Communication method and device

Abstract

The embodiment of the invention provides a communication method and device. Whether first network equipment allows NSSAI requested by terminal equipment or not can be determined. The method comprises: a terminal device sending a first registration request message to a first network device, the first registration request message comprising requested network slice auxiliary information NSSAI, the requested NSSAI comprising N single network slice auxiliary information S-NSSAI, N being a positive integer greater than 8; and the terminal equipment receives a first registration acceptance message from the first network equipment, wherein the first registration acceptance message indicates whether the first network equipment allows the requested NSSAI or not. According to the method provided by the embodiment of the invention, the terminal equipment can know whether the first network equipment allows the requested NSSAI (greater than 8 S-NSSAIs) information by sending the registration request message once, so that the resource waste caused by frequently sending the first registration request message to the first network equipment by the terminal equipment is avoided.

Description

Technical Field

[0001] The embodiments of the present application relate to the field of communications, and more specifically, to a communication method and device. Background Art

[0002] Network slicing technology provides isolated network environments for different application scenarios by creating virtual independent logical networks on the same network infrastructure, allowing different application scenarios to customize network functions and features according to their own needs, thereby effectively guaranteeing the needs of different businesses.

[0003] Currently, a terminal device can request up to 8 pieces of network slice selection assistance information (NASSI) through a registration request message, while the configuration information sent by the network side to the terminal device configures a maximum of 16 NASSIs, which may result in the terminal device being unable to obtain whether the network device allows the requested NSSAI through a registration request message. Summary of the invention

[0004] The embodiments of the present application provide a communication method and apparatus, which can determine whether a first network device allows the NSSAI requested by a terminal device.

[0005] In order to achieve the above objectives, this application adopts the following technical solutions:

[0006] In a first aspect, a communication method is provided, which is applied to a terminal device and can be executed by the terminal device, or by a component of the terminal device, such as a processor, a chip, or a chip system of the terminal device, or by a logic module or software that can implement all or part of the functions of the terminal device. Taking the method being executed by a terminal device as an example, the method includes: the terminal device sends a first registration request message to a first network device, the first registration request message includes requested network slice auxiliary information NSSAI, the requested NSSAI includes N single network slice auxiliary information S-NSSAI, N ​​is a positive integer greater than 8; the terminal device receives a first registration acceptance message from the first network device, the first registration acceptance message indicates whether the first network device allows the requested NSSAI.

[0007] In the communication method provided by the embodiment of the present application, the S-NSSAI included in the Requested NSSAI indicated by the first registration request message is more than 8, and the first registration acceptance message received by the terminal device indicates whether the first network device allows the requested NSSAI. In this way, the terminal device can obtain information on whether the first network device allows the requested NSSAI (greater than 8 S-NSSAI) by sending a registration request message once, thereby avoiding the waste of resources caused by the terminal device frequently sending the first registration request message to the first network device.

[0008] In a second aspect, a communication method is provided, which is applied to a first network device, and can be executed by the first network device, or by a component of the first network device, such as a processor, a chip, or a chip system of the first network device, or by a logic module or software that can implement all or part of the functions of the first network device. Taking the method being executed by the first network device as an example, the method includes: the first network device receives a first registration request message from a terminal device, the first registration request message includes a requested NSSAI, the requested NSSAI includes N S-NSSAIs, and N is a positive integer greater than 8; the first network device sends a first registration acceptance message to the terminal device, and the first registration acceptance message indicates whether the first network device allows the requested NSSAI.

[0009] In the communication method provided by the embodiment of the present application, the S-NSSAI included in the Requested NSSAI indicated by the first registration request message is more than 8, and the first registration acceptance message received by the terminal device indicates whether the first network device allows the requested NSSAI. In this way, the terminal device can obtain information on whether the first network device allows the requested NSSAI (greater than 8 S-NSSAI) by sending a registration request message once, thereby avoiding the waste of resources caused by the terminal device frequently sending the first registration request message to the first network device.

[0010] Based on the first aspect or the second aspect, for the first registration request message:

[0011] In a possible implementation, the first registration request message includes a first slice information element, and the first slice information element is used to carry the requested NSSAI. Exemplarily, the first slice information element is a new slice information element obtained by extending the existing slice information element used to carry the requested NSSAI. The existing slice information element used to carry the requested NSSAI supports carrying up to 8 requested S-NSSAIs, and the first slice information element supports carrying more than 8 requested S-NSSAIs. By extending the existing slice information element, the protocol is slightly modified.

[0012] In another possible implementation, the first registration request message includes a second slice information element and a third slice information element, and the second slice information element and the third slice information element are used to carry the requested NSSAI, wherein the second slice information element is used to carry the 8 S-NSSAIs included in the requested NSSAI, and the third slice information element is used to carry the (N-8) S-NSSAIs included in the requested NSSAI. Exemplarily, the second slice information element is an existing slice information element for carrying the requested NSSAI, and the existing slice information element for carrying the requested NSSAI supports carrying up to 8 requested S-NSSAIs, and the third slice information element is a newly added slice information element for carrying the requested NSSAI. The specifications of the third slice information element can be the same as those of the second slice information element, that is, the specifications of the existing slice information element can be reused.

[0013] Based on the first aspect or the second aspect, for the first registration acceptance message:

[0014] In one possible implementation, the first registration acceptance message includes a fourth slice allowance information element, the fourth slice allowance information element indicates the S-NSSAI allowed by the first network device among the N requested S-NSSAIs, and the fourth slice allowance information element is used to carry M S-NSSAIs allowed by the first network device, where M is a positive integer greater than 8. Exemplarily, the fourth slice allowance information element is a new slice information element obtained by extending an existing slice information element used to carry allowed S-NSSAIs, the existing slice information element supports carrying up to 8 Allowed S-NSSAIs, and the fourth slice allowance information element supports carrying M (greater than 8) Allowed S-NSSAIs. By extending the existing slice information element, the protocol is slightly modified.

[0015] In another possible implementation, the first registration acceptance message includes a fifth slice allowance information element and a sixth slice allowance information element, and the fifth slice allowance information element and the sixth slice allowance information element are used to indicate the S-NSSAI allowed by the first network device among the requested N S-NSSAIs, wherein the fifth slice allowance information element is used to carry 8 S-NSSAIs allowed by the first network device, and the sixth slice allowance information element is used to carry M-8 S-NSSAIs allowed by the first network device, where M is a positive integer greater than 8. Exemplarily, the fifth slice allowance information element is an existing slice information element for carrying allowed S-NSSAIs, and the existing slice information element supports carrying up to 8 allowed S-NSSAIs, and the sixth slice information element is a newly added slice information element for carrying allowed S-NSSAIs. The specifications of the sixth slice allowance information element may be the same as those of the fifth slice allowance information element, that is, the specifications of the existing slice information element may be reused.

[0016] In another possible implementation, the first registration acceptance message includes a fourth slice rejection information element, the fourth slice rejection information element indicates the S-NSSAI not allowed by the first network device among the N requested S-NSSAIs, and the fourth slice rejection information element is used to carry K S-NSSAI not allowed by the first network device, where K is a positive integer greater than 8. The fourth slice rejection information element is a new slice information element obtained by extending the existing slice information element, the existing slice information element supports carrying up to 8 Rejected S-NSSAIs, and the fourth slice rejection information element supports carrying X (greater than 8) Rejected S-NSSAIs. By extending the existing slice information element, the protocol is slightly modified.

[0017] In another possible implementation, the first registration acceptance message includes a fifth slice rejection information element and a sixth slice rejection information element, and the fifth slice rejection information element and the sixth slice rejection information element are used to indicate the S-NSSAI that is not allowed by the first network device among the N requested S-NSSAIs, wherein the fifth slice rejection information element is used to carry 8 S-NSSAIs that are not allowed by the first network device, and the sixth slice rejection information element is used to carry K-8 S-NSSAIs that are not allowed by the first network device, and X is a positive integer greater than 8. Exemplarily, the fifth slice rejection information element is an existing slice information element for carrying the disallowed S-NSSAI, and the existing slice information element supports carrying up to 8 disallowed S-NSSAIs, and the sixth slice information element is a newly added slice information element for carrying RejectedS-NSSAI. The specifications of the sixth slice rejection information element can be the same as those of the fifth slice rejection information element, that is, the specifications of the existing slice information element can be reused.

[0018] In a third aspect, a communication method is provided, which is applied to a terminal device, and can be executed by the terminal device, or by a component of the terminal device, such as a processor, chip, or chip system of the terminal device, or by a logic module or software that can realize all or part of the functions of the terminal device. Taking the method as an example that the method can be executed by the terminal device, the method includes: the terminal device obtains first slice information, the first slice information includes first indication information or a first request message, the first indication information is used to indicate that the terminal device supports slice-based network selection, the first request message is used to request network slice auxiliary information NSSAI, NSSAI includes Y single network slice auxiliary information S-NSSAI, Y is a positive integer; when the terminal device sends a second registration request message, if there is a first security authentication key and a first security context, the terminal device sends the first slice information through the second registration request message; or, when the terminal device sends the second registration request message, if there is no first security authentication key or first security context, the terminal device sends the first slice information through a security mode completion message.

[0019] The communication method provided by the embodiment of the present application is that the terminal device can send the first slice information through the second registration request message when the first security authentication key and the first security context exist; or, the terminal device can send the first slice information through the security mode completion message when the first security authentication key and the first security context do not exist, and the security mode completion message is triggered after the terminal device obtains the security authentication key and the security context. Therefore, this scheme can ensure that the terminal device sends the first slice information based on the security mode.

[0020] In a possible implementation, when the terminal device does not have the first security authentication key or the first security context when the terminal device sends the second registration request message, before the terminal device sends the first slice information through the security mode completion message, the terminal device determines that the second security authentication key and the second security context exist. This solution can enable the terminal device to send the first slice information when the security authentication key and the security context exist, thereby ensuring that the terminal device sends the first slice information based on the security mode.

[0021] In a fourth aspect, a communication method is provided, which is applied to a second network device, and can be executed by the second network device, or by a component of the second network device, such as a processor, a chip, or a chip system of the second network device, or can be implemented by a logic module or software that can implement all or part of the functions of the second network device. Taking the method as an example that the method can be executed by the second network device, the method includes: the second network device receives first slice information from the terminal device, the first slice information includes first indication information or a first request message, the first indication information is used to indicate that the terminal device supports slice-based network selection, the first request message is used to request network slice auxiliary information NSSAI, NSSAI includes Y single network slice auxiliary information S-NSSAI, Y is a positive integer, wherein when the terminal device sends the second registration request message, if the terminal device has a first security authentication key and a first security context, the first slice information is included in the second registration request message, or when the terminal device sends the second registration request message, if the terminal device does not have the first security authentication key or the first security context, the first slice information is included in the security mode completion message; the second network device determines whether to allow the corresponding NSSAI according to the first slice information.

[0022] The communication method provided by the embodiment of the present application is that the terminal device can send the first slice information through the second registration request message when the first security authentication key and the first security context exist; or, the terminal device can send the first slice information through the security mode completion message when the first security authentication key and the first security context do not exist, and the security mode completion message is triggered after the terminal device obtains the security authentication key and the security context. Therefore, this scheme can ensure that the terminal device sends the first slice information based on the security mode.

[0023] Based on the third aspect or the fourth aspect, in a possible implementation, when the terminal device sends the second registration request message and there is a first security authentication key and a first security context, the first slice information sent by the terminal device through the second registration request message is included in a first container information element, wherein the first container information element is generated by the first security authentication key and the first slice information. This solution enables the terminal device to send the first slice information through the encrypted first container information element, thereby further ensuring the security of the transmission of the first slice information.

[0024] Based on the third aspect or the fourth aspect, in a possible implementation, when the terminal device sends the second registration request message and there is no first security authentication key or first security context, the first slice information sent by the terminal device through the security mode completion message is included in the second container information element and sent, wherein the second container information element is generated by the second security authentication key and the first slice information. This solution enables the terminal device to send the first slice information through the encrypted second container information element, thereby further ensuring the security of the transmission of the first slice information.

[0025] Based on the third aspect or the fourth aspect, in a possible implementation manner, in an embodiment of the present application, the first container or the second container is a SOR-controlled transparent container.

[0026] In a fifth aspect, a communication method is provided, which is applied to a second network device, and can be executed by the second network device, or by a component of the second network device, such as a processor, a chip, or a chip system of the second network device, or can be implemented by a logic module or software that can realize all or part of the functions of the second network device. Taking the method as an example that the method can be executed by the second network device, the method includes: the second network device obtains a third container cell from the terminal device, the third container cell includes a first parameter and a first message verification code, the first parameter includes second slice information, the second slice information includes a first indication information or a first request message, the first indication information is used to indicate that the terminal device supports slice-based network selection, the first request message is used to request network slice auxiliary information NSSAI, NSSAI includes X single network slice auxiliary information S-NSSAI, X is a positive integer; the second network device sends the first parameter and the first message verification code to the third network device, the first parameter and the first message verification code are used by the third network device to perform a complete security check on the third container cell; the second network device receives a complete security check reply message from the third network device, and the complete security check reply message is used to indicate that the complete security check is successful. The communication method provided in the embodiment of the present application makes the integrity verification of the third container cell successful through the integrity verification process of the third container cell, thereby ensuring the security of the system.

[0027] In one possible implementation, the security verification reply message includes a first identifier, and the first identifier is used to indicate that the security verification is successful, or the first identifier indicates that the first message verification code is the same as the second message verification code. The second network device determines that the security verification is successful based on the first identifier in the security verification reply message. The second network device only needs to obtain the first identifier to determine that the security verification is successful, and the implementation complexity is low.

[0028] In the embodiment of the present application, the first parameter also includes at least one of the following: header information and counter information.

[0029] In a sixth aspect, a communication method is provided, which is applied to a third network device and can be executed by the third network device or by a component of the third network device, such as a processor, chip, or chip system of the third network device. It can also be implemented by a logic module or software that can implement all or part of the functions of the third network device. Taking the method that can be executed by the third network device as an example, the method includes: the third network device receives a first parameter and a first message verification code from the second network device, the first parameter and the first message verification code are included in a third container information element, the first parameter includes second slice information, the second slice information includes first indication information or a first request message, the first indication information is used to indicate that the terminal device supports slice-based network selection, the first request message is used to request network slice auxiliary information NSSAI, NSSAI includes X single network slice auxiliary information S-NSSAI, X is a positive integer, the first parameter and the first message verification code are used by the third network device to perform a security check on the third container information element; the third network device determines that the security check is successful based on the first message verification code and the second message verification code being the same, and the second message verification code is determined by the third network device based on the first parameter; the third network device sends a security check reply message to the second network device, and the security check reply message is used to indicate that the security check is successful.

[0030] The communication method provided in the embodiment of the present application makes the integrity verification of the third container cell successful through the integrity verification process of the third container cell, thereby ensuring the security of the system.

[0031] In one possible implementation, the security verification reply message includes a first identifier, and the first identifier is used to indicate that the security verification is successful, or the first identifier indicates that the first message verification code is the same as the second message verification code. The second network device determines that the security verification is successful based on the first identifier in the security verification reply message. The second network device only needs to obtain the first identifier to determine that the security verification is successful, and the implementation complexity is low.

[0032] In the embodiment of the present application, the first parameter also includes at least one of the following: header information and counter information.

[0033] In the seventh aspect, a communication method is provided, which is applied to a second network device, and can be executed by the second network device, or by a component of the second network device, such as a processor, chip, or chip system of the second network device, or by a logic module or software that can realize all or part of the functions of the second network device. Taking the method as an example that the method can be executed by the second network device, the method includes: the second network device obtains a third container cell from the terminal device, the third container cell includes a first parameter and a first message verification code, the first parameter includes second slice information, the second slice information includes first indication information or a first request message, the first indication information is used to indicate that the terminal device supports slice-based network selection, the first request message is used to request network slice auxiliary information NSSAI, NSSAI includes X single network slice auxiliary information S-NSSAI, X is a positive integer; the second network device sends the first parameter to the third network device; the second network device receives a complete security check reply message from the third network device, the complete security check reply message includes a second message verification code, and the second message verification code is determined by the third network device according to the first parameter; the second network device determines that the complete security check is successful according to the first message verification code and the second message verification code are the same.

[0034] The communication method provided in the embodiment of the present application makes the integrity verification of the third container cell successful through the integrity verification process of the third container cell, thereby ensuring the security of the system.

[0035] In the embodiment of the present application, the first parameter also includes at least one of the following: header information and counter information.

[0036] In an eighth aspect, a communication method is provided, which is applied to a third network device, and can be executed by the third network device, or by a component of the third network device, such as a processor, chip, or chip system of the third network device, or by a logic module or software that can realize all or part of the functions of the third network device. Taking the method as an example that the method can be executed by the third network device, the method includes: the third network device receives a first parameter from the second network device, the first parameter is included in the third container information element, the third container information element includes the first parameter and the first message verification code, the first parameter includes the second slice information, the second slice information includes the first indication information or the first request message, the first indication information is used to indicate that the terminal device supports the network based on the slice selection, and the first request message is used to request the network slice auxiliary information NSSAI, NSSAI includes X single network slice auxiliary information S-NSSAI, X is a positive integer; the third network device determines the second message verification code according to the first parameter; the third network device sends a complete security check reply message to the second network device, and the complete security check reply message includes the second message verification code. The communication method provided in the embodiment of the present application makes the complete security check of the third container information element successful through the complete security check process of the third container information element, thereby ensuring the security of the system.

[0037] The communication method provided in the embodiment of the present application makes the integrity verification of the third container cell successful through the integrity verification process of the third container cell, thereby ensuring the security of the system.

[0038] In the embodiment of the present application, the first parameter also includes at least one of the following: header information and counter information.

[0039] In the ninth aspect, a communication device is provided for implementing the above-mentioned various methods. The communication device may be the terminal device in the first aspect, or a device included in the terminal device, such as a chip; or the communication device may be the first network device in the second aspect, or a device included in the first network device, such as a chip; or the communication device may be the terminal device in the third aspect, or a device included in the terminal device, such as a chip; or the communication device may be the second network device in the fourth aspect, or a device included in the second network device, such as a chip; or the communication device may be the second network device in the fifth aspect, or a device included in the second network device, such as a chip; or the communication device may be the third network device in the sixth aspect, or a device included in the third network device, such as a chip; or the communication device may be the second network device in the seventh aspect, or a device included in the second network device, such as a chip; or the communication device may be the third network device in the eighth aspect, or a device included in the third network device, such as a chip. The communication device includes a module, unit, or means corresponding to the above method, which can be implemented by hardware, software, or by hardware executing corresponding software. The hardware or software includes one or more modules or units corresponding to the above functions.

[0040] In some possible designs, the communication device may include a processing module and a communication module. The communication module may include an output module (or a sending module) and an input module (or a receiving module), respectively used to implement the output-type (or sending-type) and input-type (or receiving-type) functions in any of the first to eighth aspects and any possible designs thereof. The processing module may be used to implement the processing functions in any of the above aspects and any possible designs thereof.

[0041] Optionally, the communication device further comprises a storage module for storing program instructions and data.

[0042] In a tenth aspect, a communication device is provided, comprising: at least one processor, the processor being used to run a computer program or instruction, or being used to enable the communication device to execute the method described in the first aspect or the second aspect through a logic circuit. The communication device may be a terminal device in the first aspect, or a device included in the terminal device, such as a chip; or, the communication device may be a first network device in the second aspect, or a device included in the first network device, such as a chip; or, the communication device may be a terminal device in the third aspect, or a device included in the terminal device, such as a chip; or, the communication device may be a second network device in the fourth aspect, or a device included in the second network device, such as a chip; or, the communication device may be a second network device in the fifth aspect, or a device included in the second network device, such as a chip; or, the communication device may be a third network device in the sixth aspect, or a device included in the third network device, such as a chip; or, the communication device may be a second network device in the seventh aspect, or a device included in the second network device, such as a chip; or, the communication device may be a third network device in the eighth aspect, or a device included in the third network device, such as a chip.

[0043] In some possible designs, the communication device further includes a memory for storing computer instructions and / or configuration files of logic circuits. Optionally, the memory is integrated with the processor, or the memory is independent of the processor.

[0044] In a possible design, the communication device further includes a communication interface for inputting and / or outputting signals.

[0045] In some possible designs, the communication interface is an interface circuit for reading and writing computer instructions. For example, the interface circuit is used to receive computer execution instructions (computer execution instructions are stored in a memory, may be read directly from the memory, or may pass through other devices) and transmit them to the processor.

[0046] In some possible designs, the communication interface is used to communicate with modules outside the communication device.

[0047] In some possible designs, the communication device may be a chip system. Wherein, when the communication device is a chip system, the chip system may include a chip, or may include a chip and other discrete devices.

[0048] In the eleventh aspect, a communication device is provided, comprising: a logic circuit and an interface circuit; the interface circuit is used to input information and / or output information; the logic circuit is used to execute the method described in any one of the first to eighth aspects above, and process and / or generate output information based on the input information. The communication device may be the terminal device in the first aspect, or a device included in the terminal device, such as a chip; or, the communication device may be the first network device in the second aspect, or a device included in the first network device, such as a chip; or, the communication device may be the terminal device in the third aspect, or a device included in the terminal device, such as a chip; or, the communication device may be the second network device in the fourth aspect, or a device included in the second network device, such as a chip; or, the communication device may be the second network device in the fifth aspect, or a device included in the second network device, such as a chip; or, the communication device may be the third network device in the sixth aspect, or a device included in the third network device, such as a chip; or, the communication device may be the second network device in the seventh aspect, or a device included in the second network device, such as a chip; or, the communication device may be the third network device in the eighth aspect, or a device included in the third network device, such as a chip.

[0049] It can be understood that when the communication device provided in any of the above aspects is a chip, the above sending action / function can be understood as output information, and the above receiving action / function can be understood as input information.

[0050] In a twelfth aspect, a computer-readable storage medium is provided, in which a computer program or instruction is stored. When the computer program or instruction is executed by a processor, the method described in any one of the above aspects is executed.

[0051] In a thirteenth aspect, a computer program product is provided, which, when executed by a processor, enables the method described in any of the above aspects to be executed.

[0052] In the fourteenth aspect, a communication device is provided, which includes a module / unit for executing the method described in the first or second aspect, or the communication device includes a module / unit for executing the method described in the third or fourth aspect, the communication device includes a module / unit for executing the method described in the fifth or sixth aspect, or the communication device includes a module / unit for executing the method described in the seventh or eighth aspect.

[0053] In the fifteenth aspect, a communication system is provided, which includes the terminal device described in the first aspect and the first network device described in the second aspect, or the communication system includes the terminal device described in the third aspect and the second network device described in the fourth aspect, or the communication system includes the second network device described in the fifth aspect and the third network device described in the sixth aspect; or the communication system includes the second network device described in the seventh aspect and the third network device described in the eighth aspect. BRIEF DESCRIPTION OF THE DRAWINGS

[0054] Figure 1 is a schematic diagram of a 5G network architecture provided in an embodiment of the present application;

[0055] Figure 2 It is a schematic diagram of a registration process provided in an embodiment of the present application;

[0056] Figure 3 is a schematic diagram of a communication system provided in an embodiment of the present application;

[0057] Figure 4 is a schematic diagram of another communication system provided in an embodiment of the present application;

[0058] Figure 5 is a schematic diagram of another communication system provided in an embodiment of the present application;

[0059] Figure 6 is a schematic diagram of the structure of a communication device 600 provided in an embodiment of the present application;

[0060] Figure 7 is a schematic diagram of an example of a communication method provided in an embodiment of the present application;

[0061] Figure 8 is a schematic diagram of a communication method provided in an embodiment of the present application;

[0062] Fig. 9 is a schematic diagram of an example of a communication method provided in an embodiment of the present application;

[0063] Fig.10 is a schematic diagram of an example of a communication method provided in an embodiment of the present application;

[0064] Fig.11 is a schematic diagram of an example of a communication method provided in an embodiment of the present application;

[0065] Fig.12 is a schematic diagram of an example of a communication method provided in an embodiment of the present application;

[0066] Fig.13 is a schematic diagram of an example of a communication method provided in an embodiment of the present application;

[0067] Fig.14 It is a schematic diagram of a communication device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0068] In the description of this application, unless otherwise specified, " / " indicates that the objects associated with each other are in an "or" relationship, for example, A / B can represent A or B; "and / or" in this application is merely a description of the association relationship between associated objects, indicating that three relationships may exist, for example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone, where A and B can be singular or plural.

[0069] In the description of this application, unless otherwise specified, "plurality" means two or more than two. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single items or plural items. For example, at least one of a, b, or c can mean: a, b, c, ab, ac, bc, or abc, where a, b, and c can be single or multiple.

[0070] In addition, in order to clearly describe the technical solutions of the embodiments of the present application, in the embodiments of the present application, words such as "first" and "second" are used to distinguish the same items or similar items with substantially the same functions and effects. Those skilled in the art can understand that words such as "first" and "second" do not limit the quantity and execution order, and words such as "first" and "second" do not necessarily limit the difference.

[0071] In the embodiments of the present application, words such as "exemplary" or "for example" are used to indicate examples, illustrations or descriptions. Any embodiment or design described as "exemplary" or "for example" in the embodiments of the present application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present related concepts in a concrete way for easy understanding.

[0072] It is understood that the "embodiment" mentioned throughout the specification means that the specific features, structures or characteristics related to the embodiment are included in at least one embodiment of the present application. Therefore, the various embodiments in the entire specification do not necessarily refer to the same embodiment. In addition, these specific features, structures or characteristics can be combined in one or more embodiments in any suitable manner. It is understood that in various embodiments of the present application, the size of the sequence number of each process does not mean the order of execution, and the execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiment of the present application.

[0073] It can be understood that in the present application, "when" and "if" both mean that corresponding processing will be carried out under certain objective circumstances, and do not limit the time, nor do they require any judgment action when implementing, nor do they mean the existence of other limitations.

[0074] It can be understood that some optional features in the embodiments of the present application may not rely on other features, such as the solution on which they are currently based, in certain scenarios, and may be implemented independently to solve corresponding technical problems and achieve corresponding effects. They may also be combined with other features according to needs in certain scenarios. Accordingly, the devices provided in the embodiments of the present application may also realize these features or functions accordingly, which will not be elaborated here.

[0075] In this application, unless otherwise specified, the same or similar parts between the various embodiments can refer to each other. In the various embodiments in this application, and the various implementation methods / implementation methods / implementation methods in each embodiment, if there is no special explanation and logical conflict, the terms and / or descriptions between different embodiments and the various implementation methods / implementation methods / implementation methods in each embodiment are consistent and can be referenced to each other. The technical features in different embodiments and the various implementation methods / implementation methods / implementation methods in each embodiment can be combined to form new embodiments, implementation methods, implementation methods, or implementation methods according to their inherent logical relationships. The implementation methods of this application described below do not constitute a limitation on the scope of protection of this application.

[0076] In order to facilitate understanding of the technical solutions of the embodiments of the present application, a brief introduction to the related technologies of the present application is given as follows.

[0077] 1. Fifth generation (5G) network architecture:

[0078] The 5G network architecture defined in the 3rd Generation Partnership Project (3GPP) TS23.501 standard is mainly divided into two parts: access network (AN) and core network.

[0079] The access network may include a radio access network (RAN), which is used to implement functions related to wireless access.

[0080] The core network mainly includes the following key logical network elements: access and mobility management function (AMF) network element, session management function (SMF) network element, user plane function (UPF) network element, policy control function (policycontrol function) network element, unified data management function (UDM) network element. In addition, the core network can also include authentication server function (AUSF) network element, network slice selection function (NSSF) network element, or application function (AF) network element.

[0081] See also Figure 1 , which is a schematic diagram of a 5G network architecture. The terminal device may be a user equipment (UE), such as a mobile phone, an IoT terminal device, etc.

[0082] DN is a data network (DN), which is mainly used to provide data transmission services to users, such as Internet protocol (IP) multimedia service (IMS) and the like.

[0083] Access network equipment that provides wireless access to users is deployed in RAN, including but not limited to evolved base stations (NodeB or eNB or e-NodeB, evolutionary Node B), wireless fidelity (WiFi) access points (access points, APs), etc.

[0084] The AMF network element is mainly responsible for mobility management in the mobile network, such as user location update, user registration network, user switching, etc.

[0085] The SMF network element is mainly responsible for session management in the mobile network, such as session establishment, modification, and release. Specific functions include allocating IP addresses to users and selecting UPFs that provide message forwarding functions.

[0086] The PCF network element is mainly responsible for providing policies to AMF and SMF, such as quality of service (QoS) policy and slice selection policy.

[0087] The UDM network element is mainly responsible for storing user data, such as contract information and authentication / authorization information.

[0088] The AF network element is mainly responsible for providing service requirements to the 3GPP network, such as affecting service routing and interacting with the PCF network element for policy control.

[0089] The UPF network element is mainly responsible for processing user messages, such as forwarding and billing.

[0090] The terminal device accesses the DN by establishing a protocol data unit (PDU) session (PDU session) between the terminal device-RAN device-UPF network element-DN.

[0091] The AUSF network element is mainly responsible for providing terminal device authentication services for the AMF network element.

[0092] The NSSF network element is mainly responsible for selecting the network slice that serves the terminal device.

[0093] In addition, see Figure 1 , Nx represents the logical interface or service interface between two network elements, which is used for communication between network elements. For example, N1 is the interface between the terminal device and the AMF network element; N2 is the interface between the access network device and the AMF network element; N3 is the interface between the access network device and the UPF network element; N9 is the interface between different UPF network elements; N6 is the interface between the UPF network element and the DN; N4 is the interface between the UPF network element and the SMF network element; N11 is the interface between the AMF network element and the SMF network element; N7 is the interface between the SMF network element and the PCF network element; N5 is the interface between the PCF network element and the AF network element; N14 is the interface between different AMF network elements; N15 is the interface between the AMF network element and the PCF network element; N22 is the interface between the NSSF network element and the AMF network element; N12 is the interface between the AUSF network element and the AMF network element; N8 is the interface between the UDM network element and the AMF network element; N13 is the interface between the AUSF network element and the UDM network element.

[0094] 2. Network Slice (or Slice for short):

[0095] In the 5G era, hundreds of billions of IoT devices will be connected to the network. Different types of application scenarios have different demands on the network, and some even conflict with each other. Providing services for different types of application scenarios through a single network will lead to extremely complex network architecture and low network management efficiency and resource utilization efficiency.

[0096] 5G network slicing technology provides isolated network environments for different application scenarios by creating virtual independent logical networks on the same network infrastructure, allowing different application scenarios to customize network functions and features according to their own needs, and can effectively guarantee the QoS requirements of different services.

[0097] The goal of network slicing is to organically combine terminal devices, access network resources, core network resources, and network operation and maintenance and management systems to provide a complete network that can be independently operated and maintained and isolated from each other for different business scenarios or business types.

[0098] Various scenarios have put forward different requirements for the 3GPP ecosystem: billing, policy, security, mobility, etc. 3GPP emphasizes that network slices should not affect each other. For example, a large number of sudden meter reading services should not affect normal mobile broadband services. In order to meet the diverse needs and isolate between slices, relatively independent management and operation and maintenance of services are required, and tailored business functions and analysis capabilities are provided. Instances of different types of services are deployed on different network slices, and different instances of the same service type can also be deployed on different network slices.

[0099] Specific:

[0100] Network slice: refers to a logical network that can provide specific network capabilities and network characteristics.

[0101] Network Slice instance: refers to a set of network function entities and required resources that constitute a network slice, such as computing, storage, and network resources.

[0102] In an embodiment of the present application, single network slice selection assistance information (S-NSSAI) can be used as identification information of the network slice to distinguish different network slices.

[0103] Among them, S-NSSAI may include slice type / service type (slice / service type, SST) information, and the SST information is used to describe the expected network slicing behavior, such as the slice type / service type used to describe the network slice, etc., without restriction.

[0104] Exemplarily, the slice type / service type (SST) of the network slice may include: enhanced mobile broadband (eMBB), ultra-reliable low latency communications (URLLC), massive Internet of things (MIoT), vehicle to everything (V2X), etc., without limitation.

[0105] Optionally, S-NSSAI also includes slice differentiator (or slice differentiation identifier) ​​(slicedifferentiator, SD) information, which is the supplementary information of SST information and is used to distinguish different network slices with the same SST characteristics. That is, when SST information points to multiple network slices, SD information can assist in corresponding to a unique network slice.

[0106] In addition, a group of S-NSSAIs can be identified by NSSAI, that is, NSSAI is a collection of a group of S-NSSAIs.

[0107] Among them, if classified according to different types, NSSAI includes Subscribed NSSAI, Configured NSSAI, Requested NSSAI, Allowed NSSAI, Rejected NSSAI, or Pending NSSAI. The following describes these types of NSSAI in detail.

[0108] Subscribed NSSAI: The subscribed NSSAI is unique to the home public land mobile network (HPLMN) and refers to the subscribed NSSAI that the terminal device is allowed to access.

[0109] Configured NSSAI: NSSAI of one or more PLMNs defined in the terminal device. ConfiguredNSSAI is determined by the serving PLMN based on its own support capabilities for network slicing and the network slices subscribed by the terminal device, and then sent to the terminal device in the Registration Accept message in the registration process. ConfiguredNSSAI is based on the granularity of PLMN or Stand-alone Non-Public Network (SNPN). Different PLMN or SNPN can correspond to different Configured NSSAI.

[0110] Requested NSSAI: refers to the NSSAI provided by the terminal device to the serving PLMN during the registration process. When the terminal device has saved the Configured NSSAI corresponding to the serving PLMN, the Requested NSSAI includes the S-NSSAI in the Configured NSSAI corresponding to the serving PLMN; when the terminal device has not saved the Configured NSSAI corresponding to the serving PLMN, for example, the Configured NSSAI corresponding to the serving PLMN is deleted when the terminal device accesses for the first time or due to restart, the Requested NSSAI may include the S-NSSAI in the Default Configured NSSAI, which is configured by the HPLMN. In this scenario, the Requested NSSAI may include the S-NSSAI that does not belong to the Configured NSSAI corresponding to the serving PLMN.

[0111] Allowed NSSAI: refers to the NSSAI provided by the serving PLMN in, for example, the registration process, indicating the network slice of the serving PLMN that the terminal device is allowed to access in the current registration area (RA) in the network slice corresponding to the RequestedNSSAI.

[0112] Rejected NSSAI: refers to the NSSAI provided by the serving PLMN in, for example, the registration process, indicating that the network slice corresponding to the RequestedNSSAI does not allow the terminal device to access the network slice in the current RA.

[0113] The network slices corresponding to Rejected NSSAI can be divided into the following two categories: one is the network slices that are not allowed to be accessed within the current RA but can be accessed within the serving PLMN; the other is the network slices that are not allowed to be accessed within the entire serving PLMN.

[0114] Pending NSSAI: NSSAI provided by the serving PLMN during the registration process, indicating the S-NSSAI for which network slice-specific authentication and authorization procedures are yet to be performed. For details, please refer to the definition in the 3GPP 23.501 standard and will not be repeated here.

[0115] 3. Network slice registration process.

[0116] Figure 2 Schematic diagram of a registration process provided by an embodiment of the present application. Figure 2 The following is a part of the registration process related to slice selection, which includes the following steps:

[0117] S201, the terminal device sends a registration request to the access network device. Correspondingly, the access network device receives the registration request from the terminal device.

[0118] The registration request includes the NSSAI requested by the terminal device, namely, Requested NSSAI.

[0119] S202, the access network device forwards the NSSAI requested by the terminal device to the initial AMF network element (initial AMF). Correspondingly, the initial AMF network element receives the NSSAI requested by the terminal device forwarded by the access network device.

[0120] Among them, the access network device can forward the NSSAI requested by the terminal device to the initial AMF network element through the N2 message.

[0121] S203, the initial AMF network element initiates a request to the UDM network element to obtain the subscribed NSSAI of the terminal device.

[0122] S204: When the initial AMF network element cannot determine the Allowed NSSAI of the terminal device, the initial AMF network element sends the NSSAI requested by the terminal device, the NSSAI subscribed by the terminal device, and the location information of the terminal device to the NSSF network element to request slice selection from the NSSF network element.

[0123] S205, the NSSF network element replies the Allowed NSSAI of the terminal device to the initial AMF network element. Correspondingly, the initial AMF network element receives the Allowed NSSAI of the terminal device from the NSSF network element.

[0124] In addition, if it is necessary to switch the AMF network element, the NSSF network element also replies to the initial AMF network element with the target AMF set (or list) and the identifier (ID) of the network repository function (NRF) network element corresponding to the target AMF network element.

[0125] S206: If it is necessary to switch the AMF network element, the initial AMF network element queries the corresponding NFR network element for the information of the target AMF network element based on the NFR ID replied by the NSSF network element.

[0126] S207, the initial AMF network element sends an AMF relocation request to the target AMF network element. Correspondingly, the target AMF network element receives the AMF relocation request from the initial AMF network element.

[0127] Among them, the AMF relocation request includes the Allowed NSSAI of the terminal device replied by the NSSF network element.

[0128] As a possible implementation method, the initial AMF network element can send an AMF relocation request to the target AMF network element through the interface between AMF network elements, as shown in S207a.

[0129] As another possible implementation method, the initial AMF network element can also forward the AMF relocation request to the target AMF network element through the access network device.

[0130] For example, as shown in S207b, the initial AMF network element sends an AMF relocation request to the access network device. In addition to the Allowed NSSAI of the terminal device replied by the NSSF network element, the AMF relocation request also includes the information of the target AMF network element. After receiving the AMF relocation request from the initial AMF network element, the access network device forwards the AMF relocation request to the target AMF network element according to the information of the target AMF network element included therein.

[0131] S208, the target AMF network element sends the Allowed NSSAI of the terminal device to the access network device. Correspondingly, the access network device receives the Allowed NSSAI of the terminal device from the target AMF network element.

[0132] S209, the access network device feeds back the Allowed NSSAI of the terminal device and the terminal device route selection policy (UEroute selection policy, URSP) to the terminal device.

[0133] Among them, URSP is generated by the PCF network element during the registration process, which will not be described here.

[0134] At this point, the terminal device can know the network slices that can be accessed subsequently and their corresponding URSPs.

[0135] In addition, according to the current 23.502 protocol, the triggering scenarios of the registration process mainly include: (1) the initial registration of the terminal device to the core network; (2) the mobile registration update caused by the terminal device moving to a TA outside the registration area (RA); (3) the registration update caused by the change of terminal device capabilities; (4) the periodic registration update of the terminal device in an inactive state; (5) emergency registration. In other words, the terminal device can select a network slice in the above five scenarios. In other words, in the prior art, in scenarios other than the above five scenarios, the terminal device will not initiate a registration process. It should be noted that the communication method provided in the embodiment of the present application mainly describes the key processes in the registration process, and the description of other steps in the registration process will be omitted.

[0136] Optionally, the embodiments of the present application can be applied to 5G systems or to other communication systems, such as the future sixth generation mobile communication technology (6th generation, 6G), etc., and the embodiments of the present application do not make specific limitations on this.

[0137] Figure 3 Schematic diagram of a communication system provided in an embodiment of the present application. Figure 3 As shown, the communication system includes a terminal device and a first network device.

[0138] In a possible implementation, a terminal device is used to send a first registration request message to a first network device. The first registration request message includes a requested NSSAI, and the requested NSSAI includes N S-NSSAIs, where N is a positive integer greater than 8. The first network device is used to receive the first registration request message and send a first registration acceptance message to the terminal device, and the first registration acceptance message indicates whether the first network device allows the requested NSSAI. The terminal device is used to receive the first registration acceptance message. The specific implementation and beneficial effects of the scheme will be described in subsequent method embodiments and will not be repeated here.

[0139] Alternatively, if Figure 3 As shown, the communication system provided by the embodiment of the present application may also include a second network device, which is used to send indication information to the first network device indicating whether the first network device corresponding to the PLMN in the first PLMN set allows the corresponding NSSAI.

[0140] Exemplarily, the first network device in the embodiment of the present application may be, for example, an AMF network element of a 5G network architecture, and the second network device in the embodiment of the present application may be, for example, a UDM network element of a 5G network architecture. Optionally, the communication system provided in the embodiment of the present application also includes an access network device, and the first network device or the second network device communicates with the terminal device through the access network device.

[0141] Figure 4 A schematic diagram of another communication system provided in an embodiment of the present application. Figure 4 As shown, the communication system includes a terminal device and a second network device.

[0142] In a possible implementation, a terminal device is used to obtain first slice information, the first slice information includes first indication information or a first request message, wherein the first indication information is used to indicate that the terminal device supports slice-based network selection, the first request message is used to request NSSAI, and NSSAI includes Y S-NSSAIs, where Y is a positive integer; the terminal device is also used to send the first slice information through a second registration request message when the terminal device sends a second registration request message to a second network device, if there is a first security authentication key and a first security context, and send the first slice information through a security mode completion message when the terminal device sends the second registration request message. The second network device is used to receive the first slice information from the terminal device, and is also used to determine whether the corresponding NSSAI is allowed based on the first slice information.

[0143] Alternatively, if Figure 4 As shown, the communication system provided in an embodiment of the present application also includes a first network device, and the terminal device is used to send first slice information through the first network device.

[0144] Exemplarily, the first network device in the embodiment of the present application may be, for example, an AMF network element of a 5G network architecture, and the second network device in the embodiment of the present application may be, for example, a UDM network element of a 5G network architecture. Optionally, the communication system provided in the embodiment of the present application also includes an access network device, and the first network device or the second network device communicates with the terminal device through the access network device.

[0145] Figure 5 A schematic diagram of another communication system provided in an embodiment of the present application. Figure 5 As shown, the communication system includes a terminal device, a second network device, and a third network device.

[0146] In a possible implementation, a terminal device is used to send a third container cell to a second network device, the third container cell includes a first parameter, the first parameter includes second slice information, the second slice information includes a first indication or a second request message, the first indication information is used to indicate that the terminal device supports slice-based network selection, and the second request message is used to request NSSAI, and the requested NSSAI includes X S-NSSAIs, where X is a positive integer. The second network device is used to send a first parameter and a first message verification code to a third network device, the first parameter and the first message verification code are used by the third network device to perform a security check on the third container cell; the second network device is also used to receive a security check reply message from the third network device, the security check reply message is used to indicate that the security check is successful. The third network device is used to receive a first parameter and a first message verification code, the first parameter and the first message verification code are used by the third network device to perform a security check on the third container cell; the third network device is also used to determine that the security check is successful according to the first parameter and the first message verification code and send a security check reply message to the second network device, the security check reply message is used to indicate that the security check is successful. The specific implementation and beneficial effects of this solution will be described in the subsequent method embodiments and will not be repeated here.

[0147] In another possible implementation, the terminal device is used to send a third container information element to the second network device, the third container information element includes a first parameter, the first parameter includes second slice information, the second slice information includes a first indication or a second request message, the first indication information is used to indicate that the terminal device supports slice-based network selection, and the second request message is used to request NSSAI, and the requested NSSAI includes X S-NSSAIs, where X is a positive integer. The second network device is used to send the first parameter to the third network device, and is also used to receive a complete security check reply message from the third network device, wherein the complete security check reply message includes a second message verification code, and the second message verification code is determined by the third network device according to the first parameter, and the second network device is also used to determine that the complete security check is successful according to the first message verification code and the second message verification code. The third network device is used to receive the first parameter from the second network device, and is also used to determine the second message verification code according to the first parameter; the third network device is also used to send a complete security check reply message to the second network device, and the complete security check reply message includes the second message verification code. The specific implementation and beneficial effects of this solution will be described in the subsequent method embodiments, and will not be repeated here.

[0148] Exemplarily, the second network device in the embodiment of the present application may be, for example, a UDM network element of a 5G network architecture. Exemplarily, the third network device in the embodiment of the present application may be, for example, an AUSF network element in a 5G network architecture.

[0149] Optionally, the communication system provided in the embodiment of the present application also includes an access network device, and the above-mentioned second network device or third network device communicates with the terminal device through the access network device.

[0150] Optionally, the terminal device involved in the embodiment of the present application can be a user equipment (UE), access terminal equipment, terminal equipment unit, user station, terminal equipment station, mobile station, mobile station, remote station, remote terminal equipment, user terminal equipment terminal equipment, TE), mobile device, wireless communication device, terminal equipment agent, tablet computer (pad), handheld device with wireless communication function, computing device or other processing device connected to a wireless modem, vehicle-mounted equipment, vehicle-mounted communication module, wearable device, or terminal equipment device, the access terminal device can be a cellular phone, a cordless phone, a session initiation protocol (SIP) phone, a wireless local loop (WLL) station, a personal digital assistant (PDA), a handheld device with wireless communication function, a computing device or other processing device connected to a wireless modem, a vehicle-mounted equipment, a drone, a robot, a smart point of sale (POS) machine, a customer terminal equipment (customer-premises The terminal device may be a wireless terminal device in the form of a wireless equipment, CPE, or wearable device, a terminal device in virtual reality (VR), a terminal device in augmented reality (AR), a wireless terminal device in industrial control, a wireless terminal device in self driving, a wireless terminal device in remote medical, a wireless terminal device in smart grid, a wireless terminal device in transportation safety, a wireless terminal device in smart city, a wireless terminal device in smart home, etc. Alternatively, the terminal device may be a terminal device with communication function in IoT, such as a terminal device in V2X (such as a vehicle networking device), a terminal device in D2D communication, or a terminal device in M2M communication, etc. The terminal device may be mobile or fixed.

[0151] The access network device involved in the present application may be a device for communicating with a terminal device, for example, it may include an evolved base station (NodeB or eNB or e-NodeB, evolutional Node B) in a long term evolution (LTE) system or an enhanced LTE (LTE-advanced, LTE-A) system, such as a traditional macro base station eNB and a micro base station eNB in ​​a heterogeneous network scenario. Alternatively, it may include a next generation node B (next generation node B, gNB) in a new radio (NR) system. Alternatively, it may include a transmission reception point (TRP), a home base station (e.g., home evolved NodeB, or home Node B, HNB), a baseband unit (BBU), a baseband pool (BBU pool), or a wireless fidelity (WiFi) access point (AP), etc. Alternatively, it may include a base station in a non-terrestrial network (NTN), that is, it may be deployed on a flying platform or a satellite. In the NTN, the network device or access device may be used as a layer 1 (L1) relay, or as a base station, or as an integrated access and backhaul (IAB) node. Alternatively, the network device or access device may be a device that implements the base station function in IoT, such as a device that implements the base station function in drone communications, V2X, D2D, or machine to machine (M2M).

[0152] In some possible scenarios, the access network device may also be a module or unit that can implement some functions of the base station. For example, the network device may be a centralized unit (CU), a distributed unit (DU), a CU-control plane (CP), a CU-user plane (UP), or a radio unit (RU). The CU and DU may be separately configured or may be included in the same network element, such as a baseband unit (BBU). The RU may be included in a radio frequency device or radio frequency unit, such as a remote radio unit (RRU), an active antenna unit (AAU), or a remote radio head (RRH).

[0153] In different systems, CU (or CU-CP and CU-UP), DU or RU may also have different names, but those skilled in the art can understand their meanings. For example, the network device may be a network device or a module of a network device in an open radio access network (open RAN, ORAN) system. In the ORAN system, CU may also be referred to as open (open, O)-CU, DU may also be referred to as O-DU, CU-CP may also be referred to as O-CU-CP, CU-UP may also be referred to as O-CU-UP, and RU may also be referred to as O-RU. Any of the CU (or CU-CP, CU-UP), DU and RU in this application may be implemented by a software module, a hardware module, or a combination of a software module and a hardware module.

[0154] Optionally, the base station in the embodiment of the present application may include various forms of base stations, such as: macro base stations, micro base stations (also called small stations), relay stations, access points, home base stations, TRPs, transmitting points (TP), mobile switching centers, etc., and the embodiments of the present application do not specifically limit this.

[0155] It should be noted that the communication system described in the embodiment of the present application is for the purpose of more clearly illustrating the technical solution of the embodiment of the present application, and does not constitute a limitation on the technical solution provided in the embodiment of the present application. A person of ordinary skill in the art can know that with the evolution of network architecture and the emergence of new business scenarios, the technical solution provided in the embodiment of the present application is also applicable to similar technical problems.

[0156] Optionally, the relevant functions of the terminal device, the first network device, the second network device or the third network device involved in the present application can be implemented by one device, or by multiple devices together, or by one or more functional modules within a device, or can be one or more chips, or a system on chip (system on chip, SOC) or a chip system. The chip system can be composed of chips, or can include chips and other discrete devices. The embodiments of the present application do not specifically limit this.

[0157] It is understandable that the above functions can be network elements in hardware devices, software functions running on dedicated hardware, or a combination of hardware and software, or virtualized functions instantiated on a platform (e.g., a cloud platform).

[0158] For example, the relevant functions of the terminal device, the first network device, the second network device or the third network device involved in the present application can be Figure 6 The communication device 600 is implemented. Figure 6 FIG. 6 is a schematic diagram of the structure of a communication device 600 provided in an embodiment of the present application. The communication device 600 includes one or more processors 601, a communication line 602, and at least one communication interface ( Figure 6 The example in which the communication interface 604 and a processor 601 are included is merely exemplary), and a memory 603 may also be included optionally.

[0159] The processor 601 may be a general-purpose central processing unit (CPU), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits for controlling the execution of the program of the present application.

[0160] The communication line 602 may include a path for connecting different components.

[0161] The communication interface 604 may be a transceiver module for communicating with other devices or communication networks, such as Ethernet, RAN, wireless local area networks (WLAN), etc. For example, the transceiver module may be a device such as a transceiver or a transceiver. Optionally, the communication interface 604 may also be a transceiver circuit located in the processor 601 to implement signal input and signal output of the processor.

[0162] The memory 603 may be a device with a storage function. For example, it may be a read-only memory (ROM) or other types of static storage devices that can store static information and instructions, a random access memory (RAM) or other types of dynamic storage devices that can store information and instructions, or an electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disc storage, optical disc storage (including compressed optical disc, laser disc, optical disc, digital versatile disc, Blu-ray disc, etc.), a magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited thereto. The memory may exist independently and be connected to the processor via a communication line 602. The memory may also be integrated with the processor.

[0163] The memory 603 is used to store computer-executable instructions for executing the solution of the present application, and the execution is controlled by the processor 601. The processor 601 is used to execute the computer-executable instructions stored in the memory 603, thereby realizing the communication method provided in the embodiment of the present application.

[0164] Alternatively, optionally, in an embodiment of the present application, the processor 601 may also perform processing-related functions in the communication method provided in the following embodiments of the present application, and the communication interface 604 is responsible for communicating with other devices or communication networks, which is not specifically limited in the embodiments of the present application.

[0165] Optionally, the computer-executable instructions in the embodiments of the present application may also be referred to as application code, which is not specifically limited in the embodiments of the present application.

[0166] In a specific implementation, as an embodiment, the processor 601 may include one or more CPUs, such as Figure 6 CPU0 and CPU1 in.

[0167] In a specific implementation, as an embodiment, the communication device 600 may include multiple processors, such as Figure 6607 and processor 601 in the embodiment. Each of these processors may be a single-core processor or a multi-core processor. The processors here may include but are not limited to at least one of the following: a central processing unit (CPU), a microprocessor, a digital signal processor (DSP), a microcontroller unit (MCU), or an artificial intelligence processor and other computing devices running software, each of which may include one or more cores for executing software instructions to perform calculations or processing.

[0168] In a specific implementation, as an embodiment, the communication device 600 may further include an output device 605 and an input device 606. The output device 605 communicates with the processor 601 and may display information in a variety of ways. For example, the output device 605 may be a liquid crystal display (LCD), a light emitting diode (LED) display device, a cathode ray tube (CRT) display device, or a projector. The input device 606 communicates with the processor 601 and may receive user input in a variety of ways. For example, the input device 606 may be a mouse, a keyboard, a touch screen device, or a sensor device.

[0169] The communication device 600 may also be referred to as a communication apparatus, which may be a general-purpose device or a dedicated device. For example, the communication device 600 may be a desktop computer, a portable computer, a network server, a personal digital assistant (PDA), a mobile phone, a tablet computer, a wireless terminal device, an embedded device, the above-mentioned terminal, the above-mentioned network device, or a Figure 6 The embodiment of the present application does not limit the type of the communication device 600.

[0170] also, Figure 6 The structure shown in the figure does not constitute a limitation on the communication device, except Figure 6 In addition to the components shown, the communication device may include more or fewer components than shown, or combine certain components, or arrange the components differently.

[0171] Combine the following Figures 3 to 5 The communication system shown describes the communication method provided in the embodiment of the present application.

[0172] It should be noted that in the following embodiments of the present application, the message names between network elements, the names of parameters, or the names of information are only examples. In other embodiments, they may also be other names, and the method provided in the present application does not make any specific limitations on this.

[0173] It is understandable that in the embodiment of the present application, each network element may perform some or all of the steps in the embodiment of the present application, and these steps or operations are only examples. The embodiment of the present application may also perform other operations or variations of various operations. In addition, each step may be performed in a different order presented in the embodiment of the present application, and it is possible that not all operations in the embodiment of the present application need to be performed.

[0174] Figure 7 Schematic diagram of an example of a communication method provided in an embodiment of the present application. Figure 3 The communication system shown is explained by taking the interaction between the terminal device and the first network device as an example. Of course, the subject that executes the terminal device action in the method can also be a device / module in the terminal device, such as a chip, processor, processing unit, etc. in the terminal device; the subject that executes the first network device action in the method can also be a device / module in the network device, such as a chip, processor, processing unit, etc. in the network device, and the embodiment of the application does not specifically limit this.

[0175] like Figure 7 As shown, the method 700 includes:

[0176] S710: The terminal device sends a first registration request message to the first network device. Correspondingly, the first network device receives the first registration request message from the terminal device.

[0177] In an embodiment of the present application, the first registration request message includes a requested NSSAI, i.e., Requested NSSAI, and the Requested NSSAI includes N S-NSSAIs. N is a positive integer greater than 8, or N is a positive integer greater than 8 and less than or equal to 17, which is not limited in the present application.

[0178] In one possible implementation, the first registration request message includes a first slice information element, and the first slice information element is used to carry the Requested NSSAI. It should be understood that in a possible implementation, the first slice information element is a new slice information element obtained by extending the existing slice information element used to carry the Requested NSSAI. The existing slice information element used to carry the Requested NSSAI supports carrying up to 8 Requested S-NSSAIs, and the first slice information element supports carrying more than 8 Requested S-NSSAIs. By extending the existing slice information element, the protocol changes are relatively small. Of course, the first slice information element can also be a newly defined slice information element, and the embodiments of the present application do not specifically limit this.

[0179] In another possible implementation, the first registration request message includes a second slice information element and a third slice information element, and the second slice information element and the third slice information element are used to carry the Requested NSSAI. The second slice information element is used to carry the 8 S-NSSAIs included in the requested NSSAI, and the third slice information element is used to carry the (N-8) S-NSSAIs included in the requested NSSAI.

[0180] It should be understood that in a possible implementation, the second slice information element is an existing slice information element for carrying Requested NSSAI, and the existing slice information element for carrying Requested NSSAI supports carrying up to 8 Requested S-NSSAIs, and the third slice information element is a newly added slice information element for requesting NSSAI. Among them, the specifications of the third slice information element can be the same as the specifications of the second slice information element, that is, the specifications of the existing slice information element can be reused. Of course, the specifications of the third slice information element can also be different from the specifications of the second slice information element, and the embodiment of the present application does not make specific limitations on this.

[0181] In another possible implementation, the message used to carry the Requested NSSAI may not be the above-mentioned first registration request message, but a newly defined message, which is not limited in this application.

[0182] S720: The first network device sends a first registration acceptance message to the terminal device. Correspondingly, the terminal device receives the first registration acceptance message from the first network device.

[0183] In an embodiment of the present application, the first registration acceptance message is used to indicate whether the first network device allows Requested NSSAI, or the first registration acceptance message is used to indicate whether the first network device in the PLMN where the terminal device currently resides allows Requested NSSAI, or the first registration acceptance message is used to indicate whether the first network device in any PLMN corresponding to the terminal device allows Requested NSSAI, and the present application does not limit this. When the PLMN changes, the first network devices in different PLMNs are different, for example, when the terminal device currently resides in the first PLMN, it corresponds to the first AMF network element; or, when the terminal device currently resides in the second PLMN, it corresponds to the second AMF network element.

[0184] For the S-NSSAI allowed by the first network device:

[0185] In one possible implementation, the first registration acceptance message includes a fourth slice allowance information element, and the fourth slice allowance information element is used to indicate the S-NSSAI allowed by the first network device among the N S-NSSAIs, that is, the Allowed S-NSSAI, and the fourth slice allowance information element is used to carry M Allowed S-NSSAIs, where M is a positive integer greater than 8. It should be understood that in one possible implementation, the fourth slice allowance information element is a new slice information element obtained after extending the existing slice information element for carrying the Allowed S-NSSAI. The existing slice information element for carrying the Allowed S-NSSAI supports carrying up to 8 AllowedS-NSSAIs, and the fourth slice allowance information element supports carrying M (greater than 8) Allowed S-NSSAIs. By extending the existing slice information element, the protocol changes are relatively small. Of course, the fourth slice allowance information element may also be a newly defined slice information element, and the embodiments of the present application do not specifically limit this.

[0186] In another possible implementation, the first registration acceptance message includes a fifth slice allow information element and a sixth slice allow information element, and the fifth slice allow information element and the sixth slice allow information element are used to indicate the S-NSSAI allowed by the first network device among N S-NSSAIs, that is, Allowed S-NSSAI, the fifth slice allow information element is used to carry 8 Allowed S-NSSAIs, and the sixth slice allow information element is used to carry (M-8) Allowed S-NSSAIs.

[0187] It should be understood that in a possible implementation, the fifth slice allowance cell is an existing slice allowance cell for carrying Allowed S-NSSAI, and the existing slice allowance cell for carrying Allowed S-NSSAI supports carrying up to 8 AllowedS-NSSAIs, and the sixth slice allowance cell is a newly added slice allowance cell for carrying Allowed S-NSSAI. Among them, the specifications of the sixth slice allowance cell may be the same as those of the fifth slice allowance cell, that is, the specifications of the existing slice allowance cell may be reused. Of course, the specifications of the sixth slice allowance cell may also be different from those of the fifth slice allowance cell, and the embodiments of the present application do not specifically limit this.

[0188] In another possible implementation, the message used to carry the Allowed NSSAI may not be the above-mentioned first registration acceptance message, but a newly defined message, which is not limited in this application.

[0189] For S-NSSAI not allowed by the first network device:

[0190] In one possible implementation, the first registration acceptance message includes a fourth slice rejection cell, and the fourth slice rejection cell is used to indicate the S-NSSAI that is not allowed by the first network device among the N S-NSSAIs, that is, the Rejected S-NSSAI, and the fourth slice rejection cell is used to carry X Rejected S-NSSAIs, where X is a positive integer greater than 8. It should be understood that in one possible implementation, the fourth slice rejection cell is a new slice cell obtained by extending the existing slice cell for carrying the Rejected S-NSSAI. The existing slice cell for carrying the Rejected S-NSSAI supports carrying up to 8 Rejected S-NSSAIs, and the fourth slice rejection cell supports carrying X (greater than 8) Rejected S-NSSAIs. By extending the existing slice cell, the protocol is slightly changed. Of course, the fourth slice rejection cell can also be a newly defined slice cell, and the embodiments of the present application do not specifically limit this.

[0191] In another possible implementation, the first registration acceptance message includes a fifth slice rejection information element and a sixth slice rejection information element, and the fifth slice rejection information element and the sixth slice rejection information element are used to indicate the S-NSSAI that is not allowed by the first network device among the N S-NSSAIs, that is, the Rejected S-NSSAI, and the fifth slice rejection information element is used to carry 8 Rejected S-NSSAIs, and the sixth slice rejection information element is used to carry (X-8) Rejected S-NSSAIs.

[0192] It should be understood that in a possible implementation, the fifth slice rejection cell is an existing slice cell for carrying Rejected S-NSSAI, and the existing slice cell for carrying Rejected S-NSSAI supports carrying up to 8 Rejected S-NSSAIs, and the sixth slice cell is a newly added slice cell for carrying Rejected S-NSSAI. Among them, the specifications of the sixth slice rejection cell can be the same as the specifications of the fifth slice rejection cell, that is, the specifications of the existing slice cells can be reused. Of course, the specifications of the sixth slice rejection cell can also be different from the specifications of the fifth slice rejection cell, and the embodiments of the present application do not make specific limitations on this.

[0193] In another possible implementation, the message used to carry the Rejected NSSAI may not be the above-mentioned first registration acceptance message, but a newly defined message, which is not limited in this application.

[0194] In the embodiment of the present application, the first registration acceptance message is also used to indicate the NSSAI of the pending request of the first network device.

[0195] For the pending S-NSSAI of the first network device, in a possible implementation, the first registration acceptance message includes a fourth slice pending information element, and the fourth slice pending information element is used to indicate the pending S-NSSAI of the first network device among N S-NSSAIs, that is, the Pending S-NSSAI, and the fourth slice pending information element is used to carry Z Pending S-NSSAIs, where Z is a positive integer greater than 8.

[0196] It should be understood that in a possible implementation, the fourth slice pending cell is a new slice cell obtained by expanding the existing slice cell for carrying the pending S-NSSAI. The existing slice cell for carrying the pending S-NSSAI supports carrying up to 8 pending S-NSSAIs, while the fourth slice pending cell supports carrying Z (greater than 8) pending S-NSSAIs. By expanding the existing slice cells, the protocol is slightly changed. Of course, the fourth slice pending cell can also be a newly defined slice cell, which is not specifically limited in the embodiments of the present application.

[0197] In another possible implementation, the first registration acceptance message includes a fifth slice pending information element and a sixth slice pending information element, and the fifth slice pending information element and the sixth slice pending information element are used to indicate the pending S-NSSAI of the first network device among N S-NSSAIs, that is, the Pending S-NSSAI, and the fifth slice pending information element is used to carry 8 Pending S-NSSAIs, and the sixth slice pending information element is used to carry (Z-8) Pending S-NSSAIs.

[0198] It should be understood that in a possible implementation, the fifth slice pending cell is an existing slice cell for carrying pending S-NSSAI, and the existing slice cell for carrying pending S-NSSAI supports carrying up to 8 pending S-NSSAIs, and the sixth slice cell is a newly added slice cell for carrying pending S-NSSAI. Among them, the specifications of the sixth slice pending cell can be the same as the specifications of the fifth slice pending cell, that is, the specifications of the existing slice cells can be reused. Of course, the specifications of the sixth slice pending cell can also be different from the specifications of the fifth slice pending cell, and the embodiments of the present application do not make specific limitations on this.

[0199] S730: The terminal device determines whether the first network device allows the requested NSSAI according to the first registration acceptance message.

[0200] Optionally, in an embodiment of the present application, the terminal device may further switch PLMN to process the service based on whether the first network device allows the requested NSSAI, and the embodiment of the present application does not specifically limit this.

[0201] In the communication method provided by the embodiment of the present application, the S-NSSAI included in the Requested NSSAI indicated by the first registration request message is more than 8, and the first registration acceptance message received by the terminal device indicates whether the first network device allows the requested NSSAI. In this way, the terminal device can obtain information on whether the first network device allows the requested NSSAI (greater than 8 S-NSSAI) by sending a registration request message once, thereby avoiding the waste of resources caused by the terminal device frequently sending the first registration request message to the first network device.

[0202] based on Figure 7 In a corresponding embodiment, further, the first registration request message may also include first indication information for indicating that the terminal device supports slice-based network selection. Figure 8 As shown, another communication method provided by the embodiment of the present application is provided. The method is based on Figure 3 The communication system shown is explained by taking the interaction between the terminal device, the first network device and the second network device as an example. Of course, the subject that executes the terminal device action in the method can also be a device / module in the terminal device, such as a chip, processor, processing unit, etc. in the terminal device; the subject that executes the network device (including the first network device and the second network device) action in the method can also be a device / module in the network device, such as a chip, processor, processing unit, etc. in the network device, and the embodiments of the present application do not make specific limitations on this. Figure 8 As shown, method 800 includes:

[0203] S810: The terminal device sends a first registration request message to the first network device. Correspondingly, the first network device receives the first registration request message from the terminal device.

[0204] In the embodiment of the present application, the first registration request message includes Requested NSSAI. For details about the first registration request message including Requested NSSAI, please refer to the description in step S710, which will not be repeated here.

[0205] In addition, in an embodiment of the present application, the first registration request message also includes first indication information, and the first indication information is used to indicate that the terminal device supports slice-based network selection.

[0206] S820: The first network device sends a first acquisition request to the second network device. Correspondingly, the second network device receives the first acquisition request from the first network device.

[0207] In an embodiment of the present application, the first acquisition request is used to request information of the first PLMN set. The first PLMN set may include all PLMNs subscribed to by the terminal device, or the first PLMN set may include the PLMNs included in the RA registered by the terminal device, or the first PLMN set may be a PLMN related to the terminal device. This application does not limit this.

[0208] Optionally, in an embodiment of the present application, the first PLMN set is determined based on the first indication information.

[0209] S830: The second network device sends a first acquisition response to the first network device. Correspondingly, the first network device receives the first acquisition response from the second network device.

[0210] In an embodiment of the present application, the first acquisition response is used to indicate whether the first network device corresponding to the PLMN in the first PLMN set allows the corresponding NSSAI.

[0211] In the embodiment of the present application, the corresponding NSSAI may be a Requested NSSAI or a Configured NSSAI, which is not limited in the present application. It should be understood that the slice information element carrying the Requested NSSAI may be, for example, the above-mentioned Figure 7 The first slice information element, the second slice information element and the third slice information element described in the corresponding embodiment may also be other new information elements, which are not limited in the embodiment of the present application. The slice information element that carries the indication of whether the first network device allows the corresponding NSSAI may be the above Figure 7The fourth slice allow information element, the fifth slice allow information element and the sixth slice allow information element, the fourth slice reject information element, the fifth slice reject information element and the sixth slice reject information element described in the corresponding embodiment may also be other new information elements, and this application does not limit this.

[0212] S840: The first network device sends a first registration acceptance message to the terminal device. Correspondingly, the terminal device receives the first registration acceptance message from the first network device.

[0213] In the embodiment of the present application, the first registration acceptance message is used to indicate whether the first network device allows the description of the RequestedNSSAI. Please refer to the description in step S720 and will not be repeated here.

[0214] In addition, in the embodiment of the present application, the first registration acceptance message is also used to indicate the first acquisition response.

[0215] S850: The terminal device selects a network based on the Requested NSSAI according to the first registration acceptance message.

[0216] In one possible implementation, the terminal device chooses to allow access to all PLMNs with Requested NSSAI, or the terminal device chooses to allow access to the PLMNs with the most Requested NSSAI, which is not limited in this application.

[0217] In the communication method provided by the embodiment of the present application, the number of S-NSSAIs included in the Requested NSSAI indicated by the first registration request message is more than 8, and the first registration acceptance message received by the terminal device indicates whether the first network device allows the requested NSSAI. In this way, the terminal device can obtain information on whether the first network device allows the requested NSSAI (greater than 8 S-NSSAIs) by sending a registration request message once, thereby avoiding the waste of resources caused by the terminal device frequently sending the first registration request message to the first network device. Furthermore, the first registration request message also includes first indication information for indicating that the terminal device supports slice-based network selection, so that the terminal device obtains an indication in the first registration acceptance message indicating whether the first network device corresponding to the PLMN in the first PLMN set allows the corresponding NSSAI, so that the terminal device can select a network based on the Requested NSSAI.

[0218] Fig. 9 Schematic diagram of an example of a communication method provided in an embodiment of the present application. Figure 4The communication system shown is explained by taking the interaction between the terminal device and the second network device as an example. Of course, the subject that executes the terminal device action in the method can also be a device / module in the terminal device, such as a chip, processor, processing unit, etc. in the terminal device; the subject that executes the second network device action in the method can also be a device / module in the network device, such as a chip, processor, processing unit, etc. in the network device, and the embodiment of the application does not specifically limit this.

[0219] like Fig. 9 As shown, method 900 includes:

[0220] S910, the terminal device obtains first slice information.

[0221] In an embodiment of the present application, the first slice information includes first indication information and / or a first request message, the first indication information is used to indicate that the terminal device supports slice-based network selection, the first request message includes a requested NSSAI, the requested NSSAI includes Y S-NSSAIs, Y is a positive integer, and this embodiment of the present application is not limited to this.

[0222] The relevant description of the first indication information can be found in Figure 8 In the embodiment described above, when Y is greater than 8, the description of the first request message can refer to Figure 7 The relevant description of the first registration request in the embodiment is not repeated here.

[0223] S920: When the terminal device has the first security authentication key and the first security context, the terminal device sends a second registration request message to the second network device. Correspondingly, the second network device receives the second registration request message from the terminal device.

[0224] Among them, the second registration request message includes the first slice information.

[0225] In an embodiment of the present application, when the terminal device sends the second registration request message, if the terminal device has the first security authentication key and the first security context, the terminal device includes the first slice request message in the second registration request message and sends it. In a possible implementation, the terminal device sends the second registration request message to the second network device through the first network device, and this embodiment of the present application does not specifically limit this.

[0226] In the embodiment of the present application, when the terminal device sends the second registration request message and there is a first security authentication key and a first security context, the first slice information sent by the terminal device through the second registration request message is included in the first container information element and sent, wherein the first container information element is generated by the first security authentication key and the first slice information. This scheme enables the terminal device to send the first slice information through the encrypted first container information element, thereby further ensuring the security of the transmission of the first slice information.

[0227] In the embodiment of the present application, the first container may be a steering of roaming (SOR) transparent container.

[0228] S930, the second network device determines whether to allow the corresponding NASSI based on the first slice information.

[0229] When the first slice information includes a first request message, the second network device determines whether to allow the requested NSSAI based on the first request message; when the first slice information includes first indication information, the second network device determines whether the network device corresponding to the PLMN in the first PLMN set allows the corresponding NASSI information based on the first indication information.

[0230] In the embodiment of the present application, when the first slice information includes a first request message, the second network device determines whether to allow the requested NSSAI according to the first request message. For related descriptions, refer to Figure 7 When the first slice information includes the first indication information, the second network device determines whether the network device corresponding to the PLMN in the first PLMN set allows the corresponding NSSAI according to the first indication information. For related descriptions, refer to Figure 8 The embodiments described above will not be described in detail here.

[0231] The communication method provided in the embodiment of the present application can ensure that the terminal device sends the first slice information based on the security mode because the terminal device can send the first slice information through the second registration request message when the first security authentication key and the first security context exist.

[0232] Fig.10 Schematic diagram of an example of a communication method provided in an embodiment of the present application. Figure 4The communication system shown is explained by taking the interaction between the terminal device and the second network device as an example. Of course, the subject that executes the terminal device action in the method can also be a device / module in the terminal device, such as a chip, processor, processing unit, etc. in the terminal device; the subject that executes the second network device action in the method can also be a device / module in the network device, such as a chip, processor, processing unit, etc. in the network device, and the embodiment of the application does not make specific limitations on this. Fig.10 As shown, method 1000 includes:

[0233] S1010, the terminal device obtains first slice information.

[0234] The relevant description of the first indication information can be found in Figure 8 In the embodiment described above, when Y is greater than 8, the description of the first request message can refer to Figure 7 The relevant description of the first registration request in the embodiment is not repeated here.

[0235] S1020: When the terminal device does not have the first security authentication key and the first security context, the terminal device sends a second registration request message to the second network device. Correspondingly, the second network device receives the second registration request message from the terminal device.

[0236] In an embodiment of the present application, when the terminal device sends a second registration request message to the second network device, the terminal device does not have a first security authentication key or a first security context, so the terminal device does not include the first slice information in the second registration request message.

[0237] S1030: The second network device sends a security mode command to the terminal device. Correspondingly, the terminal device receives the security mode command from the second network device.

[0238] The security mode command includes a second security authentication key or a second security context.

[0239] That is to say, in an embodiment of the present application, the security mode process of the second network device can be triggered through a security mode command, and then, through the security mode process, a second security authentication key or a second security context is present on the terminal device; or, the second security authentication key or the second security context is activated through the security mode command.

[0240] In a possible implementation, the terminal device receives the security mode command from the second network device through the first network device, which is not limited in this application.

[0241] S1040: The terminal device sends a security mode completion message to the second network device. Correspondingly, the second network device receives the security mode completion message from the terminal device.

[0242] In the embodiment of the present application, the security mode complete message is used to indicate that the terminal device has acquired the second security context and the second security authentication key. Exemplarily, the security mode complete message may be a Security mode complete message.

[0243] Among them, the security mode completion message includes the first slice information.

[0244] In an embodiment of the present application, the terminal device triggers the security mode process by sending a second registration request message to the second network device, so that the terminal device has a second security authentication key and a second security context after the security mode process. Further, the terminal device sends a security mode completion message containing the first slice information to the second network device. In a possible implementation, the terminal device sends a security mode completion message to the second network device through the first network device, and this embodiment of the present application does not specifically limit this.

[0245] In a possible implementation, in an embodiment of the present application, when the terminal device sends the second registration request message, if there is no first security authentication key or first security context, the first slice information sent by the terminal device through the security mode completion message is included in the second container information element, wherein the second container information element is generated by the second security authentication key and the first slice information. This scheme enables the terminal device to send the first slice information through the encrypted second container information element, thereby further ensuring the security of the transmission of the first slice information.

[0246] Exemplarily, in the embodiment of the present application, the second container is a SOR-controlled transparent container.

[0247] S1050: The second network device determines whether to allow the corresponding NASSI according to the first request message.

[0248] In the embodiment of the present application, the description on whether the second network device determines whether to allow the corresponding NSSAI according to the first request message can be referred to Fig. 9 The embodiments described above will not be described in detail here.

[0249] According to the communication method provided in the embodiment of the present application, when the terminal device sends the second registration request message to the second network device, the terminal device does not have the first security authentication key and the first security context. The terminal device obtains the second security authentication key and the second security context through the security mode process, and then sends the first slice information through the security mode completion message, so that the terminal device can send the first slice information through the encrypted second container element, thereby ensuring that the terminal device sends the first slice information based on the security mode.

[0250] Fig.11 Schematic diagram of an example of a communication method provided in an embodiment of the present application. Figure 4 The communication system shown is explained by taking the interaction between the terminal device and the second network device as an example. Of course, the subject that executes the terminal device action in the method can also be a device / module in the terminal device, such as a chip, processor, processing unit, etc. in the terminal device; the subject that executes the second network device action in the method can also be a device / module in the network device, such as a chip, processor, processing unit, etc. in the network device, and the embodiment of the application does not make specific limitations on this. Fig.11 As shown, the method 1100 includes:

[0251] S1110, the terminal device obtains the first slice information.

[0252] In the embodiment of the present application, reference may be made to the relevant description of step S710 or step S810 regarding the first slice information, which will not be repeated here.

[0253] S1120, the terminal device sends the first slice information to the second network device. Correspondingly, the second network device receives the first slice information from the terminal device.

[0254] In a possible implementation, when the terminal device sends the second registration request message, there is a first security authentication key and a first security context, and the terminal device sends the first slice information through the second registration request message. For example, reference may be made to the relevant description in step S920, which will not be repeated here.

[0255] In another possible implementation, when the first security authentication key and the first security context do not exist when the terminal device sends the second registration request message, the terminal device sends the first slice information to the second network device through a security mode completion message. For details, refer to the relevant descriptions in steps S1020 to S1040, which will not be repeated here.

[0256] S1130: The second network device determines whether to allow the corresponding NASSI according to the first request message.

[0257] In the embodiment of the present application, the description on whether the second network device determines whether to allow the corresponding NSSAI according to the first request message can be referred to Fig. 9 The embodiments described above will not be described in detail here.

[0258] The communication method provided by the embodiment of the present application is that the terminal device can send the first slice information through the second registration request message when the first security authentication key and the first security context exist; or, the terminal device can send the first slice information through the security mode completion message when the first security authentication key and the first security context do not exist, and the security mode completion message is triggered after the terminal device obtains the security authentication key and the security context. Therefore, this scheme can ensure that the terminal device sends the first slice information based on the security mode.

[0259] Fig.12 Schematic diagram of an example of a communication method provided in an embodiment of the present application. Figure 5 The communication system shown is explained by taking the interaction between the second network device and the third network device as an example. Of course, the subject that executes the action of the second network device in the method can also be a device / module in the second network device, such as a chip, processor, processing unit, etc. in the second network device; the subject that executes the action of the third network device in the method can also be a device / module in the third network device, such as a chip, processor, processing unit, etc. in the network device, and the embodiment of the present application does not make specific limitations on this. Fig.12 As shown, the method 1200 includes:

[0260] S1210: The second network device receives a third container cell from the terminal device.

[0261] In an embodiment of the present application, the third container information element includes a first parameter and a first message verification code, the first parameter includes first slice information, the first slice information includes first indication information or a first request message, the first indication information is used to indicate that the terminal device supports slice-based network selection, the first request message is used to request NSSAI, the requested NSSAI includes X S-NSSAIs, X is a positive integer, and the embodiment of the present application is not limited to this.

[0262] In the embodiment of the present application, the first parameter may be a subscription permanent identifier (SUPI).

[0263] In the embodiment of the present application, the relevant description of the first indication information and the first request message can refer to the relevant description in method 800, which will not be repeated here.

[0264] In the embodiment of the present application, the third container cell may be the first container cell in the method embodiment 900, or the second container cell in the method 1000, and the present application does not limit this.

[0265] In a possible implementation, the first parameter also includes header information and counter information.

[0266] In an embodiment of the present application, for example, the first slice information may be SOR data SOR Data, and for example, the first parameter may include SOR Data, header information (SOR head), and counter information (SOR container), which is not limited in the present application.

[0267] S1220: The second network device sends the first parameter and the first message verification code to the third network device. Correspondingly, the third network device receives the first parameter and the first message verification code from the second network device.

[0268] In the embodiment of the present application, the first message authentication code is obtained by the terminal device through the security mode process described in method 1000. For example, the first message authentication code is generated by the first security authentication key or the second security authentication key described in method 900 or method 1000. Exemplarily, the first message authentication code can be a SOR-MAC-IUE message, which is not limited in the embodiment of the present application.

[0269] S1230: The third network device determines that the security verification is successful based on the first message verification code and the second message verification code being the same.

[0270] In an embodiment of the present application, the second message verification code is determined by the third network device based on the first parameter. Exemplarily, the second message verification code is calculated by the third network device based on the SOR head and the SOR container, and the present application does not limit this. Further, the third network device can determine that the security verification is successful based on the fact that the second message verification code is the same as the first message verification code.

[0271] In the embodiment of the present application, the second message authentication code may be a SOR-XMAC-IUE message.

[0272] S1240: The third network device sends a security check reply message to the second network device. Correspondingly, the second network device receives the security check reply message from the third network device.

[0273] In the embodiment of the present application, the security verification reply message is used to indicate that the security verification is successful. In a possible implementation, the security verification reply message includes a first identifier, and the first identifier is used to indicate that the security verification is successful, or the first identifier indicates that the first message verification code and the second message verification code are the same, which is not limited in the embodiment of the present application.

[0274] S1250: The second network device determines that the security verification is successful based on the security verification reply message.

[0275] In the embodiment of the present application, the second network device determines that the security check is successful according to the first identifier in the security check reply message. The second network device determines that the security check is successful according to the first identifier in the security check reply message. The second network device only needs to obtain the first identifier to determine that the security check is successful, and the implementation complexity is low.

[0276] The communication method provided in the embodiment of the present application makes the integrity verification of the third container cell successful through the integrity verification process of the third container cell, thereby ensuring the security of the system.

[0277] Fig.13 Schematic diagram of an example of a communication method provided in an embodiment of the present application. Figure 5 The communication system shown is explained by taking the interaction between the second network device and the third network device as an example. Of course, the subject that executes the action of the second network device in the method can also be a device / module in the second network device, such as a chip, processor, processing unit, etc. in the second network device; the subject that executes the action of the third network device in the method can also be a device / module in the third network device, such as a chip, processor, processing unit, etc. in the network device, and the embodiment of the present application does not make specific limitations on this. Fig.13 As shown, the method 1300 includes:

[0278] S1310: The second network device receives a third container cell from a terminal device.

[0279] In the embodiment of the present application, the description of the third container information element can refer to the relevant description of step S1210, which will not be repeated here.

[0280] S1320: The second network device sends the first parameter to the third network device. Correspondingly, the third network device receives the first parameter from the second network device.

[0281] S1330: The third network device determines a second message verification code according to the first parameter.

[0282] In the embodiment of the present application, regarding how to determine the second message authentication code according to the first parameter and the specific form of the second message authentication code, reference may be made to the relevant description of step S1230, which will not be repeated here.

[0283] S1340: The third network device sends a security check reply message to the second network device. Correspondingly, the second network device receives the security check reply message from the third network device.

[0284] In the embodiment of the present application, the security verification reply message includes the second message verification code. The third network device only needs to determine the second message verification code according to the received first parameter, and the implementation complexity is low.

[0285] S1350: The second network device determines that the security verification is successful based on the first message verification code and the second message verification code being the same.

[0286] In the embodiment of the present application, the second network device compares the second message verification code in the security verification message with the first message verification code in the third container element. If the first message verification code is the same as the second message verification code, the second network device determines that the security verification is successful.

[0287] The communication method provided in the embodiment of the present application makes the integrity verification of the third container cell successful through the integrity verification process of the third container cell, thereby ensuring the security of the system.

[0288] Above Figures 7 to 13 The corresponding embodiment mainly introduces the scheme provided by the embodiment of the present application from the perspective of interaction between devices. Accordingly, the embodiment of the present application also provides a communication device, which is used to implement the above-mentioned various methods. The communication device can be a terminal device in the above-mentioned method embodiment, or a device including the above-mentioned terminal device, or a component that can be used for the terminal device; or, the communication device can be a first network device in the above-mentioned method embodiment, or a device including the above-mentioned first network device, or a component that can be used for the first network device; or, the communication device can be a second network device in the above-mentioned method embodiment, or a device including the above-mentioned second network device, or a component that can be used for the second network device; or, the communication device can be a third network device in the above-mentioned method embodiment, or a device including the above-mentioned third network device, or a component that can be used for the third network device. It can be understood that in order to realize the above-mentioned functions, the communication device includes a hardware structure and / or software module corresponding to each function. Those skilled in the art should easily realize that, in combination with the units and algorithm steps of each example described in the embodiments disclosed herein, the present application can be implemented in the form of hardware or a combination of hardware and computer software. Whether a function is executed in the form of hardware or computer software driving hardware depends on the specific application and design constraints of the technical solution. Professional technicians can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0289] The embodiment of the present application can divide the functional modules of the communication device according to the above method embodiment. For example, each functional module can be divided according to each function, or two or more functions can be integrated into one processing module. The above integrated module can be implemented in the form of hardware or in the form of software functional modules. It should be understood that the division of modules in the embodiment of the present application is schematic and is only a logical function division. There may be other division methods in actual implementation.

[0290] In one possible implementation, Fig.14 14 is a schematic diagram of a communication device provided in an embodiment of the present application. Taking the communication device as the terminal device in the above method embodiment as an example, the communication device 1400 includes a transceiver module 1410 and a processing module 1420. The transceiver module 1410, which may also be referred to as a transceiver unit, is used to implement the transceiver function, and may be, for example, a transceiver circuit, a transceiver, a transceiver or a communication interface.

[0291] The transceiver module 1410 is configured to send a first registration request message to a first network device.

[0292] In an embodiment of the present application, the first registration request message includes a requested NSSAI, and the requested NSSAI includes N S-NSSAIs, where N is a positive integer greater than 8.

[0293] The transceiver module 1410 is further configured to receive a first registration acceptance message from the first network device.

[0294] In the embodiment of the present application, the first registration acceptance message indicates whether the first network device allows the requested NSSAI.

[0295] For the first registration request message, in a possible implementation, the first registration request message includes a first slice information element, and the first slice information element is used to carry the requested NSSAI.

[0296] In another possible implementation, the first registration request message includes a second slice information element and a third slice information element, and the second slice information element and the third slice information element are used to carry the requested NSSAI, wherein the second slice information element is used to carry the 8 S-NSSAIs included in the requested NSSAI, and the third slice information element is used to carry the (N-8) S-NSSAIs included in the requested NSSAI.

[0297] For the first registration acceptance message, in a possible implementation, the first registration acceptance message includes a fourth slice allow information element, the fourth slice allow information element indicates the S-NSSAI allowed by the first network device among the N requested S-NSSAIs, and the fourth slice allow information element is used to carry M S-NSSAIs allowed by the first network device, where M is a positive integer greater than 8.

[0298] In another possible implementation, the first registration acceptance message includes a fourth slice rejection element, and the fourth slice rejection element indicates the S-NSSAI that is not allowed by the first network device among the N requested S-NSSAIs. The fourth slice rejection element is used to carry K S-NSSAIs that are not allowed by the first network device, where K is a positive integer greater than 8.

[0299] In one possible implementation, the first registration acceptance message includes a fifth slice allow information element and a sixth slice allow information element, and the fifth slice allow information element and the sixth slice allow information element are used to indicate the S-NSSAI allowed by the first network device among the N requested S-NSSAIs, wherein the fifth slice allow information element is used to carry 8 S-NSSAIs allowed by the first network device, and the sixth slice allow information element is used to carry M-8 S-NSSAIs allowed by the first network device, where M is a positive integer greater than 8.

[0300] In another possible implementation, the first registration acceptance message includes a fifth slice rejection element and a sixth slice rejection element, and the fifth slice rejection element and the sixth slice rejection element are used to indicate the S-NSSAIs that are not allowed by the first network device among the N requested S-NSSAIs, wherein the fifth slice rejection element is used to carry 8 S-NSSAIs that are not allowed by the first network device, and the sixth slice rejection element is used to carry K-8 S-NSSAIs that are not allowed by the first network device, and X is a positive integer greater than 8.

[0301] Among them, all relevant contents of each step involved in the above method embodiment can be referred to the functional description of the corresponding functional module, and will not be repeated here. Optionally, the communication device 1400 may also include a storage module, and the storage module 1430 may be used to store instructions or and / or data, and the processing module 1420 may read the instructions or and / or data in the storage module 1430.

[0302] In the embodiment of the present application, the communication device 1400 is presented in the form of dividing various functional modules in an integrated manner. The "module" here may refer to a specific ASIC, a circuit, a processor and a memory that executes one or more software or firmware programs, an integrated logic circuit, and / or other devices that can provide the above functions. In a simple embodiment, a person skilled in the art can imagine that the communication device 1400 can be used Figure 6 The form of the communication device 600 is shown.

[0303] for example, Figure 6 The processor 601 in the communication device 600 shown may call the computer-executable instructions stored in the memory 603 to enable the communication device 600 to execute the signal transmission method in the above method embodiment.

[0304] Specifically, Fig.14 The functions / implementation processes of the transceiver module 1410 and the processing module 1420 in the embodiment can be Figure 6 The processor 601 in the communication device 600 shown calls the computer execution instructions stored in the memory 603 to implement. Or, Fig.14 The function / implementation process of the processing module 1420 can be Figure 6 The processor 601 in the communication device 600 shown calls the computer execution instructions stored in the memory 603 to implement, Fig.14 The function / implementation process of the transceiver module 1410 can be Figure 6 The communication interface 604 in the communication device 600 shown in FIG. 6 is implemented.

[0305] Since the communication device 1400 provided in the embodiment of the present application can execute the above-mentioned signal transmission method, the technical effects that can be obtained can refer to the above-mentioned method embodiment and will not be repeated here.

[0306] In one possible implementation, Fig.14 14 is a schematic diagram of a communication device provided in an embodiment of the present application, and taking the communication device as the first network device in the above method embodiment as an example, the first network device 1400 includes a transceiver module 1410 and a processing module 1420. The transceiver module 1410, which may also be referred to as a transceiver unit for implementing a transceiver function, may be, for example, a transceiver circuit, a transceiver, a transceiver or a communication interface.

[0307] The transceiver module 1410 is used to receive a first registration request message from a terminal device.

[0308] In an embodiment of the present application, the first registration request message includes a requested NSSAI, and the requested NSSAI includes N S-NSSAIs, where N is a positive integer greater than 8.

[0309] The transceiver module 1410 is further configured to send a first registration acceptance message to the terminal device.

[0310] In the embodiment of the present application, the first registration acceptance message indicates whether the first network device allows the requested NSSAI.

[0311] For the first registration request message, in a possible implementation, the first registration request message includes a first slice information element, and the first slice information element is used to carry the requested NSSAI.

[0312] In another possible implementation, the first registration request message includes a second slice information element and a third slice information element, and the second slice information element and the third slice information element are used to carry the requested NSSAI, wherein the second slice information element is used to carry the 8 S-NSSAIs included in the requested NSSAI, and the third slice information element is used to carry the (N-8) S-NSSAIs included in the requested NSSAI.

[0313] For the first registration acceptance message, in a possible implementation, the first registration acceptance message includes a fourth slice allow information element, the fourth slice allow information element indicates the S-NSSAI allowed by the first network device among the N requested S-NSSAIs, and the fourth slice allow information element is used to carry M S-NSSAIs allowed by the first network device, where M is a positive integer greater than 8.

[0314] In another possible implementation, the first registration acceptance message includes a fourth slice rejection element, and the fourth slice rejection element indicates the S-NSSAI that is not allowed by the first network device among the N requested S-NSSAIs. The fourth slice rejection element is used to carry K S-NSSAIs that are not allowed by the first network device, where K is a positive integer greater than 8.

[0315] In one possible implementation, the first registration acceptance message includes a fifth slice allow information element and a sixth slice allow information element, and the fifth slice allow information element and the sixth slice allow information element are used to indicate the S-NSSAI allowed by the first network device among the N requested S-NSSAIs, wherein the fifth slice allow information element is used to carry 8 S-NSSAIs allowed by the first network device, and the sixth slice allow information element is used to carry M-8 S-NSSAIs allowed by the first network device, where M is a positive integer greater than 8.

[0316] In another possible implementation, the first registration acceptance message includes a fifth slice rejection element and a sixth slice rejection element, and the fifth slice rejection element and the sixth slice rejection element are used to indicate the S-NSSAIs that are not allowed by the first network device among the N requested S-NSSAIs, wherein the fifth slice rejection element is used to carry 8 S-NSSAIs that are not allowed by the first network device, and the sixth slice rejection element is used to carry K-8 S-NSSAIs that are not allowed by the first network device, and X is a positive integer greater than 8.

[0317] Among them, all relevant contents of each step involved in the above method embodiment can be referred to the functional description of the corresponding functional module, which will not be repeated here. Optionally, the communication device 1400 can also include a storage module 1430, which can be used to store instructions and / or data, and the processing module 1420 can read the instructions and / or data in the storage module.

[0318] In the embodiment of the present application, the first network device 1400 is presented in the form of dividing various functional modules in an integrated manner. The "module" here can refer to a specific ASIC, a circuit, a processor and a memory that executes one or more software or firmware programs, an integrated logic circuit, and / or other devices that can provide the above functions. In a simple embodiment, a person skilled in the art can imagine that the first network device 1400 can be used Figure 6The form of the communication device 600 is shown.

[0319] for example, Figure 6 The processor 601 in the communication device 600 shown may call the computer-executable instructions stored in the memory 603 to enable the communication device 600 to execute the signal transmission method in the above method embodiment.

[0320] Specifically, Fig.14 The functions / implementation processes of the transceiver module 1410 and the processing module 1420 in the embodiment can be Figure 6 The processor 601 in the communication device 600 shown calls the computer execution instructions stored in the memory 603 to implement. Or, Fig.14 The function / implementation process of the processing module 1420 can be Figure 6 The processor 601 in the communication device 600 shown calls the computer execution instructions stored in the memory 603 to implement, Fig.14 The function / implementation process of the transceiver module 1410 can be Figure 6 The communication interface 604 in the communication device 600 shown in FIG. 6 is implemented.

[0321] Since the first network device 1400 provided in the embodiment of the present application can execute the above-mentioned signal transmission method, the technical effects that can be obtained can refer to the above-mentioned method embodiment and will not be repeated here.

[0322] Above Figures 9 to 11 The corresponding embodiment mainly introduces the scheme provided by the embodiment of the present application from the perspective of interaction between the terminal device and the second network device. Accordingly, the embodiment of the present application also provides a communication device, which is used to implement the above-mentioned various methods. The communication device can be a terminal device in the above-mentioned method embodiment, or a device including the above-mentioned terminal device, or a component that can be used for the terminal device; or, the communication device can be a second network device in the above-mentioned method embodiment, or a device including the above-mentioned second network device, or a component that can be used for the second network device. It can be understood that in order to realize the above-mentioned functions, the communication device includes a hardware structure and / or software module corresponding to each function. It should be easy for those skilled in the art to realize that, in combination with the units and algorithm steps of each example described in the embodiment disclosed herein, the present application can be implemented in the form of hardware or a combination of hardware and computer software. Whether a function is executed in the form of hardware or computer software driving hardware depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to exceed the scope of the present application.

[0323] The embodiment of the present application can divide the functional modules of the communication device according to the above method embodiment. For example, each functional module can be divided according to each function, or two or more functions can be integrated into one processing module. The above integrated module can be implemented in the form of hardware or in the form of software functional modules. It should be understood that the division of modules in the embodiment of the present application is schematic and is only a logical function division. There may be other division methods in actual implementation.

[0324] In one possible implementation, Fig.14 14 is a schematic diagram of a communication device provided in an embodiment of the present application. Taking the communication device as the terminal device in the above method embodiment as an example, the communication device 1400 includes a transceiver module 1410 and a processing module 1420. The transceiver module 1410, which may also be referred to as a transceiver unit, is used to implement the transceiver function, and may be, for example, a transceiver circuit, a transceiver, a transceiver or a communication interface.

[0325] The processing module 1420 is used to obtain first slice information.

[0326] In an embodiment of the present application, the first slice information includes first indication information or a first request message, the first indication information is used to indicate that the terminal device supports slice-based network selection, the first request message is used to request NSSAI, and the NSSAI includes Y S-NSSAIs, where Y is a positive integer.

[0327] The transceiver module 1410 is used to send the first slice information through the second registration request message when there is a first security authentication key and a first security context when the transceiver module 1410 sends the second registration request message; or to send the first slice information through a security mode completion message when there is no first security authentication key or first security context when the transceiver module 1410 sends the second registration request message.

[0328] In one possible implementation, when a first security authentication key and a first security context exist when a terminal device sends a second registration request message, the first slice information sent by the terminal device through the second registration request message is included in a first container element, wherein the first container element is generated by the first security authentication key and the first slice information.

[0329] In another possible implementation, when the terminal device does not have the first security authentication key or the first security context when the terminal device sends the second registration request message, the terminal device has the second security authentication key and the second security context before the terminal device sends the first slice information via a security mode completion message.

[0330] In another possible implementation, when the first security authentication key or the first security context does not exist when the terminal device sends the second registration request message, the first slice information sent by the terminal device through the security mode completion message is included in the second container information element, wherein the second container information element is generated by the second security authentication key and the first slice information. In the embodiment of the present application, the first container or the second container is a SOR controlled transparent container.

[0331] Among them, all relevant contents of each step involved in the above method embodiment can be referred to the functional description of the corresponding functional module, and will not be repeated here. Optionally, the communication device 1400 may also include a storage module, and the storage module 1430 may be used to store instructions or and / or data, and the processing module 1420 may read the instructions or and / or data in the storage module 1430.

[0332] In the embodiment of the present application, the communication device 1400 is presented in the form of dividing various functional modules in an integrated manner. The "module" here may refer to a specific ASIC, a circuit, a processor and a memory that executes one or more software or firmware programs, an integrated logic circuit, and / or other devices that can provide the above functions. In a simple embodiment, a person skilled in the art can imagine that the communication device 1400 can be used Figure 6 The form of the communication device 600 is shown.

[0333] for example, Figure 6 The processor 601 in the communication device 600 shown may call the computer-executable instructions stored in the memory 603 to enable the communication device 600 to execute the signal transmission method in the above method embodiment.

[0334] Specifically, Fig.14 The functions / implementation processes of the transceiver module 1410 and the processing module 1420 in the embodiment can be Figure 6 The processor 601 in the communication device 600 shown calls the computer execution instructions stored in the memory 603 to implement. Or, Fig.14 The function / implementation process of the processing module 1420 can be Figure 6 The processor 601 in the communication device 600 shown calls the computer execution instructions stored in the memory 603 to implement, Fig.14 The function / implementation process of the transceiver module 1410 can be Figure 6 The communication interface 604 in the communication device 600 shown in FIG. 6 is implemented.

[0335] Since the communication device 1400 provided in the embodiment of the present application can execute the above-mentioned signal transmission method, the technical effects that can be obtained can refer to the above-mentioned method embodiment and will not be repeated here.

[0336] In one possible implementation, Fig.14 14 is a schematic diagram of a communication device provided in an embodiment of the present application, and taking the communication device as the second network device in the above method embodiment as an example, the second network device 1400 includes a transceiver module 1410 and a processing module 1420. The transceiver module 1410, which may also be referred to as a transceiver unit for implementing a transceiver function, may be, for example, a transceiver circuit, a transceiver, a transceiver or a communication interface.

[0337] The transceiver module 1410 is used to receive the first slice information from the terminal device.

[0338] In an embodiment of the present application, the first slice information includes first indication information or a first request message, the first indication information is used to indicate that the terminal device supports slice-based network selection, the first request message is used to request NSSAI, the NSSAI includes Y single network slice auxiliary information S-NSSAI, Y is a positive integer, wherein, when the terminal device sends the second registration request message, the terminal device has a first security authentication key and a first security context, the first slice information is included in the second registration request message, or, when the terminal device sends the second registration request message, the terminal device does not have the first security authentication key or the first security context, the first slice information element is included in the security mode completion message;

[0339] The processing module 1420 is used to determine whether the corresponding NSSAI is allowed according to the first slice information.

[0340] In one possible implementation, when a first security authentication key and a first security context exist when a terminal device sends a second registration request message, the first slice information sent by the terminal device through the second registration request message is included in a first container element, wherein the first container element is generated by the first security authentication key and the first slice information.

[0341] In another possible implementation, when the terminal device does not have the first security authentication key or the first security context when the terminal device sends the second registration request message, the terminal device has the second security authentication key and the second security context before the terminal device sends the first slice information via a security mode completion message.

[0342] In another possible implementation, when the first security authentication key or the first security context does not exist when the terminal device sends the second registration request message, the first slice information sent by the terminal device through the security mode completion message is included in the second container information element, wherein the second container information element is generated by the second security authentication key and the first slice information. In the embodiment of the present application, the first container or the second container is a SOR controlled transparent container.

[0343] Among them, all relevant contents of each step involved in the above method embodiment can be referred to the functional description of the corresponding functional module, and will not be repeated here. Optionally, the communication device 1400 may also include a storage module, and the storage module 1430 may be used to store instructions or and / or data, and the processing module 1420 may read the instructions or and / or data in the storage module 1430.

[0344] In the embodiment of the present application, the second network device 1400 is presented in the form of dividing various functional modules in an integrated manner. The "module" here can refer to a specific ASIC, a circuit, a processor and a memory that executes one or more software or firmware programs, an integrated logic circuit, and / or other devices that can provide the above functions. In a simple embodiment, a person skilled in the art can imagine that the second network device 1400 can be used Figure 6 The form of the communication device 600 is shown.

[0345] for example, Figure 6 The processor 601 in the communication device 600 shown may call the computer-executable instructions stored in the memory 603 to enable the communication device 600 to execute the signal transmission method in the above method embodiment.

[0346] Specifically, Fig.14 The functions / implementation processes of the transceiver module 1410 and the processing module 1420 in the embodiment can be Figure 6 The processor 601 in the communication device 600 shown calls the computer execution instructions stored in the memory 603 to implement. Or, Fig.14 The function / implementation process of the processing module 1420 can be Figure 6 The processor 601 in the communication device 600 shown calls the computer execution instructions stored in the memory 603 to implement, Fig.14 The function / implementation process of the transceiver module 1410 can be Figure 6 The communication interface 604 in the communication device 600 shown in FIG. 6 is implemented.

[0347] Since the second network device 1400 provided in the embodiment of the present application can execute the above communication method, the technical effects that can be obtained can refer to the above method embodiment and will not be repeated here.

[0348] Above Fig.12 and Fig.13The corresponding embodiment mainly introduces the scheme provided by the embodiment of the present application from the perspective of interaction between the second network device and the third network device. Accordingly, the embodiment of the present application also provides a communication device, which is used to implement the above-mentioned various methods. The communication device can be a terminal device in the above-mentioned method embodiment, or a device including the above-mentioned second network device, or a component that can be used for the second network device; or, the communication device can be a third network device in the above-mentioned method embodiment, or a device including the above-mentioned third network device, or a component that can be used for the third network device. It can be understood that the communication device includes a hardware structure and / or software module corresponding to each function in order to implement the above-mentioned functions. It should be easy for those skilled in the art to realize that, in combination with the units and algorithm steps of each example described in the embodiment disclosed herein, the present application can be implemented in the form of hardware or a combination of hardware and computer software. Whether a function is executed in the form of hardware or computer software driving hardware depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to exceed the scope of the present application.

[0349] The embodiment of the present application can divide the functional modules of the communication device according to the above method embodiment. For example, each functional module can be divided according to each function, or two or more functions can be integrated into one processing module. The above integrated module can be implemented in the form of hardware or in the form of software functional modules. It should be understood that the division of modules in the embodiment of the present application is schematic and is only a logical function division. There may be other division methods in actual implementation.

[0350] In one possible implementation, Fig.14 14 is a schematic diagram of a communication device provided in an embodiment of the present application, and taking the communication device as the second network device in the above method embodiment as an example, the second network device 1400 includes a transceiver module 1410 and a processing module 1420. The transceiver module 1410, which may also be referred to as a transceiver unit for implementing a transceiver function, may be, for example, a transceiver circuit, a transceiver, a transceiver or a communication interface.

[0351] The processing module 1420 is configured to obtain a third container cell from the terminal device.

[0352] In an embodiment of the present application, the third container information element includes a first parameter and a first message verification code, the first parameter includes second slice information, the second slice information includes first indication information or a first request message, the first indication information is used to indicate that the terminal device supports slice-based network selection, the first request message is used to request NSSAI, NSSAI includes X S-NSSAIs, X is a positive integer, and the first parameter and the first message verification code are used by the second network device and the third network device to perform integrity verification on the third container information element;

[0353] The transceiver module 1410 is configured to send a first parameter and a first message verification code to a third network device;

[0354] The transceiver module 1410 is further configured to receive a security check reply message from a third network device.

[0355] In a possible implementation, the security verification reply message includes a first identifier, and the first identifier is used to indicate that the security verification is successful, or the first identifier indicates that the first message verification code is the same as the second message verification code.

[0356] In the embodiment of the present application, the first parameter also includes at least one of the following: header information and counter information.

[0357] Among them, all relevant contents of each step involved in the above method embodiment can be referred to the functional description of the corresponding functional module, and will not be repeated here. Optionally, the communication device 1400 may also include a storage module, and the storage module 1430 may be used to store instructions or and / or data, and the processing module 1420 may read the instructions or and / or data in the storage module 1430.

[0358] In the embodiment of the present application, the second network device 1400 is presented in the form of dividing various functional modules in an integrated manner. The "module" here can refer to a specific ASIC, a circuit, a processor and a memory that executes one or more software or firmware programs, an integrated logic circuit, and / or other devices that can provide the above functions. In a simple embodiment, a person skilled in the art can imagine that the second network device 1400 can be used Figure 6 The form of the communication device 600 is shown.

[0359] for example, Figure 6 The processor 601 in the communication device 600 shown may call the computer-executable instructions stored in the memory 603 to enable the communication device 600 to execute the signal transmission method in the above method embodiment.

[0360] Specifically, Fig.14 The functions / implementation processes of the transceiver module 1410 and the processing module 1420 in the embodiment can be Figure 6The processor 601 in the communication device 600 shown calls the computer execution instructions stored in the memory 603 to implement. Or, Fig.14 The function / implementation process of the processing module 1420 can be Figure 6 The processor 601 in the communication device 600 shown calls the computer execution instructions stored in the memory 603 to implement, Fig.14 The function / implementation process of the transceiver module 1410 can be Figure 6 The communication interface 604 in the communication device 600 shown in FIG. 6 is implemented.

[0361] Since the second network device 1400 provided in the embodiment of the present application can execute the above communication method, the technical effects that can be obtained can refer to the above method embodiment and will not be repeated here.

[0362] In one possible implementation, Fig.14 14 is a schematic diagram of a communication device provided in an embodiment of the present application. Taking the communication device as the third network device in the above method embodiment as an example, the third network device 1400 includes a transceiver module 1410 and a processing module 1420. The transceiver module 1410, which may also be referred to as a transceiver unit, is used to implement a transceiver function, and may be, for example, a transceiver circuit, a transceiver, a transceiver or a communication interface.

[0363] The transceiver module 1410 is configured to receive a first parameter and a first message verification code from a second network device.

[0364] In an embodiment of the present application, the first parameter is included in the third container information element, the first parameter includes the second slice information, the second slice information includes the first indication information or the first request message, the first indication information is used to indicate that the terminal device supports slice-based network selection, the first request message is used to request NSSAI, the NSSAI includes X S-NSSAIs, X is a positive integer, the third container information element also includes a first message verification code, the first parameter and the first message verification code are used by the second network device and the third network device to perform integrity verification on the third container information element;

[0365] The processing module 1420 is used to determine that the security verification is successful according to the first message verification code and the second message verification code being the same.

[0366] The transceiver module 1410 is further configured to send a security check completion reply message to the second network device.

[0367] In a possible implementation, the security verification reply message includes a first identifier, and the first identifier is used to indicate that the security verification is successful, or the first identifier indicates that the first message verification code is the same as the second message verification code.

[0368] Among them, all relevant contents of each step involved in the above method embodiment can be referred to the functional description of the corresponding functional module, and will not be repeated here. Optionally, the communication device 1400 may also include a storage module, and the storage module 1430 may be used to store instructions or and / or data, and the processing module 1420 may read the instructions or and / or data in the storage module 1430.

[0369] In the embodiment of the present application, the third network device 1400 is presented in the form of dividing various functional modules in an integrated manner. The "module" here may refer to a specific ASIC, a circuit, a processor and a memory that executes one or more software or firmware programs, an integrated logic circuit, and / or other devices that can provide the above functions. In a simple embodiment, a person skilled in the art can imagine that the third network device 1400 can be used Figure 6 The form of the communication device 600 is shown.

[0370] for example, Figure 6 The processor 601 in the communication device 600 shown may call the computer-executable instructions stored in the memory 603 to enable the communication device 600 to execute the signal transmission method in the above method embodiment.

[0371] Specifically, Fig.14 The functions / implementation processes of the transceiver module 1410 and the processing module 1420 in the embodiment can be Figure 6 The processor 601 in the communication device 600 shown calls the computer execution instructions stored in the memory 603 to implement. Or, Fig.14 The function / implementation process of the processing module 1420 can be Figure 6 The processor 601 in the communication device 600 shown calls the computer execution instructions stored in the memory 603 to implement, Fig.14 The function / implementation process of the transceiver module 1410 can be Figure 6 The communication interface 604 in the communication device 600 shown in FIG. 6 is implemented.

[0372] Since the third network device 1400 provided in the embodiment of the present application can execute the above communication method, the technical effects that can be obtained can refer to the above method embodiment and will not be repeated here.

[0373] In one possible implementation, Fig.14 14 is a schematic diagram of a communication device provided in an embodiment of the present application, and taking the communication device as the second network device in the above method embodiment as an example, the second network device 1400 includes a transceiver module 1410 and a processing module 1420. The transceiver module 1410, which may also be referred to as a transceiver unit for implementing a transceiver function, may be, for example, a transceiver circuit, a transceiver, a transceiver or a communication interface.

[0374] The processing module 1420 is configured to obtain a third container cell from the terminal device.

[0375] In an embodiment of the present application, the third container information element includes a first parameter and a first message verification code, the first parameter includes second slice information, the second slice information includes first indication information or a first request message, the first indication information is used to indicate that the terminal device supports slice-based network selection, the first request message is used to request NSSAI, NSSAI includes X S-NSSAIs, X is a positive integer, and the first parameter and the first message verification code are used by the second network device and the third network device to perform integrity verification on the third container information element;

[0376] The transceiver module 1410 is configured to send a first parameter to a third network device.

[0377] The transceiver module 1410 is further configured to receive a security check reply message from a third network device.

[0378] The processing module 1420 is further configured to determine that the security verification is successful based on the first message verification code being the same as the second message verification code.

[0379] In the embodiment of the present application, the first parameter also includes at least one of the following: header information and counter information.

[0380] Among them, all relevant contents of each step involved in the above method embodiment can be referred to the functional description of the corresponding functional module, and will not be repeated here. Optionally, the communication device 1400 may also include a storage module, and the storage module 1430 may be used to store instructions or and / or data, and the processing module 1420 may read the instructions or and / or data in the storage module 1430.

[0381] In the embodiment of the present application, the second network device 1400 is presented in the form of dividing various functional modules in an integrated manner. The "module" here can refer to a specific ASIC, a circuit, a processor and a memory that executes one or more software or firmware programs, an integrated logic circuit, and / or other devices that can provide the above functions. In a simple embodiment, a person skilled in the art can imagine that the second network device 1400 can be used Figure 6 The form of the communication device 600 is shown.

[0382] for example, Figure 6 The processor 601 in the communication device 600 shown may call the computer-executable instructions stored in the memory 603 to enable the communication device 600 to execute the signal transmission method in the above method embodiment.

[0383] Specifically, Fig.14The functions / implementation processes of the transceiver module 1410 and the processing module 1420 in the embodiment can be Figure 6 The processor 601 in the communication device 600 shown calls the computer execution instructions stored in the memory 603 to implement. Or, Fig.14 The function / implementation process of the processing module 1420 can be Figure 6 The processor 601 in the communication device 600 shown calls the computer execution instructions stored in the memory 603 to implement, Fig.14 The function / implementation process of the transceiver module 1410 can be Figure 6 The communication interface 604 in the communication device 600 shown in FIG. 6 is implemented.

[0384] Since the second network device 1400 provided in the embodiment of the present application can execute the above communication method, the technical effects that can be obtained can refer to the above method embodiment and will not be repeated here.

[0385] In one possible implementation, Fig.14 14 is a schematic diagram of a communication device provided in an embodiment of the present application. Taking the communication device as the third network device in the above method embodiment as an example, the third network device 1400 includes a transceiver module 1410 and a processing module 1420. The transceiver module 1410, which may also be referred to as a transceiver unit, is used to implement a transceiver function, and may be, for example, a transceiver circuit, a transceiver, a transceiver or a communication interface.

[0386] The transceiver module 1410 is configured to receive a first parameter from a second network device.

[0387] In an embodiment of the present application, the first parameter is included in the third container information element, the first parameter includes the second slice information, the second slice information includes the first indication information or the first request message, the first indication information is used to indicate that the terminal device supports slice-based network selection, the first request message is used to request NSSAI, the NSSAI includes X S-NSSAIs, X is a positive integer, the third container information element also includes a first message verification code, the first parameter and the first message verification code are used by the second network device and the third network device to perform integrity verification on the third container information element;

[0388] The processing module 1420 is configured to determine a second message authentication code according to the first parameter.

[0389] The transceiver module 1410 is further configured to send a security check completion reply message to the second network device.

[0390] In the embodiment of the present application, the insurance verification reply message includes a second message verification code.

[0391] Among them, all relevant contents of each step involved in the above method embodiment can be referred to the functional description of the corresponding functional module, and will not be repeated here. Optionally, the communication device 1400 may also include a storage module, and the storage module 1430 may be used to store instructions or and / or data, and the processing module 1420 may read the instructions or and / or data in the storage module 1430.

[0392] In the embodiment of the present application, the third network device 1400 is presented in the form of dividing various functional modules in an integrated manner. The "module" here may refer to a specific ASIC, a circuit, a processor and a memory that executes one or more software or firmware programs, an integrated logic circuit, and / or other devices that can provide the above functions. In a simple embodiment, a person skilled in the art can imagine that the third network device 1400 can be used Figure 6 The form of the communication device 600 is shown.

[0393] for example, Figure 6 The processor 601 in the communication device 600 shown may call the computer-executable instructions stored in the memory 603 to enable the communication device 600 to execute the signal transmission method in the above method embodiment.

[0394] Specifically, Fig.14 The functions / implementation processes of the transceiver module 1410 and the processing module 1420 in the embodiment can be Figure 6 The processor 601 in the communication device 600 shown calls the computer execution instructions stored in the memory 603 to implement. Or, Fig.14 The function / implementation process of the processing module 1420 can be Figure 6 The processor 601 in the communication device 600 shown calls the computer execution instructions stored in the memory 603 to implement, Fig.14 The function / implementation process of the transceiver module 1410 can be Figure 6 The communication interface 604 in the communication device 600 shown in FIG. 6 is implemented.

[0395] Since the third network device 1400 provided in the embodiment of the present application can execute the above communication method, the technical effects that can be obtained can refer to the above method embodiment and will not be repeated here.

[0396] It should be understood that one or more of the above modules or units can be implemented by software, hardware or a combination of the two. When any of the above modules or units are implemented in software, the software exists in the form of computer program instructions and is stored in a memory, and the processor can be used to execute the program instructions and implement the above method flow. The processor can be built into an SoC (system on chip) or an ASIC, or it can be an independent semiconductor chip. In addition to the core used to execute software instructions for calculation or processing in the processor, it can also further include necessary hardware accelerators, such as field programmable gate arrays (FPGA), PLDs (programmable logic devices), or logic circuits that implement dedicated logic operations.

[0397] When the above modules or units are implemented in hardware, the hardware can be any one or any combination of a CPU, a microprocessor, a digital signal processing (DSP) chip, a microcontroller unit (MCU), an artificial intelligence processor, an ASIC, a SoC, an FPGA, a PLD, a dedicated digital circuit, a hardware accelerator or a non-integrated discrete device, which can run the necessary software or not rely on the software to execute the above method flow.

[0398] Optionally, an embodiment of the present application further provides a communication device (for example, the communication device may be a chip or a chip system), which includes a processor for implementing the method in any of the above method embodiments. In one possible design, the communication device also includes a memory. The memory is used to store necessary program instructions and data, and the processor can call the program code stored in the memory to instruct the communication device to execute the method in any of the above method embodiments. Of course, the memory may not be in the communication device. When the communication device is a chip system, it may be composed of chips, or it may include chips and other discrete devices, which is not specifically limited in the embodiments of the present application.

[0399] Optionally, an embodiment of the present application further provides a computer-readable storage medium, which stores a computer program or instruction, and when the computer program or instruction is run on a communication device, the communication device can execute any of the above method embodiments or any of its implementation methods.

[0400] Optionally, an embodiment of the present application further provides a communication system, which includes the first network device of the above method embodiment and the terminal device of the above method embodiment.

[0401] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented using a software program, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When loading and executing computer program instructions on a computer, the process or function according to the embodiment of the present application is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices. Computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, computer instructions can be transmitted from a website site, computer, server or data center by wired (e.g., coaxial cable, optical fiber, digital subscriber line (digital subscriber line, DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) mode to another website site, computer, server or data center. The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server, data center, etc. that contains one or more servers that can be integrated with a medium. The available medium may be a magnetic medium (eg, a floppy disk, a hard disk, a magnetic tape), an optical medium (eg, a DVD), or a semiconductor medium (eg, a solid state disk (SSD)).

[0402] Although the present application is described herein in conjunction with various embodiments, in the process of implementing the claimed application, those skilled in the art may understand and implement other changes to the disclosed embodiments by viewing the drawings, the disclosure, and the appended claims. In the claims, the word "comprising" does not exclude other components or steps, and "one" or "an" does not exclude multiple situations. A single processor or other unit may implement several functions listed in the claims. Certain measures are recorded in different dependent claims, but this does not mean that these measures cannot be combined to produce good results.

[0403] Although the present application has been described in conjunction with specific features and embodiments thereof, it is obvious that various modifications and combinations may be made thereto without departing from the spirit and scope of the present application. Accordingly, this specification and the drawings are merely exemplary illustrations of the present application as defined by the appended claims, and are deemed to have covered any and all modifications, variations, combinations or equivalents within the scope of the present application. Obviously, those skilled in the art may make various modifications and variations to the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.

Claims

1. A communication method, characterized in that: The method is applied to a terminal device, comprising: Sending a first registration request message to a first network device, where the first registration request message includes requested network slice auxiliary information NSSAI, where the requested NSSAI includes N single network slice auxiliary information S-NSSAI, where N is a positive integer greater than 8; A first registration accept message is received from the first network device, wherein the first registration accept message indicates whether the first network device allows the requested NSSAI.

2. A communication method, characterized in that: The method is applied to a first network device, comprising: Receive a first registration request message from a terminal device, where the first registration request message includes requested network slice auxiliary information NSSAI, where the requested NSSAI includes N single network slice auxiliary information S-NSSAI, where N is a positive integer greater than 8; A first registration acceptance message is sent to the terminal device, where the first registration acceptance message indicates whether the first network device allows the requested NSSAI.

3. The method according to claim 1 or 2, characterized in that: The first registration request message includes a first slice information element, and the first slice information element is used to carry the NSSAI of the request.

4. The method according to claim 1 or 2, characterized in that: The first registration request message includes a second slice information element and a third slice information element, where the second slice information element and the third slice information element are used to carry the requested NSSAI, wherein: The second slice information element is used to carry the 8 S-NSSAIs included in the requested NSSAI, and the third slice information element is used to carry the (N-8) S-NSSAIs included in the requested NSSAI.

5. The method according to claim 3 or 4, characterized in that: The first registration acceptance message includes a fourth slice allow information element, and the fourth slice allow information element indicates the S-NSSAI allowed by the first network device among the N S-NSSAIs requested. The fourth slice allow information element is used to carry M S-NSSAIs allowed by the first network device, and M is a positive integer greater than 8.

6. The method according to claim 3 or 4, characterized in that: The first registration acceptance message includes a fourth slice rejection information element, and the fourth slice rejection information element indicates the S-NSSAI that is not allowed by the first network device among the N S-NSSAIs requested. The fourth slice rejection information element is used to carry K S-NSSAIs that are not allowed by the first network device, and K is a positive integer greater than 8.

7. The method according to claim 3 or 4, characterized in that: The first registration acceptance message includes a fifth slice allow information element and a sixth slice allow information element, and the fifth slice allow information element and the sixth slice allow information element are used to indicate the S-NSSAI allowed by the first network device among the N S-NSSAIs requested, wherein the fifth slice allow information element is used to carry 8 S-NSSAIs allowed by the first network device, and the sixth slice allow information element is used to carry M-8 S-NSSAIs allowed by the first network device, where M is a positive integer greater than 8.

8. The method according to claim 3 or 4, characterized in that: The first registration acceptance message includes a fifth slice rejection information element and a sixth slice rejection information element, and the fifth slice rejection information element and the sixth slice rejection information element are used to indicate the S-NSSAI that is not allowed by the first network device among the N S-NSSAIs requested, wherein the fifth slice rejection information element is used to carry 8 S-NSSAIs that are not allowed by the first network device, and the sixth slice rejection information element is used to carry K-8 S-NSSAIs that are not allowed by the first network device, and X is a positive integer greater than 8.

9. A communication method, characterized in that: The method is applied to a terminal device, comprising: Obtain first slice information, where the first slice information includes first indication information or a first request message, where the first indication information is used to indicate that the terminal device supports slice-based network selection, and the first request message is used to request network slice auxiliary information NSSAI, where the NSSAI includes Y single network slice auxiliary information S-NSSAI, where Y is a positive integer; If there is a first security authentication key and a first security context when the terminal device sends the second registration request message, the first slice information is sent through the second registration request message; or, if there is no first security authentication key or the first security context when the terminal device sends the second registration request message, the first slice information is sent through a security mode completion message.

10. A communication method, characterized in that: The method is applied to a second network device, comprising: Receive first slice information from a terminal device, where the first slice information includes first indication information or a first request message, where the first indication information is used to indicate that the terminal device supports slice-based network selection, where the first request message is used to request network slice auxiliary information NSSAI, where the NSSAI includes Y single network slice auxiliary information S-NSSAI, where Y is a positive integer, wherein when the terminal device sends a second registration request message, if the terminal device has a first security authentication key and a first security context, the first slice information is included in the second registration request message, or, when the terminal device sends the second registration request message, if the terminal device does not have the first security authentication key or the first security context, the first slice information is included in the security mode completion message; Determine whether corresponding NSSAI is allowed according to the first slice information.

11. The method according to claim 9 or 10, characterized in that: When the terminal device sends a second registration request message and there is a first security authentication key and a first security context, the first slice information sent through the second registration request message is included in a first container information element and is generated by the first security authentication key and the first slice information.

12. The method according to claim 9 or 10, characterized in that When the first security authentication key or the first security context does not exist when the terminal device sends the second registration request message, the first slice information sent through the security mode completion message is included in a second container information element, wherein the second container information element is generated by the second security authentication key and the first slice information.

13. The method according to claim 11 or 12, characterized in that: The first container or the second container is a SOR controlled transparent container.

14. A communication device, characterized in that: include: A transceiver module, configured to send a first registration request message to a first network device, where the first registration request message includes requested network slice auxiliary information NSSAI, where the requested NSSAI includes N single network slice auxiliary information S-NSSAI, where N is a positive integer greater than 8; The transceiver module is also used to receive a first registration acceptance message from the first network device, where the first registration acceptance message indicates whether the first network device in the public land mobile network PLNM where the terminal device currently resides allows the requested S-NSSAI.

15. A communication device, characterized in that: include: A transceiver module receives a first registration request message from a terminal device, where the first registration request message includes requested network slice auxiliary information NSSAI, where the requested NSSAI includes N single network slice auxiliary information S-NSSAI, where N is a positive integer greater than 8; The transceiver module sends a first registration acceptance message to the terminal device, where the first registration acceptance message indicates whether a first network device in the public land mobile network PLNM where the terminal device currently resides allows the requested S-NSSAI.

16. A communication device, characterized in that: include: a processing module, configured to obtain first slice information, where the first slice information includes first indication information or a first request message, where the first indication information is used to indicate that the terminal device supports slice-based network selection, and the first request message is used to request network slice auxiliary information NSSAI, where the NSSAI includes Y single network slice auxiliary information S-NSSAI, where Y is a positive integer; a transceiver module, configured to send the first slice information through the second registration request message when the first security authentication key and the first security context exist when the transceiver module sends the second registration request message; Alternatively, when the first security authentication key or the first security context does not exist when the transceiver module sends the second registration request message, the first slice information is sent through a security mode completion message.

17. A communication device, characterized in that: include: A transceiver module, used to receive first slice information from a terminal device, where the first slice information includes first indication information or a first request message, where the first indication information is used to indicate that the terminal device supports slice-based network selection, and the first request message is used to request network slice auxiliary information NSSAI, where the NSSAI includes Y single network slice auxiliary information S-NSSAI, where Y is a positive integer, wherein when the terminal device sends a second registration request message, if the terminal device has a first security authentication key and a first security context, the first slice information is included in the second registration request message, or when the terminal device sends the second registration request message, if the terminal device does not have the first security authentication key or the first security context, the first slice information element is included in the security mode completion message; A processing module is used to determine whether corresponding NSSAI is allowed according to the first slice information.

18. A communication device, characterized in that: The communication device includes a processor; the processor is used to run a computer program or instruction, or to use a logic circuit to enable the communication device to execute the method as described in any one of claims 1, 3 to 8, or to enable the communication device to execute the method as described in any one of claims 2 to 8.

19. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions or programs, which, when executed on a computer, enable the communication device to execute the method as claimed in any one of claims 1, 3 to 8, or enable the communication device to execute the method as claimed in any one of claims 2 to 8.

20. A communication system, characterized in that: The communication system comprises the communication device according to claim 14 and claim 15.

21. A communication device, characterized in that: The communication device includes a processor; the processor is used to run a computer program or instruction, or to use a logic circuit to enable the communication device to execute the method as described in any one of claims 9, 11 to 13, or to enable the communication device to execute the method as described in any one of claims 10 to 13.

22. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions or programs, which, when executed on a computer, enable the communication device to execute the method as claimed in any one of claims 9, 11 to 13, or enable the communication device to execute the method as claimed in any one of claims 10 to 13.

23. A communication system, characterized in that: The communication system comprises the communication device according to claim 16 and claim 17.

Images