Mobility management method and device, communication equipment, medium and product

Abstract

The invention relates to a mobility management method and device, communication equipment, a medium and a product, and relates to the technical field of communication. The method is applied to an ASF network element or an AUSF network element, and comprises the following steps: receiving an authentication request of UE; the authentication request comprises first attribute information; under the condition that the first attribute information represents that the UE belongs to the high-mobility terminal, acquiring a limiting condition corresponding to an area where the UE is currently located; and performing network access management on the UE according to the limiting condition. According to the technology provided by the invention, the universality of carrying out mobility management on the UE in a converged network environment is improved, the management efficiency and the accuracy of a management result are improved, and the information security of a service area is further improved.

Description

Technical Field

[0001] This application relates to the field of communication technology, and in particular to a mobility management method, apparatus, communication equipment, medium, and product. Background Technology

[0002] With the continuous development of communication technology, the terminal equipment accessing the network is showing a diversified development trend, presenting a converged network environment in which multiple terminals such as ground terminals, low-altitude terminals, or high-altitude terminals coexist.

[0003] In traditional technologies, during the mobility management of user equipment (UE), operators typically manually configure restriction policies in advance.

[0004] Because the above methods require manual intervention and are not dynamically implemented, their management efficiency is low. Furthermore, since these methods only apply to ground terminals and cannot flexibly adapt to converged network environments, situations may arise where UEs that should not access the service area network mistakenly connect, such as when network conditions allow access but other rules disallow it. Therefore, these methods also affect the accuracy of network access. Summary of the Invention

[0005] Therefore, it is necessary to provide a mobility management method, apparatus, communication equipment, medium, and product to address the aforementioned technical problems, so as to effectively improve the accuracy and universality of mobility association for UEs in a converged network environment, while also improving management efficiency.

[0006] Firstly, this application provides a mobility management method applied to an authentication service function network element, including:

[0007] Receive the UE's authentication request; the authentication request includes the first attribute information;

[0008] If the first attribute information indicates that the UE is a highly mobile terminal, obtain the restriction conditions corresponding to the area where the UE is currently located;

[0009] Network access management is performed on the UE based on the constraints.

[0010] In one embodiment, the first attribute information is mobility category information; accordingly, when the first attribute information indicates that the UE belongs to a high mobility terminal, the restriction conditions corresponding to the current area of ​​the UE are obtained, including: when the mobility category information is a high mobility category, obtaining the restriction conditions corresponding to the current area of ​​the UE.

[0011] In one of the embodiments, the first attribute information is mobility category association information; and in the case that the first attribute information indicates that the UE is a high-mobility terminal, the restriction condition corresponding to the current region of the UE is obtained, including: determining the mobility category of the UE according to the mobility category association information; and in the case that the mobility category of the UE is a high-mobility category, the restriction condition corresponding to the current region of the UE is obtained.

[0012] In one of the embodiments, the UE is managed for network access according to the restriction condition, including: managing the UE for network access according to the satisfaction of the restriction condition by the restriction reference information of the UE; the restriction condition includes a time-domain restriction condition and / or a space-domain restriction condition.

[0013] In one of the embodiments, the UE is managed for network access according to the satisfaction of the restriction condition by the restriction reference information of the UE, including at least one of the following: in the case that the restriction reference information satisfies the allowed access condition in the restriction condition, the UE is allowed to access the network; in the case that the restriction reference information does not satisfy the allowed access condition in the restriction condition, the UE is prohibited from accessing the network; in the case that the restriction reference information satisfies the prohibited access condition in the restriction condition, the UE is prohibited from accessing the network; and in the case that the restriction reference information does not satisfy the prohibited access condition in the restriction condition, the UE is allowed to access the network.

[0014] In one of the embodiments, the restriction condition corresponding to the current region of the UE is obtained, including at least one of the following: the restriction condition corresponding to the current region of the UE is obtained from a service area management platform; and the service area management platform is determined according to the current region of the UE, and the restriction condition is obtained from the service area management platform.

[0015] In a second aspect, the present application provides a mobility management device configured in an authentication service function network element, including:

[0016] A receiving module is configured to receive an authentication request of a user terminal (UE); the authentication request includes first attribute information;

[0017] An obtaining module is configured to, in the case that the first attribute information indicates that the UE is a high-mobility terminal, obtain a restriction condition corresponding to a current region of the UE;

[0018] A management module is configured to manage the UE for network access according to the restriction condition.

[0019] In a third aspect, the present application further provides a communication device, which includes a memory, a transceiver and a processor; the memory stores a computer program; the transceiver is configured to receive or send data under the control of the processor; and the processor implements the following steps when executing the computer program:

[0020] receiving an authentication request of the UE; the authentication request comprising first attribute information;

[0021] in a case where the first attribute information indicates that the UE is a high-mobility terminal, obtaining a restriction condition corresponding to a region where the UE is currently located;

[0022] performing network access management on the UE according to the restriction condition.

[0023] In a fourth aspect, the present application also provides a computer-readable storage medium, the computer-readable storage medium storing a computer program, and the computer program is executed by a processor to implement the following steps:

[0024] receiving an authentication request of the UE; the authentication request comprising first attribute information;

[0025] in a case where the first attribute information indicates that the UE is a high-mobility terminal, obtaining a restriction condition corresponding to a region where the UE is currently located;

[0026] performing network access management on the UE according to the restriction condition.

[0027] In a fifth aspect, the present application also provides a computer program product, the computer program product comprising a computer program, and the computer program is executed by a processor to implement the following steps:

[0028] receiving an authentication request of the UE; the authentication request comprising first attribute information;

[0029] in a case where the first attribute information indicates that the UE is a high-mobility terminal, obtaining a restriction condition corresponding to a region where the UE is currently located;

[0030] performing network access management on the UE according to the restriction condition.

[0031] The mobility management method, device, communication device, medium and product described above carry the first attribute information in the authentication request of the UE, and determine the high-mobility terminal based on the first attribute information. In a case where the UE is a high-mobility terminal, the restriction condition corresponding to the region where the UE is currently located is obtained, and the network access management is performed on the UE according to the restriction condition, so that a unified restriction strategy can be adopted for the high-mobility terminal in the network environment, and the mobility access management is dynamically performed, thereby improving the generality of the mobility management of the UE in the converged network environment. In addition, since the above process does not require human intervention, the management efficiency is improved, and the occurrence of mobility management errors caused by human factors is reduced. Meanwhile, the restriction condition is used as the network access determination basis of the region where the UE is located, and can be uniformly set according to the access requirements of different regions, so that the UE misaccessing in a case where the network condition allows but other conditions do not allow can be effectively avoided, thereby improving the information security of the service area. BRIEF DESCRIPTION OF DRAWINGS

[0032] Figure 1 Flowchart of a mobility management method in one embodiment;

[0033] Figure 2 Flowchart of a step of obtaining a restriction condition in one embodiment;

[0034] Figure 3 Flowchart of a step of obtaining a restriction condition in one embodiment;

[0035] Figure 4 Flowchart of a network access management step in one embodiment;

[0036] Figure 5 Flowchart of a mobility management method in another embodiment;

[0037] Figure 6 Block diagram of a mobility management apparatus in one embodiment;

[0038] Figure 7 Internal structure diagram of a communication device in one embodiment. DETAILED DESCRIPTION

[0039] In order to make the objects, technical solutions and advantages of the present application clearer, the present application will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and should not be used to limit the present application.

[0040] For the convenience of understanding, first, the functional network elements involved in the present application are introduced.

[0041] The UE accesses a data network (DN, Data Network) and the like by accessing an operator network, and can use services provided by the operator or a third party on the DN. For the convenience of description, the user terminal, user equipment, terminal device or terminal in the embodiments of the present application can be collectively referred to as UE. That is, if not particularly stated, the UE described in the following of the embodiments of the present application can be replaced by the user terminal, user equipment, terminal device or terminal, and of course they can also be interchangeable.

[0042] The ASF (Authentication Server Function) in the converged network architecture corresponds to the AUSF (Authentication Server Function) in the 5G (5th Generation Mobile Communication Technology) core network, and is responsible for processing user authentication data. As an authentication service network element in the network architecture, the ASF is mainly responsible for home network authentication of a UE, receives authentication requests from other network elements in the core network, initiates subscription information query to a USM (Unified Subscription Management function) or a UDM (Unified Data Management), and completes authentication of the UE identity. In addition, the AUSF is also responsible for signing information sent by the home network to the UE, to protect the information from tampering and eavesdropping.

[0043] In an optional embodiment, as shown in Figure 1 A mobility management method is provided, which is applied to a first network element in a core network. The first network element can be an ASF network element in the aforementioned converged network architecture, or an AUSF network element in the 5G core network, and the present application does not make any limitation here. The method comprises the following steps:

[0044] S110, receiving an authentication request of a UE; the authentication request comprises first attribute information.

[0045] The first network element can directly receive the authentication request sent by the UE, or receive the authentication request forwarded by the UE through other network elements in the core network.

[0046] The authentication request can be at least one of a service request, an access request, an authentication request, and a subscription request.

[0047] In some embodiments, if the first network element is an ASF network element or an AUSF network element, the authentication request can correspond to an authentication request, thereby adapting to the authentication scenario.

[0048] The first attribute information can be understood as additional attribute information for assisting in determining whether the UE is a high-mobility terminal. Optionally, the first attribute information can be mobility category information, which is used to directly represent whether the UE is a high-mobility terminal. Alternatively, the first attribute information can be mobility category association information, which is used to indirectly determine whether the UE is a high-mobility terminal.

[0049] It is worth noting that the high mobility terminal herein can be set by a technician according to experience or set according to a certain standard to reflect the movement of the UE, and the present application does not make any limitation on the specific definition of the high mobility terminal.

[0050] In some embodiments, the high mobility terminal can be understood as a UE moving at a high speed in the mobile communication network, for example, a UE whose average or general moving speed exceeds a preset speed threshold. The preset speed threshold can be set or adjusted by a technician according to needs or experience.

[0051] It should be noted that the present application does not make any limitation on the byte length of the first attribute information and the adding position in the authentication request, and only needs to ensure that the authentication request carries relevant information.

[0052] S120, in the case that the first attribute information indicates that the UE belongs to a high mobility terminal, obtaining a restriction condition corresponding to the current region of the UE.

[0053] The restriction condition is used to represent a condition for limiting network access to a network service area, which can include a positive restriction condition, such as an access permission condition, or a negative restriction condition, such as an access prohibition condition, or both, and the present application does not make any limitation thereon.

[0054] It is worth noting that due to the characteristics of high-speed movement, frequent switching and experimental sensitivity of high mobility terminals, additional constraints are needed for the network access of such terminals to avoid network misaccess to service areas and affect the information security of the service area.

[0055] In some embodiments, if the first attribute information indicates that the UE belongs to a high mobility terminal, at least one of the following can be performed: locally obtaining a restriction condition corresponding to the current region of the UE, obtaining a restriction condition corresponding to the current region of the UE from an associated storage device, and obtaining a restriction condition corresponding to the current region of the UE from a service area management platform.

[0056] For example, in the case that the first network element obtains a restriction condition corresponding to the current region of the UE from the service area management platform, a unified service area management platform can be set for different service areas, and a restriction condition corresponding to the current region of the UE can be obtained from the service area management platform. For example, the service area management platform is used to find a restriction condition corresponding to the current region of the UE, and the finding result is obtained for subsequent use.

[0057] Exemplarily, in the case that the first network element obtains the restriction condition corresponding to the region where the UE currently locates from the service region management platform, at least two service region management platforms can be pre-set, and each service region management platform stores the restriction condition corresponding to at least one service region; the service regions corresponding to the restriction conditions stored in different service region management platforms are different. Correspondingly, the adaptive service region management platform can be determined according to the region where the UE currently locates, and the restriction condition can be obtained from the adaptive service region management platform.

[0058] It can be understood that the management of the restriction condition corresponding to the service region is uniformly performed by the service region management platform, so that the independent setting of the service region restriction condition management function is realized, and the function is decoupled from other network elements, thereby facilitating the management and maintenance.

[0059] In S130, the UE is managed for network access according to the restriction condition.

[0060] Exemplarily, the authentication result can be determined according to whether the UE satisfies the restriction condition or not; wherein the authentication result is used for managing the network access of the UE.

[0061] Optionally, if the authentication is passed, the UE is allowed to access the network; if the authentication is not passed, the UE is prohibited to access the network.

[0062] In some embodiments, in the case that the first attribute information indicates that the UE does not belong to the high-mobility terminal, it is indicated that the UE does not need to be additionally subjected to the network access restriction, and only needs to be subjected to the network access management according to the general restriction, or is directly allowed to access the network in the region.

[0063] On the basis of the above technical solutions, if the first attribute information is not included in the authentication request, it is indicated that the UE does not belong to the high-mobility terminal. Alternatively, if the first attribute information is included in the authentication request, whether the UE belongs to the high-mobility terminal can be determined according to the representation of the first attribute information.

[0064] The embodiment of the present application carries the first attribute information in the authentication request of the UE, and determines the high mobility terminal based on the first attribute information. In the case that the UE belongs to the high mobility terminal, the restriction condition corresponding to the current region of the UE is obtained, and the UE is managed in network access according to the restriction condition, so that the unified restriction strategy can be adopted for the high mobility terminal in the network environment, and the mobility access management is dynamically performed, thereby improving the generality of the mobility management of the UE in the converged network environment. In addition, the above process does not need human intervention, thereby improving the management efficiency and reducing the occurrence of the mobility management error caused by human factors. Meanwhile, the restriction condition is used as the network access determination basis of the region of the UE, and can be uniformly set according to the different access requirements of the region, so that the UE misaccess can be effectively avoided in the case that the network condition is allowed but other conditions are not allowed, thereby improving the information security of the service area.

[0065] Based on the technical solutions of the above embodiments, the present application further provides another optional embodiment, in which the first attribute information is refined into mobility category information, and the step of obtaining the restriction condition in S120 is refined.

[0066] Referring to Figure 2 The step of obtaining the restriction condition includes:

[0067] S210, in the case that the mobility category information is the high mobility category, the restriction condition corresponding to the current region of the UE is obtained.

[0068] The mobility category information can include the high mobility category and the low mobility category.

[0069] Optionally, if the field value corresponding to the mobility category field in the authentication request is the first value, the mobility category information is the high mobility category.

[0070] Optionally, if the field value corresponding to the mobility category field in the authentication request is the second value or the null value, the mobility category information is the low mobility category.

[0071] The first value and the second value can be set by the technical personnel according to the needs or experience, for example, the first value can be "1", and the second value can be "0".

[0072] In the above embodiment, the mobility category information is directly carried in the authentication request as the first attribute information, so that the first network element can directly determine whether the UE belongs to the high mobility terminal without complex processing, thereby improving the judgment efficiency of whether the UE belongs to the high mobility terminal.

[0073] On the basis of the technical solutions of the above embodiments, the application further provides another optional embodiment, in which the first attribute information is refined into mobility category association information, and the obtaining step of the restriction condition in S120 is refined.

[0074] Referring to Figure 3 The obtaining step of the restriction condition shown includes:

[0075] S310, determining the mobility category of the UE according to the mobility category association information.

[0076] The mobility category association information can be understood as information that assists in determining the mobility category, rather than mobility category information. For example, the mobility category association information can include the UE category.

[0077] In some embodiments, a mapping relationship between different mobility category association information and mobility categories can be pre-set. Correspondingly, based on the mapping relationship, the mobility category corresponding to the mobility category association information is determined. The mapping relationship can be stored in the first network element locally, a storage device in communication connection with the first network element, or other network elements, which are not limited by the application.

[0078] In other embodiments, the mobility category association information in the authentication request can also be input into a pre-trained mobility category discrimination model to predict the mobility category of the UE. The mobility category discrimination model can be obtained by training a classification model using sample mobility category association information of sample UEs and pre-labeled mobility category labels. The classification model can be a traditional machine learning model, a deep learning model, or a large language model, which are not limited by the application.

[0079] S320, in the case where the mobility category of the UE is a high mobility category, obtaining the restriction condition corresponding to the current region of the UE.

[0080] Optionally, if the mobility category determination result is a high mobility category, it indicates that the UE belongs to a high mobility terminal, and then the obtaining step of the restriction condition corresponding to the current region of the UE is triggered.

[0081] Or optionally, if the mobility category determination result is a low mobility category or a non-high mobility category, it indicates that the UE does not belong to a high mobility terminal, and then the obtaining step of the restriction condition corresponding to the current region of the UE is not executed.

[0082] In the above embodiments, the mobility class association information is carried in the authentication request to enable the first network element to determine whether the UE is a high-mobility terminal, instead of carrying the mobility class self-declared by the UE in the authentication request, so that the UE cannot access the network by fraud, and the accuracy of network access management is improved.

[0083] Based on the technical solutions in the above embodiments, the application further provides another optional embodiment, in which the network access management step in S130 is refined.

[0084] Referring to Figure 4 The network access management step is shown in the figure, and includes:

[0085] S410, performing network access management on the UE according to the satisfaction of the restriction condition by the restriction reference information of the UE.

[0086] In some embodiments, the restriction condition can include a time-domain restriction condition for representing the access restriction of the UE in the time domain. Correspondingly, the time-domain restriction condition can include a positive restriction condition, such as an allowed access time period, and / or a negative restriction condition, such as a forbidden access time period. Correspondingly, the restriction reference information of the UE can include the access time of the UE or the request time of the authentication request.

[0087] In some other embodiments, the restriction condition can include a space-domain restriction condition for representing the access restriction of the UE in the space domain. Correspondingly, the space-domain restriction condition can include a positive restriction condition, such as an allowed access space range, and / or a negative restriction condition, such as a forbidden access space range. Correspondingly, the restriction reference information of the UE can include the current location of the UE, etc.

[0088] It is worth noting that the restriction reference information of the UE can be carried in the authentication request or determined in advance before the authentication request is received, and the application does not limit the determination manner of the restriction reference information.

[0089] In some optional embodiments, the UE is allowed to access the network when the restriction reference information satisfies the allowed access condition, or further, the UE is prohibited to access the network when the restriction reference information does not satisfy the allowed access condition.

[0090] It is worth noting that if the allowed access condition includes both the time-domain restriction condition and the space-domain restriction condition, the UE is usually allowed to access the network only when both conditions are satisfied. Correspondingly, if at least one of the restriction conditions is not satisfied, the UE is prohibited to access the network.

[0091] In some optional embodiments, the UE is prohibited from network access in the case that the restriction reference information satisfies the prohibited access condition; or further, the UE is allowed to access the network in the case that the restriction reference information does not satisfy the prohibited access condition.

[0092] It is worth noting that, if the prohibited access condition includes both the time domain restriction condition and the space domain restriction condition, in general, the UE is prohibited from network access in the case that either of the two restriction conditions is satisfied; and the UE is allowed to access the network in the case that neither of the two restriction conditions is satisfied.

[0093] In some optional embodiments, the restriction reference information of the UE can also be the driving plan information uploaded by the UE in advance, which is used to represent the driving trajectory and driving time of the UE in this driving. Correspondingly, the UE can be managed for network access according to whether the position information and the passing time information of any trajectory point in the driving plan information satisfy the restriction condition of the service area where the trajectory point is located.

[0094] Specifically, for any trajectory point in the driving trajectory, if the position information corresponding to the trajectory point satisfies the allowed access space range of the service area where the trajectory point is located, and the passing time corresponding to the trajectory point satisfies the allowed access time period of the service area where the trajectory point is located, the UE is allowed to access the network of the service area where the trajectory point is located. Otherwise, the UE is prohibited from accessing the network of the service area where the trajectory point is located.

[0095] Alternatively, if the position information corresponding to the trajectory point does not satisfy the prohibited access space range of the service area where the trajectory point is located, and the passing time corresponding to the trajectory point does not satisfy the prohibited access time period of the service area where the trajectory point is located, the UE is allowed to access the network of the service area where the trajectory point is located. Otherwise, the UE is prohibited from accessing the network of the service area where the trajectory point is located.

[0096] The above embodiments can comprehensively determine from the time domain dimension and / or the space domain dimension according to whether the restriction condition is satisfied by the restriction reference information of the UE to manage the network access of the UE, thereby improving the accuracy and rationality of managing the network access of the UE.

[0097] On the basis of the technical solutions of the above embodiments, the present application further provides an optional embodiment, in which the mobility management method is described in detail from the perspective of multi-party interaction.

[0098] Referring to the mobility management method shown in Figure 5 , applied to an ASF network element, the mobility management method comprises:

[0099] S510, the UE sends an authentication request to the second network element; wherein the authentication request includes the mobility category information of the UE;

[0100] The second network element can be understood as a network element other than the ASF network element in the core network.

[0101] S520, the second network element forwards the authentication request to the ASF.

[0102] S530, the ASF determines whether the UE is a high-mobility terminal according to the mobility class information.

[0103] S540, the ASF sends a restriction condition obtaining request to a service area management platform if the UE is a high-mobility terminal.

[0104] S550, the service area management platform sends the restriction condition of the service area where the UE is located to the ASF.

[0105] S560, the ASF determines whether the UE satisfies the restriction condition according to the current time domain information and space domain information of the UE.

[0106] S570, the ASF sends an authentication result to the second network element according to the result of whether the UE satisfies the restriction condition.

[0107] For example, if the restriction condition is satisfied, the authentication is passed; otherwise, the authentication is not passed.

[0108] S580, the second network element responds to the network access of the UE according to the authentication result.

[0109] For example, if the authentication is passed, the UE is allowed to access the network; otherwise, the UE is prohibited from accessing the network.

[0110] It should be noted that the aforementioned ASF network element can be replaced by an AUSF network element, which will not be described here.

[0111] It should be understood that although each step in the flowchart involved in the above embodiments is displayed in sequence according to the arrow, these steps are not necessarily executed in sequence according to the arrow. Unless otherwise stated herein, the execution of these steps has no strict sequence limitation, and these steps can be executed in other orders. Moreover, at least part of the steps in the flowchart involved in the above embodiments can include multiple steps or stages, which are not necessarily executed at the same time, but can be executed at different times, and the execution sequence of these steps or stages is not necessarily sequential, but can be executed in rotation or alternation with at least part of other steps or steps or stages in other steps.

[0112] Based on the same inventive concept, the embodiments of the present application further provide a mobility management apparatus for implementing the mobility management method described above. The apparatus provides a solution to the implementation scheme as described in the above method, and thus the specific limitations in one or more mobility management apparatus embodiments provided below can refer to the limitations of the mobility management method described above, which will not be repeated here.

[0113] In one embodiment, as shown in Figure 6 a mobility management apparatus is provided, comprising: a receiving module 610, an obtaining module 620 and a management module 630; wherein,

[0114] The receiving module 610 is configured to receive an authentication request of a user terminal (UE); the authentication request comprises first attribute information.

[0115] The obtaining module 620 is configured to, in a case where the first attribute information indicates that the UE belongs to a high-mobility terminal, obtain a restriction condition corresponding to a region where the UE currently locates.

[0116] The management module 630 is configured to perform network access management on the UE according to the restriction condition.

[0117] In some embodiments, the first attribute information is mobility category information; correspondingly, the obtaining module 620 is specifically configured to, in a case where the mobility category information is a high-mobility category, obtain the restriction condition corresponding to the region where the UE currently locates.

[0118] In some embodiments, the first attribute information is mobility category association information; correspondingly, the obtaining module 620 is specifically configured to determine a mobility category of the UE according to the mobility category association information, and in a case where the mobility category of the UE is a high-mobility category, obtain the restriction condition corresponding to the region where the UE currently locates.

[0119] In some embodiments, the management module 630 is specifically configured to perform network access management on the UE according to a satisfaction of the restriction condition by the restriction reference information of the UE; the restriction condition comprises a time-domain restriction condition and / or a space-domain restriction condition.

[0120] In some embodiments, the management module 630 is specifically configured to perform at least one of the following: in a case where the restriction reference information satisfies an allowed access condition in the restriction condition, allow the UE to perform network access; in a case where the restriction reference information does not satisfy the allowed access condition in the restriction condition, prohibit the UE from performing network access; in a case where the restriction reference information satisfies a prohibited access condition in the restriction condition, prohibit the UE from performing network access; in a case where the restriction reference information does not satisfy the prohibited access condition in the restriction condition, allow the UE to perform network access.

[0121] In some embodiments, the obtaining module 620 is specifically configured to perform at least one of the following: obtaining, from the service area management platform, the restriction condition corresponding to the area where the UE currently locates; and determining the service area management platform according to the area where the UE currently locates, and obtaining the restriction condition from the service area management platform.

[0122] The modules in the mobility management apparatus can be implemented by software, hardware, or a combination thereof, in whole or in part. The modules can be embedded in or independent of the processor in the communication device in hardware form, or stored in the memory in the communication device in software form, so as to be invoked and executed by the processor to perform the operations corresponding to the modules.

[0123] In one embodiment, a communication device, which can be a server, has an internal structure as shown in Figure 7 The communication device includes a processor, a memory, a network interface, and a transceiver connected through a system bus. The processor of the communication device is configured to provide computing and control capabilities. The memory of the communication device includes a non-volatile storage medium and an internal memory. The transceiver of the communication device is configured to perform the operation of receiving or sending data under the control of the processor. The non-volatile storage medium stores an operating system, a computer program, and a database. The internal memory provides an environment for the operating system and the computer program in the non-volatile storage medium to run. The database of the communication device is configured to store data such as uplink short messages and downlink short messages. The network interface of the communication device is configured to connect communication with terminals outside through a network. The computer program is executed by the processor to implement a mobility management method.

[0124] Those skilled in the art can understand that Figure 7 The structure shown in the above

[0125] In one embodiment, a communication device is provided, which includes a memory and a processor. The memory stores a computer program. The processor executes the processing logic in the computer program to implement the following steps:

[0126] receiving an authentication request of the UE, wherein the authentication request includes first attribute information;

[0127] in a case where the first attribute information indicates that the UE is a high-mobility terminal, obtaining a restriction condition corresponding to an area where the UE currently locates;

[0128] performing network access management on the UE according to the restriction condition.

[0129] In one embodiment, the first attribute information is mobility category information; accordingly, the processor, when executing the processing logic in the computer program, further implements the following steps: in the case that the mobility category information is high mobility category, obtaining the restriction condition corresponding to the region where the UE currently locates.

[0130] In one embodiment, the first attribute information is mobility category association information; accordingly, the processor, when executing the processing logic in the computer program, further implements the following steps: determining the mobility category of the UE according to the mobility category association information; in the case that the mobility category of the UE is high mobility category, obtaining the restriction condition corresponding to the region where the UE currently locates.

[0131] In one embodiment, the processor, when executing the processing logic in the computer program, further implements the following steps: performing network access management on the UE according to the satisfaction of the restriction condition by the restriction reference information of the UE; the restriction condition includes time domain restriction condition and / or space domain restriction condition.

[0132] In one embodiment, the processor, when executing the processing logic in the computer program, further implements at least one of the following steps: in the case that the restriction reference information satisfies the allowed access condition in the restriction condition, allowing the UE to perform network access; in the case that the restriction reference information does not satisfy the allowed access condition in the restriction condition, prohibiting the UE to perform network access; in the case that the restriction reference information satisfies the prohibited access condition in the restriction condition, prohibiting the UE to perform network access; in the case that the restriction reference information does not satisfy the prohibited access condition in the restriction condition, allowing the UE to perform network access.

[0133] In one embodiment, the processor, when executing the processing logic in the computer program, further implements at least one of the following steps: obtaining the restriction condition corresponding to the region where the UE currently locates from the service area management platform; and determining the service area management platform according to the region where the UE currently locates, and obtaining the restriction condition from the service area management platform.

[0134] In one embodiment, a computer readable storage medium or computer program product is provided, which stores a computer program, and the processing logic in the computer program is executed by the processor to implement the following steps:

[0135] receiving an authentication request of the UE; the authentication request includes first attribute information;

[0136] in the case that the first attribute information indicates that the UE belongs to a high mobility terminal, obtaining the restriction condition corresponding to the region where the UE currently locates;

[0137] performing network access management on the UE according to the restriction condition.

[0138] In an embodiment, the first attribute information is mobility category information; and correspondingly, the processing logic in the computer program, when executed by the processor, further implements the following step: in a case where the mobility category information is high mobility category information, obtaining a restriction condition corresponding to a region where the UE currently locates.

[0139] In an embodiment, the first attribute information is mobility category association information; and correspondingly, the processing logic in the computer program, when executed by the processor, further implements the following steps: determining a mobility category of the UE according to the mobility category association information; and in a case where the mobility category of the UE is high mobility category, obtaining a restriction condition corresponding to a region where the UE currently locates.

[0140] In an embodiment, the processing logic in the computer program, when executed by the processor, further implements the following step: performing network access management on the UE according to a satisfaction of the restriction condition by the restriction reference information of the UE; the restriction condition comprises a time domain restriction condition and / or a space domain restriction condition.

[0141] In an embodiment, the processing logic in the computer program, when executed by the processor, further implements at least one of the following steps: in a case where the restriction reference information satisfies an allowed access condition in the restriction condition, allowing the UE to perform network access; in a case where the restriction reference information does not satisfy the allowed access condition in the restriction condition, prohibiting the UE from performing network access; in a case where the restriction reference information satisfies a prohibited access condition in the restriction condition, prohibiting the UE from performing network access; and in a case where the restriction reference information does not satisfy the prohibited access condition in the restriction condition, allowing the UE to perform network access.

[0142] In an embodiment, the processing logic in the computer program, when executed by the processor, further implements at least one of the following steps: obtaining the restriction condition corresponding to the region where the UE currently locates from a service area management platform; and determining the service area management platform according to the region where the UE currently locates, and obtaining the restriction condition from the service area management platform.

[0143] It should be noted that the user information (including but not limited to user equipment information, user personal information, etc.) and data (including but not limited to data for analysis, stored data, displayed data, etc.) involved in the present application are all information and data authorized by the user or authorized by all parties.

[0144] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a non-volatile computer readable storage medium, and when the computer program is executed, the processes of the above-mentioned embodiments of the methods can be included. Any reference to memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile and volatile memory. The non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical storage, high-density embedded non-volatile memory, resistive memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric memory (FRAM), phase change memory (PCM), graphene memory, etc. The volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration but not limitation, the RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM), etc. The database involved in the embodiments provided in the present application can include at least one of a relational database and a non-relational database. The non-relational database can include a distributed database based on a block chain, etc., without being limited thereto. The processor involved in the embodiments provided in the present application can be a general-purpose processor, a central processing unit, a graphics processing unit, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., without being limited thereto.

[0145] Any combination of the technical features of the above embodiments can be made. In order to make the description simple, all possible combinations of the technical features in the above embodiments are not described, however, as long as the combination of the technical features does not exist, it should be considered as the scope of the present application.

[0146] The above embodiments only express several implementation manners of the present application, and the description is more specific and detailed, but it should not be understood as a limitation on the scope of the patent of the present application. It should be pointed out that for ordinary skilled in the art, without departing from the concept of the present application, a number of modifications and improvements can be made, which are within the scope of protection of the present application. Therefore, the protection scope of the present application should be subject to the appended claims.

Claims

1. A mobility management method, characterized in that, The network elements used in the authentication service function of ASF / AUSF include: Receive an authentication request from a user terminal (UE); the authentication request includes first attribute information; If the first attribute information indicates that the UE is a highly mobile terminal, obtain the restriction conditions corresponding to the area where the UE is currently located; The UE is managed for network access according to the aforementioned constraints.

2. The method according to claim 1, characterized in that, The first attribute information is mobility category information; correspondingly, when the first attribute information indicates that the UE belongs to a high-mobility terminal, obtaining the limiting conditions corresponding to the area where the UE is currently located includes: If the mobility category information is high mobility category, obtain the restriction conditions corresponding to the area where the UE is currently located.

3. The method according to claim 1, characterized in that, The first attribute information is mobility category association information; correspondingly, when the first attribute information indicates that the UE belongs to a high-mobility terminal, obtaining the limiting conditions corresponding to the current area of ​​the UE includes: The mobility category of the UE is determined based on the mobility category association information; If the UE's mobility category is high mobility, obtain the restrictions corresponding to the area where the UE is currently located.

4. The method according to any one of claims 1-3, characterized in that, The step of performing network access management on the UE according to the aforementioned constraints includes: Based on the UE's constraint reference information and the satisfaction of the constraint conditions, network access management is performed on the UE; the constraint conditions include time-domain constraint conditions and / or spatial-domain constraint conditions.

5. The method according to claim 4, characterized in that, The step of performing network access management on the UE based on the satisfaction of the restriction conditions according to the UE's restriction reference information includes at least one of the following: If the restriction reference information satisfies the allowed access condition in the restriction conditions, the UE is allowed to access the network; If the restriction reference information does not meet the allowed access conditions in the restriction conditions, the UE is prohibited from accessing the network; If the restriction reference information satisfies the access prohibition condition in the restriction conditions, the UE is prohibited from accessing the network; If the restriction reference information does not meet the access prohibition condition in the restriction conditions, the UE is allowed to access the network.

6. The method according to any one of claims 1-3, characterized in that, The restrictions for obtaining the current region of the UE include at least one of the following: Obtain the restrictions corresponding to the current area of ​​the UE from the service area management platform; Based on the current location of the UE, determine the service area management platform and obtain the limiting conditions from the service area management platform.

7. A mobility management device, characterized in that, Configured in ASF / AUSF network elements, including: A receiving module is used to receive an authentication request from a user terminal (UE); the authentication request includes first attribute information. The acquisition module is used to acquire the limiting conditions corresponding to the current area of ​​the UE when the first attribute information indicates that the UE is a high mobility terminal; The management module is used to manage network access for the UE according to the aforementioned restrictions.

8. A communication device, comprising a memory, a transceiver, and a processor, wherein the memory stores a computer program, characterized in that, The transceiver is used to receive or send data under the control of the processor, wherein the processor, when executing the computer program, implements the steps of the method according to any one of claims 1-6.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the steps of the method described in any one of claims 1-6.

10. A computer program product, comprising a computer program, characterized in that, When executed by a processor, the computer program implements the steps of the method described in any one of claims 1-6.

Images