Private network access method and system and private network selection device

Abstract

The invention discloses a private network access method and system and a private network selection device. The method comprises the following steps: receiving a registration request from terminal equipment forwarded by an access and mobility management function module in a public network, the registration request carrying registration information of the terminal equipment; determining a private network identifier allocated to the terminal equipment according to the registration information and the slice configuration information; sending a de-registration instruction to the terminal device, the de-registration instruction carrying a private network identifier and a re-registration identifier, and the re-registration identifier being used for instructing the terminal device to initiate a re-registration request carrying the private network identifier to the base station, and the base station is used for sending the re-registration request to the private network access and mobility management function module indicated by the private network identifier. The technical problem that the 5G private network user cannot be efficiently and safely sent to the corresponding 5G private network at low cost due to the fact that the private network access method in the related technology is high in cost and does not meet the security requirement of the private network is solved.

Description

Technical Field

[0001] The present application relates to the field of communications, and in particular, to a private network access method, system and private network selection device. Background Art

[0002] In the related technologies, in order to distinguish 5G private network users under 5G shared base stations and send 5G private network users to the corresponding 5G private network, most of them adopt methods such as PLMN, slicing and redirection according to the private network to achieve 5G private network selection. However, most of these methods are costly and do not meet the security requirements of the private network. It is necessary for the access and mobility management function modules between the private network and the public network to open the N14 signaling interaction interface, etc. As a result, the related technologies cannot efficiently, safely and cost-effectively send 5G private network users to the corresponding 5G private network.

[0003] To address the above-mentioned problems, no effective solution has been proposed yet. Summary of the invention

[0004] The embodiments of the present application provide a private network access method, system and private network selection device to at least solve the technical problem that 5G private network users cannot be efficiently and securely sent to the corresponding 5G private network at a lower cost because the private network access method in the related technology is relatively high in cost and does not meet the security requirements of the private network.

[0005] According to one aspect of an embodiment of the present application, a private network access method is provided, including: receiving a registration request from a terminal device forwarded by an access and mobility management function module in a public network, wherein the registration request carries registration information of the terminal device; determining a private network identifier assigned to the terminal device based on the registration information and slice configuration information, wherein the private network identifier is used to indicate a private network access and mobility management function module in a target private network assigned to the terminal device; sending a deregistration instruction to the terminal device, wherein the deregistration instruction carries a private network identifier and a re-registration identifier, and the re-registration identifier is used to instruct the terminal device to initiate a re-registration request carrying the private network identifier to a base station, and the base station is used to send the re-registration request to the private network access and mobility management function module indicated by the private network identifier after receiving the re-registration request.

[0006] Optionally, determining the private network identifier assigned to the terminal device based on the registration information and slice configuration information includes: determining the priority and weight value of each private network access and mobility management function module in the target private network; determining the target private network access and mobility management function module from each private network access and mobility management function module based on the priority and weight value, and generating a private network identifier based on the target private network access and mobility management function module and the registration information, wherein the private network identifier carries identification information of the target private network access and mobility management function module.

[0007] Optionally, determining the target private network access and mobility management function module from each private network access and mobility management function module based on the priority and weight value includes: when there is only one private network access and mobility management function module with the highest priority, determining the module with the highest priority among the private network access and mobility management function modules as the target private network access and mobility management function module; when there are multiple private network access and mobility management function modules with the highest priority, determining the corresponding selection probability according to the weight of each private network access and mobility management function module with the highest priority, and determining the target private network access and mobility management function module from each private network access and mobility management function module with the highest priority according to the selection probability.

[0008] Optionally, the registration information includes at least one of the following: a user unique identifier, a security key, slice information signed by the user, and base station side information corresponding to the terminal device.

[0009] Optionally, the deregistration instruction also carries a slice mode update flag, wherein the slice mode update flag is used to instruct the terminal device to update the slice mode to an end-to-end network slice mode.

[0010] Optionally, the private network access method also includes: when the terminal device again initiates a registration request corresponding to the target private network, and the slicing mode of the terminal device is an end-to-end network slicing mode, the base station forwards the registration request to the private network access and mobility management functional module corresponding to the terminal device in the target private network based on the user subscription identifier of the terminal device.

[0011] Optionally, the private network access method also includes: when the terminal device again initiates a registration request corresponding to the target private network and the terminal device carries a private network identifier, the base station forwards the registration request to the private network access and mobility management function module corresponding to the terminal device in the target private network based on the private network identifier.

[0012] According to another aspect of an embodiment of the present application, a private network access method is also provided, which is applicable to a terminal device, including: sending a registration request to an access and mobility management function module in a public network, wherein the registration request carries registration information of the terminal device, and the access and mobility management function module is used to forward the registration request to a private network selection device in the private network; receiving a deregistration instruction sent by the private network selection device, wherein the deregistration instruction carries a private network identifier and a re-registration identifier, and the re-registration identifier is used to instruct the terminal device to re-initiate a re-registration request carrying the private network identifier, and the private network identifier is used to indicate the private network access and mobility management function module in the target private network allocated to the terminal device, and the private network identifier is determined by the private network selection device based on the registration information and the slice configuration information of the private network; sending a re-registration request to a base station based on the de-registration instruction, wherein the base station is used to send the re-registration request to the private network access and mobility management function module indicated by the private network identifier after receiving the re-registration request.

[0013] According to another aspect of an embodiment of the present application, a private network selection device is also provided, including: a private network identifier generation module, used to receive a registration request forwarded by an access and mobility management function module in a public network, and determine a private network identifier assigned to a terminal device based on the registration information and slice configuration information, wherein the registration request carries the registration information of the terminal device, and the private network identifier is used to indicate the private network access and mobility management function module in the target private network assigned to the terminal device; a deregistration migration module, used to send a deregistration instruction to the terminal device, wherein the deregistration instruction carries a private network identifier and a re-registration identifier, and the re-registration identifier is used to instruct the terminal device to initiate a re-registration request carrying the private network identifier to the base station, and the base station is used to send the re-registration request to the private network access and mobility management function module indicated by the private network identifier after receiving the re-registration request; a slice mode scheduling module, used to send slice information and terminal slice mode parameters of the target private network to the terminal device based on the registration request, wherein the slice information and the terminal slice mode parameters are used to instruct the terminal device to reconfigure slice identification information.

[0014] In an embodiment of the present application, a registration request from a terminal device forwarded by an access and mobility management function module in a public network is received, wherein the registration request carries registration information of the terminal device; a private network identifier assigned to the terminal device is determined based on the registration information and slice configuration information, wherein the private network identifier is used to indicate a private network access and mobility management function module in a target private network assigned to the terminal device; a deregistration instruction is sent to the terminal device, wherein the deregistration instruction carries a private network identifier and a re-registration identifier, and the re-registration identifier is used to instruct the terminal device to initiate a re-registration request carrying the private network identifier to the base station, and the base station is used to send the re-registration request to the private network access and mobility management function module indicated by the private network identifier after receiving the re-registration request. In this way, by allocating a private network identifier for the terminal device to indicate the private network access and mobility management function module in the target private network allocated to the terminal device, and allowing the base station to send the re-registration request of the terminal device to the corresponding private network access and mobility management function module according to the private network identifier, the purpose of sending the 5G private network user to the corresponding 5G private network is achieved without the need for signaling communication between the public network and the access and mobility management function modules in the private network, thereby achieving the technical effect of efficiently, securely and low-costly sending the 5G private network users to the corresponding 5G private network, and further solving the technical problem that the private network access method in the related technology is high in cost and does not meet the security requirements of the private network, resulting in the inability to efficiently and securely send the 5G private network users to the corresponding 5G private network at a lower cost. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0016] Figure 1 It is a schematic diagram of a 5G commercial network provided according to the prior art;

[0017] Figure 2 It is a flowchart of a private network access process provided according to the prior art;

[0018] Figure 3 It is a structural diagram of a private network access system provided according to an embodiment of the present application;

[0019] Figure 4 It is a flowchart of a private network access method provided according to an embodiment of the present application;

[0020] Figure 5 It is a flowchart of another private network access method provided according to an embodiment of the present application;

[0021] Figure 6It is a flowchart of a private network access process provided according to an embodiment of the present application;

[0022] Figure 7 It is a structural schematic diagram of a private network selection device provided according to an embodiment of the present application;

[0023] Figure 8 It is a schematic diagram of the interaction process between a private network selection device and other devices provided according to an embodiment of the present application. DETAILED DESCRIPTION

[0024] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present application.

[0025] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0026] In order to better understand the embodiments of the present application, the technical terms involved in the embodiments of the present application are explained as follows:

[0027] AMF (Access and Mobility Management Function): It is the access node of the 5G core network and is responsible for user access management and mobility management, such as user identity authentication, location update, and access security.

[0028] NSSAI (Network Slice-Specific Identity): The 5G core network and user equipment are used to identify specific network slices. Its main function is to allow user equipment to select the network slice it needs and inform the network to create an appropriate connection.

[0029] 5G-GUTI (5G Globally Unique Temporary Identifier): A temporary and clear identifier that is used to identify and manage the location and connection of mobile devices in the network in order not to disclose the user's permanent identity. Its field contains the GUAMI that generally uniquely identifies an AMF in the actual network. It can be converted into identification values ​​of different application attributes by the user equipment according to the 3GPP standard specifications, and the result is still to identify an AMF.

[0030] GUAMI (Globally Unique AMF Identifier): used to identify and manage AMF entities in 5G networks, providing global uniqueness, AMF positioning, management and control, and network roaming functions.

[0031] Currently in 5G networks, Figure 1 As shown in the figure, the toC network is for public services and is referred to as the public network, while the toB network is for industry users and is referred to as the private network. The 5G toB network architecture is similar to the toC network. It has a variety of customized deployment methods based on different business scenario requirements, deployment scales, and on-site environments. Among them, industry users with wide-area access requirements and high requirements for network security usually use the operator's 5G base station sharing + 5G dedicated core network to implement enterprise-exclusive 5G private networks.

[0032] In order to realize how to distinguish 5G private network users and send them to the 5G private network under 5G shared base stations, related technologies provide methods for realizing 5G private network selection based on the PLMN, slice and redirection of the private network. However, these methods have the following problems:

[0033] Due to limited PLMN resources and regulatory restrictions, it is currently impossible to allocate an independent PLMN to each private network customer; the slicing method requires all terminals to be sliced ​​and customized according to enterprise standards and operator standards at the same time. The customization cost is very high, and a large number of existing terminals may not be able to be transformed.

[0034] If we adopt Figure 2 The existing redirection implementation method in 3GPP shown in the figure requires the private network and the public network AMF to open the N14 signaling interaction interface. However, due to the high security requirements or deployment conditions of the enterprise, there can be no signaling interaction between the private network and the public network AMF, and this method is not available.

[0035] To summarize, it is currently impossible to achieve the coexistence of enterprise 5G wide-area access and the high security requirements of private network architecture, and it is impossible for general private network terminals to choose private network 5GC access.

[0036] In order to solve this problem, a relevant solution is provided in the embodiments of the present application, which is described in detail below.

[0037] According to an embodiment of the present application, a method embodiment of a private network access method is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0038] The method embodiments provided in the embodiments of the present application can be used in Figure 3 The private network access system shown in the figure is executed. Figure 3 It can be seen that the system includes a terminal device 30, a public network 32, and a private network selection device 34, wherein the private network selection device 34 is used to receive a registration request from the terminal device 30 forwarded by the access and mobility management function module in the public network 32, wherein the registration request carries the registration information of the terminal device 30; based on the registration information and the slice configuration information, determine the private network identifier assigned to the terminal device 30, wherein the private network identifier is used to indicate the private network access and mobility management function module in the target private network assigned to the terminal device 30; send a deregistration instruction to the terminal device 30, wherein the deregistration instruction carries the private network identifier and the re-registration identifier, the re-registration identifier is used to instruct the terminal device 30 to initiate a re-registration request carrying the private network identifier to the base station, and the base station is used to send the re-registration request to the private network access and mobility management function module indicated by the private network identifier after receiving the re-registration request.

[0039] In some embodiments of the present application, the above-mentioned private network identifier refers to the 5G-GUTI composed of the private network AMF GUAMI selected by the private network selection device for the terminal device.

[0040] The technical solutions of the embodiments of the present application can be applied to various communication systems, for example: Global System of Mobile communication (GSM) system, Code Division Multiple Access (CDMA) system, Wideband Code Division Multiple Access (WCDMA) system, General Packet Radio Service (GPRS), Long Term Evolution (LTE) system, LTE Frequency Division Duplex (FDD) system, LTE Time Division Duplex (TDD), Universal Mobile Telecommunication System (UMTS), Worldwide Interoperability for Microwave Access (WiMAX) communication system or 5G system, etc.

[0041] Optionally, the 5G system or 5G network may also be referred to as a New Radio (NR) system or NR network.

[0042] In the above operating environment, the embodiment of the present application provides a private network access method, which is applicable to a private network selection device, such as Figure 4 As shown, the method comprises the following steps:

[0043] Step S402, receiving a registration request from a terminal device forwarded by an access and mobility management function module in a public network, wherein the registration request carries registration information of the terminal device;

[0044] In the technical solution provided in step S402, the registration information includes at least one of the following: a user unique identifier, a security key, slice information signed by the user, and base station side information corresponding to the terminal device.

[0045] Optionally, when the public network AMF redirects the private network user to the private network selection device according to the 4GPP specification based on the slice information of the private network user in the terminal device, it will send a registration request carrying user registration related content such as the user's unique identification, security key, user-contracted slice information, and the base station side information used to the private network selection device. The private network selection device is a newly added network selection device in the private network provided in the embodiment of the present application, which is used when the terminal device needs to register to the private network. Figure 4The method shown guides the terminal device to successfully register to the private network.

[0046] Step S404: determining a private network identifier allocated to the terminal device according to the registration information and the slice configuration information, wherein the private network identifier is used to indicate a private network access and mobility management function module in a target private network allocated to the terminal device;

[0047] Specifically, the private network selection device will select the appropriate private network AMF GUAMI for the private network user to build 5G-GUTI, that is, the private network identifier, based on the registration information and the relevant configuration information of each slice in the private network corresponding to the device. The relevant configuration information of each slice will include one or more private network AMF GUAMIs corresponding to each slice, and each private network AMF has its preset weight value and priority. The priority and weight value of each private network AMF are used to determine the target private network AMF corresponding to the terminal device.

[0048] In the technical solution provided in step S404, determining the private network identifier assigned to the terminal device based on the registration information and slice configuration information includes the following steps: determining the priority and weight value of each private network access and mobility management function module in the target private network; determining the target private network access and mobility management function module from each private network access and mobility management function module based on the priority and weight value, and generating a private network identifier based on the target private network access and mobility management function module and the registration information, wherein the private network identifier carries the identification information of the target private network access and mobility management function module.

[0049] As an optional implementation method, determining the target private network access and mobility management function module from each private network access and mobility management function module based on the priority and weight value includes: when there is only one private network access and mobility management function module with the highest priority, determining the module with the highest priority among the private network access and mobility management function modules as the target private network access and mobility management function module; when there are multiple private network access and mobility management function modules with the highest priority, determining the corresponding selection probability according to the weight of each private network access and mobility management function module with the highest priority, and determining the target private network access and mobility management function module from each private network access and mobility management function module with the highest priority according to the selection probability.

[0050] Specifically, when determining the target private network AMF corresponding to the terminal device, the AMF with the highest priority can be first determined as the target private network AMF according to the preset priority. When there are multiple AMFs with the same highest priority, the target private network AMF can be determined according to the weight value of each private network AMF. The weight value is to select the target private network AMF with slice as the granularity at the same priority, so that when there are multiple GUAMIs and multiple terminal devices need to access the private network, different GUAMIs are proportionally sent to different UEs according to the weight values ​​of each private network AMF in the same priority, so as to realize load sharing and Pool disaster recovery of multiple AMFs in the private network. Setting corresponding priorities for different private network AMFs can realize active-standby disaster recovery and rapid load adjustment of multiple AMFs in the private network.

[0051] In some embodiments of the present application, the deregistration instruction also carries a slice mode update flag, wherein the slice mode update flag is used to instruct the terminal device to update the slice mode to an end-to-end network slice mode.

[0052] Step S406, sending a deregistration instruction to the terminal device, wherein the deregistration instruction carries a private network identifier and a re-registration identifier, the re-registration identifier is used to instruct the terminal device to initiate a re-registration request carrying the private network identifier to the base station, and the base station is used to send the re-registration request to the private network access and mobility management function module indicated by the private network identifier after receiving the re-registration request.

[0053] In the technical solution provided in step S406, the deregistration instruction (Registration Accept) sent by the private network selection device to the terminal device carries the 5G-GUTI related to the private network slice AMF (the GUAMI is the GUAMI of the selected private network AMF), the private network slice ID (Allowed NSSAI, Configured NSSAI) and the terminal's slice mode are updated to the end-to-end network slicing mode (Mode A) identifier (if the chip in the terminal device supports slicing Mode A, it can store and signal the private network slicing information actively), and then the module actively triggers the Deregistration Request, carrying the identifier of re-registration required.

[0054] The terminal device will carry the amf-Identifier of the private network AMF (derived from 5G-GUTI with private network AMFGUAMI) in the RRC Setup Complete between the base station and the base station based on the above re-registration requirements and 4GPP standard behavior during the process of re-requesting 5G registration, so that the base station will send the registration request of the private network terminal directly to the target private network AMF corresponding to the terminal device.

[0055] As an optional implementation, when the terminal device again initiates a registration request corresponding to the target private network and the slicing mode of the terminal device is an end-to-end network slicing mode, the base station forwards the registration request to the private network access and mobility management functional module corresponding to the terminal device in the target private network based on the user subscription identifier of the terminal device.

[0056] In some embodiments of the present application, when the terminal device again initiates a registration request corresponding to the target private network and the terminal device carries a private network identifier, the base station forwards the registration request to the private network access and mobility management functional module corresponding to the terminal device in the target private network based on the private network identifier.

[0057] Specifically, when the terminal device re-registers with the 5G network for some reason during the subsequent use of services, if the terminal device retains the private network 5G-GUTI used last time, the base station can send the registration request of the terminal device directly to the private network AMF indicated by the private network 5G-GUTI according to the private network 5G-GUTI. If the terminal device does not retain the private network 5G-GUTI, but the terminal device supports slice Mode A, the base station can re-register the terminal device based on the user subscription identifier (Subscription Permanent Unique Identifier, SUPI) or the encrypted user subscription identifier (Subscription Identifier for Communications Identifier, SUCI), and aggregate the private network slices, so that the base station can send the registration request of the terminal device directly to the target private network AMF corresponding to the terminal device according to the slice information.

[0058] By adopting a method of receiving a registration request from a terminal device forwarded by an access and mobility management function module in a public network, wherein the registration request carries registration information of the terminal device; determining a private network identifier allocated to the terminal device based on the registration information and slice configuration information, wherein the private network identifier is used to indicate a private network access and mobility management function module in a target private network allocated to the terminal device; sending a deregistration instruction to the terminal device, wherein the deregistration instruction carries a private network identifier and a re-registration identifier, wherein the re-registration identifier is used to instruct the terminal device to initiate a re-registration request carrying the private network identifier to a base station, and the base station is used to send the re-registration request to the private network access and mobility management function module indicated by the private network identifier after receiving the re-registration request. In this way, by allocating a private network identifier for the terminal device to indicate the private network access and mobility management function module in the target private network allocated to the terminal device, and allowing the base station to send the re-registration request of the terminal device to the corresponding private network access and mobility management function module according to the private network identifier, the purpose of sending the 5G private network user to the corresponding 5G private network is achieved without the need for signaling communication between the public network and the access and mobility management function modules in the private network, thereby achieving the technical effect of efficiently, securely and low-costly sending the 5G private network users to the corresponding 5G private network, and further solving the technical problem that the private network access method in the related technology is high in cost and does not meet the security requirements of the private network, resulting in the inability to efficiently and securely send the 5G private network users to the corresponding 5G private network at a lower cost.

[0059] In addition, the private network access method provided in the embodiment of the present application realizes the correct network selection of the private network terminal through the 5G private network selection device. And the signaling process of the private network selection device for external network elements and terminals complies with the 3GPP specification, does not require the adaptation of surrounding network elements, and has strong network capability compatibility. In the embodiment of the present application, by optimizing the configuration logic of the private network access process, the complexity of configuration management in long-term operation is avoided, and it is convenient for multiple private networks to join, exit and adapt to the local networking adjustment of the private network. And in the private network access method provided in the embodiment of the present application, the network architecture that does not require interface interaction between the public network core network and the private network core network not only brings better protection to the security of both parties, but also facilitates the new deployment of functions, greatly improving the flexibility and applicability of 5G private network deployment scenarios in all aspects.

[0060] The private network access method provided in the embodiment of the present application also optimizes the existing signaling interaction process. Specifically, when the private network selection device completes the user registration process, it reduces the signaling interaction with the UDM, and only has interfaces with the public network AMF and base station / UE. The service signaling in the network is controllable, and there is no risk of signaling impact on either the public network or the private network.

[0061] The private network access method provided in the embodiment of the present application also has the advantage of strong terminal compatibility, and can be adapted to all terminals that comply with the 3GPP specification. If the terminal does not support slice storage and reporting, it is generally necessary to go online to the private network through the network selection module again after the terminal restarts and loses the GUTI; if the terminal supports slice Mode A, it is generally necessary to go online to the private network through the network selection module again only after the terminal system is reset. The terminal has good live retention in the private network, which can better meet the requirements of private network enterprises for business security and confidentiality.

[0062] The present application embodiment provides another private network access method. Figure 5 is a flow chart of the method. Figure 5 As can be seen, the method includes:

[0063] Step S502, sending a registration request to the access and mobility management function module in the public network, wherein the registration request carries the registration information of the terminal device, and the access and mobility management function module is used to forward the registration request to the private network selection device in the private network;

[0064] Step S504, receiving a deregistration instruction sent by the private network selection device, wherein the deregistration instruction carries a private network identifier and a re-registration identifier, the re-registration identifier is used to instruct the terminal device to initiate a re-registration request carrying the private network identifier again, the private network identifier is used to indicate a private network access and mobility management function module in a target private network allocated to the terminal device, and the private network identifier is determined by the private network selection device according to the registration information and the slice configuration information of the private network;

[0065] Step S506: Send a re-registration request to the base station according to the de-registration instruction, wherein the base station is used to send the re-registration request to the private network access and mobility management function module indicated by the private network identifier after receiving the re-registration request.

[0066] The present application also provides a method Figure 6 The flowchart of the private network access process shown in FIG. Figure 6It can be seen that the private network access method provided in the embodiment of the present application will add a private network selection module (that is, a private network selection device) in the 6G core network to comply with the signaling type and parameter field of the 3GPP standard, so as to redirect the terminal device to the expected 6G core network. The public network wireless function module (Network Radio Function, NRF) redirects the user's registration request to the private network selection device. After the module completes the N1 / N2 handover of the user base station and the terminal, it can send the unique identifier of the target private network AMF, private network slicing information and terminal slicing mode change information to the terminal in the process of completing the user registration based only on local parameters without interacting with the public network unified device management module (Unified Device Management, UDM).

[0067] After completing the registration process of the terminal device on the private network selection device, the private network selection device will immediately initiate a re-registration process for the terminal device and carry an identification requesting re-registration. After receiving the re-registration request signaling, the user terminal leaves the network of the private network selection device. When re-registering, the base station directly sends the registration request of the terminal device to the private network AMF based on the field with the private network AMF GUAMI information, so that the terminal device can access the corresponding enterprise private network.

[0068] During subsequent use, if the terminal device initiates re-registration again, the base station will also send the registration request of the terminal device to the target private network AMF based on the AMFGUAMI information or slice information in the registration request, so that the terminal device can access the corresponding enterprise private network.

[0069] The embodiment of the present application provides a private network selection device, Figure 7 is a schematic diagram of the structure of the device. Figure 7 It can be seen that the device includes: a private network identifier generation module 70, which is used to receive a registration request forwarded by an access and mobility management function module in a public network, and determine the private network identifier assigned to the terminal device based on the registration information and the slice configuration information, wherein the registration request carries the registration information of the terminal device, and the private network identifier is used to indicate the private network access and mobility management function module in the target private network assigned to the terminal device; a deregistration migration module 72, which is used to send a deregistration instruction to the terminal device, wherein the deregistration instruction carries a private network identifier and a re-registration identifier, and the re-registration identifier is used to instruct the terminal device to initiate a re-registration request carrying the private network identifier to the base station, and the base station is used to send the re-registration request to the private network access and mobility management function module indicated by the private network identifier after receiving the re-registration request; a slice mode scheduling module 74, which is used to send the slice information and terminal slice mode parameters of the target private network to the terminal device based on the registration request, wherein the slice information and the terminal slice mode parameters are used to instruct the terminal device to reconfigure the slice identification information.

[0070] In some embodiments of the present application, Figure 8 As shown, after receiving the redirection message from the public network AMF, the private network identifier generation module 70 allocates the GUTI of the enterprise private network (including the GUAMI of the private network AMF) to the registered terminal device according to the need for the subsequent terminal device to initiate a re-registration message that needs to be routed to the private network AMF. The base station will then directly route to the private network AMF based on the GUTI sent by the terminal device. In addition, the private network identifier generation module 70 will also allocate the terminal device GUTI according to the terminal device slice identifier, and send the UE's GUTI through the weight value and priority configuration to achieve active-standby disaster recovery and rapid load adjustment of multiple AMFs in the private network, thereby solving the problem of complete isolation of the private network and public network AMF.

[0071] The deregistration migration module 72 is used to perform logical optimization and processing on the signaling process. After the terminal device is registered with the private network selection module, the deregistration migration module 72 actively triggers the terminal device to deregister (and carry the re-registration identifier) ​​according to the characteristic strategies of the terminal device behavior, signaling interaction, business needs, etc., which can not only realize the on-demand rapid migration of private network terminal devices, but also ensure the integrity of various types of signaling processes of the terminal device.

[0072] The slice mode scheduling module 74 receives the user registration message of the terminal device, sends the slice information of the private network user and the terminal slice mode parameters, and requires the terminal device to reconfigure the slice ID according to the instruction parameters modified by the slice mode. The subsequent terminal can also reset the slice ID according to the slice mode, and then the base station directly sends the slice ID to the private network AMF, thereby solving the problem of complete isolation between the private network and the public network AMF.

[0073] It can be seen that the private network selection device and private network access method provided by the embodiment of the present application are suitable for industries with high requirements for confidentiality of data and terminal usage and wide terminal access coverage, such as core livelihood enterprises, which require both the use of new 5G technologies to improve business and production efficiency, and the private network requires a high degree of physical isolation. The method provided by the embodiment of the present application can solve the problem of correctly selecting private network access when using public 5G base stations for network terminals, ensure that private network terminals can be quickly put into service without manual intervention, provide stable business guarantees for customer enterprises, and ensure that the operation quality of enterprise terminals is not affected.

[0074] It should be noted that the various modules in the above-mentioned private network selection device can be program modules (for example, a set of program instructions to implement a certain specific function) or hardware modules. For the latter, it can be expressed in the following forms, but is not limited to this: the expression form of each of the above-mentioned modules is a processor, or the functions of each of the above-mentioned modules are implemented by a processor.

[0075] According to an embodiment of the present application, a non-volatile storage medium is also provided, in which a program is stored, wherein when the program is running, the device where the non-volatile storage medium is located is controlled to execute the following private network access method: receiving a registration request from a terminal device forwarded by an access and mobility management function module in a public network, wherein the registration request carries registration information of the terminal device; determining a private network identifier assigned to the terminal device based on the registration information and slice configuration information, wherein the private network identifier is used to indicate a private network access and mobility management function module in a target private network assigned to the terminal device; sending a deregistration instruction to the terminal device, wherein the deregistration instruction carries a private network identifier and a re-registration identifier, and the re-registration identifier is used to instruct the terminal device to initiate a re-registration request carrying the private network identifier to the base station, and the base station is used to send the re-registration request to the private network access and mobility management function module indicated by the private network identifier after receiving the re-registration request.

[0076] In some embodiments of the present application, the above-mentioned program can also control the device where the non-volatile storage medium is located to execute the following private network access method when running: sending a registration request to the access and mobility management function module in the public network, wherein the registration request carries the registration information of the terminal device, and the access and mobility management function module is used to forward the registration request to the private network selection device in the private network; receiving a deregistration instruction sent by the private network selection device, wherein the deregistration instruction carries a private network identifier and a re-registration identifier, and the re-registration identifier is used to instruct the terminal device to re-initiate a re-registration request carrying the private network identifier, and the private network identifier is used to indicate the private network access and mobility management function module in the target private network allocated to the terminal device, and the private network identifier is determined by the private network selection device based on the registration information and the slice configuration information of the private network; sending a re-registration request to the base station based on the de-registration instruction, wherein the base station is used to send the re-registration request to the private network access and mobility management function module indicated by the private network identifier after receiving the re-registration request.

[0077] According to an embodiment of the present application, a computer program product is also provided, including a computer program, which implements the following private network access method when executed by a processor: receiving a registration request from a terminal device forwarded by an access and mobility management function module in a public network, wherein the registration request carries registration information of the terminal device; determining a private network identifier assigned to the terminal device based on the registration information and slice configuration information, wherein the private network identifier is used to indicate a private network access and mobility management function module in a target private network assigned to the terminal device; sending a deregistration instruction to the terminal device, wherein the deregistration instruction carries a private network identifier and a re-registration identifier, and the re-registration identifier is used to instruct the terminal device to initiate a re-registration request carrying the private network identifier to the base station, and the base station is used to send the re-registration request to the private network access and mobility management function module indicated by the private network identifier after receiving the re-registration request.

[0078] In some embodiments of the present application, the computer program can also implement the following private network access method when executed by the processor: sending a registration request to the access and mobility management function module in the public network, wherein the registration request carries the registration information of the terminal device, and the access and mobility management function module is used to forward the registration request to the private network selection device in the private network; receiving a deregistration instruction sent by the private network selection device, wherein the deregistration instruction carries a private network identifier and a re-registration identifier, and the re-registration identifier is used to instruct the terminal device to re-initiate a re-registration request carrying the private network identifier, and the private network identifier is used to indicate the private network access and mobility management function module in the target private network allocated to the terminal device, and the private network identifier is determined by the private network selection device based on the registration information and the slice configuration information of the private network; sending a re-registration request to the base station based on the de-registration instruction, wherein the base station is used to send the re-registration request to the private network access and mobility management function module indicated by the private network identifier after receiving the re-registration request.

[0079] In the above embodiments of the present application, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, please refer to the relevant description of other embodiments.

[0080] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are only schematic. For example, the division of the units can be a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms.

[0081] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple units. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0082] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0083] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the relevant technology or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions to enable a computer device (which can be a personal computer, server or network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, RandomAccess Memory), mobile hard disk, disk or CD-ROM and other media that can store program codes.

[0084] The above is only a preferred implementation of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present application. These improvements and modifications should also be regarded as the scope of protection of the present application.

Claims

1. A private network access method, characterized in that: include: Receiving a registration request from a terminal device forwarded by an access and mobility management function module in a public network, wherein the registration request carries registration information of the terminal device; Determine, according to the registration information and the slice configuration information, a private network identifier assigned to the terminal device, wherein the private network identifier is used to indicate a private network access and mobility management function module in a target private network assigned to the terminal device; A deregistration instruction is sent to the terminal device, wherein the deregistration instruction carries the private network identifier and the re-registration identifier, the re-registration identifier is used to instruct the terminal device to initiate a re-registration request carrying the private network identifier to the base station, and the base station is used to send the re-registration request to the private network access and mobility management function module indicated by the private network identifier after receiving the re-registration request.

2. The private network access method according to claim 1, characterized in that: Determining, based on the registration information and the slice configuration information, a private network identifier allocated to the terminal device includes: Determine the priority and weight value of each private network access and mobility management function module in the target private network; The target private network access and mobility management function module is determined from each private network access and mobility management function module according to the priority and weight value, and the private network identifier is generated according to the target private network access and mobility management function module and the registration information, wherein the private network identifier carries the identification information of the target private network access and mobility management function module.

3. The private network access method according to claim 2, characterized in that: Determining the target private network access and mobility management function module from the private network access and mobility management function modules according to the priority and weight value includes: In the case where there is only one private network access and mobility management function module with the highest priority, determining the module with the highest priority among the private network access and mobility management function modules as the target private network access and mobility management function module; In the case where there are multiple private network access and mobility management function modules with the highest priority, the corresponding selection probability is determined according to the weight of each private network access and mobility management function module with the highest priority, and the target private network access and mobility management function module is determined from the private network access and mobility management function modules with the highest priority according to the selection probability.

4. The private network access method according to claim 1, characterized in that: The registration information includes at least one of the following: a user unique identifier, a security key, slice information signed by the user, and base station side information corresponding to the terminal device.

5. The private network access method according to claim 1, characterized in that: The deregistration instruction also carries a slice mode update flag, wherein the slice mode update flag is used to instruct the terminal device to update the slice mode to an end-to-end network slice mode.

6. The private network access method according to claim 5, characterized in that: The private network access method further includes: When the terminal device again initiates a registration request corresponding to the target private network and the slicing mode of the terminal device is the end-to-end network slicing mode, the base station forwards the registration request to the private network access and mobility management functional module corresponding to the terminal device in the target private network based on the user subscription identifier of the terminal device.

7. The private network access method according to claim 1, characterized in that: The private network access method further includes: When the terminal device again initiates a registration request corresponding to the target private network and the terminal device carries the private network identifier, the base station forwards the registration request to the private network access and mobility management function module corresponding to the terminal device in the target private network based on the private network identifier.

8. A private network access method, applicable to a terminal device, characterized in that: include: Sending a registration request to an access and mobility management function module in a public network, wherein the registration request carries registration information of the terminal device, and the access and mobility management function module is used to forward the registration request to a private network selection device in a private network; Receive a deregistration instruction sent by the private network selection device, wherein the deregistration instruction carries a private network identifier and a re-registration identifier, the re-registration identifier is used to instruct the terminal device to re-initiate a re-registration request carrying the private network identifier, the private network identifier is used to indicate a private network access and mobility management function module in a target private network allocated to the terminal device, and the private network identifier is determined by the private network selection device according to the registration information and the slice configuration information of the private network; The re-registration request is sent to the base station according to the de-registration instruction, wherein the base station is used to send the re-registration request to the private network access and mobility management function module indicated by the private network identifier after receiving the re-registration request.

9. A private network selection device, characterized in that: include: A private network identifier generation module, used to receive a registration request forwarded by an access and mobility management function module in a public network, and determine a private network identifier allocated to a terminal device based on the registration information and slice configuration information, wherein the registration request carries the registration information of the terminal device, and the private network identifier is used to indicate a private network access and mobility management function module in a target private network allocated to the terminal device; a deregistration migration module, configured to send a deregistration instruction to the terminal device, wherein the deregistration instruction carries the private network identifier and the reregistration identifier, the reregistration identifier is used to instruct the terminal device to initiate a reregistration request carrying the private network identifier to the base station, and the base station is configured to send the reregistration request to the private network access and mobility management function module indicated by the private network identifier after receiving the reregistration request; A slice mode scheduling module is used to send the slice information and terminal slice mode parameters of the target private network to the terminal device according to the registration request, wherein the slice information and the terminal slice mode parameters are used to instruct the terminal device to reconfigure slice identification information.

10. A private network access system, characterized in that: It includes terminal equipment, public network, private network selection device, among which, The private network selection device is used to receive a registration request from the terminal device forwarded by the access and mobility management function module in the public network, wherein the registration request carries the registration information of the terminal device; determine the private network identifier assigned to the terminal device based on the registration information and slice configuration information, wherein the private network identifier is used to indicate the private network access and mobility management function module in the target private network assigned to the terminal device; send a deregistration instruction to the terminal device, wherein the deregistration instruction carries the private network identifier and a re-registration identifier, and the re-registration identifier is used to instruct the terminal device to initiate a re-registration request carrying the private network identifier to the base station, and the base station is used to send the re-registration request to the private network access and mobility management function module indicated by the private network identifier after receiving the re-registration request.

Images