Communication method and communication device
When the core network element fails, the first network element determines the terminal device roams and sends a request to the second network element, and obtains and stores the authentication contract information, the business interruption problem of the terminal device during the failure is solved, and the continuity and stability of the service are achieved.
Patent Information
- Application Number
- CN202510552126.8
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-04-28
- Publication Date
- 2025-07-18
- Estimated Expiration
- 2045-04-28
AI Technical Summary
When the core network element fails or link failures, the terminal device cannot register and authenticate and sign contracts normally, resulting in business interruption.
By receiving messages from the terminal device on the first network element side, determining its roaming and sending a request to the second network element, acquiring and storing authentication contract information and security context information, so as to re-register and authentication contract in the event of a failure.
Ensure that when the core network fails, the service of the terminal device can operate normally, and the service continuity and stability can be achieved by obtaining and storing authentication and contract information in the escape plane.
Smart Images

Figure CN120343548A_ABST
Abstract
Description
Technical Field
[0001] This application relates to the field of communication technologies, and in particular, to a communication method and a communication device. Background Art
[0002] In communication technologies, a core network element can register a terminal device. However, when the primary and secondary core network elements fail or the relevant links between the primary and secondary core network elements fail, it may be impossible to register the terminal device, which may cause the services of the terminal device to malfunction. Therefore, how to ensure the normal operation of the services of the terminal device has become one of the problems to be solved urgently. Summary of the Invention
[0003] This application provides a communication method and a communication device, which are beneficial to ensuring the normal operation of the services of the terminal device.
[0004] In a first aspect, this application provides a communication method, which can be applied to the first network element side. The first network element side can be the first network element, or a processor, module, chip, or chip system or functional module used by the first network element to implement this method, etc. The method includes: receiving a first message from a terminal device, where the first message is used to request processing of the terminal device, the first message includes the public land mobile network (PLMN) of the terminal device and / or the identifier of the terminal device, and the first message is used to determine that the terminal device is roaming; sending a second message to a second network element, where the second message is used to request registration and / or authentication and subscription of the terminal device, and the second message includes the PLMN of the terminal device and / or the identifier of the terminal device.
[0005] Based on the method described in the first aspect, after receiving the first message from the terminal device, the first network element side can determine that the terminal device is roaming according to the first message, and then send a second message to the second network element, so that after receiving the second message, the second network element can register and / or authenticate and subscribe to the terminal device, and the second network element can obtain the authentication and subscription information and / or security context information of the terminal device based on the registration and / or authentication and subscription. In this way, when a future network failure occurs, such as a failure of the home network element of the terminal device or a link failure of the home network element, the second network element can re-register and / or authenticate and subscribe to the terminal device based on the obtained authentication and subscription information and / or security context information of the terminal device, which is beneficial to ensuring the normal operation of the services of the terminal device. Exemplarily, the first network element and the second network element can be an access and mobility management function (AMF) or a mobility management entity (MME), etc.; the home network element of the terminal device can be the home unified data management (UDM) or the home subscriber server (HSS) of the terminal device, etc.
[0006] In a second aspect, the present application provides a communication method, which can be applied to the first network element side. The first network element side can be the first network element, or a processor, module, chip, or chip system or functional module used by the first network element to implement this method, etc. The method includes: receiving a first message from a terminal device, where the first message is used to request processing of the terminal device, the first message includes the public land mobile network (PLMN) of the terminal device and / or the identifier of the terminal device, and the first message is used to determine that the terminal device is roaming; obtaining the authentication and subscription information and / or security context information of the terminal device; sending a third message to a third network element, where the third message includes the authentication and subscription information and / or security context information of the terminal device.
[0007] Based on the method described in the second aspect, the first network element side can, after receiving a first message from the terminal device, determine that the terminal device is roaming according to the first message, thereby obtaining the authentication and subscription information and / or security context information of the terminal device, and sending a third message to the third network element to export the obtained authentication and subscription information and / or security context information of the terminal device to the third network element. In this way, when a future network fails, such as a failure of the home network element of the terminal device / a failure of the home network element link, the second network element can re-register and / or authenticate and subscribe to the terminal device based on the authentication and subscription information and / or security context information of the terminal device stored in the third network element, which is beneficial to ensuring the normal operation of the services of the terminal device. By way of example, the first network element and the second network element can be an AMF or an MME, etc.; the third network element can be a UDM, an HSS, or other devices for data caching (such as a data caching center), etc.; the home network element of the terminal device can be the home UDM or HSS of the terminal device, etc.
[0008] Combined with the second aspect, in a possible implementation manner, the specific implementation manner of obtaining the authentication and subscription information and / or security context information of the terminal device includes: receiving the authentication and subscription information of the terminal device from a fourth network element, and the fourth network element is the home network element of the terminal device.
[0009] In a third aspect, the present application provides a communication method, which can be applied to the fourth network element side. The fourth network element side can be the fourth network element, or a processor, module, chip, or chip system or functional module used by the fourth network element to implement this method, etc. The method includes: receiving a fourth message from the first network element, the fourth message is used to request to obtain the authentication and subscription information of the terminal device, the fourth message includes the operator mobile network identifier PLMN of the terminal device and / or the identifier of the terminal device, the fourth message is used to determine that the terminal device has roamed out, and the fourth network element is the home network element of the terminal device; sending a fifth message to the third network element, and the fifth message includes the authentication and subscription information of the terminal device.
[0010] Based on the method described in the third aspect, after receiving the fourth message from the first network element, the fourth network element side can determine that the terminal device has roamed out of the province where the fourth network element side is located according to the fourth message, and thus send a fifth message to the third network element to export the authentication and subscription information of the terminal device to the third network element. In this way, when a future network failure occurs, such as a failure of the home network element of the terminal device / a failure of the link between the home network element and the first network element, the second network element can re-register and / or authenticate and subscribe to the terminal device based on the authentication and subscription information and / or security context information of the terminal device stored in the third network element, which is beneficial to ensuring the normal operation of the services of the terminal device. Exemplarily, the first network element and the second network element can be an AMF or an MME, etc.; the third network element can be a UDM, an HSS or other devices for data caching (such as a data caching center), etc.; the home network element of the terminal device (i.e., the fourth network element) can be the home UDM or HSS of the terminal device, etc.
[0011] In a fourth aspect, the present application provides a communication method, which can be applied to the fourth network element side. The fourth network element side can be the fourth network element, or a processor, module, chip, or chip system or functional module used by the fourth network element to implement this method, etc. The method includes: receiving a fourth message from the first network element, where the fourth message is used to request to obtain the authentication and subscription information of the terminal device, the fourth message includes information about the area where the terminal device is located, the fourth message is used to determine that the area where the terminal device is located is a first area outside the service area of the fourth network element of the terminal device, and the fourth network element is the home network element of the terminal device; sending a fifth message to the third network element, where the fifth message includes the authentication and subscription information of the terminal device.
[0012] Based on the method described in the fourth aspect, after receiving the fourth message from the first network element, the fourth network element side can determine that the terminal device is located in the first area according to the fourth message, and thus send a third message to the third network element to export the authentication and subscription information of the terminal device to the third network element. In this way, when a future network failure occurs, such as a failure of the home network element of the terminal device / a failure of the link between the home network element and the first area, the second network element can re-register and / or authenticate and subscribe to the terminal device based on the authentication and subscription information of the terminal device stored in the third network element, which is beneficial to ensuring the normal operation of the services of the terminal device. Exemplarily, the first area can be a pre-determined area where services are prone to interruption, such as the first area is an island area, etc. The first network element and the second network element can be an AMF or an MME, etc.; the third network element can be a UDM, an HSS or other devices for data caching (such as a data caching center), etc.; the home network element of the terminal device (i.e., the fourth network element) can be the home UDM or HSS of the terminal device, etc.
[0013] Fifth aspect, the present application provides a communication method, which can be applied to the second network element side. The second network element side can be the second network element, or a processor, module, chip, or chip system or functional module, etc. of the second network element for implementing this method. The method includes: receiving a second message from the first network element, where the second message is used to request registration and / or authentication and signing of the terminal device, and the second message includes the operator mobile network identifier PLMN of the terminal device and / or the identifier of the terminal device; obtaining the authentication and signing information and / or security context information of the terminal device; storing the authentication and signing information and / or security context information of the terminal device; after the terminal device deregisters, receiving a sixth message from the terminal device, where the sixth message is used to request registration and / or authentication and signing of the terminal device, and the sixth message includes the PLMN of the terminal device and / or the identifier of the terminal device, and the sixth message is used to determine the roaming of the terminal device and the home network element of the terminal device; when the home network element fails or the link between the home network element and the second network element fails, performing registration and / or authentication and signing of the terminal device based on the authentication and signing information and / or security context information of the terminal device.
[0014] Based on the method described in the fifth aspect, the second network element side can, after receiving the second message from the first network element, obtain the authentication and signing information and / or security context information of the terminal device, and store the authentication and signing information and / or security context information of the terminal device. In this way, when the home network element of the terminal device fails / the link between the home network element and the second network element fails, the second network element side can, based on the stored authentication and signing information and / or security context information of the terminal device, perform re-registration and / or authentication and signing of the terminal device, thereby facilitating ensuring the normal operation of the services of the terminal device. Exemplarily, the first network element and the second network element can be an AMF or an MME, etc.; the home network element of the terminal device can be the home UDM or HSS, etc. of the terminal device.
[0015] Combined with the fifth aspect, in a possible implementation manner, the specific implementation manner of obtaining the authentication and signing information and / or security context information of the terminal device includes: receiving the authentication and signing information from the home network element.
[0016] Sixth aspect, the present application provides a communication method, which can be applied to the second network element side. The second network element side can be the second network element, or a processor, module, chip, or chip system or functional module of the second network element for implementing this method, etc. The method includes: after the terminal device deregisters, receiving a sixth message from the terminal device, where the sixth message is used to request registration and / or authentication and subscription for the terminal device. The sixth message includes the public land mobile network (PLMN) of the operator of the terminal device, the identifier of the terminal device and / or the area information where the terminal device is located. The sixth message is used to determine the home network element of the terminal device, and the sixth message is used to determine that the terminal device is located in the first area or the terminal device is roaming; when the home network element fails or the link between the home network element and the second network element fails, obtaining the authentication and subscription information and / or security context information of the terminal device from a third network element; based on the authentication and subscription information and / or security context information of the terminal device, performing registration and / or authentication and subscription for the terminal device.
[0017] Based on the method described in the sixth aspect, the authentication and subscription information and / or security context information of the terminal device are stored in the third network element. Therefore, when the home network element of the terminal device fails or the link between the home network element and the second network element fails, the second network element side can obtain the authentication and subscription information and / or security context information of the terminal device from the third network element, and then perform re-registration and / or authentication and subscription for the terminal device based on the authentication and subscription information and / or security context information of the terminal device, which is beneficial to ensuring the normal operation of the services of the terminal device. Exemplarily, the first network element and the second network element can be the access and mobility management function (AMF) or the mobility management entity (MME), etc.; the third network element can be the unified data management (UDM), the home subscriber server (HSS), or other devices for data caching (such as a data caching center), etc.; the home network element of the terminal device can be the home UDM or HSS of the terminal device, etc.
[0018] Combined with any one of the first aspect to the sixth aspect, in a possible implementation manner, the identifier of the above terminal device includes one or more of the following: the subscription permanent identifier (SUPI) of the terminal device, the subscription concealed identifier (SUCI) of the terminal device, the international mobile subscriber identification number (ISMI) number segment of the terminal device, or the mobile subscriber international number (MSISDN) number segment of the terminal device.
[0019] Seventh aspect, the embodiments of the present application provide a communication device for executing the method in any possible implementation manner of any one of the first aspect to the sixth aspect. The communication device includes a module for executing the method in any possible implementation manner of any one of the first aspect to the sixth aspect.
[0020] In an eighth aspect, an embodiment of the present application provides a communication device, which includes a processing circuit configured to execute the methods in any possible implementation manner of any one of the first aspect to the sixth aspect. The processing circuit is configured to execute a program, and when the program is executed, the methods shown in any possible implementation manner of any one of the first aspect to the sixth aspect are executed.
[0021] In a possible implementation manner, the communication device further includes a memory configured to store the program.
[0022] In a possible implementation manner, the memory is located outside the communication device.
[0023] In a possible implementation manner, the memory is located inside the communication device.
[0024] Wherein, the processing circuit and the memory may also be integrated into one device, that is, the processing circuit and the memory may also be integrated together. Exemplarily, the communication device may be a chip.
[0025] In a possible implementation manner, the communication device further includes a transceiver circuit, which is configured to receive information (or input information) or transmit information (or output information).
[0026] In a ninth aspect, an embodiment of the present application provides a communication device, which includes a processing circuit and a transceiver circuit. The processing circuit may be a logic circuit, and the transceiver circuit may be an interface circuit. The logic circuit and the interface are coupled; the interface circuit is configured to input and / or output information, and the logic circuit is configured to execute the methods in any possible implementation manner of any one of the first aspect to the sixth aspect.
[0027] In a tenth aspect, the present application provides a communication system, which includes a communication device configured to execute the method of the first aspect above and a communication device configured to execute the method of the fifth aspect above. Or, it includes a communication device configured to execute the method of the second aspect above and a communication device configured to execute the method of the sixth aspect above. Or, it includes a communication device configured to execute the method of the third aspect above and a communication device configured to execute the method of the sixth aspect above. Or, it includes a communication device configured to execute the method of the fourth aspect above and a communication device configured to execute the method of the sixth aspect above.
[0028] In an eleventh aspect, an embodiment of the present application provides a computer-readable storage medium, which is configured to store a computer program. When it runs on a computer, it causes the methods shown in any possible implementation manner of any one of the first aspect to the sixth aspect to be executed.
[0029] In a twelfth aspect, an embodiment of the present application provides a computer program product, which, when running on a computer, causes the method shown in any possible implementation manner of any one of the first aspect to the sixth aspect to be executed. Description of the Drawings
[0030] Figure 1 FIG. 6 is a schematic structural diagram of a communication system provided by an embodiment of the present application;
[0031] Figure 2 FIG. 10 is a schematic diagram of an application scenario provided by an embodiment of the present application;
[0032] Figure 3 FIG. 14 is a schematic diagram of an escape provided by an embodiment of the present application;
[0033] Figure 4 FIG. 18 is a schematic flowchart of a communication method provided by an embodiment of the present application;
[0034] Figure 5 FIG. 22 is a schematic flowchart of the process before and during UE escape provided by an embodiment of the present application;
[0035] Figure 6 FIG. 26 is a schematic flowchart of a communication method provided by an embodiment of the present application;
[0036] Figure 7 FIG. 30 is a schematic flowchart of the process before and during UE escape provided by an embodiment of the present application;
[0037] Figure 8 FIG. 34 is a schematic flowchart of a communication method provided by an embodiment of the present application;
[0038] Figure 9 FIG. 38 is a schematic flowchart of the process before and during UE escape provided by an embodiment of the present application;
[0039] Figure 10 FIG. 42 is a schematic flowchart of a communication method provided by an embodiment of the present application;
[0040] Figure 11 FIG. 46 is a schematic flowchart of the process before and during UE escape provided by an embodiment of the present application;
[0041] Figure 12 FIG. 50 is a schematic structural diagram of a communication device provided by an embodiment of the present application;
[0042] Figure 13 FIG. 54 is a schematic structural diagram of a communication device provided by an embodiment of the present application;
[0043] Figure 14 FIG. 58 is a schematic structural diagram of a communication device provided by an embodiment of the present application. Detailed Embodiments
[0044] To facilitate the understanding of the technical solution of the present application, the present application will be further described below with reference to the accompanying drawings.
[0045] The terms "first" and "second" in the description, claims and drawings of the present application are only used to distinguish different objects, rather than to describe a specific order. In addition, the terms "include" and "have" and any variations thereof are intended to cover non-exclusive inclusion. For example, a process, method, system, product or device, etc. that includes a series of steps or units is not limited to the listed steps or units, but optionally further includes steps or units not listed, or optionally further includes other steps or units inherent to these processes, methods, products or devices, etc.
[0046] The "embodiment" mentioned herein means that the specific features, structures or characteristics described in connection with the embodiment may be included in at least one embodiment of the present application. The phrase appears at various positions in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment mutually exclusive with other embodiments. Those skilled in the art can explicitly and implicitly understand that the embodiments described herein can be combined with other embodiments.
[0047] In the present application, "at least one (item)" means one or more, "a plurality" means two or more, "at least two (items)" means two or three or more, and "and / or" is used to describe the association relationship of associated objects, indicating that there can be three relationships. For example, "A and / or B" can represent: only A exists, only B exists, and both A and B exist at the same time. Among them, A and B can be singular or plural. "Or" means that there can be two relationships, such as only A exists, only B exists; when A and B are not mutually exclusive, it can also represent three relationships, such as only A exists, only B exists, and both A and B exist at the same time. The character " / " generally represents an "or" relationship between the associated objects before and after. "At least one (one)" or a similar expression thereof refers to any combination of these items. For example, at least one (one) of a, b or c can represent: a, b, c, "a and b", "a and c", "b and c", or "a and b and c".
[0048] In the present application, "send" and "receive" indicate the direction of signal transmission. For example, "send information to XX" can be understood as the destination of the information is XX, which can include direct sending through the air interface, and also include indirect sending through the air interface by other units or modules. "Receiving information from YY" can be understood as the source of the information is YY, which can include direct receiving from YY through the air interface, and also include indirect receiving from YY through the air interface from other units or modules. "Send" can also be understood as the "output" of the chip interface, and "receive" can also be understood as the "input" of the chip interface. In other words, sending and receiving can be performed between devices, for example, between a network device and a first terminal device, or can be performed within a device, for example, sending or receiving between components, modules, chips, software modules or hardware modules within the device through a bus, a wiring or an interface.
[0049] In the present application, "when" and "if" both mean that corresponding processing will be carried out under certain objective circumstances, but do not limit the time, nor do they require any judgment action when implementing it, nor do they mean the existence of other limitations.
[0050] In the embodiments of the present application, words such as "exemplary" or "for example" are used to indicate examples, illustrations or descriptions. Any embodiment or design described as "exemplary" or "for example" in the embodiments of the present application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present related concepts in a concrete way for easy understanding.
[0051] In the present application, "indication" may include: direct indication, or indirect indication, or explicit indication, or implicit indication.
[0052] In the present application, "include" may include: direct inclusion, or, indirect inclusion, or, explicit inclusion, or, implicit inclusion.
[0053] The prior art may change with the evolution of technical solutions, and the technical solutions provided in this application are not limited to the prior art provided.
[0054] It should be noted that different embodiments or some steps (for example, any one or more steps) in different embodiments in the present application can be combined with each other to form new embodiments. It should be noted that some steps or any one or more steps in different embodiments may include optional steps in a certain embodiment, mandatory steps in a certain embodiment, or optional steps and mandatory steps in a certain embodiment, and the present application does not limit this.
[0055] It should be noted that, without special instructions and logical conflicts, the terms and / or descriptions between different embodiments are consistent and can be referenced to each other.
[0056] It should be noted that this application does not limit the sequence of steps in the embodiments of this application.
[0057] It should be noted that this application does not limit the sequence of judgments of different conditions in the embodiments of this application.
[0058] It should be noted that the "after" and "when" in this application do not strictly limit the time point.
[0059] It should be noted that the nouns, terms, etc. involved in this application are merely examples, and they can also be other names, which are not limited by this application.
[0060] The following introduces the communication system involved in the embodiments of this application.
[0061] The technical solutions provided by this application can be applied to various communication systems, such as: the fifth generation (5G) or new radio (NR) system, the fourth generation (4G) mobile communication system (such as the long term evolution (LTE) system), the wireless local area network (WLAN) system, the satellite communication system, the future communication system, or a fusion system of multiple systems, etc. The technical solutions provided by this application can also be applied to device-to-device (D2D) communication, vehicle-to-everything (V2X) communication, machine-to-machine (M2M) communication, machine type communication (MTC), and the Internet of Things (IoT) communication system or other communication systems.
[0062] The architecture of the communication system in the embodiments of this application is as Figure 1 shown, where Figure 1 the shown communication system includes a terminal device, a radio access network (RAN), a core network (CN), etc. Among them:
[0063] Terminal device: A terminal device is a device with wireless transceiver capabilities that can communicate with access network devices in a radio access network. A terminal device can also be referred to as a user equipment (UE), access terminal, terminal, subscriber unit, user station, mobile station, remote station, remote terminal, mobile device, user terminal, user agent, or user device, etc. In one possible implementation, the terminal device can be deployed on land, including indoors or outdoors, handheld or vehicle-mounted; or it can also be deployed on water, including ships; or it can also be deployed in the air, such as airplanes, balloons, or satellites, etc. In another possible implementation, the terminal device can be a handheld device, vehicle-mounted device, wearable device, sensor, terminal in the Internet of Things, terminal in the vehicle-to-everything network, drone, any form of terminal device in a 5G network or future network, etc., and the embodiments of the present application do not limit this. In yet another possible implementation, the terminal device can also be a virtual reality (VR) terminal device, augmented reality (AR) terminal device, wireless terminal in industrial control, wireless terminal in autonomous driving, wireless terminal in remote healthcare, wireless terminal in smart grid, wireless terminal in a smart city, or wireless terminal in a smart home, etc.
[0064] Radio Access Network: It includes at least one access network device. The access network device is similar to a base station in a traditional network and is deployed close to the terminal device, responsible for forwarding control signals and user data between the terminal device and the core network. Specifically, the access network device can implement functions such as radio link maintenance, radio resource management, and partial mobility management functions. For example, in radio link maintenance, it is responsible for maintaining the radio link with the terminal device and for the protocol conversion between radio link data and IP data; in radio resource management functions, it is responsible for the establishment and release of radio links, the scheduling and allocation of radio resources, etc.; in mobility management functions, it is responsible for configuring terminal device measurements, evaluating radio link commands, and making decisions on cell handovers, etc. By way of example, the access network device may include the next-generation evolved node B (ng-eNB) in the 5G system, the next generation node B (gNB) in the 5G system, etc., without specific limitation thereto. Alternatively, the access network device may also include an access point (AP) in WLAN, a broadband remote access server (BRAS), a relay station, communication devices in a future evolved public land mobile network (PLMN), communication devices in an NTN network, etc.
[0065] Core Network: It includes at least one core network element. The core network element is responsible for maintaining the subscription data of the mobile network, managing the network functions of the mobile network, and providing functions such as session management, mobility management, policy management, and security authentication for the UE. When the terminal device attaches, it provides network access authentication for the terminal device; when the terminal device has a service request, it allocates network resources for the terminal device; when the terminal device moves, it updates network resources for the terminal device; when the terminal device is idle, it provides a fast recovery mechanism for the terminal device; when the terminal device detaches, it releases network resources for the terminal device; when the terminal device has service data, it provides a data routing function for the terminal device, such as forwarding uplink data to the data network; or receiving downlink data of the terminal device from the data network and forwarding it to the radio access network for transmission to the terminal device.
[0066] Exemplarily, in a 4G mobile communication system, the core network elements include, but are not limited to, one or more of the following: The network element responsible for functions such as access control, security control, and signaling coordination is the mobility management entity (MME); The network element serving as the local mobility management anchor is the serving gateway (S-GW); The network element serving as the anchor for handover to an external data network and responsible for Internet Protocol (IP) address allocation is the packet data network (PDN) gateway (P-GW); The network element storing the authentication and subscription information of the terminal device, etc., is the home subscriber server (HSS); The network element responsible for policy and charging functions is called the policy and charging rule function (PCRF), etc.
[0067] Exemplarily, in a 5G mobile communication system, the core network elements include, but are not limited to, one or more of the following: The network element serving as the interface to the data network and responsible for functions such as user plane data forwarding is the user plane function (UPF); The network element responsible for access control and mobility management functions is the access and mobility management function (AMF); The network element responsible for session management and the execution of control policies is the session management function (SMF); The network element responsible for managing the authentication and subscription information of the terminal device, etc., is the unified data management (UDM); The network element responsible for charging and policy control functions is the policy and charging function (PCF), etc.
[0068] It should be noted that the above descriptions of each core network element are only exemplary. Each core network element may have other names in other network architectures, and the embodiments of the present application do not limit this.
[0069] The following introduces the related terms of the embodiments of the present application:
[0070] I. Dual-plane large area
[0071] The dual-plane large area is also known as the dual-data center site (DC) large area, which means that multiple functionally identical but independent network element nodes are deployed within the large area. These independent network element nodes back up each other to achieve redundancy and load balancing. Among them, the large area is a logical partition covering a large geographical area, and the geographical area covered by the large area is larger than the geographical area covered by a province. For example, a large area usually includes one or more provinces. By way of example, the dual-plane large area may refer to deploying at least two core network network elements with the same function within a large area, such as at least two UDM network elements, including a primary UDM network element and a standby UDM network element. The primary UDM network element is the UDM network element enabled daily. Optionally, the standby UDM network element can also be enabled daily to reduce the processing volume of the primary UDM network element. Or, the standby UDM network element can be not enabled daily. When the primary UDM fails or the link connecting the primary UDM fails, the standby UDM is enabled.
[0072] II. Primary Plane and Escape Plane
[0073] The primary plane refers to the daily primary communication plane, including the daily primary communication path and the communication devices on the communication path. The escape plane refers to the communication plane that provides an emergency escape route when the primary plane fails to ensure the continuous operation of services. The escape plane includes the escape communication path and the communication devices on the escape path. By way of example, the communication devices in the escape plane may include access network devices and / or core network network elements, etc., and are not limited thereto. Optionally, if the primary plane is a dual plane, then the escape plane can ensure the continuous operation of services after both dual planes fail.
[0074] III. Processing Flow of UE Accessing the Network
[0075] After the UE is powered on, it needs to go through the following processing flow to implement the related services of the UE: Generally, the UE needs to first send a registration request to the network, thereby triggering the network to perceive the UE and obtain the authentication and subscription information of the UE, and authenticate and subscribe to the UE. By way of example, the authentication and subscription information of the UE includes, but is not limited to, the identifier of the UE, the authentication algorithm and / or subscription data, etc. Optionally, if the authentication of the UE is passed, security context information for the UE can also be generated. By way of example, the security context information of the UE includes the key generated during the UE authentication process, the security algorithm and / or security parameters, etc. The security context information of the UE can be used to ensure the legality of the mutual identity confirmation between the UE and the network, thereby ensuring the security of information transmission in the subsequent communication between the two parties.
[0076] The following takes the 5G mobile communication system as an example to introduce the application scenario of the embodiment of the present application:
[0077] Such as Figure 2As shown, the application scenario includes a first UE and a second UE. Among them, the first UE is located in a first area, and the second UE moves from a second area to the first area. Among them, the UDM in the first area stores the authentication and subscription information of the first UE, and the UDM in the second area stores the authentication and subscription information of the second UE.
[0078] When the first UE accesses the first area, it can initiate a registration and / or authentication and subscription request to the AMF in the first area. The AMF in the first area obtains the authentication and subscription information of the first UE from the UDM in the first area to complete the registration and / or authentication and subscription of the first UE. Optionally, the AMF in the first area can also obtain the security context information of the first UE generated during the registration and / or authentication and subscription process of the first UE.
[0079] When the second UE accesses the first area, it can initiate a registration and / or authentication and subscription request to the AMF in the first area. The AMF in the first area obtains the authentication and subscription information of the second UE from the UDM in the second area to complete the registration and / or authentication and subscription of the second UE. Optionally, the AMF in the first area can also obtain the security context information of the second UE generated during the registration and / or authentication and subscription process of the second UE.
[0080] Optionally, the above-mentioned first UE can be a local UE in the first area or the home area of the first UE is the first area; the second UE is a local UE in the second area or the home area of the second UE is the second area.
[0081] Optionally, the above-mentioned second UE moving from the second area to the first area belongs to international roaming (international roaming). For example, the first area is the service area of a country, and the second area is the service area of another country. Then, the second UE moving from the second area to the first area can be understood as the second UE's international roaming. The second UE is the incoming UE in the first area and the outgoing UE in the second area.
[0082] Optionally, the above-mentioned second UE moving from the second area to the first area belongs to inter-provincial roaming (inter-provincial roaming). For example, the first area is the service area of a province, and the second area is the service area of another province. Or, the first area is a dual-DC large area, and the second area is an area outside the dual-DC large area, such as Figure 2 As shown, two UDMs are deployed in the first area, including a primary UDM and a standby UDM. The primary UDM and the standby UDM can store the authentication and subscription information of the local UEs in the first area. Then, the second UE moving from the second area to the first area can be understood as the second UE's inter-provincial roaming. The second UE is the incoming UE in the first area and the outgoing UE in the second area.
[0083] Optionally, the movement of the second UE from the second area to the first area belongs to the movement between special areas. By way of example, the first area is a special area, and the special area is an area where faults are likely to occur and / or the link between the special area and the remaining areas is relatively single (that is, after the link fails, communication cannot be carried out through the remaining links), such as an island, etc., and the second area is a non-special area, such as a land area other than an island. In this case, when the first area fails, communication with the second area cannot be carried out. Then, the movement of the second UE from the second area to the first area can be understood as the second UE moving from a non-special area to a special area. Optionally, for the first area being a special area, there may be no UDM deployed in the first area, and the authentication and subscription information of the local UE in the first area can be stored in the UDM in the non-special area, such as the UDM in the second area. By way of example, the first area is an island near the second area. Since the coverage area of the first area is small, in order to save device resources and deployment costs, only RAN and AMF are deployed in the first area, and the UDM is deployed in the second area. In this way, when the local UE (such as the first UE) in the first area accesses the first area, the AMF in the first area obtains the authentication and subscription information of the first UE from the UDM in the second area to complete the registration and / or authentication and subscription of the first UE.
[0084] For Figure 2 the application scenario shown, after the first UE and the second UE access the first area, if the first area fails, the services running on the first UE and the second UE may be affected. By way of example, as Figure 3 shown, if the primary UDM in the first area fails, the secondary UDM in the first area fails, the link between the AMF in the first area and the primary UDM fails, the link between the AMF in the first area and the secondary UDM fails, and / or the link between the AMF in the first area and the UDM in the second area fails, etc., then the services running on the first UE and the second UE may be affected.
[0085] In this case, as Figure 3 shown, it will trigger the first UE and the second UE to re-register and / or authenticate and subscribe through the AMF and UDM on the escape plane. Among them, the corresponding escape link for this process can refer to Figure 3 , that is, the AMF on the escape plane obtains the authentication and subscription information of the first UE from the primary UDM and / or secondary UDM in the first area to complete the registration and / or authentication and subscription of the first UE; the AMF on the escape plane obtains the authentication and subscription information of the second UE from the UDM in the second area to complete the registration and / or authentication and subscription of the second UE.
[0086] However, if the AMF and UDM of the escape plane do not obtain the authentication subscription information of the first UE and the second UE, and do not pre-store the authentication subscription information and / or security context information of the first UE and the second UE, the first UE and the second UE cannot register and / or authenticate through the escape plane either, resulting in the abnormal operation of the services of the first UE and the second UE.
[0087] Exemplarily, if the primary UDM in the first area fails, the standby UDM in the first area fails, the link between the AMF of the escape plane and the primary UDM in the first area fails, and / or the link between the AMF of the escape plane and the standby UDM in the first area fails, etc., the AMF of the escape plane cannot obtain the authentication subscription information of the first UE from the primary UDM and / or standby UDM in the first area, and thus the AMF of the escape plane cannot obtain the security context information of the first UE generated based on the registration and / or authentication subscription of the first UE.
[0088] Exemplarily, if the UDM in the second area fails and / or the link between the AMF of the escape plane and the UDM in the second area fails, the AMF of the escape plane cannot obtain the authentication subscription information of the second UE, and thus the AMF of the escape plane cannot obtain the security context information of the second UE generated based on the registration and / or authentication subscription of the second UE.
[0089] To ensure the normal operation of the services of the terminal device, some communication methods are proposed in the embodiments of this application. These communication methods are introduced below in combination with specific scenarios:
[0090] 1. Roaming scenario
[0091] 1.1. Figure 4 A communication method is shown, and this communication method includes steps 401 to 406. Figure 4 The shown method can be applied to the terminal device side, between the first network element side and the second network element side. The terminal device side / the first network element side / the second network element side can be the terminal device / the first network element / the second network element, or can be a processor, module, chip, or chip system or functional module that implements this method, etc.
[0092] Figure 4 Taking the execution entities as the terminal device, the first network element, and the second network element as examples for introduction, where:
[0093] Step 401: The terminal device sends a first message to the first network element. The first message requests to process the terminal device. The first message includes the public land mobile network (PLMN) of the terminal device and / or the identifier of the terminal device. The first message is used to determine the roaming of the terminal device.
[0094] Accordingly, the first network element receives the first message.
[0095] In a possible implementation, the first network element may be located in the daily primary plane (primary plane); for example, the first network element may be an AMF, an MME, or a network element implementing the AMF or MME function in a future communication system, and the present application is not limited thereto.
[0096] In a possible implementation, the first message requests processing of the terminal device, specifically including: the first message requests registration and / or authentication subscription of the terminal device, or the first message requests registration update of the terminal device, etc. The present application does not limit the sending time of the first message and the operations performed by the first message for requesting the first network element, and is not limited to the above implementation. For example, when the terminal device accesses the service area of the first network element, the terminal device may send the first message to the first network element, and the first message may be a Registration request message. Or, the terminal device may periodically request the first network element for registration update, and may send the first message to the first network element each time it requests registration update, and the first message may be a Registration Update request message.
[0097] In a possible implementation, the PLMN of the terminal device in the first message is the PLMN of the access network when the terminal device accesses the service area of the first network element. Among them, the PLMN is composed of a mobile country code (MCC) and a mobile network code (MNC), and the MNC represents the operator.
[0098] In a possible implementation, the identifier of the terminal device in the first message includes the identifier of the terminal device in the home network and / or the identifier of the terminal device in the service area of the first network element. By way of example, it includes one or more of the following: the subscription permanent identity (SUPI) of the terminal device, the subscription concealed identifier (SUCI) of the terminal device, the international mobile subscriber identity (IMSI) number segment of the terminal device, or the mobile station international subscriber directory number (MSISDN) number segment of the terminal device. Among them, SUPI can be composed of MCC, MNC, and mobile subscriber identification number (MSIN). SUCI is the encrypted identifier corresponding to SUPI. For example, SUCI is composed of MCC, MNC, and encrypted MSIN. IMSI can be composed of MCC, MNC, and MSIN. The IMSI number segment can include MCC and / or MNC in ISMI, etc. MSISDN can be composed of country code (CC), national destination code (NDC), and subscriber number (SN). The MSISDN number segment can include CC and / or NDC in MSISDN, etc.
[0099] In the embodiment of the present application, when the first network element receives the first message, it can determine that the terminal device is roaming according to the first message, and then execute step 402 below.
[0100] In a possible implementation, the first network element can determine that the terminal device is roaming internationally according to the PLMN of the terminal device and / or the identifier of the terminal device in the first message.
[0101] By way of example, the first network element obtains the PLMN of the home network of the terminal device (home PLMN), and determines that the terminal device is roaming internationally according to the home PLMN and the PLMN of the terminal device in the first message. Or, the first network element obtains the identifier of the network where the first network element is located, and determines that the terminal device is roaming internationally according to the identifier of the network where the first network element is located and the identifier of the terminal device. Or, the first network determines that the terminal device is roaming internationally according to the PLMN of the terminal device and the identifier of the terminal device in the first message. Without being limited to the above examples, the present application is not limited thereto.
[0102] In another possible implementation, the first network element may determine that the terminal device is not roaming in the country based on the terminal device's PLMN in the first message and / or the identifier of the terminal device; furthermore, the first network element may obtain the identifier of the home network element of the terminal device, and determine that the terminal device is roaming in the province based on the identifier of the home network element of the terminal device.
[0103] Exemplarily, the home network element of the terminal device may be a home UDM, HSS, or a network element that implements the functions of a home UDM or HSS in a future communication system. Taking the home UDM as an example, the first network element may obtain the instance identifier (InstanceID) of the home UDM, and determine that the terminal device is roaming in the province by comparing the Instance ID of the home UDM with the Instance ID of the local UDM of the first network element.
[0104] Optionally, if the first network element determines that the terminal device is not roaming based on the first message, that is, the terminal device is a local terminal device in the service area of the first network element, the first network element may obtain the authentication and subscription information of the terminal device from the network element corresponding to the first network element that locally stores the authentication and subscription information of the terminal device, and perform registration and / or authentication and subscription on the terminal device according to the authentication and subscription information of the terminal device. Optionally, the first network element may also obtain the security context information of the terminal device generated during the registration and / or authentication and subscription process of the terminal device. Further optionally, the first network element may instruct the network element corresponding to the first network element that locally stores the authentication and subscription information of the terminal device to automatically export the authentication and subscription information of the terminal device to a third network element (i.e., automatically export the authentication and subscription information of the local user); in this way, based on the authentication and subscription information of the terminal device stored in the third network element, the normal operation of the terminal device's services can be ensured.
[0105] In one possible implementation, the network element corresponding to the first network element that locally stores the authentication and subscription information of the terminal device may be located in the main plane. Exemplarily, the network element corresponding to the first network element that locally stores the authentication and subscription information of the terminal device may be a UDM, HSS, or a network element that implements the functions of a UDM or HSS in a future communication system, and this application is not limited thereto.
[0106] In a possible implementation, the main plane where the first network element is located is a dual-plane. Then, the number of network elements corresponding to the authentication and subscription information of the local storage terminal device of the first network element can be at least two. Taking the network element corresponding to the authentication and subscription information of the local storage terminal device of the first network element as the local UDM for example, the local UDM at least includes a primary UDM and a standby UDM. The specific implementation for the first network element to obtain the authentication and subscription information of the terminal device from the local UDM includes: the first network element can first attempt to obtain the authentication and subscription information of the terminal device from the local primary UDM; if the first network element cannot obtain the authentication and subscription information of the terminal device from the local primary UDM, then the first network element can obtain the authentication and subscription information of the terminal device from the local standby UDM.
[0107] In a possible implementation, the third network element can be located in the escape plane. Exemplarily, the third network element can be a UDM, an HSS, or other devices for caching data (such as a data caching center), etc.; or, the third network element can be a network element that implements the UDM or HSS function in a future communication system, and this application does not limit this.
[0108] Step 402: The first network element sends a second message to the second network element. The second message requests to register and / or authenticate and subscribe to the terminal device. The second message includes the PLMN of the terminal device and / or the identifier of the terminal device.
[0109] Correspondingly, the second network element receives the second message.
[0110] In a possible implementation, the second network element can be located in the escape plane. Exemplarily, the second network element can be an AMF, an MME, or a network element that implements the AMF or MME function in a future communication system, and this application does not limit this.
[0111] In a possible implementation, the second message is an N1 message or an N2 message. The implementation of the second message including the PLMN of the terminal device and / or the identifier of the terminal device can refer to the implementation of the first message, and will not be elaborated here.
[0112] Step 403: The second network element obtains the authentication and subscription information and / or security context information of the terminal device.
[0113] In a possible implementation manner, the specific implementation manner for the second network element to obtain the authentication and subscription information and / or security context information of the terminal device includes: the second network element determines that the terminal device is roaming according to the second message; obtains the authentication and subscription information of the terminal device from the home network element of the terminal device, and authenticates and / or subscribes to the terminal device according to the authentication and subscription information of the terminal device. Optionally, the second network element also generates the security context information of the terminal device generated during the registration and / or authentication and subscription process of the terminal device. The second network element determines that the terminal device is roaming, which can be implemented with reference to the first network element determining that the terminal device is roaming, and will not be elaborated here.
[0114] Optionally, if the second network element determines that the terminal device is not roaming, that is, the terminal device is a local terminal device in the service area of the second network element, the second network element may obtain the authentication and subscription information of the terminal device from the network element corresponding to the second network element that locally stores the authentication and subscription information of the terminal device, and register and / or authenticate and subscribe to the terminal device according to the authentication and subscription information of the terminal device. Optionally, the second network element also obtains the security context information of the terminal device generated during the registration and / or authentication and subscription process of the terminal device.
[0115] In a possible implementation manner, the network element corresponding to the second network element that locally stores the authentication and subscription information of the terminal device may be located in the escape plane. Exemplarily, the network element corresponding to the second network element that locally stores the authentication and subscription information of the terminal device may be a UDM, an HSS, or a network element that implements the functions of a UDM or an HSS in a future communication system, and the present application is not limited thereto.
[0116] Step 404: The second network element stores the authentication and subscription information and / or security context information of the terminal device.
[0117] Step 405: The terminal device sends a sixth message to the second network element. The sixth message requests to register and / or authenticate and subscribe to the terminal device. The sixth message includes the PLMN of the terminal device and / or the identifier of the terminal device. The sixth message is used to determine that the terminal device is roaming and the home network element of the terminal device.
[0118] Correspondingly, the second network element receives the sixth message.
[0119] In the embodiment of the present application, the terminal device sends a sixth message to the second network element after deregistration. After receiving the sixth message, the second network element may determine that the terminal device is roaming and the home network element of the terminal device according to the sixth message, and then execute the following step 406. The second network element determines that the terminal device is roaming, which can be implemented with reference to step 401, and will not be elaborated here.
[0120] In a possible implementation, the sixth message may be a Registration request message. The inclusion of the PLMN of the terminal device and / or the identifier of the terminal device in the sixth message may be implemented with reference to the first message and will not be elaborated here.
[0121] Optionally, if the second network element determines that the terminal device is not roaming, the second network element registers and / or authenticates and subscribes to the terminal device in the following manner: obtaining the authentication and subscription information of the terminal device from the network element corresponding to the second network element that locally stores the authentication and subscription information of the terminal device, or obtaining the authentication and subscription information and / or security context information of the terminal device locally; performing registration and / or authentication and subscription on the terminal device based on the obtained authentication and subscription information and / or security context information of the terminal device. Among them, obtaining the authentication and subscription information of the terminal device from the network element corresponding to the second network element that locally stores the authentication and subscription information of the terminal device can ensure that the second network element obtains the latest authentication and subscription information as much as possible, thereby improving the accuracy of the registration and / or authentication and subscription of the terminal device. And obtaining the authentication and subscription information and / or security context information of the local terminal device at least ensures that the terminal device can be registered and / or authenticated and subscribed, so as to ensure the continuous operation of the services that the terminal device is running.
[0122] Optionally, the terminal device may first attempt to obtain the authentication and subscription information of the terminal device from the network element corresponding to the second network element that locally stores the authentication and subscription information of the terminal device; if successful, perform registration and / or authentication and subscription on the terminal device based on the authentication and subscription information of the terminal device, and obtain the security context information of the terminal device generated during the registration and / or authentication and subscription process; if failed (such as the network element corresponding to the second network element that locally stores the authentication and subscription information of the terminal device fails, or the link between the second network element and it fails, etc.), perform registration and / or authentication and subscription on the terminal device based on the authentication and subscription information and / or security context information of the terminal device obtained locally.
[0123] Optionally, if the registration and / or authentication and subscription of the terminal device is completed, the second network element may store the authentication and subscription information and / or security context information of the terminal device obtained during this registration and / or authentication and subscription process. In this way, information can be provided for the next registration and / or authentication and subscription.
[0124] Step 406: When the home network element fails or the link between the home network element and the second network element fails, the second network element performs registration and / or authentication and subscription on the terminal device based on the authentication and subscription information and / or security context information of the terminal device.
[0125] In the embodiments of the present application, for the roaming terminal device identified by the second network element, the second network element may register and / or authenticate and subscribe to the terminal device according to the following method 1 and / or method 2: Method 1: The second network element obtains the authentication and subscription information of the terminal device from the home network element of the terminal device, and then registers and / or authenticates and subscribes to the terminal device based on the authentication and subscription information of the terminal device. Method 2: According to the above content, it can be known that the authentication and subscription information of the terminal devices within the service area of the first network element can be exported to the third network element, or according to step 404 above, the authentication and subscription information and / or security context information of the terminal devices within the service area of the first network element can be stored in the second network element. Therefore, the second network element can obtain the authentication and subscription information and / or security context information of the terminal device from the third network element or locally, and register and / or authenticate and subscribe to the terminal device.
[0126] In a possible implementation manner, the second network element may first attempt to register and / or authenticate and subscribe to the terminal device according to the above method 1; if the home network element fails or the link between the home network element and the second network element fails, etc., it may register and / or authenticate and subscribe to the terminal device according to the above method 2 (that is, execute step 406), so as to at least ensure that the terminal device can be registered and / or authenticated and subscribed to, thereby ensuring the continuous operation of the services that the terminal device is running.
[0127] In a possible implementation manner, for method 2, the second network element may first determine whether it stores the authentication and subscription information and / or security context information of the terminal device; if the second network element stores the authentication and subscription information and / or security context information of the terminal device, the second network element registers and / or authenticates and subscribes to the terminal device based on the stored authentication and subscription information and / or security context information of the terminal device; if the second network element does not store the authentication and subscription information and / or security context information of the terminal device, the second network element obtains the authentication and subscription information of the terminal device from the third network element, and registers and / or authenticates and subscribes to the terminal device based on the obtained authentication and subscription information of the terminal device.
[0128] In the embodiments of the present application, the roaming terminal device identified by the second network element in step 405 may be a local terminal device of the first network element or a roaming terminal device identified by the first network element, and the present application does not make any limitation thereto. By way of example, if the home location of the terminal device is home location 1, the first network element is a network element in home location 2, and the second network element is a network element in home location 3, then the first network element can determine that the terminal device is roaming, and then execute the implementation manners for the roaming terminal device in the above steps 401-step 404; similarly, the second network element can also determine that the terminal device is roaming, and then execute the implementation manners for the roaming terminal device in the above steps 405-step 406.
[0129] Based on Figure 4In the described embodiments, for a terminal device in the service area of a first network element, the first network element may first identify whether the terminal device is roaming or not; if roaming, the first network element migrates the terminal device to a second network element for registration and / or authentication and signing, so that the second network element can store the authentication and signing information and / or security context information of the terminal device after registering and / or authenticating and signing the terminal device; conversely, if not roaming, the first network element normally registers and / or authenticates and signs the terminal device, and exports the authentication and signing information of the terminal device to a third network element. Since both the second network element and the third network element are located in the escape plane, all terminal devices in the service area of the first network element can also perform re-registration and / or authentication and signing in the escape plane when a failure occurs in the main plane. In this way, it is beneficial to ensure the normal operation of the services of all terminal devices in the service area of the first network element.
[0130] Optionally, in the above Figure 4 described embodiments, steps 403 - 406 after step 402 can also be replaced by the following method: After the second network element receives the second message and determines that the terminal device is roaming, the second network element can still obtain the authentication and signing information of the terminal device from the network element corresponding to the second network element that locally stores the authentication and signing information of the terminal device. The network element corresponding to the second network element that locally stores the authentication and signing information of the terminal device obtains the authentication and signing information of the terminal device from the home network element of the terminal device and stores the authentication and signing information of the terminal device. At the same time, the network element corresponding to the second network element that locally stores the authentication and signing information of the terminal device returns the authentication and signing information of the terminal device to the second network element, so that the second network element can register and / or authenticate and sign the terminal device. After a failure occurs in the main plane, the terminal device deregisters. Since the network element corresponding to the second network element that locally stores the authentication and signing information of the terminal device stores the authentication and signing information of the terminal device, the second network element can still obtain the authentication and signing information of the terminal device, and thus re-register and / or authenticate and sign the terminal device again.
[0131] Based on the above Figure 4 described embodiments, taking the 5G mobile communication system as an example, Figure 5 shows a schematic diagram of the process before and during UE escape. Among them, in Figure 5 it, the local AMF is the above-mentioned first network element, the escape AMF is the above-mentioned second network element, the escape UDM / data cache center is the above-mentioned third network element, the foreign UDM is the above-mentioned fourth network element, and the local UDM is the network element corresponding to the above-mentioned first network element that locally stores the authentication and signing information of the terminal device.
[0132] Step 501, the local AMF receives a registration request from the UE.
[0133] Step 502, the local AMF identifies whether the UE is roaming.
[0134] In an embodiment of the present application, if the local AMF identifies that the UE is not roaming, steps 503 to 505 are executed; otherwise, steps 506 to 511 are executed. Among them, steps 501 to 505 can be implemented with reference to step 501, which will not be elaborated here.
[0135] Step 503: The local AMF obtains the authentication and subscription information of the UE from the local UDM.
[0136] Step 504: The local UDM exports the authentication and subscription information of the UE to the escape UDM / data cache center.
[0137] Step 505: The local AMF registers and / or authenticates and subscribes to the UE.
[0138] Step 506: The local AMF migrates the UE to the escape AMF.
[0139] Step 506 can be implemented with reference to step 402, which will not be elaborated here.
[0140] Step 507: The escape AMF identifies whether the UE is roaming.
[0141] In an embodiment of the present application, if the escape AMF identifies that the UE is roaming, steps 508, 510, and 511 are executed; otherwise, steps 509, 510, and 511 are executed. Among them, steps 507 to 511 can be implemented with reference to steps 403 to 404, which will not be elaborated here.
[0142] Step 508: The escape AMF obtains the authentication and subscription information of the UE from the escape UDM / data cache center.
[0143] Step 509: The escape AMF obtains the authentication and subscription information of the UE from the foreign UDM.
[0144] Step 510: The escape AMF registers and / or authenticates and subscribes to the UE, and obtains the security context information of the UE.
[0145] Step 511: The escape AMF stores the authentication and subscription information and / or security context information of the UE.
[0146] Step 512: The escape AMF receives a registration request from the UE.
[0147] Step 513: The escape AMF identifies whether the UE is roaming.
[0148] In the embodiment of the present application, if the escape AMF identifies that the UE is not roaming, steps 514 and 516 are executed; otherwise, steps 515 and 516 are executed. Among them, steps 512 to 516 can be implemented with reference to steps 405 to 406, which will not be elaborated here.
[0149] Step 514: The escape AMF obtains the authentication subscription information and / or security context information of the UE from the escape UDM / data cache center / local.
[0150] Step 515: The escape AMF obtains the authentication subscription information and / or security context information of the UE from the local UDM in the primary plane / the foreign UDM in the primary plane / the escape UDM / data cache center / local.
[0151] Step 516: The escape AMF performs registration and / or authentication subscription on the UE.
[0152] 1.2. Figure 6 A communication method is shown, and the communication method includes steps 601 to 606. Figure 6 The shown method can be applied between the terminal device side, the first network element side, the second network element side, and the third network element side. The terminal device side / first network element side / second network element side / third network element side can be the terminal device / first network element / second network element / third network element, or can be a processor, module, chip, or chip system or functional module that implements the method, etc. In the embodiment of the present application, the specific implementation manners of the first network element, the second network element, and the third network element can be referred to the above embodiments, which will not be elaborated here.
[0153] Figure 6 Taking the execution entities as the terminal device, the first network element, the second network element, and the third network element as examples for introduction, where:
[0154] Step 601: The terminal device sends a first message to the first network element. The first message requests to process the terminal device. The first message includes the PLMN of the terminal device and / or the identifier of the terminal device. The first message is used to determine the roaming of the terminal device.
[0155] Correspondingly, the terminal device receives the first message.
[0156] In the embodiment of the present application, when the first network element receives the first message, it can determine the roaming of the terminal device according to the first message, and then execute the following step 602, which can be specifically implemented with reference to the above step 401 and will not be elaborated here.
[0157] Optionally, if the first network element determines based on the first message that the terminal device is not roaming, that is, the terminal device is a local terminal device in the service area of the first network element, the first network element may obtain the authentication and subscription information of the terminal device from the network element corresponding to the first network element that locally stores the authentication and subscription information of the terminal device, and perform registration and / or authentication and subscription on the terminal device according to the authentication and subscription information of the terminal device. Optionally, the first network element also obtains the security context information of the terminal device generated during the registration and / or authentication and subscription of the terminal device. Further optionally, the first network element may instruct the network element corresponding to the first network element that locally stores the authentication and subscription information of the terminal device to automatically export the authentication and subscription information of the terminal device to the third network element (i.e., automatically export the authentication and subscription information of the local user); in this way, based on the authentication and subscription information of the terminal device stored in the third network element, the normal operation of the services of the terminal device can be ensured. The network element corresponding to the first network element that locally stores the authentication and subscription information of the terminal device may be implemented with reference to the above embodiments and will not be elaborated here.
[0158] Optionally, the first network element may also not determine whether the terminal device is roaming, and perform the following step 602 and the following step 603 for all terminal devices in the service area of the first network element.
[0159] Step 602: The first network element obtains the authentication and subscription information and / or security context information of the terminal device.
[0160] In a possible implementation manner, the specific implementation manner for the first network element to obtain the authentication and subscription information and / or security context information of the terminal device includes: The first network element obtains the authentication and subscription information of the terminal device from the home network element of the terminal device, and performs authentication and / or authentication and subscription on the terminal device according to the authentication and subscription information of the terminal device. Optionally, the first network element also obtains the security context information of the terminal device generated during the registration and / or authentication and subscription of the terminal device. Among them, the home network element of the terminal device may be implemented with reference to the above embodiments and will not be elaborated here.
[0161] Step 603: The first network element sends a third message to the third network element, and the third message includes the authentication and subscription information and / or security context information of the terminal device.
[0162] Correspondingly, the third network element receives the third message.
[0163] Step 604: The terminal device sends a sixth message to the second network element. The sixth message requests registration and / or authentication and subscription of the terminal device. The sixth message includes the PLMN of the terminal device and / or the identifier of the terminal device. The sixth message is used to determine the roaming of the terminal device and the home network element of the terminal device.
[0164] Correspondingly, the second network element receives the sixth message.
[0165] In an embodiment of the present application, after deregistration, the terminal device sends a sixth message to a second network element. After receiving the sixth message, the second network element can determine the roaming of the terminal device and the home network element of the terminal device based on the sixth message, and then perform the following step 605. The determination of the roaming of the terminal device and the sixth message by the second network element can be implemented with reference to the above embodiments, which will not be elaborated herein.
[0166] Optionally, if the second network element determines that the terminal device is not roaming, the second network element registers and / or authenticates and subscribes to the terminal device in the following manner: obtaining the authentication and subscription information of the terminal device from the network element corresponding to the second network element that locally stores the authentication and subscription information of the terminal device, or obtaining the authentication and subscription information and / or security context information of the terminal device locally; registering and / or authenticating and subscribing to the terminal device based on the obtained authentication and subscription information and / or security context information of the terminal device. Among them, obtaining the authentication and subscription information of the terminal device from the network element corresponding to the second network element that locally stores the authentication and subscription information of the terminal device can ensure that the second network element obtains the latest authentication and subscription information as much as possible, thereby improving the accuracy of the registration and / or authentication and subscription of the terminal device. And obtaining the authentication and subscription information and / or security context information of the local terminal device at least ensures that the terminal device can be registered and / or authenticated and subscribed, so as to ensure the continuous operation of the services that the terminal device is running.
[0167] Optionally, the terminal device can first attempt to obtain the authentication and subscription information of the terminal device from the network element corresponding to the second network element that locally stores the authentication and subscription information of the terminal device; if successful, register and / or authenticate and subscribe to the terminal device based on the authentication and subscription information of the terminal device, and obtain the security context information of the terminal device generated during the registration and / or authentication and subscription process; if failed (such as the network element corresponding to the second network element that locally stores the authentication and subscription information of the terminal device fails, or the link between the second network element and it fails, etc.), register and / or authenticate and subscribe to the terminal device based on the authentication and subscription information and / or security context information of the terminal device obtained locally.
[0168] Optionally, if the registration and / or authentication and subscription of the terminal device is completed, the second network element can store the authentication and subscription information and / or security context information of the terminal device obtained during this registration and / or authentication and subscription process. In this way, information can be provided for the next registration and / or authentication and subscription.
[0169] Step 605: When the home network element fails or the link between the home network element and the second network element fails, the second network element obtains the authentication and subscription information and / or security context information of the terminal device from a third network element.
[0170] Step 606: The second network element registers and / or authenticates and subscribes to the terminal device based on the authentication and subscription information and / or security context information of the terminal device.
[0171] In an embodiment of this application, for the identified roaming terminal device, the second network element may register and / or authenticate and subscribe to the terminal device in the following manner 3 and / or manner 4: Manner 3: The second network element obtains the authentication and subscription information of the terminal device from the home network element of the terminal device, and thus registers and / or authenticates and subscribes to the terminal device based on the authentication and subscription information of the terminal device. Manner 4: According to the above, the authentication and subscription information and / or security context information of the terminal device within the service area of the first network element can be exported to the third network element. Therefore, the second network element can obtain the authentication and subscription information and / or security context information of the terminal device from the third network element and register and / or authenticate and subscribe to the terminal device.
[0172] In a possible implementation manner, the second network element may first attempt to register and / or authenticate and subscribe to the terminal device in the above manner 3; if the home network element fails or the link between the home network element and the second network element fails, etc., it may register and / or authenticate and subscribe to the terminal device in the above manner 4 (i.e., execute steps 605 to 606), so as to at least ensure that the terminal device can be registered and / or authenticated and subscribed to, thereby ensuring the continuous operation of the services being run by the terminal device.
[0173] In an embodiment of this application, the roaming terminal device identified by the second network element in step 604 may be a local terminal device of the first network element or a roaming terminal device identified by the first network element, and this application does not make any limitations in this regard. By way of example, if the home location of the terminal device is home location 1, the first network element is a network element in home location 2, and the second network element is a network element in home location 3, then the first network element can determine that the terminal device is roaming and then execute the implementation manner for the roaming terminal device in the above steps 601 - 603; similarly, the second network element can also determine that the terminal device is roaming and then execute the implementation manner for the roaming terminal device in the above steps 604 - 606.
[0174] Optionally, in an embodiment of this application, in step 601, the first network element may also export the authentication and subscription information and / or security context information of the identified roaming terminal device and the authentication and subscription information of the non-roaming terminal device to different network elements on the escape plane. For example, the first network element exports the authentication and subscription information and / or security context information of the identified roaming terminal device to the data cache center on the escape plane and exports the authentication and subscription information of the non-roaming terminal device to the UDM network element on the escape plane. This application does not make any limitations in this regard.
[0175] Optionally, in the embodiments of the present application, after step 603, if the first network element is not faulty and the link between the first network element and the terminal device is not faulty, then the second network element in the above steps 604 - 606 can also be replaced by the first network element. That is, the registration and / or authentication and signing of the terminal device are still performed by the network element on the primary plane. The present application does not limit this. If the first network element is faulty and / or the link between the first network element and the terminal device is faulty, then the above steps 604 - 606 are executed.
[0176] Based on Figure 6 the described embodiments, for the terminal devices in the service area of the first network element, whether the first network element identifies that the terminal device is roaming / non - roaming, the first network element can normally perform registration and / or authentication and signing for the terminal device, so that after the first network element performs registration and / or authentication and signing for the terminal device, it can export the authentication and signing information and / or security context information of the terminal device to the escape plane. Therefore, when the primary plane fails, all terminal devices in the service area of the first network element can also achieve re - registration and / or authentication and signing on the escape plane. In this way, it is beneficial to ensure the normal operation of the services of all terminal devices in the service area of the first network element.
[0177] Based on the above Figure 6 described embodiments, taking the 5G mobile communication system as an example, Figure 7 shows a schematic diagram of the process before and during the escape of the UE. Among them, in Figure 7 it, the local AMF is the above - mentioned first network element, the escape AMF is the above - mentioned second network element, the escape UDM / data cache center is the above - mentioned third network element, the foreign UDM is the above - mentioned fourth network element, and the local UDM is the network element that stores the authentication and signing information of the local terminal device corresponding to the above - mentioned first network element.
[0178] Step 701: The local AMF receives a registration request from the UE.
[0179] Step 702: The local AMF identifies whether the UE is roaming.
[0180] In the embodiments of the present application, if the local AMF identifies that the UE is not roaming, then steps 703 to 705 are executed; otherwise, steps 706 to 708 are executed. Among them, steps 701 to 705 can be implemented with reference to step 601 and will not be elaborated here.
[0181] Step 703: The local AMF obtains the authentication and signing information of the UE from the local UDM.
[0182] Step 704: The local UDM exports the authentication and signing information of the UE to the escape UDM / data cache center.
[0183] Step 705: The local AMF registers and / or authenticates and subscribes to the UE.
[0184] Step 706: The local AMF obtains the authentication and subscription information of the UE from the foreign UDM.
[0185] Step 707: The local AMF registers and / or authenticates and subscribes to the UE, and obtains the security context information of the UE.
[0186] Step 706 and Step 707 can be implemented with reference to Step 602, and will not be elaborated here.
[0187] Step 708: The local AMF exports the authentication and subscription information and / or security context information of the UE to the escape UDM / data cache center.
[0188] Step 708 can be implemented with reference to Step 603, and will not be elaborated here.
[0189] Step 709: The escape AMF receives a registration request from the UE.
[0190] Step 710: The escape AMF identifies whether the UE is roaming.
[0191] In the embodiment of the present application, if the escape AMF identifies that the UE is not roaming, then Step 711 and Step 713 are executed; otherwise, Step 712 and Step 713 are executed. Among them, Step 709 to Step 713 can be implemented with reference to Step 604 to Step 606, and will not be elaborated here.
[0192] Step 711: The escape AMF obtains the authentication and subscription information and / or security context information of the UE from the escape UDM / data cache center / local.
[0193] Step 712: The escape AMF obtains the authentication and subscription information and / or security context information of the UE from the local UDM in the primary plane / the foreign UDM in the primary plane / the escape UDM / data cache center / local.
[0194] Step 713: The escape AMF registers and / or authenticates and subscribes to the UE.
[0195] 1.3、 Figure 8 A communication method is shown, and the communication method includes Step 801 to Step 805. Figure 8The method shown can be applied among the terminal device side, the first network element side, the second network element side, the third network element side, and the fourth network element side. The terminal device side / the first network element side / the second network element side / the third network element side / the fourth network element side can be the terminal device / the first network element / the second network element / the third network element / the fourth network element, or can be a processor, module, chip, or chip system or functional module that implements the method, etc. In the embodiments of the present application, the specific implementation manners of the first network element, the second network element, and the third network element can be implemented with reference to the above embodiments and will not be elaborated here.
[0196] Figure 8 Taking the execution entities as the terminal device, the first network element, the second network element, the third network element, and the fourth network element as examples for introduction, where:
[0197] Step 801: The first network element sends a fourth message to the fourth network element. The fourth message requests to obtain the authentication and subscription information of the terminal device. The fourth message includes the operator mobile network identifier PLMN of the terminal device and / or the identifier of the terminal device. The fourth message is used to determine that the terminal device has roamed out.
[0198] Correspondingly, the fourth network element receives the fourth message.
[0199] In a possible implementation manner, the fourth network element is the home network element of the terminal device. By way of example, the fourth network element can be the home UDM, HSS of the terminal device, or a network element that implements the functions of the home UDM or HSS in a future communication system.
[0200] In a possible implementation manner, before step 801, the terminal device can first send a first message to the first network element. The first message requests to process the terminal device. The first message includes the PLMN of the terminal device and / or the identifier of the terminal device. The first message is used to determine that the terminal device is roaming; this process can be implemented with reference to step 401 above and will not be elaborated here. Then, the first network element sends a fourth message to the fourth network element. That is to say, after the first network element determines that the terminal device is roaming, it sends a fourth message to the fourth network element. Optionally, with reference to step 401 above, if the first network element determines that the terminal device is not roaming, the first network element automatically exports the authentication and subscription information of the terminal device to the third network element.
[0201] In the embodiments of the present application, after receiving the fourth message, the fourth network element can determine that the terminal device has roamed out according to the fourth message, and then execute the following step 802.
[0202] In a possible implementation manner, the fourth network element can determine that the terminal device has roamed out according to the PLMN of the terminal device and / or the identifier in the fourth message. Among them, the terminal device roaming out means that the fourth network element determines that the terminal device belongs to the service area of the fourth network element, but the terminal device is currently accessing other service areas.
[0203] In a possible implementation, the PLMN of the terminal device in the fourth message is the PLMN of the access network when the terminal device accesses the service area of the first network element.
[0204] In a possible implementation, the identifier of the terminal device in the fourth message includes the identifier of the terminal device in the home network and / or the identifier of the terminal device in the service area of the first network element. Exemplarily, it includes one or more of the following: the SUPI of the terminal device, the SUCI of the terminal device, the IMSI number segment of the terminal device, or the MSISDN number segment of the terminal device.
[0205] Optionally, the fourth message may further include the identifier of the service area of the first network element and / or the identifier of the first network element, etc. The fourth network element may determine that the terminal device has roamed based on the PLMN of the terminal device, the identifier of the terminal device, the identifier of the service area of the first network element, and / or the identifier of the first network element.
[0206] Step 802: The fourth network element sends a fifth message to the third network element. The fifth message includes the authentication and subscription information of the terminal device.
[0207] Correspondingly, the third network element receives the fifth message.
[0208] In the embodiment of the present application, the fourth network element stores the authentication and subscription information of the terminal device. After determining that the terminal device has roamed, the fourth network element may send a fifth message to the third network element. The fifth message includes the authentication and subscription information of the terminal device.
[0209] Step 803: The terminal device sends a sixth message to the second network element. The sixth message requests registration and / or authentication and subscription for the terminal device. The sixth message includes the PLMN of the terminal device and / or the identifier of the terminal device. The sixth message is used to determine the roaming of the terminal device and the home network element of the terminal device.
[0210] Correspondingly, the second network element receives the sixth message.
[0211] In the embodiment of the present application, the terminal device sends the sixth message to the second network element after deregistration. After receiving the sixth message, the second network element may determine the roaming of the terminal device and the home network element of the terminal device according to the sixth message, and then execute the following step 804. The determination of the roaming of the terminal device and the sixth message by the second network element may be implemented with reference to the above embodiments and will not be elaborated here.
[0212] Optionally, if the second network element determines that the terminal device is not roaming, the second network element performs registration and / or authentication and subscription for the terminal device in the following manner: obtaining the authentication and subscription information of the terminal device from the network element corresponding to the second network element that locally stores the authentication and subscription information of the terminal device, or obtaining the authentication and subscription information and / or security context information of the terminal device locally; performing registration and / or authentication and subscription for the terminal device based on the obtained authentication and subscription information and / or security context information of the terminal device. Among them, obtaining the authentication and subscription information of the terminal device from the network element corresponding to the second network element that locally stores the authentication and subscription information of the terminal device can ensure that the second network element obtains the latest authentication and subscription information as much as possible, thereby improving the accuracy of the registration and / or authentication and subscription of the terminal device. And obtaining the authentication and subscription information and / or security context information of the local terminal device can at least ensure that the terminal device can be registered and / or authenticated and subscribed, so as to ensure that the services running on the terminal device continue to run.
[0213] Optionally, the terminal device may first attempt to obtain the authentication and subscription information of the terminal device from the network element corresponding to the second network element that locally stores the authentication and subscription information of the terminal device; if successful, perform registration and / or authentication and subscription for the terminal device based on the authentication and subscription information of the terminal device, and obtain the security context information of the terminal device generated during the registration and / or authentication and subscription process; if failed (such as the network element corresponding to the second network element that locally stores the authentication and subscription information of the terminal device fails, or the link between the second network element and it fails, etc.), perform registration and / or authentication and subscription for the terminal device based on the authentication and subscription information and / or security context information of the terminal device obtained locally.
[0214] Optionally, if the registration and / or authentication and subscription of the terminal device is completed, the second network element may store the authentication and subscription information and / or security context information of the terminal device obtained during this registration and / or authentication and subscription process. In this way, information can be provided for the next registration and / or authentication and subscription.
[0215] Step 804, when the home network element fails or the link between the home network element and the second network element fails, the second network element obtains the authentication and subscription information and / or security context information of the terminal device from the third network element.
[0216] Step 805, the second network element performs registration and / or authentication and subscription for the terminal device based on the authentication and subscription information and / or security context information of the terminal device.
[0217] In an embodiment of the present application, for the identified roaming terminal device, the second network element may register and / or authenticate and subscribe to the terminal device in the following manner 3 and / or manner 4: Manner 3: The second network element obtains the authentication and subscription information of the terminal device from the home network element of the terminal device, and then registers and / or authenticates and subscribes to the terminal device based on the authentication and subscription information of the terminal device. Manner 4: According to the above content, the authentication and subscription information and / or security context information of the terminal device within the service area of the first network element can be exported to the third network element. Therefore, the second network element can obtain the authentication and subscription information and / or security context information of the terminal device from the third network element, and register and / or authenticate and subscribe to the terminal device.
[0218] In a possible implementation manner, the second network element may first attempt to register and / or authenticate and subscribe to the terminal device in the above manner 3; if the home network element fails or the link between the home network element and the second network element fails, etc., then the second network element may register and / or authenticate and subscribe to the terminal device in the above manner 4 (i.e., perform steps 804 to step 805), so as to at least ensure that the terminal device can be registered and / or authenticated and subscribed, thereby ensuring the continuous operation of the services being run by the terminal device.
[0219] In an embodiment of the present application, the roaming terminal device identified by the second network element in step 803 may be a local terminal device of the first network element, or a roaming terminal device identified by the first network element. The present application does not make any limitations in this regard. By way of example, if the home location of the terminal device is home location 1, the first network element is a network element in home location 2, and the second network element is a network element in home location 3, then the first network element may determine that the terminal device is roaming, and then perform the above steps 801 and 802; similarly, the second network element may also determine that the terminal device is roaming, and then perform the implementation manner for the roaming terminal device in the above steps 803 - step 805.
[0220] Optionally, in an embodiment of the present application, the network elements from which the authentication and subscription information of the non-roaming terminal device is exported in step 801 and the authentication and subscription information of the roaming-out terminal device is exported in step 802 may be different. The present application does not make any limitations in this regard.
[0221] Optionally, in an embodiment of the present application, after step 802, if the first network element does not fail and the link between the first network element and the terminal device does not fail, then the second network element in the above steps 803 - step 805 may be replaced by the first network element. That is, the terminal device is still registered and / or authenticated and subscribed by the network element in the primary plane. The present application does not make any limitations in this regard. If the first network element fails and / or the link between the first network element and the terminal device fails, then perform the above steps 804 - step 805.
[0222] Based on Figure 8In the described embodiment, for a terminal device in the service area of the first network element, the first network element may first identify whether the terminal device is roaming or not; if it is roaming, the home network element of the terminal device (i.e., the fourth network element) determines whether the terminal device has roamed out. If it has roamed out, the fourth network element exports the authentication and subscription information of the terminal device to the third network element. Conversely, if it is not roaming, the first network element normally registers and / or authenticates and subscribes to the terminal device, so that after registering and / or authenticating and subscribing to the terminal device, the first network element can export the authentication and subscription information of the terminal device to the third network element. Since the third network element is located in the escape plane, all terminal devices in the service area of the first network element can also re-register and / or authenticate and subscribe in the escape plane when a failure occurs in the main plane. In this way, it is beneficial to ensure the normal operation of the services of all terminal devices in the service area of the first network element.
[0223] Based on the above Figure 8 described embodiment, taking the 5G mobile communication system as an example, Figure 9 shows a schematic flow diagram before and during UE escape. Among them, in Figure 9 where the local AMF is the above-mentioned first network element, the escape AMF is the above-mentioned second network element, the escape UDM / data cache center is the above-mentioned third network element, the foreign UDM is the above-mentioned fourth network element, and the local UDM is the network element corresponding to the above-mentioned first network element that locally stores the authentication and subscription information of the terminal device.
[0224] Step 901: The local AMF receives a registration request from the UE.
[0225] Step 902: The local AMF identifies whether the UE is roaming.
[0226] In the embodiment of the present application, if the local AMF identifies that the UE is not roaming, steps 903 to 905 are executed; otherwise, steps 906 to 909 are executed. Among them, steps 901 to 907 and step 909 can be implemented with reference to step 801 and will not be elaborated here.
[0227] Step 903: The local AMF obtains the authentication and subscription information of the UE from the local UDM.
[0228] Step 904: The local UDM exports the authentication and subscription information of the UE to the escape UDM / data cache center.
[0229] Step 905: The local AMF registers and / or authenticates and subscribes to the UE.
[0230] Step 906: The local AMF obtains the authentication and subscription information of the UE from the foreign UDM.
[0231] Step 907: The foreign UDM determines that the UE has roamed out.
[0232] Step 908: The remote UDM exports the authentication and subscription information of the UE to the escape UDM / data cache center.
[0233] Step 908 can be implemented with reference to Step 802 and will not be elaborated here.
[0234] Step 909: The local AMF registers and / or authenticates and subscribes to the UE to obtain the security context information of the UE.
[0235] Step 910: The escape AMF receives a registration request from the UE.
[0236] Step 911: The escape AMF identifies whether the UE is roaming.
[0237] In the embodiment of the present application, if the escape AMF identifies that the UE is not roaming, then Step 912 and Step 914 are executed; otherwise, Step 913 and Step 914 are executed. Among them, Step 910 to Step 914 can be implemented with reference to Step 804 to Step 805 and will not be elaborated here.
[0238] Step 912: The escape AMF obtains the authentication and subscription information and / or security context information of the UE from the escape UDM / data cache center / local.
[0239] Step 913: The escape AMF obtains the authentication and subscription information and / or security context information of the UE from the local UDM in the primary plane / the remote UDM in the primary plane / the escape UDM / data cache center / local.
[0240] Step 914: The escape AMF registers and / or authenticates and subscribes to the UE.
[0241] 2. Special area scenario
[0242] In the embodiment of the present application, the special area is an area prone to failures, and / or the link between the special area and the remaining areas is relatively single (that is, after the link fails, communication cannot be carried out through the remaining links). Exemplarily, the special area is an island area.
[0243] Figure 10 A communication method is shown, and the communication method includes Step 1001 to Step 1005. Figure 10 The shown method can be applied between the terminal device side, the first network element side, the second network element side, the third network element side, and the fourth network element side. The terminal device side / the first network element side / the second network element side / the third network element side / the fourth network element side can be the terminal device / the first network element / the second network element / the third network element / the fourth network element, or can be a processor, module, chip, or chip system or functional module that implements the method. In the embodiment of the present application, the first network element, the second network element, the third network element, and the fourth network element can be implemented with reference to the above embodiments and will not be elaborated here.
[0244] Figure 10 Taking the execution entity as the terminal device, the first network element, the second network element, the third network element, and the fourth network element as examples for introduction, where:
[0245] Step 1001: The first network element sends a fourth message to the fourth network element. The fourth message includes information about the area where the terminal device is located, and the fourth message is used to determine that the area where the terminal device is located is a first area outside the service area of the fourth network element.
[0246] Correspondingly, the fourth network element receives the fourth message.
[0247] In the embodiment of the present application, the fourth network element is the home network element of the terminal device. The specific implementation can refer to the above-mentioned embodiment and will not be elaborated here.
[0248] In a possible implementation manner, before step 1001, the terminal device may first send a seventh message to the first network element. The seventh message requests to process the terminal device, and the seventh message includes information about the area where the terminal device is located. Then, the first network element sends a fourth message to the fourth network element. Among them, the seventh message requests to process the terminal device, and the specific implementation manner of the first message requesting to process the terminal device in the above-mentioned embodiment can be referred to and will not be elaborated here.
[0249] In a possible implementation manner, the area information of the terminal device includes, but is not limited to, one or more of the following: tracking area identifier (TAI), location area identifier (LAI), or cell global identifier (CGI), etc.
[0250] In the embodiment of the present application, after receiving the fourth message, the fourth network element can determine that the area where the terminal device is located is a first area outside the service area of the fourth network element according to the area information of the terminal device in the fourth message. Furthermore, the following step 1002 can be executed. Among them, the first area can be a predefined special area. Exemplarily, it can be predefined by means of protocol stipulation or indication of other network elements, and the present application is not limited thereto.
[0251] Optionally, if the fourth network element determines that the area where the terminal device is located is the service area of the fourth network element according to the area information of the terminal device in the fourth message, the fourth network element can automatically export the authentication and subscription information of the terminal device to the third network element. In this way, based on the authentication and subscription information of the terminal device stored in the third network element, the normal operation of the terminal device's services can be ensured.
[0252] Step 1002: The fourth network element sends a fifth message to the third network element. The fifth message includes the authentication and subscription information of the terminal device.
[0253] Correspondingly, the third network element receives the fifth message.
[0254] In the embodiment of the present application, the fourth network element stores the authentication and subscription information of the terminal device. After determining that the terminal device is located in the first area, the fourth network element may send a fifth message to the third network element. The fifth message includes the authentication and subscription information of the terminal device.
[0255] Step 1003: The terminal device sends a sixth message to the second network element. The sixth message requests to register and / or authenticate and subscribe the terminal device. The sixth message includes the area information where the terminal device is located. The sixth message is used to determine the home network element of the terminal device. The sixth message is used to determine that the terminal device is located in the first area.
[0256] Correspondingly, the second network element receives the sixth message.
[0257] In the embodiment of the present application, after deregistration, the terminal device sends a sixth message to the second network element. After receiving the sixth message, the second network element may determine that the terminal device is located in the first area according to the sixth message. The second network element also determines the home network element of the terminal device. Then, the following step 1004 is executed. The second network element can determine that the terminal device is located in the first area by referring to step 1001, which will not be elaborated here.
[0258] Step 1004: When the home network element fails or the link between the home network element and the second network element fails, the second network element obtains the authentication and subscription information of the terminal device from the third network element.
[0259] Step 1005: The second network element registers and / or authenticates and subscribes the terminal device based on the authentication and subscription information of the terminal device.
[0260] In the embodiment of the present application, for the terminal device identified as being located in the second area, the second network element may register and / or authenticate and subscribe the terminal device in the following manner 5 and / or manner 6: Manner 5: The second network element obtains the authentication and subscription information of the terminal device from the home network element of the terminal device, and thus registers and / or authenticates and subscribes the terminal device based on the authentication and subscription information of the terminal device. Manner 6: According to the above content, it can be known that the authentication and subscription information of the terminal device located in the first area can be exported to the third network element. Therefore, the second network element can obtain the authentication and subscription information of the terminal device from the third network element and register and / or authenticate and subscribe the terminal device.
[0261] In a possible implementation, the second network element may first attempt to register and / or authenticate and subscribe to the terminal device in the above-mentioned manner 5; if the home network element fails or the link between the home network element and the second network element fails, etc., the terminal device may be registered and / or authenticated and subscribed to in the above-mentioned manner 6 (that is, steps 1004 to 1005 are executed), so as to at least ensure that the terminal device can be registered and / or authenticated and subscribed to, thereby ensuring the continuous operation of the services running on the terminal device.
[0262] Optionally, in the embodiment of the present application, after step 1002, if the first network element is not faulty and the link between the first network element and the terminal device is not faulty, then the second network element in the above steps 1003 - 1005 may also be replaced by the first network element. That is, the terminal device is still registered and / or authenticated and subscribed to through the network element in the primary plane. The present application is not limited thereto. If the first network element fails and / or the link between the first network element and the terminal device fails, then the above steps 1004 - 1005 are executed.
[0263] Based on Figure 10 the described embodiments, for the terminal device in the first area (special area), the first network element may first identify that the terminal device is located in the first area; then the first network element sends a request to the fourth network element so that the fourth network element can identify that the terminal device is located in the first area and export the authentication and subscription information of the terminal device to the third network element. Since the third network element is located in the escape plane, when a failure occurs in the primary plane, especially when a failure occurs in the first area in the primary plane, the terminal device in the first area can also be re-registered and / or authenticated and subscribed to in the escape plane. In this way, it is beneficial to ensure the normal operation of the services of the terminal devices in the first area.
[0264] Based on the above Figure 11 described embodiments, taking the 5G mobile communication system as an example, Figure 11 shows a schematic diagram of the process before and during the escape of the UE. Among them, in Figure 11 , the local AMF is the above-mentioned first network element, the escape AMF is the above-mentioned second network element, the escape UDM / data cache center is the above-mentioned third network element, and the foreign UDM is the above-mentioned fourth network element. Among them, the foreign UDM is located in an area outside the first area, or the first area where the UE is located does not belong to the service area of the foreign UDM.
[0265] Step 1101: The local AMF receives a registration request from the UE.
[0266] Step 1102: The local AMF determines that the UE is located in the first area.
[0267] Step 1103: The local AMF obtains the authentication and subscription information of the UE from the foreign UDM.
[0268] Step 1104: The remote UDM determines that the UE is located in the first area.
[0269] Steps 1101 to 1104 can be implemented with reference to Step 1001 and will not be elaborated here.
[0270] Step 1105: The remote UDM exports the authentication and subscription information of the UE to the escape UDM / data cache center.
[0271] Step 1105 can be implemented with reference to Step 1002 and will not be elaborated here.
[0272] Step 1106: The local AMF registers and / or authenticates and subscribes to the UE.
[0273] Step 1107: The escape AMF receives a registration request from the UE.
[0274] Step 1108: The escape AMF determines that the UE is located in the first area.
[0275] Step 1109: The escape AMF obtains the authentication and subscription information and / or security context information of the UE from the remote UDM / escape UDM / data cache center in the primary plane.
[0276] Step 1110: The escape AMF registers and / or authenticates and subscribes to the UE.
[0277] Steps 1106 to 1110 can be implemented with reference to Steps 1003 to 1005 and will not be elaborated here.
[0278] Optionally, each of the above embodiments can be implemented alone or in combination in specific applications, and the present application does not make any limitations in this regard. And in the embodiments of the present application, the information exported by the home network element of the terminal device to the third network element may not be limited to the above authentication and subscription information of the terminal device.
[0279] The following will introduce the communication device provided by the embodiments of the present application.
[0280] The present application divides the functional modules of the communication device according to the above method embodiments. For example, each functional module can be divided corresponding to each function, or two or more functions can be integrated into one processing module. The above integrated modules can be implemented in the form of hardware or in the form of software functional modules. It should be noted that the division of modules in the present application is illustrative, only a logical function division, and there may be other division methods in actual implementation. The following will be combined with Figures 12 to 14 Describe the communication device of the embodiments of the present application in detail.
[0281] Figure 12It is a schematic structural diagram of a communication device provided by an embodiment of the present application. As Figure 12 shown, the communication device includes a processing module 1201 and a communication module 1202. The communication module 1202 can implement corresponding communication functions, and the processing module 1201 is used to implement corresponding processing functions. For example, the communication module 1202 can also be an interface, a communication interface, etc.
[0282] In the embodiment of the present application, the communication device can be used to perform the actions executed on the first network element side / fourth network element side in the above method embodiment. At this time, the first network element side / fourth network element side can be the first network element / fourth network element itself or a chip or functional module that can be configured in the first network element / fourth network element, etc. The communication module 1202 is used to perform the operations related to sending and receiving on the first network element side / fourth network element side in the above method embodiment, and the processing module 1201 is used to perform the operations related to processing on the first network element / fourth network element in the above method embodiment.
[0283] In some embodiments, when performing the actions executed on the first network element side: The communication module 1202 is used to receive a first message from a terminal device. The first message is used to request processing of the terminal device. The first message includes the operator mobile network identifier PLMN of the terminal device and / or the identifier of the terminal device. The first message is used to determine that the terminal device is roaming; send a second message to a second network element. The second message is used to request registration and / or authentication and signing of the terminal device. The second message includes the PLMN of the terminal device and / or the identifier of the terminal device. The processing module 1201 is used to process the first message.
[0284] In some embodiments, when performing the actions executed on the first network element side: The communication module 1202 is used to receive a first message from a terminal device. The first message is used to request processing of the terminal device. The first message includes the operator mobile network identifier PLMN of the terminal device and / or the identifier of the terminal device. The first message is used to determine that the terminal device is roaming; obtain the authentication and signing information and / or security context information of the terminal device; send a third message to a third network element. The third message includes the authentication and signing information and / or security context information of the terminal device. The processing module 1201 is used to process the first message.
[0285] In some embodiments, when performing the actions executed on the fourth network element side as described above: The communication module 1202 is configured to receive a fourth message from the first network element, where the fourth message is used to request to obtain the authentication and subscription information of the terminal device. The fourth message includes the public land mobile network (PLMN) of the operator of the terminal device and / or the identifier of the terminal device. The fourth message is used to determine that the terminal device has roamed out. The fourth network element is the home network element of the terminal device; and send a fifth message to the third network element, where the fifth message includes the authentication and subscription information of the terminal device. The processing module 1201 is configured to process the fourth message.
[0286] In some embodiments, when performing the actions executed on the fourth network element side as described above: The communication module 1202 is configured to receive a fourth message from the first network element, where the fourth message is used to request to obtain the authentication and subscription information of the terminal device. The fourth message includes the information of the area where the terminal device is located. The fourth message is used to determine that the area where the terminal device is located is a first area outside the service area of the fourth network element of the terminal device. The fourth network element is the home network element of the terminal device; and send a fifth message to the third network element, where the fifth message includes the authentication and subscription information of the terminal device. The processing module 1201 is configured to process the fourth message.
[0287] In the embodiments of the present application, the communication device can be used to perform the actions executed on the second network element side in the above method embodiments. At this time, the second network element side can be the second network element itself or a chip or functional module that can be configured in the second network element, etc. The communication module 1202 is configured to perform the operations related to sending and receiving on the second network element side in the above method embodiments, and the processing module 1201 is configured to perform the operations related to processing on the second network element side in the above method embodiments.
[0288] In some embodiments, the communication module 1202 is configured to receive a second message from the first network element, where the second message is used to request to register and / or authenticate and subscribe to the terminal device. The second message includes the public land mobile network (PLMN) of the operator of the terminal device and / or the identifier of the terminal device; obtain the authentication and subscription information and / or security context information of the terminal device; the processing module 1201 is configured to store the authentication and subscription information and / or security context information of the terminal device; after the terminal device deregisters, the communication module 1202 is further configured to receive a sixth message from the terminal device, where the sixth message is used to request to register and / or authenticate and subscribe to the terminal device. The sixth message includes the PLMN of the terminal device and / or the identifier of the terminal device. The sixth message is used to determine the roaming of the terminal device and the home network element of the terminal device; when the home network element fails or the link between the home network element and the second network element fails, the processing module 1201 is further configured to register and / or authenticate and subscribe to the terminal device based on the authentication and subscription information and / or security context information of the terminal device.
[0289] In some embodiments, the communication module 1202 is configured to receive, after the terminal device deregisters, a sixth message from the terminal device. The sixth message is used to request registration and / or authentication and subscription for the terminal device. The sixth message includes the operator mobile network identifier (PLMN) of the terminal device, the identifier of the terminal device, and / or the area information where the terminal device is located. The sixth message is used to determine the home network element of the terminal device and is used to determine that the terminal device is located in a first area or the terminal device is roaming. The processing module 1201 is configured to obtain, when the home network element fails or the link between the home network element and the second network element fails, the authentication and subscription information and / or the security context information of the terminal device from a third network element, and perform registration and / or authentication and subscription for the terminal device based on the authentication and subscription information and / or the security context information of the terminal device.
[0290] Optionally, in the above embodiments, the communication device may further include a storage module, which may be configured to store instructions and / or data. The processing module 1201 may read the instructions and / or data in the storage module to enable the communication device to implement the foregoing method embodiments.
[0291] The specific descriptions of the communication module and the processing module are only examples. For the specific functions or steps executed by the communication module and the processing module, reference may be made to the foregoing method embodiments and will not be elaborated here.
[0292] The communication device of the embodiments of the present application is introduced above. The following introduces the possible product forms of the communication device. Any product form that has the functions of the foregoing Figure 12 described communication device falls within the protection scope of the embodiments of the present application. The following introduction is only for example and does not limit the product form of the communication device of the embodiments of the present application to this.
[0293] In a possible implementation manner, Figure 12In the communication device shown, the processing module 1201 may be one or more processing circuits, and the communication module 1202 may be a communication circuit, or the communication module 1202 may also be a transmitting module and / or a receiving module. The transmitting module may be a transmitting circuit, and the receiving module may be a receiving circuit. The transmitting module and the receiving module are integrated in a device, such as a communication circuit. In the embodiments of the present application, the processing circuit and the communication circuit may be coupled, etc. The embodiments of the present application do not limit the connection manner of the processing circuit and the communication circuit. During the process of executing the above method, the process of transmitting information in the above method may be the process of outputting the above information by the processing circuit. When outputting the above information, the processing circuit outputs the above information to the communication circuit for transmission (or output) by the communication circuit. After the above information is output by the processing circuit, other processing may be required before it reaches the communication circuit. Similarly, the process of receiving information in the above method may be the process of the processing circuit receiving the input above information. When the processing circuit receives the input information, the communication circuit receives the above information and inputs it to the processing circuit. Further, after the communication circuit receives the above information, the above information may need to be processed otherwise before it is input to the processing circuit.
[0294] Figure 13 is a schematic structural diagram of a communication device provided by an embodiment of the present application. As Figure 13 shown, the communication device 130 includes one or more processing circuits 1320 and a communication circuit 1310.
[0295] In some embodiments of the present application, the communication device may be used to execute the steps, methods, or functions executed on the above first network element side / fourth network element side. For example, the processing circuit 1320 may be used to execute the functions or steps implemented by the processing module 1201 as Figure 12 shown, and the communication circuit 1310 may be used to execute the functions or steps implemented by the communication module 1202 as Figure 12 shown. For specific descriptions of the processing circuit 1320 and the communication circuit 1310, reference may be made to Figure 12 or the method embodiments shown above, which will not be elaborated here.
[0296] In some other embodiments of the present application, the communication device is used to execute the steps, methods, or functions executed on the above second network element side. For example, the processing circuit 1320 may be used to execute the functions or steps implemented by the processing module 1201 as Figure 12 shown, and the communication circuit 1310 may be used to execute the functions or steps implemented by the communication module 1202 as Figure 12 shown. For specific descriptions of the processing circuit 1320 and the communication circuit 1310, reference may be made to Figure 12 or the method embodiments shown above, which will not be elaborated here.
[0297] Exemplarily, the processing circuit may be one or more processors, or all or part of the circuits in one or more processors. The communication circuit may be a transceiver, or an input / output circuit, or an interface circuit, etc.
[0298] Exemplarily, in Figure 13 each implementation manner of the communication device shown, the communication circuit may include a receiver and a transmitter. The receiver is used to perform the receiving function (or operation), and the transmitter is used to perform the transmitting function (or operation). And the communication circuit is used to communicate with other devices / communication devices through a transmission medium.
[0299] Optionally, the communication device 130 may further include one or more memories 1330 for storing program instructions and / or data. The memory 1330 is coupled to the processing circuit 1320. The coupling in the embodiments of the present application is an indirect coupling or communication connection between communication devices, units or modules, and may be electrical, mechanical or other forms for information interaction between communication devices, units or modules. The processing circuit 1320 may cooperate with the memory 1330. The processing circuit 1320 may execute the program instructions stored in the memory 1330. Optionally, at least one of the above one or more memories may be included in the processing circuit.
[0300] In the embodiments of the present application, the specific connection medium between the above communication circuit 1310, processing circuit 1320 and memory 1330 is not limited. In the embodiments of the present application Figure 13 it is shown that the memory 1330, processing circuit 1320 and communication circuit 1310 are connected through a bus 1340. The bus is represented by a thick line in Figure 13 The connection manners between other components are only for illustrative purposes and are not to be construed as limiting. The bus may be divided into an address bus, a data bus, a control bus, etc. For the convenience of representation, Figure 13 only one thick line is used to represent it in
[0301] In the embodiments of the present application, the processing circuit may be a general-purpose processing circuit, a digital signal processing circuit, an application-specific integrated circuit, a field programmable gate array or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc., which can implement or execute the various methods, steps and logic block diagrams in the embodiments of the present application. The general-purpose processing circuit may be a microprocessing circuit or any conventional processing circuit, etc. The steps of the method in combination with the embodiments of the present application may be directly embodied as being executed by a hardware processing circuit, or executed by a combination of hardware and software modules in the processing circuit, etc.
[0302] In the embodiments of the present application, the memory may include, but is not limited to, non-volatile memories such as hard disk drives (HDDs) or solid-state drives (SSDs), random access memories (RAMs), erasable programmable read-only memories (EPROMs), read-only memories (ROMs), or compact disc read-only memories (CD-ROMs), etc. The memory is any storage medium that can be used to carry or store program code in the form of instructions or data structures and can be read and / or written by a computer (such as the communication device shown in the present application), but is not limited thereto. The memory in the embodiments of the present application may also be a circuit or any other communication device capable of implementing a storage function, for storing program instructions and / or data.
[0303] Exemplarily, the processing circuit 1320 is mainly used for processing communication protocols and communication data, controlling the entire communication device, executing software programs, and processing the data of software programs. The memory 1330 is mainly used for storing software programs and data. The communication circuit 1310 may include a control circuit and an antenna. The control circuit is mainly used for converting baseband signals into radio frequency signals and processing radio frequency signals. The antenna is mainly used for transmitting and receiving radio frequency signals in the form of electromagnetic waves. Input / output communication devices, such as touchscreens, displays, keyboards, etc., are mainly used for receiving data input by users and outputting data to users.
[0304] After the communication device is powered on, the processing circuit 1320 can read the software program in the memory 1330, interpret and execute the instructions of the software program, and process the data of the software program. When data needs to be wirelessly transmitted, the processing circuit 1320 performs baseband processing on the data to be transmitted and then outputs a baseband signal to the radio frequency circuit. The radio frequency circuit performs radio frequency processing on the baseband signal and then transmits the radio frequency signal outward in the form of electromagnetic waves through the antenna. When data is sent to the communication device, the radio frequency circuit receives the radio frequency signal through the antenna, converts the radio frequency signal into a baseband signal, and outputs the baseband signal to the processing circuit 1320. The processing circuit 1320 converts the baseband signal into data and processes the data.
[0305] In another implementation, the radio frequency circuit and the antenna may be provided independently of the processing circuit for baseband processing. For example, in a distributed scenario, the radio frequency circuit and the antenna may be independent of the communication device and arranged in a remote manner.
[0306] The communication device shown in the embodiments of the present application may also have more than Figure 13More components and the like are not limited in the embodiments of the present application. The methods executed by the above-described processing circuit and communication circuit are only examples, and for the specific steps executed by the processing circuit and communication circuit, reference may be made to the methods described above.
[0307] In another possible implementation, Figure 12 In the communication device shown, the processing module 1201 may be one or more logic circuits, and the communication module 1202 may be an input / output interface, or also referred to as a communication interface, or an interface circuit, or an interface, etc. Or the communication module 1202 may further include a sending module and / or a receiving module. The sending module may include an output interface, and the receiving module may include an input interface. The sending module and the receiving module are integrated into one module, such as an input / output interface.
[0308] Figure 14 is a schematic structural diagram of a communication device provided by an embodiment of the present application. As Figure 14 shown, Figure 14 the communication device shown includes a logic circuit 1401 and an interface circuit 1402. That is, the above-mentioned processing module 1201 can be implemented by the logic circuit 1401, and the communication module 1202 can be implemented by the interface circuit 1402. Among them, the logic circuit 1401 can be a chip, a processing circuit, an integrated circuit, or a system on chip (SoC) chip, etc., and the interface circuit 1402 can be a communication interface, an input / output interface, a pin, etc. Exemplarily, Figure 14 the communication device of
[0309] In the embodiments of the present application, the logic circuit and the interface can also be coupled to each other. For the specific connection manner between the logic circuit and the interface, the embodiments of the present application do not make any limitations. Exemplarily, the logic circuit 1401 can be used to execute the functions or steps implemented by the processing module 1201 as Figure 12 shown, and the interface circuit 1402 can be used to execute the functions or steps implemented by the communication module 1202 as Figure 12 shown. For the specific descriptions of the logic circuit 1401 and the interface circuit 1402, reference may be made to Figure 12 or the method embodiments shown above, which will not be elaborated here.
[0310] The communication device shown in the embodiments of the present application can implement the method provided by the embodiments of the present application in the form of hardware, or can also implement the method provided by the embodiments of the present application in the form of software, etc., and the embodiments of the present application do not make any limitations in this regard.
[0311] An embodiment of the present application further provides a communication system, which includes a first network element side / fourth network element side and a second network element side. The first network element side / fourth network element side and the second network element side can be used to execute the methods in any of the foregoing embodiments.
[0312] In addition, the present application also provides a computer program, which is used to implement the operations and / or processes executed by each communication device in the methods provided by the present application.
[0313] The present application also provides a computer-readable storage medium, in which computer code is stored. When the computer code runs on a computer, the computer is caused to execute the operations and / or processes executed by each communication device in the methods provided by the present application.
[0314] The present application also provides a computer program product, which includes computer code or a computer program. When the computer code or the computer program runs on a computer, the operations and / or processes executed by each in the methods provided by the present application are caused to be executed.
[0315] In several embodiments provided by the present application, it should be understood that the disclosed systems, communication devices and methods can be implemented in other ways. For example, the communication device embodiments described above are only illustrative. For example, the division of the modules is only a logical function division. In actual implementation, there may be other division methods. For example, multiple modules or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the displayed or discussed couplings or direct couplings or communication connections to each other can be indirect couplings or communication connections through some interfaces, communication devices or modules, and can also be electrical, mechanical or other forms of connection.
[0316] The modules described as separate components may or may not be physically separated. The components displayed as modules may or may not be physical modules, that is, they can be located in one place, or can be distributed to multiple network modules. Some or all of the modules can be selected according to actual needs to achieve the technical effects of the solutions provided by the embodiments of the present application.
[0317] In addition, in each embodiment of the present application, the functional modules can be integrated in one processing module, or each module can exist physically alone, or two or more modules can be integrated in one module. The above integrated modules can be implemented in the form of hardware or in the form of software functional modules.
[0318] When the integrated module is implemented in the form of a software functional module and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that makes a contribution to the prior art, or all or part of this technical solution, can be embodied in the form of a software product. This computer software product is stored in a readable storage medium and includes several instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in various embodiments of this application. The aforementioned readable storage medium includes: various media such as USB flash drives, mobile hard disks, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical discs that can store program codes.
[0319] As described above, the above are only specific implementation manners of this application, but the protection scope of this application is not limited thereto. Any person skilled in the art within the technical scope disclosed in this application can easily think of changes or substitutions, which should all be covered within the protection scope of this application. Therefore, the protection scope of this application should be subject to the protection scope of the claimed rights.
Claims
1. A communication method, characterized in that, Applied to the first network element side, the method includes: Receiving a first message from a terminal device, the first message being used to request processing of the terminal device, the first message including the operator mobile network identity PLMN of the terminal device and / or the identity of the terminal device, the first message being used to determine that the terminal device is roaming; Sending a second message to a second network element, the second message being used to request registration and / or authentication and subscription of the terminal device, the second message including the PLMN of the terminal device and / or the identity of the terminal device.
2. A communication method, characterized in that, Applied to the first network element side, the method includes: Receiving a first message from a terminal device, the first message being used to request processing of the terminal device, the first message including the operator mobile network identity PLMN of the terminal device and / or the identity of the terminal device, the first message being used to determine that the terminal device is roaming; Obtaining the authentication and subscription information and / or security context information of the terminal device; Sending a third message to a third network element, the third message including the authentication and subscription information and / or security context information of the terminal device.
3. The method according to claim 2, wherein The obtaining the authentication and subscription information and / or security context information of the terminal device includes: Receiving the authentication and subscription information of the terminal device from a fourth network element, the fourth network element being the home network element of the terminal device.
4. A communication method, characterized in that, Applied to the fourth network element side, the method includes: Receiving a fourth message from a first network element, the fourth message being used to request obtaining the authentication and subscription information of the terminal device, the fourth message including the operator mobile network identity PLMN of the terminal device and / or the identity of the terminal device, the fourth message being used to determine that the terminal device is roaming out, the fourth network element being the home network element of the terminal device; Sending a fifth message to a third network element, the fifth message including the authentication and subscription information of the terminal device.
5. A communication method, characterized in that, Applied to the fourth network element side, the method includes: Receiving a fourth message from a first network element, the fourth message being used to request obtaining the authentication and subscription information of the terminal device, the fourth message including the information of the area where the terminal device is located, the fourth message being used to determine that the area where the terminal device is located is a first area outside the service area of the fourth network element, the fourth network element being the home network element of the terminal device; Sending a fifth message to a third network element, the fifth message including the authentication and subscription information of the terminal device.
6. A communication method, characterized in that, Applied to the second network element side, the method includes: Receiving a second message from a first network element, the second message being used to request registration and / or authentication and subscription of the terminal device, the second message including the operator mobile network identity PLMN of the terminal device and / or the identity of the terminal device; Obtaining the authentication and subscription information and / or security context information of the terminal device; Storing the authentication and subscription information and / or security context information of the terminal device. After the terminal device deregisters, receive a sixth message from the terminal device. The sixth message is used to request registration and / or authentication subscription for the terminal device. The sixth message includes the PLMN of the terminal device and / or the identifier of the terminal device. The sixth message is used to determine the roaming of the terminal device and the home network element of the terminal device; When the home network element fails or the link between the home network element and the second network element fails, perform registration and / or authentication subscription for the terminal device based on the authentication subscription information and / or security context information of the terminal device.
7. The method according to claim 6, wherein The obtaining the authentication subscription information and / or security context information of the terminal device includes: Receive the authentication subscription information of the terminal device from the home network element.
8. A communication method, characterized in that, Applied to the second network element side, the method includes: After the terminal device deregisters, receive a sixth message from the terminal device. The sixth message is used to request registration and / or authentication subscription for the terminal device. The sixth message includes the operator mobile network identifier PLMN of the terminal device, the identifier of the terminal device, and / or the area information where the terminal device is located. The sixth message is used to determine the home network element of the terminal device. The sixth message is used to determine that the terminal device is located in the first area or the terminal device is roaming; When the home network element fails or the link between the home network element and the second network element fails, obtain the authentication subscription information and / or security context information of the terminal device from the third network element; Perform registration and / or authentication subscription for the terminal device based on the authentication subscription information and / or security context information of the terminal device.
9. The method according to any one of claims 1-8, characterized in that, The identifier of the terminal device includes one or more of the following: The subscription permanent identifier SUPI of the terminal device, the subscription hidden identifier SUCI of the terminal device, the international mobile subscriber identification code ISMI number segment of the terminal device, or the mobile subscriber international number MSISDN number segment of the terminal device.
10. A communication device, characterized in that, The device includes a module or unit for executing the method according to any one of claims 1 to 9.
11. A communication device, characterized in that, The communication device includes at least one processor; wherein, the at least one processor is used to cause the communication device to execute the method according to any one of claims 1 to 9.
12. A computer-readable storage medium, characterized in that, A computer program or instruction is stored in the storage medium. When the computer program or instruction is executed, the method according to any one of claims 1 to 9 is executed.
Citation Information
Patent Citations
Method for selecting a wireless communication network at a mobile station and apparatus using the steered PLMN
CN102752832A
Voice roaming registration method and converged network element
CN111885584A
Roaming service registration method, device and system
CN116095663A
Communication method and device, core network equipment, terminal equipment and storage medium
CN116456317A
Communication roaming method, system and device and storage medium
CN117729526A