Communication method and communication device

Abstract

The invention provides a communication method and a communication device. The method comprises the following steps: receiving a first task; one or more attributes corresponding to the first task are determined, any two attributes in the one or more attributes correspond to certificates of the same communication resource or certificates of different communication resources, and the certificate of one communication resource corresponds to at least one attribute in the one or more attributes; the certificates of the communication resources are in one-to-one correspondence with the communication resources; and obtaining certificates of one or more communication resources corresponding to the one or more attributes. According to the method provided by the invention, the network side can realize differentiated services for different tasks, so that the user experience is improved.

Description

Technical Field

[0001] The embodiments of the present application relate to the field of wireless communication technology, and more specifically, to a communication method and a communication device. Background Art

[0002] In the scenario where the terminal device acts as the task initiator and initiates tasks to the network side based on different attribute combinations, the network side responds to the task based on the attribute combination provided by the user equipment (UE). Currently, the network side cannot provide differentiated services for different tasks, thereby reducing the user experience. Summary of the invention

[0003] The present application provides a communication method and device to achieve differentiated services for different tasks, thereby improving the user experience.

[0004] In a first aspect, a method is provided, which can be performed by a device (e.g., a communication device). The device can be a device (e.g., a network device), or can be a component of a device (e.g., a chip (e.g., a modem chip, also known as a baseband chip, or a system on chip (SoC) chip or system in package (SIP) chip containing a modem core) or a chip system or circuit), which is not limited in this application. The following mainly takes the first node as an example for explanation.

[0005] The first node is, for example, a service awareness function (SAF).

[0006] The method includes: receiving a first task; determining one or more attributes corresponding to the first task, any two of the one or more attributes correspond to the credentials of the same communication resource or credentials of different communication resources, a credential of a communication resource corresponds to at least one of the one or more attributes, and the credentials of the communication resource correspond to the communication resource one-to-one; obtaining the credentials of one or more communication resources corresponding to the one or more attributes.

[0007] Among them, communication resources refer to a form of dynamic and flexible organization of resources, and communication resources can also be understood as subnets.

[0008] Based on the above scheme, SAF can determine one or more attributes corresponding to the first task and obtain the credentials of the corresponding communication resources. In other words, for different tasks, SAF determines the attributes corresponding to the task according to the specific circumstances of the task. In this way, the network side can provide differentiated services for different tasks, thereby improving the user experience.

[0009] In combination with the first aspect, in some implementations of the first aspect, the method further includes: sending credentials of one or more communication resources to the terminal device; or, sending credentials of a first communication resource to the terminal device, wherein the first communication resource is determined based on one or more communication resources.

[0010] Based on the above scheme, after obtaining the credentials of one or more communication resources corresponding to one or more attributes, SAF sends the credentials of one or more communication resources to the terminal device; or, SAF obtains a first communication resource based on one or more communication resources, and sends the credentials of the first communication resource to the terminal device. In other words, SAF configures exclusive communication resources for the terminal device, thereby further improving the user experience.

[0011] In combination with the first aspect, in some implementations of the first aspect, the method further includes: the SAF determines whether to send the credential of the first communication resource based on the first criterion.

[0012] The first criterion includes one or more of the following: the initiation frequency of the first task and the priority of the terminal device.

[0013] Based on the above scheme, SAF determines whether to configure exclusive communication resources for the terminal device based on the first criterion, thereby improving the user experience and making the communication process more flexible and efficient. For example, if the initiation frequency of the first task is relatively high, SAF configures an exclusive first communication resource for the communication device, and the terminal device can access all communication resources corresponding to the first task using the credentials of the first communication resource.

[0014] In combination with the first aspect, in some implementations of the first aspect, the method further includes: sending query information, wherein the query information includes one or more attributes, and the query information requests to obtain credentials of one or more communication resources.

[0015] Based on the above solution, the SAF obtains the credentials of one or more communication resources by sending query information to other nodes (for example, identity management function (IDM)).

[0016] In combination with the first aspect, in certain implementations of the first aspect, the method also includes: sending a first communication resource creation request, the first communication resource creation request includes a first attribute, the first communication resource creation request is used to request the creation of a second communication resource, the credentials of the second communication resource correspond to the first attribute, and the first attribute belongs to one or more attributes corresponding to the first task.

[0017] Based on the above solution, when the second communication resource does not exist, the SAF sends a first communication resource creation request to other nodes (such as resource management nodes) to request the creation of the second communication resource. In other words, based on the attribute that the network side cannot respond to, the SAF requests the creation of the corresponding communication resource, thereby improving the user experience.

[0018] In combination with the first aspect, in certain implementations of the first aspect, the method also includes: sending a second communication resource creation request, the second communication resource creation request includes information for creating a third communication resource, the second communication resource creation request is used to request the creation of a third communication resource, the credentials of the third communication resource correspond to the second attribute, and the second attribute belongs to one or more attributes corresponding to the first task.

[0019] Based on the above scheme, when the third communication resource does not exist, the SAF sends a second communication resource creation request to other nodes (for example, it may be a resource management node), requesting the creation of a third communication resource, wherein the second communication resource creation request includes information for creating the third communication resource. For example, the SAF determines the information for creating the second communication resource based on the second attribute, thereby avoiding directly carrying the second attribute in the second communication resource creation request, thereby improving the security of the communication process.

[0020] In a second aspect, a method is provided, which can be performed by a device (e.g., a communication device). The device can be a device (e.g., a network device), or can be a component of a device (e.g., a chip (e.g., a modem chip, also known as a baseband chip, or a SoC chip or SIP chip containing a modem core) or a chip system or circuit), which is not limited in this application. The following mainly takes the first node as an example for explanation.

[0021] The first node is, for example, a SAF.

[0022] The method includes: obtaining one or more attributes of a terminal device; wherein any two of the one or more attributes correspond to credentials of the same communication resource or credentials of different communication resources, a credential of a communication resource corresponds to at least one of the one or more attributes, and the credential of a communication resource corresponds to the communication resource one-to-one; determining whether the terminal device holds credentials of communication resources corresponding to one or more attributes; and in the case that the terminal device does not hold credentials of communication resources corresponding to the first attribute, sending the credentials of the communication resource corresponding to the first attribute to the terminal device, the first attribute belonging to the one or more attributes.

[0023] Based on the above scheme, SAF can perform attribute-aware evaluation on one or more attributes of the terminal device. In other words, SAF determines whether the terminal device holds the credentials of communication resources corresponding to one or more attributes. Furthermore, SAF sends the credentials of communication resources that the terminal device does not hold, thereby improving the user experience.

[0024] In combination with the second aspect, in certain implementations of the second aspect, the method further includes: sending a first request message to a terminal device, the first request message requesting to obtain one or more attributes; receiving a first request response message from the terminal device, the first request response message indicating one or more attributes.

[0025] In combination with the second aspect, in some implementations of the second aspect, the method further includes: one or more attributes are determined by the terminal device based on a first attribute criterion.

[0026] Optionally, the first attribute criterion includes one or more of the following: the privacy level of the attribute, and the priority of the attribute.

[0027] Based on the above solution, the terminal device sends one or more attributes to the SAF based on the request of the SAF. Further, the terminal device can selectively send one or more attributes, thereby improving the security of the communication process.

[0028] In combination with the second aspect, in certain implementations of the second aspect, the method also includes: sending a second request message to the terminal device, the second request message requesting the terminal device to authorize the SAF to determine whether the terminal device holds credentials for communication resources corresponding to one or more attributes; receiving a second request response message from the terminal device, the second request response message indicating that the SAF is allowed to determine whether the terminal device holds credentials for communication resources corresponding to one or more attributes; and obtaining one or more attributes based on the second request response message.

[0029] Based on the above solution, when one or more attributes of the UE are stored on the network side, the SAF can perform attribute perception evaluation after obtaining the authorization of the UE, thereby making the communication process more flexible and efficient.

[0030] In combination with the second aspect, in certain implementations of the second aspect, the method also includes: obtaining the credential of the first communication resource and the attributes corresponding to the credential of the first communication resource, wherein the terminal device holds the credential of the first communication resource; and determining whether the terminal device holds the credential of the communication resource corresponding to one or more attributes of the UE based on the credential of the first communication resource and the attributes corresponding to the credential of the first communication resource.

[0031] Optionally, the SAF obtains the credentials of the first communication resource and the attributes corresponding to the credentials of the first communication resource based on the stored data; or, the credentials of the first communication resource and the attributes corresponding to the credentials of the first communication resource are pre-configured; or, the SAF obtains the credentials of the first communication resource and the attributes corresponding to the credentials of the first communication resource from other nodes.

[0032] Based on the above scheme, SAF can obtain the issuance record of the network side by itself, or from other nodes (for example, it can be IDM), so as to determine the certificate of the first communication resource issued by the network side to the UE and its corresponding attributes. Based on this, SAF can further determine whether the UE holds the certificate of the communication resource corresponding to one or more attributes.

[0033] In combination with the second aspect, in some implementations of the second aspect, the method further includes: sending query information, the query information including one or more attributes, and the query information is used to query whether the terminal device holds credentials for communication resources corresponding to the one or more attributes.

[0034] Based on the above scheme, SAF sends query information to other nodes (for example, IDM), and IDM queries whether certificates of communication resources corresponding to one or more attributes have been issued for the terminal device. SAF can directly obtain the query results. In this way, the communication process is more flexible and efficient.

[0035] In a third aspect, a method is provided, which can be performed by a device (e.g., a communication device). The device can be a device (e.g., a terminal device), or can be a component of a device (e.g., a chip (e.g., a modem chip, also known as a baseband chip, or a SoC chip or SIP chip containing a modem core) or a chip system or circuit), which is not limited in this application. The following mainly takes the terminal device as an example for explanation.

[0036] The method includes: receiving first request information, the first request information requests obtaining one or more attributes, wherein any two of the one or more attributes correspond to credentials of the same communication resource or credentials of different communication resources, a credential of a communication resource corresponds to at least one of the one or more attributes, and the credential of the communication resource corresponds to the communication resource one-to-one; sending one or more attributes; and receiving the credential of the communication resource corresponding to the first attribute when the terminal device does not hold the credential of the communication resource corresponding to the first attribute, the first attribute belonging to one or more attributes.

[0037] Based on the above scheme, the terminal device sends one or more attributes to the network side based on the first request information, and the network side performs attribute perception evaluation on the one or more attributes sent by the UE, and the terminal device can obtain the credentials of the communication resource corresponding to the first attribute, that is, the communication device can access the first communication resource, thereby improving the user experience.

[0038] In combination with the third aspect, in some implementations of the third aspect, the method further includes: the terminal device determines one or more attributes based on the first attribute criterion.

[0039] Optionally, the first attribute criterion includes one or more of the following: the privacy level of the attribute, and the priority of the attribute.

[0040] Based on the above scheme, the terminal device can selectively report one or more attributes for attribute perception evaluation. For example, for some attributes with a higher privacy level, the terminal device can choose not to report. In this way, the security of user privacy data can be improved. For another example, for some attributes with a higher priority, the terminal device can choose to report and obtain the credentials of the corresponding communication resources, thereby improving the user experience.

[0041] In a fourth aspect, a method is provided, which can be performed by a device (e.g., a communication device). The device can be a device (e.g., a network device), or can be a component of a device (e.g., a chip (e.g., a modem chip, also known as a baseband chip, or a SoC chip or SIP chip containing a modem core) or a chip system or circuit), which is not limited in this application. The following mainly takes the first node as an example for explanation.

[0042] The first node is, for example, a SAF.

[0043] The method includes: receiving a first task, the first task including credentials of one or more communication resources, the credentials of the communication resources corresponding one-to-one to the communication resources; acquiring a first communication resource based on the first task, the first communication resource being used to execute the first task, wherein the first communication resource does not belong to the one or more communication resources corresponding to the first task; and sending the credentials of the first communication resource to a terminal device.

[0044] Based on the above solution, SAF has the function of parsing the first task. Further, SAF can configure the first communication resource for the first task. In this way, the user experience is further improved.

[0045] In combination with the fourth aspect, in certain implementations of the fourth aspect, the method also includes: sending a first communication resource creation request, the first communication resource creation request is used to request the creation of a first communication resource; receiving a first communication resource creation request response, the first communication resource creation request response indicating the credentials of the first communication resource.

[0046] As a possible implementation manner, the method further includes: the SAF calling the first communication resource from other nodes.

[0047] Based on the above solution, multiple implementation methods for SAF to obtain the first communication resource are provided, so that the solution of the present application can be applicable to more application scenarios.

[0048] In combination with the fourth aspect, in certain implementations of the fourth aspect, the method further includes: sending a first task response to the terminal device, the first task response indicating whether the communication resources corresponding to the credentials of one or more communication resources are configured.

[0049] In a fifth aspect, a communication device is provided, the device being used to execute the method provided in any one of the first to fourth aspects. Specifically, the device may include a unit and / or module, such as a processing unit and / or a communication unit, for executing the method provided in any one of the above implementations of any one of the first to fourth aspects.

[0050] In one implementation, the apparatus is a communication device (such as a terminal device or a network device). When the apparatus is a communication device, the communication unit may be a transceiver or an input / output interface; the processing unit may be at least one processor. Optionally, the transceiver may be a transceiver circuit. Optionally, the input / output interface may be an input / output circuit.

[0051] In another implementation, the device is a chip, a chip system or a circuit used in a communication device. When the device is a chip, a chip system or a circuit used in a communication device, the communication unit may be an input / output interface, an interface circuit, an output circuit, an input circuit, a pin or a related circuit on the chip, the chip system or the circuit; the processing unit may be at least one processor, a processing circuit or a logic circuit.

[0052] In a sixth aspect, a communication device is provided, comprising: a memory for storing programs; and at least one processor for executing computer programs or instructions stored in the memory to execute a method provided in any one of the above-mentioned implementations of any one of the above-mentioned first to fourth aspects.

[0053] In one implementation, the apparatus is a communication device (such as a terminal device or a network device).

[0054] In another implementation, the apparatus is a chip, a chip system or a circuit used in a communication device.

[0055] In a seventh aspect, the present application provides a processor for executing the methods provided in the above aspects.

[0056] For the operations such as sending and acquiring / receiving involved in the processor, unless otherwise specified, or unless they conflict with their actual function or internal logic in the relevant description, they can be understood as operations such as processor output and input, or as sending and receiving operations performed by the radio frequency circuit and antenna, and this application does not limit this.

[0057] In an eighth aspect, a computer-readable storage medium is provided, wherein the computer-readable storage medium is used for a program code executed by a device, and the program code includes a method provided by any one of the above-mentioned implementations of any one of the above-mentioned first to fourth aspects.

[0058] In a ninth aspect, a computer program product comprising instructions is provided. When the instructions included in the computer program product are executed by a processor on a computer, the computer executes the method provided by any one of the above-mentioned implementations of any one of the above-mentioned first to fourth aspects.

[0059] In a tenth aspect, a chip is provided, the chip including a processor and a communication interface, the processor reads instructions stored in a memory through the communication interface, and executes a method provided by any one of the above-mentioned implementation methods of any one of the above-mentioned first to fourth aspects.

[0060] Optionally, as an implementation method, the chip also includes a memory, in which a computer program or instruction is stored, and the processor is used to execute the computer program or instruction stored in the memory. When the computer program or instruction is executed, the processor is used to execute the method provided in any one of the above-mentioned implementation methods of any one of the first to fourth aspects.

[0061] In an eleventh aspect, a communication system is provided, comprising a first communication device and a second communication device, wherein the first communication device is used to execute the method provided in any one of the first, second and fourth aspects, and the second communication device is used to execute the method provided in any one of the third aspects.

[0062] The beneficial effects of the fifth to eleventh aspects and possible implementation methods can be referred to the relevant description of any of the aforementioned aspects and will not be repeated here. BRIEF DESCRIPTION OF THE DRAWINGS

[0063] Figure 1 is a schematic diagram of a wireless communication system applicable to an embodiment of the present application.

[0064] Figure 2 A schematic diagram of the architecture of a basic 5G system 200 is shown.

[0065] Figure 3 It is a schematic diagram of a communication method 300 proposed in an embodiment of the present application.

[0066] Figure 4 It is a schematic diagram of a communication method 400 proposed in an embodiment of the present application.

[0067] Figure 5 It is a schematic diagram of a communication method 500 proposed in an embodiment of the present application.

[0068] Figure 6 It is a schematic diagram of a communication method 600 proposed in an embodiment of the present application.

[0069] Figure 7 It is a schematic diagram of a communication method 700 proposed in an embodiment of the present application.

[0070] Figure 8 It is a schematic block diagram of a communication device 800 provided in an embodiment of the present application.

[0071] Fig. 9 It is a schematic diagram of another communication device 900 provided in an embodiment of the present application.

[0072] Fig.10 It is a schematic block diagram of the chip system 1000 provided in an embodiment of the present application. DETAILED DESCRIPTION

[0073] The technical solution in this application will be described below in conjunction with the accompanying drawings.

[0074] Before introducing the solution of this application, the following points are made.

[0075] (1) In this application, "indication" may include direct indication, indirect indication, explicit indication, implicit indication, and the like. When describing that a certain indication information indicates A, it can be understood that the indication information carries A, carries the identifier of A, carries B associated with A, carries the identifier of B associated with A, and the like. In other words, if the receiving side of a certain indication information can determine A based on the indication information, it can be described as the indication information indicating A, and the specific determination is not limited. When it is understood that the indication information carries A, "indication" can be replaced by "includes". In this case, a statement similar to "send / receive indication information, the indication information indicates A" can be replaced by "send / receive A".

[0076] In the present application, the information indicated by the indication information is referred to as the information to be indicated. In the specific implementation process, there are many ways to indicate the information to be indicated, such as but not limited to, the information to be indicated can be directly indicated, such as the information to be indicated itself or the index of the information to be indicated. The information to be indicated can also be indirectly indicated by indicating other information, wherein there is an association relationship between the other information and the information to be indicated. It is also possible to indicate only a part of the information to be indicated, while the other parts of the information to be indicated are known or agreed in advance. For example, the indication of specific information can also be achieved by means of the arrangement order of each information agreed in advance (for example, specified by the protocol), thereby reducing the indication overhead to a certain extent. In addition, the information to be indicated can be sent as a whole, or it can be divided into multiple sub-information and sent separately, and the sending period and / or sending time of these sub-information can be the same or different.

[0077] (2) In this application, the expression “ / ” is used to indicate that the objects associated with each other are in an “or” relationship; for example, A / B can mean: A or B. The expression “and / or” is used to indicate that the objects associated with each other can be in an and relationship or an or relationship; for example, A and / or B can mean the following situations: A exists alone, B exists alone, and A and B exist at the same time, where A and B can be single or multiple. “At least one of the following” or similar expressions are used to indicate any combination of the listed items; for example, at least one of A, B and / or C can mean the following situations: A exists alone, B exists alone, C exists alone, A and B exist at the same time, B and C exist at the same time, A and C exist at the same time, and A, B and C exist at the same time, where A, B, and C can be single or multiple.

[0078] (3) In this application, "send" and "receive" indicate the direction of signal transmission. For example, "send information to XX" can be understood as the destination of the information is XX, which can include direct sending through the air interface, and also include indirect sending through the air interface by other units or modules. "Receive information from YY" can be understood as the source of the information is YY, which can include direct receiving from YY through the air interface, and also include indirect receiving from YY through the air interface from other units or modules. "Send" can also be understood as the "output" of the chip interface, and "receive" can also be understood as the "input" of the chip interface. In other words, sending and receiving can be performed between devices, for example, between network devices and terminal devices, or can be performed within a device, for example, sending or receiving between components, modules, chips, software modules or hardware modules within the device through a bus, wiring or interface.

[0079] (4) In the various embodiments of the present application, unless otherwise specified or there is a logical conflict, the terms and / or descriptions between the different embodiments are consistent and can be referenced to each other. The technical features in the different embodiments can be combined to form a new embodiment based on their internal logical relationships.

[0080] (5) In this application, "first", "second", "#1", "#2", "#A" are only used for convenience of description to distinguish objects, and are not used to limit the scope of the embodiments of this application. They are not used to describe the order or sequence of features. It should be understood that the objects described in this way can be interchanged where appropriate so as to describe solutions other than the embodiments of this application.

[0081] (6) In this application, "predefined" may mean predefined by a standard protocol, or may mean pre-agreed or pre-negotiated between devices. Wherein, "protocol" may refer to a standard protocol in the field of communications, for example, the fourth generation (4G) th generation, 4G) network, fifth generation (5 th The present application does not limit the 5G network protocol, the new radio (NR) protocol, and related protocols used in future communication networks.

[0082] (7) In this application, the words "exemplarily", "for example", etc. are used to indicate examples, illustrations, or descriptions. Any embodiment or design described as an "example" in this application should not be interpreted as being more preferred or advantageous over other embodiments or designs. Rather, the use of the word "example" is intended to present concepts in a concrete way.

[0083] (8) In this application, the terms “of”, “corresponding”, “relevant”, “corresponding”, and “associated” are sometimes used interchangeably. It should be noted that when the distinction between them is not emphasized, the meanings they intend to express are consistent.

[0084] (9) In the present application, “when”, “if” and “whenever” all mean that the device will take corresponding actions under certain objective circumstances. They do not limit the time, nor do they require that the device must make a judgment when it is implemented, nor do they mean that there are other limitations.

[0085] (10) In this application, "communication resources" refers to a form of dynamic and flexible organization of resources, and its name does not constitute a limitation. For example, "subnet" can also be used to replace the concept of "communication resources". For ease of description, this application uses "subnet" for description, but it should be understood that this application is not limited to this.

[0086] Next, the communication system to which this application is applicable is introduced.

[0087] The technical solution provided in this application can be applied to various communication systems, such as: the fifth generation (5th generation, 5G) or new radio (new radio, NR) system, long term evolution (long term evolution, LTE) system, LTE frequency division duplex (frequency division duplex, FDD) system, LTE time division duplex (time division duplex, TDD) system, etc. The technical solution provided in this application can also be applied to future communication networks. The technical solution provided in this application can also be applied to device to device (D2D) communication, vehicle to everything (V2X) communication, machine to machine (M2M) communication, machine type communication (MTC), and Internet of things (IoT) communication systems. The technical solution provided in this application can also be applied to non-terrestrial network (NTN) systems such as intersatellite communication and satellite communication.

[0088] As an example, a satellite communication system includes a satellite base station and a terminal device. The satellite base station provides communication services for the terminal device. The satellite base station can also communicate with the base station. The satellite can be used as a base station or as a terminal device. Among them, the satellite can refer to a drone, a hot air balloon, a low-orbit satellite, a medium-orbit satellite, a high-orbit satellite, etc. The satellite can also refer to a non-ground base station or non-ground equipment, etc.

[0089] As an example, V2X communication may include: vehicle-to-vehicle (V2V) communication, vehicle-to-roadside infrastructure (V2I) communication, vehicle-to-pedestrian (V2P) communication, and vehicle-to-network (V2N) communication.

[0090] A device in a communication system can send a signal to another device or receive a signal from another device. The signal may include information, signaling, or data. The device may also be replaced by an entity, a network entity, a communication device, a communication module, a node, a communication node, etc. The embodiments of the present application are described by taking the device as an example.

[0091] Figure 1Schematic diagram of a wireless communication system applicable to an embodiment of the present application. Figure 1 As shown, the wireless communication system includes a wireless access network 100. The wireless access network 100 may be a future or higher version wireless access network, or a traditional (e.g., 5G, 4G, 3G, or 2G) wireless access network. One or more terminal devices (120a-120j, collectively referred to as 120) may be connected to each other or to one or more network devices (110a, 110b, collectively referred to as 110) in the wireless access network 100. Network elements in the wireless communication system are connected via interfaces (e.g., NG, Xn) or air interfaces.

[0092] Figure 1 This is just a schematic diagram. The wireless communication system may also include other devices, such as core network devices, wireless relay devices and / or wireless backhaul devices. Figure 1 Not drawn in.

[0093] The following will be combined Figure 2 Briefly describe the 5G system. It should be understood that the 5G system described in this article is only an example and should not constitute any limitation to this application.

[0094] Figure 2 FIG. 2 shows a schematic diagram of the architecture of a basic 5G system 200. Figure 2 As shown, the system 200 includes: PCF, AMF, session management function SMF, radio access network (RAN), unified data management UDM, data network (DN), user plane function (UPF), UE, application function (AF), and / or unified data storage UDR. Optionally, Figure 2 The following functions can also be included ( Figure 2 Not shown): network slice selection function (NSSF), authentication server function AUSF, network open function NEF, or network storage function NRF.

[0095] The main functions of each network element are described as follows:

[0096] 1. Terminal equipment

[0097] The terminal device in the embodiments of the present application may be: UE, mobile station (MS), mobile terminal (MT), access terminal, user unit, user station, mobile station, mobile station, remote station, remote terminal, mobile device, user terminal, terminal, wireless communication equipment, user agent or user device, etc.

[0098] The terminal device may be a device that provides voice / data connectivity to users, such as a handheld device or vehicle-mounted device with wireless connection function. At present, some examples of terminals are: mobile phones, tablet computers, laptop computers, PDAs, mobile internet devices (MID), wearable devices, virtual reality (VR) devices, augmented reality (AR) devices, wireless terminals in industrial control, wireless terminals in self-driving or autopilot, wireless terminals in remote medical surgery, wireless terminals in smart grids, wireless terminals in transportation safety, wireless terminals in smart cities, wireless terminals in smart homes, cellular phones, cordless phones, session initiation protocol (SIP) phones, wireless local loop (WLL) stations, personal digital assistants (PDAs), handheld devices with wireless communication functions, computing devices or other processing devices connected to wireless modems, vehicle-mounted devices, wearable devices, terminal devices in future 5G networks or future evolved public land mobile communication networks (public land mobile communication networks) Mobile network, PLMN) and the like, but the embodiments of the present application are not limited to this.

[0099] As an example but not limitation, in the embodiments of the present application, the terminal device may also be a wearable device. Wearable devices may also be referred to as wearable smart devices, which are a general term for wearable devices that are intelligently designed and developed using wearable technology for daily wear, such as glasses, gloves, watches, clothing and shoes. A wearable device is a portable device that is worn directly on the body or integrated into the user's clothes or accessories. Wearable devices are not only hardware devices, but also powerful functions achieved through software support, data interaction, and cloud interaction. Broadly speaking, wearable smart devices include devices that are fully functional, large in size, and can achieve complete or partial functions without relying on smartphones, such as smart watches or smart glasses, as well as devices that only focus on a certain type of application function and need to be used in conjunction with other devices such as smartphones, such as various types of smart bracelets and smart jewelry for vital sign monitoring. In addition, in the embodiments of the present application, the terminal device may also be a terminal device in an Internet of Things (IoT) system.

[0100] 2. Wireless access network

[0101] The radio access network is an access network that implements access network functions based on wireless communication technology. The radio access network can manage wireless resources, provide wireless access or air interface access services for terminals, and then complete the forwarding of control signals and user data between terminals and the core network.

[0102] As an example but not limitation, the wireless access network can be an evolved NodeB (eNB or eNodeB) in an LTE system, or a wireless controller in a cloud radio access network (CRAN) scenario, or the access device can be a relay station, access point, vehicle-mounted device, wearable device, access device in a 5G network, or access device in a future evolved PLMN network, etc. It can be an access point (AP) in a WLAN, or it can be a gNB in ​​an NR system. The embodiments of the present application are not limited.

[0103] 3. Access and mobility management function (AMF) network element: Mainly used for mobility management and access management, for example, it can be used to implement mobility restriction, initial registration of terminal equipment, mobility registration update, deregistration, registration management, etc.

[0104] 4. Security anchor function (SEAF): This network element is currently part of the AMF and is mainly responsible for initiating authentication requests to the AUSF and completing the network-side authentication of the UE during the EPS-AKA authentication process.

[0105] 5. Authentication server function (AUSF) network element: mainly used for user authentication, etc.

[0106] 6. Authentication Repository and Processing Function (ARPF) network element: mainly used to store the long-term key K; receive the authentication vector request from AUSF; calculate the authentication vector using K; send the authentication vector to AUSF, etc.

[0107] 7. Unified data management (UDM) network element: used for unified data management, 5G user data management, processing user identification, access authentication, registration, or mobility management, etc.

[0108] For example, UDM can perform security authentication in the mobility registration process of the terminal device, exchange contract data with AMF, update the context of the terminal device, etc.

[0109] 8. Session management function (SMF) network element: mainly used for session management, allocation and management of Internet protocol (IP) addresses of terminal devices, selection and management of user plane functions, termination points of policy control and charging function interfaces, and downlink data notification.

[0110] 9. User plane function (UPF) network element: used for packet routing and forwarding and quality of service (QoS) processing of user plane data. User data can be accessed to the data network (DN) through this network element. In the embodiment of the present application, it can be used to implement the functions of the user plane network element.

[0111] 10. Policy control function (PCF) network element: A unified policy framework used to guide network behavior and provide policy rule information to network elements (such as AMF, SMF network elements, etc.) or terminal devices.

[0112] For example, PCF can provide access and mobility policy control services to AMF, which includes providing mobility-related policy rules to AMF and updating mobility-related policy rules.

[0113] 11. Application function (AF) network element: used for data routing affected by applications, accessing network open function network elements, interacting with the policy framework for policy control, etc.

[0114] 12. Network repository function (NRF) network element: used to store description information of network function entities and the services they provide, and support functions such as service discovery and network element entity discovery.

[0115] 13. Network exposure function (NEF) network element: used to securely open the services and capabilities provided by the Third Generation Partnership Project (3GPP) network function to the outside world.

[0116] 14. Data Network

[0117] The data network refers to a specific data service network accessed by the UE, for example, typical DNs include the Internet and IP multimedia subsystem (IPMS).

[0118] In the above architecture, the functions of each interface are described as follows:

[0119] N7: The interface between PCF and SMF, used to deliver PDU session granularity and service data flow granularity control strategy.

[0120] N15: Interface between PCF and AMF, used to deliver UE policies and access control related policies.

[0121] N5: Interface between AF and PCF, used for issuing application service requests and reporting network events.

[0122] N4: The interface between SMF and UPF is used to transmit information between the control plane and the user plane, including the control of the forwarding rules, QoS control rules, traffic statistics rules, etc. for the user plane and the reporting of information on the user plane.

[0123] N11: The interface between SMF and AMF, used to transfer PDU session tunnel information between RAN and UPF, control messages sent to UE, radio resource control information sent to RAN, etc.

[0124] N2: The interface between AMF and RAN, used to transmit radio bearer control information from the core network side to the RAN.

[0125] N1: The interface between AMF and UE, access-independent, used to deliver QoS control rules to UE.

[0126] N8: Interface between AMF and UDM, used by AMF to obtain access and mobility management-related subscription data and authentication data from UDM, and AMF to register UE's current mobility management-related information with UDM.

[0127] N10: The interface between SMF and UDM, used by SMF to obtain session management-related subscription data from UDM, and SMF to register UE current session-related information with UDM.

[0128] N35: Interface between UDM and UDR, used by UDM to obtain user contract data information from UDR.

[0129] N36: Interface between PCF and UDR, used by PCF to obtain policy-related contract data and application data-related information from UDR.

[0130] N52: Interface between UDM and NEF, used by NEF to open network capabilities to third-party application functions. For example, third-party application functions subscribe to reachability events of all users in a specific group from UDM through NEF.

[0131] In addition, NEF also has direct interfaces with AMF and SMF, corresponding to the N29 interface and the N51 interface respectively (not shown in the above figure to simplify the diagram), which are used to open the operator's network capabilities to third-party application functional entities. The former can be used by NEF to directly subscribe to corresponding network events and update user configuration information from AMF, and the latter can be used to update application configuration data on SMF / UPF, such as the packet flow description (PFD) corresponding to the Application ID.

[0132] It should be understood that the above-mentioned network architecture applied to the embodiments of the present application is merely an example of a network architecture described from the perspective of a traditional point-to-point architecture and a service-oriented architecture. The network architecture applicable to the embodiments of the present application is not limited to this. Any network architecture that can realize the functions of the above-mentioned network elements is applicable to the embodiments of the present application.

[0133] It should be understood that Figure 2 The interface name between the network elements is only an example. The interface name in the specific implementation may be other names, and this application does not specifically limit this. In addition, the name of the message (or signaling) transmitted between the above network elements is only an example and does not constitute any limitation on the function of the message itself.

[0134] It should be noted that the above network element may also be referred to as an entity, device, apparatus or module, etc., which is not specifically limited in this application. Moreover, in this application, for the sake of ease of understanding and explanation, the description of the network element is omitted in some descriptions. For example, the SMF network element is referred to as SMF. In this case, the "SMF" should be understood as the SMF network element. Hereinafter, the description of the same or similar situations is omitted.

[0135] It is understandable that the above network element or function can be a network element in a hardware device, a software function running on dedicated hardware, or a virtualized function instantiated on a platform (e.g., a cloud platform). Optionally, the above network element or function can be implemented by one device, or by multiple devices, or by a functional module in one device, which is not specifically limited in the embodiments of the present application.

[0136] It should also be understood that Figure 2 In the communication system shown, the functions of each component network element are only exemplary, and not all functions of each component network element are required when applied in the embodiments of the present application.

[0137] In addition, if Figure 2 The naming of each network element (such as PCF, AMF, etc.) included in is only a name, and the name does not limit the function of the network element itself. In 5G networks and other future networks, the above-mentioned network elements may also have other names, and the embodiments of the present application do not specifically limit this. For example, in future communication networks, some or all of the above-mentioned network elements may use the terminology in 5G, or may be other names, etc., which are uniformly explained here and will not be repeated below.

[0138] It should also be noted that Figure 2 The communication between the various network elements of the control plane function is described by taking the non-service interface as an example, but it does not limit the protection scope of the embodiment of the present application. Those skilled in the art can understand that Figure 2 The various network elements of the control plane function can also communicate through service-based interfaces. For example, the service-based interface provided by AMF to the outside may be Namf; the service-based interface provided by SMF may be Nsmf; the service-based interface provided by UDM to the outside may be Nudm, the service-based interface provided by AF may be Naf; the service-based interface provided by PCF to the outside may be Npcf, and so on.

[0139] Above Figure 2 The network element in the example is based on a reference point architecture and does not constitute a limitation on the embodiments of the present application.

[0140] To facilitate understanding of the embodiments of the present application, a brief description of the terms involved in the present application is given.

[0141] 1. Service awareness function (SAF): mainly used to analyze tasks initiated by UE and assist in configuring subnets.

[0142] 2. Identity management function (IDM): mainly used to store subnet credentials and subnet credential issuance records.

[0143] It should be understood that the network elements (SAF, IDM, NF, AF, NRF, NEF, etc.) involved in the embodiments of the present application are only used as examples, and their names do not limit the scope of protection of the present application. The present application does not exclude the possibility of using other names in future protocols to replace the above-mentioned network elements to achieve the same or similar functions.

[0144] In the existing scheme, the UE, as the task initiator, can initiate tasks to the network side based on different attribute combinations, and the network side responds to the task according to the attribute combination provided by the UE. However, under this scheme, the network side cannot provide differentiated services for different tasks, and in some possible situations, such as when the network side cannot respond to the attributes provided by the UE (for example, the network side cannot provide the corresponding subnet to perform the task), the network side provides default resources to the UE, thereby reducing the user experience.

[0145] In view of this, the present application proposes a method to enable the network side to have the function of parsing tasks, thereby realizing differentiated services for different tasks, thereby improving the user experience.

[0146] The following combination Figures 3 to 7 The method proposed in this application is introduced.

[0147] Figure 3 It is a schematic diagram of a communication method 300 proposed in an embodiment of the present application. The method 300 briefly describes the process of creating a subnet and the process of resource registration.

[0148] Figure 3 It includes UE, SAF, IDM, resource storage node and resource management node.

[0149] The resource storage node is, for example, a network function (NF); or, the resource storage node is, for example, an application function (AF). In other words, the resources involved in the embodiments of the present application may be internal network resources or external application resources, without limitation.

[0150] The resource management node may be, for example, a network repository function (NRF); or, the resource management node may be, for example, a network exposure function (NEF); or, there may be a new resource management node (NRMF), which is not limited.

[0151] The following briefly describes the process of creating a subnet.

[0152] S301, UE sends a subnet creation request, and correspondingly, a resource management node receives the subnet creation request.

[0153] The subnet creation request is used to request the creation of a subnet.

[0154] Specifically, the subnet creation request includes administrator credentials (for example, the ID of the UE), subnet parameters, and verification attributes (claim) corresponding to the subnet. These parameters are briefly introduced below.

[0155] ●Administrator credentials: A unique identifier used to distinguish and verify the identity of the administrator.

[0156] ●Subnet parameters: used to ensure the normal operation of the network. Subnet parameters include subnet mask, IP address, etc.

[0157] ●Verification attributes corresponding to the subnet: that is, the attributes corresponding to the credentials of the subnet, such as user identity attributes, business identification attributes, communication attributes, as well as positioning attributes and visual attributes mentioned later.

[0158] It should be understood that the subnet credential is used to access the subnet, and the subnet credential corresponds to the subnet one-to-one, wherein a subnet credential corresponds to (or includes, or requires verification of) one or more attributes. The subnet credential is briefly introduced in S304.

[0159] S302, the resource management node sends resource request information, and correspondingly, the resource storage node receives the resource request information.

[0160] Specifically, the resource management node sends resource request information to the resource storage node based on the subnet creation request, and the resource request information is used to obtain resources for creating the subnet.

[0161] S303: The resource storage node configures resources for creating a subnet to the resource management node.

[0162] S304, the resource management node sends the subnet's credential, and correspondingly, the IDM receives the subnet's credential.

[0163] Specifically, the resource management node creates a subnet, generates a corresponding subnet credential, and then registers the subnet credential with the IDM.

[0164] The subnet credential represents the authority to access the subnet. Optionally, the subnet credential includes one or more of the following: subnet parameters, attributes corresponding to the subnet credential, and a signature of a resource management node.

[0165] ●Wherein, the credentials of a subnet correspond to one or more attributes.

[0166] ●The resource management node’s signature is used to verify the authenticity of the subnet credential.

[0167] S305, the IDM sends a subnet credential registration response, and correspondingly, the resource management node receives the subnet credential registration response.

[0168] Specifically, the IDM receives the subnet credential sent by the resource management node and registers (or stores) it, and sends a subnet credential registration response to the resource management node, where the subnet credential registration response is used to indicate that the IDM has successfully received the subnet credential.

[0169] S306: The resource management node sends a subnet creation request response, and correspondingly, the UE receives the subnet creation request response.

[0170] The subnet creation request response includes the subnet credential, and the subnet creation request response indicates that the subnet is created successfully.

[0171] The following briefly describes the resource registration process.

[0172] S307, the resource management node sends resource registration information, and correspondingly, the IDM receives the resource registration information.

[0173] The resource registration information includes credentials of one or more subnets, and the resource registration information is used to register resources associated with the credentials of the subnets with the IDM.

[0174] Among them, the resources are resources associated with the credentials of the subnet. In other words, the resources correspond to the credentials of the subnet one by one. For example, credential A is associated with resource #1, credential B is associated with resource #2, and credential C is associated with resource #3.

[0175] S308, the IDM sends resource registration response information, and correspondingly, the resource management node receives the resource registration response information.

[0176] The resource registration response information indicates that the IDM has successfully registered the resource.

[0177] S309, the resource management node sends task registration information, and correspondingly, the SAF receives the task registration information.

[0178] The task registration information includes resources associated with the task, that is, resources used to execute the task.

[0179] Specifically, since a task may correspond to one or more attributes, further, one attribute corresponds to the credential of a subnet, and any two attributes correspond to the credential of the same subnet, or any two attributes correspond to the credentials of different subnets, that is, one task corresponds to the credentials of one or more subnets, then one task corresponds to one or more resources.

[0180] For example, a task (e.g., recorded as task #1) corresponds to two attributes (e.g., recorded as attribute A and attribute B). Taking attribute A and attribute B corresponding to the credential of the same subnet (e.g., recorded as credential #1) as an example, task #1 corresponds to credential #1. Furthermore, credential #1 corresponds to resource #1, so task #1 corresponds to resource #1. In other words, resource #1 is used to execute task #1.

[0181] For another example, task #1 corresponds to two attributes (for example, attribute A and attribute B). Take the example that attribute A and attribute B correspond to different subnet credentials. For example, attribute A corresponds to credential #1, and attribute B corresponds to credential #2. Then task #1 corresponds to two credentials (namely, credential #1 and credential #2). Furthermore, credential #1 corresponds to resource #1, and credential #2 corresponds to resource #2. Then task #1 corresponds to two resources (namely, resource #1 and resource #2). In other words, resource #1 and resource #2 are used to execute task #1.

[0182] S310, the SAF sends task registration response information, and correspondingly, the resource management node receives the task registration response information.

[0183] The task registration response information indicates that the SAF has successfully registered the task.

[0184] Figure 4 It is a schematic diagram of a communication method 400 proposed in an embodiment of the present application.

[0185] S401, IDM performs pre-configuration.

[0186] Exemplarily, the specific process of IDM pre-configuration may include the following:

[0187] ●Complete registration between IDM and UE and establish a secure connection.

[0188] ●IDM stores the subnet credentials that the network side has sent to the UE, such as the content in the aforementioned step S306.

[0189] ●IDM stores the verifiable credentials (VC) of each node. In other words, IDM can verify the authenticity of each node based on the VC of each node, thereby improving communication security.

[0190] ● Establish a secure connection between IDM and service provider (SP).

[0191] ●IDM maintains a list of attribute requests for each APP.

[0192] S402, UE sends task #2, and correspondingly, SAF receives task #2.

[0193] Among them, task #2 includes the ID of the UE.

[0194] Optionally, task #2 also includes a dynamic credential of task #2, and the SAF can determine the authenticity of task #2 based on the dynamic credential.

[0195] The embodiment of the present application does not limit the specific form of the dynamic credential. As a possible implementation method, the dynamic credential is in the form of VC, and the dynamic credential is signed by the SAF according to its own public key.

[0196] The embodiment of the present application does not limit the implementation method for the UE to obtain dynamic credentials. As a possible implementation method, the UE obtains the dynamic credentials from the IDM.

[0197] Optionally, task #2 also includes information #A, where information #A is used to describe task #2, thereby assisting SAF in determining one or more attributes corresponding to task #2.

[0198] For example, task #2 is "family member care", and information #A includes: Task #2 is used to locate family members in real time. Then SAF can determine that task #2 corresponds to at least the positioning attribute (an example of an attribute) and the visual attribute (an example of an attribute) based on information #A. Furthermore, SAF determines that task #2 corresponds to the credentials of the communication perception subnet (an example of a subnet).

[0199] It should be understood that the above is only an exemplary description. The embodiment of the present application does not limit the specific form of task #2A and the specific method for the UE to obtain information #A. As a possible implementation method, the network service party distributes information #A to the UE and SAF through service discovery.

[0200] S403, SAF determines one or more attributes corresponding to task #2.

[0201] Optionally, S403 further includes: the SAF determines the authenticity of task #2 based on the dynamic credential of task #2.

[0202] The embodiment of the present application does not limit the specific method for SAF to determine one or more attributes corresponding to task #2. In one possible implementation method, SAF may determine one or more attributes corresponding to task #2 based on stored data; in another possible implementation method, SAF determines one or more attributes corresponding to task #2 based on indication information.

[0203] S404, SAF sends query information, and correspondingly, IDM receives the query information.

[0204] The query information includes one or more attributes, and the query information is used to query the credentials of the subnet corresponding to the one or more attributes.

[0205] S405, the IDM sends a query response message, and correspondingly, the SAF receives the query response message.

[0206] The query response information includes the credentials of the subnet obtained by the IDM based on one or more attributes.

[0207] The embodiment of the present application does not limit the specific implementation method for the IDM to obtain the subnet credentials. Several possible scenarios are given below.

[0208] A possible scenario: the IDM obtains the subnet credential based on the stored data. For example, the IDM queries the issuance record and obtains the subnet credential issued to the UE based on the issuance record.

[0209] Another possible scenario: the IDM obtains the subnet credential from the resource management node, that is, S405a.

[0210] Exemplarily, S405a may include the following two possible implementations.

[0211] (1) If IDM fails to query the credential (e.g., denoted as credential #A) of the subnet (e.g., denoted as subnet #A) based on the stored data, IDM queries the resource management node whether subnet #A has been created. If subnet #A has been created, IDM sends the UE ID to subnet #A and obtains the credential of the subnet.

[0212] (2) If IDM fails to query the subnet credential based on the storage data and the subnet has not been created, IDM sends a subnet creation request to the resource management node and obtains the subnet credential.

[0213] The embodiment of the present application does not limit the specific content of the subnet creation request sent by the IDM.

[0214] Exemplarily, the subnet corresponding to attribute #1 is not created as an example, and attribute #1 belongs to one or more attributes corresponding to task #2. The subnet creation request includes attribute #1, and the resource management node can determine to create the subnet corresponding to attribute #1 based on the subnet creation request.

[0215] In another possible implementation, the method 400 further includes: the SAF sends a subnet creation request to the resource management node based on the query response information, and obtains the credentials of the subnet.

[0216] Specifically, taking the case where the subnet corresponding to attribute #1 is not created as an example, attribute #1 belongs to one or more attributes corresponding to task #2. When IDM fails to query the credential of the subnet corresponding to attribute #1 based on the stored data, and the subnet corresponding to attribute #1 is not created, SAF cannot obtain the credential of the subnet corresponding to attribute #1 based on the query response information. Then SAF sends a subnet creation request to the resource management node.

[0217] The embodiment of the present application does not limit the specific content of the subnet creation request sent by the SAF.

[0218] In a possible scenario, the subnet creation request includes attribute #1, and the resource management node can determine to create a subnet corresponding to attribute #1 based on the subnet creation request.

[0219] In another possible scenario, the subnet creation request includes information #B, where information #B is determined by SAF based on attribute #1, and information #B is used to create a subnet corresponding to attribute #1. Then the resource management node can create a subnet corresponding to attribute #1 based on information #B.

[0220] The embodiment of the present application does not limit the specific content of information #B, so that the resource management node can create a subnet corresponding to attribute #1 based on information #B.

[0221] The specific process of the resource management node creating a subnet can refer to the content in method 300, which will not be repeated here.

[0222] S406, the SAF sends the credentials of one or more subnets, and correspondingly, the UE receives the credentials of one or more subnets.

[0223] As a possible implementation manner, method 400 also includes S407 - S408 .

[0224] S407, SAF determines to generate subnet #1 based on one or more subnets.

[0225] Further, the SAF determines to generate subnet #1 based on one or more subnets according to criterion #1 (an example of the first criterion), and further, the SAF obtains the credential of subnet #1.

[0226] The embodiments of the present application do not limit the specific content of criterion #1, and an exemplary description is given below.

[0227] (1) Criterion #1 is the initiation frequency of task #2. Specifically, when the initiation frequency of task #2 is greater than or equal to the first threshold, it indicates that the usage frequency of task #2 is high. Then, SAF determines to generate subnet #1 based on one or more subnets, thereby improving the user experience.

[0228] The embodiment of the present application does not limit the specific value of the first threshold and the specific method for SAF to obtain the first threshold. Optionally, the first threshold is configured, or the first threshold is indicated, or the first threshold is predefined.

[0229] (2) Criterion #1 is the priority of the UE. Specifically, when the UE is a high-priority UE, the SAF may determine to generate subnet #1 based on one or more subnets. In other words, a dedicated subnet is created for the UE, thereby improving the user experience.

[0230] Among them, high priority UE and low priority UE are two relative concepts. For example, when the priority of UE#1 is higher than that of UE#2, UE#1 is the high priority UE and UE#2 is the low priority UE.

[0231] The embodiment of the present application does not limit the specific method of generating subnet #1 based on one or more subnets. Optionally, the SAF sends a subnet creation request to the resource management node, and the subnet creation request is used to request the creation of subnet #1 and obtain the credentials of subnet #1, that is, S407a.

[0232] S408, SAF sends the credential of subnet #1, and correspondingly, UE receives the credential of subnet #1.

[0233] S406 and S407-S408 are parallel steps, and only one of them needs to be executed.

[0234] S409, the UE sends a request to execute task #2, and correspondingly, the resource storage node receives the request to execute task #2.

[0235] The task #2 execution request is used to access the resources corresponding to the subnet, thereby executing task #2.

[0236] Specifically, the task #2 execution request includes the credentials of one or more subnets in S406; or, the task #2 execution request includes the credentials of subnet #1 in S408.

[0237] As a possible implementation method, method 400 also includes: the UE generates credential #3 based on the attributes corresponding to the credentials of one or more subnets in S406, for example, the attributes corresponding to the credentials of one or more subnets are recombined to generate credential #3, wherein credential #3 corresponds to one or more subnets. In other words, the UE can access the corresponding one or more subnets based on credential #3, thereby reducing communication overhead.

[0238] As described above, for tasks initiated by UE, SAF has the function of parsing tasks. Then SAF can parse the attributes corresponding to the tasks based on the tasks and send the subnet credentials corresponding to the attributes to the UE, thereby realizing differentiated services for different tasks.

[0239] Figure 5 It is a schematic diagram of a communication method 500 proposed in an embodiment of the present application.

[0240] S501, IDM performs pre-configuration.

[0241] S501 may refer to the content in S401, which will not be repeated here.

[0242] S502, UE sends task #3, and correspondingly, SAF receives task #3.

[0243] Among them, task #3 includes the ID of the UE, and task #3 also includes the credentials of one or more subnets (for example, denoted as subnet #2), wherein subnet #2 is used to execute task #3.

[0244] Optionally, task #3 also includes information #C, which is used to describe task #3, thereby assisting SAF in determining one or more subnets corresponding to task #3. Further, SAF can determine whether the credentials of subnet #2 included in task #3 are compatible with task #3 based on information #C.

[0245] The specific content and acquisition method of information #C may refer to the description of information #A in S402.

[0246] S503, the SAF determines one or more subnets corresponding to task #3 based on task #3 (for example, recorded as subnet #3).

[0247] In one possible scenario, the subnet #3 determined by the SAF is the same as the subnet corresponding to the credential of the subnet #2 included in task #3 in S502.

[0248] In another possible scenario, the subnet #3 determined by the SAF is different from the subnet corresponding to the credential of the subnet #2 included in task #3 in S502.

[0249] S504, SAF sends query information, and correspondingly, IDM receives the query information.

[0250] The query information includes the certificate of subnet #3, and the query information is used to query the issuance record of the certificate of subnet #3.

[0251] S505, the IDM sends a query response message, and correspondingly, the SAF receives the query response message.

[0252] Among them, the query response information includes the credentials of subnet #4.

[0253] Specifically, IDM obtains the certificate of subnet #3 in S504. Further, IDM queries the issuance record of the certificate of subnet #3. In other words, IDM queries whether the certificate of subnet #3 has been issued to the UE, and sends the certificate of the subnet (recorded as subnet #4) where the issuance record exists to SAF.

[0254] S506, SAF determines the credentials of subnet #5.

[0255] Among them, the certificate of subnet #5 is a subnet certificate for which there is no issuance record.

[0256] Specifically, the SAF can determine that there is no subnet credential (ie, the credential of subnet #5) for which there is no issuance record based on the credential of subnet #3 and the credential of subnet #4.

[0257] In the case that subnet #5 includes one or more subnets, method 500 further includes: the SAF obtains subnet #5 and / or the credentials of subnet #5.

[0258] The embodiment of the present application does not limit the specific implementation method for SAF to obtain the credentials of subnet #5 and / or subnet #5. An exemplary description is given below.

[0259] In one possible scenario, when subnet #5 already exists, the SAF obtains subnet #5 and / or the credentials of subnet #5 from other nodes. For example, if subnet #5 is a subnet provided by the network side to other UEs, the SAF can call subnet #5 and obtain the credentials of subnet #5.

[0260] In another possible scenario, the SAF sends a subnet creation request to the resource management node, where the subnet creation request is used to request the creation of subnet #5, that is, S507.

[0261] S507, SAF sends a subnet creation request to the resource management node, requesting to create subnet #5.

[0262] Wherein, subnet #5 includes one or more subnets.

[0263] The embodiment of the present application does not limit the specific content of the subnet creation request.

[0264] In one possible scenario, SAF obtains one or more attributes (for example, recorded as attribute #5) corresponding to the credentials of subnet #5 based on the credentials of subnet #5, then the subnet creation request includes attribute #5, and further, SAF creates subnet #5 based on attribute #5 in the subnet creation request.

[0265] In another possible scenario, the subnet creation request includes information #B, wherein information #B is determined by the SAF based on attribute #5, and information #B is used to create subnet #5. Then, the resource management node can create subnet #5 based on information #B.

[0266] The embodiment of the present application does not limit the specific content of information #B, so that the resource management node can create a subnet corresponding to attribute #5 based on information #B.

[0267] S508, SAF sends a task #3 response, and correspondingly, UE receives a task #3 response.

[0268] Among them, task #3 responds to indicate whether subnet #2 is configured.

[0269] When S507 is executed, the method 500 further includes S509.

[0270] S509: The resource storage node sends the creation result of subnet #5 to the UE.

[0271] Optionally, when S507 is executed, method 500 further includes: the SAF sends the credential of subnet #5 to the UE.

[0272] In the above, SAF analyzes the task initiated by UE and configures the credentials of subnet #5 to UE, thereby assisting UE to expand the function of the task, thereby improving the user experience.

[0273] Figure 6 It is a schematic diagram of a communication method 600 proposed in an embodiment of the present application.

[0274] S601, IDM performs pre-configuration.

[0275] S601 may refer to the content in S401, which will not be repeated here.

[0276] S602, the SAF sends first request information, and correspondingly, the UE receives the first request information.

[0277] The first request information requests obtaining one or more attributes.

[0278] S603, the UE sends first request response information, and correspondingly, the SAF receives the first request response information.

[0279] The first request response information includes the ID of the UE, and the first request response information also includes one or more attributes (for example, recorded as attribute #2).

[0280] In a possible implementation, the UE determines attribute #2 based on criterion #2 (an example of the first attribute criterion). The embodiment of the present application does not limit the specific content of criterion #2, and an exemplary description is given below.

[0281] (1) Criterion #2 is the privacy level of the attribute. Specifically, for the sake of communication security, if the privacy level of an attribute is low, the UE can send the attribute to the SAF; if the privacy level of an attribute is high, the UE can choose not to send the attribute.

[0282] The embodiments of the present application do not limit the specific implementation method of measuring the privacy level of attributes.

[0283] (2) Criterion #2 is the priority of the attribute. Specifically, if an attribute is a high priority attribute, the UE may send the attribute to the SAF, and if an attribute is a low priority attribute, the UE may choose not to send the attribute.

[0284] The embodiments of the present application do not limit the specific implementation method for measuring the priority of attributes. In one possible implementation method, the priority is divided based on the importance of the attribute relative to the task. For example, attribute #A is more important than a task (for example, task #4). In other words, attribute #A is an indispensable attribute for executing task #4, and attribute #A is a high-priority attribute; for another example, attribute #B is less important than task #4. In other words, attribute #B is an optional attribute for task #4, and attribute #B is a low-priority attribute.

[0285] S604, SAF performs attribute perception evaluation.

[0286] Specifically, SAF determines whether there are one or more attributes (for example, attribute #C) in attribute #2, and the UE does not hold the credentials of the subnet corresponding to attribute #C (or, the IDM has not sent the credentials of the subnet corresponding to attribute #C to the UE).

[0287] Among them, attribute #C is, for example, a service pre-activated by the UE, or attribute #C is, for example, a core function of the UE, which is not limited.

[0288] The embodiment of the present application does not limit the specific implementation method of SAF for attribute perception evaluation, and an exemplary description is given below.

[0289] Example 1: SAF sends a query message to IDM to query whether attribute #C exists in attribute #2, that is, S605-S606.

[0290] Two possible implementations are given below.

[0291] Implementation method 1

[0292] S605, SAF sends query information, and correspondingly, IDM receives the query information.

[0293] The query information includes the ID of the UE, and the query information is used to query the subnet certificate issued by the IDM to the UE.

[0294] S606, the IDM sends a query response message, and correspondingly, the SAF receives the query response message.

[0295] The query response information includes the certificate of the subnet (for example, denoted as subnet #6) issued by the IDM to the UE, where subnet #6 includes one or more subnets.

[0296] Optionally, the query response information also includes one or more attributes corresponding to the credentials of subnet #6 (for example, recorded as attribute #3); or, SAF obtains attribute #3 based on the credentials of subnet #6, for example, SAF obtains attribute #3 based on stored data, etc., without limitation.

[0297] Further, the SAF is able to determine whether attribute #C exists in attribute #2 based on the credentials of subnet #6 and attribute #3, wherein attribute #C does not belong to attribute #3.

[0298] Implementation method 2

[0299] S605, SAF sends query information, and correspondingly, IDM receives the query information.

[0300] Among them, the query information includes attribute #2, and the query information is used to query whether attribute #C exists in attribute #2. In other words, the query information is used to query whether the IDM has issued a subnet certificate corresponding to attribute #2 to the UE.

[0301] S606, the IDM sends a query response message, and correspondingly, the SAF receives the query response message.

[0302] The query response information includes attribute #C, that is, the IDM has not queried the certificate of the subnet corresponding to attribute #C issued to the UE.

[0303] The SAF can determine, based on the query response information, that the UE does not hold the credentials for the subnet corresponding to attribute #C.

[0304] Example 2: SAF obtains the credential of subnet #6 and the corresponding relationship between attribute #3, and determines whether attribute #C exists in attribute #2 based on the credential of subnet #6 and the corresponding relationship between attribute #3.

[0305] The embodiment of the present application does not limit the specific implementation method for SAF to obtain the credentials of subnet #6 and the correspondence between attribute #3.

[0306] In one possible scenario, the SAF obtains the correspondence between the credential of subnet #6 and attribute #3 based on stored data. For example, the SAF stores data of the subnet credential issued by the IDM to the UE.

[0307] In another possible scenario, the correspondence between the credentials of subnet #6 and attribute #3 is pre-configured.

[0308] S607, SAF obtains the subnet credential corresponding to attribute #C.

[0309] The embodiment of the present application does not limit the specific implementation method of SAF obtaining the subnet credential corresponding to attribute #C, and an exemplary description is given below.

[0310] Example 1: SAF obtains the subnet credentials corresponding to attribute #C based on stored data. For example, SAF stores the subnet credentials held by other UEs.

[0311] Example 2: SAF obtains the subnet credential corresponding to attribute #C from other nodes. For example, SAF queries IDM for the credential of the subnet corresponding to attribute #C.

[0312] Example 3, when the subnet corresponding to attribute #C has not been created, SAF or IDM sends a subnet creation request to the resource storage node, requesting to create the subnet corresponding to attribute #C, and obtain the subnet credential corresponding to attribute #C, that is, S607a.

[0313] S608, SAF sends the credential of the subnet corresponding to attribute #C (for example, recorded as credential #C), and correspondingly, UE receives credential #C.

[0314] S609, the UE sends access information, and correspondingly, the resource storage node receives the access information.

[0315] The access information includes the UE ID and the credential #C, and the access information is used to access the subnet resources corresponding to the credential #C.

[0316] Figure 7 It is a schematic diagram of a communication method 700 proposed in an embodiment of the present application.

[0317] S701, IDM performs pre-configuration.

[0318] S701 may refer to the content in S401 and will not be described in detail here.

[0319] S702, SAF sends authorization request information, and correspondingly, UE receives the authorization request information.

[0320] Among them, the authorization request information requests the UE to authorize the SAF to perform attribute-aware evaluation on one or more attributes of the UE (for example, attribute #4). In other words, the authorization request information requests the UE to authorize the SAF to determine whether the UE holds the credentials of the subnet corresponding to attribute #4.

[0321] S703, the UE sends authorization request response information, and correspondingly, the SAF receives the authorization request response information.

[0322] The authorization request response information includes the UE ID, and the authorization response information is used to indicate whether the UE authorizes the SAF to perform attribute perception evaluation on the UE's attribute #4.

[0323] Optionally, the authorization request response information also includes an authorization credential, which is used to prove the authenticity of the UE authorization.

[0324] S704, SAF sends query information, and correspondingly, IDM receives the query information.

[0325] The query information includes the UE's ID and authorization certificate, and the query information is used to query the subnet certificate issued by the IDM to the UE, as well as attribute #4.

[0326] S705, IDM queries the issuance record of the UE's subnet certificate and the UE's attribute #4.

[0327] S706, the IDM sends a query response message, and correspondingly, the SAF receives the query response message.

[0328] The query response information includes the subnet certificate issued by the IDM to the UE, and the UE attribute #4.

[0329] S707, SAF performs attribute perception evaluation.

[0330] Specifically, SAF determines whether one or more attributes (for example, noted as attribute #C) exist in attribute #4 based on the certificate of the subnet issued by IDM to the UE and attribute #4 of the UE, wherein IDM has not sent the certificate of the subnet corresponding to attribute #C to the UE (or the UE does not hold the certificate of the subnet corresponding to attribute #C).

[0331] S708, SAF obtains the credential of the subnet corresponding to attribute #C.

[0332] In one possible scenario, the SAF obtains the credentials of the subnet corresponding to attribute #C based on stored data, for example, the SAF stores the subnet credentials held by other UEs.

[0333] Another possible scenario is that the SAF or IDM sends a subnet creation request to the resource storage node, requesting to create a subnet corresponding to attribute #C, and obtains the credential of the subnet corresponding to attribute #C, that is, S708a.

[0334] S709, SAF sends the credential of the subnet corresponding to attribute #C (for example, recorded as credential #C), and correspondingly, UE receives credential #C.

[0335] S710, the UE sends access information, and correspondingly, the resource storage node receives the access information.

[0336] The access information includes the UE ID and the credential #C, and the access information is used to access the subnet resources corresponding to the credential #C.

[0337] In the above, SAF performs attribute-aware evaluation on the attributes of the UE. If the UE does not hold the subnet credentials corresponding to the attributes, the SAF configures the subnet credentials for the UE so that the UE can access the corresponding subnet based on the subnet credentials, thereby improving the user experience.

[0338] Figure 8 8 is a schematic block diagram of a communication device 800 provided in an embodiment of the present application, and the communication device includes: a transceiver unit 810. The transceiver unit 810 can be used to implement corresponding communication functions. The transceiver unit 810 can also be called a communication interface or a communication unit. Optionally, the device 800 also includes a processing unit 820. The processing unit 820 can be used to implement processing operations.

[0339] Optionally, the device 800 may further include a storage unit, which may be used to store instructions and / or data, and the processing unit 820 may read the instructions and / or data in the storage unit so that the device implements the aforementioned method embodiment.

[0340] Optionally, the transceiver unit 810 includes a sending unit and / or a receiving unit, the sending unit is used to perform the sending operation in the above embodiment, and the receiving unit is used to perform the receiving operation in the above embodiment.

[0341] It should be noted that the communication device 800 may include a sending unit but not a receiving unit; or the communication device 800 may include a receiving unit but not a sending unit. The specific details may depend on whether the above solution executed by the communication device 800 includes a sending action and a receiving action. For example, the communication device 800 is used to execute the above Figures 3 to 7 The actions performed by each node (eg, UE, SAF, IDM) in the embodiment shown in the figure may be specifically referred to in the above Figures 3 to 7 The relevant introduction in the illustrated embodiment will not be repeated here.

[0342] For example, the communication device 800 is used to execute the following solution.

[0343] In a first possible design, the device 800 is a network device, or it may be a component of a network device (such as a chip or a chip system or a circuit), wherein the transceiver unit and the processing unit may be used to implement relevant operations of the network device, and the network device may be, for example, a service-aware network element.

[0344] In one possible implementation, the transceiver unit 810 is used to receive a first task; the processing unit 820 is used to determine one or more attributes corresponding to the first task, wherein any two of the one or more attributes correspond to the credentials of the same communication resource or credentials of different communication resources, a credential of a communication resource corresponds to at least one attribute of the one or more attributes, and the credential of the communication resource corresponds to the communication resource one-to-one; the transceiver unit 810 is also used to obtain the credentials of one or more communication resources corresponding to the one or more attributes.

[0345] Optionally, the transceiver unit 810 is further used to send credentials of one or more communication resources; or, the transceiver unit 810 is further used to send credentials of a first communication resource, wherein the first communication resource is determined based on one or more communication resources.

[0346] Optionally, the processing unit 820 is further configured to determine whether to send the credential of the first communication resource based on a first criterion.

[0347] Optionally, the first criterion includes one or more of the following: the initiation frequency of the first task, and the priority of the terminal device.

[0348] Optionally, the transceiver unit 810 is further used to send query information; wherein the query information includes one or more attributes, and the query information requests to obtain credentials of one or more communication resources.

[0349] Optionally, the transceiver unit 810 is also used to send a first communication resource creation request, the first communication resource creation request includes a first attribute, the first communication resource creation request is used to request the creation of a second communication resource, the credentials of the second communication resource correspond to the first attribute, and the first attribute belongs to one or more attributes corresponding to the first task.

[0350] Optionally, the transceiver unit 810 is also used to send a second communication resource creation request, the second communication resource creation request includes information for creating a third communication resource, the second communication resource creation request is used to request the creation of a third communication resource, the credentials of the third communication resource correspond to the second attribute, and the second attribute belongs to one or more attributes corresponding to the first task.

[0351] A second possible design is that the device 800 is a network device, or it may be a component of a network device (such as a chip or a chip system or a circuit), wherein the transceiver unit and the processing unit may be used to implement relevant operations of the network device, and the network device may be, for example, a service-aware network element.

[0352] In a possible implementation, a transceiver unit 810 is used to obtain one or more attributes of a terminal device; wherein any two of the one or more attributes correspond to credentials of the same communication resource or credentials of different communication resources, a credential of a communication resource corresponds to at least one attribute of the one or more attributes, and the credential of the communication resource corresponds to the communication resource one-to-one; a processing unit 820 is used to determine whether the terminal device holds credentials of communication resources corresponding to one or more attributes; in the case that the terminal device does not hold the credentials of the communication resource corresponding to the first attribute, the transceiver unit 810 is also used to send the credentials of the communication resource corresponding to the first attribute to the terminal device, and the first attribute belongs to one or more attributes.

[0353] Optionally, the transceiver unit 810 is further used to send a first request message to the terminal device, the first request message requests to obtain one or more attributes; the transceiver unit 810 is further used to receive a first request response message from the terminal device, the first request response message indicates one or more attributes.

[0354] Optionally, the transceiver unit 810 is further used to send a second request message to the terminal device, the second request message requests the terminal device to authorize the SAF to determine whether the terminal device holds credentials for communication resources corresponding to one or more attributes; optionally, the transceiver unit 810 is further used to receive a second request response message from the terminal device, the second request response message indicates that the SAF is allowed to determine whether the terminal device holds credentials for communication resources corresponding to one or more attributes; optionally, the transceiver unit 810 is further used to obtain one or more attributes based on the second request response message.

[0355] Optionally, the transceiver unit 810 is also used to obtain the credential of the first communication resource and the attributes corresponding to the credential of the first communication resource, wherein the terminal device holds the credential of the first communication resource; the processing unit 820 is also used to determine whether the terminal device holds the credential of the communication resource corresponding to one or more attributes of the UE based on the credential of the first communication resource and the attributes corresponding to the credential of the first communication resource.

[0356] Optionally, the transceiver unit 810 is further used to send query information, where the query information includes one or more attributes, and the query information is used to query whether the terminal device holds a certificate of a communication resource corresponding to one or more attributes.

[0357] In a third possible design, the device 800 is a terminal device, or a component of a terminal device (such as a chip or a chip system or a circuit). The transceiver unit and the processing unit can be used to implement relevant operations of the terminal device.

[0358] In a possible implementation, the transceiver unit 810 is used to receive a first request message, wherein the first request message requests to obtain one or more attributes, wherein any two of the one or more attributes correspond to credentials of the same communication resource or credentials of different communication resources, a credential of a communication resource corresponds to at least one of the one or more attributes, and the credential of the communication resource corresponds to the communication resource one-to-one; the transceiver unit 810 is also used to send one or more attributes; in the case where the terminal device does not hold the credential of the communication resource corresponding to the first attribute, the transceiver unit 810 is also used to receive the credential of the communication resource corresponding to the first attribute, and the first attribute belongs to one or more attributes.

[0359] Optionally, the processing unit 820 is configured to determine one or more attributes according to a first attribute criterion.

[0360] Optionally, the first attribute criterion includes one or more of the following: the privacy level of the attribute, and the priority of the attribute.

[0361] A fourth possible design is that the device 800 is a network device, or a component of a network device (such as a chip or a chip system or a circuit), wherein the transceiver unit and the processing unit can be used to implement relevant operations of the network device, and the network device is, for example, a service-aware network element.

[0362] In one possible implementation, the transceiver unit 810 is used to receive a first task, where the first task includes credentials of one or more communication resources, and the credentials of the communication resources correspond one-to-one to the communication resources; the transceiver unit 810 is also used to obtain a first communication resource according to the first task, where the first communication resource is used to execute the first task, wherein the first communication resource does not belong to one or more communication resources corresponding to the first task; the transceiver unit 810 is also used to send the credentials of the first communication resource.

[0363] Optionally, the transceiver unit 810 is also used to send a first communication resource creation request, the first communication resource creation request is used to request the creation of a first communication resource; the transceiver unit 810 is also used to receive a first communication resource creation request response, the first communication resource creation request response indicates the credentials of the first communication resource.

[0364] Optionally, the transceiver unit 810 is further used for a first task response, where the first task response indicates whether the communication resources corresponding to the credentials of one or more communication resources are configured.

[0365] It is understandable that the division of units in the above-mentioned device is only a division of logical functions. Each function may correspond to a functional unit, or two or more functions may be integrated into one functional unit. In actual implementation, all or part of the units may be integrated into one physical entity, or distributed on different physical entities. In addition, the above-mentioned functional units may be implemented in the form of hardware, software, or a combination of hardware and software. Whether a function is executed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel may use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0366] In one example, the functional unit in any of the above devices can be one or more integrated circuits configured to implement the above methods, such as: one or more application specific integrated circuits (ASICs), or, one or more central processing units (CPUs), one or more microprocessors (MCUs), one or more digital signal processors (DSPs), or, one or more field programmable gate arrays (FPGAs), or a combination of at least two of these integrated circuit forms.

[0367] In an example, the storage unit may include a random access memory, a flash memory, a read-only memory, a programmable read-only memory, or an electrically erasable programmable memory and / or a register, etc.

[0368] Fig. 9 is a schematic diagram of another communication device 900 provided in an embodiment of the present application. The device 900 includes a processor 910, the processor 910 is coupled to a memory 920, the memory 920 is used to store computer programs or instructions and / or data, and the processor 910 is used to execute the computer programs or instructions stored in the memory 920, or read the data stored in the memory 920, so as to execute the methods in the above method embodiments.

[0369] Optionally, there are one or more processors 910 .

[0370] Optionally, the memory 920 is one or more.

[0371] Optionally, the memory 920 is integrated with the processor 910 , or in other words, the memory 920 is built into the processor 910 , or the memory 920 is separately provided from the processor 910 .

[0372] Alternatively, if Fig. 9 As shown, the device 900 further includes a transceiver 930, which is used to receive and / or send signals. For example, the processor 910 is used to control the transceiver 930 to receive and / or send signals.

[0373] For example, the processor 910 is used to execute the computer program or instructions stored in the memory 920 to implement the relevant operations of the terminal device or the network device in the above various method embodiments.

[0374] Optionally, the transceiver 930 includes a transmitter (or called a transmitter, a transmitting module, a transmitting circuit, etc.) and / or a receiver (or called a receiver, a receiving module, a receiving circuit, etc.), the transmitter is used to perform the transmitting operation in the above-mentioned embodiment, and the receiver is used to perform the receiving operation in the above-mentioned embodiment.

[0375] It should be noted that the communication device 900 may include a transmitter but not a receiver; or the communication device 900 may include a receiver but not a transmitter. The specific method may depend on whether the above scheme executed by the communication device 900 includes a sending action and a receiving action. For example, the communication device 900 is used to execute the above Figures 3 to 7 The actions performed by each node (eg, UE, SAF, IDM) in the embodiment shown in the figure may be specifically referred to in the above Figures 3 to 7 The relevant introduction in the illustrated embodiment will not be repeated here.

[0376] It should be understood that the processor mentioned in the embodiments of the present application may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc.

[0377] It should also be understood that the memory mentioned in the embodiments of the present application may be a volatile memory and / or a non-volatile memory. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM). For example, RAM can be used as an external cache. By way of example and not limitation, RAM includes the following forms: static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM) and direct rambus RAM (DR RAM).

[0378] It should be noted that when the processor is a general-purpose processor, DSP, ASIC, FPGA or other programmable logic device, discrete gate or transistor logic device, discrete hardware component, the memory (storage module) can be integrated into the processor.

[0379] It should also be noted that the memory described herein is intended to include, but is not limited to, these and any other suitable types of memory.

[0380] Fig.10 1 is a schematic block diagram of a chip system 1000 provided in an embodiment of the present application. The chip system 1000 (or also referred to as a processing system) includes a logic circuit 1010 and an input / output interface 1020 .

[0381] Among them, the logic circuit 1010 can be a processing circuit in the chip system 1000. The logic circuit 1010 can be coupled to a storage unit and call instructions in the storage unit so that the chip system 1000 can implement the methods and functions of each embodiment of the present application. The input / output interface 1020 can be an input / output circuit in the chip system 1000, outputting information processed by the chip system 1000, or inputting data or signaling information to be processed into the chip system 1000 for processing.

[0382] As a solution, the chip system 1000 is used to implement the operations performed by a communication device (such as a terminal device, or a network device) in the above method embodiments.

[0383] For example, the logic circuit 1010 is used to implement the processing-related operations performed by the communication device (such as a terminal device, or a network device) in the above method embodiments; the input / output interface 1020 is used to implement the sending and / or receiving-related operations performed by the communication device (such as a terminal device, or a network device) in the above method embodiments.

[0384] An embodiment of the present application also provides a computer-readable storage medium on which are stored computer instructions for implementing the methods executed by a communication device (such as a terminal device, or a network device) in the above-mentioned method embodiments.

[0385] For example, when the computer program is executed by a computer, the computer can implement the method performed by a communication device (such as a terminal device, or a network device) in each embodiment of the above method.

[0386] An embodiment of the present application also provides a computer program product, comprising instructions, which, when executed by a computer, implement the methods performed by a communication device (such as a terminal device, or a network device) in the above-mentioned method embodiments.

[0387] An embodiment of the present application also provides a communication system, which includes the terminal device and / or network device in the above embodiments.

[0388] The explanation of the relevant contents and beneficial effects of any of the above-mentioned devices can be referred to the corresponding method embodiments provided above, which will not be repeated here.

[0389] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0390] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the process or function described in the embodiment of the present application is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices. For example, the computer can be a personal computer, a server, or a network device, etc. The computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer instructions can be transmitted from a website site, computer, server or data center by wired (e.g., coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) mode to another website site, computer, server or data center. The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or data center that contains one or more available media integrations. The available medium may be a magnetic medium (e.g., a floppy disk, a hard disk, a magnetic tape), an optical medium (e.g., a DVD), or a semiconductor medium (e.g., a solid state disk (SSD)). For example, the aforementioned available medium includes, but is not limited to, various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0391] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A communication method, characterized in that: The method comprises: Receive the first task; Determine one or more attributes corresponding to the first task, any two of the one or more attributes correspond to credentials of the same communication resource or credentials of different communication resources, a credential of a communication resource corresponds to at least one attribute of the one or more attributes, and the credential of the communication resource corresponds to the communication resource one-to-one; Acquire credentials of one or more communication resources corresponding to the one or more attributes.

2. The method according to claim 1, characterized in that The method further comprises: sending credentials for the one or more communication resources; or, Credentials for a first communications resource are sent, the first communications resource being determined based on the one or more communications resources.

3. The method according to claim 2, characterized in that The method further comprises: determining whether to send credentials for the first communication resource based on a first criterion; The first criterion includes one or more of the following: the initiation frequency of the first task, and the priority of the terminal device.

4. The method according to any one of claims 1 to 3, characterized in that The obtaining of credentials of one or more communication resources corresponding to the one or more attributes includes: Sending a query message, the query message including the one or more attributes, the query message requesting credentials for the one or more communication resources.

5. The method according to any one of claims 1 to 3, characterized in that The method of obtaining the credentials of one or more communication resources corresponding to the one or more attributes further comprises: A first communication resource creation request is sent, wherein the first communication resource creation request includes a first attribute, the first communication resource creation request is used to request the creation of a second communication resource, the credentials of the second communication resource correspond to the first attribute, and the first attribute belongs to the one or more attributes.

6. The method according to any one of claims 1 to 3, characterized in that The method of obtaining the credentials of one or more communication resources corresponding to the one or more attributes further comprises: Send a second communication resource creation request, the second communication resource creation request includes information for creating a third communication resource, the second communication resource creation request is used to request the creation of the third communication resource, the credential of the third communication resource corresponds to a second attribute, and the second attribute belongs to the one or more attributes.

7. A communication method, characterized in that: The method comprises: Acquire one or more attributes of the terminal device, any two of the one or more attributes correspond to credentials of the same communication resource or credentials of different communication resources, a credential of a communication resource corresponds to at least one attribute of the one or more attributes, and the credential of the communication resource corresponds to the communication resource one-to-one; determining whether the terminal device holds a credential for a communication resource corresponding to the one or more attributes; When the terminal device does not hold a certificate for a communication resource corresponding to a first attribute, the certificate for the communication resource corresponding to the first attribute is sent to the terminal device, and the first attribute belongs to the one or more attributes.

8. The method according to claim 7, characterized in that The obtaining one or more attributes of the terminal device includes: Sending a first request message to the terminal device, wherein the first request message requests obtaining the one or more attributes; A first request response message is received, wherein the first request response message indicates the one or more attributes.

9. The method according to claim 7, characterized in that: The obtaining one or more attributes of the terminal device includes: sending a second request message to the terminal device, the second request message requesting the terminal device to authorize the first node to determine whether the terminal device holds a credential for a communication resource corresponding to the one or more attributes; receiving a second request response message indicating that the first node is allowed to determine whether the terminal device holds a credential for a communication resource corresponding to the one or more attributes; The one or more attributes are obtained based on the second request response information.

10. The method according to any one of claims 7 to 9, characterized in that The determining whether the terminal device holds a certificate of a communication resource corresponding to the one or more attributes includes: Acquire a credential of a first communication resource and an attribute corresponding to the credential of the first communication resource, the terminal device holding the credential of the first communication resource; Based on the credential of the first communication resource and the attribute corresponding to the credential of the first communication resource, it is determined whether the terminal device holds the credential of the communication resource corresponding to the one or more attributes.

11. The method according to any one of claims 7 to 9, characterized in that The determining whether the terminal device holds a certificate of a communication resource corresponding to the one or more attributes includes: Sending query information, the query information including the one or more attributes, the query information being used to query whether the terminal device holds a certificate of a communication resource corresponding to the one or more attributes.

12. A communication method, characterized in that: The method is applied to a terminal device, comprising: receiving a first request message, wherein the first request message requests obtaining one or more attributes, wherein any two of the one or more attributes correspond to credentials of the same communication resource or credentials of different communication resources, a credential of a communication resource corresponds to at least one attribute of the one or more attributes, and the credential of the communication resource corresponds to the communication resource one-to-one; sending the one or more attributes; When the terminal device does not hold a certificate for a communication resource corresponding to a first attribute, receiving a certificate for a communication resource corresponding to the first attribute, the first attribute belonging to the one or more attributes.

13. The method according to claim 12, characterized in that include: The one or more attributes are determined based on a first attribute criterion; The first attribute criterion includes one or more of the following: the privacy level of the attribute, and the priority of the attribute.

14. A communication method, characterized in that: The method comprises: receiving a first task, the first task comprising credentials of one or more communication resources, the credentials of the communication resources corresponding one to one with the communication resources; Acquire a first communication resource based on the first task, where the first communication resource is used to perform the first task, and the first communication resource does not belong to the one or more communication resources; The credentials of the first communication resource are sent.

15. The method according to claim 14, characterized in that The acquiring a first communication resource based on the first task includes: Sending a first communication resource creation request, where the first communication resource creation request is used to request creation of the first communication resource; A first communications resource creation request response is received, the first communications resource creation request response indicating credentials for the first communications resource.

16. A communication device, characterized in that: include: A processor, configured to execute a computer program or instruction stored in a memory, so that the communication device performs the method according to any one of claims 1 to 15.

17. A computer program product, characterized in that The computer program product comprises a program or instructions for executing the method according to any one of claims 1 to 15.

18. A computer-readable storage medium, characterized in that: include: The computer-readable storage medium stores a computer program, and when the computer program is executed on a computer, the computer is caused to execute the method according to any one of claims 1 to 15.

Images