Communication method, system and device, electronic equipment, storage medium and program product

Abstract

The invention provides a communication method, system and device, electronic equipment, a storage medium and a program product, and the method comprises the steps: encrypting an IMSI (International Mobile Subscriber Identity) through employing a locally maintained secret key of a roaming place operator, and obtaining first information; and performing roaming place authentication based on the first information. In conclusion, the terminal disclosed by the invention can maintain the information of the roaming place operator, and the authentication process can be carried out by using the local roaming place operator information and the roaming place network equipment. Therefore, compared with the prior art, the terminal and the roaming place can automatically add an additional authentication process, the roaming place can autonomously realize effective identity recognition of the terminal without the help of external equipment, the risk of network security can be reduced, and the actual objective requirement can be met.

Description

Technical Field

[0001] The present disclosure relates to the field of communication technology, and in particular to a communication method, system, device, electronic device, storage medium and program product. Background Art

[0002] At present, when performing terminal real-name identity authentication for roaming locations, it is basically judged and identified based on the International Mobile Subscriber Identity (IMSI). However, in the fifth generation mobile communication technology (5G) network, IMSI is an encrypted dynamically changing ciphertext, and only the home operator can decrypt it to obtain its user identity information. In this way, even if the roaming location can obtain the user identity information with the help of the home operator, this cannot ensure the timeliness and accuracy of the identity information. If the home operator provides incorrect identity information, the roaming operator cannot make a determination.

[0003] In summary, in the 5G scenario, the roaming area cannot independently realize the effective identity identification of terminal users, which greatly increases the risk of network security and cannot meet the actual objective needs. Summary of the invention

[0004] The present disclosure provides a communication method, system, device, electronic device, storage medium and program product to solve the problem of high network security risks to a certain extent.

[0005] According to one aspect of the present disclosure, a communication method is provided, which is applied to a terminal, and includes: encrypting an international mobile identity code IMSI using a locally maintained key of a roaming operator to obtain first information; and performing roaming authentication based on the first information.

[0006] In addition, according to a method of one aspect of the present disclosure, the method further includes: maintaining roaming operator data locally; wherein the roaming operator data at least includes: a key; the roaming operator data also includes at least one of the following: an operator network identifier, an IMSI.

[0007] In addition, according to a method of one aspect of the present disclosure, locally maintaining roaming operator data includes: storing at least one roaming operator data in a first storage area of ​​a user identity SIM card; wherein the SIM card also includes a second storage area, and the second storage area is used to store home operator data.

[0008] In addition, according to a method of one aspect of the present disclosure, performing roaming authentication based on the first information includes: sending a registration request to a roaming network device, the registration request carrying the first information; receiving an authentication parameter from the roaming network device; determining a response value based on the authentication parameter; sending a response value to the roaming network device, the response value being used by the roaming network device to authenticate the roaming authority of the terminal.

[0009] In addition, according to a method in one aspect of the present disclosure, the authentication parameter includes at least one of the following: a random number, a timestamp.

[0010] In addition, according to one aspect of the method of the present disclosure, the method also includes: when roaming authentication is performed, the IMSI is encrypting using the key of the home operator to obtain second information; and performing home authentication based on the second information.

[0011] In addition, according to a method in one aspect of the present disclosure, the scenario of roaming location authentication includes at least one of the following: international roaming and domestic cross-regional roaming.

[0012] According to another aspect of the present disclosure, a communication method is provided, which is applied to a network device in a roaming location. The method includes: receiving first information from a terminal and performing roaming location authentication based on the first information.

[0013] In addition, according to another aspect of the method of the present disclosure, first information is received from the terminal and roaming authentication is performed, including: receiving a registration request from the terminal, the registration request carrying the first information; sending authentication parameters to the terminal; receiving a response value from the terminal, the response value is used by the roaming network device to authenticate the roaming authority of the terminal.

[0014] In addition, according to another aspect of the present disclosure, the method further includes: assisting in implementing the home authentication of the terminal during the process of the terminal performing the home authentication based on the second message.

[0015] According to another aspect of the present disclosure, a communication system is provided, the system comprising: a terminal, configured to implement any one of the above methods; and a roaming network device, configured to implement any one of the above methods.

[0016] According to another aspect of the present disclosure, a communication device is provided, comprising: an encryption unit, used to encrypt the International Mobile Identity (IMSI) code using a key corresponding to the locally maintained roaming operator data to obtain first information; and an authentication unit, used to perform roaming authentication based on the first information.

[0017] According to another aspect of the present disclosure, a communication device is provided, the device comprising: a receiving unit, configured to receive first information from a terminal; and an authentication unit, configured to perform roaming authentication based on the first information.

[0018] According to yet another aspect of the present disclosure, an electronic device is provided, comprising: a memory for storing computer-readable instructions; and a processor for executing the computer-readable instructions so that the electronic device executes the method as described in any embodiment of one aspect.

[0019] According to another aspect of the present disclosure, a non-transitory computer-readable storage medium is provided for storing computer-readable instructions. When the computer-readable instructions are executed by a processor, the processor executes the method as described in any embodiment of one aspect.

[0020] According to yet another aspect of the present disclosure, a computer program product is provided, including a computer program, wherein when the computer program is executed by a processor, the method described in any embodiment of one aspect is implemented.

[0021] The present disclosure provides a communication method, system, device, electronic device, storage medium and program product. The terminal of the present disclosure obtains the first information by encrypting the international mobile identity code IMSI using the key of the roaming operator maintained locally. And based on the first information, roaming authentication is performed. In summary, the terminal of the present disclosure can maintain the information of the roaming operator by itself, and can use the local roaming operator information to perform the authentication process with the roaming network equipment. In this way, compared with the prior art, the terminal and the roaming area can add an additional authentication process by themselves, and the roaming area can independently realize the effective identity recognition of the terminal without the help of external equipment, which can reduce the risk of network security and meet the actual objective needs.

[0022] It is to be understood that both the foregoing general description and the following detailed description are exemplary, and are intended to provide further explanation of the technology as claimed. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] The above and other purposes, features and advantages of the present disclosure will become more apparent by describing the embodiments of the present disclosure in more detail in conjunction with the accompanying drawings. The accompanying drawings are used to provide a further understanding of the embodiments of the present disclosure and constitute a part of the specification. Together with the embodiments of the present disclosure, they are used to explain the present disclosure and do not constitute a limitation of the present disclosure. In the accompanying drawings, the same reference numerals generally represent the same components or steps.

[0024] Figure 1 A system architecture diagram of a communication method provided by an embodiment of the present disclosure;

[0025] Figure 2 A flow chart of a communication method provided by an embodiment of the present disclosure;

[0026] Figure 3 For existing SIM cards;

[0027] Figure 4 An optimized SIM card provided in an embodiment of the present disclosure;

[0028] Figure 5 An interactive flow chart of roaming authentication provided by an embodiment of the present disclosure;

[0029] Figure 6 A complete home location authentication process provided by the embodiment of the present disclosure;

[0030] Figure 7 A structural block diagram of a communication device provided in an embodiment of the present disclosure;

[0031] Figure 8 A structural block diagram of another communication device provided in an embodiment of the present disclosure;

[0032] Fig. 9 A hardware block diagram of an electronic device provided in an embodiment of the present disclosure;

[0033] Fig.10 A schematic diagram of a computer-readable storage medium provided for an embodiment of the present disclosure. DETAILED DESCRIPTION

[0034] In order to make the purpose, technical solution and advantages of the present disclosure more obvious, the exemplary embodiments according to the present disclosure will be described in detail with reference to the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present disclosure, rather than all the embodiments of the present disclosure, and it should be understood that the present disclosure is not limited to the exemplary embodiments described here.

[0035] At present, when performing terminal real-name identity authentication for roaming locations, it is basically judged and identified based on the International Mobile Subscriber Identity (IMSI). However, in the fifth generation mobile communication technology (5G) network, IMSI is an encrypted dynamically changing ciphertext, and only the home operator can decrypt it to obtain its user identity information. In this way, even if the roaming location can obtain the user identity information with the help of the home operator, this cannot ensure the timeliness and accuracy of the identity information. If the home operator provides incorrect identity information, the roaming operator cannot make a determination.

[0036] In summary, in the 5G scenario, the roaming area cannot independently realize the effective identity identification of terminal users, which greatly increases the risk of network security and cannot meet the actual objective needs.

[0037] Therefore, the present application proposes a communication method, in which the terminal of the present application stores the information of the roaming location and can add an additional authentication process with the network device of the roaming location, so that the network device of the roaming location can authenticate itself. Figure 1 , Figure 1 A system architecture diagram of the communication method provided in the embodiment of the present disclosure, such as Figure 1 As shown, the system architecture includes: a terminal, a roaming network device, and a home network device.

[0038] Specifically, a terminal, which may also be referred to as a terminal device, user equipment (UE), mobile station, mobile terminal, etc., can communicate with network side devices. The terminal may include but is not limited to at least one of the following: a mobile phone, a tablet computer, a computer with wireless transceiver function, and a wearable device.

[0039] The roaming network equipment can be understood as the base station, core network equipment, etc. in the roaming area, which is responsible for providing network access and communication services to the terminal when it roams to the area, and can also interact with the terminal and the home network equipment to complete authentication, data transmission and other operations.

[0040] The home network equipment can be understood as the core network equipment and home location register of the operator to which the terminal belongs. It is mainly responsible for managing the user information of the terminal, performing identity authentication, and coordinating with the roaming network equipment to ensure that the terminal can use communication services normally in the roaming state.

[0041] Please refer to Figure 2 , Figure 2 The following is a flow chart of a communication method provided by an embodiment of the present disclosure. Figure 1 As shown, the communication method is applied to a terminal, and the method includes:

[0042] In step S201, the international mobile identity code IMSI is encrypted using a key of a roaming operator maintained locally to obtain first information.

[0043] In the present disclosure, the first information can be understood as encrypted ciphertext data containing the terminal user identity information. Specifically, the terminal can use the key of the local roaming operator to encrypt the IMSI through an encryption algorithm to achieve the security of the terminal user identity information during transmission and storage. The encryption algorithm may include but is not limited to at least one of the following: hash encryption, symmetric encryption, and asymmetric encryption.

[0044] In step S202, roaming location authentication is performed based on the first information.

[0045] In the present disclosure, roaming authentication can be understood as a process in which the roaming network device verifies the legitimacy and identity authenticity of the terminal based on the authentication mechanism. Specifically, the terminal can send an encrypted first message to the roaming network device. After receiving the first message, the roaming network device can decrypt the encrypted first message according to the corresponding encryption algorithm and key, and compare it with the legitimate user information to determine whether the terminal has the right to access the roaming network. If the comparison results are consistent, it indicates that the identity of the terminal is legitimate and the authentication is successful; otherwise, the authentication fails, and the terminal may not be able to access the roaming network normally or can only obtain limited network services, etc., which will be explained in detail in conjunction with the embodiments below.

[0046] It should be noted that it is precisely because the terminal maintains the key of the roaming operator locally that the terminal can perform autonomous encryption and initiate authentication requests in the roaming area to achieve authentication in the roaming area. In this way, the dependence on the network equipment in the home area can be reduced, and the efficiency and timeliness of authentication can be improved. At the same time, it also enhances the security of the terminal in the roaming state and reduces the risk of user identity information being stolen or tampered with.

[0047] At the same time, in the process of roaming authentication, the present disclosure also provides a communication method of the roaming network device, and the method includes:

[0048] The roaming network device receives the first information from the terminal;

[0049] The network device at the roaming location performs roaming location authentication based on the first information.

[0050] In the present disclosure, after receiving the first information from the terminal, the network device in the roaming location can start the roaming location authentication process, which will be described in detail later in conjunction with the embodiments.

[0051] As mentioned above, the terminal of the present disclosure can maintain the key of the roaming operator locally. Specifically, this can be achieved by maintaining the roaming operator data locally. The roaming operator data is described in detail from different perspectives below.

[0052] Regarding the specific content of the roaming operator data, the roaming operator data at this time may at least include: a key; and the roaming operator data may also include but is not limited to at least one of the following: an operator network identifier, and an IMSI.

[0053] More specifically, the key of the roaming operator data can be used to encrypt the IMSI. The operator network identifier may include but is not limited to at least one of the following: Mobile Network Code (MNC), Mobile Country Code (MCC), Network Name, and a specific network identification code. These identifiers can help the terminal accurately identify and access the specific operator network in the roaming area, ensuring the stability and reliability of communication.

[0054] As for the storage and management of roaming operator data in the terminal, it can be reasonably stored and called in the Subscriber Identity Module (SIM) card. In this case, the method includes:

[0055] In a first storage area of ​​the user identity SIM card, at least one roaming operator data is stored;

[0056] The SIM card further includes a second storage area, and the second storage area is used to store the home operator data.

[0057] In the present disclosure, at least one roaming operator data may be stored in the first storage area of ​​the SIM card. The one or more operator data to be stored may be determined according to at least one method such as user requirements or the contracted operator of the SIM card.

[0058] In the present disclosure, the SIM card may further include a second storage area, which may be used to store the data of the home operator. In this way, by dividing different storage areas in the SIM card and storing the roaming and home operator data respectively, effective management and distinction of data from different sources may be achieved. It should be noted that the home operator data may also be stored in the first storage area, but in order to better achieve the clarity of data management and distinction, it is usually more appropriate to store it in a dedicated second storage area, without specific limitation.

[0059] For example, Figure 3 For existing SIM cards. Figure 3 As shown in the figure, it can be seen that before the optimization, the (e)SIM card only stores the information of the home operator, including: operator code, key, IMSI or Subscription Permanent Identifier (SUPI), operator public key, etc.

[0060] For example, Figure 4 The optimized (e)SIM card provided by the embodiment of the present disclosure. Figure 4As shown in the figure, it can be seen that after optimization, a new area is added to the SIM card, which is specifically used to store roaming operator information, which can be one or more roaming operator information. The specific roaming operator information includes: operator code, key, IMSI (SUPI), operator public key, etc. Figure 3 In contrast, a new area has been added to store additional roaming operator information.

[0061] The following specifically describes how to use the first information to perform a complete process of roaming location authentication. In this case, the communication method includes:

[0062] When applied to a terminal, the method includes:

[0063] The terminal sends a registration request to the roaming network device, where the registration request carries the first information;

[0064] The terminal receives authentication parameters from the roaming network device;

[0065] The terminal determines a response value based on the authentication parameter;

[0066] The terminal sends a response value to the roaming network device, and the response value is used by the roaming network device to authenticate the roaming authority of the terminal.

[0067] When applied to a roaming network device, the method includes:

[0068] The roaming network device receives a registration request from the terminal, where the registration request carries the first information;

[0069] The roaming network device sends authentication parameters to the terminal;

[0070] The roaming network device receives the response value from the terminal, and the response value is used by the roaming network device to authenticate the roaming authority of the terminal.

[0071] In the present disclosure, when a terminal enters a roaming area, in order to access the roaming area network, it can send a registration request to the roaming area network device. The registration request carries the first information, that is, the identity parameter encrypted by the roaming area operator key. After receiving the registration request, the roaming area network device can determine the authentication parameters according to the registration request and send them to the terminal. The purpose of these authentication parameters is to guide the terminal to generate a response value so that the roaming area network device can perform further authentication. After receiving the authentication parameters, the terminal can determine the response value based on these parameters through specific logic. This response value is a response to the authentication request of the roaming area network device. After the terminal determines the response value, it will send it back to the roaming area network device. After receiving the response value from the terminal, the roaming area network device will analyze and judge the response value according to the preset authentication rules. If the response value meets the requirements, it indicates that the terminal is legal and has the right to access the roaming area network. The roaming area network device can allow the terminal to access and allocate corresponding network resources to it; if the response value does not meet the requirements, the roaming area network device may reject the terminal's access request or require the terminal to re-perform the authentication process.

[0072] In the present disclosure, the authentication parameters sent by the roaming network device may include but are not limited to at least one of the following: a random number and a timestamp. Specifically, the random number can increase the randomness and unpredictability of the authentication process, and prevent malicious attackers from forging the response value of the terminal by predicting the authentication parameters. In the present disclosure, the random number can be a random challenge value (RandomChallenge, RAND). The timestamp can ensure the timeliness of the authentication process and prevent security threats such as replay attacks. In the present disclosure, the timestamp can be the current time identifier (Time Stamp Identifier, TSI).

[0073] Through the above-mentioned interaction process, the terminal and the roaming network equipment can realize roaming authentication in the 5G scenario, so that only legitimate terminals can access the roaming network, thereby reducing network security risks.

[0074] In one embodiment of the present disclosure, the detailed process of the complete roaming location authentication may be:

[0075] The terminal encrypts the user's IMSI according to the roaming operator's key and generates encrypted identity parameters, such as Subscription Concealed Identifier (SUCI). The roaming network device receives the sent encrypted identity parameters, decrypts them and determines the temporary session. The roaming network device sends the authentication parameters (such as at least one of RAND and TSI) to the terminal through a temporary session. The terminal then determines the response value of the authentication parameter. Finally, the roaming network device can generate a roaming authentication value and compare it with the response value sent by the terminal. When the comparison results are consistent, it is considered that the terminal has passed the roaming authentication and has the right to access the roaming network.

[0076] Specific, exemplary, Figure 5 The interactive flow chart of roaming authentication provided by the embodiment of the present disclosure. Figure 5 As shown, from Figure 5 It can be seen that S3-S8 is a complete roaming authentication process, that is, when roaming authentication is required, the authentication process can be carried out in the following steps:

[0077] S3: The terminal reads the corresponding roaming operator information according to the roaming operator code, encrypts the IMSI (SUPI) with the roaming public key, generates SUCI, and sends a registration request carrying the SUCI.

[0078] S4, roamingly decrypt and identify the user, generate a temporary session identifier ID or a globally unique temporary identifier (Globally Unique Temporary Identifier, GUTI) and return it.

[0079] S5: The terminal uses the GUTI to initiate an authentication request to the roaming location.

[0080] S6, roaming location returns parameter RAND.

[0081] S7: The terminal calculates the result RES based on the roaming key and RAND, and returns the result.

[0082] S8, the roaming location can accurately identify the user's real-name identity by comparing the RES with the authentication value generated by itself. After determining that the user's real-name identity is identified, if the terminal is allowed to roam locally, the roaming process begins.

[0083] As mentioned above, the first information can be used to implement the roaming location authentication process. At the same time, when the user identity passes the roaming location authentication, the home location authentication process can also be performed. In other words, the communication method disclosed in the present invention can first perform roaming location authentication and then perform home location authentication. In this way, the legitimacy and access authority of the terminal in the roaming location can be ensured, and the security of network communication can be further enhanced through home location authentication.

[0084] At this time, the communication method of home authentication is as follows:

[0085] When applied to a terminal, the method includes:

[0086] When the roaming location is authenticated, the terminal encrypts the IMSI using the key of the home operator to obtain the second information;

[0087] The terminal performs location authentication based on the second information.

[0088] When applied to a roaming network device, the method includes:

[0089] In the process of the terminal performing home authentication based on the second message, the roaming network device assists in implementing the home authentication of the terminal.

[0090] In the present disclosure, when the terminal passes the roaming authentication, the IMSI can be encrypted with the key of the home operator to obtain the second information, and then the home authentication can be performed using the second information. The home authentication can reuse the roaming authentication method, which can be found in the full text and will not be repeated here.

[0091] In the process of the terminal performing home authentication, the assistance of the roaming network device is required. The roaming network device can forward the intermediate information between the terminal and the home network device. At the same time, the roaming network device can also determine whether the expected response value sent by the home network device and the response value fed back by the terminal are consistent. If they are consistent, it means that the home authentication of the terminal is successful, and the roaming network device can continue to provide communication services for the terminal; if they are inconsistent, the terminal may need to re-authenticate or take other security measures to ensure the legitimacy and security of the communication.

[0092] In an exemplary embodiment, the complete home location authentication process is as follows:

[0093] The terminal encrypts the user's IMSI according to the home operator key and generates encrypted identity parameters, such as: Subscription Concealed Identifier (SUCI), etc. The roaming network device forwards it to the home network device. After receiving the encrypted identity parameters sent, the home network device decrypts and determines the temporary session. The roaming network device forwards the authentication parameters of the home network device (such as: at least one of RAND, TSI, etc.) to the terminal through a temporary session. The terminal then determines the response value of the authentication parameter. Finally, the roaming network device can generate the expected response value sent by the home location and compare it with the response value sent by the terminal. When the comparison results are consistent, it is considered that the terminal has passed the home location authentication and can realize communication services.

[0094] Specific, exemplary, Figure 6 The complete home location authentication process provided for the embodiment of the present disclosure is as follows:

[0095] S1: When the roaming authentication is passed, the IMSI (SUPI) is encrypted with the home public key to generate SUCI, and the registration request is sent with SUCI.

[0096] S2: When the roaming location identifies the home location, it sends it to the home location.

[0097] S3a, the home location decrypts and identifies the user, generates a temporary session identifier ID or a globally unique temporary identifier (Globally Unique Temporary Identifier, GUTI) and returns it to the roaming location.

[0098] S3b, the roaming session ID (GUTI) is returned to the terminal.

[0099] S4: The terminal uses the GUTI to initiate an authentication request to the roaming location.

[0100] S5, the roaming location forwards the authentication request to the home location terminal.

[0101] S6. The home location returns parameters {RAND, expected response value HXRES} to the roaming location.

[0102] S7, roamingly passing the parameter {RAND} to the terminal.

[0103] S8, the terminal calculates the result RES based on the home location key and RAND, and returns the result to the roaming location.

[0104] S9, the roaming location calculates HXRES based on RAND and RES, compares it with the HXRES of the home location, and sends the matching RES back to the home location.

[0105] S10, if the home location considers it correct, it returns a success message to the roaming location.

[0106] S11, forwarding to the terminal in roaming.

[0107] The process of attribution authentication is also Figure 5 It is reflected in Figure 5 As can be seen from the figure, after completing the roaming authentication S3-S8, the home authentication process S9-S10 can be directly executed. Figure 5 S9-S10 in this book also corresponds to Figure 6 For details about S1-S2 in , please refer to the previous text.

[0108] The present disclosure also provides specific scenarios for roaming authentication, and the scenarios for roaming authentication may include but are not limited to at least one of the following: international roaming and domestic cross-regional roaming. Specifically, in the international roaming scenario, the terminal roams between networks in different countries. Since the security policies of operators in different countries may vary greatly, roaming authentication becomes particularly important. In the domestic cross-regional roaming scenario, although in the same country, the operator networks in different regions may have certain differences in at least one aspect such as network configuration, business rules and security requirements. When the terminal roams across regions, roaming authentication is also required to ensure normal communication.

[0109] The present disclosure also provides a communication system, the system comprising:

[0110] A terminal, used to implement the method of any one of the above embodiments;

[0111] A roaming network device is used to implement the method of any one of the above embodiments.

[0112] The present disclosure also provides a communication device. Figure 7 A structural block diagram of a communication device provided in an embodiment of the present disclosure, such as Figure 7 As shown, applied to a terminal, the communication device 700 includes:

[0113] The encryption unit 701 is used to encrypt the international mobile identity code IMSI by using the key corresponding to the roaming operator data maintained locally to obtain the first information.

[0114] The authentication unit 702 is used to perform roaming location authentication based on the first information.

[0115] In an exemplary embodiment, the method further includes: maintaining roaming operator data locally; wherein the roaming operator data at least includes: a key; the roaming operator data also includes at least one of the following: an operator network identifier, an IMSI.

[0116] In an exemplary embodiment, locally maintaining roaming operator data includes: storing at least one roaming operator data in a first storage area of ​​a user identity SIM card; wherein the SIM card also includes a second storage area, and the second storage area is used to store home operator data.

[0117] In an exemplary embodiment, performing roaming authentication based on the first information includes: sending a registration request to a roaming network device, the registration request carrying the first information; receiving an authentication parameter from the roaming network device; determining a response value based on the authentication parameter; and sending a response value to the roaming network device, the response value being used by the roaming network device to authenticate the roaming authority of the terminal.

[0118] In an exemplary embodiment, the authentication parameter includes at least one of the following: a random number, a timestamp.

[0119] In an exemplary embodiment, the method further includes: when roaming authentication is performed, the IMSI is encrypting using a key of a home operator to obtain second information; and performing home authentication based on the second information.

[0120] In an exemplary embodiment, the roaming location authentication scenario includes at least one of the following: international roaming and domestic cross-region roaming.

[0121] The present disclosure also provides a communication device. Figure 8 A structural block diagram of another communication device provided in an embodiment of the present disclosure, such as Figure 8 As shown, the communication device 800 is applied to a roaming network device and includes:

[0122] The receiving unit 801 is configured to receive first information from a terminal.

[0123] The authentication unit 802 is configured to perform roaming location authentication based on the first information.

[0124] In an exemplary embodiment, first information is received from a terminal and roaming authentication is performed, including: receiving a registration request from the terminal, the registration request carrying the first information; sending authentication parameters to the terminal; receiving a response value from the terminal, the response value is used by a roaming network device to authenticate the roaming authority of the terminal.

[0125] In an exemplary embodiment, the method further includes: assisting in implementing the home authentication of the terminal during the process of the terminal performing the home authentication based on the second message.

[0126] Fig. 9A hardware block diagram of an electronic device provided in an embodiment of the present disclosure. The electronic device 900 according to an embodiment of the present disclosure includes at least a processor; and a memory for storing computer-readable instructions. When the computer-readable instructions are loaded and executed by the processor, the processor executes the communication method described in any of the above embodiments of the present disclosure.

[0127] Fig. 9 The electronic device 900 shown specifically includes: a central processing unit (CPU) 901, a graphics processing unit (GPU) 902 and a memory 903. These units are interconnected via a bus 904. The central processing unit (CPU) 901 and / or the graphics processing unit (GPU) 902 can be used as the above-mentioned processor, and the memory 903 can be used as the above-mentioned memory for storing computer-readable instructions. In addition, the electronic device 900 may also include a communication unit 905, a storage unit 906, an output unit 907, an input unit 908 and an external device 909, which are also connected to the bus 904.

[0128] Fig.10 A schematic diagram of a computer-readable storage medium provided in an embodiment of the present disclosure. Fig.10 As shown, a computer-readable storage medium 1000 according to an embodiment of the present disclosure has computer-readable instructions 1001 stored thereon. When the computer-readable instructions 1001 are executed by a processor, the communication method described with reference to the above figures according to any of the foregoing embodiments of the present disclosure is executed. The computer-readable storage medium includes, but is not limited to, for example, volatile memory and / or non-volatile memory. Volatile memory may, for example, include random access memory (RAM) and / or cache memory (cache), etc. Non-volatile memory may, for example, include read-only memory (ROM), hard disk, flash memory, optical disk, magnetic disk, etc.

[0129] The present disclosure further provides a computer program product, including a computer program, which implements the communication method described in any of the foregoing embodiments of the present disclosure when executed by a processor.

[0130] As mentioned above, the present disclosure provides a communication method, system, device, electronic device, storage medium and program product. The terminal of the present disclosure encrypts the international mobile identity code IMSI by using the key of the roaming operator maintained locally to obtain the first information. And based on the first information, the roaming authentication is performed. In summary, the terminal of the present disclosure can maintain the information of the roaming operator by itself, and can use the local roaming operator information to perform the authentication process with the roaming network equipment. In this way, compared with the prior art, the terminal and the roaming area can add an additional authentication process by themselves, and the roaming area can independently realize the effective identity recognition of the terminal without the help of external equipment, which can reduce the risk of network security and meet the actual objective needs.

[0131] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this disclosure.

[0132] The basic principles of the present disclosure are described above in conjunction with specific embodiments. However, it should be noted that the advantages, strengths, effects, etc. mentioned in the present disclosure are only examples and not limitations, and it cannot be considered that these advantages, strengths, effects, etc. are required by each embodiment of the present disclosure. In addition, the specific details disclosed above are only for the purpose of illustration and ease of understanding, and are not limitations. The above details do not limit the present disclosure to the necessity of adopting the above specific details to be implemented.

[0133] The block diagrams of the devices, apparatuses, equipment, and systems involved in this disclosure are only illustrative examples and are not intended to require or imply that they must be connected, arranged, and configured in the manner shown in the block diagrams. As will be appreciated by those skilled in the art, these devices, apparatuses, equipment, and systems can be connected, arranged, and configured in any manner. Words such as "including," "comprising," "having," and the like are open words, referring to "including but not limited to," and can be used interchangeably therewith. The words "or" and "and" used herein refer to the words "and / or," and can be used interchangeably therewith, unless the context clearly indicates otherwise. The word "such as" used herein refers to the phrase "such as but not limited to," and can be used interchangeably therewith.

[0134] Additionally, as used herein, "or" used in a list of items beginning with "at least one" indicates a separate list, so that, for example, a list of "at least one of A, B, or C" means A or B or C, or AB or AC or BC, or ABC (i.e., A and B and C). Furthermore, the word "exemplary" does not mean that the example described is preferred or better than other examples.

[0135] It should also be noted that in the system and method of the present disclosure, each component or each step can be decomposed and / or recombined. Such decomposition and / or recombination should be regarded as equivalent solutions of the present disclosure.

[0136] Various changes, substitutions, and modifications of the techniques described herein may be made without departing from the teachings defined by the appended claims. Furthermore, the scope of the claims of the present disclosure is not limited to the specific aspects of the processes, machines, manufactures, compositions of events, means, methods, and actions described above. Currently existing or later to be developed processes, machines, manufactures, compositions of events, means, methods, or actions that perform substantially the same functions or achieve substantially the same results as the corresponding aspects described herein may be utilized. Thus, the appended claims include such processes, machines, manufactures, compositions of events, means, methods, or actions within their scope.

[0137] The above description of the disclosed aspects is provided to enable any person skilled in the art to make or use the present disclosure. Various modifications to these aspects will be readily apparent to those skilled in the art, and the general principles defined herein may be applied to other aspects without departing from the scope of the present disclosure. Therefore, the present disclosure is not intended to be limited to the aspects shown herein, but rather to the widest scope consistent with the principles and novel features disclosed herein.

[0138] The above description has been given for the purpose of illustration and description. In addition, this description is not intended to limit the embodiments of the present disclosure to the forms disclosed herein. Although multiple example aspects and embodiments have been discussed above, those skilled in the art will recognize certain variations, modifications, changes, additions and sub-combinations thereof.

Claims

1. A communication method, characterized in that: Applied to a terminal, the method comprises: Using a key of a roaming operator maintained locally, encrypting the international mobile identity code IMSI to obtain first information; Based on the first information, roaming location authentication is performed.

2. The method according to claim 1, characterized in that The method further comprises: Maintain roaming operator data locally; The roaming operator data at least includes: the key; The roaming operator data also includes at least one of the following: operator network identifier, IMSI.

3. The method according to claim 2, characterized in that The locally maintaining the roaming operator data includes: In a first storage area of ​​the user identity SIM card, at least one roaming operator data is stored; The SIM card further includes a second storage area, and the second storage area is used to store the home operator data.

4. The method according to claim 1, characterized in that: The performing roaming location authentication based on the first information includes: Sending a registration request to a roaming location network device, where the registration request carries the first information; Receiving authentication parameters from the roaming network device; Based on the authentication parameter, determining a response value; The response value is sent to the roaming network device, where the response value is used by the roaming network device to authenticate the roaming authority of the terminal.

5. The method according to claim 4, characterized in that The authentication parameter includes at least one of the following: a random number and a timestamp.

6. The method according to claim 1, characterized in that The method further comprises: When the roaming location authentication is passed, the IMSI is encrypted using the key of the home operator to obtain the second information; Based on the second information, home location authentication is performed.

7. The method according to claim 1, characterized in that The roaming location authentication scenario includes at least one of the following: international roaming and domestic cross-region roaming.

8. A communication method, characterized in that: Applied to a roaming network device, the method comprises: Receiving the first information from the terminal Based on the first information, roaming location authentication is performed.

9. The method according to claim 8, characterized in that The receiving first information from the terminal and performing roaming location authentication includes: receiving a registration request from a terminal, where the registration request carries the first information; Sending authentication parameters to the terminal; A response value is received from the terminal, where the response value is used by the roaming location network device to authenticate the roaming authority of the terminal.

10. The method according to claim 8, characterized in that The method further comprises: In the process of the terminal performing the home authentication based on the second message, the home authentication of the terminal is assisted.

11. A communication system, characterized in that: The system comprises: A terminal, configured to implement the method according to any one of claims 1 to 7; A roaming network device, used to implement the method according to any one of claims 8 to 10.

12. A communication device, characterized in that: The device comprises: an encryption unit, configured to encrypt the international mobile identity code IMSI by using a key corresponding to the roaming operator data maintained locally, to obtain first information; An authentication unit is used to perform roaming authentication based on the first information.

13. A communication device, characterized in that: The device comprises: A receiving unit, configured to receive first information from a terminal; An authentication unit is used to perform roaming authentication based on the first information.

14. An electronic device, characterized in that: include: a memory for storing computer readable instructions; as well as A processor is used to run the computer-readable instructions so that the electronic device executes the method according to any one of claims 1 to 10.

15. A non-transitory computer-readable storage medium for storing computer-readable instructions, characterized in that: When the computer-readable instructions are executed by a processor, the processor is caused to perform the method according to any one of claims 1 to 10.

16. A computer program product, characterized in that The method comprises a computer program, which implements the method according to any one of claims 1 to 10 when being executed by a processor.

Images