Communication method and device

Abstract

The embodiment of the invention provides a communication method and device, and the method comprises the steps that terminal equipment receives a first message from network equipment, and the first message is used for indicating the setting of a power threshold value corresponding to a first access type as a first preset value; and the terminal device sets a power threshold value corresponding to the first access type based on the first message. In the method, the network equipment flexibly indicates the terminal equipment to set the power threshold value corresponding to the first access type, so that the terminal equipment can be effectively prevented from being accessed to the access network equipment / network with relatively low security and further being attacked by an unreal network to cause abnormal communication; through the method, the communication security between the terminal equipment and a real network can be effectively guaranteed.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to a communication method and device. Background Art

[0002] With the development of communication technology, the number of terminals has gradually increased. In order to achieve better communication, more and more base stations have been deployed. In order to monitor user messages and steal user data (such as stealing user bank card information, ID card information, etc.), attackers may deploy false base stations (FBS), which attract terminal access through higher signal power. Once the terminal is connected to the false base station, the false base station can launch a denial of service (DoS) attack on the terminal, resulting in the theft of user data. If the uplink message sent by the terminal or the downlink message sent by the real base station does not have integrity protection, the false base station can also tamper with the content of the uplink message or the content of the downlink message, making the interactive information between the terminal and the real base station unable to be secure.

[0003] Therefore, how to ensure the security of communication between the terminal and the real network is an urgent problem to be solved. Summary of the invention

[0004] The present application proposes a communication method and apparatus, which can effectively ensure the security of communication between terminal equipment and a real network.

[0005] In the first aspect, the present application implements a communication method, which can be executed by a terminal device or by a chip or chip system corresponding to the terminal device, without limitation. Taking a terminal device as an example, the specific steps of the method may include: the terminal device receives a first message from a network device, the first message is used to instruct the terminal device to set a value of access information; the terminal device sets a value of the access information based on the first message.

[0006] In an embodiment of the present application, the network device may be an access network device or a core network device. If the first message is generated by the access network device and sent to the terminal device, the first message may be an access layer AS message, such as a radio resource control RRC setup message, a radio resource control reestablishment RRC reestablishment message, a radio resource control release RRC release message, a radio resource control reconfiguration RRC reconfiguration message, etc. If the first message is generated by the core network device and sent to the terminal device, the first message may be a non-access layer NAS message, such as a registration accept message, a registration reject message, a protocol data unit PDU session establishment accept message, a PDU session modification accept message, etc.

[0007] System messages are key information for mobile terminal devices to connect to the network. System messages provide the terminal devices with all the necessary information (parameters) required to access the network. The access information involved in the embodiments of the present application refers to the information or parameters required for the terminal device to connect (including access / switching / selection / reselection / residence) to the network in the system message. Exemplarily, the access information may be, but is not limited to, the power threshold corresponding to the access type and / or the frequency priority corresponding to the access type.

[0008] In the present application scheme, the network device instructs the terminal device to flexibly set the value of the access information, which can effectively prevent the terminal device from accessing a network with lower security and then being attacked by a non-real network / malicious network / non-secure network and unable to communicate normally. This method can effectively ensure the communication security between the terminal device and the real network.

[0009] In a possible implementation, before the terminal device receives the first message from the network device, the method further includes: the terminal device sends capability information of the terminal device to the network device, where the capability information of the terminal device is used to indicate that the terminal device supports setting the value of the access information.

[0010] Through this implementation, the network device can learn that the terminal device has the ability to set the value of the access information, and then can effectively instruct the terminal device to perform the setting.

[0011] In a possible implementation, the first message includes first indication information, and the first indication information is used to instruct the terminal device to set the power threshold corresponding to the first access type to a first preset value. The first access type belongs to a low priority access type; illustratively, the first access type may be, but is not limited to, a second generation radio access network 2G GERAN and a third generation universal mobile communication system terrestrial radio access network 3G UTRAN.

[0012] In an embodiment of the present application, since the first access type is a low-priority access type, in order to prevent the terminal device from accessing / switching / selecting / reselecting / residing in the access network device / network of the first access type, which may cause security problems, the power threshold value corresponding to the access network device needs to be set to a relatively large value, that is, the first preset value should be a larger value.

[0013] Through this implementation, the terminal device can be prevented from connecting to a low-priority network and then being attacked by a non-real network / malicious network / non-secure network, and the security of the terminal device's communication can be effectively guaranteed.

[0014] In a possible implementation, the first indication information is also used to indicate that the power threshold corresponding to the second access type is set to a second preset value. The second access type belongs to a high priority access type; illustratively, the second access type may be, but is not limited to, the fourth generation evolved universal mobile communication system terrestrial radio access network 4G E-UTRAN and the fifth generation new air interface 5G NR. The second access type may also be an access type corresponding to a future communication network, such as an access type corresponding to a sixth generation 6G communication network / an extended access type of a 6G communication network.

[0015] Since the second access type is a high-priority access type, in order to make it easier for the terminal device to access the access network device / network of the second access type to ensure its security, the power threshold value corresponding to the second access type should be set to a relatively small value, that is, the second preset value should be a smaller value, which is equivalent to lowering the threshold for the terminal to access / switch / select / reselect / reside in the access network device / network of the second access type.

[0016] Through this implementation, the terminal device can be connected to a high-priority network more easily, thereby ensuring the security of the terminal device's communication.

[0017] In a possible implementation, the first message also includes the first preset value and / or the second preset value. Through this implementation, the network device can provide the first preset value and / or the second preset value to the terminal device according to the actual situation of the network corresponding to the first access type and / or the second access type, so that the terminal device effectively sets the value of the power threshold of the corresponding access type.

[0018] In a possible implementation, the method further includes: the terminal device receiving second indication information from the network device, where the second indication information is used to instruct the terminal device to set a value of the access information according to a value in the system message.

[0019] Through this implementation, when the terminal device no longer needs to protect itself from attacks from non-real networks / malicious networks / non-secure networks, the terminal device can normally use the system information broadcast by the network device to achieve network connection.

[0020] In the second aspect, the present application implements a communication method, which can be executed by a network device, or by a chip or chip system corresponding to the network device, without limitation. Taking a network device as an example, the specific steps of the method may include: the network device generates a first message, the first message is used to instruct the terminal device to set the value of the access information; the terminal device sends the first message to the terminal device.

[0021] In an embodiment of the present application, the network device may be an access network device or a core network device. If the first message is generated by the access network device and sent to the terminal device, the first message may be an access layer AS message, such as a radio resource control RRC setup message, a radio resource control reestablishment RRC reestablishment message, a radio resource control release RRC release message, a radio resource control reconfiguration RRC reconfiguration message, etc. If the first message is generated by the core network device and sent to the terminal device, the first message may be a non-access layer NAS message, such as a registration accept message, a registration reject message, a protocol data unit PDU session establishment accept message, a PDU session modification accept message, etc.

[0022] System messages are key information for mobile terminal devices to connect to the network. System messages provide the terminal devices with all necessary information (parameters) required to access the network. The access information involved in the embodiments of the present application refers to the information or parameters required for the terminal device to connect (including access / switching / selection / reselection / residence) to the network in the system message. Exemplarily, the access information may be, but is not limited to, the power threshold corresponding to the access type and / or the frequency priority corresponding to the access type.

[0023] In the present application scheme, the network device instructs the terminal device to flexibly set the value of the access information, which can effectively prevent the terminal device from accessing a network with lower security and then being attacked by a non-real network / malicious network / non-secure network and unable to communicate normally. This method can effectively ensure the communication security between the terminal device and the real network.

[0024] In a possible implementation, the method further includes: the terminal device receiving capability information of the terminal device, where the capability information of the terminal device is used to indicate that the terminal device supports setting a value of the access information.

[0025] Through this implementation, the network device can learn that the terminal device has the ability to set the value of the access information, and then can effectively instruct the terminal device to perform the setting.

[0026] In a possible implementation, the first message includes first indication information, and the first indication information is used to instruct the terminal device to set the power threshold corresponding to the first access type to a first preset value. The first access type belongs to a low priority access type; illustratively, the first access type may be, but is not limited to, a second generation radio access network 2G GERAN and a third generation universal mobile communication system terrestrial radio access network 3G UTRAN.

[0027] Through this implementation, the terminal device can be prevented from connecting to a low-priority network and then being attacked by a non-real network / malicious network / non-secure network, and the security of the terminal device's communication can be effectively guaranteed.

[0028] In a possible implementation, the first indication information is further used to indicate that the power threshold corresponding to the second access type is set to a second preset value. The second access type belongs to a high priority access type; illustratively, the second access type may be, but is not limited to, the fourth generation evolved universal mobile communication system terrestrial radio access network 4G E-UTRAN and the fifth generation new air interface 5G NR. The second access type may also be an access type corresponding to a future communication network, such as an access type corresponding to a sixth generation 6G communication network / an extended access type of a 6G communication network.

[0029] Through this implementation, the terminal device can be connected to a high-priority network more easily, thereby ensuring the security of the terminal device's communication.

[0030] In a possible implementation, the first message also includes the first preset value and / or the second preset value. Through this implementation, the network device can provide the first preset value and / or the second preset value to the terminal device according to the actual situation of the network corresponding to the first access type and / or the second access type, so that the terminal device effectively sets the value of the power threshold of the corresponding access type.

[0031] In a possible implementation, the method further includes: the network device sending second indication information to the terminal device, where the second indication information is used to instruct the terminal device to set a value of the access information according to a value in the system message.

[0032] Through this implementation, when the terminal device no longer needs to protect itself from attacks from non-real networks / malicious networks / non-secure networks, the terminal device can normally use the system information broadcast by the network device to achieve network connection.

[0033] In a third aspect, the present application provides a communication method, which can be executed by a terminal device or by a chip or chip system corresponding to the terminal device, without limitation. Taking a terminal device as an example, the specific steps of the method may include: the terminal device receives a first message from a network device, the first message is used to indicate that a power threshold value corresponding to a first access type is set to a first preset value; the terminal device then sets a power threshold value corresponding to the first access type based on the first message.

[0034] In an embodiment of the present application, the network device may be an access network device or a core network device. If the first message is generated by the access network device and sent to the terminal device, the first message may be an access layer AS message, such as a radio resource control establishment RRC setup message, a radio resource control reconstruction RRC reestablishment message, a radio resource control release RRC release message, a radio resource control reconfiguration RRC reconfiguration message, etc. If the first message is generated by the core network device and sent to the terminal device, the first message may be a non-access layer NAS message, such as a registration accept message, a registration reject message, a protocol data unit PDU session establishment accept message, a PDU session modification accept message, etc. The above-mentioned first access type belongs to a low priority access type; exemplarily, the first access type may be, but is not limited to, a second generation radio access network 2GGERAN, or a third generation universal mobile communication system terrestrial radio access network 3G UTRAN.

[0035] In the present application scheme, the network device can flexibly instruct the terminal device to set the power threshold value corresponding to the first access type (low priority access type), so that the terminal device can ignore the power threshold value corresponding to the first access type contained in the system message and set the power threshold value corresponding to the first access type to a first preset value (i.e., a pre-set value) according to the instruction of the network device; through this method, it can be known that the network device can indicate the power threshold value corresponding to the access type to the terminal device according to the actual situation of the access type, so as to prevent the terminal device from accessing a low-priority network and then being attacked by a low-priority non-real network / malicious network / non-secure network, thereby effectively ensuring the security of communication between the terminal device and the real network.

[0036] In an embodiment of the present application, since the first access type belongs to a low-priority access type, when the terminal device sets the power threshold value corresponding to the first access type to a first preset value (i.e., a pre-set value) according to the instruction of the network device, the first preset value should be a larger value to prevent the terminal device from accessing / switching / selecting / reselecting / residing in the access network device corresponding to the first access type, thereby effectively ensuring the communication security of the terminal device.

[0037] In a possible implementation, before the terminal device receives the first message from the network device, the method further includes: the terminal device sends capability information of the terminal device to the network device, where the capability information of the terminal device is used to indicate that the terminal device supports setting a power threshold value corresponding to an access type.

[0038] In the embodiment of the present application, if the network device is an access network device, the terminal device can carry its own capability information in an access layer AS message (such as an RRC establishment request message or an RRC control resource release request message) to send to the access network device. If the network device is a core network device, the terminal device can carry its own capability information in a non-access layer NAS message (such as a registration request message) to send to the core network device.

[0039] Through this implementation, the network device can effectively learn that the terminal device supports setting the power threshold value corresponding to the access type, and can then effectively instruct the terminal device to execute the setting of the power threshold value corresponding to the specified access type.

[0040] In a possible implementation, the first message is also used to indicate that the power threshold value corresponding to the second access type is set to a second preset value. In an embodiment of the present application, the second access type belongs to a high priority access type, and the second access type may be, but is not limited to: the fourth generation evolved universal mobile communication system terrestrial radio access network 4G E-UTRAN, the fifth generation new air interface 5G NR. The second access type may also be an access type corresponding to a future communication network, such as an access type corresponding to a sixth generation 6G communication network / an extended access type of a 6G communication network.

[0041] In an embodiment of the present application, since the second access type belongs to a high-priority access type, when the terminal device sets the power threshold value corresponding to the second access type to a second preset value (i.e., a pre-set value) according to the instructions of the network device, the second preset value should be a smaller value so that the terminal device can more easily access / switch / select / reselect / reside in the access network device corresponding to the second access type.

[0042] Through this implementation, the network device can also flexibly instruct the terminal device to set the power threshold value corresponding to the high-priority access type, so that the terminal device can access the high-priority access network device to ensure the security of the terminal device.

[0043] In a possible implementation manner, the first message includes the first preset value and / or the second preset value.

[0044] Through this implementation, the terminal device can effectively obtain the value of the power threshold corresponding to the first access type (i.e., the first preset value) and the value of the power threshold corresponding to the second access type (i.e., the second preset value) from the network device (i.e., the access network device / core network device) to perform subsequent settings.

[0045] In a fourth aspect, the present application provides a communication method, which can be executed by a network device or by a chip or chip system corresponding to the network device, without limitation. Taking a network device as an example, the method can specifically include: the network device generates a first message, the first message is used to indicate that the power threshold value corresponding to the first access type is set to a first preset value; the network device sends the first message to the terminal device.

[0046] In the embodiment of the present application, the network device may be an access network device or a core network device. If the first message is generated by the access network device and sent to the terminal device, the first message may be an access layer (AS) message, such as a radio resource control setup RRC setup message, a radio resource control reconstruction RRC reestablishment message, a radio resource control release RRC release message, a radio resource control reconfiguration RRC reconfiguration message, etc. If the first message is generated by the core network device and sent to the terminal device, the first message may be a non-access layer (NAS) message, such as a registration accept message, a registration reject message, a protocol data unit PDU session establishment accept message, a PDU session modification accept message, etc. In addition, the above-mentioned first access type belongs to a low priority access type; illustratively, the first access type may be, but is not limited to, a second generation radio access network 2G GERAN, or a third generation universal mobile communication system terrestrial radio access network 3G UTRAN.

[0047] In the present application scheme, the network device can flexibly instruct the terminal device to set the power threshold value corresponding to the first access type (low priority access type), so that the terminal device can ignore the power threshold value corresponding to the first access type contained in the system message and set the power threshold value corresponding to the first access type to a first preset value (i.e., a pre-set value) according to the instruction of the network device; through this method, it can be known that the network device can indicate the power threshold value corresponding to the access network type to the terminal device according to the actual situation of the access type, so as to prevent the terminal device from accessing a low-priority network and then being attacked by a low-priority non-real network / malicious network, thereby effectively ensuring the security of communication between the terminal device and the real network.

[0048] In a possible implementation, the method further includes: the network device receiving capability information of the terminal device, where the capability information of the terminal device is used to indicate that the terminal device supports setting a power threshold value corresponding to an access type.

[0049] Through this implementation, the network device can effectively learn that the terminal device supports setting the power threshold value corresponding to the access type, and can then effectively instruct the terminal device to execute the setting of the power threshold value corresponding to the specified access type.

[0050] In a possible implementation, the first message is also used to indicate that the power threshold value corresponding to the second access type is set to a second preset value. In an embodiment of the present application, the second access type belongs to a high priority access type, and the second access type may be, but is not limited to: the fourth generation evolved universal mobile communication system terrestrial radio access network 4G E-UTRAN, the fifth generation new air interface 5G NR. The second access type may also be an access type corresponding to a future communication network, such as an access type corresponding to a sixth generation 6G communication network / an extended access type of a 6G communication network.

[0051] Through this implementation, the network device can also flexibly instruct the terminal device to set the power threshold value corresponding to the access network device of the high priority access type, so that the terminal device can access the high priority access network device to ensure the security of the terminal device.

[0052] In a possible implementation manner, the first message includes the first preset value and / or the second preset value.

[0053] Through this implementation, the network device (i.e., access network device / core network device) can effectively provide the terminal device with the value of the power threshold corresponding to the first access type (i.e., the first preset value) and the value of the power threshold corresponding to the second access type (i.e., the second preset value), so that the terminal device can subsequently effectively execute the corresponding settings.

[0054] The embodiment of the present application also provides a solution for solving the problem of terminal devices being subjected to non-real network attacks. The solution is detailed in the following fifth and sixth aspects.

[0055] In a fifth aspect, the present application provides a communication method, which can be executed by a terminal device or by a chip or chip system corresponding to the terminal device, without limitation. Taking a terminal device as an example, the method can specifically include: the terminal device receives a second message from a network device, the second message including first tracking area indication information and identification information of a first access type corresponding to the first tracking area; based on the second message, determining that the first access type is not available in the first tracking area.

[0056] In an embodiment of the present application, the network device may be an access network device or a core network device. If the second message is generated by the access network device and sent to the terminal device, the second message may be an access layer (AS) message, such as a radio resource control RRC setup message, a radio resource control reestablishment RRC reestablishment message, a radio resource control release RRC release message, a radio resource control reconfiguration RRC reconfiguration message, etc. If the second message is generated by the core network device and sent to the terminal device, the second message may be a non-access layer (NAS) message, such as a registration accept message, a registration reject message, a protocol data unit PDU session establishment accept message, a PDU session modification accept message, etc.

[0057] In the above, the first tracking area indication information may be the address / identifier of the first tracking area, etc., or other information that can represent the first area, and this application does not make specific limitations on this. The first access type corresponding to the first tracking area may belong to a low priority access type (or a low security access type) or a high priority access type, without limitation. Exemplarily, the first access type may be a second generation radio access network 2G GERAN, a third generation universal mobile communications system terrestrial radio access network 3G UTRAN, a fourth generation evolved universal mobile communications system terrestrial radio access network 4G E-UTRAN, a fifth generation new air interface 5G NR, etc. The first access type may also include an access type corresponding to a future communication network, such as an access type corresponding to a sixth generation 6G communication network / an extended access type of a 6G communication network.

[0058] In the present application scheme, in order to ensure the security of communication with the terminal device, the network device can indicate to the terminal device through a second message the identification information of the first access type that is unavailable in the first tracking area based on the actual situation of the access type existing in the first tracking area; after the terminal device receives the second message, it can determine that the first access type cannot be used in the first tracking area, and then when it is located in the first tracking area, the first access type cannot be used to access / switch / select / reselect / reside in the corresponding network, thereby effectively ensuring the security of communication between the terminal device and the real network.

[0059] In a possible implementation, the method further includes: the terminal device sending capability information of the terminal device to the network device, where the capability information of the terminal device is used to indicate that the terminal device supports starting or shutting down a function corresponding to a corresponding access type.

[0060] In an embodiment of the present application, if the access network device provides the terminal device with information about access types that cannot be used in the tracking area, the terminal device can report to the access network device via the air interface whether it supports starting / closing (activating / deactivating, enabling / disabling) the function corresponding to the access type. If the core network device provides the terminal device with information about access types that cannot be used in the tracking area, the terminal device can carry its own capability information in a non-access layer NAS message (such as a registration request message) and send it to the core network device, so as to effectively report to the core network device whether it supports starting / closing (activating / deactivating, enabling / disabling) the function corresponding to the access type.

[0061] Through this implementation, the network device can effectively know whether it supports starting / turning off (activating / deactivating, enabling / disabling) the function corresponding to the access type, and then the network device can effectively provide the terminal device with the corresponding unusable access type in the tracking area.

[0062] In a possible implementation, the method further includes: the terminal device shuts down a function module corresponding to the first access type or ignores a signal and a system message corresponding to the first access type within the first tracking area. In the embodiment of the present application, the terminal device may also deactivate / disable a function corresponding to the first access type within the first tracking area, but is not limited to deactivating / disabling the function corresponding to the first access type, so that the terminal device cannot use the first access type.

[0063] Through this implementation, it can be ensured that the terminal device cannot access the corresponding access network device through the first access type.

[0064] In a possible implementation, the second message also includes second tracking area indication information and identification information of a second access type corresponding to the second tracking area. The second access type is a low priority access type (or a less secure access type). Exemplarily, the second access type is one or more of the following: second generation radio access network 2GGERAN, third generation universal mobile communication system terrestrial radio access network 3G UTRAN, fourth generation evolved universal mobile communication system terrestrial radio access network 4G E-UTRAN, fifth generation new air interface 5G NR. Similarly, the second access type may also include an access type corresponding to a future communication network, such as an access type corresponding to a sixth generation 6G communication network / an extended access type of a 6G communication network.

[0065] In an embodiment of the present application, the network device can provide one or more tracking area indication information and identification information of at least one access type corresponding to each tracking area to the terminal device (the present application does not specifically limit the number of tracking areas that the network device can provide and the number of access types corresponding to each tracking area).

[0066] Through this implementation, the network device can provide the terminal device with more tracking areas corresponding to unusable access types, so as to ensure the security of the terminal device's access to the network in a wider range.

[0067] In a sixth aspect, the present application provides a communication method, which can be executed by a network device or by a chip or chip system corresponding to the network device, without limitation. Taking a network device as an example, the method can specifically include: the network device generates a second message, the second message includes first tracking area indication information and identification information of a first access type corresponding to the first tracking area; the network device sends the second message to the terminal device.

[0068] In an embodiment of the present application, the network device may be an access network device or a core network device. If the second message is generated by the access network device and sent to the terminal device, the second message may be an access layer (AS) message, such as a radio resource control RRC setup message, a radio resource control reestablishment RRC reestablishment message, a radio resource control release RRC release message, a radio resource control reconfiguration RRC reconfiguration message, etc. If the second message is generated by the core network device and sent to the terminal device, the second message may be a non-access layer (NAS) message, such as a registration accept message, a registration reject message, a protocol data unit PDU session establishment accept message, a PDU session modification accept message, etc.

[0069] In the above, the first tracking area indication information may be the address / identifier of the first tracking area, etc., or other information that can represent the first area, which is not limited in this application. The first access type may refer to a low priority access type (or a low security access type). Exemplarily, the first access type is but not limited to the second generation radio access network 2G GERAN, the third generation universal mobile communications system terrestrial radio access network 3G UTRAN, the fourth generation evolved universal mobile communications system terrestrial radio access network 4G E-UTRAN, and the fifth generation new air interface 5G NR. The first access type may also include the access type corresponding to the future communication network, such as the access type corresponding to the sixth generation 6G communication network / the extended access type of the 6G communication network.

[0070] In the present application scheme, the network device can indicate to the terminal device through a second message the identification information of the first access type that is unavailable in the first tracking area, and then the terminal device can determine, based on the second message, that the first access type cannot be used in the first tracking area. Usually, the security performance of the network corresponding to the low-priority access type is weak. Through the present application scheme, when the terminal device is located in the tracking area, it can effectively prevent / avoid the terminal device from using the first access type to access / switch / select / reselect / reside in a low-priority network, thereby ensuring the communication security of the terminal device.

[0071] In a possible implementation, the method further includes: the network device receiving capability information of the terminal device, where the capability information of the terminal device is used to indicate that the terminal device supports starting or stopping a function of a corresponding access type.

[0072] In an embodiment of the present application, if the access network device provides the terminal device with information about access types that cannot be used in the tracking area, the terminal device can report to the access network device via the air interface whether it supports starting / closing (activating / deactivating, enabling / disabling) the function corresponding to the access type. If the core network device provides the terminal device with information about access types that cannot be used in the tracking area, the terminal device can carry its own capability information in a non-access layer NAS message (e.g., a registration request message) and send it to the core network device, so as to effectively report to the core network device whether it supports starting / closing (activating / deactivating, enabling / disabling) the function of the corresponding access type.

[0073] Through this implementation, the network device can effectively know whether it supports starting / turning off (activating / deactivating, enabling / disabling) the function corresponding to the access type, and then the network device can effectively provide the terminal device with the corresponding unusable access type in the tracking area.

[0074] In a possible implementation, the second message also includes second tracking area indication information and identification information of a second access type corresponding to the second tracking area. Exemplarily, the second access type may be, but is not limited to, a second generation radio access network 2G GERAN, a third generation universal mobile communications system terrestrial radio access network 3G UTRAN, a fourth generation evolved universal mobile communications system terrestrial radio access network 4G E-UTRAN, and a fifth generation new air interface 5G NR. The second access type may also include an access type corresponding to a future communication network, such as an access type corresponding to a sixth generation 6G communication network / an extended access type of a 6G communication network.

[0075] In an embodiment of the present application, the network device can provide one or more tracking area indication information and identification information of at least one access type corresponding to each tracking area to the terminal device (the present application does not specifically limit the number of tracking areas that the network device can provide and the number of access types corresponding to each tracking area).

[0076] Through this implementation, the network device can provide the terminal device with more tracking areas corresponding to unusable access types, so as to ensure the security of the terminal device's access to the network in a wider range.

[0077] In the seventh aspect, an embodiment of the present application also provides a communication device, which can be used to execute the method of the first aspect / third aspect / fifth aspect. The device can be a terminal device, or the device can be a component in the terminal device (for example, a chip, or a chip system, or a circuit), or it can be a device that can be used in combination with the terminal device.

[0078] In one possible implementation, the device may include a module or unit corresponding to the method / operation / step / action described in the first aspect / third aspect / fifth aspect, and the module or unit may be a hardware circuit, or software, or a hardware circuit combined with software. In one possible implementation, the device may include a processing unit (also referred to as a processing module) and a communication unit (also referred to as a communication module), wherein the communication unit may be used to perform the functions of receiving and / or sending, and the processing unit may be used to perform the method described in the first aspect / third aspect / fifth aspect or any possible implementation of the first aspect.

[0079] In the eighth aspect, an embodiment of the present application also provides a communication device, which can be used to execute the method of the second aspect / fourth aspect / sixth aspect. The device can be a network device, or the device can be a component in the network device (for example, a chip, or a chip system, or a circuit), or it can be a device that can be used in combination with the network device.

[0080] In one possible implementation, the device may include a module or unit corresponding to the method / operation / step / action described in the second aspect / fourth aspect / sixth aspect, and the module or unit may be a hardware circuit, or software, or a hardware circuit combined with software. In one possible implementation, the device may include a processing unit (also referred to as a processing module) and a communication unit (also referred to as a communication module), wherein the communication unit may be used to perform the functions of receiving and / or sending, and the processing unit may be used to perform the method described in any possible implementation of the second aspect or the second aspect / fourth aspect / sixth aspect.

[0081] In the ninth aspect, an embodiment of the present application provides a device, which includes: at least one processor and a communication interface; wherein the communication interface is used to communicate with other devices; the processor is used to run a set of programs so that the device implements the method provided in the first aspect or any possible implementation thereof, or enables the device to implement the method provided in the second aspect or any possible implementation thereof, or enables the device to implement the method provided in the third aspect or any possible implementation thereof; or enables the device to implement the method provided in the fourth aspect or any possible implementation thereof, or enables the device to implement the method provided in the fifth aspect or any possible implementation thereof; or enables the device to implement the method provided in the sixth aspect or any possible implementation thereof.

[0082] In the tenth aspect, an embodiment of the present application also provides a computer-readable storage medium, which stores a software program. When the software program is read and executed by one or more processors, it can implement the method provided by the first aspect or any possible implementation method thereof, or implement the method provided by the second aspect or any possible implementation method thereof, or implement the method provided by the third aspect or any possible implementation method thereof, or implement the method provided by the fourth aspect or any possible implementation method thereof, or implement the method provided by the fifth aspect or any possible implementation method thereof, or implement the method provided by the sixth aspect or any possible implementation method thereof.

[0083] In the eleventh aspect, the embodiments of the present application also provide a computer program product comprising instructions, which, when executed on a computer, enables the method provided by the first aspect or any possible implementation method thereof to be executed, or enables the method provided by the second aspect or any possible implementation method thereof to be executed, or enables the method provided by the third aspect or any possible implementation method thereof to be executed, or enables the method provided by the fourth aspect or any possible implementation method thereof to be executed, or enables the method provided by the fifth aspect or any possible implementation method thereof to be executed, or enables the method provided by the sixth aspect or any possible implementation method thereof to be executed.

[0084] In the twelfth aspect, an embodiment of the present application provides a communication system, including a terminal device capable of implementing the method provided in the first or third aspect above, and a network device (i.e., an access network device and / or a core network device) capable of implementing the method provided in the second or fourth aspect above.

[0085] In the thirteenth aspect, an embodiment of the present application also provides a chip system, which includes a processor for supporting a terminal device to implement the functions involved in the first or third aspect above; or for supporting a network device to implement the functions involved in the second or fourth aspect above.

[0086] In a possible design, the chip system further includes a memory, which is used to store necessary program instructions and data executed by the loading device. The chip system can be composed of chips or include chips and other discrete devices.

[0087] It should be noted that the technical effects that can be achieved by any possible implementation method of the above-mentioned seventh to thirteenth aspects or the seventh to thirteenth aspects can be correspondingly referred to the technical effects that can be achieved by any possible implementation method of the above-mentioned first to sixth aspects or the first to sixth aspects; they will not be repeated here. BRIEF DESCRIPTION OF THE DRAWINGS

[0088] Figure 1 This is a schematic diagram of a fake base station attack in a high-speed mode;

[0089] Figure 2 A schematic diagram of a communication system architecture to which the method of the embodiment of the present application is applicable;

[0090] Figure 3A A flow chart of a communication method provided in an embodiment of the present application;

[0091] Figure 3B A flow chart of another communication method provided in an embodiment of the present application;

[0092] Figure 4 This is a schematic diagram of the first embodiment provided in the embodiments of the present application;

[0093] Figure 5 A schematic diagram of a second embodiment provided in the embodiments of the present application;

[0094] Figure 6 A schematic diagram of the process of the third embodiment provided in the embodiments of the present application;

[0095] Figure 7 A schematic diagram of the structure of a communication device provided in an embodiment of the present application;

[0096] Figure 8 A schematic diagram of the structure of another communication device provided in an embodiment of the present application;

[0097] Fig. 9 A schematic diagram of the structure of a chip provided in an embodiment of the present application. DETAILED DESCRIPTION

[0098] The technical solutions in the embodiments of the present application will be described clearly and completely below in conjunction with the drawings in the embodiments of the present application. The terms used in the following embodiments are only for the purpose of describing specific embodiments and are not intended to be used as limitations on the present application. As used in the specification and the appended claims of the present application, the singular expressions "one", "a kind", "said", "above", "the" are intended to also include expressions such as "one or more", unless there is a clear contrary indication in the context. It should also be understood that in the embodiments of the present application, "one or more" refers to one, two or more; "and / or" describes the association relationship of associated objects, indicating that three relationships may exist; for example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone, where A and B can be singular or plural. The character " / " generally indicates that the objects associated before and after are in an "or" relationship.

[0099] References to "one embodiment" or "some embodiments" described in this specification mean that one or more embodiments of the present application include specific features, structures or characteristics described in conjunction with the embodiment. The terms "including", "comprising", "having" and their variations involved in this application all mean "including but not limited to", unless otherwise specifically emphasized in other ways. Words such as "exemplary" or "for example" are used to indicate examples, illustrations or descriptions, and any embodiment or design described as "exemplary" or "for example" should not be interpreted as being more preferred or more advantageous than other embodiments or designs. The use of words such as "exemplary" or "for example" is intended to present related concepts in a concrete way for easy understanding.

[0100] The multiple involved in the embodiments of the present application refers to greater than or equal to two. It should be noted that in the description of the embodiments of the present application, the words "first" and "second" are only used to distinguish the purpose of description, and cannot be understood as indicating or implying relative importance, nor can they be understood as indicating or implying order. In addition, the term "used for indication" mentioned in the description of the embodiments of the present application can include being used for direct indication and being used for indirect indication. When describing that a certain indication information is used to indicate A, it can include that the indication information directly indicates A or indirectly indicates A, and it does not mean that the indication information must carry A.

[0101] In the embodiments of the present application, "value" may refer to a specific numerical value. For example, the value of access information set by a terminal device refers to the terminal device setting the numerical value corresponding to the access information. "Value" may also be replaced by "numerical value", "value", etc.

[0102] In order to better understand the solutions provided by the embodiments of the present application, the following first explains the scenarios, related technologies and terms used in the embodiments of the present application. It should be noted that these explanations are intended to make the embodiments of the present application easier to understand and should not be regarded as limiting the scope of protection claimed by the present application.

[0103] 1. Fake base station attack:

[0104] Traditional low-standard base stations (such as 2G / 3G base stations) have many deficiencies in protocol security design, so these base stations are often attacked by fake base stations. Although the higher-standard base stations currently used have greatly improved in security, they still have attacks by fake base stations. Figure 1 As shown in the figure, assuming that there are both 2G signals and 4G signals in the space, the terminal UE will usually give priority to / reside in the 4G cell. The low-standard pseudo base station can switch the terminal (UE) to it through the following steps:

[0105] 1. An attacker can forge a high-standard base station, such as a 4G fake base station. The power of the signal transmitted by the 4G fake base station is higher than the power of the signal transmitted by the surrounding normal high-standard base stations (such as 4G normal base stations). In this way, the UE will be attracted by the 4G fake base station and choose to stay on the 4G fake base station with higher signal strength.

[0106] 2. The 4G fake base station can send some parameters to the UE by broadcasting system messages. These parameters involve the conditions that the UE needs to meet in order to stay / select the 4G standard, and also involve the conditions that the UE needs to meet in order to switch / reselect / stay in the 2G standard. The fake base station can set the value of the parameter P1 (such as the parameter ThreshServing, LowP) related to controlling the UE to select / stay in 4G to be relatively high, and / or set the value of the parameter P2 (such as the parameter Q-RXLevMin) related to controlling the UE to switch / reselect / stay in 2G to be relatively low, so that the threshold for the UE to stay in 4G becomes higher, while the threshold for switching / reselecting / staying in 2G becomes lower. At this time, the attacker forges a low-standard base station, such as a 2G fake base station, so that the UE is likely to switch to the 2G fake base station.

[0107] In the above, the parameter ThreshServing,LowP represents: the lowest threshold of the reference signal receiving power (RSRP) for serving cell reselection. The parameter Q-RXLevMin represents: the minimum received signal level of the serving cell, that is, the minimum reference signal level for allowing access to the serving cell.

[0108] 3. 2G fake base stations can take advantage of the weak 2G security mechanism to launch regular 2G fake base station attacks on UEs, causing UE information and / or data to be stolen by attackers.

[0109] In the embodiments of the present application, the "pseudo base station" is also called "fake base station" or "fake base station". It is an illegal radio communication device that takes advantage of the one-way authentication defect of the global system for mobile communications (GSM). It is mainly composed of a host and a laptop computer. It can search for GSM user terminal information (such as mobile phone information) within a certain radius centered on it, and can arbitrarily send fraudulent, sales and other spam text messages to user terminals by pretending to be other people's information. Therefore, when the fake base station is running, the user's signal will be forced to connect to the device, which will not only cause the user's data / information to leak, but also the user cannot connect to the public network (i.e. the real network), affecting the user's normal communication.

[0110] 2. The formats involved in the embodiments of this application:

[0111] With the continuous development of mobile communication technology and network specifications, the currently defined communication network standards include 5G, 4G, 3G, 2G, etc. Generally, the newer the technology developed, the higher the level or priority. And the network security of high priority / high-level standards is stronger than the network security of low priority / low-level standards. When a terminal device has the access capability of high-level standards and low-level standards, if there are both high-level and low-level networks / cells / signals in the space where the terminal device is located, the terminal device will try to access the high-level standard first.

[0112] In the embodiment of the present application, the high-level standard (also referred to as the high-level standard, or the high-priority standard) and the low-level standard (also referred to as the low-level standard, or the low-priority standard) can be divided according to the priority of the standard. The higher the priority, the higher the level. The high-level standard and the low-level standard can refer to two different standards currently defined, for example, the high-level standard is the 4G / 5G standard, and the low-level standard is the 2G / 3G standard. It can also refer to two standards with different priorities under the same standard that are currently defined, such as the more fine-grained 4G standard 1 and 4G standard 2 under the 4G standard. If the priority of 4G standard 2 is higher than the priority of 4G standard 1, then 4G standard 2 is used as the high-level standard and 4G standard 1 is used as the low-level standard.

[0113] In the embodiment of the present application, the current 4G / 5G may not be fixed as a high-level standard, nor may the current 2G / 3G be fixed as a low-level standard, but may be flexibly set according to the priority. For example, under normal circumstances, 4G / 5G is a high-level standard and 2G / 3G is a low-level standard, but in a scenario where there are only 4G and 5G, 5G is a high-level standard and 4G is a low-level standard; in a scenario where there are only 2G and 3G, 3G is a high-level standard and 2G is a low-level standard.

[0114] In the embodiment of the present application, the priority of the standard can be set by the network or terminal manufacturer or the user himself. For example, the user considers that the 5G package fee is expensive, so 4G is set as a high priority standard. At the same time, for the same terminal device, there may be overlap between the high priority and low priority standards.

[0115] In addition, when the terminal accesses different standard networks, the access types used are also different. The access types of different standards involved in the embodiments of the present application may include NR (5G), 4G-E-UTRA, 3G-UTRAN, 2G-GERAN, and access types corresponding to higher standard networks in the future (for example, the access type / extended access type corresponding to the sixth generation 6G network). In the embodiments of the present application, high priority access types and priority access types are defined. Similar to the above-mentioned communication network standards, high priority access types correspond to high priority standard communication networks, and low priority access types correspond to low priority standard communication networks.

[0116] 3. System information (also called system message):

[0117] System information is broadcast periodically by the base station in the downlink, and its content includes the basic configuration information of the base station, key parameters of the air interface (Uu interface) protocol layer, etc. Therefore, system information is very important for UE. After the UE of any mobile communication system is turned on (powered on), it first needs to read the system message of the cell before performing operations such as cell selection, reselection, and PLMN selection. 5G UE is no exception.

[0118] The system information mainly includes the master information block (MIB), the system information block (SIB) and the positioning system information block. The master information block includes some of the most important and frequently transmitted parameters that the terminal needs to obtain from the accessed cell, such as downlink bandwidth configuration, system frame number, etc.; the system information block includes multiple different information blocks. Taking system information block 1 as an example, it includes a public land mobile network identifier, tracking area number, cell identifier, cell selection information, etc. The positioning system information block mainly includes positioning-related parameters, such as base station location, etc. Since the content in the positioning system information may change at any time as the terminal location changes, the system information used to calculate the hash value in this application only includes the master information block and / or the system information block.

[0119] In view of the above-mentioned problem that terminal devices are currently vulnerable to attacks by pseudo base stations (non-real networks / malicious networks / non-secure networks), the present application provides a communication method, which can prevent terminal devices from being attacked by non-real networks / malicious networks / non-secure networks and effectively ensure the security of communications between terminal devices and real networks.

[0120] The embodiments of the present application may be applicable to a wireless communication system. The wireless communication system may comply with the wireless communication standards of the third generation partnership project (3GPP), or may comply with other wireless communication standards, such as the wireless communication standards of the 802 series (such as 802.11, 802.15, or 802.20) of the Institute of Electrical and Electronics Engineers (IEEE).

[0121] The technical solution of the embodiment of the present application can be applied to various communication systems, such as: global system for mobile communications (GSM), code division multiple access (CDMA), general packet radio service (GPRS), enhanced data rates for GSM Evolution (EDGE), interim standard 95 CDMA (IS-95 CDMA), wideband code division multiple access (WCDMA), CDMA2000, time division synchronous code division multiple access (TD-SCDMA), LTE, universal mobile telecommunication system (UMTS), worldwide interoperability for microwave access (WiMAX) communication system, as well as 5G communication system and future communication system. Among them, LTE includes time division duplex LTE (LTE TDD, or TD-LTE) and frequency division duplex LTE (LTE FDD). It can also be applied to vehicle network communication systems and satellite communication systems.

[0122] Among them, the two systems of TD-SCDMA and WCDMA are universal mobile telecommunication systems (UMTS) of 3G mobile phone technology. UMTS is issued by the standardization organization 3GPP (The 3rd Generation Partnership Project). The network structure of UMTS can be divided into UMTS terrestrial radio access network (UTRAN) and core network (CN). In the UTRAN architecture, the radio access network (RAN) is divided into multiple radio network subsystems (RNS). Each RNS includes a radio network controller (RNC) and one or more Node Bs (base stations). RNC is responsible for allocating, reconfiguring and releasing radio resources within the RNS. Node B is a node with wireless transceiver functions, supporting the air interface of wireless terminal devices within its cell range and providing services for the cell. Node B and RNC communicate through the Iub interface, and RNCs can be interconnected through interfaces including direct physical connections or virtual networks using any appropriate transmission network.

[0123] Unless otherwise specified, 2G networks usually include GSM, CDMA, GPRS, EDGE and IS-95CDMA. 3G networks usually include TD-SCDMA, WCDMA, CDMA2000 and CDMA2000 upgrades. 4G networks include long term evolution (LTE) technology. 5G networks include new radio (NR). Currently, terminal devices can also support multiple networks, and thus can achieve roaming in multiple networks.

[0124] Figure 2 A possible, non-limiting communication system architecture applicable to the embodiments of the present application is shown. Figure 2 As shown, the communication system 2000 may include at least one access network device (such as Figure 2 110a, 110b, 110c), and may also include at least one terminal device (such as Figure 2 120a-120g). Figure 2This is just a schematic diagram. The communication system 2000 may also include a core network 200 and the Internet 300, as well as other communication devices, such as wireless relay devices and wireless backhaul devices. The terminal device is connected to the access network device in a wireless manner. The access network device can be connected to the core network 200 in a wireless or wired manner. The core network device and each access network device in the core network 200 can be different physical devices, or they can be the same physical device that integrates the core network logical function and the wireless access network logical function.

[0125] The network device provided in the embodiment of the present application may be an access network device, such as a base station, a Node B, an evolved Node B (eNodeB or eNB), a transmission reception point (TRP), a next generation Node B (gNB) in a fifth generation (5G) mobile communication system, an access network device in an open radio access network (O-RAN or open RAN), a next generation base station in a sixth generation (6G) mobile communication system, or a base station in a future mobile communication system, or an access node in a wireless fidelity (WiFi) system, etc. Alternatively, the network device may be a module or unit that performs part of the functions of a base station, for example, a centralized unit (CU), a distributed unit (DU), a centralized unit control plane (CU control plane, CU-CP) module, or a centralized unit user plane (CU user plane, CU-UP) module, etc. The network device may be a satellite (such as Figure 2 110a), or a macro base station (such as Figure 2 110b), or a micro base station or an indoor station (such as Figure 2 110c), may also be a relay node or a donor node, etc. The specific communication technology and specific device form adopted by the network device are not limited in this application. For the convenience of description, the following description is taken as an example.

[0126] It should be noted that in different systems, CU (or CU-CP and CU-UP), or DU may have different names, but those skilled in the art can understand their meanings. For example, in the open radio access network (O-RAN) system, CU may also be called O-CU (open CU), DU may also be called O-DU, CU-CP may also be called O-CU-CP, CU-UP may also be called O-CU-UP, and RU may also be called O-RU. For the convenience of description, this application takes CU, CU-CP, CU-UP, DU and RU as examples for description. Any unit of CU (or CU-CP and CU-UP), DU and RU in this application may be implemented by a software module, a hardware module, or a combination of a software module and a hardware module.

[0127] The terminal device provided in the embodiment of the present application may also be referred to as a terminal, including but not limited to: user equipment (UE), mobile station, or mobile terminal. The terminal device can be widely used in various scenarios for communication. The scenario includes, for example, but is not limited to at least one of the following scenarios: enhanced mobile broadband (eMBB), ultra-reliable low-latency communication (URLLC), massive machine-type communications (mMTC), device-to-device (D2D), vehicle to everything (V2X), machine-type communication (MTC), Internet of Things (IOT), virtual reality, augmented reality, industrial control, autonomous driving, telemedicine, smart grid, smart furniture, smart office, smart wearable, smart transportation, or smart city. The terminal device can be a mobile phone (such as Figure 2 Mobile phones 120a, 120d, 120f), tablet computers, computers with wireless transceiver functions (such as Figure 2 Computers 120g in the market), wearable devices, vehicles (such as Figure 2 120b), drones, helicopters, airplanes (such as Figure 2 120c in ), ships, robots, robotic arms, or smart home devices (such as Figure 2 The present application does not limit the specific communication technology and specific device form adopted by the terminal device. For the convenience of description, the following description is made by taking the terminal device as an example.

[0128] The network equipment and / or terminal equipment can be fixed or movable. The network equipment and / or terminal equipment can be deployed on land, including indoors or outdoors, handheld or vehicle-mounted; or can be deployed on the water surface; or can be deployed on aircraft, balloons and artificial satellites in the air. This application does not limit the environment / scenario in which the network equipment and terminal equipment are located. The network equipment and terminal equipment can be deployed in the same or different environments / scenarios, for example, the network equipment and terminal equipment are deployed on land at the same time; or, the network equipment is deployed on land and the terminal equipment is deployed on the water surface, etc., and examples are not given one by one.

[0129] In the embodiments of the present application, the term "system" can be replaced with "network". The system architecture described in the embodiments of the present application is to more clearly illustrate the technical solution of the embodiments of the present application, and does not constitute a limitation on the technical solution provided in the embodiments of the present application. It is known to those skilled in the art that with the evolution of the network architecture, the technical solution provided in the embodiments of the present application is also applicable to similar technical problems.

[0130] The technical solution of the present application is introduced below in conjunction with specific embodiments.

[0131] The present invention provides a communication method which is applicable to but not limited to Figure 2 The communication system shown. The method can be executed by a terminal device or a network device; or the method can be executed by a component (module, chip, etc.) in the terminal device or the network device; or the method can be executed by a device corresponding to the terminal device or the network device. The embodiments of the present application do not specifically limit the specific form and quantity of the terminal device and the network device. Please refer to Figure 3A As shown, the specific process of this method is as follows:

[0132] S301A: The network device sends a first message to the terminal device, where the first message is used to indicate a value for setting access information. Correspondingly, the terminal device receives the first message from the network device.

[0133] In a possible implementation, the first message is used to indicate that a power threshold corresponding to the first access type is set to a first preset value.

[0134] Exemplarily, the power threshold may be a minimum threshold of the reference signal received power RSRP when the UE reselects a serving cell. For example, the first preset value is 6, that is, the parameter ThershServingLowP=6dB.

[0135] In a possible implementation manner, the first message may be generated by the network device.

[0136] In an embodiment of the present application, the network device may be an access network device or a core network device. If the first message is generated by the access network device and sent to the terminal device, the first message may be an access stratum (AS) message, such as a radio resource control RRC setup message, a radio resource control (RRC) reconstruction message, a radio resource control RRC release message, a radio resource control reconfiguration RRCreconfiguration message, etc. If the first message is generated by the core network device and sent to the terminal device, the first message may be a non-access stratum (NAS) message, such as a registration accept message, a registration reject message, a protocol data unit PDU session establishment accept message, a protocol data unit (PDU) session modification accept message, etc.

[0137] System messages are key information for mobile terminal devices to connect to the network. System messages provide the terminal devices with all the necessary information (parameters) required to access the network. The access information involved in the embodiments of the present application refers to the information or parameters required for the terminal device to connect (including access / switching / selection / reselection / residence) to the network in the system message. Exemplarily, the access information may be, but is not limited to, the power threshold corresponding to the access type and / or the frequency priority corresponding to the access type.

[0138] In a possible implementation, before receiving the first message from the network device, the terminal device sends the capability information of the terminal device to the network device, and the capability information of the terminal device is used to indicate that the terminal device supports setting the value of the access information. That is, for the access information, the terminal device may not use the value provided in the system information, but supports setting to other preset values.

[0139] In the embodiment of the present application, if the destination reported by the terminal device is an access network device, the terminal device can carry its own capability information in an access layer AS message (such as an RRC establishment request message or an RRC control resource release request message) through the air interface to send it to the access network device. If the destination reported by the terminal device is a core network device, the terminal device can carry its own capability information in a non-access layer NAS message (such as a registration request message) to send it to the core network device.

[0140] In a possible implementation, the first message includes first indication information, and the first indication information is used to instruct the terminal device to set the power threshold corresponding to the first access type to a first preset value. The first access type belongs to a low-priority access type; illustratively, the first access type may be, but is not limited to, a second-generation radio access network 2G GERAN and a third-generation universal mobile communications system terrestrial radio access network 3G UTRAN. Through this implementation, the terminal device can be prevented from connecting to a low-priority network and then being attacked by a non-real network / malicious network / non-secure network, and the security of the terminal device's communication can be effectively guaranteed.

[0141] In one embodiment, the first indication information is also used to indicate that the power threshold corresponding to the second access type is set to a second preset value. The second access type belongs to a high-priority access type; illustratively, the second access type may be, but is not limited to, the fourth-generation evolved universal mobile communications system terrestrial radio access network 4G E-UTRAN, or the fifth-generation new air interface 5G NR. The second access type may also be an access type corresponding to a future communication network, such as an access type corresponding to a sixth-generation 6G communication network / an extended access type of a 6G communication network. Through this embodiment, the terminal device can be more easily connected to a high-priority network, thereby ensuring the security of the communication of the terminal device.

[0142] In a possible implementation manner, the first message may further include the first preset value and / or the second preset value.

[0143] S302A: The terminal device sets the value of the access information based on the first message.

[0144] In one implementation, the terminal device sets the power threshold value corresponding to the first access type based on the first indication information in the first message, which may include but is not limited to the following methods:

[0145] Method 1: Based on the instruction of the first message, the terminal device sets the power threshold corresponding to the first access type to a first preset value (ie, a pre-set / agreed value).

[0146] Mode 2: The first message includes the power threshold value corresponding to the first access type, that is, the first preset value. Then the terminal device can use the first preset value in the first message as the value of the power threshold corresponding to the first access type and set it.

[0147] In an embodiment of the present application, since the first access type is a low-priority access type, in order to prevent the terminal device from accessing / switching / selecting / reselecting / residing in the access network device / network of the first access type, which may cause security problems, the power threshold value corresponding to the access network device needs to be set to a relatively large value, that is, the first preset value should be a larger value.

[0148] In a possible implementation, when the first indication information is also used to indicate that the power threshold value corresponding to the second access type is set to a second preset value, the terminal device can also set the power threshold corresponding to the second access type to a second preset value (i.e., a pre-set / agreed value) based on the first indication information.

[0149] If the first message includes the second preset value, the terminal device can use the second preset value in the first message as the power threshold value corresponding to the second access type and set it.

[0150] In an embodiment of the present application, since the second access type belongs to a high-priority access type, in order to enable the terminal device to access the access network device / network of the second access type more easily to ensure its security, the power threshold value corresponding to the second access type should be set to a relatively small value, that is, the second preset value should be a smaller value, which is equivalent to lowering the threshold for the terminal to access / switch / select / reselect / reside in the access network device / network of the second access type.

[0151] In addition, the system message provided (broadcast) by the network device usually includes the power threshold value corresponding to the first access type and / or the second access type. After receiving the first message from the network device (access network device or core network device), the terminal device will ignore (not use) the corresponding power threshold value provided in the system information, but flexibly set the power threshold value corresponding to the first access type and / or the power threshold value corresponding to the second access type according to the instructions of the network device.

[0152] In the embodiment of the present application, the network device (access network device / core network device) can flexibly instruct the terminal device to set the power threshold value corresponding to the first access type and / or the power threshold value corresponding to the second access type according to the actual situation of the first access type and / or the second access type, and the method can be applied to the random access process, switching process, reselection process, selection process, residence process, etc. of the terminal device. Through this method, the terminal device can be effectively instructed to preferentially access / switch / select / reselect / reside in a network device / network with a high priority (i.e., higher security), and avoid accessing / switching / selecting / reselecting / residing in a network device / network with a low priority (i.e., lower security), thereby ensuring the security of the terminal device.

[0153] In some embodiments, the first message may also include other indication information for instructing the terminal device to set the value of other access information, for example, for instructing the terminal device to set the value of the frequency priority corresponding to the first access type, and / or to set the value of the frequency priority corresponding to the second access type. How the terminal device sets the value of the frequency priority can be specifically implemented with reference to the above-mentioned method of the terminal device setting the value of the power threshold corresponding to the access type, which will not be described in detail here.

[0154] Regarding the value of frequency priority, the larger the value, the higher the priority, which is equivalent to the higher requirement / threshold for the terminal device to connect to the corresponding network, and the smaller the value, the lower the priority, which is equivalent to the lower requirement / threshold for the terminal device to connect to the corresponding network; the design can also be the other way around, that is, the smaller the value, the higher the priority, which is equivalent to the higher requirement / threshold for the terminal device to connect to the corresponding network, and the larger the value, the lower the priority, which is equivalent to the lower requirement / threshold for the terminal device to connect to the corresponding network. The values ​​of other access information set by the terminal device are similar to the values ​​of the power threshold corresponding to the access type. The values ​​of these access information will affect the possibility of the terminal device connecting to the corresponding network.

[0155] In an embodiment of the present application, if a network device needs to instruct a terminal device to set values ​​for multiple access information, the network device may need to use multiple indication information for indication. The network device may carry these indication information in the same message to send to the terminal device, or may carry them in different messages to send to the terminal device. The network device may be flexibly configured according to actual conditions, and the present application does not make any specific limitations on this.

[0156] In a possible implementation, the network device further sends a second indication information to the terminal device, and the second indication information is used to instruct the terminal device to set the value of the access information according to the value in the system information. Through this implementation, if the terminal device no longer needs to prevent attacks from non-real networks / malicious networks / non-secure networks, the terminal device can normally use the system information broadcast by the network device to achieve network connection.

[0157] In summary, the embodiment of the present application proposes a communication method, which includes: a terminal device receives a first message from a network device, the first message is used to instruct the terminal device to set the value of access information; the terminal device sets the value of the access information based on the first message. In this method, the network device instructs the terminal device to flexibly set the value of the access information, which can effectively prevent the terminal device from accessing a network with lower security, and then being attacked by a non-real network and unable to communicate normally. This method can effectively ensure the communication security between the terminal device and the real network.

[0158] The present application also provides another communication method, which can also be applied to but not limited to Figure 2 The communication system shown. And the execution subject corresponding to the network device and terminal device functions in this method can refer to the above Figure 3A The above description will not be described in detail here, and the number of corresponding terminal devices and network devices is unlimited. Figure 3B As shown, the specific process of this method is as follows:

[0159] S301B: The network device sends a second message to the terminal device, where the second message includes first tracking area indication information and identification information of a first access type corresponding to the first tracking area.

[0160] In a possible implementation manner, the second message is used to indicate that the first access type is not available in the first tracking area. In an embodiment of the present application, the second message is used to indicate that the first access type is not available in the first tracking area, and can also be replaced by but not limited to the following expressions:

[0161] 1. The second message is used to instruct the terminal device to deactivate / disable the function corresponding to the first access type in the first tracking area;

[0162] 2. The second message is used to instruct the terminal device to shut down the function module corresponding to the first access type in the terminal device within the first tracking area;

[0163] 3. The second message is used to instruct the terminal device to ignore / not use the signals and system messages sent by the access network device of the first access type within the first tracking area.

[0164] In a possible implementation manner, the second message is generated by a network device.

[0165] In an embodiment of the present application, the network device may be an access network device or a core network device. If the first message is generated by the access network device and the second message is sent to the terminal device, the second message may be an access layer (AS) message, such as a radio resource control RRC setup message, a radio resource control RRC reestablishment message, a radio resource control RRC release message, and a radio resource control RRC reconfiguration message. If the second message is generated by the core network device and the second message is sent to the terminal device, the second message may be a non-access layer (NAS) message, such as a registration accept message, a registration reject message, a protocol data unit PDU session establishment accept message, and a PDU session modification accept message.

[0166] In the above, the first tracking area indication information may be the address / identifier of the first tracking area, etc., or other information that can represent the first area, and this application does not make specific limitations on this. The first access type corresponding to the first tracking area may belong to a low priority access type (or a low security access type), or may belong to a high priority access type, without limitation. Exemplarily, the first access type corresponding to the first tracking area may be a second generation radio access network 2GGERAN, a third generation universal mobile communications system terrestrial radio access network 3G UTRAN, a fourth generation evolved universal mobile communications system terrestrial radio access network 4G E-UTRAN, a fifth generation new air interface 5G NR, etc. The first access type may also be an access type corresponding to a future communication network, such as an access type corresponding to a sixth generation 6G communication network / an extended access type of a 6G communication network.

[0167] In a possible implementation, the second message may also include second tracking area indication information (i.e. other tracking area indication information) and identification information of the second access type corresponding to the second tracking area. The present application takes the first tracking area as an example to describe the solution. Similar to the first access type, the second access type corresponding to the second tracking area may also be but not limited to the second generation radio access network 2G GERAN, the third generation universal mobile communication system terrestrial radio access network 3GUTRAN, the fourth generation evolved universal mobile communication system terrestrial radio access network 4G E-UTRAN, and the fifth generation new air interface 5G NR. The second access type corresponding to the second tracking area may also be an access type corresponding to a future communication network, such as an access type corresponding to the sixth generation 6G communication network / an extended access type of the 6G communication network.

[0168] In an embodiment of the present application, the network device can send a second message to the terminal device, and the second message includes a tracking area identity (TAI) list (TAI list for short), which includes the addresses / IDs of one or more tracking areas and at least one access type ID corresponding to each tracking area.

[0169] Exemplarily, after the UE initiates a registration request to the core network, the core network sends a registration acceptance message to the UE, and the registration acceptance message (equivalent to the above-mentioned second message) includes a list of registration areas (registration area list) (the list of registration areas is equivalent to the above-mentioned TAI list), and the list of registration areas includes the address / ID of one or more valid areas registered by the UE to the core network this time and at least one access type ID corresponding to each valid area. If the UE moves out of the registration area, the UE needs to re-initiate a registration request to the core network.

[0170] In one possible implementation, before the terminal device receives the second message from the network device, the method also includes: the terminal device sends capability information of the terminal device to the network device, and the capability information of the terminal device is used to indicate that the terminal device supports starting / turning off (or activating / deactivating, or enabling / disabling) a function of the corresponding access type.

[0171] Exemplarily, if the network device is a core network device, then when initiating a registration process to the core network device, the terminal device may carry its own capability information in a registration request and send it to the core network device.

[0172] S302B: Based on the second message, the terminal device determines that the first access type is not available in the first tracking area.

[0173] In the embodiment of the present application, the terminal device determines, based on the second message, that the first access type is not available in the first tracking area, which may be replaced by but not limited to the following expressions:

[0174] 1. The terminal device deactivates / disables the function corresponding to the first access type in the first tracking area;

[0175] 2. The terminal device is within the first tracking area, and the functional module corresponding to the first access type in the terminal device is turned off;

[0176] 3. The terminal device ignores / does not use the signals and system messages sent by the access network device of the first access type within the first tracking area.

[0177] In an embodiment of the present application, the network device (access network device / core network device) can flexibly instruct the terminal device not to use the first access type in the first tracking area, and this method can be applied to but not limited to the random access process of the terminal device, the switching process, reselection process, selection process, and residence process of the access network device.

[0178] In the embodiment of the present application, when the terminal device receives a system message sent from the access network device of the first access type in the first tracking area, the terminal device will ignore or not use the system message.

[0179] In actual applications, the network device (access network device / core network device) can also indicate to the terminal device the access type corresponding to its tracking area (i.e., the second tracking area and the second access type corresponding to the second tracking area). The terminal device can refer to the method of processing the first access type corresponding to the first tracking area, and deactivate / disable / close / the corresponding access type function in other tracking areas. It will not be described in detail here.

[0180] In summary, an embodiment of the present application proposes another communication method, which includes: a terminal device receives a second message from a network device, the second message including first tracking area indication information and identification information of a first access type corresponding to the first tracking area, and then the terminal device can determine, based on the second cell, that the first access type is not available in the first tracking area. In this method, the network device (access network device / core network device) can flexibly indicate to the terminal device the target tracking area (such as the first tracking area) and the unusable access type in the target tracking area. This indication method can effectively avoid the terminal device from accessing / switching / reselecting / selecting / residing in a low-priority (lower security) network device, thereby effectively ensuring the security of the terminal device's communication with the real network.

[0181] Based on the above Figure 3A-3B A communication method is shown, which is further described in detail below through several specific embodiments.

[0182] Embodiment 1:

[0183] Based on the above Figure 3A In the scheme, in Embodiment 1, the base station gNB (or core network CN) is used as a network device, and UE1 is used as an example of a terminal device. The base station gNB (or core network CN) sets the parameters P1 (e.g., ThershServing, LowP) and / or P2 (e.g., Q-RXLevMin) in the system message by instructing UE1 (parameters P1 and P2 are equivalent to the above Figure 3A The value of the access information in the solution is used to prevent UE1 from accessing a fake base station and being attacked. Figure 4As shown, the process of this embodiment 1 is as follows:

[0184] S401: UE1 sends the capability information of UE1 to gNB, where the capability information is used to indicate that UE1 supports setting the value of parameter P1 and / or the value of parameter P2 in the system message.

[0185] Exemplarily, UE1 may send the capability information to gNB via the air interface.

[0186] In this embodiment, the parameter P1 (e.g., ThershServing, LowP) and / or the parameter P2 (e.g., Q-RXLevMin) in the system message is used as a basis for determining whether UE1 can access / switch / reselect / select / reside in a cell under the corresponding standard; that is, the parameter P1 is a parameter used by UE1 to access / switch / reselect / select / reside in a high-standard (e.g., 4G, 5G) base station / cell, and the parameter P1 can be used to determine whether UE1 can access / switch / reselect / select / reside in a high-standard (e.g., 4G, 5G) base station / cell. The parameter P2 is a parameter used by UE1 to access / switch / reselect / select / reside in a low-standard (e.g., 2G, 3G) base station / cell, and the parameter P2 can be used to determine whether UE1 can access / switch / reselect / select / reside in a low-standard (e.g., 2G, 3G) base station / cell.

[0187] In a possible implementation, the capability information of UE1 can also be used to indicate that UE1 supports a solution for preventing attacks from fake base stations. In this embodiment, the solution for preventing attacks from fake base stations can be: UE1 ignores the values ​​of relevant parameters (i.e., parameter P1 and / or parameter P2) in the system message broadcast by the base station, but sets the value of parameter P1 (e.g., ThershServing, LowP) and / or the value of P2 (e.g., Q-RXLevMin) by UE1 itself to prevent access / switching / reselection / residence in a fake base station, thereby preventing attacks from fake base stations.

[0188] In the first embodiment, the value of the parameter P1 corresponding to the high standard is set to a smaller value, such as 6dB, which is equivalent to lowering the threshold for UE1 to access / switch / reselect / select / reside in the base station / cell of the high standard, making it easier or preferential for UE1 to access / switch / reselect / select / reside in the base station / cell of the high standard. In addition, since UE1 is in a base station / cell of a low standard, it is easy to be attacked by a pseudo base station / pseudo cell of the low standard. Therefore, in order to prevent UE1 from accessing / switching / reselecting / selecting / reside in a base station / cell of a low standard, it is necessary to increase the threshold for UE1 to access / switch / reselect / select / reside in the base station / cell of the low standard, that is, to set the value of the parameter P2 corresponding to the low standard to a larger value, such as -116dBm.

[0189] S402: gNB sends a radio resource control release RRC release message to UE1, where the message includes first indication information, and the first indication information is used to instruct UE1 to set the value of parameter P1 and / or the value of parameter P2.

[0190] For S401-S402, UE1 reports its own capability information to gNB, and gNB instructs UE1 to set the value of P1 and / or P2, which is equivalent to the gNB controlling the switch of UE1's anti-counterfeit base station attack. In this way, gNB can instruct UE1 to take / not take the anti-counterfeit base station attack plan according to the actual situation.

[0191] In other embodiments, the CN may also control the switch of UE1's anti-counterfeit base station attack. Then, after the gNB receives the capability information of UE1 in the above S401, the gNB also reports the capability information of UE1 to the CN (e.g. Figure 4 When CN determines to turn on the switch for UE1 to prevent counterfeit base station attacks, it sends indication information (such as the first indication information mentioned above) to gNB (such as Figure 4 The process indicated by the dotted arrow in the figure is used to instruct UE1 to set the value of parameter P1 and / or parameter P2, or to instruct UE1 to take / not take the solution to prevent fake base station attacks; further, in S402, the gNB carries the indication information sent by the CN in the RRC release message to send it to UE1.

[0192] Or when the switch of UE1's anti-counterfeit base station attack is controlled by CN, in the above S401, UE1 can carry UE1's capability information in a NAS message (e.g., registration request) and send it directly to CN. Further, when CN determines to turn on the switch of UE1's anti-counterfeit base station attack, it carries the indication information in a NAS message (e.g., registration accept), and then sends the NAS message directly to UE1. The indication information carried in the NAS message is used to instruct UE1 to set the value of parameter P1 and / or parameter P2, or to instruct UE1 to take / not take the anti-counterfeit base station attack solution.

[0193] S403: UE1 sets the value of parameter P1 and / or parameter P2 based on the first indication information.

[0194] In some embodiments, the first indication information instructs UE1 to adopt an anti-counterfeit base station attack solution or to enable an anti-counterfeit base station attack function, and UE1 adopts the above anti-counterfeit base station attack solution.

[0195] Specifically, UE1 ignores the values ​​of P1 and / or P2 in the system message broadcast by gNB, and chooses to set the values ​​of the parameters P1 and / or P2 to preset values ​​or default values.

[0196] Exemplarily, if the value of the preset parameter P1 (or the default value of P1) is a first value (for example, parameter ThershServing=x, x is the preset value of ThershServing), if the value of the preset parameter P2 (or the default value of P2) is a second value (for example, parameter Q-RXLevMin=y, y is the preset value of Q-RXLevMin). After receiving the first indication information, UE1 may set the value of parameter P1 in the system message to the first value, and / or set the value of parameter P2 in the system message to the second value. Subsequently, UE1 may perform access / switching / selection / reselection / residence and other processes based on the values ​​of P1 and / or P2.

[0197] In this embodiment 1, in order to prevent the UE from accessing / switching / selecting / reselecting / residing in a base station / cell of a low standard and being vulnerable to attacks by fake base stations, an anti-fake base station attack scheme is formulated (i.e., instructing the UE to set the value of parameter P1 and / or parameter P2 in the system message); when the UE supports the use of the anti-fake base station attack scheme, the network device (i.e., gNB or CN) can control the switch of the scheme execution, so the network device (i.e., gNB or CN) can flexibly instruct the UE to turn on / off the anti-fake base station attack scheme (or instruct the UE whether to set the value of parameter P1 and / or parameter P2 in the system message) according to actual conditions. Through this method, not only can the UE be effectively prevented from being attacked by fake base stations, but also the flexibility of executing the anti-fake base station attack scheme can be improved.

[0198] Embodiment 2:

[0199] Compared with the above-mentioned embodiment 1, the main difference of the embodiment 2 is that when UE1 sets the value of the parameter P1 and / or P2, the value of P1 and / or P2 does not use a non-preset or default value, but comes from the base station gNB (or core network CN). Figure 5 As shown, the process of the second embodiment is as follows:

[0200] S501: UE1 sends the capability information of UE1 to the gNB, where the capability information is used to indicate that UE1 supports setting the values ​​of parameters P1 (e.g., ThershServing, LowP) and / or P2 (e.g., Q-RXLevMin) broadcast in the system message.

[0201] The specific implementation of step 501 can refer to the specific implementation of step S401 above, which will not be described in detail here.

[0202] S502: gNB sends a radio resource control release RRC release message to UE1, which carries first indication information and the value x of parameter P1 and / or the value y of parameter P2. The first indication information is used to instruct UE1 to set the value of parameter P1 and / or parameter P2.

[0203] The specific implementation method of step 502 can refer to the specific implementation method of the above S402, but different from the above S402, the RRC release message in S502 also includes the value of the parameter P1 (for example, ThershServing=x, then x is the value of ThershServing) and / or the value of the parameter P2 (for example, Q-RXLevMin=y, then y is the value of Q-RXLevMin).

[0204] In addition, if the CN controls the switch of UE1's anti-counterfeit base station attack, then the value x of the parameter P1 and / or the value y of the parameter P2 comes from the CN; optionally, the first indication information also comes from the CN (such as Figure 5 The process indicated by the dotted line in the figure is first sent by the CN to the gNB, and then the gNB carries the value x of the parameter P1 and / or the value y of the parameter P2 and the first indication information in the RRC release message and sends it to UE1. Alternatively, the CN may carry the value x of the parameter P1 and / or the value y of the parameter P2 and the first indication information in a NAS message (e.g., a registration accept message), and send it directly to UE1 without passing through the gNB.

[0205] In this embodiment, the first indication information can be generated by the gNB or by the CN, and there is no specific limitation on this.

[0206] S503: UE1 sets the value of parameter P1 to x, and / or sets the value of parameter P2 to y.

[0207] The specific implementation of step 503 can refer to the specific implementation of step S403 above, which will not be described in detail here.

[0208] In this second embodiment, the network device (i.e., gNB or CN) can flexibly instruct the UE to turn on / off the anti-fake base station attack scheme (or instruct the UE whether to set the value of parameter P1 and / or parameter P2 in the system message) according to actual conditions, and provide the value of parameter P1 and / or the value of parameter P2 to the UE for setting, thereby effectively preventing the UE from being attacked by fake base stations and improving the flexibility of implementing the anti-fake base station attack scheme.

[0209] Embodiment three:

[0210] Based on the above Figure 3BIn the solution, in the third embodiment, the core network CN provides UE1 with at least one tracking area and at least one standard that is unavailable in the area, so as to prevent UE1 from being attacked by a fake base station. Figure 6 As shown, the process of the third embodiment is as follows:

[0211] S601a: UE1 sends the capability information of UE1 to the gNB, where the capability information is used to indicate that UE1 supports the function of deactivating / disabling / turning off the corresponding standard within the tracking area indicated by the gNB.

[0212] Exemplarily, UE1 may send the capability information to gNB via the air interface.

[0213] In a possible implementation, the capability information of UE1 can also be used to indicate that UE1 supports a solution for preventing fake base station attacks. In an embodiment of the present application, the solution for preventing fake base station attacks can be: CN indicates to UE1 that one or more corresponding standards cannot be used in a specified tracking area. This can prevent UE1 from accessing / switching / selecting / reselecting / residing in a fake base station / pseudo cell under the standard within the specified tracking area, thereby preventing UE1 from being attacked.

[0214] S601b: gNB sends UE1's capability information to CN.

[0215] In this embodiment, UE1 may also choose to carry UE1's capability information in a NAS message (e.g., a registration request message), and send the NAS message carrying UE1's capability information directly to the CN without being forwarded by the gNB.

[0216] S602a: CN sends a tracking area identifier list TAI list to the gNB, where the list includes the identifier of at least one tracking area and the identifier of at least one unavailable standard in each tracking area.

[0217] Exemplarily, when CN turns on the switch for UE1 to prevent fake base station attacks, at least one tracking area can be determined for UE1, and the at least one tracking area can be the registration area of ​​UE1, or a subset of the registration area of ​​UE1 (i.e., at least one sub-area of ​​the registration area of ​​UE1), and one or more standards that UE1 cannot use in each tracking domain are determined. As shown in Table 1, it is the TAI list configured by the core network for UE1. The TAI list includes three tracking areas identified as 1, 2, and 3. The unavailable standard for tracking area 1 is 2G, the unavailable standard for tracking area 2 is 2G and 3G, and the unavailable standard for tracking area 3 is 2G, 3G, and 4G.

[0218] Table 1

[0219]

[0220] The above Table 1 is only an example. In actual applications, the TAI list sent by the CN to UE1 may contain more or less information.

[0221] In this embodiment, the CN may also carry the TAI list in the NAS message and send it directly to UE1 without forwarding it through the gNB (e.g. Figure 6 The process is indicated by the dotted arrows in Figure 2).

[0222] S602b: gNB sends the tracking area identifier list TAI list to UE1.

[0223] S603: When UE1 determines that it is located within the tracking area in the TAI list, the corresponding standard cannot be used.

[0224] Exemplarily, CN indicates to UE1 that the 2G network is unavailable within tracking area 1, while UE1 is capable of accessing the 2G network; when UE1 is within the tracking area 1, UE1 turns off its 2G module or deactivates / disables its 2G function.

[0225] In this third embodiment, an anti-counterfeit base station attack scheme is formulated for the UE (i.e., the CN indicates to the UE1 that the corresponding one or more standards cannot be used in the designated tracking area). When the UE supports the use of this anti-counterfeit base station attack scheme, the CN flexibly indicates to the UE some standards that are unavailable within some geographical ranges, thereby effectively preventing the UE from accessing / switching / selecting / selecting / reselecting / residing in base stations / cells of a standard with security risks when entering these geographical ranges, thereby effectively preventing the UE from being attacked by fake base stations.

[0226] Regarding the above-mentioned embodiments 1 to 3, it should be noted that:

[0227] (1) The above-mentioned embodiments 1 to 3 can be implemented separately or in combination, and there is no specific limitation. For example, embodiment 1 or embodiment 2 can be combined with the solution of embodiment 3, that is, when the network device instructs UE1 to set the value of parameter P1 and / or parameter P2, it can also provide UE1 with at least one tracking area and at least one standard that is unavailable in the area. The embodiments of the present application do not limit this.

[0228] (2) The above description focuses on the differences between Embodiment 1 to Embodiment 3. Except for the differences, Embodiment 1 to Embodiment 3 can refer to each other.

[0229] (3) The step numbers of the flowcharts described in Examples 1 to 3 are only examples of the execution process and do not constitute a limitation on the order of execution of the steps. There is no strict execution order between the steps that have no temporal dependency relationship with each other in the embodiments of the present application. In addition, not all the steps shown in the flowcharts are steps that must be executed, and some steps can be added or deleted based on the actual needs of each flowchart.

[0230] In the embodiments provided by the present application, the methods provided by the embodiments of the present application are introduced from the perspective of interaction between various devices. In order to implement the functions in the methods provided by the embodiments of the present application, the terminal device or the network device may include a hardware structure and / or a software module to implement the functions in the form of a hardware structure, a software module, or a hardware structure plus a software module. Whether a function in the functions is performed in the form of a hardware structure, a software module, or a hardware structure plus a software module depends on the specific application and design constraints of the technical solution.

[0231] The division of modules in the embodiments of the present application is schematic and is only a logical function division. There may be other division methods in actual implementation. In addition, each functional module in each embodiment of the present application may be integrated into a processor, or may exist physically separately, or two or more modules may be integrated into one module. The above-mentioned integrated modules may be implemented in the form of hardware or in the form of software functional modules.

[0232] Same as above idea, Figure 7 As shown, the embodiment of the present application also provides a communication device 700 for implementing the functions of the terminal device or network device in the above method. For example, the communication device 700 can be a software module or a chip system. In the embodiment of the present application, the chip system can be composed of a chip, or it can include a chip and other discrete devices. The communication device 700 may include: a communication unit 701 and a processing unit 702.

[0233] In the embodiment of the present application, the communication unit 701 may also be referred to as a transceiver unit, and may include a sending unit and / or a receiving unit, which are respectively used to perform the steps of sending and receiving by the network device or the terminal device in the above method embodiment. The processing unit 702 may be used to read instructions and / or data in the storage module so that the communication device 700 implements the above method embodiment.

[0234] Optionally, the communication device 700 may further include a storage unit 703, which is equivalent to a storage module and can be used to store instructions and / or data.

[0235] The following, combined Figures 7 and 8The communication device provided in the embodiment of the present application is described in detail. It should be understood that the description of the device embodiment corresponds to the description of the method embodiment, so the contents not described in detail can be referred to above. Fig. 9 For the sake of brevity, the method embodiment will not be described in detail here.

[0236] The communication unit 701 may also be referred to as a transceiver, a transceiver, a transceiver device, etc. The processing unit may also be referred to as a processor, a processing board, a processing module, a processing device, etc. Optionally, the device used to implement the receiving function in the communication unit 701 may be regarded as a receiving unit, and the device used to implement the sending function in the communication unit 701 may be regarded as a sending unit, that is, the communication unit 701 includes a receiving unit and a sending unit. The communication unit may also be sometimes referred to as a transceiver, a transceiver, or a transceiver circuit, etc. The receiving unit may also be sometimes referred to as a receiver, a receiver, or a receiving circuit, etc. The sending unit may also be sometimes referred to as a transmitter, a transmitter, or a transmitting circuit, etc.

[0237] When the communication device 700 executes the above embodiment Figure 3A In the terminal device in the process shown: the communication unit 701 is used to receive a first message from a network device, and the first message is used to instruct the terminal device to set the value of the access information; the processing unit 702 is used to set the value of the access information based on the first message.

[0238] When the communication device 700 executes the above embodiment Figure 3A In the network device in the process shown: the processing unit 702 is used to generate a first message, and the first message is used to instruct the terminal device to set the value of the access information; the communication unit 701 is used to send the first message to the terminal device.

[0239] When the communication device 700 executes the above embodiment Figure 3B In the terminal device in the process shown: the communication unit 701 is used to receive a second message from a network device, the second message including first tracking area indication information and identification information of a first access type corresponding to the first tracking area; the processing unit 702 is used to determine, based on the second message, that the first access type is not available in the first tracking area.

[0240] When the communication device 700 executes the above embodiment Figure 3B When the network device is in the process shown: the processing unit 702 is used to generate a second message, the second message includes first tracking area indication information and identification information of the first access type corresponding to the first tracking area; the communication unit 701 is used to send the second message to the terminal device.

[0241] The above is just an example. The processing unit 702 and the communication unit 701 can also perform other functions. For more detailed description, please refer to Figure 3A-3B as well as Figures 4 to 6 The relevant description in the method embodiment shown is not repeated here.

[0242] like Figure 8 The figure shows a communication device 800 provided in an embodiment of the present application. Figure 8 The communication device shown can be Figure 7 The communication device 800 is a hardware circuit implementation of the communication device shown in the figure. The communication device 800 can be applied to the flowchart shown above to perform the functions of the terminal device or network device in the above method embodiment. For the convenience of explanation, Figure 8 Only the main components of the communication device are shown.

[0243] like Figure 8 As shown, the communication device 800 includes a communication interface 801 and a processor 802. The communication interface 801 and the processor 802 are coupled to each other. It can be understood that the communication interface 801 can be a transceiver or an input-output interface, or an interface circuit such as a transceiver circuit. Optionally, the communication device 800 can also include a memory 803 for storing instructions executed by the processor 802 or storing input data required by the processor 802 to run the instructions or storing data generated after the processor 802 runs the instructions.

[0244] Exemplarily, when the communication device 800 is used to implement 3A- Figure 3B In the method shown, the communication interface 801 is used to implement the functions of the above-mentioned communication unit 701, and the processor 802 is used to implement the functions of the above-mentioned processing unit 702.

[0245] The specific connection medium between the communication interface 801, the processor 802 and the memory 803 is not limited in the embodiment of the present application. Figure 8 In the embodiment, the memory 803, the processor 802 and the communication interface 801 are connected via a communication bus 804. Figure 8 The communication bus 804 can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 8 Only one thick line is used in the diagram, but this does not mean that there is only one bus or only one type of bus.

[0246] When the communication device is a chip, Fig. 9 A simplified schematic diagram of a chip device structure is shown, wherein the chip 900 includes an interface circuit 901 and one or more processors 902. Optionally, the chip 900 may also include a bus.

[0247] The processor 902 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above communication method can be completed by the hardware integrated logic circuit or software instructions in the processor 902. The above processor 902 can be a general processor, a digital signal processor (digital signal processor, DSP), an application specific integrated circuit (application specific integrated circuit, ASIC), a field programmable gate array (field programmable gate array, FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The various methods and steps disclosed in the embodiments of the present application can be implemented or executed. The general processor can be a microprocessor or the processor can also be any conventional processor, etc.

[0248] The interface circuit 901 can be used to send or receive data, instructions or information. The processor 902 can use the data, instructions or other information received by the interface circuit 901 to process, and can send the processing completion information through the interface circuit 901.

[0249] Optionally, the chip further includes a memory 903, which may include a read-only memory and a random access memory, and provides operation instructions and data to the processor. A portion of the memory 903 may also include a non-volatile random access memory (NVRAM).

[0250] Optionally, the memory stores executable software modules or data structures, and the processor can perform corresponding operations by calling operation instructions stored in the memory (the operation instructions can be stored in the operating system).

[0251] Optionally, the chip can be used in a terminal device or a network device involved in an embodiment of the present application. Optionally, the interface circuit 901 can be used to output the execution result of the processor 902. The communication method provided by one or more embodiments of the present application can refer to the aforementioned embodiments, which will not be repeated here.

[0252] It should be noted that the functions corresponding to the interface circuit 901 and the processor 902 can be implemented through hardware design, software design, or a combination of hardware and software, which is not limited here.

[0253] An embodiment of the present application also provides a computer-readable storage medium on which are stored computer instructions for implementing the method executed by a terminal device or a network device in the above method embodiment.

[0254] For example, when the computer program is executed by a computer, the computer can implement the method performed by the terminal device or the network device in the above method embodiment.

[0255] An embodiment of the present application also provides a computer program product comprising instructions, which, when executed by a computer, enables the computer to implement the method executed by a terminal device or a network device in the above method embodiment.

[0256] The embodiment of the present application also provides a chip, including a processor, which is used to call the computer program or computer instruction stored in the memory, so that the processor executes the above 3A- Figure 3B as well as Figures 4 to 6 The communication method of the embodiment shown.

[0257] In a possible implementation, the input of the chip corresponds to the above 3A- Figure 3B as well as Figures 4 to 6 In the receiving operation of the embodiment shown, the output of the chip corresponds to the above 3A- Figure 3B as well as Figures 4 to 6 The sending operation in the embodiment shown.

[0258] Optionally, the processor is coupled to the memory via an interface.

[0259] Optionally, the chip also includes a memory in which computer programs or computer instructions are stored.

[0260] The processor mentioned in any of the above places may be a general-purpose central processing unit, a microprocessor, an application-specific integrated circuit (ASIC), or one or more processors for controlling the above 3A- Figure 3B as well as Figures 4 to 6 An integrated circuit for executing a program of a communication method of the embodiment shown. The memory mentioned in any of the above places can be a read-only memory (ROM) or other types of static storage devices that can store static information and instructions, a random access memory (RAM), etc.

[0261] It should be noted that, for the sake of convenience and brevity of description, the explanation of the relevant contents and beneficial effects in any of the communication devices provided above may refer to the corresponding communication method embodiments provided above, and will not be repeated here.

[0262] In the present application, the communication devices may also include a hardware layer, an operating system layer running on the hardware layer, and an application layer running on the operating system layer. Among them, the hardware layer may include hardware such as a central processing unit (CPU), a memory management unit (MMU), and a memory (also called main memory). The operating system of the operating system layer may be any one or more computer operating systems that implement business processing through processes, such as Linux operating system, Unix operating system, Android operating system, iOS operating system, or Windows operating system. The application layer may include applications such as browsers, address books, word processing software, and instant messaging software.

[0263] The division of modules in the embodiments of the present application is schematic and is only a logical function division. There may be other division methods in actual implementation. In addition, each functional module in each embodiment of the present application may be integrated into a processor, or may exist physically separately, or two or more modules may be integrated into one module. The above-mentioned integrated modules may be implemented in the form of hardware or in the form of software functional modules.

[0264] Through the description of the above implementation mode, it can be clearly understood by those skilled in the art that the embodiments of the present application can be implemented by hardware, firmware, or a combination thereof. When software is used for implementation, the above functions can be stored in a computer-readable medium or transmitted as one or more instructions or codes on a computer-readable medium. Computer-readable media include computer storage media and communication media, wherein the communication media include any medium that facilitates the transmission of a computer program from one place to another. The storage medium can be any available medium that a computer can access. Taking this as an example but not limited to: a computer-readable medium can include RAM, ROM, electrically erasable programmable read only memory (EEPROM), compact disc read-only memory (CD-ROM) or other optical disc storage, disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store a desired program code in the form of an instruction or data structure and can be accessed by a computer. In addition. Any connection can be appropriately a computer-readable medium. For example, if the software is transmitted from a website, server, or other remote source using coaxial cable, fiber optic cable, twisted pair, digital subscriber line (DSL), or wireless technologies such as infrared, radio, and microwave, then the coaxial cable, fiber optic cable, twisted pair, DSL, or wireless technologies such as infrared, wireless, and microwave are included in the fixation of the medium. As used in the embodiments of the present application, disk and disc include compact disc (CD), laser disc, optical disc, digital video disc (DVD), floppy disk, and Blu-ray disc, where disks usually copy data magnetically and discs use lasers to copy data optically. The above combinations should also be included in the scope of protection of computer-readable media.

[0265] In short, the above description is only an embodiment of the present application and is not intended to limit the protection scope of the present application. Any modification, equivalent replacement, improvement, etc. made according to the disclosure of the present application shall be included in the protection scope of the present application.

Claims

1. A communication method, characterized in that: The method is applied to a terminal device or a chip of the terminal device, and includes: Receiving a first message from a network device, where the first message is used to instruct the terminal device to set a value of access information; Based on the first message, a value of the access information is set.

2. The method according to claim 1, characterized in that Before receiving the first message from the network device, the method further includes: sending capability information of the terminal device to the network device, where the capability information of the terminal device is used to indicate that the terminal device supports setting a value of the access information.

3. The method according to claim 1 or 2, characterized in that: The access information is information in a system message, and the access information is one or more of the following: The power threshold corresponding to the access type and the frequency priority corresponding to the access type.

4. The method according to claim 3, characterized in that The first message includes first indication information, and the first indication information is used to instruct the terminal device to set the power threshold corresponding to the first access type to a first preset value.

5. The method according to claim 4, characterized in that The first indication information is further used to indicate that the power threshold corresponding to the second access type is set to a second preset value.

6. The method according to claim 4 or 5, characterized in that: The first message also includes the first preset value and / or the second preset value.

7. The method according to claim 5 or 6, characterized in that: The first access type belongs to a low priority access type, and the first access type is one or more of the following: The second generation radio access network 2G GERAN, the third generation universal mobile communication system terrestrial radio access network 3G UTRAN; The second access type belongs to a high priority access type, and the second access type is one or more of the following: The fourth-generation evolved universal mobile communications system terrestrial radio access network 4G E-UTRAN and the fifth-generation new air interface 5G NR.

8. The method according to any one of claims 1 to 7, characterized in that The method further comprises: Receive second indication information from the network device, where the second indication information is used to instruct the terminal device to set the value of the access information according to the value in the system message.

9. The method according to any one of claims 1 to 8, characterized in that The first message is an access layer AS message or a non-access layer NAS message; The access layer AS message is any one of the following: Radio resource control establishment RRC setup message, radio resource control reconstruction RRC reestablishment message, radio resource control release RRC release message, radio resource control reconfiguration RRC reconfiguration message; The non-access layer NAS message is any one of the following: Registration accept message, registration reject message, protocol data unit PDU session establishment accept message, PDU session modification accept message.

10. A communication method, characterized in that: The method is applied to a terminal device or a chip of the terminal device, and includes: receiving a second message from a network device, wherein the second message includes first tracking area indication information and identification information of a first access type corresponding to the first tracking area; Based on the second message, it is determined that the first access type is not available in the first tracking area.

11. The method according to claim 10, characterized in that The method further includes: sending capability information of the terminal device to the network device, where the capability information of the terminal device is used to indicate that the terminal device supports starting or shutting down a function of a corresponding access type.

12. The method according to claim 10 or 11, characterized in that: The method also includes: in the first tracking area, shutting down a functional module corresponding to the first access type or ignoring a signal and a system message corresponding to the first access type.

13. The method according to any one of claims 10 to 11, characterized in that The second message also includes second tracking area indication information and identification information of a second access type corresponding to the second tracking area.

14. The method according to any one of claims 10 to 13, characterized in that The first access type or the second access type is one or more of the following: The second-generation radio access network 2G GERAN, the third-generation universal mobile communications system terrestrial radio access network 3G UTRAN, the fourth-generation evolved universal mobile communications system terrestrial radio access network 4G E-UTRAN, and the fifth-generation new air interface 5G NR.

15. The method according to any one of claims 10 to 14, characterized in that The second message is an access layer AS message or a non-access layer NAS message; The access layer AS message is any one of the following: Radio resource control establishment RRC setup message, radio resource control reconstruction RRC reestablishment message, radio resource control release RRC release message, radio resource control reconfiguration RRC reconfiguration message; The non-access layer NAS message is any one of the following: Registration accept message, registration reject message, protocol data unit PDU session establishment accept message, PDU session modification accept message.

16. A communication method, characterized in that: The method is applied to a network device or a chip of the network device, and includes: Generate a first message, where the first message is used to instruct the terminal device to set a value of access information; Sending the first message to the terminal device.

17. The method according to claim 16, characterized in that The method further includes: receiving capability information of the terminal device, where the capability information of the terminal device is used to indicate that the terminal device supports setting a value of the access information.

18. The method according to claim 16 or 17, characterized in that The access information is information in a system message, and the access information is one or more of the following: The power threshold corresponding to the access type and the frequency priority corresponding to the access type.

19. The method according to claim 18, characterized in that The first message includes first indication information, and the first indication information is used to instruct the terminal device to set the power threshold corresponding to the first access type to a first preset value.

20. The method according to claim 19, characterized in that The first indication information is further used to indicate that the power threshold corresponding to the second access type is set to a second preset value.

21. The method according to claim 19 or 20, characterized in that The first message also includes the first preset value and / or the second preset value.

22. The method according to claim 19 or 20, characterized in that The first access type belongs to a low priority access type, and the first access type is one or more of the following: The second generation radio access network 2G GERAN, the third generation universal mobile communication system terrestrial radio access network 3G UTRAN; The second access type belongs to a high priority access type, and the second access type is one or more of the following: The fourth-generation evolved universal mobile communications system terrestrial radio access network 4G E-UTRAN and the fifth-generation new air interface 5G NR.

23. The method according to any one of claims 16 to 22, characterized in that The method further comprises: Sending second indication information to the terminal device, wherein the second indication information is used to instruct the terminal device to set the value of the access information according to the value in the system message.

24. The method according to any one of claims 16 to 23, characterized in that The first message is an access layer AS message or a non-access layer NAS message; The access layer AS message is any one of the following: Radio resource control establishment RRC setup message, radio resource control reconstruction RRC reestablishment message, radio resource control release RRC release message, radio resource control reconfiguration RRC reconfiguration message; The non-access layer NAS message is any one of the following: Registration accept message, registration reject message, protocol data unit PDU session establishment accept message, PDU session modification accept message.

25. A communication method, characterized in that: The method is applied to a network device or a chip of the network device, and includes: generating a second message, wherein the second message includes first tracking area indication information and identification information of a first access type corresponding to the first tracking area; Send the second message to the terminal device.

26. The method according to claim 25, characterized in that The method further includes: receiving capability information of the terminal device, where the capability information of the terminal device is used to indicate that the terminal device supports starting or shutting down a function of a corresponding access type.

27. The method according to claim 25 or 26, characterized in that The second message also includes second tracking area indication information and identification information of a second access type corresponding to the second tracking area.

28. The method according to any one of claims 25 to 27, characterized in that The first access type or the second access network type is one or more of the following: The second-generation radio access network 2G GERAN, the third-generation universal mobile communications system terrestrial radio access network 3G UTRAN, the fourth-generation evolved universal mobile communications system terrestrial radio access network 4G E-UTRAN, and the fifth-generation new air interface 5G NR.

29. The method according to any one of claims 25 to 28, characterized in that The second message is an access layer AS message or a non-access layer NAS message; The access layer AS message is any one of the following: Radio resource control establishment RRC setup message, radio resource control reconstruction RRC reestablishment message, radio resource control release RRC release message, radio resource control reconfiguration RRC reconfiguration message; The non-access layer NAS message is any one of the following: Registration accept message, registration reject message, protocol data unit PDU session establishment accept message, PDU session modification accept message.

30. A communication device, characterized in that: Comprising a module or unit for executing the method as claimed in any one of claims 1 to 9, or comprising a module or unit for executing the method as claimed in any one of claims 10 to 15, or comprising a module or unit for executing the method as claimed in any one of claims 16 to 24, or comprising a module or unit for executing the method as claimed in any one of claims 25 to 29.

31. A communication device, characterized in that: The invention comprises a processor and an interface circuit, wherein the interface circuit is used to receive signals from other communication devices outside the communication device and transmit them to the processor or send signals from the processor to other communication devices outside the communication device, and the processor is used to implement the method as claimed in any one of claims 1 to 9 through a logic circuit or execute code instructions, or to implement the method as claimed in any one of claims 10 to 15, or to implement the method as claimed in any one of claims 16 to 24, or to implement the method as claimed in any one of claims 25 to 29.

32. A communication system, characterized in that: include: A terminal device that executes the method as described in any one of claims 1 to 15, and a network device that executes the method as described in any one of claims 16 to 29.

33. A computer-readable storage medium, characterized in that: The storage medium stores a computer program or an instruction, and when the computer program or the instruction is executed by the communication device, the method according to any one of claims 1 to 29 is implemented.

34. A computer program product, characterized in that The computer program product stores computer-readable instructions, and when the computer-readable instructions are executed, the method according to any one of claims 1 to 29 is executed.

Images