Data transmission method, device and equipment

Abstract

The invention provides a data transmission method, device and equipment, and the data transmission method is applied to first core network equipment, and comprises the steps: receiving a first data downloading request sent by satellite application function equipment; the first data downloading request carries a first user identifier of the first terminal and downloading data; sending a second data downloading request to a second core network device according to the first data downloading request; the second data downloading request carries downloading data and the SUPI of the first terminal; or, receiving a first data uploading request sent by the second core network equipment; the first data uploading request carries SUPI and uploading data of the second terminal; sending a second data uploading request to satellite application function equipment according to the first data uploading request; the second data uploading request carries a second user identifier of the second terminal and uploading data. According to the scheme, the problem that the prior art cannot support accurate data transmission in a satellite store-and-forward scene is solved.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to a data transmission method, device and equipment. Background Art

[0002] With the development, satellite communication technology has been proposed in the existing technology. However, there are defects in the communication process, such as satellite can only transparently forward, which leads to the inability to support accurate data transmission in the satellite storage and forwarding scenarios that appear in the process of technological development.

[0003] As described above, the prior art has problems such as being unable to support accurate data transmission in a satellite store-and-forward scenario. Summary of the invention

[0004] The purpose of the present application is to provide a data transmission method, apparatus and device to solve the problem that the prior art cannot support accurate data transmission in a satellite store-and-forward scenario.

[0005] In order to solve the above technical problems, an embodiment of the present application provides a data transmission method, which is applied to a first core network device, including:

[0006] Receiving a first data download request sent by a satellite application function device; the first data download request carries a first user identifier of a first terminal and download data;

[0007] Sending a second data download request to a second core network device according to the first data download request; the second data download request carries the download data and a user permanent identifier SUPI of the first terminal obtained according to the first user identifier;

[0008] Alternatively, receiving a first data upload request sent by the second core network device; the first data upload request carries the SUPI of the second terminal and the upload data;

[0009] According to the first data upload request, sending a second data upload request to the satellite application function device; the second data upload request carries a second user identifier of the second terminal and upload data;

[0010] The first terminal is the same as or different from the second terminal.

[0011] Optionally, the first user identifier includes: a SUPI or an application identifier of the first terminal;

[0012] And / or, the first data download request further carries: at least one of: a first application identifier, satellite application service information, first operation type information, first generation time information of the downloaded data, and first valid time information of the downloaded data; the first application identifier is used to indicate the satellite application service to which the downloaded data belongs; the satellite application service information includes: auxiliary information for determining a target satellite providing service for the second data download request; the first operation type information indicates a download operation;

[0013] And / or, the second data download request further carries: at least one of the first application identifier, the satellite application service information, the first operation type information, the first generation time information and the first valid time information;

[0014] And / or, the first data upload request further carries: at least one of a second application identifier and second operation type information; the second application identifier is used to indicate the satellite application service to which the uploaded data belongs; the second operation type information indicates an upload operation;

[0015] And / or, the second data upload request further carries: at least one of the second application identifier and second operation type information;

[0016] And / or, the second user identifier includes: a SUPI or an application identifier of the second terminal.

[0017] The embodiment of the present application also provides a data transmission method, which is applied to a second core network device, including:

[0018] receiving a second data download request sent by the first core network device; the second data download request carries the download data and the SUPI of the first terminal;

[0019] Sending a third data download request to the first satellite device according to the second data download request; the third data download request carries the download data and the SUPI of the first terminal;

[0020] Alternatively, receiving a third data upload request sent by the first satellite device; the third data upload request carries the SUPI of the second terminal and the upload data;

[0021] Sending a first data upload request to the first core network device according to the third data upload request; the first data upload request carries the SUPI of the second terminal and the upload data;

[0022] The first terminal is the same as or different from the second terminal.

[0023] Optionally, before sending a third data download request to the first satellite device according to the second data download request, or before receiving a third data upload request sent by the first satellite device, the method further includes:

[0024] Acquire authentication related information of the target terminal according to the SUPI of the target terminal; the target terminal is the first terminal or the second terminal; the authentication related information includes: a terminal context or a terminal authentication vector; the terminal context includes a terminal security context;

[0025] The authentication-related information is sent to the first satellite device.

[0026] Optionally, before sending the authentication related information to the first satellite device, the method further includes:

[0027] Sending a target satellite request to a satellite management function device; the target satellite request carries the SUPI of the target terminal;

[0028] receiving a target satellite response fed back by the satellite management function device; the target satellite response carries target satellite information;

[0029] The sending a third data download request to the first satellite device according to the second data download request includes:

[0030] Sending a third data download request to a first satellite device corresponding to the target satellite information according to the second data download request;

[0031] The sending the authentication related information to the first satellite device includes:

[0032] The authentication related information is sent to a first satellite device corresponding to the target satellite information.

[0033] Optionally, acquiring authentication related information of the target terminal according to the SUPI of the target terminal includes any one of the following:

[0034] Acquire the stored terminal context locally;

[0035] Send an authentication vector request to a third core network device, where the authentication vector request carries the SUPI of the target terminal; and receive an authentication vector response fed back by the third core network device according to the SUPI of the target terminal, where the authentication vector response carries the terminal authentication vector.

[0036] Optionally, the authentication vector request further carries: authentication vector type indication information, where the authentication vector type indication information is used to indicate that the target terminal is authenticated in a store-and-forward scenario;

[0037] The terminal authentication vector is an authentication vector used to authenticate the target terminal in the store-and-forward scenario.

[0038] Optionally, the second data download request further carries: at least one of: a first application identifier, satellite application service information, first operation type information, first generation time information of the downloaded data, and first valid time information of the downloaded data; the first application identifier is used to indicate the satellite application service to which the downloaded data belongs; the satellite application service information includes: auxiliary information for determining a target satellite that provides services for the second data download request; the first operation type information indicates a download operation;

[0039] And / or, the third data download request further carries: at least one of: the first application identifier, the first operation type information, the first generation time information of the download data, and the first validity time information of the download data;

[0040] And / or, the third data upload request further carries: at least one of: a second application identifier, second operation type information, second generation time information of the uploaded data, and second valid time information of the uploaded data; the second application identifier is used to indicate the satellite application service to which the uploaded data belongs; the second operation type information indicates an upload operation;

[0041] And / or, the first data upload request further carries: at least one of the second application identifier and the second operation type information;

[0042] And / or, the target satellite request further carries: the satellite application service information;

[0043] And / or, the authentication vector request further carries: the target satellite information, where the target satellite information is used to assist in generating the terminal authentication vector.

[0044] The embodiment of the present application also provides a data transmission method, which is applied to a first satellite device, including:

[0045] receiving a third data download request sent by the second core network device; the third data download request carries the download data and the SUPI of the first terminal;

[0046] Performing a first data interaction with the first terminal according to the SUPI of the first terminal; the first data interaction comprising: sending the download data to the first terminal;

[0047] Alternatively, performing a second data interaction with the second terminal; the second data interaction comprising: receiving upload data sent by the second terminal and the SUPI of the second terminal;

[0048] According to the second data interaction, sending a third data upload request to the second core network device; the third data upload request carries the SUPI of the second terminal and the upload data;

[0049] The first terminal is the same as or different from the second terminal.

[0050] Optionally, before performing a first data interaction with the first terminal according to the SUPI of the first terminal, or before performing a second data interaction with the second terminal, the method further includes:

[0051] receiving authentication related information of a target terminal sent by the second core network device; the target terminal is the first terminal or the second terminal; the authentication related information includes: a terminal context or a terminal authentication vector; the terminal context includes a terminal security context;

[0052] Performing authentication interaction with the target terminal according to the authentication related information;

[0053] The performing first data interaction with the first terminal according to the SUPI of the first terminal includes:

[0054] When the first terminal is authenticated successfully, performing first data exchange with the first terminal according to the SUPI of the first terminal;

[0055] The performing second data interaction with the second terminal includes:

[0056] When the second terminal passes the authentication, a second data interaction is performed with the second terminal.

[0057] Optionally, the third data download request further carries: first information, the first information including: at least one of a first application identifier, first operation type information, first generation time information of the downloaded data, and first valid time information of the downloaded data; the first application identifier is used to indicate a satellite application service to which the downloaded data belongs; the first operation type information indicates a download operation;

[0058] The data transmission method further comprises:

[0059] storing second information corresponding to the SUPI of the first terminal; the second information comprising: the downloaded data, or the downloaded data and the first information;

[0060] and / or, storing the authentication related information in correspondence with the SUPI of the target terminal.

[0061] Optionally, storing the second information in correspondence with the SUPI of the first terminal includes:

[0062] Sending a first stored message to a second satellite device; wherein the first stored message carries: the second information and the SUPI of the first terminal;

[0063] Before performing first data interaction with the first terminal according to the SUPI of the first terminal, the method further includes:

[0064] Sending a first acquisition request to the second satellite device according to the SUPI of the first terminal; the first acquisition request carries: the SUPI of the first terminal, or the SUPI of the first terminal and the first operation type information;

[0065] Receive a first acquisition response sent by the second satellite device; the first acquisition response carries: the downloaded data, or at least one of the first application identifier, the first operation type information, the first generation time information of the downloaded data and the first valid time information of the downloaded data, and the downloaded data.

[0066] Optionally, the first data interaction further includes:

[0067] Send the first application identifier to the first terminal.

[0068] Optionally, before sending a third data upload request to the second core network device according to the second data interaction, the method further includes:

[0069] storing the third information in correspondence with the SUPI of the second terminal;

[0070] The third information includes: the uploaded data, or at least one of a second application identifier and second operation type information, and the uploaded data; the second application identifier is used to indicate the satellite application service to which the uploaded data belongs; and the second operation type information indicates an upload operation.

[0071] Optionally, storing the third information in correspondence with the SUPI of the second terminal includes:

[0072] Sending a second stored message to the second satellite device; the second stored message carries: the third information and the SUPI of the second terminal;

[0073] Before sending a third data upload request to the second core network device according to the second data interaction, the method further includes:

[0074] Sending a second acquisition request to the second satellite device according to the SUPI of the second terminal; the second acquisition request carries: the SUPI of the second terminal, or the SUPI of the second terminal and the second operation type information;

[0075] Receive a second acquisition response sent by the second satellite device; the second acquisition response carries: the uploaded data, or at least one of the second application identifier, the second operation type information, the second generation time information of the uploaded data and the second valid time information of the uploaded data, and the uploaded data.

[0076] Optionally, before storing the third information in correspondence with the SUPI of the second terminal, the method further includes:

[0077] Determine at least one of second generation time information of the uploaded data and second valid time information of the uploaded data;

[0078] The third information further includes: at least one of the second generation time information and the second validity time information.

[0079] Optionally, the third data download request further carries: at least one of: a first application identifier, first operation type information, first generation time information of the downloaded data, and first valid time information of the downloaded data; the first application identifier is used to indicate a satellite application service to which the downloaded data belongs; the first operation type information indicates a download operation;

[0080] And / or, the third data upload request also carries: at least one of the terminal context of the second terminal, the second application identifier, the second operation type information, the second generation time information of the uploaded data, and the second valid time information of the uploaded data; the terminal context includes the terminal security context.

[0081] Optionally, the second data interaction further includes:

[0082] Receive the second application identifier sent by the second terminal.

[0083] The embodiment of the present application also provides a data transmission method, which is applied to a second satellite device, including:

[0084] receiving a target storage message sent by a first satellite device; the storage message carries: target information, and a SUPI of a target terminal; wherein the target storage message is a first storage message, the target information is second information, and the target terminal is a first terminal; or, the target storage message is a second storage message, the target information is third information, and the target terminal is a second terminal; the first terminal is the same as or different from the second terminal;

[0085] storing the target information and the SUPI of the target terminal in correspondence;

[0086] The second information includes: download data, or the download data and the first information; the first information includes: at least one of a first application identifier, first operation type information, first generation time information of the download data, and first valid time information of the download data; the first application identifier is used to indicate the satellite application service to which the download data belongs; the first operation type information indicates a download operation;

[0087] The third information includes: upload data, or at least one of a second application identifier and second operation type information, and the upload data; the second application identifier is used to indicate the satellite application service to which the upload data belongs; and the second operation type information indicates an upload operation.

[0088] Optionally, also include:

[0089] receiving a first acquisition request sent by the first satellite device; wherein the first acquisition request carries: a SUPI of the first terminal, or a SUPI of the first terminal and the first operation type information;

[0090] A first acquisition response is sent to the first satellite device; the first acquisition response carries: the downloaded data, or at least one of the first application identifier, the first operation type information, the first generation time information of the downloaded data and the first valid time information of the downloaded data, and the downloaded data.

[0091] Optionally, the third information further includes: at least one of second generation time information of the uploaded data and second validity time information of the uploaded data.

[0092] Optionally, also include:

[0093] receiving a second acquisition request sent by the first satellite device; wherein the second acquisition request carries: the SUPI of the second terminal, or the SUPI of the second terminal and the second operation type information;

[0094] A second acquisition response is sent to the first satellite device; the second acquisition response carries: the uploaded data, or at least one of the second application identifier, the second operation type information, the second generation time information of the uploaded data and the second valid time information of the uploaded data, and the uploaded data.

[0095] The embodiment of the present application also provides a data transmission method, which is applied to a third core network device, including:

[0096] receiving an authentication vector request sent by the second core network device, where the authentication vector request carries a SUPI of a target terminal, where the target terminal is the first terminal or the second terminal;

[0097] Generating a terminal authentication vector according to the SUPI of the target terminal;

[0098] Feedback an authentication vector response to the second core network device, where the authentication vector response carries the terminal authentication vector.

[0099] Optionally, the authentication vector request further carries: authentication vector type indication information, where the authentication vector type indication information is used to indicate that the target terminal is authenticated in a store-and-forward scenario;

[0100] The terminal authentication vector is an authentication vector used to authenticate the target terminal in the store-and-forward scenario.

[0101] Optionally, the authentication vector request further carries: target satellite information corresponding to the first satellite device, where the target satellite information is used to assist in generating the terminal authentication vector;

[0102] The target satellite information is obtained by the second core network device according to the target satellite response fed back by the satellite management function device.

[0103] The embodiment of the present application also provides a data transmission method, which is applied to a satellite application function device, including:

[0104] Sending a first data download request to a first core network device; the first data download request carries a first user identifier of the first terminal and download data;

[0105] Alternatively, receiving a second data upload request sent by the first core network device; the second data upload request carries a second user identifier of the second terminal and upload data;

[0106] The first terminal is the same as or different from the second terminal.

[0107] Optionally, the first user identifier includes: a SUPI or an application identifier of the first terminal;

[0108] And / or, the first data download request also carries: at least one of: a first application identifier, satellite application service information, first operation type information, first generation time information of the downloaded data, and first valid time information of the downloaded data; the first application identifier is used to indicate the satellite application service to which the downloaded data belongs; the satellite application service information includes: auxiliary information for determining a target satellite providing service for the second data download request; the second data download request is a data download request sent by the first core network device to the second core network device according to the first data download request; the first operation type information indicates a download operation;

[0109] And / or, the second data upload request further carries: at least one of a second application identifier and second operation type information; the second application identifier is used to indicate the satellite application service to which the uploaded data belongs; the second operation type information indicates an upload operation;

[0110] And / or, the second user identifier includes: a SUPI or an application identifier of the second terminal.

[0111] The embodiment of the present application also provides a data transmission method, which is applied to a terminal, including:

[0112] Performing data interaction with the first satellite device; the data interaction includes: receiving download data; and / or, sending upload data and the SUPI of the terminal to the first satellite device.

[0113] Optionally, before interacting with the first satellite device, the method further includes:

[0114] Performing authentication interaction with the first satellite device;

[0115] The data interaction with the first satellite device includes:

[0116] When the terminal passes authentication, data is exchanged with the first satellite device.

[0117] Optionally, when the data interaction includes receiving downloaded data, the data interaction further includes:

[0118] A first application identifier is received, where the first application identifier is used to indicate a satellite application service to which the downloaded data belongs.

[0119] Optionally, when the data interaction includes sending upload data and the SUPI of the terminal to the first satellite device, the data interaction further includes:

[0120] A second application identifier is sent to the first satellite device, where the second application identifier is used to indicate the satellite application service to which the uploaded data belongs.

[0121] The embodiment of the present application also provides a data transmission method, which is applied to a second core network device, including:

[0122] Sending an authentication vector request to a third core network device according to the SUPI of the target terminal, where the authentication vector request carries the SUPI of the target terminal and authentication vector type indication information, where the authentication vector type indication information is used to indicate that the target terminal is authenticated in a store-and-forward scenario; the target terminal is the first terminal or the second terminal;

[0123] receiving an authentication vector response fed back by the third core network device, where the authentication vector response carries a terminal authentication vector of the target terminal, where the terminal authentication vector is an authentication vector used to authenticate the target terminal in the store-and-forward scenario;

[0124] The terminal authentication vector is sent to the first satellite device.

[0125] Optionally, before sending the terminal authentication vector to the first satellite device, the method further includes:

[0126] Sending a target satellite request to a satellite management function device; the target satellite request carries the SUPI of the target terminal;

[0127] receiving a target satellite response fed back by the satellite management function device; the target satellite response carries target satellite information;

[0128] The sending the terminal authentication vector to the first satellite device includes:

[0129] The terminal authentication vector is sent to a first satellite device corresponding to the target satellite information.

[0130] Optionally, the authentication vector request further carries: the target satellite information; the target satellite information is used to assist in generating the terminal authentication vector.

[0131] The embodiment of the present application also provides a data transmission method, which is applied to a first satellite device, including:

[0132] Receiving a terminal authentication vector of a target terminal sent by a second core network device; the target terminal is the first terminal or the second terminal;

[0133] Perform authentication interaction with the target terminal according to the terminal authentication vector.

[0134] Optionally, also include:

[0135] Obtaining the SUPI of the target terminal;

[0136] The terminal authentication vector is stored correspondingly to the SUPI of the target terminal.

[0137] Optionally, the acquiring the SUPI of the target terminal includes:

[0138] receiving a SUPI of the first terminal sent by the second core network device;

[0139] Alternatively, receiving the SUPI of the second terminal sent by the second terminal.

[0140] Optionally, the acquiring the SUPI of the target terminal includes:

[0141] directly obtaining the SUPI of the target terminal in plain text;

[0142] Alternatively, the SUPI of the target terminal in ciphertext form is obtained; and the SUPI of the target terminal in ciphertext form is decrypted to obtain the SUPI of the target terminal in plaintext form.

[0143] The embodiment of the present application further provides a data transmission device, which is a first core network device and includes a memory, a transceiver, and a processor:

[0144] A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations:

[0145] Receiving, by the transceiver, a first data download request sent by the satellite application function device; the first data download request carries a first user identifier of the first terminal and download data;

[0146] According to the first data download request, sending a second data download request to the second core network device through the transceiver; the second data download request carries the download data and the user permanent identifier SUPI of the first terminal obtained according to the first user identifier;

[0147] Alternatively, receiving, by the transceiver, a first data upload request sent by the second core network device; the first data upload request carries the SUPI of the second terminal and the upload data;

[0148] According to the first data upload request, sending a second data upload request to the satellite application function device through the transceiver; the second data upload request carries a second user identifier of the second terminal and upload data;

[0149] The first terminal is the same as or different from the second terminal.

[0150] Optionally, the first user identifier includes: a SUPI or an application identifier of the first terminal;

[0151] And / or, the first data download request further carries: at least one of: a first application identifier, satellite application service information, first operation type information, first generation time information of the downloaded data, and first valid time information of the downloaded data; the first application identifier is used to indicate the satellite application service to which the downloaded data belongs; the satellite application service information includes: auxiliary information for determining a target satellite providing service for the second data download request; the first operation type information indicates a download operation;

[0152] And / or, the second data download request further carries: at least one of the first application identifier, the satellite application service information, the first operation type information, the first generation time information and the first valid time information;

[0153] And / or, the first data upload request further carries: at least one of a second application identifier and second operation type information; the second application identifier is used to indicate the satellite application service to which the uploaded data belongs; the second operation type information indicates an upload operation;

[0154] And / or, the second data upload request further carries: at least one of the second application identifier and second operation type information;

[0155] And / or, the second user identifier includes: a SUPI or an application identifier of the second terminal.

[0156] The embodiment of the present application further provides a data transmission device, which is a second core network device and includes a memory, a transceiver, and a processor:

[0157] A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations:

[0158] Receiving, by the transceiver, a second data download request sent by the first core network device; the second data download request carries the download data and the SUPI of the first terminal;

[0159] According to the second data download request, sending a third data download request to the first satellite device through the transceiver; the third data download request carries the download data and the SUPI of the first terminal;

[0160] Alternatively, receiving, by the transceiver, a third data upload request sent by the first satellite device; the third data upload request carries the SUPI of the second terminal and the upload data;

[0161] According to the third data upload request, sending a first data upload request to the first core network device through the transceiver; the first data upload request carries the SUPI of the second terminal and the upload data;

[0162] The first terminal is the same as or different from the second terminal.

[0163] Optionally, the operation further includes:

[0164] Before sending a third data download request to the first satellite device through the transceiver according to the second data download request, or before receiving a third data upload request sent by the first satellite device, obtaining authentication related information of the target terminal according to the SUPI of the target terminal; the target terminal is the first terminal or the second terminal; the authentication related information includes: a terminal context or a terminal authentication vector; the terminal context includes a terminal security context;

[0165] The authentication related information is sent to the first satellite device through the transceiver.

[0166] Optionally, the operation further includes:

[0167] Before sending the authentication related information to the first satellite device, sending a target satellite request to a satellite management function device through the transceiver; the target satellite request carries the SUPI of the target terminal;

[0168] receiving, by the transceiver, a target satellite response fed back by the satellite management function device; the target satellite response carries target satellite information;

[0169] The step of sending a third data download request to the first satellite device through the transceiver according to the second data download request includes:

[0170] According to the second data download request, sending a third data download request to the first satellite device corresponding to the target satellite information through the transceiver;

[0171] The sending the authentication related information to the first satellite device includes:

[0172] The authentication related information is sent to a first satellite device corresponding to the target satellite information.

[0173] Optionally, acquiring authentication related information of the target terminal according to the SUPI of the target terminal includes any one of the following:

[0174] Acquire the stored terminal context locally;

[0175] An authentication vector request is sent to a third core network device through the transceiver, where the authentication vector request carries the SUPI of the target terminal; and an authentication vector response fed back by the third core network device according to the SUPI of the target terminal is received through the transceiver, where the authentication vector response carries the terminal authentication vector.

[0176] Optionally, the authentication vector request further carries: authentication vector type indication information, where the authentication vector type indication information is used to indicate that the target terminal is authenticated in a store-and-forward scenario;

[0177] The terminal authentication vector is an authentication vector used to authenticate the target terminal in the store-and-forward scenario.

[0178] Optionally, the second data download request further carries: at least one of: a first application identifier, satellite application service information, first operation type information, first generation time information of the downloaded data, and first valid time information of the downloaded data; the first application identifier is used to indicate the satellite application service to which the downloaded data belongs; the satellite application service information includes: auxiliary information for determining a target satellite that provides services for the second data download request; the first operation type information indicates a download operation;

[0179] And / or, the third data download request further carries: at least one of: the first application identifier, the first operation type information, the first generation time information of the download data, and the first validity time information of the download data;

[0180] And / or, the third data upload request further carries: at least one of: a second application identifier, second operation type information, second generation time information of the uploaded data, and second valid time information of the uploaded data; the second application identifier is used to indicate the satellite application service to which the uploaded data belongs; the second operation type information indicates an upload operation;

[0181] And / or, the first data upload request further carries: at least one of the second application identifier and the second operation type information;

[0182] And / or, the target satellite request further carries: the satellite application service information;

[0183] And / or, the authentication vector request further carries: the target satellite information, where the target satellite information is used to assist in generating the terminal authentication vector.

[0184] The embodiment of the present application further provides a data transmission device, which is a first satellite device, including a memory, a transceiver, and a processor:

[0185] A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations:

[0186] Receiving, by the transceiver, a third data download request sent by the second core network device; the third data download request carries the download data and the SUPI of the first terminal;

[0187] Performing a first data interaction with the first terminal through the transceiver according to the SUPI of the first terminal; the first data interaction comprising: sending the download data to the first terminal;

[0188] Alternatively, performing a second data interaction with a second terminal through the transceiver; the second data interaction includes: receiving upload data sent by the second terminal and the SUPI of the second terminal;

[0189] According to the second data interaction, sending a third data upload request to the second core network device through the transceiver; the third data upload request carries the SUPI of the second terminal and the upload data;

[0190] The first terminal is the same as or different from the second terminal.

[0191] Optionally, the operation further includes:

[0192] Before performing a first data interaction with the first terminal through the transceiver according to the SUPI of the first terminal, or before performing a second data interaction with the second terminal, receiving, through the transceiver, authentication related information of a target terminal sent by the second core network device; the target terminal is the first terminal or the second terminal; the authentication related information includes: a terminal context or a terminal authentication vector; the terminal context includes a terminal security context;

[0193] Performing authentication interaction with the target terminal according to the authentication related information;

[0194] The performing first data interaction with the first terminal through the transceiver according to the SUPI of the first terminal includes:

[0195] When the first terminal passes authentication, performing first data exchange with the first terminal through the transceiver according to the SUPI of the first terminal;

[0196] The performing second data interaction with the second terminal includes:

[0197] When the second terminal passes the authentication, a second data interaction is performed with the second terminal.

[0198] Optionally, the third data download request further carries: first information, the first information including: at least one of a first application identifier, first operation type information, first generation time information of the downloaded data, and first valid time information of the downloaded data; the first application identifier is used to indicate a satellite application service to which the downloaded data belongs; the first operation type information indicates a download operation;

[0199] The operations also include:

[0200] storing second information corresponding to the SUPI of the first terminal; the second information comprising: the downloaded data, or the downloaded data and the first information;

[0201] and / or, storing the authentication related information in correspondence with the SUPI of the target terminal.

[0202] Optionally, storing the second information in correspondence with the SUPI of the first terminal includes:

[0203] Sending a first stored message to a second satellite device through the transceiver; the first stored message carries: the second information and the SUPI of the first terminal;

[0204] The operations also include:

[0205] Before performing a first data exchange with the first terminal through the transceiver according to the SUPI of the first terminal, sending a first acquisition request to the second satellite device through the transceiver according to the SUPI of the first terminal; the first acquisition request carries: the SUPI of the first terminal, or the SUPI of the first terminal and the first operation type information;

[0206] A first acquisition response sent by the second satellite device is received through the transceiver; the first acquisition response carries: the download data, or at least one of the first application identifier, the first operation type information, the first generation time information of the download data and the first valid time information of the download data, and the download data.

[0207] Optionally, the first data interaction further includes:

[0208] Send the first application identifier to the first terminal.

[0209] Optionally, the operation further includes:

[0210] Before sending a third data upload request to the second core network device according to the second data interaction, storing the third information in correspondence with the SUPI of the second terminal;

[0211] The third information includes: the uploaded data, or at least one of a second application identifier and second operation type information, and the uploaded data; the second application identifier is used to indicate the satellite application service to which the uploaded data belongs; and the second operation type information indicates an upload operation.

[0212] Optionally, storing the third information in correspondence with the SUPI of the second terminal includes:

[0213] Sending a second stored message to a second satellite device through the transceiver; the second stored message carries: the third information and the SUPI of the second terminal;

[0214] The operations also include:

[0215] Before sending a third data upload request to a second core network device through the transceiver according to the second data interaction, sending a second acquisition request to the second satellite device through the transceiver according to the SUPI of the second terminal; the second acquisition request carries: the SUPI of the second terminal, or the SUPI of the second terminal and the second operation type information;

[0216] A second acquisition response sent by the second satellite device is received through the transceiver; the second acquisition response carries: the uploaded data, or at least one of the second application identifier, the second operation type information, the second generation time information of the uploaded data and the second valid time information of the uploaded data, and the uploaded data.

[0217] Optionally, the operation further includes:

[0218] Before storing the third information in correspondence with the SUPI of the second terminal, determining at least one of second generation time information of the upload data and second validity time information of the upload data;

[0219] The third information further includes: at least one of the second generation time information and the second validity time information.

[0220] Optionally, the third data download request further carries: at least one of: a first application identifier, first operation type information, first generation time information of the downloaded data, and first valid time information of the downloaded data; the first application identifier is used to indicate a satellite application service to which the downloaded data belongs; the first operation type information indicates a download operation;

[0221] And / or, the third data upload request also carries: at least one of the terminal context of the second terminal, the second application identifier, the second operation type information, the second generation time information of the uploaded data, and the second valid time information of the uploaded data; the terminal context includes the terminal security context.

[0222] Optionally, the second data interaction further includes:

[0223] Receive the second application identifier sent by the second terminal.

[0224] The embodiment of the present application further provides a data transmission device, which is a second satellite device and includes a memory, a transceiver, and a processor:

[0225] A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations:

[0226] Receiving, by the transceiver, a target stored message sent by a first satellite device; the stored message carries: target information, and a SUPI of a target terminal; wherein the target stored message is a first stored message, the target information is second information, and the target terminal is a first terminal; or, the target stored message is a second stored message, the target information is third information, and the target terminal is a second terminal; the first terminal is the same as or different from the second terminal;

[0227] storing the target information and the SUPI of the target terminal in correspondence;

[0228] The second information includes: download data, or the download data and the first information; the first information includes: at least one of a first application identifier, first operation type information, first generation time information of the download data, and first valid time information of the download data; the first application identifier is used to indicate the satellite application service to which the download data belongs; the first operation type information indicates a download operation;

[0229] The third information includes: upload data, or at least one of a second application identifier and second operation type information, and the upload data; the second application identifier is used to indicate the satellite application service to which the upload data belongs; and the second operation type information indicates an upload operation.

[0230] Optionally, the operation further includes:

[0231] Receiving, by the transceiver, a first acquisition request sent by the first satellite device, wherein the first acquisition request carries: the SUPI of the first terminal, or the SUPI of the first terminal and the first operation type information;

[0232] A first acquisition response is sent to the first satellite device through the transceiver; the first acquisition response carries: the downloaded data, or at least one of the first application identifier, the first operation type information, the first generation time information of the downloaded data and the first valid time information of the downloaded data, and the downloaded data.

[0233] Optionally, the third information further includes: at least one of second generation time information of the uploaded data and second validity time information of the uploaded data.

[0234] Optionally, the operation further includes:

[0235] Receiving, by the transceiver, a second acquisition request sent by the first satellite device, wherein the second acquisition request carries: the SUPI of the second terminal, or the SUPI of the second terminal and the second operation type information;

[0236] A second acquisition response is sent to the first satellite device through the transceiver; the second acquisition response carries: the uploaded data, or at least one of the second application identifier, the second operation type information, the second generation time information of the uploaded data and the second valid time information of the uploaded data, and the uploaded data.

[0237] The embodiment of the present application further provides a data transmission device, which is a third core network device and includes a memory, a transceiver, and a processor:

[0238] A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations:

[0239] Receiving, by the transceiver, an authentication vector request sent by the second core network device, where the authentication vector request carries a SUPI of a target terminal, where the target terminal is the first terminal or the second terminal;

[0240] Generating a terminal authentication vector according to the SUPI of the target terminal;

[0241] An authentication vector response is fed back to the second core network device through the transceiver, where the authentication vector response carries the terminal authentication vector.

[0242] Optionally, the authentication vector request further carries: authentication vector type indication information, where the authentication vector type indication information is used to indicate that the target terminal is authenticated in a store-and-forward scenario;

[0243] The terminal authentication vector is an authentication vector used to authenticate the target terminal in the store-and-forward scenario.

[0244] Optionally, the authentication vector request further carries: target satellite information corresponding to the first satellite device, where the target satellite information is used to assist in generating the terminal authentication vector;

[0245] The target satellite information is obtained by the second core network device according to the target satellite response fed back by the satellite management function device.

[0246] The embodiment of the present application further provides a data transmission device, which is a satellite application function device and includes a memory, a transceiver, and a processor:

[0247] A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations:

[0248] Sending a first data download request to a first core network device through the transceiver; the first data download request carries a first user identifier of the first terminal and download data;

[0249] Alternatively, receiving, by the transceiver, a second data upload request sent by the first core network device; the second data upload request carries a second user identifier of the second terminal and upload data;

[0250] The first terminal is the same as or different from the second terminal.

[0251] Optionally, the first user identifier includes: a SUPI or an application identifier of the first terminal;

[0252] And / or, the first data download request also carries: at least one of: a first application identifier, satellite application service information, first operation type information, first generation time information of the downloaded data, and first valid time information of the downloaded data; the first application identifier is used to indicate the satellite application service to which the downloaded data belongs; the satellite application service information includes: auxiliary information for determining a target satellite providing service for the second data download request; the second data download request is a data download request sent by the first core network device to the second core network device according to the first data download request; the first operation type information indicates a download operation;

[0253] And / or, the second data upload request further carries: at least one of a second application identifier and second operation type information; the second application identifier is used to indicate the satellite application service to which the uploaded data belongs; the second operation type information indicates an upload operation;

[0254] And / or, the second user identifier includes: a SUPI or an application identifier of the second terminal.

[0255] The embodiment of the present application further provides a data transmission device, which is a terminal and includes a memory, a transceiver, and a processor:

[0256] A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations:

[0257] Data interaction is performed with the first satellite device through the transceiver; the data interaction includes: receiving download data; and / or sending upload data and the SUPI of the terminal to the first satellite device.

[0258] Optionally, the operation further includes:

[0259] Before performing data interaction with the first satellite device, performing authentication interaction with the first satellite device through the transceiver;

[0260] The data interaction with the first satellite device includes:

[0261] When the terminal passes authentication, data is exchanged with the first satellite device.

[0262] Optionally, when the data interaction includes receiving downloaded data, the data interaction further includes:

[0263] A first application identifier is received, where the first application identifier is used to indicate a satellite application service to which the downloaded data belongs.

[0264] Optionally, when the data interaction includes sending upload data and the SUPI of the terminal to the first satellite device, the data interaction further includes:

[0265] A second application identifier is sent to the first satellite device, where the second application identifier is used to indicate the satellite application service to which the uploaded data belongs.

[0266] The embodiment of the present application further provides a data transmission device, which is a second core network device and includes a memory, a transceiver, and a processor:

[0267] A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations:

[0268] sending, according to the SUPI of the target terminal, an authentication vector request to a third core network device through the transceiver, where the authentication vector request carries the SUPI of the target terminal and authentication vector type indication information, where the authentication vector type indication information is used to indicate that the target terminal is authenticated in a store-and-forward scenario; the target terminal is the first terminal or the second terminal;

[0269] Receiving, by the transceiver, an authentication vector response fed back by the third core network device, the authentication vector response carrying a terminal authentication vector of the target terminal, the terminal authentication vector being an authentication vector used to authenticate the target terminal in the store-and-forward scenario;

[0270] The terminal authentication vector is sent to the first satellite device through the transceiver.

[0271] Optionally, the operation further includes:

[0272] Before sending the terminal authentication vector to the first satellite device, sending a target satellite request to a satellite management function device through the transceiver; the target satellite request carries the SUPI of the target terminal;

[0273] Receiving, by the transceiver, a target satellite response fed back by the satellite management function device; the target satellite response carries target satellite information;

[0274] The sending the terminal authentication vector to the first satellite device includes:

[0275] The terminal authentication vector is sent to a first satellite device corresponding to the target satellite information.

[0276] Optionally, the authentication vector request further carries: the target satellite information; the target satellite information is used to assist in generating the terminal authentication vector.

[0277] The embodiment of the present application further provides a data transmission device, which is a first satellite device, including a memory, a transceiver, and a processor:

[0278] A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations:

[0279] Receiving, by the transceiver, a terminal authentication vector of a target terminal sent by a second core network device; the target terminal is a first terminal or a second terminal;

[0280] Perform authentication interaction with the target terminal according to the terminal authentication vector.

[0281] Optionally, the operation further includes:

[0282] Obtaining the SUPI of the target terminal;

[0283] The terminal authentication vector is stored correspondingly to the SUPI of the target terminal.

[0284] Optionally, the acquiring the SUPI of the target terminal includes:

[0285] Receiving, by the transceiver, the SUPI of the first terminal sent by the second core network device;

[0286] Alternatively, receiving the SUPI of the second terminal sent by the second terminal.

[0287] Optionally, the acquiring the SUPI of the target terminal includes:

[0288] directly obtaining the SUPI of the target terminal in plain text;

[0289] Alternatively, the SUPI of the target terminal in ciphertext form is obtained; and the SUPI of the target terminal in ciphertext form is decrypted to obtain the SUPI of the target terminal in plaintext form.

[0290] The embodiment of the present application further provides a data transmission system, comprising: the first core network device mentioned above, the second core network device mentioned above, the first satellite device mentioned above, the second satellite device mentioned above, the third core network device mentioned above, the satellite application function device mentioned above, and the terminal mentioned above;

[0291] Or, the second core network device mentioned above, and the first satellite device mentioned above.

[0292] The embodiment of the present application further provides a data transmission device, which is applied to a first core network device, including:

[0293] A first transceiver unit is configured to receive a first data download request sent by a satellite application function device; the first data download request carries a first user identifier of a first terminal and download data;

[0294] Sending a second data download request to a second core network device according to the first data download request; the second data download request carries the download data and a user permanent identifier SUPI of the first terminal obtained according to the first user identifier;

[0295] Alternatively, receiving a first data upload request sent by the second core network device; the first data upload request carries the SUPI of the second terminal and the upload data;

[0296] According to the first data upload request, sending a second data upload request to the satellite application function device; the second data upload request carries a second user identifier of the second terminal and upload data;

[0297] The first terminal is the same as or different from the second terminal.

[0298] Optionally, the first user identifier includes: a SUPI or an application identifier of the first terminal;

[0299] And / or, the first data download request further carries: at least one of: a first application identifier, satellite application service information, first operation type information, first generation time information of the downloaded data, and first valid time information of the downloaded data; the first application identifier is used to indicate the satellite application service to which the downloaded data belongs; the satellite application service information includes: auxiliary information for determining a target satellite providing service for the second data download request; the first operation type information indicates a download operation;

[0300] And / or, the second data download request further carries: at least one of the first application identifier, the satellite application service information, the first operation type information, the first generation time information and the first valid time information;

[0301] And / or, the first data upload request further carries: at least one of a second application identifier and second operation type information; the second application identifier is used to indicate the satellite application service to which the uploaded data belongs; the second operation type information indicates an upload operation;

[0302] And / or, the second data upload request further carries: at least one of the second application identifier and second operation type information;

[0303] And / or, the second user identifier includes: a SUPI or an application identifier of the second terminal.

[0304] The embodiment of the present application further provides a data transmission device, which is applied to a second core network device, including:

[0305] The second transceiver unit is configured to receive a second data download request sent by the first core network device; the second data download request carries the download data and the SUPI of the first terminal;

[0306] Sending a third data download request to the first satellite device according to the second data download request; the third data download request carries the download data and the SUPI of the first terminal;

[0307] Alternatively, receiving a third data upload request sent by the first satellite device; the third data upload request carries the SUPI of the second terminal and the upload data;

[0308] Sending a first data upload request to the first core network device according to the third data upload request; the first data upload request carries the SUPI of the second terminal and the upload data;

[0309] The first terminal is the same as or different from the second terminal.

[0310] Optionally, also include:

[0311] A first acquisition unit is configured to acquire authentication related information of the target terminal according to the SUPI of the target terminal before sending a third data download request to the first satellite device according to the second data download request, or before receiving a third data upload request sent by the first satellite device; the target terminal is the first terminal or the second terminal; the authentication related information includes: a terminal context or a terminal authentication vector; the terminal context includes a terminal security context;

[0312] The first sending unit is configured to send the authentication related information to the first satellite device.

[0313] Optionally, also include:

[0314] A second sending unit is configured to send a target satellite request to a satellite management function device before sending the authentication related information to the first satellite device; the target satellite request carries the SUPI of the target terminal;

[0315] A first receiving unit is used to receive a target satellite response fed back by the satellite management function device; the target satellite response carries target satellite information;

[0316] The sending a third data download request to the first satellite device according to the second data download request includes:

[0317] Sending a third data download request to a first satellite device corresponding to the target satellite information according to the second data download request;

[0318] The sending the authentication related information to the first satellite device includes:

[0319] The authentication related information is sent to a first satellite device corresponding to the target satellite information.

[0320] Optionally, acquiring authentication related information of the target terminal according to the SUPI of the target terminal includes any one of the following:

[0321] Acquire the stored terminal context locally;

[0322] Send an authentication vector request to a third core network device, where the authentication vector request carries the SUPI of the target terminal; and receive an authentication vector response fed back by the third core network device according to the SUPI of the target terminal, where the authentication vector response carries the terminal authentication vector.

[0323] Optionally, the authentication vector request further carries: authentication vector type indication information, where the authentication vector type indication information is used to indicate that the target terminal is authenticated in a store-and-forward scenario;

[0324] The terminal authentication vector is an authentication vector used to authenticate the target terminal in the store-and-forward scenario.

[0325] Optionally, the second data download request further carries: at least one of: a first application identifier, satellite application service information, first operation type information, first generation time information of the downloaded data, and first valid time information of the downloaded data; the first application identifier is used to indicate the satellite application service to which the downloaded data belongs; the satellite application service information includes: auxiliary information for determining a target satellite that provides services for the second data download request; the first operation type information indicates a download operation;

[0326] And / or, the third data download request further carries: at least one of: the first application identifier, the first operation type information, the first generation time information of the download data, and the first validity time information of the download data;

[0327] And / or, the third data upload request further carries: at least one of: a second application identifier, second operation type information, second generation time information of the uploaded data, and second valid time information of the uploaded data; the second application identifier is used to indicate the satellite application service to which the uploaded data belongs; the second operation type information indicates an upload operation;

[0328] And / or, the first data upload request further carries: at least one of the second application identifier and the second operation type information;

[0329] And / or, the target satellite request further carries: the satellite application service information;

[0330] And / or, the authentication vector request further carries: the target satellite information, where the target satellite information is used to assist in generating the terminal authentication vector.

[0331] The embodiment of the present application further provides a data transmission device, which is applied to a first satellite device, including:

[0332] A third transceiver unit is configured to receive a third data download request sent by the second core network device; the third data download request carries the download data and the SUPI of the first terminal;

[0333] Performing a first data interaction with the first terminal according to the SUPI of the first terminal; the first data interaction comprising: sending the download data to the first terminal;

[0334] Alternatively, performing a second data interaction with the second terminal; the second data interaction comprising: receiving upload data sent by the second terminal and the SUPI of the second terminal;

[0335] According to the second data interaction, sending a third data upload request to the second core network device; the third data upload request carries the SUPI of the second terminal and the upload data;

[0336] The first terminal is the same as or different from the second terminal.

[0337] Optionally, also include:

[0338] a second receiving unit, configured to receive authentication related information of a target terminal sent by the second core network device before performing a first data interaction with the first terminal according to the SUPI of the first terminal, or before performing a second data interaction with the second terminal; the target terminal is the first terminal or the second terminal; the authentication related information includes: a terminal context or a terminal authentication vector; the terminal context includes a terminal security context;

[0339] A first interaction unit, configured to perform authentication interaction with the target terminal according to the authentication related information;

[0340] The performing first data interaction with the first terminal according to the SUPI of the first terminal includes:

[0341] When the first terminal is authenticated successfully, performing first data exchange with the first terminal according to the SUPI of the first terminal;

[0342] The performing second data interaction with the second terminal includes:

[0343] When the second terminal passes the authentication, a second data interaction is performed with the second terminal.

[0344] Optionally, the third data download request further carries: first information, the first information including: at least one of a first application identifier, first operation type information, first generation time information of the downloaded data, and first valid time information of the downloaded data; the first application identifier is used to indicate a satellite application service to which the downloaded data belongs; the first operation type information indicates a download operation;

[0345] The data transmission device also includes:

[0346] a first storage unit, configured to store second information corresponding to the SUPI of the first terminal; the second information comprising: the downloaded data, or the downloaded data and the first information;

[0347] and / or, storing the authentication related information in correspondence with the SUPI of the target terminal.

[0348] Optionally, storing the second information in correspondence with the SUPI of the first terminal includes:

[0349] Sending a first stored message to a second satellite device; wherein the first stored message carries: the second information and the SUPI of the first terminal;

[0350] The data transmission device also includes:

[0351] a third sending unit, configured to send a first acquisition request to the second satellite device according to the SUPI of the first terminal before performing a first data exchange with the first terminal according to the SUPI of the first terminal; the first acquisition request carries: the SUPI of the first terminal, or the SUPI of the first terminal and the first operation type information;

[0352] A third receiving unit is used to receive a first acquisition response sent by the second satellite device; the first acquisition response carries: the downloaded data, or at least one of the first application identifier, the first operation type information, the first generation time information of the downloaded data and the first valid time information of the downloaded data, and the downloaded data.

[0353] Optionally, the first data interaction further includes:

[0354] Send the first application identifier to the first terminal.

[0355] Optionally, also include:

[0356] A second storage unit, configured to store the third information corresponding to the SUPI of the second terminal before sending the third data upload request to the second core network device according to the second data interaction;

[0357] The third information includes: the uploaded data, or at least one of a second application identifier and second operation type information, and the uploaded data; the second application identifier is used to indicate the satellite application service to which the uploaded data belongs; and the second operation type information indicates an upload operation.

[0358] Optionally, storing the third information in correspondence with the SUPI of the second terminal includes:

[0359] Sending a second stored message to the second satellite device; the second stored message carries: the third information and the SUPI of the second terminal;

[0360] The data transmission device also includes:

[0361] a fourth sending unit, configured to send a second acquisition request to the second satellite device according to the SUPI of the second terminal before sending the third data upload request to the second core network device according to the second data interaction; the second acquisition request carries: the SUPI of the second terminal, or the SUPI of the second terminal and the second operation type information;

[0362] A fourth receiving unit is used to receive a second acquisition response sent by the second satellite device; the second acquisition response carries: the uploaded data, or at least one of the second application identifier, the second operation type information, the second generation time information of the uploaded data and the second valid time information of the uploaded data, and the uploaded data.

[0363] Optionally, also include:

[0364] a first determining unit, configured to determine at least one of second generation time information of the upload data and second validity time information of the upload data before storing the third information in correspondence with the SUPI of the second terminal;

[0365] The third information further includes: at least one of the second generation time information and the second validity time information.

[0366] Optionally, the third data download request further carries: at least one of: a first application identifier, first operation type information, first generation time information of the downloaded data, and first valid time information of the downloaded data; the first application identifier is used to indicate a satellite application service to which the downloaded data belongs; the first operation type information indicates a download operation;

[0367] And / or, the third data upload request also carries: at least one of the terminal context of the second terminal, the second application identifier, the second operation type information, the second generation time information of the uploaded data, and the second valid time information of the uploaded data; the terminal context includes the terminal security context.

[0368] Optionally, the second data interaction further includes:

[0369] Receive the second application identifier sent by the second terminal.

[0370] The embodiment of the present application further provides a data transmission device, which is applied to a second satellite device, including:

[0371] a fifth receiving unit, configured to receive a target storage message sent by the first satellite device; the storage message carries: target information, and a SUPI of a target terminal; wherein the target storage message is a first storage message, the target information is second information, and the target terminal is a first terminal; or, the target storage message is a second storage message, the target information is third information, and the target terminal is a second terminal; the first terminal is the same as or different from the second terminal;

[0372] a third storage unit, configured to store the target information and the SUPI of the target terminal in correspondence;

[0373] The second information includes: download data, or the download data and the first information; the first information includes: at least one of a first application identifier, first operation type information, first generation time information of the download data, and first valid time information of the download data; the first application identifier is used to indicate the satellite application service to which the download data belongs; the first operation type information indicates a download operation;

[0374] The third information includes: upload data, or at least one of a second application identifier and second operation type information, and the upload data; the second application identifier is used to indicate the satellite application service to which the upload data belongs; and the second operation type information indicates an upload operation.

[0375] Optionally, also include:

[0376] a sixth receiving unit, configured to receive a first acquisition request sent by the first satellite device; the first acquisition request carries: a SUPI of the first terminal, or a SUPI of the first terminal and the first operation type information;

[0377] a fifth sending unit, configured to send a first acquisition response to the first satellite device; the first acquisition response carries: the downloaded data, or at least one of the first application identifier, the first operation type information, the first generation time information of the downloaded data, and the first valid time information of the downloaded data, as well as the downloaded data.

[0378] Optionally, the third information further includes: at least one of second generation time information of the uploaded data and second validity time information of the uploaded data.

[0379] Optionally, also include:

[0380] a seventh receiving unit, configured to receive a second acquisition request sent by the first satellite device; the second acquisition request carries: a SUPI of the second terminal, or a SUPI of the second terminal and the second operation type information;

[0381] A sixth sending unit is used to send a second acquisition response to the first satellite device; the second acquisition response carries: the uploaded data, or at least one of the second application identifier, the second operation type information, the second generation time information of the uploaded data and the second valid time information of the uploaded data, and the uploaded data.

[0382] The embodiment of the present application further provides a data transmission device, which is applied to a third core network device, including:

[0383] an eighth receiving unit, configured to receive an authentication vector request sent by the second core network device, where the authentication vector request carries a SUPI of a target terminal, where the target terminal is the first terminal or the second terminal;

[0384] A first generating unit, configured to generate a terminal authentication vector according to the SUPI of the target terminal;

[0385] The first feedback unit is configured to feed back an authentication vector response to the second core network device, where the authentication vector response carries the terminal authentication vector.

[0386] Optionally, the authentication vector request further carries: authentication vector type indication information, where the authentication vector type indication information is used to indicate that the target terminal is authenticated in a store-and-forward scenario;

[0387] The terminal authentication vector is an authentication vector used to authenticate the target terminal in the store-and-forward scenario.

[0388] Optionally, the authentication vector request further carries: target satellite information corresponding to the first satellite device, where the target satellite information is used to assist in generating the terminal authentication vector;

[0389] The target satellite information is obtained by the second core network device according to the target satellite response fed back by the satellite management function device.

[0390] The embodiment of the present application also provides a data transmission device, which is applied to satellite application function equipment, including:

[0391] The fourth transceiver unit is used to send a first data download request to the first core network device; the first data download request carries a first user identifier of the first terminal and download data;

[0392] Alternatively, receiving a second data upload request sent by the first core network device; the second data upload request carries a second user identifier of the second terminal and upload data;

[0393] The first terminal is the same as or different from the second terminal.

[0394] Optionally, the first user identifier includes: a SUPI or an application identifier of the first terminal;

[0395] And / or, the first data download request also carries: at least one of: a first application identifier, satellite application service information, first operation type information, first generation time information of the downloaded data, and first valid time information of the downloaded data; the first application identifier is used to indicate the satellite application service to which the downloaded data belongs; the satellite application service information includes: auxiliary information for determining a target satellite providing service for the second data download request; the second data download request is a data download request sent by the first core network device to the second core network device according to the first data download request; the first operation type information indicates a download operation;

[0396] And / or, the second data upload request further carries: at least one of a second application identifier and second operation type information; the second application identifier is used to indicate the satellite application service to which the uploaded data belongs; the second operation type information indicates an upload operation;

[0397] And / or, the second user identifier includes: a SUPI or an application identifier of the second terminal.

[0398] The embodiment of the present application further provides a data transmission device, applied to a terminal, including:

[0399] The second interaction unit is used to perform data interaction with the first satellite device; the data interaction includes: receiving download data; and / or sending upload data and the SUPI of the terminal to the first satellite device.

[0400] Optionally, also include:

[0401] A third interaction unit, configured to perform authentication interaction with the first satellite device before performing data interaction with the first satellite device;

[0402] The data interaction with the first satellite device includes:

[0403] When the terminal passes authentication, data is exchanged with the first satellite device.

[0404] Optionally, when the data interaction includes receiving downloaded data, the data interaction further includes:

[0405] A first application identifier is received, where the first application identifier is used to indicate a satellite application service to which the downloaded data belongs.

[0406] Optionally, when the data interaction includes sending upload data and the SUPI of the terminal to the first satellite device, the data interaction further includes:

[0407] A second application identifier is sent to the first satellite device, where the second application identifier is used to indicate the satellite application service to which the uploaded data belongs.

[0408] The embodiment of the present application further provides a data transmission device, which is applied to a second core network device, including:

[0409] a seventh sending unit, configured to send an authentication vector request to a third core network device according to the SUPI of the target terminal, where the authentication vector request carries the SUPI of the target terminal and authentication vector type indication information, where the authentication vector type indication information is used to indicate that the target terminal is authenticated in a store-and-forward scenario; the target terminal is the first terminal or the second terminal;

[0410] a ninth receiving unit, configured to receive an authentication vector response fed back by the third core network device, wherein the authentication vector response carries a terminal authentication vector of the target terminal, and the terminal authentication vector is an authentication vector used to authenticate the target terminal in the store-and-forward scenario;

[0411] An eighth sending unit is configured to send the terminal authentication vector to the first satellite device.

[0412] Optionally, also include:

[0413] a ninth sending unit, configured to send a target satellite request to the satellite management function device before sending the terminal authentication vector to the first satellite device; the target satellite request carries the SUPI of the target terminal;

[0414] A tenth receiving unit is used to receive a target satellite response fed back by the satellite management function device; the target satellite response carries target satellite information;

[0415] The sending the terminal authentication vector to the first satellite device includes:

[0416] The terminal authentication vector is sent to a first satellite device corresponding to the target satellite information.

[0417] Optionally, the authentication vector request further carries: the target satellite information; the target satellite information is used to assist in generating the terminal authentication vector.

[0418] The embodiment of the present application further provides a data transmission device, which is applied to a first satellite device, including:

[0419] An eleventh receiving unit, configured to receive a terminal authentication vector of a target terminal sent by a second core network device; the target terminal is the first terminal or the second terminal;

[0420] A fourth interaction unit is configured to perform authentication interaction with the target terminal according to the terminal authentication vector.

[0421] Optionally, also include:

[0422] A second acquiring unit, configured to acquire the SUPI of the target terminal;

[0423] The fourth storage unit is configured to store the terminal authentication vector and the SUPI of the target terminal in correspondence with each other.

[0424] Optionally, the acquiring the SUPI of the target terminal includes:

[0425] receiving a SUPI of the first terminal sent by the second core network device;

[0426] Alternatively, receiving the SUPI of the second terminal sent by the second terminal.

[0427] Optionally, the acquiring the SUPI of the target terminal includes:

[0428] directly obtaining the SUPI of the target terminal in plain text;

[0429] Alternatively, the SUPI of the target terminal in ciphertext form is obtained; and the SUPI of the target terminal in ciphertext form is decrypted to obtain the SUPI of the target terminal in plaintext form.

[0430] An embodiment of the present application also provides a non-transitory readable storage medium, which stores a computer program, and the computer program is used to enable the processor to execute the method of the first core network device side, the second core network device side, the first satellite device side, the second satellite device side, the third core network device side, the satellite application function device side, or the terminal side.

[0431] The beneficial effects of the above technical solution of the present application are as follows:

[0432] In the above scheme, the data transmission method receives a first data download request sent by a satellite application function device; the first data download request carries a first user identifier of a first terminal and download data; sends a second data download request to a second core network device according to the first data download request; the second data download request carries the download data and a user permanent identifier SUPI of the first terminal obtained according to the first user identifier; or receives a first data upload request sent by the second core network device; the first data upload request carries the SUPI of the second terminal and upload data; sends a second data upload request to the satellite application function device according to the first data upload request; the second data upload request carries the second user identifier of the second terminal and upload data; wherein the first terminal is the same as or different from the second terminal; and can support the satellite device to accurately perform transmission processing of relevant data according to the SUPI, thereby solving the problem that the prior art cannot support accurate data transmission in a satellite storage and forwarding scenario. BRIEF DESCRIPTION OF THE DRAWINGS

[0433] Figure 1 A schematic diagram of the wireless communication system architecture of an embodiment of the present application;

[0434] Figure 2 The data transmission method of the present invention is shown in the following figure. Figure 1 ;

[0435] Figure 3The data transmission method of the present invention is shown in the following figure. Figure 2 ;

[0436] Figure 4 The data transmission method of the present invention is shown in the following figure. Figure 3 ;

[0437] Figure 5 The data transmission method of the present invention is shown in the following figure. Figure 4 ;

[0438] Figure 6 The data transmission method of the present invention is shown in the following figure. Figure 5 ;

[0439] Figure 7 The data transmission method of the present invention is shown in the following figure. Figure 6 ;

[0440] Figure 8 The data transmission method of the present invention is shown in the following figure. Figure 7 ;

[0441] Fig. 9 The data transmission method of the present invention is shown in the following figure. Figure 8 ;

[0442] Fig.10 The data transmission method of the present invention is shown in the following figure. Figure 9 ;

[0443] Fig.11 A schematic diagram of the architecture of a satellite storage and forwarding system according to an embodiment of the present application;

[0444] Fig.12 A schematic diagram of a specific implementation flow of the data transmission method according to an embodiment of the present application;

[0445] Fig.13 The data transmission device structure of the embodiment of the present application is shown in FIG. Figure 1 ;

[0446] Fig.14 The data transmission device structure of the embodiment of the present application is shown in FIG. Figure 2 ;

[0447] Fig.15 The data transmission device structure of the embodiment of the present application is shown in FIG. Figure 3 ;

[0448] Fig.16 The data transmission device structure of the embodiment of the present application is shown in FIG. Figure 4 ;

[0449] Fig.17 The data transmission device structure of the embodiment of the present application is shown in FIG. Figure 5 ;

[0450] Fig.18 The data transmission device structure of the embodiment of the present application is shown in FIG. Figure 6 ;

[0451] Fig.19 The data transmission device structure of the embodiment of the present application is shown in FIG. Figure 7 ;

[0452] Fig. 20 The data transmission device structure of the embodiment of the present application is shown in FIG. Figure 8 ;

[0453] Fig.21 The data transmission device structure of the embodiment of the present application is shown in FIG. Figure 9 ;

[0454] Fig. 22 The structure of the data transmission device of the embodiment of the present application is shown as follows: Figure 1 ;

[0455] Fig.23 The structure of the data transmission device of the embodiment of the present application is shown as follows: Figure 2 ;

[0456] Fig.24 The structure of the data transmission device of the embodiment of the present application is shown as follows: Figure 3 ;

[0457] Fig.25 The structure of the data transmission device of the embodiment of the present application is shown as follows: Figure 4 ;

[0458] Fig.26 The structure of the data transmission device of the embodiment of the present application is shown as follows: Figure 5 ;

[0459] Fig. 27 The structure of the data transmission device of the embodiment of the present application is shown as follows: Figure 6 ;

[0460] Fig.28 The structure of the data transmission device of the embodiment of the present application is shown as follows: Figure 7 ;

[0461] Fig.29 The structure of the data transmission device of the embodiment of the present application is shown as follows: Figure 8 ;

[0462] Fig.30 The structure of the data transmission device of the embodiment of the present application is shown as follows: Figure 9 . DETAILED DESCRIPTION

[0463] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0464] In the embodiments of the present application, the term "and / or" describes the association relationship of the associated objects, indicating that three relationships may exist. For example, A and / or B may represent: A exists alone, A and B exist at the same time, and B exists alone. The character " / " generally indicates that the associated objects before and after are in an "or" relationship.

[0465] In the embodiments of the present application, the term "plurality" refers to two or more than two, and other quantifiers are similar.

[0466] It is explained here that the technical solution provided in the embodiment of the present application can be applicable to a variety of systems, especially 5G systems. For example, the applicable system can be a global system of mobile communication (GSM) system, a code division multiple access (CDMA) system, a wideband code division multiple access (WCDMA) general packet radio service (GPRS) system, a long term evolution (LTE) system, a LTE frequency division duplex (FDD) system, a LTE time division duplex (TDD) system, an advanced long term evolution (LTE-A) system, a universal mobile telecommunication system (UMTS), a world-wide interoperability for microwave access (WiMAX) system, a 5G new air interface (NR) system, etc. These various systems include terminal equipment and network equipment. The system may also include a core network part, such as an evolved packet system (EPS), a 5G system (5GS), etc.

[0467] Figure 1A block diagram of a wireless communication system applicable to the embodiments of the present application is shown. The wireless communication system includes a terminal device (also referred to as a terminal) and a network device.

[0468] The terminal device involved in the embodiment of the present application may be a device that provides voice and / or data connectivity to a user, a handheld device with a wireless connection function, or other processing devices connected to a wireless modem. In different systems, the name of the terminal device may also be different. For example, in a 5G system, the terminal device may be called a user equipment (UE). The wireless terminal device can communicate with one or more core networks (CN) via a radio access network (RAN). The wireless terminal device can be a mobile terminal device, such as a mobile phone (or a "cellular" phone) and a computer with a mobile terminal device. For example, it can be a portable, pocket-sized, handheld, computer-built-in or vehicle-mounted mobile device that exchanges language and / or data with a wireless access network. For example, personal communication service (PCS) phones, cordless phones, session initiation protocol (SIP) phones, wireless local loop (WLL) stations, personal digital assistants (PDA) and other devices. The wireless terminal device may also be referred to as a system, a subscriber unit, a subscriber station, a mobile station, a mobile station, a remote station, an access point, a remote terminal device, an access terminal device, a user terminal device, a user agent, and a user device, but is not limited in the embodiments of the present application.

[0469] The network device involved in the embodiments of the present application may be a base station, which may include multiple cells providing services for the terminal. Depending on the specific application scenario, the base station may also be called an access point, or may be a device in the access network that communicates with the wireless terminal device through one or more sectors on the air interface, or other names. The network device may be used to interchange received air frames with Internet Protocol (IP) packets, and serve as a router between the wireless terminal device and the rest of the access network, wherein the rest of the access network may include an Internet Protocol (IP) communication network. The network device may also coordinate the attribute management of the air interface. For example, the network device involved in the embodiments of the present application may be a network device (Base Transceiver Station, BTS) in the Global System for Mobile communications (Global System for Mobile communications, GSM) or Code Division Multiple Access (Code Division Multiple Access, CDMA), or a network device (NodeB) in Wide-band Code Division Multiple Access (WCDMA), or an evolutionary network device (evolutional Node B, eNB or e-NodeB) in the long-term evolution (long term evolution, LTE) system, a 5G base station (the next Generation Node B, gNB) in the 5G network architecture (next generation system), or a home evolved Node B (Home evolved Node B, HeNB), a relay node, a home base station (femto), a pico base station (pico), etc., which is not limited in the embodiments of the present application. In some network structures, the network device may include a centralized unit (CU) node and a distributed unit (DU) node, and the centralized unit and the distributed unit may also be arranged geographically separately.

[0470] Network devices and terminal devices can each use one or more antennas for multiple-input multiple-output (MIMO) transmission. MIMO transmission can be single-user MIMO (SU-MIMO) or multi-user MIMO (MU-MIMO). Depending on the form and number of antenna combinations, MIMO transmission can be 2D-MIMO, 3D-MIMO, FD-MIMO or massive-MIMO, or it can be diversity transmission, precoded transmission or beamforming transmission, etc.

[0471] The following first introduces the contents involved in the solution provided in the embodiment of the present application.

[0472] Satellite communication technology has been studied and the NTN (Non-Terrestrial Network) protocol has been specified. However, the role played by satellites in the system is transparent forwarding between UE and base station (the next Generation NodeB, gNB), or transparent forwarding between base station and core network, that is, helping to achieve the extension of air interface distance. In these systems, the base station is located on land and deployed between the gateway station and the core network. Therefore, the current NTN system has no impact on the existing security system, and there is no need to make any security-related technical adjustments or modifications to the NTN system.

[0473] As it develops, NTN allows base stations to be deployed on satellites and supports a communication mode called Store and Forward (S&F).

[0474] Among them, S&F is applied to satellite communication services that allow a certain degree of communication delay, such as some Internet of Things (IoT) applications. S&F allows the satellite to provide a certain level of data storage and delayed forwarding services when the connection between the satellite and the UE or the core network is intermittent or temporarily unavailable. For example, when the satellite provides communication services to the UE under coverage, it does not need to be connected to the core network through a feeder link connected to the ground segment at the same time. This is very important for IoT applications that allow communication delays.

[0475] Specifically, satellite store-and-forward means that a complete data transmission between the user equipment (UE), satellite and core network is divided into two phases in terms of time:

[0476] Phase 1: Service link between UE and satellite. In this phase, the UE exchanges data with the satellite, and then the satellite caches the received data and transmits the currently cached core network data to the UE.

[0477] Phase 2: Feeder link between the core network and the satellite. In this phase, the core network exchanges data with the satellite, and then the satellite caches the received data and transmits the currently cached UE data to the core network.

[0478] These two phases are executed at different times. The execution order of phase 1 and phase 2 is different depending on whether the data interaction between the UE and the core network is upload or download. This determines that the current authentication and security mechanisms cannot be directly applied to this scenario. Because in the current authentication and security establishment process, the core network and the UE need to interact multiple times in real time to complete the relevant security process. Therefore, the satellite storage and forwarding scenario requires a new security mechanism to achieve UE authentication and secure data transmission.

[0479] As mentioned above, the special application scenario of S&F breaks the premise that UE maintains real-time communication with the core network. To support this new feature, it means that in the new NTN system:

[0480] (1) Satellites need to have certain core network capabilities in order to complete the authentication and secure connection establishment functions that were originally performed by the terrestrial core network.

[0481] (2) Since the UE authentication vector is generated in the Unified Data Management (UDM), the sequence number (SQN) value directly related to the authentication vector may be out of sync. When the SQN is out of sync, synchronization is required. This SQN synchronization operation requires direct interaction between the UE and the UDM to complete, so the UE authentication vector used in the S&F system may need to be modified.

[0482] Based on the above, the embodiments of the present application provide a data transmission method, device and equipment to solve the problem that the prior art cannot support accurate data transmission in a satellite storage and forwarding scenario. Among them, the method, device and equipment are based on the same application concept. Since the principles of solving the problems by the method, device and equipment are similar, the implementation of the method, device and equipment can refer to each other, and the repeated parts will not be repeated.

[0483] The data transmission method provided in the embodiment of the present application is applied to a first core network device (such as a core network side storage and forwarding control function SFCF device), such as Figure 2 As shown, including:

[0484] Step 21: receiving a first data download request sent by a satellite application function device; the first data download request carries a first user identifier of a first terminal and download data; sending a second data download request to a second core network device (such as an access and mobility management function AMF device on a core network side) according to the first data download request; the second data download request carries the download data and a user permanent identifier SUPI of the first terminal obtained according to the first user identifier; or, receiving a first data upload request sent by the second core network device; the first data upload request carries a SUPI of a second terminal and upload data; sending a second data upload request to the satellite application function device according to the first data upload request; the second data upload request carries a second user identifier of the second terminal (obtained according to the SUPI of the second terminal) and upload data (i.e., carries the upload data and the second user identifier of the second terminal); wherein the first terminal is the same as or different from the second terminal.

[0485] The data transmission method provided in the embodiment of the present application is by receiving a first data download request sent by a satellite application function device; the first data download request carries a first user identifier of a first terminal and download data; according to the first data download request, sending a second data download request to a second core network device; the second data download request carries the download data and a user permanent identifier SUPI of the first terminal obtained according to the first user identifier; or, receiving a first data upload request sent by the second core network device; the first data upload request carries the SUPI of the second terminal and upload data; according to the first data upload request, sending a second data upload request to the satellite application function device; the second data upload request carries the second user identifier and upload data of the second terminal; wherein the first terminal is the same as or different from the second terminal; and can support the satellite device to accurately perform transmission processing of relevant data according to the SUPI, thereby solving the problem that the prior art cannot support accurate data transmission in a satellite storage and forwarding scenario.

[0486] Wherein, (1) the first user identifier includes: a SUPI or an application identifier of the first terminal; and / or, (2) the first data download request further carries: at least one of: a first application identifier, satellite application service information, first operation type information, first generation time information of the download data, and first validity time information of the download data; the first application identifier is used to indicate the satellite application service to which the download data belongs; the satellite application service information includes: auxiliary information for determining a target satellite providing service for the second data download request; the first operation type information indicates a download operation; and / or, (3) the second data download request further carries: at least one of the first application identifier, the satellite application service information, the first operation type information, the first generation time information and the first validity time information; and / or, (4) the first data upload request also carries: at least one of a second application identifier and a second operation type information; the second application identifier is used to indicate the satellite application service to which the uploaded data belongs; the second operation type information indicates an upload operation; and / or, (5) the second data upload request also carries: at least one of the second application identifier and the second operation type information; and / or, (6) the second user identifier includes: a SUPI or an application identifier of the second terminal.

[0487] This allows for clear information about the data being transmitted.

[0488] The embodiment of the present application also provides a data transmission method, which is applied to a second core network device (such as an AMF device on the core network side), such as Figure 3 As shown, including:

[0489] Step 31: Receive a second data download request sent by the first core network device; the second data download request carries the download data and the SUPI of the first terminal; according to the second data download request, send a third data download request to the first satellite device; the third data download request carries the download data and the SUPI of the first terminal; or, receive a third data upload request sent by the first satellite device; the third data upload request carries the SUPI of the second terminal and the upload data; according to the third data upload request, send a first data upload request to the first core network device; the first data upload request carries the SUPI of the second terminal and the upload data; wherein the first terminal is the same as or different from the second terminal.

[0490] The data transmission method provided in the embodiment of the present application is by receiving a second data download request sent by a first core network device; the second data download request carries the download data and the SUPI of the first terminal; according to the second data download request, a third data download request is sent to the first satellite device; the third data download request carries the download data and the SUPI of the first terminal; or, receiving a third data upload request sent by the first satellite device; the third data upload request carries the SUPI of the second terminal and the upload data; according to the third data upload request, a first data upload request is sent to the first core network device; the first data upload request carries the SUPI of the second terminal and the upload data; wherein the first terminal is the same as or different from the second terminal; and it can support the satellite device to accurately perform transmission processing of relevant data according to the SUPI, thereby solving the problem that the prior art cannot support accurate data transmission in the satellite storage and forwarding scenario.

[0491] Further, before sending a third data download request to the first satellite device according to the second data download request, or before receiving a third data upload request sent by the first satellite device, it also includes: acquiring authentication related information of the target terminal according to the SUPI of the target terminal; the target terminal is the first terminal or the second terminal; the authentication related information includes: a terminal context or a terminal authentication vector; the terminal context includes a terminal security context; and sending the authentication related information to the first satellite device.

[0492] In this way, the satellite and the terminal can be supported to perform authentication interaction. In the data download process, the third data download request may also carry the authentication related information; that is, the authentication related information is carried in the third data download request, and of course, it may also be sent separately, which is not limited here.

[0493] In an embodiment of the present application, before sending the authentication related information to the first satellite device, it also includes: sending a target satellite request to a satellite management function device; the target satellite request carries the SUPI of the target terminal; receiving a target satellite response fed back by the satellite management function device; the target satellite response carries target satellite information; sending a third data download request to the first satellite device according to the second data download request includes: sending a third data download request to the first satellite device corresponding to the target satellite information according to the second data download request; sending the authentication related information to the first satellite device includes: sending the authentication related information to the first satellite device corresponding to the target satellite information.

[0494] In this way, the target satellite providing the service can be clearly identified. The sending of the target satellite request to the satellite management function device may include: sending the target satellite request to the satellite management function device according to the second data download request, but is not limited thereto.

[0495] Among them, obtaining authentication-related information of the target terminal according to the SUPI of the target terminal includes any one of the following items: (1) obtaining the stored terminal context from a local location (for example, obtaining the stored terminal context of the target terminal from a local location according to the SUPI of the target terminal); (2) sending an authentication vector request to a third core network device (for example, a unified data management function UDM device on the core network side), wherein the authentication vector request carries the SUPI of the target terminal; and receiving an authentication vector response fed back by the third core network device according to the SUPI of the target terminal, wherein the authentication vector response carries the terminal authentication vector.

[0496] In this way, the authentication-related information of the target terminal can be accurately obtained.

[0497] Furthermore, the authentication vector request also carries: authentication vector type indication information, the authentication vector type indication information is used to indicate authentication of the target terminal in a store-and-forward scenario; the terminal authentication vector is an authentication vector used to authenticate the target terminal in the store-and-forward scenario.

[0498] This supports accurate generation of the terminal authentication vector.

[0499] In an embodiment of the present application, (1) the second data download request also carries: at least one of: a first application identifier, satellite application service information, first operation type information, first generation time information of the downloaded data, and first valid time information of the downloaded data; the first application identifier is used to indicate the satellite application service to which the downloaded data belongs; the satellite application service information includes: auxiliary information for determining a target satellite providing service for the second data download request; the first operation type information indicates a download operation; and / or, (2) the third data download request also carries: at least one of: the first application identifier, the first operation type information, the first generation time information of the downloaded data, and the first valid time information of the downloaded data. one item; and / or, (3) the third data upload request also carries: at least one of: a second application identifier, a second operation type information, a second generation time information of the uploaded data and a second valid time information of the uploaded data; the second application identifier is used to indicate the satellite application service to which the uploaded data belongs; the second operation type information indicates an upload operation; and / or, (4) the first data upload request also carries: at least one of the second application identifier and the second operation type information; and / or, (5) the target satellite request also carries: the satellite application service information; and / or, (6) the authentication vector request also carries: the target satellite information, the target satellite information is used to assist in generating the terminal authentication vector.

[0500] This allows for clear information about the data being transmitted.

[0501] Furthermore, the second data upload request also carries: the terminal context of the second terminal; the terminal context includes a terminal security context; and the data transmission method further includes: storing the terminal context.

[0502] This can support the storage of terminal context on the core network side for use during the next data transmission.

[0503] The embodiment of the present application also provides a data transmission method, which is applied to a first satellite device (such as a satellite device deployed with AMF / SEAF / AUSF functions (i.e., access and mobility management functions, security anchor functions, and / or authentication service functions)), such as Figure 4 As shown, including:

[0504] Step 41: Receive a third data download request sent by a second core network device; the third data download request carries download data and the SUPI of the first terminal; perform a first data interaction with the first terminal according to the SUPI of the first terminal; the first data interaction includes: sending the download data to the first terminal; or, performing a second data interaction with the second terminal; the second data interaction includes: receiving upload data sent by the second terminal and the SUPI of the second terminal; according to the second data interaction, send a third data upload request to the second core network device; the third data upload request carries the SUPI of the second terminal and the upload data; wherein, the first terminal is the same as or different from the second terminal.

[0505] Regarding the SUPI of the second terminal, it may be: before receiving the upload data sent by the second terminal, receiving the SUPI reported by the second terminal, but the present invention is not limited thereto.

[0506] The data transmission method provided in the embodiment of the present application receives a third data download request sent by a second core network device; the third data download request carries the download data and the SUPI of the first terminal; according to the SUPI of the first terminal, performs a first data interaction with the first terminal; the first data interaction includes: sending the download data to the first terminal; or performing a second data interaction with the second terminal; the second data interaction includes: receiving the upload data sent by the second terminal and the SUPI of the second terminal; according to the second data interaction, sending a third data upload request to the second core network device; the third data upload request carries the SUPI and upload data of the second terminal; wherein the first terminal is the same as or different from the second terminal; and can support the satellite device to accurately perform transmission processing of relevant data according to the SUPI, thereby solving the problem that the prior art cannot support accurate data transmission in the satellite storage and forwarding scenario.

[0507] Further, before performing a first data interaction with the first terminal according to the SUPI of the first terminal, or before performing a second data interaction with the second terminal, it also includes: receiving authentication-related information of the target terminal sent by the second core network device; the target terminal is the first terminal or the second terminal; the authentication-related information includes: a terminal context or a terminal authentication vector; the terminal context includes a terminal security context; performing authentication interaction with the target terminal according to the authentication-related information; performing a first data interaction with the first terminal according to the SUPI of the first terminal includes: if the first terminal is authenticated, performing a first data interaction with the first terminal according to the SUPI of the first terminal; performing a second data interaction with the second terminal includes: if the second terminal is authenticated, performing a second data interaction with the second terminal.

[0508] In this way, the satellite and the terminal can be supported to perform authentication interaction. In the data download process, the third data download request may also carry the authentication related information; that is, the authentication related information is carried in the third data download request, and of course, it may also be sent separately, which is not limited here.

[0509] The third data download request further carries: first information, the first information including: at least one of a first application identifier, first operation type information, first generation time information of the downloaded data, and first valid time information of the downloaded data; the first application identifier is used to indicate a satellite application service to which the downloaded data belongs; the first operation type information indicates a download operation; the data transmission method further includes: storing the second information in correspondence with the SUPI of the first terminal; the second information includes: the downloaded data, or the downloaded data and the first information; and / or storing the authentication related information in correspondence with the SUPI of the target terminal.

[0510] This allows for off-site storage of information.

[0511] In an embodiment of the present application, storing the second information in correspondence with the SUPI of the first terminal includes: sending a first storage message to a second satellite device (such as a satellite device deployed with an SFCF function); the first storage message carries: the second information and the SUPI of the first terminal; before performing first data interaction with the first terminal according to the SUPI of the first terminal, further comprising: sending a first acquisition request to the second satellite device according to the SUPI of the first terminal; the first acquisition request carries: the SUPI of the first terminal, or, the SUPI of the first terminal and the first operation type information; receiving a first acquisition response sent by the second satellite device; the first acquisition response carries: the downloaded data, or at least one of the first application identifier, the first operation type information, the first generation time information of the downloaded data, and the first valid time information of the downloaded data, and the downloaded data.

[0512] This can support normal data transmission in scenarios where information is stored off-site.

[0513] Furthermore, the first data interaction also includes: sending the first application identifier to the first terminal.

[0514] This can support the first terminal to accurately obtain the first application identifier.

[0515] In the embodiment of the present application, before sending a third data upload request to the second core network device according to the second data interaction, it also includes: storing the third information in correspondence with the SUPI of the second terminal; wherein the third information includes: the uploaded data, or at least one of the second application identifier and the second operation type information, and the uploaded data; the second application identifier is used to indicate the satellite application service to which the uploaded data belongs; and the second operation type information indicates an upload operation.

[0516] This can facilitate the subsequent scheduling of information according to SUPI.

[0517] The storing the third information in correspondence with the SUPI of the second terminal includes: sending a second storage message to the second satellite device; the second storage message carries: the third information and the SUPI of the second terminal; before sending the third data upload request to the second core network device according to the second data interaction, it also includes: sending a second acquisition request to the second satellite device according to the SUPI of the second terminal; the second acquisition request carries: the SUPI of the second terminal, or, the SUPI of the second terminal and the second operation type information; receiving a second acquisition response sent by the second satellite device; the second acquisition response carries: the upload data, or at least one of the second application identifier, the second operation type information, the second generation time information of the upload data and the second valid time information of the upload data, and the upload data.

[0518] This can realize the off-site storage of information and also support normal data transmission in the off-site storage scenario.

[0519] Further, before storing the third information corresponding to the SUPI of the second terminal, it also includes: determining at least one of the second generation time information of the uploaded data and the second valid time information of the uploaded data; wherein the third information also includes: at least one of the second generation time information and the second valid time information.

[0520] In this way, the first satellite device can clearly identify the generation time and validity time of the data.

[0521] Among them, (1) the third data download request also carries: at least one of: a first application identifier, a first operation type information, a first generation time information of the downloaded data, and a first valid time information of the downloaded data; the first application identifier is used to indicate the satellite application service to which the downloaded data belongs; the first operation type information indicates a download operation; and / or, (2) the third data upload request also carries: a terminal context of the second terminal, the second application identifier, the second operation type information, at least one of a second generation time information of the uploaded data, and a second valid time information of the uploaded data; the terminal context includes a terminal security context.

[0522] This allows for clear information about the data being transmitted.

[0523] Furthermore, the second data interaction also includes: receiving the second application identifier sent by the second terminal.

[0524] In this way, the second application identifier can be accurately obtained.

[0525] The embodiment of the present application also provides a data transmission method, which is applied to a second satellite device (such as a satellite device with a SFCF function), such as Figure 5 As shown, including:

[0526] Step 51: receiving a target storage message sent by a first satellite device; the storage message carries: target information, and SUPI of a target terminal; wherein the target storage message is a first storage message, the target information is second information, and the target terminal is a first terminal; or, the target storage message is a second storage message, the target information is third information, and the target terminal is a second terminal; the first terminal is the same as or different from the second terminal;

[0527] Step 52: storing the target information and the SUPI of the target terminal in correspondence; wherein the second information includes: download data, or the download data and the first information; the first information includes: at least one of a first application identifier, first operation type information, first generation time information of the download data, and first validity time information of the download data; the first application identifier is used to indicate a satellite application service to which the download data belongs; the first operation type information indicates a download operation; the third information includes: upload data, or at least one of a second application identifier and a second operation type information, and the upload data; the second application identifier is used to indicate a satellite application service to which the upload data belongs; and the second operation type information indicates an upload operation.

[0528] The data transmission method provided in the embodiment of the present application receives a target storage message sent by a first satellite device; the storage message carries: target information, and a SUPI of a target terminal; wherein the target storage message is a first storage message, the target information is a second information, and the target terminal is a first terminal; or, the target storage message is a second storage message, the target information is a third information, and the target terminal is a second terminal; the first terminal is the same as or different from the second terminal; the target information and the SUPI of the target terminal are stored in correspondence; wherein the second information includes: download data, or the download data and the first information; the first information includes: a first application identifier, a first operation identifier, a The invention relates to a method for transmitting and receiving satellite data in a satellite storage and forwarding scenario, wherein the first application identifier is used to indicate a satellite application service to which the downloaded data belongs; the first operation type information indicates a download operation; the third information includes: upload data, or at least one of a second application identifier and a second operation type information, and the upload data; the second application identifier is used to indicate a satellite application service to which the uploaded data belongs; the second operation type information indicates an upload operation; and the satellite device can be supported to accurately perform transmission processing of relevant data according to the SUPI, thereby solving the problem that the prior art cannot support accurate data transmission in a satellite storage and forwarding scenario.

[0529] Further, the data transmission method also includes: receiving a first acquisition request sent by the first satellite device; the first acquisition request carries: the SUPI of the first terminal, or the SUPI of the first terminal and the first operation type information; sending a first acquisition response to the first satellite device; the first acquisition response carries: the downloaded data, or at least one of the first application identifier, the first operation type information, the first generation time information of the downloaded data, and the first valid time information of the downloaded data, and the downloaded data.

[0530] This can support the off-site storage of information.

[0531] In the embodiment of the present application, the third information further includes: at least one of second generation time information of the uploaded data and second valid time information of the uploaded data.

[0532] This makes it possible to clearly identify the generation time and validity period of the uploaded data so that related operations can be performed within the time limit.

[0533] Further, the data transmission method also includes: receiving a second acquisition request sent by the first satellite device; the second acquisition request carries: the SUPI of the second terminal, or the SUPI of the second terminal and the second operation type information; sending a second acquisition response to the first satellite device; the second acquisition response carries: the uploaded data, or at least one of the second application identifier, the second operation type information, the second generation time information of the uploaded data, and the second valid time information of the uploaded data, and the uploaded data.

[0534] This can also support the off-site storage of information.

[0535] The embodiment of the present application also provides a data transmission method, which is applied to a third core network device (such as UDM), such as Figure 6 As shown, including:

[0536] Step 61: receiving an authentication vector request sent by a second core network device, where the authentication vector request carries a SUPI of a target terminal, where the target terminal is the first terminal or the second terminal;

[0537] Step 62: Generate a terminal authentication vector according to the SUPI of the target terminal;

[0538] Step 63: Feedback an authentication vector response to the second core network device, where the authentication vector response carries the terminal authentication vector.

[0539] The data transmission method provided in the embodiment of the present application receives an authentication vector request sent by a second core network device, wherein the authentication vector request carries the SUPI of a target terminal, and the target terminal is a first terminal or a second terminal; generates a terminal authentication vector according to the SUPI of the target terminal; feeds back an authentication vector response to the second core network device, wherein the authentication vector response carries the terminal authentication vector; and can support a satellite device to accurately perform transmission processing of relevant data according to the SUPI, thereby solving the problem that the prior art cannot support accurate data transmission in a satellite storage and forwarding scenario.

[0540] Furthermore, the authentication vector request also carries: authentication vector type indication information, the authentication vector type indication information is used to indicate authentication of the target terminal in a store-and-forward scenario; the terminal authentication vector is an authentication vector used to authenticate the target terminal in the store-and-forward scenario.

[0541] This supports accurate generation of terminal authentication vectors.

[0542] In an embodiment of the present application, the authentication vector request also carries: target satellite information corresponding to the first satellite device, and the target satellite information is used to assist in generating the terminal authentication vector; wherein, the target satellite information is obtained by the second core network device according to the target satellite response fed back by the satellite management function device.

[0543] This can further accurately generate the terminal authentication vector.

[0544] The present application also provides a data transmission method, which is applied to satellite application function equipment (such as AF equipment), such as Figure 7 As shown, including:

[0545] Step 71: Send a first data download request to a first core network device; the first data download request carries a first user identifier and download data of a first terminal; or, receive a second data upload request sent by the first core network device; the second data upload request carries a second user identifier and upload data of a second terminal; wherein the first terminal is the same as or different from the second terminal.

[0546] The data transmission method provided in the embodiment of the present application sends a first data download request to a first core network device; the first data download request carries a first user identifier and download data of a first terminal; or, receives a second data upload request sent by the first core network device; the second data upload request carries a second user identifier and upload data of a second terminal; wherein the first terminal is the same as or different from the second terminal; and can support satellite equipment to accurately perform transmission processing of relevant data according to SUPI, thereby solving the problem that the prior art cannot support accurate data transmission in a satellite storage and forwarding scenario.

[0547] Wherein, (1) the first user identifier includes: a SUPI or an application identifier of the first terminal; and / or, (2) the first data download request further carries: at least one of: a first application identifier, satellite application service information, first operation type information, first generation time information of the download data, and first validity time information of the download data; the first application identifier is used to indicate the satellite application service to which the download data belongs; the satellite application service information includes: auxiliary information used to determine a target satellite providing service for the second data download request; the second data download request is a data download request sent by the first core network device to the second core network device according to the first data download request; the first operation type information indicates a download operation; and / or, (3) the second data upload request further carries: at least one of: a second application identifier and second operation type information; the second application identifier is used to indicate the satellite application service to which the upload data belongs; the second operation type information indicates an upload operation; and / or, (4) the second user identifier includes: a SUPI or an application identifier of the second terminal.

[0548] This allows for clear information about the data being transmitted.

[0549] The present application also provides a data transmission method, which is applied to a terminal, such as Figure 8 As shown, including:

[0550] Step 81: Perform data interaction with a first satellite device; the data interaction includes: receiving download data; and / or sending upload data and the SUPI of the terminal to the first satellite device.

[0551] The data transmission method provided in the embodiment of the present application performs data interaction with the first satellite device; the data interaction includes: receiving download data; and / or sending upload data and the SUPI of the terminal to the first satellite device; it can support the satellite device to accurately perform transmission processing of relevant data according to the SUPI, and solve the problem that the prior art cannot support accurate data transmission in a satellite storage and forwarding scenario.

[0552] Furthermore, before performing data interaction with the first satellite device, it also includes: performing authentication interaction with the first satellite device; the data interaction with the first satellite device includes: performing data interaction with the first satellite device when the terminal authentication is passed.

[0553] This ensures the security of data transmission.

[0554] Wherein, in the case that the data interaction includes receiving downloaded data, the data interaction further includes: receiving a first application identifier, where the first application identifier is used to indicate a satellite application service to which the downloaded data belongs.

[0555] In this way, the first application identifier can be accurately obtained.

[0556] In the embodiment of the present application, when the data interaction includes sending the upload data and the SUPI of the terminal to the first satellite device, the data interaction also includes: sending a second application identifier to the first satellite device, where the second application identifier is used to indicate the satellite application service to which the upload data belongs.

[0557] In this way, the first satellite device can accurately obtain the second application identifier.

[0558] It is noted here that the SUPI involved in the above-mentioned methods may be plain text or cipher text. In the case of cipher text, it may be decrypted into plain text by a corresponding key and then subsequent operations may be performed, which is not limited here.

[0559] The embodiment of the present application also provides a data transmission method, which is applied to a second core network device (such as an AMF device), such as Fig. 9 As shown, including:

[0560] Step 91: sending an authentication vector request to a third core network device (such as a UDM device) according to the SUPI of the target terminal, where the authentication vector request carries the SUPI of the target terminal and authentication vector type indication information, where the authentication vector type indication information is used to indicate that the target terminal is authenticated in a store-and-forward scenario; the target terminal is the first terminal or the second terminal;

[0561] Step 92: receiving an authentication vector response fed back by the third core network device, where the authentication vector response carries a terminal authentication vector of the target terminal, and the terminal authentication vector is an authentication vector used to authenticate the target terminal in the store-and-forward scenario;

[0562] Step 93: Send the terminal authentication vector to the first satellite device.

[0563] The data transmission method provided in the embodiment of the present application sends an authentication vector request to a third core network device according to the SUPI of the target terminal, wherein the authentication vector request carries the SUPI of the target terminal and authentication vector type indication information, and the authentication vector type indication information is used to indicate that the target terminal is authenticated in a storage and forwarding scenario; the target terminal is a first terminal or a second terminal; an authentication vector response fed back by the third core network device is received, the authentication vector response carries a terminal authentication vector of the target terminal, and the terminal authentication vector is an authentication vector used to authenticate the target terminal in the storage and forwarding scenario; the terminal authentication vector is sent to a first satellite device; and the satellite device can be supported to perform authentication interaction with the UE, and then the transmission and processing of relevant data can be accurately performed according to the SUPI, thereby solving the problem that the prior art cannot support accurate data transmission in a satellite storage and forwarding scenario.

[0564] Furthermore, before sending the terminal authentication vector to the first satellite device, it also includes: sending a target satellite request to a satellite management function device; the target satellite request carries the SUPI of the target terminal; receiving a target satellite response fed back by the satellite management function device; the target satellite response carries target satellite information; sending the terminal authentication vector to the first satellite device includes: sending the terminal authentication vector to the first satellite device corresponding to the target satellite information.

[0565] This allows the target satellite providing the service to be identified and the terminal authentication vector to be accurately transmitted for terminal authentication.

[0566] In the embodiment of the present application, the authentication vector request further carries: the target satellite information; the target satellite information is used to assist in generating the terminal authentication vector.

[0567] This can support accurate generation of a terminal authentication vector, specifically, the terminal authentication vector can be generated according to the SUPI of the target terminal, the authentication vector type indication information, and the target satellite information. The target satellite information can be used to bind the terminal authentication vector to the target satellite (the first satellite device): the target satellite uses the vector to perform terminal authentication.

[0568] The embodiment of the present application also provides a data transmission method, which is applied to a first satellite device (such as a satellite device with AMF / SEAF / AUSF functions deployed), such as Fig.10 As shown, including:

[0569] Step 101: receiving a terminal authentication vector of a target terminal sent by a second core network device; the target terminal is a first terminal or a second terminal;

[0570] Step 102: Perform authentication interaction with the target terminal according to the terminal authentication vector.

[0571] The data transmission method provided in the embodiment of the present application receives a terminal authentication vector of a target terminal sent by a second core network device; the target terminal is a first terminal or a second terminal; authentication interaction is performed with the target terminal according to the terminal authentication vector; and the satellite device can be supported to perform authentication interaction with the UE, and then the transmission and processing of relevant data can be accurately performed according to the SUPI, thereby solving the problem that the prior art cannot support accurate data transmission in a satellite storage and forwarding scenario.

[0572] Furthermore, the data transmission method further includes: acquiring a SUPI of the target terminal; and storing the terminal authentication vector and the SUPI of the target terminal in correspondence with each other.

[0573] This makes it easier to call the terminal authentication vector based on SUPI later.

[0574] The acquiring the SUPI of the target terminal includes: receiving the SUPI of the first terminal sent by the second core network device; or receiving the SUPI of the second terminal sent by the second terminal.

[0575] In this way, the SUPI of the target terminal can be obtained in multiple ways.

[0576] In an embodiment of the present application, obtaining the SUPI of the target terminal includes: directly obtaining the SUPI of the target terminal in plain text; or obtaining the SUPI of the target terminal in ciphertext; decrypting the SUPI of the target terminal in ciphertext (for example, decrypting using a corresponding key) to obtain the SUPI of the target terminal in plain text.

[0577] This can support multiple ways to obtain the plaintext SUPI.

[0578] It is to be noted that the relevant contents of the above-mentioned methods can refer to each other, and the repeated contents will not be repeated.

[0579] The data transmission method provided in the embodiment of the present application is described below by taking the first terminal and the second terminal as the same as an example.

[0580] In view of the above technical problems, the embodiment of the present application provides a data transmission method, which can be specifically implemented as a method for implementing satellite storage and forwarding security in a satellite communication system, wherein the scheme can adopt Fig.11 The system architecture shown in FIG. 1 (satellite storage and forwarding system architecture based on 5G system) is implemented. Based on this architecture, this solution involves:

[0581] (1) A new network element is set up in the core network: the Store and Forward Control Function (SFCF). The external application function (AF) interacts with the SFCF through the interface provided by the core network (5G Core, 5GC) to implement data download and data upload operations for the UE.

[0582] (2) Data interaction between the core network and the UE is achieved through Non-Access Stratum (NAS) messages, and its data security is achieved by NAS security.

[0583] (3) Because UE authentication is implemented without a connection between the satellite and the core network, a lightweight access and mobility management function (AMF), security anchor function (SEAF) and / or authentication server function (AUSF) are deployed on the satellite, such as Fig.11 S-AMF / S-SEAF / S-AUSF in order to authenticate the UE and establish the corresponding security connection (NAS security and Radio Access Network (RAN) security).

[0584] (4) In the S&F scenario, the UE authentication vector is still generated by UDM, but the format of the authentication vector may be different from the current 4G or 5G authentication vector, so a new authentication vector request message needs to be defined.

[0585] (5) The satellite may also be optionally provided with a SFCF network element (e.g. Fig.11 S-SFCF in UE) is used to manage the stored UE upload and download data. Fig.11 The S-gNB in ​​the figure represents the base station deployed on the satellite.

[0586] Specifically, based on Fig.11 The architecture shown in this paper can be Fig.12 (Data operation process in S&F scenario) is shown as follows, including the following steps:

[0587] 1. The satellite application function AF (corresponding to the satellite application function device) outside the core network (5GC) wants to interact with the UE for data, such as sending control instructions, configuration parameters, data download and data upload, etc. It sends a data download request (corresponding to the first data download request) to the functional entity SFCF (corresponding to the first core network device) in the 5GC responsible for storage and forwarding control through the interface provided by the 5GC. The request includes:

[0588] User identity (corresponding to the above-mentioned first user identity): can be a user permanent identifier (SUbscription Permanent Identifier, SUPI) of the UE, or can be an identifier of the user in the application system;

[0589] Download data: download data that needs to be sent to UE;

[0590] (Optional) Application Identifier (corresponding to the first application identifier): may be a satellite application service identifier, used to describe which satellite application service the download data in the message belongs to;

[0591] (Optional) Message type (corresponding to the first operation type information): used to describe whether the message is a data download message or a data upload message, here: data download (corresponding to the first operation type information indicating a download operation);

[0592] (Optional) Message generation time: used to describe the generation time of the message (corresponding to the first generation time information of the above-mentioned downloaded data);

[0593] (Optional) Message validity period: used to describe the validity period of the message (corresponding to the first validity period information of the downloaded data mentioned above).

[0594] (Optional) Satellite application service information, used to describe various information related to this satellite service operation, and may include various auxiliary information required to determine the target satellite.

[0595] 2. SFCF sends a data download request (corresponding to the second data download request) to AMF (corresponding to the second core network device), and the request includes: SUPI, download data, application identifier (optional), message type: download (optional), message generation time (optional), message validity time (optional), satellite application service information (optional). If the user identifier provided by AF is an application user identifier (i.e., an identifier in the application system), SFCF needs to map the application user identifier to the UE's SUPI.

[0596] 3. (Optional) AMF sends a target satellite request to the satellite management function (corresponding to the satellite management function device mentioned above) to determine the satellites participating in this data operation. The request contains:

[0597] SUPI of the UE (corresponding to the SUPI of the target terminal above);

[0598] (Optional) Satellite application service information: The satellite application service information describes various information related to this satellite service operation, such as service type (S&F type or non-S&F type, etc.) and UE location information, etc., which are used to determine various auxiliary information required for the target satellite;

[0599] (Optional) Application ID.

[0600] 4. (Optional) The satellite management function determines the target satellite that can provide this service based on the information contained in the request and the locally stored information (such as ephemeris information), and returns it to the AMF through a target satellite response (corresponding to the AMF receiving the target satellite response fed back by the satellite management function device; the target satellite response carries the target satellite information). The target satellite information can be a single satellite or a satellite list.

[0601] 5. (Optional) AMF checks whether the UE's security context is stored locally. If yes, it obtains the UE's security context and skips steps 6 to 7; if no, it executes steps 6 to 7.

[0602] 6. (Optional) AMF sends an authentication vector request to UDM (corresponding to the third core network device mentioned above), where the request includes: UE's SUPI, optional authentication vector type indication information (indicating that it is used for S&F authentication scenarios) and optional target satellite information.

[0603] 7. (Optional) UDM generates an authentication vector for authenticating the UE in the S&F scenario (corresponding to the above-mentioned terminal authentication vector, which is the authentication vector used to authenticate the target terminal in the store-and-forward scenario), and provides it to the AMF through an authentication vector response.

[0604] 8. The AMF sends a data download request (corresponding to the third data download request) to the network element S-AMF / SEAF / AUSF (i.e. S-AMF / S-SEAF / S-AUSF) that performs the AMF / SEAF / AUSF (i.e. AMF, SEAF and / or AUSF) function in the target satellite (corresponding to the first satellite device), and the request includes:

[0605] SUPI of the UE (corresponding to the SUPI of the first terminal);

[0606] (Optional) UE authentication vector / UE security context (corresponding to the above authentication related information, the authentication related information includes: terminal context or terminal authentication vector; the terminal context includes terminal security context);

[0607] Download data;

[0608] (optional) application identifier;

[0609] (Optional) Message type: download;

[0610] (optional) message generation time;

[0611] (Optional) Message validity period.

[0612] Among them, S-AMF / SEAF / AUSF can be integrated together, and / or AMF / SEAF / AUSF can be integrated together, but it is not limited to this.

[0613] 9.S-AMF / SEAF / AUSF stores the UE authentication vector or UE security context locally, and stores the downloaded data in the S-SFCF network element (corresponding to the above-mentioned second satellite device) (corresponding to the above-mentioned sending of the first stored message to the second satellite device; the first stored message carries: the second information and the SUPI of the first terminal), and the stored relevant information may specifically include: SUPI, download data, application identifier (optional), message type: download (optional), message generation time (optional), and message validity time (optional).

[0614] Among them, the relevant information of the downloaded data can also be directly stored in S-AMF / SEAF / AUSF, which is not limited here.

[0615] 10. After the satellite (corresponding to the first satellite device) establishes a connection with the UE, the satellite performs an authentication process with the UE using the UE authentication vector or the UE security context (corresponding to the authentication interaction with the target terminal according to the authentication-related information). The UE security context can also be obtained after the authentication using the UE authentication vector.

[0616] 11. (Optional) If necessary (for example, when a NAS connection is not established using the UE authentication vector for authentication), a NAS Security Model Command (SMC) process is performed (between the UE and the core network) to establish NAS security with the UE.

[0617] 12. (Optional) S-AMF obtains UE download data from S-SFCF using SUPI:

[0618] a) The S-AMF sends a download data acquisition request (corresponding to the above-mentioned first acquisition request) to the S-SFCF, which includes: SUPI (corresponding to the SUPI of the above-mentioned first terminal), message type: download (corresponding to the above-mentioned first operation type information, which is optional).

[0619] b) S-SFCF sends a download data acquisition response to S-AMF (corresponding to the first acquisition response mentioned above), which includes: download data, application identifier (optional), message generation time (optional), and message validity period (optional).

[0620] 13.S-AMF exchanges download data and / or upload data with UE (specifically, data can be transmitted through NAS messages):

[0621] a) Data download operation: downloading data, application identification (optional); corresponding to the above-mentioned first data interaction with the first terminal according to the SUPI of the first terminal; the first data interaction includes: sending the downloaded data to the first terminal.

[0622] b) Data upload operation: upload data, (optional) application identifier (corresponding to the above-mentioned second application identifier); corresponding to the above-mentioned second data interaction with the second terminal; the second data interaction includes: receiving the upload data sent by the second terminal and the SUPI of the second terminal. It may be that before sending the upload data, the terminal has reported the SUPI to the satellite, and the satellite has learned the SUPI, but it is not limited to this.

[0623] 14.S-AMF stores the upload data of the UE in the S-SFCF, and the stored relevant information specifically includes: SUPI (corresponding to the SUPI of the above-mentioned second terminal), upload data, (optional) application identifier (corresponding to the above-mentioned second application identifier), (optional) message type-upload (corresponding to the above-mentioned second operation type information, the second operation type information indicates an upload operation), (optional) message generation time (corresponding to the second generation time information of the above-mentioned upload data), (optional) message validity time (corresponding to the second validity time information of the above-mentioned upload data).

[0624] Among them, the relevant information of the uploaded data can also be directly stored in S-AMF / SEAF / AUSF, which is not limited here.

[0625] In addition, it can be explained here that: the application identifiers carried during the download process all correspond to the above-mentioned first application identifier, the application identifiers carried during the upload process all correspond to the above-mentioned second application identifier, the message types carried during the download process all correspond to the above-mentioned first operation type information, the message types carried during the upload process all correspond to the above-mentioned second operation type information, the message generation time carried during the download process all corresponds to the above-mentioned first generation time information, the message generation time carried during the upload process all corresponds to the above-mentioned second generation time information, the message validity time carried during the download process all corresponds to the above-mentioned first validity time information, and the message validity time carried during the upload process all corresponds to the above-mentioned second validity time information.

[0626] 15. When the satellite (which can be the above satellite or other satellite) establishes a connection with the gateway, the S-AMF obtains the UE's upload data from the S-SFCF using the SUPI:

[0627] a) The S-AMF sends an upload data acquisition request (corresponding to the second acquisition request) to the S-SFCF, which includes: SUPI (corresponding to the SUPI of the second terminal), (optional) message type: upload (corresponding to the second operation type information).

[0628] b) S-SFCF sends an upload data acquisition response (corresponding to the above-mentioned second acquisition response) to S-AMF, which includes: upload data, (optional) application identifier (corresponding to the above-mentioned second application identifier), (optional) message type: upload (corresponding to the above-mentioned second operation type information), (optional) message generation time (corresponding to the above-mentioned second generation time information), (optional) message validity time (corresponding to the above-mentioned second validity time information).

[0629] 16. The S-AMF sends the relevant information of the uploaded data (if any) to the AMF in the core network (corresponding to the third data upload request sent to the second core network device above), which includes:

[0630] SUPI of the UE (corresponding to the SUPI of the second terminal);

[0631] (Optional) UE security context (corresponding to the terminal context of the second terminal);

[0632] (Optional) Application identifier (corresponding to the second application identifier);

[0633] Upload data;

[0634] (Optional) Message Type-Upload (corresponding to the above second operation type information);

[0635] (Optional) message generation time (corresponding to the second generation time information above);

[0636] (Optional) Message validity period (corresponding to the above-mentioned second validity period information).

[0637] 17. (Optional) AMF stores the UE’s security context.

[0638] 18.AMF sends the upload data of the UE to SFCF (corresponding to the above-mentioned sending of the first data upload request to the first core network device), wherein the relevant information sent may include: SUPI (corresponding to the SUPI of the above-mentioned second terminal), (optional) application identifier (corresponding to the above-mentioned second application identifier), upload data, (optional) message type-upload (corresponding to the above-mentioned second operation type information).

[0639] 19. SFCF sends the UE's upload data to AF (corresponding to the above-mentioned sending of the second data upload request to the satellite application function device), wherein the relevant information sent may include: user identifier (corresponding to the above-mentioned second user identifier), (optional) application identifier (corresponding to the above-mentioned second application identifier), upload data, (optional) message type-upload (corresponding to the above-mentioned second operation type information).

[0640] It is noted here that on the satellite, S-SFCF can be combined with S-AMF / SEAF / AUSF, which is not limited here.

[0641] From the above, the functions currently performed by satellites are all transparent forwarding, and the base station is located on land. There is no data storage and forwarding scenario for satellite processing targeted by this solution, so there is currently no relevant content of this application. In addition, in the satellite S&F scenario, the authentication UE is performed without the participation of the core network, so the authentication process must be adjusted. This solution can provide a high-level security solution for this application scenario.

[0642] The embodiment of the present application also provides a data transmission device, wherein the data transmission device is a first core network device, such as Fig.13 As shown, it includes a memory 131, a transceiver 132, and a processor 133:

[0643] The memory 131 is used to store computer programs; the transceiver 132 is used to send and receive data under the control of the processor 133; the processor 133 is used to read the computer program in the memory 131 and perform the following operations:

[0644] Receiving, through the transceiver 132, a first data download request sent by the satellite application function device; the first data download request carries a first user identifier of the first terminal and download data;

[0645] According to the first data download request, sending a second data download request to the second core network device through the transceiver 132; the second data download request carries the download data and the user permanent identifier SUPI of the first terminal obtained according to the first user identifier;

[0646] Alternatively, receiving, through the transceiver 132, a first data upload request sent by the second core network device; the first data upload request carries the SUPI of the second terminal and the upload data;

[0647] According to the first data upload request, sending a second data upload request to the satellite application function device through the transceiver 132; the second data upload request carries a second user identifier of the second terminal and the upload data;

[0648] The first terminal is the same as or different from the second terminal.

[0649] The data transmission device provided in the embodiment of the present application receives a first data download request sent by a satellite application function device; the first data download request carries a first user identifier of a first terminal and download data; sends a second data download request to a second core network device according to the first data download request; the second data download request carries the download data and a user permanent identifier SUPI of the first terminal obtained according to the first user identifier; or receives a first data upload request sent by the second core network device; the first data upload request carries the SUPI of the second terminal and upload data; sends a second data upload request to the satellite application function device according to the first data upload request; the second data upload request carries the second user identifier and upload data of the second terminal; wherein the first terminal is the same as or different from the second terminal; and can support the satellite device to accurately perform transmission processing of relevant data according to the SUPI, thereby solving the problem that the prior art cannot support accurate data transmission in a satellite storage and forwarding scenario.

[0650] Specifically, the transceiver 132 is used to receive and send data under the control of the processor 133.

[0651] Among them, Fig.13In the embodiment, the bus architecture may include any number of interconnected buses and bridges, specifically linking together various circuits of one or more processors represented by processor 133 and memory represented by memory 131. The bus architecture may also link together various other circuits such as peripherals, voltage regulators, and power management circuits, which are well known in the art and are therefore not further described herein. The bus interface provides an interface. The transceiver 132 may be a plurality of components, namely, a transmitter and a receiver, providing a unit for communicating with various other devices on a transmission medium, such as a wireless channel, a wired channel, an optical cable, and the like. The processor 133 is responsible for managing the bus architecture and general processing, and the memory 131 may store data used by the processor 133 when performing operations.

[0652] The processor 133 may be a central processing unit (CPU), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or a complex programmable logic device (CPLD). The processor may also adopt a multi-core architecture.

[0653] Wherein, (1) the first user identifier includes: the SUPI or application identifier of the first terminal; and / or, the first data download request also carries: at least one of: a first application identifier, satellite application service information, first operation type information, first generation time information of the downloaded data, and first validity time information of the downloaded data; the first application identifier is used to indicate the satellite application service to which the downloaded data belongs; the satellite application service information includes: auxiliary information for determining a target satellite providing service for the second data download request; the first operation type information indicates a download operation; and / or, (2) the second data download request also carries: the The method comprises: (a) transmitting the first data upload request to the user and receiving the first data upload request; (b) transmitting the first data upload request to the user and receiving the first data upload request; and (c) transmitting the first data upload request to the user and receiving the first data upload request; and (d) transmitting the first data upload request to the user and receiving the first data upload request; and (e) transmitting the first data upload request to the user and receiving the first data upload request; and (f) transmitting the first data upload request to the user and receiving the first data upload request; and (f) transmitting the first data upload request to the user and receiving the first data upload request;

[0654] It should be noted here that the above-mentioned device provided in the embodiment of the present application can implement all the method steps implemented in the above-mentioned first core network device side method embodiment, and can achieve the same technical effect. The parts and beneficial effects that are the same as the method embodiment in this embodiment will not be described in detail here.

[0655] The embodiment of the present application also provides a data transmission device, wherein the data transmission device is a second core network device, such as Fig.14 As shown, it includes a memory 141, a transceiver 142, and a processor 143:

[0656] The memory 141 is used to store computer programs; the transceiver 142 is used to send and receive data under the control of the processor 143; the processor 143 is used to read the computer program in the memory 141 and perform the following operations:

[0657] Receiving, by the transceiver 142, a second data download request sent by the first core network device; the second data download request carries the download data and the SUPI of the first terminal;

[0658] According to the second data download request, sending a third data download request to the first satellite device through the transceiver 142; the third data download request carries the download data and the SUPI of the first terminal;

[0659] Alternatively, receiving, through the transceiver 142, a third data upload request sent by the first satellite device; the third data upload request carries the SUPI of the second terminal and the upload data;

[0660] According to the third data upload request, sending a first data upload request to the first core network device through the transceiver 142; the first data upload request carries the SUPI of the second terminal and the upload data;

[0661] The first terminal is the same as or different from the second terminal.

[0662] The data transmission device provided in the embodiment of the present application receives a second data download request sent by a first core network device; the second data download request carries the download data and the SUPI of the first terminal; according to the second data download request, sends a third data download request to the first satellite device; the third data download request carries the download data and the SUPI of the first terminal; or, receives a third data upload request sent by the first satellite device; the third data upload request carries the SUPI of the second terminal and the upload data; according to the third data upload request, sends a first data upload request to the first core network device; the first data upload request carries the SUPI of the second terminal and the upload data; wherein the first terminal is the same as or different from the second terminal; and can support the satellite device to accurately perform transmission processing of relevant data according to the SUPI, thereby solving the problem that the prior art cannot support accurate data transmission in the satellite storage and forwarding scenario.

[0663] Specifically, the transceiver 142 is used to receive and send data under the control of the processor 143.

[0664] Among them, Fig.14 In the embodiment, the bus architecture may include any number of interconnected buses and bridges, specifically one or more processors represented by processor 143 and various circuits of memory represented by memory 141 are linked together. The bus architecture may also link together various other circuits such as peripheral devices, voltage regulators, and power management circuits, which are well known in the art and are therefore not further described herein. The bus interface provides an interface. The transceiver 142 may be a plurality of components, namely, a transmitter and a receiver, providing a unit for communicating with various other devices on a transmission medium, which transmission medium may include a wireless channel, a wired channel, an optical cable, and other transmission media. The processor 143 is responsible for managing the bus architecture and general processing, and the memory 141 may store data used by the processor 143 when performing operations.

[0665] The processor 143 may be a central processing unit (CPU), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or a complex programmable logic device (CPLD). The processor may also adopt a multi-core architecture.

[0666] Further, the operation also includes: before sending a third data download request to the first satellite device through the transceiver according to the second data download request, or before receiving a third data upload request sent by the first satellite device, obtaining authentication related information of the target terminal according to the SUPI of the target terminal; the target terminal is the first terminal or the second terminal; the authentication related information includes: a terminal context or a terminal authentication vector; the terminal context includes a terminal security context; and sending the authentication related information to the first satellite device through the transceiver.

[0667] In an embodiment of the present application, the operation also includes: before sending the authentication related information to the first satellite device, sending a target satellite request to a satellite management function device through the transceiver; the target satellite request carries the SUPI of the target terminal; receiving a target satellite response fed back by the satellite management function device through the transceiver; the target satellite response carries target satellite information; sending a third data download request to the first satellite device through the transceiver according to the second data download request includes: sending a third data download request to the first satellite device corresponding to the target satellite information through the transceiver according to the second data download request; sending the authentication related information to the first satellite device includes: sending the authentication related information to the first satellite device corresponding to the target satellite information.

[0668] The obtaining of authentication-related information of the target terminal according to the SUPI of the target terminal comprises any one of the following: (1) obtaining the stored terminal context locally; (2) sending an authentication vector request to a third core network device through the transceiver, wherein the authentication vector request carries the SUPI of the target terminal; and receiving an authentication vector response fed back by the third core network device according to the SUPI of the target terminal through the transceiver, wherein the authentication vector response carries the terminal authentication vector.

[0669] In an embodiment of the present application, the authentication vector request also carries: authentication vector type indication information, the authentication vector type indication information is used to indicate authentication of the target terminal in a store-and-forward scenario; the terminal authentication vector is an authentication vector used to authenticate the target terminal in the store-and-forward scenario.

[0670] Wherein, (1) the second data download request also carries: at least one of: a first application identifier, satellite application service information, first operation type information, first generation time information of the downloaded data, and first valid time information of the downloaded data; the first application identifier is used to indicate the satellite application service to which the downloaded data belongs; the satellite application service information includes: auxiliary information for determining a target satellite providing service for the second data download request; the first operation type information indicates a download operation; and / or, (2) the third data download request also carries: at least one of: the first application identifier, the first operation type information, first generation time information of the downloaded data, and first valid time information of the downloaded data. ; and / or, (3) the third data upload request also carries: at least one of: a second application identifier, a second operation type information, a second generation time information of the uploaded data, and a second valid time information of the uploaded data; the second application identifier is used to indicate the satellite application service to which the uploaded data belongs; the second operation type information indicates an upload operation; and / or, (4) the first data upload request also carries: at least one of the second application identifier and the second operation type information; and / or, (5) the target satellite request also carries: the satellite application service information; and / or, (6) the authentication vector request also carries: the target satellite information, the target satellite information is used to assist in generating the terminal authentication vector.

[0671] It should be noted here that the above-mentioned device provided in the embodiment of the present application can implement all the method steps implemented in the above-mentioned second core network device side method embodiment, and can achieve the same technical effect. The parts and beneficial effects that are the same as the method embodiment in this embodiment will not be described in detail here.

[0672] The embodiment of the present application also provides a data transmission device, wherein the data transmission device is a first satellite device, such as Fig.15 As shown, it includes a memory 151, a transceiver 152, and a processor 153:

[0673] The memory 151 is used to store computer programs; the transceiver 152 is used to send and receive data under the control of the processor 153; the processor 153 is used to read the computer program in the memory 151 and perform the following operations:

[0674] Receiving, through the transceiver 152, a third data download request sent by the second core network device; the third data download request carries the download data and the SUPI of the first terminal;

[0675] Performing a first data interaction with the first terminal through the transceiver 152 according to the SUPI of the first terminal; the first data interaction includes: sending the download data to the first terminal;

[0676] Alternatively, performing a second data interaction with a second terminal through the transceiver 152; the second data interaction includes: receiving upload data sent by the second terminal and the SUPI of the second terminal;

[0677] According to the second data interaction, sending a third data upload request to the second core network device through the transceiver 152; the third data upload request carries the SUPI of the second terminal and the upload data;

[0678] The first terminal is the same as or different from the second terminal.

[0679] The data transmission device provided in the embodiment of the present application receives a third data download request sent by a second core network device; the third data download request carries the download data and the SUPI of the first terminal; according to the SUPI of the first terminal, performs a first data interaction with the first terminal; the first data interaction includes: sending the download data to the first terminal; or performing a second data interaction with the second terminal; the second data interaction includes: receiving the upload data sent by the second terminal and the SUPI of the second terminal; according to the second data interaction, sending a third data upload request to the second core network device; the third data upload request carries the SUPI and upload data of the second terminal; wherein the first terminal is the same as or different from the second terminal; and can support the satellite device to accurately perform transmission processing of relevant data according to the SUPI, thereby solving the problem that the prior art cannot support accurate data transmission in the satellite storage and forwarding scenario.

[0680] Specifically, the transceiver 152 is used to receive and send data under the control of the processor 153.

[0681] Among them, Fig.15In the embodiment, the bus architecture may include any number of interconnected buses and bridges, specifically one or more processors represented by processor 153 and various circuits of memory represented by memory 151 are linked together. The bus architecture may also link together various other circuits such as peripheral devices, voltage regulators, and power management circuits, which are well known in the art and are therefore not further described herein. The bus interface provides an interface. The transceiver 152 may be a plurality of components, namely, a transmitter and a receiver, providing a unit for communicating with various other devices on a transmission medium, which transmission medium may include a wireless channel, a wired channel, an optical cable, and other transmission media. The processor 153 is responsible for managing the bus architecture and general processing, and the memory 151 may store data used by the processor 153 when performing operations.

[0682] The processor 153 may be a central processing unit (CPU), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or a complex programmable logic device (CPLD). The processor may also adopt a multi-core architecture.

[0683] Further, the operation also includes: before performing a first data interaction with the first terminal through the transceiver according to the SUPI of the first terminal, or before performing a second data interaction with the second terminal, receiving authentication-related information of the target terminal sent by the second core network device through the transceiver; the target terminal is the first terminal or the second terminal; the authentication-related information includes: a terminal context or a terminal authentication vector; the terminal context includes a terminal security context; performing authentication interaction with the target terminal according to the authentication-related information; performing a first data interaction with the first terminal through the transceiver according to the SUPI of the first terminal includes: when the first terminal is authenticated, performing a first data interaction with the first terminal through the transceiver according to the SUPI of the first terminal; performing a second data interaction with the second terminal includes: when the second terminal is authenticated, performing a second data interaction with the second terminal.

[0684] The third data download request further carries: first information, the first information including: at least one of a first application identifier, first operation type information, first generation time information of the downloaded data, and first valid time information of the downloaded data; the first application identifier is used to indicate a satellite application service to which the downloaded data belongs; the first operation type information indicates a download operation; the operation further includes: storing the second information in correspondence with the SUPI of the first terminal; the second information includes: the downloaded data, or the downloaded data and the first information; and / or storing the authentication related information in correspondence with the SUPI of the target terminal.

[0685] In an embodiment of the present application, storing the second information in correspondence with the SUPI of the first terminal includes: sending a first storage message to the second satellite device through the transceiver; the first storage message carries: the second information and the SUPI of the first terminal; the operation also includes: before performing first data interaction with the first terminal through the transceiver according to the SUPI of the first terminal, sending a first acquisition request to the second satellite device through the transceiver according to the SUPI of the first terminal; the first acquisition request carries: the SUPI of the first terminal, or, the SUPI of the first terminal and the first operation type information; receiving, through the transceiver, a first acquisition response sent by the second satellite device; the first acquisition response carries: the downloaded data, or at least one of the first application identifier, the first operation type information, the first generation time information of the downloaded data, and the first valid time information of the downloaded data, and the downloaded data.

[0686] Furthermore, the first data interaction also includes: sending the first application identifier to the first terminal.

[0687] The operation further includes: before sending a third data upload request to the second core network device according to the second data interaction, storing the third information in correspondence with the SUPI of the second terminal; wherein the third information includes: the uploaded data, or at least one of a second application identifier and second operation type information, and the uploaded data; the second application identifier is used to indicate a satellite application service to which the uploaded data belongs; and the second operation type information indicates an upload operation.

[0688] In an embodiment of the present application, storing the third information in correspondence with the SUPI of the second terminal includes: sending a second storage message to the second satellite device through the transceiver; the second storage message carries: the third information and the SUPI of the second terminal; the operation also includes: before sending a third data upload request to the second core network device through the transceiver according to the second data interaction, sending a second acquisition request to the second satellite device through the transceiver according to the SUPI of the second terminal; the second acquisition request carries: the SUPI of the second terminal, or, the SUPI of the second terminal and the second operation type information; receiving, through the transceiver, a second acquisition response sent by the second satellite device; the second acquisition response carries: the uploaded data, or, at least one of the second application identifier, the second operation type information, the second generation time information of the uploaded data, and the second valid time information of the uploaded data, and the uploaded data.

[0689] Further, the operation also includes: before storing the third information in correspondence with the SUPI of the second terminal, determining at least one of the second generation time information of the uploaded data and the second valid time information of the uploaded data; wherein the third information also includes: at least one of the second generation time information and the second valid time information.

[0690] Among them, (1) the third data download request also carries: at least one of: a first application identifier, a first operation type information, a first generation time information of the downloaded data, and a first valid time information of the downloaded data; the first application identifier is used to indicate the satellite application service to which the downloaded data belongs; the first operation type information indicates a download operation; and / or, (2) the third data upload request also carries: a terminal context of the second terminal, the second application identifier, the second operation type information, at least one of a second generation time information of the uploaded data, and a second valid time information of the uploaded data; the terminal context includes a terminal security context.

[0691] Furthermore, the second data interaction also includes: receiving the second application identifier sent by the second terminal.

[0692] It should be noted here that the above-mentioned device provided in the embodiment of the present application can implement all the method steps implemented in the above-mentioned first satellite device side method embodiment, and can achieve the same technical effect. The parts and beneficial effects that are the same as the method embodiment in this embodiment will not be described in detail here.

[0693] The embodiment of the present application also provides a data transmission device, wherein the data transmission device is a second satellite device, such as Fig.16 As shown, it includes a memory 161, a transceiver 162, and a processor 163:

[0694] The memory 161 is used to store computer programs; the transceiver 162 is used to send and receive data under the control of the processor 163; the processor 163 is used to read the computer program in the memory 161 and perform the following operations:

[0695] Receiving, by the transceiver 162, a target storage message sent by a first satellite device; the storage message carries: target information, and a SUPI of a target terminal; wherein the target storage message is a first storage message, the target information is second information, and the target terminal is a first terminal; or, the target storage message is a second storage message, the target information is third information, and the target terminal is a second terminal; the first terminal is the same as or different from the second terminal;

[0696] storing the target information and the SUPI of the target terminal in correspondence;

[0697] The second information includes: download data, or the download data and the first information; the first information includes: at least one of a first application identifier, first operation type information, first generation time information of the download data, and first valid time information of the download data; the first application identifier is used to indicate the satellite application service to which the download data belongs; the first operation type information indicates a download operation;

[0698] The third information includes: upload data, or at least one of a second application identifier and second operation type information, and the upload data; the second application identifier is used to indicate the satellite application service to which the upload data belongs; and the second operation type information indicates an upload operation.

[0699] The data transmission device provided in the embodiment of the present application receives a target storage message sent by a first satellite device; the storage message carries: target information, and a SUPI of a target terminal; wherein the target storage message is a first storage message, the target information is second information, and the target terminal is a first terminal; or, the target storage message is a second storage message, the target information is third information, and the target terminal is a second terminal; the first terminal is the same as or different from the second terminal; the target information and the SUPI of the target terminal are stored in correspondence; wherein the second information includes: downloaded data, or the downloaded data and the first information; the first information includes: a first application identifier, a first operation identifier, The invention relates to a method for transmitting and receiving satellite data in a satellite storage and forwarding scenario, wherein the first application identifier is used to indicate a satellite application service to which the downloaded data belongs; the first operation type information indicates a download operation; the third information includes: upload data, or at least one of a second application identifier and a second operation type information, and the upload data; the second application identifier is used to indicate a satellite application service to which the uploaded data belongs; the second operation type information indicates an upload operation; and the satellite device can be supported to accurately perform transmission processing of relevant data according to the SUPI, thereby solving the problem that the prior art cannot support accurate data transmission in a satellite storage and forwarding scenario.

[0700] Specifically, the transceiver 162 is used to receive and send data under the control of the processor 163.

[0701] Among them, Fig.16 In the embodiment, the bus architecture may include any number of interconnected buses and bridges, specifically one or more processors represented by processor 163 and various circuits of memory represented by memory 161 are linked together. The bus architecture may also link together various other circuits such as peripherals, voltage regulators, and power management circuits, which are well known in the art and are therefore not further described herein. The bus interface provides an interface. The transceiver 162 may be a plurality of components, namely, a transmitter and a receiver, providing a unit for communicating with various other devices on a transmission medium, which transmission medium may include a wireless channel, a wired channel, an optical cable, and the like. The processor 163 is responsible for managing the bus architecture and general processing, and the memory 161 may store data used by the processor 163 when performing operations.

[0702] The processor 163 may be a central processing unit (CPU), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or a complex programmable logic device (CPLD). The processor may also adopt a multi-core architecture.

[0703] Further, the operation also includes: receiving, through the transceiver, a first acquisition request sent by the first satellite device; the first acquisition request carries: the SUPI of the first terminal, or the SUPI of the first terminal and the first operation type information; sending a first acquisition response to the first satellite device through the transceiver; the first acquisition response carries: the download data, or at least one of the first application identifier, the first operation type information, the first generation time information of the download data, and the first valid time information of the download data, and the download data.

[0704] The third information further includes: at least one of second generation time information of the uploaded data and second valid time information of the uploaded data.

[0705] Further, the operation also includes: receiving, through the transceiver, a second acquisition request sent by the first satellite device; the second acquisition request carries: the SUPI of the second terminal, or the SUPI of the second terminal and the second operation type information; sending a second acquisition response to the first satellite device through the transceiver; the second acquisition response carries: the uploaded data, or at least one of the second application identifier, the second operation type information, the second generation time information of the uploaded data, and the second valid time information of the uploaded data, and the uploaded data.

[0706] It should be noted here that the above-mentioned device provided in the embodiment of the present application can implement all the method steps implemented in the above-mentioned second satellite equipment side method embodiment, and can achieve the same technical effect. The parts and beneficial effects that are the same as the method embodiment in this embodiment will not be described in detail here.

[0707] The embodiment of the present application also provides a data transmission device, wherein the data transmission device is a third core network device, such as Fig.17 As shown, it includes a memory 171, a transceiver 172, and a processor 173:

[0708] The memory 171 is used to store computer programs; the transceiver 172 is used to send and receive data under the control of the processor 173; the processor 173 is used to read the computer program in the memory 171 and perform the following operations:

[0709] Receiving, by the transceiver 172, an authentication vector request sent by the second core network device, where the authentication vector request carries the SUPI of the target terminal, where the target terminal is the first terminal or the second terminal;

[0710] Generating a terminal authentication vector according to the SUPI of the target terminal;

[0711] An authentication vector response is fed back to the second core network device through the transceiver 172, where the authentication vector response carries the terminal authentication vector.

[0712] The data transmission device provided in the embodiment of the present application receives an authentication vector request sent by a second core network device, wherein the authentication vector request carries the SUPI of a target terminal, and the target terminal is a first terminal or a second terminal; generates a terminal authentication vector according to the SUPI of the target terminal; feeds back an authentication vector response to the second core network device, wherein the authentication vector response carries the terminal authentication vector; and can support a satellite device to accurately perform transmission processing of relevant data according to the SUPI, thereby solving the problem in the prior art that accurate data transmission in a satellite storage and forwarding scenario cannot be supported.

[0713] Specifically, the transceiver 172 is used to receive and send data under the control of the processor 173.

[0714] Among them, Fig.17 In the embodiment, the bus architecture may include any number of interconnected buses and bridges, specifically one or more processors represented by processor 173 and various circuits of memory represented by memory 171 are linked together. The bus architecture may also link together various other circuits such as peripherals, voltage regulators, and power management circuits, which are well known in the art and are therefore not further described herein. The bus interface provides an interface. The transceiver 172 may be a plurality of components, namely, a transmitter and a receiver, providing a unit for communicating with various other devices on a transmission medium, which transmission medium may include a wireless channel, a wired channel, an optical cable, and the like. The processor 173 is responsible for managing the bus architecture and general processing, and the memory 171 may store data used by the processor 173 when performing operations.

[0715] The processor 173 may be a central processing unit (CPU), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or a complex programmable logic device (CPLD). The processor may also adopt a multi-core architecture.

[0716] The authentication vector request also carries: authentication vector type indication information, the authentication vector type indication information is used to indicate authentication of the target terminal in a store-and-forward scenario; the terminal authentication vector is an authentication vector used to authenticate the target terminal in the store-and-forward scenario.

[0717] Furthermore, the authentication vector request also carries: target satellite information corresponding to the first satellite device, and the target satellite information is used to assist in generating the terminal authentication vector; wherein the target satellite information is obtained by the second core network device according to the target satellite response fed back by the satellite management function device.

[0718] It should be noted here that the above-mentioned device provided in the embodiment of the present application can implement all the method steps implemented by the above-mentioned third core network device side method embodiment, and can achieve the same technical effect. The parts and beneficial effects that are the same as the method embodiment in this embodiment will not be described in detail here.

[0719] The present application also provides a data transmission device, which is a satellite application function device, such as Fig.18 As shown, it includes a memory 181, a transceiver 182, and a processor 183:

[0720] The memory 181 is used to store computer programs; the transceiver 182 is used to send and receive data under the control of the processor 183; the processor 183 is used to read the computer program in the memory 181 and perform the following operations:

[0721] Sending a first data download request to the first core network device through the transceiver 182; the first data download request carries the first user identifier of the first terminal and the download data;

[0722] Alternatively, receiving, through the transceiver 182, a second data upload request sent by the first core network device; the second data upload request carries a second user identifier of the second terminal and upload data;

[0723] The first terminal is the same as or different from the second terminal.

[0724] The data transmission device provided in the embodiment of the present application sends a first data download request to a first core network device; the first data download request carries a first user identifier and download data of a first terminal; or receives a second data upload request sent by the first core network device; the second data upload request carries a second user identifier and upload data of a second terminal; wherein the first terminal is the same as or different from the second terminal; and can support satellite equipment to accurately perform transmission processing of relevant data according to SUPI, thereby solving the problem that the prior art cannot support accurate data transmission in a satellite storage and forwarding scenario.

[0725] Specifically, the transceiver 182 is used to receive and send data under the control of the processor 183.

[0726] Among them, Fig.18 In the embodiment, the bus architecture may include any number of interconnected buses and bridges, specifically one or more processors represented by processor 183 and various circuits of memory represented by memory 181 are linked together. The bus architecture may also link together various other circuits such as peripherals, voltage regulators, and power management circuits, which are well known in the art and are therefore not further described herein. The bus interface provides an interface. The transceiver 182 may be a plurality of components, namely, a transmitter and a receiver, providing a unit for communicating with various other devices on a transmission medium, which transmission medium may include a wireless channel, a wired channel, an optical cable, and other transmission media. The processor 183 is responsible for managing the bus architecture and general processing, and the memory 181 may store data used by the processor 183 when performing operations.

[0727] The processor 183 may be a central processing unit (CPU), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or a complex programmable logic device (CPLD). The processor may also adopt a multi-core architecture.

[0728] Wherein, (1) the first user identifier includes: a SUPI or an application identifier of the first terminal; and / or, (2) the first data download request further carries: at least one of: a first application identifier, satellite application service information, first operation type information, first generation time information of the download data, and first validity time information of the download data; the first application identifier is used to indicate the satellite application service to which the download data belongs; the satellite application service information includes: auxiliary information used to determine a target satellite providing service for the second data download request; the second data download request is a data download request sent by the first core network device to the second core network device according to the first data download request; the first operation type information indicates a download operation; and / or, (3) the second data upload request further carries: at least one of: a second application identifier and second operation type information; the second application identifier is used to indicate the satellite application service to which the upload data belongs; the second operation type information indicates an upload operation; and / or, (4) the second user identifier includes: a SUPI or an application identifier of the second terminal.

[0729] It should be noted here that the above-mentioned device provided in the embodiment of the present application can implement all the method steps implemented by the above-mentioned satellite application function device side method embodiment, and can achieve the same technical effect. The parts and beneficial effects that are the same as the method embodiment in this embodiment will not be specifically described here.

[0730] The embodiment of the present application also provides a data transmission device, wherein the data transmission device is a terminal, such as Fig.19 As shown, it includes a memory 191, a transceiver 192, and a processor 193:

[0731] The memory 191 is used to store computer programs; the transceiver 192 is used to send and receive data under the control of the processor 193; the processor 193 is used to read the computer program in the memory 191 and perform the following operations:

[0732] Data is exchanged with the first satellite device via the transceiver 192; the data interaction includes: receiving download data; and / or sending upload data and the SUPI of the terminal to the first satellite device.

[0733] The data transmission device provided in the embodiment of the present application performs data interaction with the first satellite device; the data interaction includes: receiving download data; and / or sending upload data and the SUPI of the terminal to the first satellite device; it can support the satellite device to accurately perform transmission processing of relevant data according to the SUPI, thereby solving the problem that the prior art cannot support accurate data transmission in a satellite storage and forwarding scenario.

[0734] Specifically, the transceiver 192 is used to receive and send data under the control of the processor 193.

[0735] Among them, Fig.19 In the embodiment, the bus architecture may include any number of interconnected buses and bridges, specifically one or more processors represented by processor 193 and various circuits of memory represented by memory 191 are linked together. The bus architecture may also link together various other circuits such as peripherals, voltage regulators, and power management circuits, which are well known in the art and are therefore not further described herein. The bus interface provides an interface. The transceiver 192 may be a plurality of components, namely, a transmitter and a receiver, providing a unit for communicating with various other devices on a transmission medium, including wireless channels, wired channels, optical cables, and other transmission media. For different user devices, the user interface 194 may also be an interface capable of externally and internally connecting required devices, and the connected devices include but are not limited to a keypad, a display, a speaker, a microphone, a joystick, and the like.

[0736] The processor 193 is responsible for managing the bus architecture and general processing, and the memory 191 can store data used by the processor 193 when performing operations.

[0737] Optionally, the processor 193 may be a central processing unit (CPU), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or a complex programmable logic device (CPLD), and the processor may also adopt a multi-core architecture.

[0738] The processor calls the computer program stored in the memory to execute any of the methods provided in the embodiments of the present application according to the obtained executable instructions. The processor and the memory can also be arranged physically separately.

[0739] The operation further includes: before performing data interaction with the first satellite device, performing authentication interaction with the first satellite device through the transceiver; and the data interaction with the first satellite device includes: performing data interaction with the first satellite device when the terminal authentication is passed.

[0740] In the embodiment of the present application, when the data interaction includes receiving downloaded data, the data interaction further includes: receiving a first application identifier, where the first application identifier is used to indicate a satellite application service to which the downloaded data belongs.

[0741] Wherein, when the data interaction includes sending the upload data and the SUPI of the terminal to the first satellite device, the data interaction further includes: sending a second application identifier to the first satellite device, where the second application identifier is used to indicate the satellite application service to which the upload data belongs.

[0742] It should be noted here that the above-mentioned device provided in the embodiment of the present application can implement all the method steps implemented in the above-mentioned terminal side method embodiment, and can achieve the same technical effect. The parts and beneficial effects of this embodiment that are the same as the method embodiment will not be described in detail here.

[0743] The embodiment of the present application also provides a data transmission device, wherein the data transmission device is a second core network device, such as Fig. 20 As shown, it includes a memory 201, a transceiver 202, and a processor 203:

[0744] The memory 201 is used to store computer programs; the transceiver 202 is used to send and receive data under the control of the processor 203; the processor 203 is used to read the computer program in the memory 201 and perform the following operations:

[0745] According to the SUPI of the target terminal, sending an authentication vector request to the third core network device through the transceiver 202, where the authentication vector request carries the SUPI of the target terminal and authentication vector type indication information, where the authentication vector type indication information is used to indicate that the target terminal is authenticated in a store-and-forward scenario; the target terminal is the first terminal or the second terminal;

[0746] Receiving, by the transceiver 202, an authentication vector response fed back by the third core network device, the authentication vector response carrying a terminal authentication vector of the target terminal, the terminal authentication vector being an authentication vector used to authenticate the target terminal in the store-and-forward scenario;

[0747] The terminal authentication vector is sent to the first satellite device through the transceiver 202 .

[0748] The data transmission device provided in the embodiment of the present application sends an authentication vector request to a third core network device according to the SUPI of the target terminal, where the authentication vector request carries the SUPI of the target terminal and authentication vector type indication information, where the authentication vector type indication information is used to indicate that the target terminal is authenticated in a storage and forwarding scenario; the target terminal is a first terminal or a second terminal; receives an authentication vector response fed back by the third core network device, where the authentication vector response carries a terminal authentication vector of the target terminal, where the terminal authentication vector is an authentication vector used to authenticate the target terminal in the storage and forwarding scenario; sends the terminal authentication vector to a first satellite device; and can support the satellite device to perform authentication interaction with the UE, and then accurately perform transmission processing of relevant data according to the SUPI, thereby solving the problem that the prior art cannot support accurate data transmission in a satellite storage and forwarding scenario.

[0749] Specifically, the transceiver 202 is used to receive and send data under the control of the processor 203.

[0750] Among them, Fig. 20 In the embodiment, the bus architecture may include any number of interconnected buses and bridges, specifically one or more processors represented by processor 203 and various circuits of memory represented by memory 201 are linked together. The bus architecture may also link together various other circuits such as peripherals, voltage regulators, and power management circuits, which are well known in the art and are therefore not further described herein. The bus interface provides an interface. The transceiver 202 may be a plurality of components, namely, a transmitter and a receiver, providing a unit for communicating with various other devices on a transmission medium, such as a wireless channel, a wired channel, an optical cable, and the like. The processor 203 is responsible for managing the bus architecture and general processing, and the memory 201 may store data used by the processor 203 when performing operations.

[0751] The processor 203 may be a central processing unit (CPU), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or a complex programmable logic device (CPLD). The processor may also adopt a multi-core architecture.

[0752] The operation further includes: before sending the terminal authentication vector to the first satellite device, sending a target satellite request to a satellite management function device through the transceiver; the target satellite request carries the SUPI of the target terminal; receiving a target satellite response fed back by the satellite management function device through the transceiver; the target satellite response carries target satellite information; sending the terminal authentication vector to the first satellite device includes: sending the terminal authentication vector to the first satellite device corresponding to the target satellite information.

[0753] Furthermore, the authentication vector request also carries: the target satellite information; the target satellite information is used to assist in generating the terminal authentication vector.

[0754] It should be noted here that the above-mentioned device provided in the embodiment of the present application can implement all the method steps implemented in the above-mentioned second core network device side method embodiment, and can achieve the same technical effect. The parts and beneficial effects that are the same as the method embodiment in this embodiment will not be described in detail here.

[0755] The embodiment of the present application also provides a data transmission device, wherein the data transmission device is a first satellite device, such as Fig.21 As shown, it includes a memory 211, a transceiver 212, and a processor 213:

[0756] The memory 211 is used to store computer programs; the transceiver 212 is used to send and receive data under the control of the processor 213; the processor 213 is used to read the computer program in the memory 211 and perform the following operations:

[0757] Receiving, through the transceiver 121, a terminal authentication vector of a target terminal sent by a second core network device; the target terminal is the first terminal or the second terminal;

[0758] Perform authentication interaction with the target terminal according to the terminal authentication vector.

[0759] The data transmission device provided in the embodiment of the present application receives a terminal authentication vector of a target terminal sent by a second core network device; the target terminal is a first terminal or a second terminal; authentication interaction is performed with the target terminal according to the terminal authentication vector; and it can support satellite equipment to perform authentication interaction with UE, and then accurately perform transmission processing of relevant data according to SUPI, thereby solving the problem that the prior art cannot support accurate data transmission in a satellite storage and forwarding scenario.

[0760] Specifically, the transceiver 212 is used to receive and send data under the control of the processor 213.

[0761] Among them, Fig.21In the embodiment, the bus architecture may include any number of interconnected buses and bridges, specifically one or more processors represented by processor 213 and various circuits of memory represented by memory 211 are linked together. The bus architecture may also link together various other circuits such as peripherals, voltage regulators, and power management circuits, which are well known in the art and are therefore not further described herein. The bus interface provides an interface. The transceiver 212 may be a plurality of components, namely, a transmitter and a receiver, providing a unit for communicating with various other devices on a transmission medium, which transmission medium may include a wireless channel, a wired channel, an optical cable, and other transmission media. The processor 213 is responsible for managing the bus architecture and general processing, and the memory 211 may store data used by the processor 213 when performing operations.

[0762] The processor 213 may be a central processing unit (CPU), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or a complex programmable logic device (CPLD). The processor may also adopt a multi-core architecture.

[0763] The operation further includes: acquiring the SUPI of the target terminal; and storing the terminal authentication vector and the SUPI of the target terminal in correspondence with each other.

[0764] In the embodiment of the present application, acquiring the SUPI of the target terminal includes: receiving, through the transceiver, the SUPI of the first terminal sent by the second core network device; or receiving the SUPI of the second terminal sent by the second terminal.

[0765] The acquiring the SUPI of the target terminal includes: directly acquiring the SUPI of the target terminal in plain text; or acquiring the SUPI of the target terminal in cipher text; and decrypting the SUPI of the target terminal in cipher text to obtain the SUPI of the target terminal in plain text.

[0766] It should be noted here that the above-mentioned device provided in the embodiment of the present application can implement all the method steps implemented in the above-mentioned first satellite device side method embodiment, and can achieve the same technical effect. The parts and beneficial effects that are the same as the method embodiment in this embodiment will not be described in detail here.

[0767] An embodiment of the present application also provides a data transmission system, including: the above-mentioned first core network device, the above-mentioned second core network device, the above-mentioned first satellite device, the above-mentioned second satellite device, the above-mentioned third core network device, the above-mentioned satellite application function device, and the above-mentioned terminal; or, the above-mentioned second core network device, and the above-mentioned first satellite device.

[0768] Among them, the implementation embodiments of the methods on the first core network device side, the second core network device side, the first satellite device side, the second satellite device side, the third core network device side, the satellite application function device side, or the terminal side are all applicable to the embodiments of the data transmission system and can achieve the same technical effects.

[0769] In addition, an embodiment of the present application also provides a data transmission method, which is applied to the above-mentioned data transmission system. The specific system method can refer to the methods on the first core network device side, the second core network device side, the first satellite device side, the second satellite device side, the third core network device side, the satellite application function device side, and the terminal side, which will not be repeated here.

[0770] The embodiment of the present application also provides a data transmission device, which is applied to a first core network device, such as Fig. 22 As shown, including:

[0771] The first transceiver unit 221 is used to receive a first data download request sent by the satellite application function device; the first data download request carries a first user identifier of the first terminal and download data;

[0772] Sending a second data download request to a second core network device according to the first data download request; the second data download request carries the download data and a user permanent identifier SUPI of the first terminal obtained according to the first user identifier;

[0773] Alternatively, receiving a first data upload request sent by the second core network device; the first data upload request carries the SUPI of the second terminal and the upload data;

[0774] According to the first data upload request, sending a second data upload request to the satellite application function device; the second data upload request carries a second user identifier of the second terminal and upload data;

[0775] The first terminal is the same as or different from the second terminal.

[0776] The data transmission device provided in the embodiment of the present application receives a first data download request sent by a satellite application function device; the first data download request carries a first user identifier of a first terminal and download data; sends a second data download request to a second core network device according to the first data download request; the second data download request carries the download data and a user permanent identifier SUPI of the first terminal obtained according to the first user identifier; or receives a first data upload request sent by the second core network device; the first data upload request carries the SUPI of the second terminal and upload data; sends a second data upload request to the satellite application function device according to the first data upload request; the second data upload request carries the second user identifier and upload data of the second terminal; wherein the first terminal is the same as or different from the second terminal; and can support the satellite device to accurately perform transmission processing of relevant data according to the SUPI, thereby solving the problem that the prior art cannot support accurate data transmission in a satellite storage and forwarding scenario.

[0777] Wherein, (1) the first user identifier includes: a SUPI or an application identifier of the first terminal; and / or, (2) the first data download request further carries: at least one of: a first application identifier, satellite application service information, first operation type information, first generation time information of the download data, and first validity time information of the download data; the first application identifier is used to indicate the satellite application service to which the download data belongs; the satellite application service information includes: auxiliary information for determining a target satellite providing service for the second data download request; the first operation type information indicates a download operation; and / or, (3) the second data download request further carries: at least one of the first application identifier, the satellite application service information, the first operation type information, the first generation time information and the first validity time information; and / or, (4) the first data upload request also carries: at least one of a second application identifier and a second operation type information; the second application identifier is used to indicate the satellite application service to which the uploaded data belongs; the second operation type information indicates an upload operation; and / or, (5) the second data upload request also carries: at least one of the second application identifier and the second operation type information; and / or, (6) the second user identifier includes: a SUPI or an application identifier of the second terminal.

[0778] It should be noted here that the above-mentioned device provided in the embodiment of the present application can implement all the method steps implemented by the above-mentioned first core network device side method embodiment, and can achieve the same technical effect. The parts and beneficial effects that are the same as the method embodiment in this embodiment will not be described in detail here.

[0779] The embodiment of the present application also provides a data transmission device, which is applied to a second core network device, such as Fig.23 As shown, including:

[0780] The second transceiver unit 231 is configured to receive a second data download request sent by the first core network device; the second data download request carries the download data and the SUPI of the first terminal;

[0781] Sending a third data download request to the first satellite device according to the second data download request; the third data download request carries the download data and the SUPI of the first terminal;

[0782] Alternatively, receiving a third data upload request sent by the first satellite device; the third data upload request carries the SUPI of the second terminal and the upload data;

[0783] Sending a first data upload request to the first core network device according to the third data upload request; the first data upload request carries the SUPI of the second terminal and the upload data;

[0784] The first terminal is the same as or different from the second terminal.

[0785] The data transmission device provided in the embodiment of the present application receives a second data download request sent by a first core network device; the second data download request carries the download data and the SUPI of the first terminal; according to the second data download request, sends a third data download request to the first satellite device; the third data download request carries the download data and the SUPI of the first terminal; or, receives a third data upload request sent by the first satellite device; the third data upload request carries the SUPI of the second terminal and the upload data; according to the third data upload request, sends a first data upload request to the first core network device; the first data upload request carries the SUPI of the second terminal and the upload data; wherein the first terminal is the same as or different from the second terminal; and can support the satellite device to accurately perform transmission processing of relevant data according to the SUPI, thereby solving the problem that the prior art cannot support accurate data transmission in the satellite storage and forwarding scenario.

[0786] Further, the data transmission device also includes: a first acquisition unit, used to acquire authentication-related information of the target terminal according to the SUPI of the target terminal before sending a third data download request to the first satellite device according to the second data download request, or before receiving a third data upload request sent by the first satellite device; the target terminal is the first terminal or the second terminal; the authentication-related information includes: a terminal context or a terminal authentication vector; the terminal context includes a terminal security context; a first sending unit, used to send the authentication-related information to the first satellite device.

[0787] In an embodiment of the present application, the data transmission device further includes: a second sending unit, used to send a target satellite request to a satellite management function device before sending the authentication related information to the first satellite device; the target satellite request carries the SUPI of the target terminal; a first receiving unit, used to receive a target satellite response fed back by the satellite management function device; the target satellite response carries target satellite information; sending a third data download request to the first satellite device according to the second data download request includes: sending a third data download request to the first satellite device corresponding to the target satellite information according to the second data download request; sending the authentication related information to the first satellite device includes: sending the authentication related information to the first satellite device corresponding to the target satellite information.

[0788] The obtaining of authentication-related information of the target terminal according to the SUPI of the target terminal includes any one of the following: (1) obtaining the stored terminal context locally; (2) sending an authentication vector request to a third core network device, wherein the authentication vector request carries the SUPI of the target terminal; and receiving an authentication vector response fed back by the third core network device according to the SUPI of the target terminal, wherein the authentication vector response carries the terminal authentication vector.

[0789] In an embodiment of the present application, the authentication vector request also carries: authentication vector type indication information, the authentication vector type indication information is used to indicate authentication of the target terminal in a store-and-forward scenario; the terminal authentication vector is an authentication vector used to authenticate the target terminal in the store-and-forward scenario.

[0790] Wherein, (1) the second data download request also carries: at least one of: a first application identifier, satellite application service information, first operation type information, first generation time information of the downloaded data, and first valid time information of the downloaded data; the first application identifier is used to indicate the satellite application service to which the downloaded data belongs; the satellite application service information includes: auxiliary information for determining a target satellite providing service for the second data download request; the first operation type information indicates a download operation; and / or, (2) the third data download request also carries: at least one of: the first application identifier, the first operation type information, first generation time information of the downloaded data, and first valid time information of the downloaded data. ; and / or, (3) the third data upload request also carries: at least one of: a second application identifier, a second operation type information, a second generation time information of the uploaded data, and a second valid time information of the uploaded data; the second application identifier is used to indicate the satellite application service to which the uploaded data belongs; the second operation type information indicates an upload operation; and / or, (4) the first data upload request also carries: at least one of the second application identifier and the second operation type information; and / or, (5) the target satellite request also carries: the satellite application service information; and / or, (6) the authentication vector request also carries: the target satellite information, the target satellite information is used to assist in generating the terminal authentication vector.

[0791] It should be noted here that the above-mentioned device provided in the embodiment of the present application can implement all the method steps implemented in the above-mentioned second core network device side method embodiment, and can achieve the same technical effect. The parts and beneficial effects that are the same as the method embodiment in this embodiment will not be described in detail here.

[0792] The embodiment of the present application also provides a data transmission device, which is applied to a first satellite device, such as Fig.24 As shown, including:

[0793] The third transceiver unit 241 is configured to receive a third data download request sent by the second core network device; the third data download request carries the download data and the SUPI of the first terminal;

[0794] Performing a first data interaction with the first terminal according to the SUPI of the first terminal; the first data interaction comprising: sending the download data to the first terminal;

[0795] Alternatively, performing a second data interaction with the second terminal; the second data interaction comprising: receiving upload data sent by the second terminal and the SUPI of the second terminal;

[0796] According to the second data interaction, sending a third data upload request to the second core network device; the third data upload request carries the SUPI of the second terminal and the upload data;

[0797] The first terminal is the same as or different from the second terminal.

[0798] The data transmission device provided in the embodiment of the present application receives a third data download request sent by a second core network device; the third data download request carries the download data and the SUPI of the first terminal; according to the SUPI of the first terminal, performs a first data interaction with the first terminal; the first data interaction includes: sending the download data to the first terminal; or performing a second data interaction with the second terminal; the second data interaction includes: receiving the upload data sent by the second terminal and the SUPI of the second terminal; according to the second data interaction, sending a third data upload request to the second core network device; the third data upload request carries the SUPI and upload data of the second terminal; wherein the first terminal is the same as or different from the second terminal; and can support the satellite device to accurately perform transmission processing of relevant data according to the SUPI, thereby solving the problem that the prior art cannot support accurate data transmission in the satellite storage and forwarding scenario.

[0799] Furthermore, the data transmission device also includes: a second receiving unit, used to receive authentication-related information of the target terminal sent by the second core network device before performing a first data interaction with the first terminal according to the SUPI of the first terminal, or before performing a second data interaction with the second terminal; the target terminal is the first terminal or the second terminal; the authentication-related information includes: a terminal context or a terminal authentication vector; the terminal context includes a terminal security context; a first interaction unit, used to perform authentication interaction with the target terminal according to the authentication-related information; the first data interaction with the first terminal according to the SUPI of the first terminal includes: if the first terminal is authenticated, performing a first data interaction with the first terminal according to the SUPI of the first terminal; the second data interaction with the second terminal includes: if the second terminal is authenticated, performing a second data interaction with the second terminal.

[0800] The third data download request further carries: first information, the first information including: at least one of a first application identifier, first operation type information, first generation time information of the downloaded data, and first valid time information of the downloaded data; the first application identifier is used to indicate a satellite application service to which the downloaded data belongs; the first operation type information indicates a download operation; the data transmission device further includes: a first storage unit, used to store second information corresponding to a SUPI of the first terminal; the second information includes: the downloaded data, or the downloaded data and the first information; and / or, storing the authentication related information corresponding to the SUPI of the target terminal.

[0801] In an embodiment of the present application, storing the second information in correspondence with the SUPI of the first terminal includes: sending a first storage message to the second satellite device; the first storage message carries: the second information and the SUPI of the first terminal; the data transmission device also includes: a third sending unit, used to send a first acquisition request to the second satellite device according to the SUPI of the first terminal before performing first data interaction with the first terminal according to the SUPI of the first terminal; the first acquisition request carries: the SUPI of the first terminal, or, the SUPI of the first terminal and the first operation type information; a third receiving unit, used to receive a first acquisition response sent by the second satellite device; the first acquisition response carries: the downloaded data, or at least one of the first application identifier, the first operation type information, the first generation time information of the downloaded data, and the first valid time information of the downloaded data, and the downloaded data.

[0802] The first data interaction further includes: sending the first application identifier to the first terminal.

[0803] Further, the data transmission device further includes: a second storage unit, used to store third information corresponding to the SUPI of the second terminal before sending a third data upload request to the second core network device according to the second data interaction; wherein the third information includes: the uploaded data, or at least one of a second application identifier and second operation type information, and the uploaded data; the second application identifier is used to indicate a satellite application service to which the uploaded data belongs; and the second operation type information indicates an upload operation.

[0804] The storing the third information in correspondence with the SUPI of the second terminal includes: sending a second storage message to the second satellite device; the second storage message carries: the third information and the SUPI of the second terminal; the data transmission device also includes: a fourth sending unit, used to send a second acquisition request to the second satellite device according to the SUPI of the second terminal before sending a third data upload request to the second core network device according to the second data interaction; the second acquisition request carries: the SUPI of the second terminal, or, the SUPI of the second terminal and the second operation type information; a fourth receiving unit, used to receive a second acquisition response sent by the second satellite device; the second acquisition response carries: the upload data, or at least one of the second application identifier, the second operation type information, the second generation time information of the upload data and the second valid time information of the upload data, and the upload data.

[0805] Further, the data transmission device also includes: a first determination unit, used to determine at least one of the second generation time information of the uploaded data and the second valid time information of the uploaded data before storing the third information in correspondence with the SUPI of the second terminal; wherein the third information also includes: at least one of the second generation time information and the second valid time information.

[0806] Among them, (1) the third data download request also carries: at least one of: a first application identifier, a first operation type information, a first generation time information of the downloaded data, and a first valid time information of the downloaded data; the first application identifier is used to indicate the satellite application service to which the downloaded data belongs; the first operation type information indicates a download operation; and / or, (2) the third data upload request also carries: a terminal context of the second terminal, the second application identifier, the second operation type information, at least one of a second generation time information of the uploaded data, and a second valid time information of the uploaded data; the terminal context includes a terminal security context.

[0807] Furthermore, the second data interaction also includes: receiving the second application identifier sent by the second terminal.

[0808] It should be noted here that the above-mentioned device provided in the embodiment of the present application can implement all the method steps implemented in the above-mentioned first satellite equipment side method embodiment, and can achieve the same technical effect. The parts and beneficial effects that are the same as the method embodiment in this embodiment will not be described in detail here.

[0809] The embodiment of the present application also provides a data transmission device, which is applied to a second satellite device, such as Fig.25 As shown, including:

[0810] a fifth receiving unit 251, configured to receive a target storage message sent by a first satellite device; the storage message carries: target information, and a SUPI of a target terminal; wherein the target storage message is a first storage message, the target information is second information, and the target terminal is a first terminal; or, the target storage message is a second storage message, the target information is third information, and the target terminal is a second terminal; the first terminal is the same as or different from the second terminal;

[0811] A third storage unit 252 is used to store the target information and the SUPI of the target terminal in correspondence;

[0812] The second information includes: download data, or the download data and the first information; the first information includes: at least one of a first application identifier, first operation type information, first generation time information of the download data, and first valid time information of the download data; the first application identifier is used to indicate the satellite application service to which the download data belongs; the first operation type information indicates a download operation;

[0813] The third information includes: upload data, or at least one of a second application identifier and second operation type information, and the upload data; the second application identifier is used to indicate the satellite application service to which the upload data belongs; and the second operation type information indicates an upload operation.

[0814] The data transmission device provided in the embodiment of the present application receives a target storage message sent by a first satellite device; the storage message carries: target information, and a SUPI of a target terminal; wherein the target storage message is a first storage message, the target information is a second information, and the target terminal is a first terminal; or, the target storage message is a second storage message, the target information is a third information, and the target terminal is a second terminal; the first terminal is the same as or different from the second terminal; the target information and the SUPI of the target terminal are stored in correspondence; wherein the second information includes: downloaded data, or the downloaded data and the first information; the first information includes: a first application identifier, a first operation identifier, The invention relates to a method for transmitting and receiving satellite data in a satellite storage and forwarding scenario, wherein the first application identifier is used to indicate a satellite application service to which the downloaded data belongs; the first operation type information indicates a download operation; the third information includes: upload data, or at least one of a second application identifier and a second operation type information, and the upload data; the second application identifier is used to indicate a satellite application service to which the uploaded data belongs; the second operation type information indicates an upload operation; and the satellite device can be supported to accurately perform transmission processing of relevant data according to the SUPI, thereby solving the problem that the prior art cannot support accurate data transmission in a satellite storage and forwarding scenario.

[0815] Further, the data transmission device also includes: a sixth receiving unit, used to receive a first acquisition request sent by the first satellite device; the first acquisition request carries: the SUPI of the first terminal, or the SUPI of the first terminal and the first operation type information; a fifth sending unit, used to send a first acquisition response to the first satellite device; the first acquisition response carries: the downloaded data, or at least one of the first application identifier, the first operation type information, the first generation time information of the downloaded data, and the first valid time information of the downloaded data, and the downloaded data.

[0816] The third information further includes: at least one of second generation time information of the uploaded data and second valid time information of the uploaded data.

[0817] In an embodiment of the present application, the data transmission device further includes: a seventh receiving unit, configured to receive a second acquisition request sent by the first satellite device; the second acquisition request carries: the SUPI of the second terminal, or the SUPI of the second terminal and the second operation type information; a sixth sending unit, configured to send a second acquisition response to the first satellite device; the second acquisition response carries: the uploaded data, or at least one of the second application identifier, the second operation type information, the second generation time information of the uploaded data, and the second valid time information of the uploaded data, and the uploaded data.

[0818] It should be noted here that the above-mentioned device provided in the embodiment of the present application can implement all the method steps implemented in the above-mentioned second satellite equipment side method embodiment, and can achieve the same technical effect. The parts and beneficial effects that are the same as the method embodiment in this embodiment will not be described in detail here.

[0819] The embodiment of the present application also provides a data transmission device, which is applied to a third core network device, such as Fig.26 As shown, including:

[0820] An eighth receiving unit 261 is configured to receive an authentication vector request sent by a second core network device, where the authentication vector request carries a SUPI of a target terminal, where the target terminal is the first terminal or the second terminal;

[0821] A first generating unit 262 is configured to generate a terminal authentication vector according to the SUPI of the target terminal;

[0822] The first feedback unit 263 is configured to feed back an authentication vector response to the second core network device, where the authentication vector response carries the terminal authentication vector.

[0823] The data transmission device provided in the embodiment of the present application receives an authentication vector request sent by a second core network device, wherein the authentication vector request carries the SUPI of a target terminal, and the target terminal is a first terminal or a second terminal; generates a terminal authentication vector according to the SUPI of the target terminal; feeds back an authentication vector response to the second core network device, wherein the authentication vector response carries the terminal authentication vector; and can support a satellite device to accurately perform transmission processing of relevant data according to the SUPI, thereby solving the problem in the prior art that it is impossible to accurately support data transmission in a satellite storage and forwarding scenario.

[0824] The authentication vector request also carries: authentication vector type indication information, the authentication vector type indication information is used to indicate authentication of the target terminal in a store-and-forward scenario; the terminal authentication vector is an authentication vector used to authenticate the target terminal in the store-and-forward scenario.

[0825] Furthermore, the authentication vector request also carries: target satellite information corresponding to the first satellite device, and the target satellite information is used to assist in generating the terminal authentication vector; wherein the target satellite information is obtained by the second core network device according to the target satellite response fed back by the satellite management function device.

[0826] It should be noted here that the above-mentioned device provided in the embodiment of the present application can implement all the method steps implemented in the above-mentioned third core network device side method embodiment, and can achieve the same technical effect. The parts and beneficial effects that are the same as the method embodiment in this embodiment will not be described in detail here.

[0827] The present application also provides a data transmission device, which is applied to satellite application function equipment, such as Fig. 27 As shown, including:

[0828] The fourth transceiver unit 271 is configured to send a first data download request to the first core network device; the first data download request carries a first user identifier of the first terminal and download data;

[0829] Alternatively, receiving a second data upload request sent by the first core network device; the second data upload request carries a second user identifier of the second terminal and upload data;

[0830] The first terminal is the same as or different from the second terminal.

[0831] The data transmission device provided in the embodiment of the present application sends a first data download request to a first core network device; the first data download request carries a first user identifier and download data of a first terminal; or receives a second data upload request sent by the first core network device; the second data upload request carries a second user identifier and upload data of a second terminal; wherein the first terminal is the same as or different from the second terminal; and can support satellite equipment to accurately perform transmission processing of relevant data according to SUPI, thereby solving the problem that the prior art cannot support accurate data transmission in a satellite storage and forwarding scenario.

[0832] Wherein, (1) the first user identifier includes: a SUPI or an application identifier of the first terminal; and / or, (2) the first data download request further carries: at least one of: a first application identifier, satellite application service information, first operation type information, first generation time information of the download data, and first validity time information of the download data; the first application identifier is used to indicate the satellite application service to which the download data belongs; the satellite application service information includes: auxiliary information used to determine a target satellite providing service for the second data download request; the second data download request is a data download request sent by the first core network device to the second core network device according to the first data download request; the first operation type information indicates a download operation; and / or, (3) the second data upload request further carries: at least one of: a second application identifier and second operation type information; the second application identifier is used to indicate the satellite application service to which the upload data belongs; the second operation type information indicates an upload operation; and / or, (4) the second user identifier includes: a SUPI or an application identifier of the second terminal.

[0833] It should be noted here that the above-mentioned device provided in the embodiment of the present application can implement all the method steps implemented by the above-mentioned satellite application function device side method embodiment, and can achieve the same technical effect. The parts and beneficial effects that are the same as the method embodiment in this embodiment will not be described in detail here.

[0834] The present application also provides a data transmission device, which is applied to a terminal, such as Fig.28 As shown, including:

[0835] The second interaction unit 281 is used to perform data interaction with the first satellite device; the data interaction includes: receiving download data; and / or sending upload data and the SUPI of the terminal to the first satellite device.

[0836] The data transmission device provided in the embodiment of the present application performs data interaction with the first satellite device; the data interaction includes: receiving download data; and / or sending upload data and the SUPI of the terminal to the first satellite device; it can support the satellite device to accurately perform transmission processing of relevant data according to the SUPI, thereby solving the problem that the prior art cannot support accurate data transmission in a satellite storage and forwarding scenario.

[0837] Furthermore, the data transmission device also includes: a third interaction unit, used to perform authentication interaction with the first satellite device before performing data interaction with the first satellite device; the data interaction with the first satellite device includes: performing data interaction with the first satellite device when the terminal authentication is passed.

[0838] Wherein, in the case that the data interaction includes receiving downloaded data, the data interaction further includes: receiving a first application identifier, where the first application identifier is used to indicate a satellite application service to which the downloaded data belongs.

[0839] In the embodiment of the present application, when the data interaction includes sending the upload data and the SUPI of the terminal to the first satellite device, the data interaction also includes: sending a second application identifier to the first satellite device, where the second application identifier is used to indicate the satellite application service to which the upload data belongs.

[0840] It should be noted here that the above-mentioned device provided in the embodiment of the present application can implement all the method steps implemented in the above-mentioned terminal side method embodiment, and can achieve the same technical effect. The parts and beneficial effects of this embodiment that are the same as the method embodiment will not be described in detail here.

[0841] The embodiment of the present application also provides a data transmission device, which is applied to a second core network device, such as Fig.29 As shown, including:

[0842] a seventh sending unit 291, configured to send an authentication vector request to a third core network device according to the SUPI of the target terminal, where the authentication vector request carries the SUPI of the target terminal and authentication vector type indication information, where the authentication vector type indication information is used to indicate that the target terminal is authenticated in a store-and-forward scenario; the target terminal is the first terminal or the second terminal;

[0843] A ninth receiving unit 292, configured to receive an authentication vector response fed back by the third core network device, wherein the authentication vector response carries a terminal authentication vector of the target terminal, and the terminal authentication vector is an authentication vector used to authenticate the target terminal in the store-and-forward scenario;

[0844] The eighth sending unit 293 is configured to send the terminal authentication vector to the first satellite device.

[0845] The data transmission device provided in the embodiment of the present application sends an authentication vector request to a third core network device according to the SUPI of the target terminal, wherein the authentication vector request carries the SUPI of the target terminal and authentication vector type indication information, and the authentication vector type indication information is used to indicate that the target terminal is authenticated in a storage and forwarding scenario; the target terminal is a first terminal or a second terminal; an authentication vector response fed back by the third core network device is received, the authentication vector response carries a terminal authentication vector of the target terminal, and the terminal authentication vector is an authentication vector used to authenticate the target terminal in the storage and forwarding scenario; the terminal authentication vector is sent to a first satellite device; and the satellite device can support authentication interaction with the UE, and then accurately transmit and process relevant data according to the SUPI, thereby solving the problem that the prior art cannot support accurate data transmission in a satellite storage and forwarding scenario.

[0846] Furthermore, the data transmission device also includes: a ninth sending unit, used to send a target satellite request to a satellite management function device before sending the terminal authentication vector to the first satellite device; the target satellite request carries the SUPI of the target terminal; a tenth receiving unit, used to receive a target satellite response fed back by the satellite management function device; the target satellite response carries target satellite information; sending the terminal authentication vector to the first satellite device includes: sending the terminal authentication vector to the first satellite device corresponding to the target satellite information.

[0847] The authentication vector request also carries: the target satellite information; the target satellite information is used to assist in generating the terminal authentication vector.

[0848] It should be noted here that the above-mentioned device provided in the embodiment of the present application can implement all the method steps implemented in the above-mentioned second core network device side method embodiment, and can achieve the same technical effect. The parts and beneficial effects that are the same as the method embodiment in this embodiment will not be described in detail here.

[0849] The embodiment of the present application also provides a data transmission device, which is applied to a first satellite device, such as Fig.30 As shown, including:

[0850] An eleventh receiving unit 301 is configured to receive a terminal authentication vector of a target terminal sent by a second core network device; the target terminal is the first terminal or the second terminal;

[0851] The fourth interaction unit 302 is configured to perform authentication interaction with the target terminal according to the terminal authentication vector.

[0852] The data transmission device provided in the embodiment of the present application receives a terminal authentication vector of a target terminal sent by a second core network device; the target terminal is a first terminal or a second terminal; authentication interaction is performed with the target terminal according to the terminal authentication vector; and it can support authentication interaction between a satellite device and a UE, and then accurately perform transmission processing of relevant data according to SUPI, thereby solving the problem that the prior art cannot support accurate data transmission in a satellite storage and forwarding scenario.

[0853] Furthermore, the data transmission device further includes: a second acquisition unit, configured to acquire the SUPI of the target terminal; and a fourth storage unit, configured to store the terminal authentication vector in correspondence with the SUPI of the target terminal.

[0854] The acquiring the SUPI of the target terminal includes: receiving the SUPI of the first terminal sent by the second core network device; or receiving the SUPI of the second terminal sent by the second terminal.

[0855] In an embodiment of the present application, obtaining the SUPI of the target terminal includes: directly obtaining the SUPI of the target terminal in plain text; or obtaining the SUPI of the target terminal in cipher text; and decrypting the SUPI of the target terminal in cipher text to obtain the SUPI of the target terminal in plain text.

[0856] It should be noted here that the above-mentioned device provided in the embodiment of the present application can implement all the method steps implemented in the above-mentioned first satellite equipment side method embodiment, and can achieve the same technical effect. The parts and beneficial effects that are the same as the method embodiment in this embodiment will not be described in detail here.

[0857] It should be noted that the division of units in the embodiments of the present application is schematic and is only a logical function division. There may be other division methods in actual implementation. In addition, each functional unit in each embodiment of the present application may be integrated into a processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0858] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a processor-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions to enable a computer device (which can be a personal computer, server, or network device, etc.) or a processor (processor) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (Read-Only Memory, ROM), random access memory (Random Access Memory, RAM), disk or optical disk and other media that can store program codes.

[0859] An embodiment of the present application also provides a non-transitory readable storage medium, which stores a computer program, and the computer program is used to enable the processor to execute the method of the first core network device side, the second core network device side, the first satellite device side, the second satellite device side, the third core network device side, the satellite application function device side, or the terminal side.

[0860] The non-transitory readable storage medium can be any available medium or data storage device that can be accessed by the processor, including but not limited to magnetic storage (such as floppy disks, hard disks, magnetic tapes, magneto-optical (MO)), etc.), optical storage (such as compact discs (CD), digital video discs (DVD), Blu-ray discs (BD), high-definition versatile discs (HVD), etc.), and semiconductor memories (such as ROM, erasable programmable read-only memory (EPROM), electrically erasable programmable read only memory (EEPROM), non-volatile memory (NAND (Non-volatile Memory Device) FLASH), solid-state drives (SSD)), etc.

[0861] Among them, the implementation embodiments of the methods on the first core network device side, the second core network device side, the first satellite device side, the second satellite device side, the third core network device side, the satellite application function device side or the terminal side are all applicable to the embodiments of the non-transitory readable storage medium, and can achieve the same technical effect.

[0862] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage and optical storage, etc.) that contain computer-usable program code.

[0863] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer executable instructions. These computer executable instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0864] These processor executable instructions may also be stored in a processor readable memory that can direct a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the processor readable memory produce an article of manufacture including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0865] These processor-executable instructions may also be loaded onto a computer or other programmable data processing device so that a series of operational steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable device to implement the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0866] Obviously, those skilled in the art can make various changes and modifications to the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.

Claims

1. A data transmission method, applied to a first core network device, characterized in that: include: Receiving a first data download request sent by a satellite application function device; The first data download request carries a first user identifier of the first terminal and download data; Sending a second data download request to a second core network device according to the first data download request; the second data download request carries the download data and a user permanent identifier SUPI of the first terminal obtained according to the first user identifier; Alternatively, receiving a first data upload request sent by the second core network device; the first data upload request carries the SUPI of the second terminal and the upload data; According to the first data upload request, sending a second data upload request to the satellite application function device; the second data upload request carries a second user identifier of the second terminal and upload data; The first terminal is the same as or different from the second terminal.

2. The data transmission method according to claim 1, characterized in that: The first user identifier includes: a SUPI or an application identifier of the first terminal; And / or, the first data download request further carries: at least one of: a first application identifier, satellite application service information, first operation type information, first generation time information of the downloaded data, and first valid time information of the downloaded data; the first application identifier is used to indicate the satellite application service to which the downloaded data belongs; the satellite application service information includes: auxiliary information for determining a target satellite providing service for the second data download request; the first operation type information indicates a download operation; And / or, the second data download request further carries: at least one of the first application identifier, the satellite application service information, the first operation type information, the first generation time information and the first valid time information; And / or, the first data upload request further carries: at least one of a second application identifier and second operation type information; the second application identifier is used to indicate the satellite application service to which the uploaded data belongs; the second operation type information indicates an upload operation; And / or, the second data upload request further carries: at least one of the second application identifier and second operation type information; And / or, the second user identifier includes: a SUPI or an application identifier of the second terminal.

3. A data transmission method, applied to a second core network device, characterized in that: include: Receiving a second data download request sent by the first core network device; The second data download request carries the download data and the SUPI of the first terminal; Sending a third data download request to the first satellite device according to the second data download request; the third data download request carries the download data and the SUPI of the first terminal; Alternatively, receiving a third data upload request sent by the first satellite device; the third data upload request carries the SUPI of the second terminal and the upload data; Sending a first data upload request to the first core network device according to the third data upload request; the first data upload request carries the SUPI of the second terminal and the upload data; The first terminal is the same as or different from the second terminal.

4. The data transmission method according to claim 3, characterized in that: Before sending a third data download request to the first satellite device according to the second data download request, or before receiving a third data upload request sent by the first satellite device, the method further includes: Acquire authentication related information of the target terminal according to the SUPI of the target terminal; the target terminal is the first terminal or the second terminal; the authentication related information includes: a terminal context or a terminal authentication vector; the terminal context includes a terminal security context; The authentication-related information is sent to the first satellite device.

5. The data transmission method according to claim 4, characterized in that: Before sending the authentication related information to the first satellite device, the method further includes: Sending a target satellite request to a satellite management function device; the target satellite request carries the SUPI of the target terminal; receiving a target satellite response fed back by the satellite management function device; the target satellite response carries target satellite information; The sending a third data download request to the first satellite device according to the second data download request includes: Sending a third data download request to a first satellite device corresponding to the target satellite information according to the second data download request; The sending the authentication related information to the first satellite device includes: The authentication related information is sent to a first satellite device corresponding to the target satellite information.

6. The data transmission method according to claim 5, characterized in that: The acquiring, according to the SUPI of the target terminal, authentication-related information of the target terminal includes any one of the following: Acquire the stored terminal context locally; Send an authentication vector request to a third core network device, where the authentication vector request carries the SUPI of the target terminal; and receive an authentication vector response fed back by the third core network device according to the SUPI of the target terminal, where the authentication vector response carries the terminal authentication vector.

7. The data transmission method according to claim 6, characterized in that: The authentication vector request also carries: authentication vector type indication information, where the authentication vector type indication information is used to indicate that the target terminal is authenticated in a store-and-forward scenario; The terminal authentication vector is an authentication vector used to authenticate the target terminal in the store-and-forward scenario.

8. The data transmission method according to claim 7, characterized in that: The second data download request also carries at least one of: a first application identifier, satellite application service information, first operation type information, first generation time information of the download data, and first valid time information of the download data; The first application identifier is used to indicate the satellite application service to which the downloaded data belongs; The satellite application service information includes: auxiliary information for determining a target satellite providing service for the second data download request; the first operation type information indicates a download operation; And / or, the third data download request further carries: at least one of: the first application identifier, the first operation type information, the first generation time information of the download data, and the first validity time information of the download data; And / or, the third data upload request further carries: at least one of: a second application identifier, second operation type information, second generation time information of the uploaded data, and second valid time information of the uploaded data; the second application identifier is used to indicate the satellite application service to which the uploaded data belongs; the second operation type information indicates an upload operation; And / or, the first data upload request further carries: at least one of the second application identifier and the second operation type information; And / or, the target satellite request further carries: the satellite application service information; And / or, the authentication vector request further carries: the target satellite information, where the target satellite information is used to assist in generating the terminal authentication vector.

9. A data transmission method, applied to a first satellite device, characterized in that: include: Receiving a third data download request sent by the second core network device; The third data download request carries the download data and the SUPI of the first terminal; performing first data interaction with the first terminal according to the SUPI of the first terminal; The first data interaction includes: sending the download data to the first terminal; Alternatively, performing a second data interaction with the second terminal; the second data interaction comprising: receiving upload data sent by the second terminal and the SUPI of the second terminal; According to the second data interaction, sending a third data upload request to the second core network device; the third data upload request carries the SUPI of the second terminal and the upload data; The first terminal is the same as or different from the second terminal.

10. The data transmission method according to claim 9, characterized in that: Before performing a first data exchange with the first terminal according to the SUPI of the first terminal, or before performing a second data exchange with the second terminal, the method further includes: receiving authentication related information of a target terminal sent by the second core network device; the target terminal is the first terminal or the second terminal; the authentication related information includes: a terminal context or a terminal authentication vector; the terminal context includes a terminal security context; Performing authentication interaction with the target terminal according to the authentication related information; The performing first data interaction with the first terminal according to the SUPI of the first terminal includes: When the first terminal is authenticated successfully, performing first data exchange with the first terminal according to the SUPI of the first terminal; The performing second data interaction with the second terminal includes: When the second terminal passes the authentication, a second data interaction is performed with the second terminal.

11. The data transmission method according to claim 10, characterized in that: The third data download request also carries: first information, the first information including: a first application identifier, first operation type information, at least one of first generation time information of the downloaded data and first valid time information of the downloaded data; the first application identifier is used to indicate the satellite application service to which the downloaded data belongs; the first operation type information indicates a download operation; The data transmission method further comprises: storing second information corresponding to the SUPI of the first terminal; the second information comprising: the downloaded data, or the downloaded data and the first information; and / or, storing the authentication related information in correspondence with the SUPI of the target terminal.

12. The data transmission method according to claim 11, characterized in that: The storing the second information in correspondence with the SUPI of the first terminal includes: Sending a first stored message to a second satellite device; wherein the first stored message carries: the second information and the SUPI of the first terminal; Before performing first data interaction with the first terminal according to the SUPI of the first terminal, the method further includes: Sending a first acquisition request to the second satellite device according to the SUPI of the first terminal; the first acquisition request carries: the SUPI of the first terminal, or the SUPI of the first terminal and the first operation type information; Receive a first acquisition response sent by the second satellite device; the first acquisition response carries: the downloaded data, or at least one of the first application identifier, the first operation type information, the first generation time information of the downloaded data and the first valid time information of the downloaded data, and the downloaded data.

13. The data transmission method according to claim 11, characterized in that: The first data interaction further includes: Send the first application identifier to the first terminal.

14. The data transmission method according to claim 9, characterized in that: Before sending a third data upload request to the second core network device according to the second data interaction, the method further includes: storing the third information in correspondence with the SUPI of the second terminal; The third information includes: the uploaded data, or at least one of a second application identifier and second operation type information, and the uploaded data; the second application identifier is used to indicate the satellite application service to which the uploaded data belongs; and the second operation type information indicates an upload operation.

15. The data transmission method according to claim 14, characterized in that: The storing the third information in correspondence with the SUPI of the second terminal includes: Sending a second stored message to the second satellite device; the second stored message carries: the third information and the SUPI of the second terminal; Before sending a third data upload request to the second core network device according to the second data interaction, the method further includes: Sending a second acquisition request to the second satellite device according to the SUPI of the second terminal; the second acquisition request carries: the SUPI of the second terminal, or the SUPI of the second terminal and the second operation type information; Receive a second acquisition response sent by the second satellite device; the second acquisition response carries: the uploaded data, or at least one of the second application identifier, the second operation type information, the second generation time information of the uploaded data and the second valid time information of the uploaded data, and the uploaded data.

16. The data transmission method according to claim 15, characterized in that: Before storing the third information in correspondence with the SUPI of the second terminal, the method further includes: Determine at least one of second generation time information of the uploaded data and second valid time information of the uploaded data; The third information further includes: at least one of the second generation time information and the second validity time information.

17. The data transmission method according to claim 14, characterized in that: The third data download request also carries: a first application identifier, first operation type information, at least one of first generation time information of the downloaded data and first valid time information of the downloaded data; the first application identifier is used to indicate the satellite application service to which the downloaded data belongs; the first operation type information indicates a download operation; And / or, the third data upload request also carries: at least one of the terminal context of the second terminal, the second application identifier, the second operation type information, the second generation time information of the uploaded data, and the second valid time information of the uploaded data; the terminal context includes the terminal security context.

18. The data transmission method according to claim 14, characterized in that: The second data interaction further includes: Receive the second application identifier sent by the second terminal.

19. A data transmission method, applied to a second satellite device, characterized in that: include: receiving a target storage message sent by a first satellite device; The stored message carries: target information, and SUPI of the target terminal; wherein the target stored message is a first stored message, the target information is second information, and the target terminal is a first terminal; or, the target stored message is a second stored message, the target information is third information, and the target terminal is a second terminal; the first terminal is the same as or different from the second terminal; storing the target information and the SUPI of the target terminal in correspondence; The second information includes: download data, or the download data and the first information; the first information includes: at least one of a first application identifier, first operation type information, first generation time information of the download data, and first valid time information of the download data; the first application identifier is used to indicate the satellite application service to which the download data belongs; the first operation type information indicates a download operation; The third information includes: upload data, or at least one of a second application identifier and second operation type information, and the upload data; the second application identifier is used to indicate the satellite application service to which the upload data belongs; and the second operation type information indicates an upload operation.

20. The data transmission method according to claim 19, characterized in that: Also includes: Receiving a first acquisition request sent by the first satellite device; The first acquisition request carries: the SUPI of the first terminal, or the SUPI of the first terminal and the first operation type information; A first acquisition response is sent to the first satellite device; the first acquisition response carries: the downloaded data, or at least one of the first application identifier, the first operation type information, the first generation time information of the downloaded data and the first valid time information of the downloaded data, and the downloaded data.

21. The data transmission method according to claim 19, characterized in that: The third information further includes at least one of second generation time information of the uploaded data and second valid time information of the uploaded data.

22. The data transmission method according to claim 21, characterized in that: Also includes: receiving a second acquisition request sent by the first satellite device; wherein the second acquisition request carries: the SUPI of the second terminal, or the SUPI of the second terminal and the second operation type information; A second acquisition response is sent to the first satellite device; the second acquisition response carries: the uploaded data, or at least one of the second application identifier, the second operation type information, the second generation time information of the uploaded data and the second valid time information of the uploaded data, and the uploaded data.

23. A data transmission method, applied to a third core network device, characterized in that: include: receiving an authentication vector request sent by the second core network device, where the authentication vector request carries a SUPI of a target terminal, where the target terminal is the first terminal or the second terminal; Generating a terminal authentication vector according to the SUPI of the target terminal; Feedback an authentication vector response to the second core network device, where the authentication vector response carries the terminal authentication vector.

24. The data transmission method according to claim 23, characterized in that: The authentication vector request also carries: authentication vector type indication information, where the authentication vector type indication information is used to indicate that the target terminal is authenticated in a store-and-forward scenario; The terminal authentication vector is an authentication vector used to authenticate the target terminal in the store-and-forward scenario.

25. The data transmission method according to claim 23, characterized in that: The authentication vector request also carries: target satellite information corresponding to the first satellite device, the target satellite information is used to assist in generating the terminal authentication vector; The target satellite information is obtained by the second core network device according to the target satellite response fed back by the satellite management function device.

26. A data transmission method, applied to satellite application function equipment, characterized in that: include: Sending a first data download request to a first core network device; The first data download request carries a first user identifier of the first terminal and download data; Alternatively, receiving a second data upload request sent by the first core network device; the second data upload request carries a second user identifier of the second terminal and upload data; The first terminal is the same as or different from the second terminal.

27. The data transmission method according to claim 26, characterized in that: The first user identifier includes: a SUPI or an application identifier of the first terminal; And / or, the first data download request also carries: at least one of: a first application identifier, satellite application service information, first operation type information, first generation time information of the downloaded data, and first valid time information of the downloaded data; the first application identifier is used to indicate the satellite application service to which the downloaded data belongs; the satellite application service information includes: auxiliary information for determining a target satellite providing service for the second data download request; the second data download request is a data download request sent by the first core network device to the second core network device according to the first data download request; the first operation type information indicates a download operation; And / or, the second data upload request further carries: at least one of a second application identifier and second operation type information; the second application identifier is used to indicate the satellite application service to which the uploaded data belongs; the second operation type information indicates an upload operation; And / or, the second user identifier includes: a SUPI or an application identifier of the second terminal.

28. A data transmission method, applied to a terminal, characterized in that: include: Performing data exchange with the first satellite device; The data interaction includes: receiving download data; and / or, sending upload data and the SUPI of the terminal to the first satellite device.

29. The data transmission method according to claim 28, characterized in that: Before data interaction with the first satellite device, the method further includes: Performing authentication interaction with the first satellite device; The data interaction with the first satellite device includes: When the terminal passes authentication, data is exchanged with the first satellite device.

30. The data transmission method according to claim 28, characterized in that: In the case where the data interaction includes receiving download data, the data interaction further includes: A first application identifier is received, where the first application identifier is used to indicate a satellite application service to which the downloaded data belongs.

31. The data transmission method according to claim 28, characterized in that: In a case where the data interaction includes sending upload data and the SUPI of the terminal to the first satellite device, the data interaction further includes: A second application identifier is sent to the first satellite device, where the second application identifier is used to indicate the satellite application service to which the uploaded data belongs.

32. A data transmission method, applied to a second core network device, characterized in that: include: Sending an authentication vector request to a third core network device according to the SUPI of the target terminal, where the authentication vector request carries the SUPI of the target terminal and authentication vector type indication information, where the authentication vector type indication information is used to indicate that the target terminal is authenticated in a store-and-forward scenario; the target terminal is the first terminal or the second terminal; receiving an authentication vector response fed back by the third core network device, where the authentication vector response carries a terminal authentication vector of the target terminal, where the terminal authentication vector is an authentication vector used to authenticate the target terminal in the store-and-forward scenario; The terminal authentication vector is sent to the first satellite device.

33. The data transmission method according to claim 32, characterized in that: Before sending the terminal authentication vector to the first satellite device, the method further includes: Sending a target satellite request to a satellite management function device; the target satellite request carries the SUPI of the target terminal; receiving a target satellite response fed back by the satellite management function device; the target satellite response carries target satellite information; The sending the terminal authentication vector to the first satellite device includes: The terminal authentication vector is sent to a first satellite device corresponding to the target satellite information.

34. The data transmission method according to claim 33, characterized in that: The authentication vector request also carries: the target satellite information; the target satellite information is used to assist in generating the terminal authentication vector.

35. A data transmission method, applied to a first satellite device, characterized in that: include: Receiving a terminal authentication vector of a target terminal sent by a second core network device; The target terminal is the first terminal or the second terminal; Perform authentication interaction with the target terminal according to the terminal authentication vector.

36. The data transmission method according to claim 35, characterized in that: Also includes: Obtaining the SUPI of the target terminal; The terminal authentication vector is stored correspondingly to the SUPI of the target terminal.

37. The data transmission method according to claim 36, characterized in that: The acquiring the SUPI of the target terminal includes: receiving a SUPI of the first terminal sent by the second core network device; Alternatively, receiving the SUPI of the second terminal sent by the second terminal.

38. The data transmission method according to claim 36, characterized in that: The acquiring the SUPI of the target terminal includes: directly obtaining the SUPI of the target terminal in plain text; Alternatively, the SUPI of the target terminal in ciphertext form is obtained; and the SUPI of the target terminal in ciphertext form is decrypted to obtain the SUPI of the target terminal in plaintext form.

39. A data transmission device, the data transmission device being a first core network device, characterized in that: Including memory, transceiver, processor: A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations: Receiving, by the transceiver, a first data download request sent by the satellite application function device; the first data download request carries a first user identifier of the first terminal and download data; According to the first data download request, sending a second data download request to the second core network device through the transceiver; the second data download request carries the download data and the user permanent identifier SUPI of the first terminal obtained according to the first user identifier; Alternatively, receiving, by the transceiver, a first data upload request sent by the second core network device; the first data upload request carries the SUPI of the second terminal and the upload data; According to the first data upload request, sending a second data upload request to the satellite application function device through the transceiver; the second data upload request carries a second user identifier of the second terminal and upload data; The first terminal is the same as or different from the second terminal.

40. The data transmission device according to claim 39, characterized in that: The first user identifier includes: a SUPI or an application identifier of the first terminal; And / or, the first data download request further carries: at least one of: a first application identifier, satellite application service information, first operation type information, first generation time information of the downloaded data, and first valid time information of the downloaded data; the first application identifier is used to indicate the satellite application service to which the downloaded data belongs; the satellite application service information includes: auxiliary information for determining a target satellite providing service for the second data download request; the first operation type information indicates a download operation; And / or, the second data download request further carries: at least one of the first application identifier, the satellite application service information, the first operation type information, the first generation time information and the first valid time information; And / or, the first data upload request further carries: at least one of a second application identifier and second operation type information; the second application identifier is used to indicate the satellite application service to which the uploaded data belongs; the second operation type information indicates an upload operation; And / or, the second data upload request further carries: at least one of the second application identifier and second operation type information; And / or, the second user identifier includes: a SUPI or an application identifier of the second terminal.

41. A data transmission device, the data transmission device being a second core network device, characterized in that: Including memory, transceiver, processor: A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations: Receiving, by the transceiver, a second data download request sent by the first core network device; the second data download request carries the download data and the SUPI of the first terminal; According to the second data download request, sending a third data download request to the first satellite device through the transceiver; the third data download request carries the download data and the SUPI of the first terminal; Alternatively, receiving, by the transceiver, a third data upload request sent by the first satellite device; the third data upload request carries the SUPI of the second terminal and the upload data; According to the third data upload request, sending a first data upload request to the first core network device through the transceiver; the first data upload request carries the SUPI of the second terminal and the upload data; The first terminal is the same as or different from the second terminal.

42. The data transmission device according to claim 41, characterized in that: The operations also include: Before sending a third data download request to the first satellite device through the transceiver according to the second data download request, or before receiving a third data upload request sent by the first satellite device, obtaining authentication related information of the target terminal according to the SUPI of the target terminal; the target terminal is the first terminal or the second terminal; the authentication related information includes: a terminal context or a terminal authentication vector; the terminal context includes a terminal security context; The authentication related information is sent to the first satellite device through the transceiver.

43. The data transmission device according to claim 42, characterized in that: The operations also include: Before sending the authentication related information to the first satellite device, sending a target satellite request to a satellite management function device through the transceiver; the target satellite request carries the SUPI of the target terminal; receiving, by the transceiver, a target satellite response fed back by the satellite management function device; the target satellite response carries target satellite information; The step of sending a third data download request to the first satellite device through the transceiver according to the second data download request includes: According to the second data download request, sending a third data download request to the first satellite device corresponding to the target satellite information through the transceiver; The sending the authentication related information to the first satellite device includes: The authentication related information is sent to a first satellite device corresponding to the target satellite information.

44. The data transmission device according to claim 43, characterized in that: The acquiring, according to the SUPI of the target terminal, authentication-related information of the target terminal includes any one of the following: Acquire the stored terminal context locally; An authentication vector request is sent to a third core network device through the transceiver, where the authentication vector request carries the SUPI of the target terminal; and an authentication vector response fed back by the third core network device according to the SUPI of the target terminal is received through the transceiver, where the authentication vector response carries the terminal authentication vector.

45. The data transmission device according to claim 44, characterized in that: The authentication vector request also carries: authentication vector type indication information, where the authentication vector type indication information is used to indicate that the target terminal is authenticated in a store-and-forward scenario; The terminal authentication vector is an authentication vector used to authenticate the target terminal in the store-and-forward scenario.

46. ​​The data transmission device according to claim 45, characterized in that: The second data download request also carries at least one of: a first application identifier, satellite application service information, first operation type information, first generation time information of the download data, and first valid time information of the download data; The first application identifier is used to indicate the satellite application service to which the downloaded data belongs; The satellite application service information includes: auxiliary information for determining a target satellite providing service for the second data download request; the first operation type information indicates a download operation; And / or, the third data download request further carries: at least one of: the first application identifier, the first operation type information, the first generation time information of the download data, and the first validity time information of the download data; And / or, the third data upload request further carries: at least one of: a second application identifier, second operation type information, second generation time information of the uploaded data, and second valid time information of the uploaded data; the second application identifier is used to indicate the satellite application service to which the uploaded data belongs; the second operation type information indicates an upload operation; And / or, the first data upload request further carries: at least one of the second application identifier and the second operation type information; And / or, the target satellite request further carries: the satellite application service information; And / or, the authentication vector request further carries: the target satellite information, where the target satellite information is used to assist in generating the terminal authentication vector.

47. A data transmission device, the data transmission device being a first satellite device, characterized in that: Including memory, transceiver, processor: A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations: Receiving, by the transceiver, a third data download request sent by the second core network device; the third data download request carries the download data and the SUPI of the first terminal; performing first data interaction with the first terminal through the transceiver according to the SUPI of the first terminal; The first data interaction includes: sending the download data to the first terminal; Alternatively, performing a second data interaction with a second terminal through the transceiver; the second data interaction includes: receiving upload data sent by the second terminal and the SUPI of the second terminal; According to the second data interaction, sending a third data upload request to the second core network device through the transceiver; the third data upload request carries the SUPI of the second terminal and the upload data; The first terminal is the same as or different from the second terminal.

48. The data transmission device according to claim 47, characterized in that: The operations also include: Before performing a first data interaction with the first terminal through the transceiver according to the SUPI of the first terminal, or before performing a second data interaction with the second terminal, receiving, through the transceiver, authentication related information of a target terminal sent by the second core network device; the target terminal is the first terminal or the second terminal; the authentication related information includes: a terminal context or a terminal authentication vector; the terminal context includes a terminal security context; Performing authentication interaction with the target terminal according to the authentication related information; The performing first data interaction with the first terminal through the transceiver according to the SUPI of the first terminal includes: When the first terminal passes authentication, performing first data exchange with the first terminal through the transceiver according to the SUPI of the first terminal; The performing second data interaction with the second terminal includes: When the second terminal passes the authentication, a second data interaction is performed with the second terminal.

49. The data transmission device according to claim 48, characterized in that The third data download request also carries: first information, the first information including: a first application identifier, first operation type information, at least one of first generation time information of the downloaded data and first valid time information of the downloaded data; the first application identifier is used to indicate the satellite application service to which the downloaded data belongs; the first operation type information indicates a download operation; The operations also include: storing second information corresponding to the SUPI of the first terminal; the second information comprising: the downloaded data, or the downloaded data and the first information; and / or, storing the authentication related information in correspondence with the SUPI of the target terminal.

50. The data transmission device according to claim 49, characterized in that: The storing the second information in correspondence with the SUPI of the first terminal includes: Sending a first stored message to a second satellite device through the transceiver; the first stored message carries: the second information and the SUPI of the first terminal; The operations also include: Before performing a first data exchange with the first terminal through the transceiver according to the SUPI of the first terminal, sending a first acquisition request to the second satellite device through the transceiver according to the SUPI of the first terminal; the first acquisition request carries: the SUPI of the first terminal, or the SUPI of the first terminal and the first operation type information; A first acquisition response sent by the second satellite device is received through the transceiver; the first acquisition response carries: the download data, or at least one of the first application identifier, the first operation type information, the first generation time information of the download data and the first valid time information of the download data, and the download data.

51. The data transmission device according to claim 49, characterized in that: The first data interaction further includes: Send the first application identifier to the first terminal.

52. The data transmission device according to claim 47, characterized in that: The operations also include: Before sending a third data upload request to the second core network device according to the second data interaction, storing the third information in correspondence with the SUPI of the second terminal; The third information includes: the uploaded data, or at least one of a second application identifier and second operation type information, and the uploaded data; the second application identifier is used to indicate the satellite application service to which the uploaded data belongs; and the second operation type information indicates an upload operation.

53. The data transmission device according to claim 52, characterized in that: The storing the third information in correspondence with the SUPI of the second terminal includes: Sending a second stored message to a second satellite device through the transceiver; the second stored message carries: the third information and the SUPI of the second terminal; The operations also include: Before sending a third data upload request to a second core network device through the transceiver according to the second data interaction, sending a second acquisition request to the second satellite device through the transceiver according to the SUPI of the second terminal; the second acquisition request carries: the SUPI of the second terminal, or the SUPI of the second terminal and the second operation type information; A second acquisition response sent by the second satellite device is received through the transceiver; the second acquisition response carries: the uploaded data, or at least one of the second application identifier, the second operation type information, the second generation time information of the uploaded data and the second valid time information of the uploaded data, and the uploaded data.

54. The data transmission device according to claim 53, characterized in that: The operations also include: Before storing the third information in correspondence with the SUPI of the second terminal, determining at least one of second generation time information of the upload data and second validity time information of the upload data; The third information further includes: at least one of the second generation time information and the second validity time information.

55. The data transmission device according to claim 52, characterized in that: The third data download request also carries: a first application identifier, first operation type information, at least one of first generation time information of the downloaded data and first valid time information of the downloaded data; the first application identifier is used to indicate the satellite application service to which the downloaded data belongs; the first operation type information indicates a download operation; And / or, the third data upload request also carries: at least one of the terminal context of the second terminal, the second application identifier, the second operation type information, the second generation time information of the uploaded data, and the second valid time information of the uploaded data; the terminal context includes the terminal security context.

56. The data transmission device according to claim 52, characterized in that: The second data interaction further includes: Receive the second application identifier sent by the second terminal.

57. A data transmission device, the data transmission device being a second satellite device, characterized in that: Including memory, transceiver, processor: A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations: Receiving, by the transceiver, a target stored message sent by a first satellite device; the stored message carries: target information, and a SUPI of a target terminal; wherein the target stored message is a first stored message, the target information is second information, and the target terminal is a first terminal; or, the target stored message is a second stored message, the target information is third information, and the target terminal is a second terminal; the first terminal is the same as or different from the second terminal; storing the target information and the SUPI of the target terminal in correspondence; The second information includes: download data, or the download data and the first information; the first information includes: at least one of a first application identifier, first operation type information, first generation time information of the download data, and first valid time information of the download data; the first application identifier is used to indicate the satellite application service to which the download data belongs; the first operation type information indicates a download operation; The third information includes: upload data, or at least one of a second application identifier and second operation type information, and the upload data; the second application identifier is used to indicate the satellite application service to which the upload data belongs; and the second operation type information indicates an upload operation.

58. The data transmission device according to claim 57, characterized in that: The operations also include: Receiving, by the transceiver, a first acquisition request sent by the first satellite device, wherein the first acquisition request carries: the SUPI of the first terminal, or the SUPI of the first terminal and the first operation type information; A first acquisition response is sent to the first satellite device through the transceiver; the first acquisition response carries: the downloaded data, or at least one of the first application identifier, the first operation type information, the first generation time information of the downloaded data and the first valid time information of the downloaded data, and the downloaded data.

59. The data transmission device according to claim 57, characterized in that: The third information further includes at least one of second generation time information of the uploaded data and second valid time information of the uploaded data.

60. The data transmission device according to claim 59, characterized in that: The operations also include: Receiving, by the transceiver, a second acquisition request sent by the first satellite device, wherein the second acquisition request carries: the SUPI of the second terminal, or the SUPI of the second terminal and the second operation type information; A second acquisition response is sent to the first satellite device through the transceiver; the second acquisition response carries: the uploaded data, or at least one of the second application identifier, the second operation type information, the second generation time information of the uploaded data and the second valid time information of the uploaded data, and the uploaded data.

61. A data transmission device, the data transmission device being a third core network device, characterized in that: Including memory, transceiver, processor: A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations: Receiving, by the transceiver, an authentication vector request sent by the second core network device, where the authentication vector request carries a SUPI of a target terminal, where the target terminal is the first terminal or the second terminal; Generating a terminal authentication vector according to the SUPI of the target terminal; An authentication vector response is fed back to the second core network device through the transceiver, where the authentication vector response carries the terminal authentication vector.

62. The data transmission device according to claim 61, characterized in that: The authentication vector request also carries: authentication vector type indication information, where the authentication vector type indication information is used to indicate that the target terminal is authenticated in a store-and-forward scenario; The terminal authentication vector is an authentication vector used to authenticate the target terminal in the store-and-forward scenario.

63. The data transmission device according to claim 61, characterized in that: The authentication vector request also carries: target satellite information corresponding to the first satellite device, the target satellite information is used to assist in generating the terminal authentication vector; The target satellite information is obtained by the second core network device according to the target satellite response fed back by the satellite management function device.

64. A data transmission device, the data transmission device being a satellite application function device, characterized in that: Including memory, transceiver, processor: A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations: Sending a first data download request to a first core network device through the transceiver; the first data download request carries a first user identifier of the first terminal and download data; Alternatively, receiving, by the transceiver, a second data upload request sent by the first core network device; the second data upload request carries a second user identifier of the second terminal and upload data; The first terminal is the same as or different from the second terminal.

65. The data transmission device according to claim 64, characterized in that: The first user identifier includes: a SUPI or an application identifier of the first terminal; And / or, the first data download request also carries: at least one of: a first application identifier, satellite application service information, first operation type information, first generation time information of the downloaded data, and first valid time information of the downloaded data; the first application identifier is used to indicate the satellite application service to which the downloaded data belongs; the satellite application service information includes: auxiliary information for determining a target satellite providing service for the second data download request; the second data download request is a data download request sent by the first core network device to the second core network device according to the first data download request; the first operation type information indicates a download operation; And / or, the second data upload request further carries: at least one of a second application identifier and second operation type information; the second application identifier is used to indicate the satellite application service to which the uploaded data belongs; the second operation type information indicates an upload operation; And / or, the second user identifier includes: a SUPI or an application identifier of the second terminal.

66. A data transmission device, the data transmission device being a terminal, characterized in that: Including memory, transceiver, processor: a memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; A processor is configured to read the computer program in the memory and perform the following operations: Through the transceiver, data interaction is performed with the first satellite device; the data interaction includes: receiving download data; and / or, sending upload data and the SUPI of the terminal to the first satellite device.

67. The data transmission device according to claim 66, characterized in that: The operations also include: Before performing data interaction with the first satellite device, performing authentication interaction with the first satellite device through the transceiver; The data interaction with the first satellite device includes: When the terminal passes authentication, data is exchanged with the first satellite device.

68. The data transmission device according to claim 66, characterized in that: In the case where the data interaction includes receiving download data, the data interaction further includes: A first application identifier is received, where the first application identifier is used to indicate a satellite application service to which the downloaded data belongs.

69. The data transmission device according to claim 66, characterized in that: In a case where the data interaction includes sending upload data and the SUPI of the terminal to the first satellite device, the data interaction further includes: A second application identifier is sent to the first satellite device, where the second application identifier is used to indicate the satellite application service to which the uploaded data belongs.

70. A data transmission device, the data transmission device being a second core network device, characterized in that: Including memory, transceiver, processor: A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations: sending, according to the SUPI of the target terminal, an authentication vector request to a third core network device through the transceiver, where the authentication vector request carries the SUPI of the target terminal and authentication vector type indication information, where the authentication vector type indication information is used to indicate that the target terminal is authenticated in a store-and-forward scenario; the target terminal is the first terminal or the second terminal; Receiving, by the transceiver, an authentication vector response fed back by the third core network device, the authentication vector response carrying a terminal authentication vector of the target terminal, the terminal authentication vector being an authentication vector used to authenticate the target terminal in the store-and-forward scenario; The terminal authentication vector is sent to the first satellite device through the transceiver.

71. The data transmission device according to claim 70, characterized in that: The operations also include: Before sending the terminal authentication vector to the first satellite device, sending a target satellite request to a satellite management function device through the transceiver; the target satellite request carries the SUPI of the target terminal; Receiving, by the transceiver, a target satellite response fed back by the satellite management function device; the target satellite response carries target satellite information; The sending the terminal authentication vector to the first satellite device includes: The terminal authentication vector is sent to a first satellite device corresponding to the target satellite information.

72. The data transmission device according to claim 71, characterized in that: The authentication vector request also carries: the target satellite information; the target satellite information is used to assist in generating the terminal authentication vector.

73. A data transmission device, the data transmission device being a first satellite device, characterized in that: Including memory, transceiver, processor: A memory for storing a computer program; a transceiver for transmitting and receiving data under the control of the processor; and a processor for reading the computer program in the memory and performing the following operations: Receiving, by the transceiver, a terminal authentication vector of a target terminal sent by a second core network device; the target terminal is a first terminal or a second terminal; Perform authentication interaction with the target terminal according to the terminal authentication vector.

74. The data transmission device according to claim 73, characterized in that: The operations also include: Obtaining the SUPI of the target terminal; The terminal authentication vector is stored correspondingly to the SUPI of the target terminal.

75. The data transmission device according to claim 74, characterized in that: The acquiring the SUPI of the target terminal includes: Receiving, by the transceiver, the SUPI of the first terminal sent by the second core network device; Alternatively, receiving the SUPI of the second terminal sent by the second terminal.

76. The data transmission device according to claim 74, characterized in that: The acquiring the SUPI of the target terminal includes: directly obtaining the SUPI of the target terminal in plain text; Alternatively, the SUPI of the target terminal in ciphertext form is obtained; and the SUPI of the target terminal in ciphertext form is decrypted to obtain the SUPI of the target terminal in plaintext form.

77. A data transmission system, characterized in that: include: The first core network device according to any one of claims 39 to 40, the second core network device according to any one of claims 41 to 46, the first satellite device according to any one of claims 47 to 56, the second satellite device according to any one of claims 57 to 60, the third core network device according to any one of claims 61 to 63, the satellite application function device according to any one of claims 64 to 65, and the terminal according to any one of claims 66 to 69; Or, the second core network device as described in any one of claims 70 to 72, and the first satellite device as described in any one of claims 73 to 76.

78. A data transmission device, applied to a first core network device, characterized in that: include: A first transceiver unit, configured to receive a first data download request sent by a satellite application function device; The first data download request carries a first user identifier of the first terminal and download data; Sending a second data download request to a second core network device according to the first data download request; the second data download request carries the download data and a user permanent identifier SUPI of the first terminal obtained according to the first user identifier; Alternatively, receiving a first data upload request sent by the second core network device; the first data upload request carries the SUPI of the second terminal and the upload data; According to the first data upload request, sending a second data upload request to the satellite application function device; the second data upload request carries a second user identifier of the second terminal and upload data; The first terminal is the same as or different from the second terminal.

79. A data transmission device, applied to a second core network device, characterized in that: include: A second transceiver unit, configured to receive a second data download request sent by the first core network device; The second data download request carries the download data and the SUPI of the first terminal; Sending a third data download request to the first satellite device according to the second data download request; the third data download request carries the download data and the SUPI of the first terminal; Alternatively, receiving a third data upload request sent by the first satellite device; the third data upload request carries the SUPI of the second terminal and the upload data; Sending a first data upload request to the first core network device according to the third data upload request; the first data upload request carries the SUPI of the second terminal and the upload data; The first terminal is the same as or different from the second terminal.

80. A data transmission device, applied to a first satellite device, characterized in that: include: A third transceiver unit, configured to receive a third data download request sent by the second core network device; The third data download request carries the download data and the SUPI of the first terminal; performing first data interaction with the first terminal according to the SUPI of the first terminal; The first data interaction includes: sending the download data to the first terminal; Alternatively, performing a second data interaction with the second terminal; the second data interaction comprising: receiving upload data sent by the second terminal and the SUPI of the second terminal; According to the second data interaction, sending a third data upload request to the second core network device; the third data upload request carries the SUPI of the second terminal and the upload data; The first terminal is the same as or different from the second terminal.

81. A data transmission device, applied to a second satellite device, characterized in that: include: A fifth receiving unit, configured to receive a target storage message sent by the first satellite device; The stored message carries: target information, and SUPI of the target terminal; wherein the target stored message is a first stored message, the target information is second information, and the target terminal is a first terminal; or, the target stored message is a second stored message, the target information is third information, and the target terminal is a second terminal; the first terminal is the same as or different from the second terminal; a third storage unit, configured to store the target information and the SUPI of the target terminal in correspondence; The second information includes: download data, or the download data and the first information; the first information includes: at least one of a first application identifier, first operation type information, first generation time information of the download data, and first valid time information of the download data; the first application identifier is used to indicate the satellite application service to which the download data belongs; the first operation type information indicates a download operation; The third information includes: upload data, or at least one of a second application identifier and second operation type information, and the upload data; the second application identifier is used to indicate the satellite application service to which the upload data belongs; and the second operation type information indicates an upload operation.

82. A data transmission device, applied to a third core network device, characterized in that: include: an eighth receiving unit, configured to receive an authentication vector request sent by the second core network device, where the authentication vector request carries a SUPI of a target terminal, where the target terminal is the first terminal or the second terminal; A first generating unit, configured to generate a terminal authentication vector according to the SUPI of the target terminal; The first feedback unit is configured to feed back an authentication vector response to the second core network device, where the authentication vector response carries the terminal authentication vector.

83. A data transmission device, applied to satellite application functional equipment, characterized in that: include: A fourth transceiver unit, configured to send a first data download request to the first core network device; The first data download request carries a first user identifier of the first terminal and download data; Alternatively, receiving a second data upload request sent by the first core network device; the second data upload request carries a second user identifier of the second terminal and upload data; The first terminal is the same as or different from the second terminal.

84. A data transmission device, applied to a terminal, characterized in that: include: A second interaction unit, configured to interact with the first satellite device for data exchange; The data interaction includes: receiving download data; and / or, sending upload data and the SUPI of the terminal to the first satellite device.

85. A data transmission device, applied to a second core network device, characterized in that: include: a seventh sending unit, configured to send an authentication vector request to a third core network device according to the SUPI of the target terminal, where the authentication vector request carries the SUPI of the target terminal and authentication vector type indication information, where the authentication vector type indication information is used to indicate that the target terminal is authenticated in a store-and-forward scenario; the target terminal is the first terminal or the second terminal; a ninth receiving unit, configured to receive an authentication vector response fed back by the third core network device, wherein the authentication vector response carries a terminal authentication vector of the target terminal, and the terminal authentication vector is an authentication vector used to authenticate the target terminal in the store-and-forward scenario; An eighth sending unit is configured to send the terminal authentication vector to the first satellite device.

86. A data transmission device, applied to a first satellite device, characterized in that: include: an eleventh receiving unit, configured to receive a terminal authentication vector of a target terminal sent by a second core network device; The target terminal is the first terminal or the second terminal; A fourth interaction unit is configured to perform authentication interaction with the target terminal according to the terminal authentication vector.

87. A non-transitory readable storage medium, characterized in that The non-transitory readable storage medium stores a computer program, and the computer program is used to cause a processor to execute the method according to any one of claims 1 to 38.

Images