: The USIM includes: a first receiving unit, a judging unit, a first sending unit and a first using unit; wherein, The first receiving unit is used to receive first identification information sent by the APP and second identification information corresponding to the first identification information; wherein the first identification information includes the identification information of the APP, and the second identification information includes the identification information sent to the APP by the server corresponding to the APP; The judging unit is configured to judge whether the second identification information matches the third identification information to obtain a matching result; wherein the third identification information includes identification information corresponding to the first identification information stored in the USIM; The first sending unit is used to send the matching result to the APP; The first using unit is used to allow or prohibit the APP from using the network slice corresponding to the first identification information based on the matching result.

13. A USIM, characterized in that: The USIM comprises: a first processor and a first memory; wherein, The first memory is used to store a computer program that can be run on the processor; The first processor is configured to execute the method according to any one of claims 1 to 7 when running the computer program.

14. A terminal device, characterized in that: The terminal device comprises: a second sending unit, a second receiving unit and a second using unit; wherein, The second sending unit is used to send the first identification information and the second identification information corresponding to the first identification information to the USIM; wherein the first identification information includes the identification information of the APP, and the second identification information includes the identification information sent to the APP by the server corresponding to the APP; The second receiving unit is used to receive the matching result sent by the USIM; The second using unit is used to use the network slice corresponding to the first identification information when the matching result characterization passes.

15. A terminal device, characterized in that: The terminal device comprises: a second processor and a second memory; wherein, The second memory is used to store a computer program that can be run on the processor; The second processor is configured to execute the method according to any one of claims 8 to 11 when running the computer program.

16. A computer-readable storage medium, characterized in that: The storage medium stores computer program codes, which, when executed by a computer, execute the method described in any one of claims 1 to 7 or 8 to 11.

17. A computer program product comprising a computer program, characterized in that The computer program implements the method according to any one of claims 1-7 or 8-11 when executed by a processor.

Images