Terminal slice ID security presetting method, system, device and medium

Abstract

The invention discloses a terminal slice ID security presetting method, system and device and a storage medium, and the method comprises the following steps: reading a firmware version number of a terminal module in response to a startup operation of a terminal; based on the firmware version number, determining a target network slice selection auxiliary information identifier of the terminal slice and storing the target network slice selection auxiliary information identifier in a preset storage area; and in response to a first network access request of the terminal, sending the firmware version number to the network management system, so that the network management system selects a network slice selection auxiliary information identifier corresponding to the firmware version number from the preset storage area according to the firmware version number and configures the network slice selection auxiliary information identifier to the base station, thereby realizing mapping of the network slice selection auxiliary information identifier and the private network NG interface. The method can be widely applied to the technical field of communication.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to a method, system, device and storage medium for securely presetting a terminal slice ID. Background Art

[0002] At present, building industry 5G private networks has become a mainstream choice for large enterprises such as the State Grid and the National Tobacco Corporation to meet security and reliability needs. By sharing operator base stations and 5GC sinking short slices, customers' perception and application of 5G have changed from a black box to a controllable and manageable one. Since customers cannot accept the direct terminal public network redirection solution, in order to solve the policy restrictions on allocating independent PLMNs to customers, the 5G terminal pre-set slice ID method has begun to be used to implement private network routing.

[0003] When the terminal first registers for network access, it has not yet obtained any instructions or information for selecting a network from the network. Therefore, it is necessary to preset the slice ID in the terminal and map the slice ID with the NG port at the shared base station during the first network registration to ensure that the network access request message is correctly directed to the industry private network.

[0004] At present, the slice ID pre-set in the terminal is planned by the communication operator commissioned by the State Grid and other customers, and written by the original module manufacturer during the testing phase. The security and authorization process is very complicated. At the same time, since different configurations need to be made according to customers and provinces, it is very easy to make mistakes and difficult to tolerate faults later. Therefore, writing at the original module manufacturer has low flexibility. Therefore, there are still technical problems that need to be solved in related technologies. Summary of the invention

[0005] The purpose of this application is to solve one of the technical problems existing in the prior art to at least a certain extent.

[0006] To this end, one purpose of an embodiment of the present application is to provide a terminal slice ID security pre-setting method, system, device and storage medium, which can simplify the 5G terminal access process and improve efficiency.

[0007] In order to achieve the above-mentioned technical objectives, the technical solution adopted by the embodiments of the present application includes: a method for securely presetting a terminal slice ID, comprising the following steps: in response to a power-on operation of the terminal, reading the firmware version number of the terminal module; based on the firmware version number, determining the target network slice selection auxiliary information identifier of the terminal slice and storing it in a preset storage area; in response to the terminal's first network access request, sending the firmware version number to the network management system, so that the network management system selects the network slice selection auxiliary information identifier corresponding to the firmware version number from the preset storage area according to the firmware version number and configures it to the base station, so as to realize the mapping of the network slice selection auxiliary information identifier and the private network NG interface.

[0008] The present application can read the firmware version number of the terminal module in response to the power-on operation of the terminal; determine the target network slice selection auxiliary information identifier of the terminal slice based on the device firmware version number and store it in a preset storage area; send the device firmware version number to the network management system in response to the terminal's first network access request, so that the device network management system selects the device network slice selection auxiliary information identifier corresponding to the device firmware version number from the device preset storage area according to the device firmware version number and configures it to the base station, so as to realize the mapping of the device network slice selection auxiliary information identifier and the private network NG interface. The present application can simplify the 5G terminal access process and improve efficiency.

[0009] In addition, according to the method for securely presetting a terminal slice ID in the above embodiment of the present invention, the following additional technical features may also be provided:

[0010] Further, in an embodiment of the present application, determining the target network slice selection auxiliary information identifier of the terminal slice based on the firmware version number and storing it in a preset storage area specifically includes:

[0011] Configure the preset mapping relationship table;

[0012] Based on the mapping relationship table and the firmware version number, the target network slice selection auxiliary information identifier is determined and stored in a preset storage area.

[0013] Furthermore, in an embodiment of the present application, the network slice selection auxiliary information identifier includes a slice / service type identifier and a slice distinguisher.

[0014] Furthermore, in an embodiment of the present application, the slice / service type identifier is an 8-bit identifier.

[0015] Furthermore, in an embodiment of the present application, the slice distinguisher is a 24-bit identifier.

[0016] Furthermore, in the embodiment of the present application, the terminal module is a module with open permissions, preset instructions written into the zone, and an activated flag bit.

[0017] Further, in an embodiment of the present application, in response to the first network access request of the terminal, sending the firmware version number to the network management system, so that the network management system selects the network slice selection auxiliary information identifier corresponding to the firmware version number from the preset storage area according to the firmware version number and configures it to the base station, specifically including:

[0018] In response to the first network access request of the terminal, sending the firmware version number to the network management system;

[0019] The network management system parses the target number of the firmware version number, and selects an identifier with the same serial number as the target number from several network slice selection auxiliary information identifiers in the preset storage area as the network slice selection auxiliary information identifier.

[0020] On the other hand, an embodiment of the present application also provides a terminal slice ID security presetting system, including:

[0021] A first processing unit, configured to read a firmware version number of a terminal module in response to a power-on operation of the terminal;

[0022] A second processing unit, configured to determine a target network slice selection auxiliary information identifier for a terminal slice based on the firmware version number and store the identifier in a preset storage area;

[0023] The third processing unit is used to send the firmware version number to the network management system in response to the terminal's first network access request, so that the network management system selects the network slice selection auxiliary information identifier corresponding to the firmware version number from the preset storage area according to the firmware version number and configures it into the base station to realize the mapping of the network slice selection auxiliary information identifier and the private network NG interface.

[0024] On the other hand, the present application also provides a terminal slice ID security presetting device, including:

[0025] at least one processor;

[0026] at least one memory for storing at least one program;

[0027] When the at least one program is executed by the at least one processor, the at least one processor implements a terminal slice ID security preset method as described in any one of the invention contents.

[0028] In addition, the present application also provides a computer-readable storage medium, which stores processor-executable instructions, and the processor-executable instructions are used to execute a terminal slice ID security preset method as described in any one of the above items when executed by the processor.

[0029] The advantages and benefits of the present application will be partially given in the following description, and partially become apparent from the following description, or be understood through the practice of the present application:

[0030] This application can respond to the power-on operation of the terminal, read the firmware version number of the terminal module; based on the device firmware version number, determine the target network slice selection auxiliary information identifier of the terminal slice and store it in the preset storage area; in response to the first network access request of the terminal, send the device firmware version number to the network management system, so that the device network management system selects the device network slice selection auxiliary information identifier corresponding to the device firmware version number from the device preset storage area according to the device firmware version number and configures it to the base station, so as to realize the mapping of the device network slice selection auxiliary information identifier and the private network NG interface. This application can simplify the 5G terminal access process and improve efficiency. . BRIEF DESCRIPTION OF THE DRAWINGS

[0031] Figure 1 A schematic diagram of the steps of a method for securely presetting a terminal slice ID in a specific embodiment of the present invention;

[0032] Figure 2 A schematic diagram of a step of determining a target network slice selection auxiliary information identifier of a terminal slice based on a firmware version number and storing the identifier in a preset storage area in a specific embodiment of the present invention;

[0033] Figure 3 A schematic diagram of the steps of sending a firmware version number to a network management system in response to an initial network access request of a terminal in a specific embodiment of the present invention, so that the network management system selects a network slice selection auxiliary information identifier corresponding to the firmware version number from a preset storage area according to the firmware version number and configures the identifier into a base station;

[0034] Figure 4 A schematic diagram of the system structure for implementing private network routing in the prior art;

[0035] Figure 5 A schematic diagram of a system structure for implementing private network routing in a specific embodiment of the present invention;

[0036] Figure 6 A schematic diagram of the system structure for implementing private network routing in another specific embodiment of the present invention;

[0037] Figure 7 It is a structural schematic diagram of a terminal slice ID security presetting system in another specific embodiment of the present invention;

[0038] Figure 8 It is a structural schematic diagram of a terminal slice ID security presetting device in a specific embodiment of the present invention. DETAILED DESCRIPTION

[0039] The following describes in detail the embodiments of the present invention in conjunction with the accompanying drawings to illustrate the principles and processes of the terminal slice ID security pre-setting method, system, device and storage medium in the embodiments of the present invention.

[0040] At present, building industry 5G private networks has become a mainstream choice for large enterprises such as the State Grid and the National Tobacco Corporation to meet security and reliability needs. By sharing operator base stations and 5GC sinking short slices, customers' perception and application of 5G have changed from a black box to a controllable and manageable one. Since customers cannot accept the direct terminal public network redirection solution, in order to solve the policy restrictions on allocating independent PLMNs to customers, the 5G terminal pre-set slice ID method has begun to be used to implement private network routing.

[0041] When the terminal first registers for network access, it has not yet obtained any instructions or information for selecting a network from the network. Therefore, when registering for the first time, it is necessary to preset the slice ID in the terminal and map the slice ID with the NG port at the shared base station to ensure that the network access request message is correctly directed to the industry private network.

[0042] At present, the slice ID pre-set in the terminal is planned by the communication operator commissioned by the State Grid and other customers, and written by the original module manufacturer during the testing phase. The security and authorization process is very complicated. At the same time, since different configurations need to be made according to customers and provinces, it is very easy to make mistakes and difficult to tolerate faults later. Therefore, writing at the original module manufacturer has low flexibility. Therefore, there are still technical problems that need to be solved in related technologies.

[0043] In view of the above-mentioned defects of the prior art, Figure 1 , this application provides a terminal slice ID security presetting method. Figure 1 In the method, the method may include the following steps S101-S103.

[0044] S101. In response to a power-on operation of a terminal, a firmware version number of a terminal module is read.

[0045] S102. Based on the firmware version number, determine the target network slice selection auxiliary information identifier of the terminal slice and store it in a preset storage area.

[0046] S103. In response to the terminal's first network access request, the firmware version number is sent to the network management system, so that the network management system selects a network slice selection auxiliary information identifier corresponding to the firmware version number from a preset storage area according to the firmware version number and configures it to the base station, so as to realize the mapping of the network slice selection auxiliary information identifier and the private network NG interface.

[0047] In some feasible embodiments of the present application, the processor may first establish a wired or wireless connection with the acquisition module. After the connection is established, in response to the power-on operation of the terminal, the processor may read the firmware version number of the terminal module. Then based on the firmware version number, the processor may determine the target network slice selection auxiliary information identifier of the terminal slice and store it in a preset storage area. Finally, in response to the terminal's first network access request, the firmware version number is sent to the network management system, so that the network management system selects the network slice selection auxiliary information identifier corresponding to the firmware version number from the preset storage area according to the firmware version number and configures it to the base station, so as to realize the mapping of the network slice selection auxiliary information identifier and the private network NG interface.

[0048] It should be noted that the above-mentioned wired connection method may include a connection between a mobile device and a processing module, and may also include a connection between a processing module and a hardware device, as well as a wired connection between other devices currently known or to be developed in the future and the processing module; and the above-mentioned wireless connection method may include but is not limited to 3G / 4G / 5G connection, WiFi connection, Bluetooth connection, WiMAX connection, Zigbee connection, UWB (Ultra Wide Band) connection, and other wireless connection methods currently known or to be developed in the future.

[0049] The present application can read the firmware version number of the terminal module in response to the power-on operation of the terminal; determine the target network slice selection auxiliary information identifier of the terminal slice based on the device firmware version number and store it in a preset storage area; send the device firmware version number to the network management system in response to the terminal's first network access request, so that the device network management system selects the device network slice selection auxiliary information identifier corresponding to the device firmware version number from the device preset storage area according to the device firmware version number and configures it to the base station, so as to realize the mapping of the device network slice selection auxiliary information identifier and the private network NG interface. The present application can simplify the 5G terminal access process and improve efficiency.

[0050] Further, refer to Figure 2 , Figure 2 This is a schematic diagram of the steps of determining the target network slice selection auxiliary information identifier of the terminal slice based on the firmware version number in the embodiment of the present application and storing it in a preset storage area. Figure 2 In the step, the step specifically includes step S201-step S202.

[0051] S201: Configure a preset mapping relationship table.

[0052] S202. Based on the mapping relationship table and the firmware version number, determine the target network slice selection auxiliary information identifier and store it in a preset storage area.

[0053] In some feasible embodiments of the present application, the processor may be first configured with a preset mapping relationship table. The preset mapping relationship table is a mapping table between a firmware version number and a target network slice selection auxiliary information identifier. It can be obtained through historical data. After obtaining the mapping relationship table, the processor can determine the target network slice selection auxiliary information identifier based on the mapping relationship table and the firmware version number and store it in a preset storage area.

[0054] Furthermore, in some feasible embodiments of the present application, the network slice selection auxiliary information identifier includes a slice / service type identifier and a slice distinguisher.

[0055] Further, in some feasible embodiments of the present application, the slice / service type identifier is an 8-bit identifier.

[0056] Furthermore, in some feasible embodiments of the present application, the slice distinguisher is a 24-bit identifier.

[0057] Furthermore, in some feasible embodiments of the present application, the terminal module is a module with open permissions, preset instructions written into the zone, and an activated flag bit.

[0058] Further, refer to Figure 3 , Figure 3 This is a schematic diagram of the steps of sending a firmware version number to a network management system in response to a first network access request of a terminal in an embodiment of the present application, so that the network management system selects a network slice selection auxiliary information identifier corresponding to the firmware version number from a preset storage area according to the firmware version number and configures it in a base station. Figure 3 In the process, the steps specifically include step S301-step S302.

[0059] S301. In response to a first network access request from a terminal, send a firmware version number to a network management system.

[0060] S302. The network management system parses the target number of the firmware version number, and selects an identifier with the same serial number as the target number from several network slice selection auxiliary information identifiers in a preset storage area as the network slice selection auxiliary information identifier.

[0061] In some feasible embodiments of the present application, in response to the first network access request of the terminal, the processor may send the firmware version number to the network management system. The network management system parses the target number of the firmware version number, and selects an identifier with the same sequence number as the target number from a plurality of network slice selection auxiliary information identifiers in a preset storage area as the network slice selection auxiliary information identifier.

[0062] The following is combined with Figure 4 To Attachment Figure 6 The principle of this application is explained.

[0063] This embodiment provides a method for securely presetting terminal slice IDs based on SDK, the purpose of which is to read the module firmware version number to trigger the operator SDK to write the preset slice ID to the module's NV6044 space when the terminal is initialized, changing the writing of the module before leaving the factory to writing when the terminal is started, and establishing a secure and flexible terminal slice ID presetting method. The method is as follows:

[0064] 1) First, change the default mode of the baseline version of the module, release the NV6044 permission, set the flag num=1 to activate it, so as to support the pre-configuration of the terminal / module mode, which is completed by the original manufacturer of the module before leaving the factory.

[0065] 2) According to the preset slice ID plan, the slice ID is 8-bit SST + 24-bit SD. The SDK of the preset NSSAI ID group is burned into the cloud core module. When the terminal is turned on, the SDK will read the module firmware version number -x and identify the module to be used for the specified private network.

[0066] 3) Based on the identified version number, the SDK selects an NSSAI ID (network slice selection auxiliary information identifier) ​​that is mapped to the firmware version number -x from the preset NSSAI ID group, and writes it to the module NV6044 storage, which can be saved when power is off.

[0067] 4) The network management system selects the xth NSSAI ID mapped to the firmware version number from the NSSAI candidate table according to the module firmware version number -x, configures it to the base station, and implements the mapping between the NSSAI ID and the private network NG port in the base station.

[0068] This application is applicable to private network access scenarios where 5GC is deployed, such as 5G terminal access for short slices of the State Grid.

[0069] In other embodiments, the implementation process of the private network routing system is as follows:

[0070] 1) Open the 5G RedCap chip module, write Mode A to the module's NV6044 storage area, and activate the flag.

[0071] 2) The operator burns the SDK into the module, and the terminal reads the firmware version number and version additional number when it is turned on.

[0072] 3) After the SDK identifies the module of the private network, it calculates the corresponding NSSAI ID. The SDK writes the NSSAI ID into the NV6044 area of ​​the module and saves it.

[0073] According to the mapping relationship between the version additional number and the NSSAI ID group, the network management system determines the corresponding NSSAI ID and sends the configuration to the base station to complete the mapping between the NSSAI ID and the NG port to realize private network routing.

[0074] In summary, the terminal slice ID security presetting method of the present application has the following advantages:

[0075] 1. The operator reads the module firmware version number through the SDK that is burned or commissioned to be burned, identifies the specified private network version number, and presets the slice ID to the specified location of the module, changing the unsafe factor of the existing third-party module original manufacturer writing the NSSAI ID.

[0076] 2. The additional number of the module firmware version number is mapped to the NSSAI ID group, and the additional number specifies the corresponding NSSAI ID in the group. Therefore, by modifying the mapping relationship between the additional number and the NSSAI ID, the preset NSSAI ID value can be flexibly modified.

[0077] 3. Currently, the slice ID preset in the terminal is written into the module by the operator SDK. The NSSAI ID cannot be directly obtained by humans. The security and authorization processes are relatively clear and simple.

[0078] 4. The NSSAI ID group is mapped by appending the version number, making subsequent base station changes to the NSSAI ID and NG port mapping more flexible.

[0079] 5. Possible future application scenarios of this application include:

[0080] 1) More and more industry customers choose to sink 5GC and build industry-specific networks to achieve controllable and manageable. At the same time, in order to reduce construction costs, they choose to share public network base stations and PLMNs, which requires the terminal to correctly select the network when it initially accesses the network.

[0081] 2) Ensure the secure pre-setting of the slice NSSAI ID to prevent attacks on the private network or base station.

[0082] In addition, refer to Figure 7 ,and Figure 1Corresponding to the method, a terminal slice ID security presetting system is also provided in an embodiment of the present application. The system may include a first processing unit 1001, a second processing unit 1002 and a third processing unit 1003. Among them, the first processing unit 1001 can be used to read the firmware version number of the terminal module in response to the power-on operation of the terminal. The second processing unit 1002 can be used to determine the target network slice selection auxiliary information identifier of the terminal slice based on the firmware version number and store it in a preset storage area. The third processing unit 1003 can be used to send the firmware version number to the network management system in response to the terminal's first network access request, so that the network management system selects the network slice selection auxiliary information identifier corresponding to the firmware version number from the preset storage area according to the firmware version number and configures it to the base station, so as to realize the mapping of the network slice selection auxiliary information identifier and the private network NG interface.

[0083] It should be noted that the first processing unit may be any integrated circuit unit or microprocessor unit obtained by integrating a chip having a processing function and its peripheral circuits through existing integration technology. The first processing unit and the second processing unit may also be any integrated circuit module or microprocessor module obtained by integrating a chip having a processing function and its peripheral circuits through existing integration technology. The first processing unit and the second processing unit may also include one or more memories.

[0084] The present application can read the firmware version number of the terminal module in response to the power-on operation of the terminal; determine the target network slice selection auxiliary information identifier of the terminal slice based on the device firmware version number and store it in a preset storage area; send the device firmware version number to the network management system in response to the terminal's first network access request, so that the device network management system selects the device network slice selection auxiliary information identifier corresponding to the device firmware version number from the device preset storage area according to the device firmware version number and configures it to the base station, so as to realize the mapping of the device network slice selection auxiliary information identifier and the private network NG interface. The present application can simplify the 5G terminal access process and improve efficiency.

[0085] and Figure 1 Corresponding to the method, the embodiment of the present application also provides a terminal slice ID security presetting device, the specific structure of which can be referred to Figure 8 ,include:

[0086] at least one processor 1011;

[0087] At least one memory 1012, used to store at least one program;

[0088] When the at least one program is executed by the at least one processor, the at least one processor implements the terminal slice ID security preset method.

[0089] The contents of the above method embodiments are all applicable to the present device embodiments. The functions specifically implemented by the present device embodiments are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0090] and Figure 1 Corresponding to the method, an embodiment of the present application also provides a computer-readable storage medium, which stores processor-executable instructions, and the processor-executable instructions are used to execute the terminal slice ID security preset method when executed by the processor.

[0091] The contents of the above-mentioned terminal slice ID security preset method embodiment are all applicable to the present storage medium embodiment. The functions specifically implemented by the present storage medium embodiment are the same as those of the above-mentioned terminal slice ID security preset method embodiment, and the beneficial effects achieved are also the same as those achieved by the above-mentioned terminal slice ID security preset method embodiment.

[0092] In some optional embodiments, the function / operation mentioned in the block diagram may not occur in the order mentioned in the operation diagram. For example, depending on the function / operation involved, the two boxes shown in succession can actually be executed substantially simultaneously or the boxes can sometimes be executed in reverse order. In addition, the embodiment presented and described in the flow chart of the application is provided by way of example, for the purpose of providing a more comprehensive understanding of technology. The disclosed method is not limited to the operation and logic flow presented herein. Optional embodiments are expected, wherein the order of various operations is changed and the sub-operation described as a part of a larger operation is performed independently.

[0093] In addition, although the present application is described in the context of functional modules, it should be understood that, unless otherwise specified, one or more of the functions and / or features can be integrated into a single physical device and / or software module, or one or more functions and / or features can be implemented in a separate physical device or software module. It is also understood that a detailed discussion of the actual implementation of each module is unnecessary for understanding the present application. More specifically, in view of the properties, functions, and internal relationships of the various functional modules in the device disclosed herein, the actual implementation of the module will be understood within the conventional techniques of the engineer. Therefore, those skilled in the art can implement the present application set forth in the claims without excessive experimentation using ordinary techniques. It is also understood that the specific concepts disclosed are merely illustrative and are not intended to limit the scope of the present application, which is determined by the full scope of the attached claims and their equivalents.

[0094] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium, including several programs to enable a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0095] The logic and / or steps represented in the flowchart or otherwise described herein, for example, may be considered as an ordered list of executable programs for implementing the logical functions, and may be embodied in any computer-readable medium for use by a program execution system, device or apparatus (such as a computer-based system, a system including a processor, or other system that can fetch and execute a program from a program execution system, device or apparatus), or in conjunction with such program execution systems, devices or apparatuses. For purposes of this specification, a "computer-readable medium" may be any device that can contain, store, communicate, propagate or transmit a program for use by a program execution system, device or apparatus, or in conjunction with such program execution systems, devices or apparatuses.

[0096] More specific examples of computer-readable media (a non-exhaustive list) include the following: an electrical connection with one or more wires (electronic device), a portable computer disk case (magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable and programmable read-only memory (EPROM or flash memory), an optical fiber device, and a portable compact disk read-only memory (CDROM). In addition, the computer-readable medium may even be a paper or other suitable medium on which the program is printed, since the program may be obtained electronically, for example, by optically scanning the paper or other medium, followed by editing, deciphering or, if necessary, processing in another suitable manner, and then stored in a computer memory.

[0097] It should be understood that the various parts of the present application can be implemented by hardware, software, firmware or a combination thereof. In the above-mentioned embodiments, multiple steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable program execution system. For example, if implemented by hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or their combination: a discrete logic circuit having a logic gate circuit for implementing a logic function for a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.

[0098] In the above description of this specification, the description with reference to the terms "one embodiment / example", "another embodiment / example" or "certain embodiments / examples" etc. means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present application. In this specification, the schematic representation of the above terms does not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner.

[0099] Although the embodiments of the present application have been shown and described, those skilled in the art will appreciate that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present application, and that the scope of the present application is defined by the claims and their equivalents.

[0100] The above is a specific description of the preferred implementation of the present application, but the present application is not limited to the described embodiments. Technical personnel familiar with the field may make various equivalent modifications or substitutions without violating the spirit of the present application. These equivalent modifications or substitutions are all included in the scope defined by the claims of the present application.

Claims

1. A method for securely presetting a terminal slice ID, characterized in that: The following steps are involved: In response to a power-on operation of the terminal, reading a firmware version number of the terminal module; Based on the firmware version number, determine the target network slice selection auxiliary information identifier of the terminal slice and store it in a preset storage area; In response to the terminal's first network access request, the firmware version number is sent to the network management system, so that the network management system selects the network slice selection auxiliary information identifier corresponding to the firmware version number from the preset storage area according to the firmware version number and configures it into the base station to realize the mapping of the network slice selection auxiliary information identifier and the private network NG interface.

2. According to claim 1, a terminal slice ID security presetting method is characterized in that: The determining, based on the firmware version number, of a target network slice selection auxiliary information identifier for a terminal slice and storing the identifier in a preset storage area specifically includes: Configure the preset mapping relationship table; Based on the mapping relationship table and the firmware version number, the target network slice selection auxiliary information identifier is determined and stored in a preset storage area.

3. According to claim 1, a terminal slice ID security presetting method is characterized in that: The network slice selection auxiliary information identifier includes a slice / service type identifier and a slice distinguisher.

4. According to claim 3, a terminal slice ID security presetting method is characterized in that: The slice / service type identifier is an 8-bit identifier.

5. According to claim 3, a terminal slice ID security presetting method is characterized in that: The slice specifier is a 24-bit identifier.

6. According to claim 1, a terminal slice ID security presetting method is characterized in that: The terminal module is a module with open permissions, preset instructions written into it, and an activated flag bit.

7. According to claim 1, a terminal slice ID security presetting method is characterized in that: The step of responding to the first network access request of the terminal, sending the firmware version number to the network management system, so that the network management system selects the network slice selection auxiliary information identifier corresponding to the firmware version number from the preset storage area according to the firmware version number and configures it into the base station, specifically comprising: In response to the first network access request of the terminal, sending the firmware version number to the network management system; The network management system parses the target number of the firmware version number, and selects an identifier with the same serial number as the target number from several network slice selection auxiliary information identifiers in the preset storage area as the network slice selection auxiliary information identifier.

8. A terminal slice ID security presetting system, characterized in that: include: A first processing unit, configured to read a firmware version number of a terminal module in response to a power-on operation of the terminal; A second processing unit, configured to determine a target network slice selection auxiliary information identifier for a terminal slice based on the firmware version number and store the identifier in a preset storage area; The third processing unit is used to send the firmware version number to the network management system in response to the terminal's first network access request, so that the network management system selects the network slice selection auxiliary information identifier corresponding to the firmware version number from the preset storage area according to the firmware version number and configures it into the base station to realize the mapping of the network slice selection auxiliary information identifier and the private network NG interface.

9. A terminal slice ID security presetting device, characterized in that include: at least one processor; at least one memory for storing at least one program; When the at least one program is executed by the at least one processor, the at least one processor implements a terminal slice ID security preset method as described in any one of claims 1-7.

10. A computer-readable storage medium storing instructions executable by a processor, characterized in that: The processor executable instructions are used to execute a terminal slice ID security preset method as described in any one of claims 1-7 when executed by the processor.

Images