Service providing method and device, computer equipment and storage medium
By receiving the initial service request from the service demander, inverse transformation and replacement of FQDN to the service network address is solved, and the problem of high maintenance cost of FQDN and service network address mapping relationship in the 5G SA international roaming network architecture is achieved, and the effect of reducing management and maintenance costs and service transmission interruption risks is achieved.
Patent Information
- Application Number
- CN202411993277.9
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-12-31
- Publication Date
- 2025-04-08
- Estimated Expiration
- 2044-12-31
AI Technical Summary
In the 5G SA international roaming networking architecture, when operators forward signaling through SEPP interconnection, they need to maintain the mapping relationship between the entire network in the domain and the service network address, resulting in an increase in management and maintenance costs.
By receiving the initial service request sent by the service demander, the address of the target FQDN is inversely transformed, the service network address is obtained, and it is replaced with the initial service request, the target service request is generated, and finally the target service request is sent to the service producer.
It realizes that when the target FQDN is inversely transformed by only SEPP network elements, the service network address can be sent without the need for functional adjustment of other network elements, which reduces the management and maintenance cost of maintaining the mapping relationship between the FQDN and the service network address, and reduces the risk of service transmission interruption.
Smart Images

Figure CN119789060A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of wireless communication technology, and in particular to a service providing method, apparatus, computer equipment and storage medium. Background Art
[0002] In the 5G SA (5G Standalone) international roaming networking architecture, operators are interconnected through SEPP (Security Edge Protection Proxy) for signaling forwarding. In the signaling request message forwarded by the serving SEPP and received by the home SEPP, the address format of the service producer is FQDN (Fully Qualified Domain Name). In the direct routing mode, the home SEPP needs to obtain the service network address corresponding to the FQDN in the domain before forwarding the message to the corresponding service producer in the domain.
[0003] Therefore, communication organizations need to build a DNS (Domain Name System) or database to maintain the mapping relationship between the FQDN of the entire network and the service network address within the domain, which also leads to an increase in management and maintenance costs. Summary of the invention
[0004] Based on this, it is necessary to provide a service providing method, device, computer equipment and storage medium that can reduce management and maintenance costs in response to the above technical problems.
[0005] In a first aspect, the present application provides a service providing method. The method comprises:
[0006] Receive an initial service request sent by a service demander; wherein the initial service request carries a target fully qualified domain name FQDN; the target FQDN is generated by the SEPP network element after receiving a service discovery response sent by a network repository function NRF network element to the service demander, according to the service network address carried in the service discovery response;
[0007] Performing an inverse address transformation on the target FQDN to obtain a service network address;
[0008] Replacing the target FQDN in the initial service request with the service network address to obtain a target service request;
[0009] The target service request is sent to a service producer, so that the service producer provides services to the service demander according to the functional network element corresponding to the service network address.
[0010] In one embodiment, generating the target FQDN according to the service network address carried in the service discovery response includes:
[0011] Extracting the service network address of the service producer carried in the service discovery response;
[0012] The service network address is encrypted to determine the target FQDN.
[0013] In one embodiment, the determining the target FQDN according to address encryption of the service network address includes:
[0014] Encrypting the service network address to obtain an encrypted string;
[0015] The communication organization domain name information is added to the suffix of the encrypted string, and the encrypted string with the communication organization domain name information added to the suffix is used as the target FQDN.
[0016] In one of the embodiments, the service discovery response is a response sent by the NRF network element to the SEPP network element after receiving the service discovery request sent by the service demander.
[0017] In one embodiment, performing an address inverse transformation on the target FQDN to obtain a service network address includes:
[0018] The target FQDN is decrypted to obtain a service network address.
[0019] In one embodiment, decrypting the target FQDN to obtain a service network address includes:
[0020] The encrypted character string contained in the target FQDN is decrypted to obtain a service network address.
[0021] In a second aspect, the present application also provides a service providing device. The device comprises:
[0022] A receiving module, configured to receive an initial service request sent by a service demander; wherein the initial service request carries a target fully qualified domain name FQDN; the target FQDN is generated by the SEPP network element after receiving a service discovery response sent by a network repository function NRF network element for the service demander, according to the service network address carried in the service discovery response;
[0023] A transformation module, used for performing an address inverse transformation on the target FQDN to obtain a service network address;
[0024] A replacement module, configured to replace the target FQDN in the initial service request with the service network address to obtain a target service request;
[0025] The sending module is used to send the target service request to the service producer, so that the service producer provides service to the service demander according to the functional network element corresponding to the service network address.
[0026] In a third aspect, the present application further provides a computer device. The computer device includes a memory and a processor, the memory stores a computer program, and the processor implements the following steps when executing the computer program:
[0027] Receive an initial service request sent by a service demander; wherein the initial service request carries a target fully qualified domain name FQDN; the target FQDN is generated by the SEPP network element after receiving a service discovery response sent by a network repository function NRF network element to the service demander, according to the service network address carried in the service discovery response;
[0028] Performing an inverse address transformation on the target FQDN to obtain a service network address;
[0029] Replacing the target FQDN in the initial service request with the service network address to obtain a target service request;
[0030] The target service request is sent to a service producer, so that the service producer provides services to the service demander according to the functional network element corresponding to the service network address.
[0031] In a fourth aspect, the present application further provides a computer-readable storage medium. The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the following steps are implemented:
[0032] Receive an initial service request sent by a service demander; wherein the initial service request carries a target fully qualified domain name FQDN; the target FQDN is generated by the SEPP network element after receiving a service discovery response sent by a network repository function NRF network element to the service demander, according to the service network address carried in the service discovery response;
[0033] Performing an inverse address transformation on the target FQDN to obtain a service network address;
[0034] Replacing the target FQDN in the initial service request with the service network address to obtain a target service request;
[0035] The target service request is sent to a service producer, so that the service producer provides services to the service demander according to the functional network element corresponding to the service network address.
[0036] In a fifth aspect, the present application further provides a computer program product. The computer program product includes a computer program, and when the computer program is executed by a processor, the following steps are implemented:
[0037] Receive an initial service request sent by a service demander; wherein the initial service request carries a target fully qualified domain name FQDN; the target FQDN is generated by the SEPP network element after receiving a service discovery response sent by a network repository function NRF network element to the service demander, according to the service network address carried in the service discovery response;
[0038] Performing an inverse address transformation on the target FQDN to obtain a service network address;
[0039] Replacing the target FQDN in the initial service request with the service network address to obtain a target service request;
[0040] The target service request is sent to a service producer, so that the service producer provides services to the service demander according to the functional network element corresponding to the service network address.
[0041] The above-mentioned service providing method, device, computer equipment and storage medium receive the initial service request sent by the service demander and carry the target FQDN to realize the address inverse transformation of the target FQDN to obtain the service network address; and use the service network address to replace the target FQDN in the initial service request to obtain the target service request; then, send the target service request to the service producer, so that the service producer provides services to the service demander according to the functional network element corresponding to the service network address. According to the above content, the present application receives the initial service request sent by the service demander to realize the service network address replacement for the target FQDN in the initial service request, and realizes that the service network address can be sent when the address of the target FQDN is only reversed by the SEPP network element to obtain the service network address, without the need for other network elements to adjust their functions, so that the communication organization does not need to build a DNS or database, which reduces the management and maintenance cost of maintaining the mapping relationship between the entire network FQDN and the service network address in the domain, and also reduces the risk of interruption of business transmission, and eliminates the potential hidden dangers of service interruption caused by untimely update of the mapping relationship data between FQDN and service network address. BRIEF DESCRIPTION OF THE DRAWINGS
[0042] Figure 1An application environment diagram of a service providing method provided in an embodiment of the present application;
[0043] Figure 2 A flowchart of the first service providing method provided in the embodiment of the present application;
[0044] Figure 3 A flowchart of a second service providing method provided in an embodiment of the present application;
[0045] Figure 4 A flowchart of a third service providing method provided in an embodiment of the present application;
[0046] Figure 5 A schematic diagram of a process of generating a target FQDN by a SEPP network element provided in an embodiment of the present application;
[0047] Figure 6 A schematic diagram of a process in which S sends a target service request to a service producer provided in an embodiment of the present application;
[0048] Figure 7 A structural block diagram of a service providing device provided in an embodiment of the present application;
[0049] Figure 8 FIG. 4 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION
[0050] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.
[0051] The service providing method provided in the embodiment of the present application can be applied to Figure 1 In the application environment shown. Among them, the SEPP network element 102 communicates with the NRF (Network Repository Function) network element 104 through the network. The data storage system can store data that the server 104 needs to process. The data storage system can be integrated on the server 104, or it can be placed on the cloud or other network servers. By receiving the initial service request carrying the target FQDN sent by the service demander, the address of the target FQDN is reversed to obtain the service network address; and the service network address is used to replace the target FQDN in the initial service request to obtain the target service request; then, the target service request is sent to the service producer, so that the service producer provides services to the service demander according to the functional network element corresponding to the service network address.
[0052] In one embodiment, Figure 2 As shown, a service providing method is provided, which is applied to Figure 1 The SEPP network element in the example is used to illustrate, including the following steps:
[0053] S201, receiving an initial service request sent by a service demander.
[0054] The initial service request carries a target fully qualified domain name FQDN; the target FQDN is generated by the SEPP network element according to the service network address carried in the service discovery response after receiving the service discovery response sent by the network repository function NRF network element to the service demander;
[0055] In one embodiment of the present application, the service demander sends an initial service request to the Serving SEPP network element of the Serving PLMN (Serving Public Land Mobile Network); the Serving SEPP network element forwards the initial service request to the Home SEPP network element of the Home PLMN (Home Public Land Mobile Network), which is the executor of the service provision method, thereby implementing the operation of receiving the initial service request sent by the service demander.
[0056] The service discovery response is a response sent by the NRF network element to the SEPP network element after receiving the service discovery request sent by the service demander.
[0057] S202, performing an inverse address transformation on the target FQDN to obtain a service network address.
[0058] It should be noted that since the target FQDN is generated by the SEPP network element after receiving the service discovery response sent by the network repository function NRF network element to the service demander, based on the service network address carried in the service discovery response, the service network address can be obtained by performing an inverse transformation on the target FQDN.
[0059] In one embodiment of the present application, if the target FQDN is a service network address obtained through encryption, when the service network address needs to be obtained, the target FQDN can be decrypted to obtain the service network address.
[0060] In another embodiment of the present application, when it is necessary to perform an address inverse transformation on the target FQDN, a mapping relationship between the target FQDN and the service network address can be obtained in advance, wherein the mapping relationship records at least one candidate FQDN and different candidate network addresses corresponding to each candidate FQDN; then, based on the mapping relationship, the target FQDN is subjected to an address inverse transformation to obtain the service network address.
[0061] Specifically, after determining the target FQDN, the target FQDN is compared with at least one candidate FQDN recorded in the mapping relationship for similarity, and the candidate FQDN among the candidate FQDNs that is the same as the target FQDN is used as the reference FQDN; further, the candidate network address corresponding to the reference FQDN in the mapping relationship is used as the service network address.
[0062] S203, replacing the target FQDN in the initial service request with the service network address to obtain a target service request.
[0063] In one embodiment of the present application, the data location of the target FQDN in the initial service request is determined, and then, after the service network address is determined, the service network address is replaced with the target FQDN at the data location to obtain the target service request.
[0064] S204: Send the target service request to the service producer, so that the service producer provides services to the service demander according to the functional network element corresponding to the service network address.
[0065] The above-mentioned service provision method receives the initial service request sent by the service demander and carries the target FQDN, so as to perform an address inverse transformation on the target FQDN and obtain the service network address; and replaces the target FQDN in the initial service request with the service network address to obtain the target service request; and then sends the target service request to the service producer, so that the service producer provides services to the service demander according to the functional network element corresponding to the service network address. According to the above content, the present application receives the initial service request sent by the service demander to replace the service network address for the target FQDN in the initial service request, and realizes that the service network address can be sent when the address of the target FQDN is only reversely transformed by the SEPP network element to obtain the service network address, without the need for functional adjustment of other network elements, so that the communication organization does not need to build a DNS or database, which reduces the management and maintenance cost of maintaining the mapping relationship between the entire network FQDN and the service network address in the domain, and also reduces the risk of interruption of business transmission, and eliminates the potential hidden danger of service interruption caused by untimely update of the mapping relationship data between FQDN and service network address.
[0066] In one embodiment, if Figure 3 As shown, when it is necessary to generate a target FQDN based on the service network address carried in the service discovery response, the following contents may be included:
[0067] S301, extracting the service network address of the service producer carried in the service discovery response.
[0068] Specifically, the network address of the service discovery response is identified to locate the data location corresponding to the service network address in the service discovery response, and then, based on the data location corresponding to the service network address, the service network address of the service producer carried in the service discovery response is extracted.
[0069] The service discovery response is a response sent by the NRF network element to the SEPP network element after receiving the service discovery request sent by the service demander.
[0070] In one embodiment of the present application, after the Serving SEPP network element forwards the initial service request to the Home SEPP network element of the Home PLMN, the execution subject of the service provision method, the Home SEPP network element forwards the initial service request to the Home NRF network element, and the Home NRF network element forwards the initial service request to the Home PLMN.
[0071] S302, encrypt the service network address to determine the target FQDN.
[0072] It should be noted that when it is necessary to encrypt the service network address, the following contents may be included: encrypting the service network address to obtain an encrypted string; adding the communication organization domain name information to the suffix of the encrypted string, and using the encrypted string with the communication organization domain name information added to the suffix as the target FQDN.
[0073] As an example, if the service network address is 10.1.1.1, the local algorithm is used to encrypt and generate an encrypted string djg640jfdsk; the communication agency domain name information 5gc.mnc012.mcc345.3gppnetwork.org is added to the suffix of the encrypted string, and the target FQDN is: djg640jfdsk.5gc.mnc012.mcc345.3gppnetwork.org.
[0074] To further explain, since the target FQDN is an encrypted string with the communication organization domain name information added to the suffix, when performing address inverse transformation on the target FQDN to obtain the service network address, the following method can be used: decrypt the target FQDN to obtain the service network address.
[0075] Specifically, since the target FQDN contains not only the encrypted string but also the domain name information of the communication organization, only the encrypted string contained in the target FQDN is decrypted to obtain the service network address.
[0076] As an example, if the target FQDN information is djg640jfdsk.5gc.mnc012.mcc345.3gppnetwork.org, the SEPP network element decrypts the encrypted string contained in the target FQDN to obtain the service network address 10.1.1.1. The SEPP network element then uses the service network address to replace the target FQDN in the initial service request to obtain the target service request.
[0077] The above-mentioned service providing method encrypts the service network address to add the communication organization domain name information to the suffix of the encrypted string to obtain the target FQDN, thereby achieving the purpose of obtaining the service network address by decrypting the encrypted string contained in the target FQDN, and achieving the sending of the service network address when the target FQDN is only reversely transformed by the SEPP network element to obtain the service network address, without the need for functional adjustment of other network elements, so that the communication organization does not need to build a DNS or database, thereby reducing the management and maintenance costs of maintaining the mapping relationship between the entire network FQDN and the service network address in the domain, and also reducing the risk of service transmission interruption.
[0078] In one embodiment, if Figure 4 As shown, when the target service request needs to be sent to the service producer, the following contents may be included:
[0079] S401: receiving an initial service request sent by a service demander.
[0080] S402, decrypt the encrypted string contained in the target FQDN to obtain a service network address.
[0081] S403, replacing the target FQDN in the initial service request with the service network address to obtain a target service request.
[0082] S404: Send the target service request to the service producer, so that the service producer provides services to the service demander according to the functional network element corresponding to the service network address.
[0083] In one embodiment of the present application, the process of the SEPP network element generating the target FQDN is as follows: Figure 5As shown, the service demander sends a service discovery request to the Serving NRF network element of the Serving PLMN (Serving Public Land Mobile Network); the Serving NRF network element forwards the service discovery request to the Serving SEPP network element; the Serving SEPP network element forwards the service discovery request to the Home SEPP network element of the Home PLMN (Home Public Land Mobile Network), which is the executor of the service provision method, and the Home SEPP network element forwards the service discovery request to the Home NRF network element; after the Home NRF network element generates a service discovery response for the service discovery request, it sends the service discovery response to the Home SEPP network element; after receiving the service discovery response sent by the Home NRF network element to the service demander, the Home SEPP network element generates a target FQDN according to the service network address carried in the service discovery response, and sends the service discovery response carrying the target FQDN to the Serving SEPP network element; the Serving SEPP network element sends the service discovery response to the Serving NRF network element; the Serving NRF network element sends the service discovery response to the service demander.
[0084] Furthermore, the service discovery request may include, but is not limited to: a service discovery request and a network element status subscription request, etc., and the request type of the service discovery request is not limited herein.
[0085] In one embodiment of the present application, the process of sending the target service request to the service producer is as follows: Figure 6 As shown, the service demander sends the initial service request to the Serving SEPP network element; the Serving SEPP network element sends the initial service request to the Home SEPP network element, the Home SEPP network element performs an address inverse transformation on the target FQDN, obtains the service network address, and sends the target service request to the service producer.
[0086] The above-mentioned service providing method receives an initial service request carrying a target FQDN sent by a service demander to perform an address inverse transformation on the target FQDN to obtain a service network address; and uses the service network address to replace the target FQDN in the initial service request to obtain a target service request; and then, sends the target service request to a service producer so that the service producer provides services to the service demander according to the functional network element corresponding to the service network address.
[0087] According to the above content, the present application receives the initial service request sent by the service demander to realize the replacement of the service network address for the target FQDN in the initial service request, and realizes the sending of the service network address when the service network address is obtained by performing an address inverse transformation on the target FQDN only through the SEPP network element, without the need for functional adjustment of other network elements, so that the communication organization does not need to build a DNS or database, thereby reducing the management and maintenance cost of maintaining the mapping relationship between the FQDN and the service network address of the entire network in the domain, and also reducing the risk of interruption in business transmission, eliminating the potential hidden dangers of service interruption caused by untimely update of the mapping relationship data between the FQDN and the service network address.
[0088] It should be understood that, although the steps in the flowcharts involved in the above embodiments are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence according to the order indicated by the arrows. Unless there is a clear explanation in this article, the execution of these steps is not strictly limited in order, and these steps can be executed in other orders. Moreover, at least a part of the steps in the flowcharts involved in the above embodiments may include multiple steps or multiple stages, and these steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these steps or stages is not necessarily carried out in sequence, but can be executed in turn or alternately with other steps or at least a part of the steps or stages in other steps.
[0089] Based on the same inventive concept, the embodiment of the present application also provides a service providing device for implementing the service providing method involved above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme recorded in the above method, so the specific limitations in one or more service providing device embodiments provided below can refer to the limitations on the service providing method above, and will not be repeated here.
[0090] In one embodiment, Figure 7 As shown, a service providing device is provided, comprising: a receiving module 10, a transforming module 20, a replacing module 30 and a sending module 40, wherein:
[0091] The receiving module 10 is used to receive the initial service request sent by the service demander; wherein the initial service request carries the target fully qualified domain name FQDN; the target FQDN is generated by the SEPP network element after receiving the service discovery response sent by the network repository function NRF network element to the service demander, according to the service network address carried in the service discovery response.
[0092] The transformation module 20 is used to perform an address inverse transformation on the target FQDN to obtain a service network address.
[0093] The replacement module 30 is used to replace the target FQDN in the initial service request with the service network address to obtain the target service request.
[0094] The sending module 40 is used to send the target service request to the service producer, so that the service producer provides services to the service demander according to the functional network element corresponding to the service network address.
[0095] In one embodiment, extracting a service network address of a service producer carried in a service discovery response;
[0096] Encrypt the service network address and determine the target FQDN.
[0097] In one embodiment, the service network address is encrypted to obtain an encrypted string;
[0098] The communication organization domain name information is added to the suffix of the encrypted string, and the encrypted string with the communication organization domain name information added to the suffix is used as the target FQDN.
[0099] The service discovery response is a response sent by the NRF network element to the SEPP network element after receiving the service discovery request sent by the service demander.
[0100] The target FQDN is decrypted to obtain the service network address.
[0101] The encrypted string contained in the target FQDN is decrypted to obtain the service network address.
[0102] The above-mentioned service providing device receives the initial service request sent by the service demander and carries the target FQDN, so as to perform an address inverse transformation on the target FQDN and obtain the service network address; and replaces the target FQDN in the initial service request with the service network address to obtain the target service request; and then sends the target service request to the service producer, so that the service producer provides services to the service demander according to the functional network element corresponding to the service network address. According to the above content, the present application receives the initial service request sent by the service demander to perform a service network address replacement for the target FQDN in the initial service request, and realizes that the service network address can be sent when the target FQDN is only reversely transformed by the SEPP network element to obtain the service network address, without the need for functional adjustment of other network elements, so that the communication organization does not need to build a DNS or database, which reduces the management and maintenance cost of maintaining the mapping relationship between the entire network FQDN and the service network address in the domain, and also reduces the risk of interruption of service transmission, and eliminates the potential hidden danger of service interruption caused by untimely update of the mapping relationship data between FQDN and service network address.
[0103] Each module in the above service providing device can be implemented in whole or in part by software, hardware or a combination thereof. Each module can be embedded in or independent of a processor in a computer device in the form of hardware, or can be stored in a memory in a computer device in the form of software, so that the processor can call and execute the operations corresponding to each module.
[0104] In one embodiment, a computer device is provided. The computer device may be a terminal, and its internal structure diagram may be as follows: Figure 8 As shown. The computer device includes a processor, a memory, an input / output interface, a communication interface, a display unit and an input device. Among them, the processor, the memory and the input / output interface are connected through a system bus, and the communication interface, the display unit and the input device are connected to the system bus through the input / output interface. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system and a computer program. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The input / output interface of the computer device is used to exchange information between the processor and the external device. The communication interface of the computer device is used to communicate with an external terminal in a wired or wireless manner, and the wireless manner can be implemented through WIFI, a mobile cellular network, NFC (near field communication) or other technologies. When the computer program is executed by the processor, a service provision method is implemented. The display unit of the computer device is used to form a visually visible picture, which can be a display screen, a projection device or a virtual reality imaging device. The display screen can be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer device can be a touch layer covering the display screen, or a button, trackball or touchpad set on the computer device shell, or an external keyboard, touchpad or mouse.
[0105] Those skilled in the art will understand that Figure 8 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.
[0106] In one embodiment, a computer device is provided, including a memory and a processor, wherein a computer program is stored in the memory, and when the processor executes the computer program, the following steps are implemented:
[0107] Receive an initial service request sent by a service demander; wherein the initial service request carries a target fully qualified domain name FQDN; the target FQDN is generated by the SEPP network element after receiving a service discovery response sent by the network repository function NRF network element to the service demander, according to the service network address carried in the service discovery response;
[0108] Perform a reverse address transformation on the target FQDN to obtain the service network address;
[0109] Replacing the target FQDN in the initial service request with the service network address to obtain the target service request;
[0110] The target service request is sent to the service producer so that the service producer provides services to the service demander according to the functional network element corresponding to the service network address.
[0111] In one embodiment, when the processor executes the computer program, the following steps are also implemented:
[0112] Extract the service network address of the service producer carried in the service discovery response;
[0113] Encrypt the service network address and determine the target FQDN.
[0114] In one embodiment, when the processor executes the computer program, the following steps are also implemented:
[0115] Encrypt the service network address to obtain an encrypted string;
[0116] The communication organization domain name information is added to the suffix of the encrypted string, and the encrypted string with the communication organization domain name information added to the suffix is used as the target FQDN.
[0117] In one embodiment, when the processor executes the computer program, the following steps are also implemented:
[0118] The service discovery response is a response sent by the NRF network element to the SEPP network element after receiving the service discovery request sent by the service demander.
[0119] In one embodiment, when the processor executes the computer program, the following steps are also implemented:
[0120] The target FQDN is decrypted to obtain the service network address.
[0121] In one embodiment, when the processor executes the computer program, the following steps are also implemented:
[0122] The encrypted string contained in the target FQDN is decrypted to obtain the service network address.
[0123] In one embodiment, a computer readable storage medium is provided, on which a computer program is stored, and when the computer program is executed by a processor, the following steps are implemented:
[0124] Receive an initial service request sent by a service demander; wherein the initial service request carries a target fully qualified domain name FQDN; the target FQDN is generated by the SEPP network element after receiving a service discovery response sent by the network repository function NRF network element to the service demander, according to the service network address carried in the service discovery response;
[0125] Perform a reverse address transformation on the target FQDN to obtain the service network address;
[0126] Replacing the target FQDN in the initial service request with the service network address to obtain the target service request;
[0127] The target service request is sent to the service producer so that the service producer provides services to the service demander according to the functional network element corresponding to the service network address.
[0128] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:
[0129] Extract the service network address of the service producer carried in the service discovery response;
[0130] Encrypt the service network address and determine the target FQDN.
[0131] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:
[0132] Encrypt the service network address to obtain an encrypted string;
[0133] The communication organization domain name information is added to the suffix of the encrypted string, and the encrypted string with the communication organization domain name information added to the suffix is used as the target FQDN.
[0134] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:
[0135] The service discovery response is a response sent by the NRF network element to the SEPP network element after receiving the service discovery request sent by the service demander.
[0136] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:
[0137] The target FQDN is decrypted to obtain the service network address.
[0138] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:
[0139] The encrypted string contained in the target FQDN is decrypted to obtain the service network address.
[0140] In one embodiment, a computer program product is provided, comprising a computer program, which, when executed by a processor, implements the following steps:
[0141] Receive an initial service request sent by a service demander; wherein the initial service request carries a target fully qualified domain name FQDN; the target FQDN is generated by the SEPP network element after receiving a service discovery response sent by the network repository function NRF network element to the service demander, according to the service network address carried in the service discovery response;
[0142] Perform a reverse address transformation on the target FQDN to obtain the service network address;
[0143] Replacing the target FQDN in the initial service request with the service network address to obtain the target service request;
[0144] The target service request is sent to the service producer so that the service producer provides services to the service demander according to the functional network element corresponding to the service network address.
[0145] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:
[0146] Extract the service network address of the service producer carried in the service discovery response;
[0147] Encrypt the service network address and determine the target FQDN.
[0148] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:
[0149] Encrypt the service network address to obtain an encrypted string;
[0150] The communication organization domain name information is added to the suffix of the encrypted string, and the encrypted string with the communication organization domain name information added to the suffix is used as the target FQDN.
[0151] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:
[0152] The service discovery response is a response sent by the NRF network element to the SEPP network element after receiving the service discovery request sent by the service demander.
[0153] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:
[0154] The target FQDN is decrypted to obtain the service network address.
[0155] In one embodiment, when the computer program is executed by a processor, the following steps are also implemented:
[0156] The encrypted string contained in the target FQDN is decrypted to obtain the service network address.
[0157] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with relevant laws, regulations and standards of relevant countries and regions.
[0158] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to the memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM). The database involved in each embodiment provided in this application may include at least one of a relational database and a non-relational database. Non-relational databases may include distributed databases based on blockchains, etc., but are not limited to this. The processor involved in each embodiment provided in this application may be a general-purpose processor, a central processing unit, a graphics processor, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., but are not limited to this.
[0159] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.
[0160] The above embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present application. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the present application shall be subject to the attached claims.
Claims
1. A service providing method, characterized in that: Applied to a security edge protection proxy SEPP network element, the method comprises: Receive an initial service request sent by a service demander; wherein the initial service request carries a target fully qualified domain name FQDN; the target FQDN is generated by the SEPP network element after receiving a service discovery response sent by a network repository function NRF network element to the service demander, according to the service network address carried in the service discovery response; Performing an inverse address transformation on the target FQDN to obtain a service network address; Replacing the target FQDN in the initial service request with the service network address to obtain a target service request; The target service request is sent to a service producer, so that the service producer provides services to the service demander according to the functional network element corresponding to the service network address.
2. The method according to claim 1, characterized in that Generating the target FQDN according to the service network address carried in the service discovery response includes: Extracting the service network address of the service producer carried in the service discovery response; The service network address is encrypted to determine the target FQDN.
3. The method according to claim 2, characterized in that The step of determining the target FQDN according to address encryption of the service network address includes: Encrypting the service network address to obtain an encrypted string; The communication organization domain name information is added to the suffix of the encrypted string, and the encrypted string with the communication organization domain name information added to the suffix is used as the target FQDN.
4. The method according to claim 2, characterized in that: The service discovery response is a response sent by the NRF network element to the SEPP network element after receiving the service discovery request sent by the service demander.
5. The method according to claim 3, characterized in that: The performing an address inverse transformation on the target FQDN to obtain a service network address includes: The target FQDN is decrypted to obtain a service network address.
6. The method according to claim 5, characterized in that The decrypting the target FQDN to obtain the service network address includes: The encrypted character string contained in the target FQDN is decrypted to obtain a service network address.
7. A service providing device, characterized in that: The device comprises: A receiving module, configured to receive an initial service request sent by a service demander; wherein the initial service request carries a target fully qualified domain name FQDN; the target FQDN is generated by the SEPP network element after receiving a service discovery response sent by a network repository function NRF network element for the service demander, according to the service network address carried in the service discovery response; A transformation module, used for performing an address inverse transformation on the target FQDN to obtain a service network address; A replacement module, configured to replace the target FQDN in the initial service request with the service network address to obtain a target service request; The sending module is used to send the target service request to the service producer, so that the service producer provides service to the service demander according to the functional network element corresponding to the service network address.
8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, wherein: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 6 are implemented.
9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.
10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.
Citation Information
Patent Citations
Roaming signaling message sending method, related equipment and communication system
CN112584371A
Domain name resolution method and device and computer equipment
CN112887451A
Information sending method, device and system and storage medium
CN115484657A
Internetwork subscription signaling topology hiding method and device, inter-network subscription signaling topology restoring method and device and medium
CN116634491A
Methods, systems, and computer readable media for dynamically updating domain name system (DNS) records based on registered network function (NF) profile information
CN118140462A