Communication network SUCI calculation information updating method and device

Abstract

The invention relates to the technical field of security, and provides a communication network SUCI calculation information updating method and device. The method is applied to a mobile equipment (ME) in user equipment (UE), and comprises the following steps: receiving an SUCI calculation information updating notification which is sent by a UDM network element and carries an SUCI calculation information updating link; the SUCI calculation information updating link is generated by the CAM network element under the condition that the SUCI calculation information needs to be updated and is sent to the UDM network element; updating the link through the SUCI calculation information, and sending an SUCI calculation information acquisition request to the CAM network element; receiving an SUCI calculation information acquisition response which is returned by the CAM network element and carries new SUCI calculation information; and updating the SUCI calculation information locally stored in the ME into new SUCI calculation information. According to the method and the device, a USIM card does not need to be replaced, and the latest SUCI calculation information is acquired from the home network of the USIM through the ME so as to cope with quantum calculation attacks.

Description

Technical Field

[0001] This application relates to the field of security technology, and in particular to a method and apparatus for updating SUCI computing information in a communication network. Background Technology

[0002] With the rapid development of Internet technology, the network security risks of information systems continue to increase, and the threats and challenges are becoming increasingly severe. Cryptographic security is an important foundation of information security and can be used to effectively protect the data security of network information systems. Cryptographic technology is a core technology and an important means to protect network information systems.

[0003] In communication networks, to protect the security of SUPI (Subscription Permanent Identifier), user terminals need to update their local policies in a timely manner according to the network's encryption strategy and apply the network's encryption strategy to SUPI protection. Currently, updating SUCI (Subscription Concealed Identifier) ​​computation information mainly involves replacing the USIM (Universal Subscriber Identity Module) card or remotely updating the SUCI computation information on the USIM card via OTA (Over-The-Air) updates. However, USIM card replacement is costly, OTA update channel bandwidth is limited, and the storage space of existing USIM cards is also limited, thus restricting the ability to update SUCI computation information. Furthermore, existing users who do not replace their cards cannot apply the latest SUCI protection strategy of their home network to counter quantum computing attacks.

[0004] Therefore, how to enable users to apply the latest SUCI protection strategy on the network side to deal with quantum computing attacks without replacing the USIM card is an urgent problem to be solved. Summary of the Invention

[0005] This application provides a method and apparatus for updating SUCI computing information in a communication network, which solves the technical problem of enabling users to apply the latest SUCI protection strategies on the network side to deal with quantum computing attacks without replacing the USIM card.

[0006] In a first aspect, embodiments of this application provide a method for updating SUCI calculation information in a communication network, applied to a mobile device (ME) in a user equipment (UE), the method comprising: Receive a User Hidden Identifier (SUCI) calculation information update notification sent by a Unified Data Management (UDM) network element in the home network; the SUCI calculation information update notification includes a SUCI calculation information update link, which is generated and sent to the UDM network element by a Cryptographic Application Management (CAM) network element in the home network when it is necessary to update the SUCI calculation information; A SUCI calculation information acquisition request is sent to the CAM network element via the SUCI calculation information update link. The system receives a response from the CAM network element regarding SUCI calculation information; the response includes new SUCI calculation information. Update the SUCI calculation information stored locally on the ME to the new SUCI calculation information.

[0007] In one embodiment, the SUCI calculation information update notification is triggered by the UDM network element when the user equipment meets the target user type and the SUCI calculation information version of the user equipment recorded in the UDM database is not a new SUCI calculation information version; the new SUCI calculation information version is obtained by the CAM network element when it needs to update the SUCI calculation information and sent to the UDM network element. The target user type includes at least one of the following: currently online users, users who subsequently successfully access the network, and users who have completed authentication and key negotiation (AKA) for access.

[0008] In one embodiment, the SUCI computation information acquisition response further includes a new version of the SUCI computation information; while updating the SUCI computation information stored locally on the ME to the new SUCI computation information, it also includes: Update the SUCI calculation information version stored locally on ME to the new SUCI calculation information version.

[0009] In one embodiment, after updating the SUCI calculation information stored locally on the ME to the new SUCI calculation information, the method further includes: Based on the user equipment parameter update mechanism, a SUCI calculation information update notification confirmation is returned to the UDM network element; the UDM network element is used to receive the SUCI calculation information update notification confirmation and update the SUCI calculation information version of the user equipment recorded in the UDM database to the new SUCI calculation information version.

[0010] In one embodiment, the new SUCI calculation information and the new SUCI calculation information version are obtained by the CAM network element when it needs to update the SUCI calculation information; The CAM network element is used to send a SUCI computing information update request to the UDM network element. The SUCI computing information update request includes the SUCI computing information update link, the new SUCI computing information, and the new SUCI computing information version. The UDM network element is used to update the SUCI calculation information stored locally in the UDM network element to the new SUCI calculation information, and return a SUCI calculation information update response to the CAM network element; based on the user equipment parameter update mechanism, the SUCI calculation information update notification is sent to the ME through the Access and Mobility Management Function (AMF) network element.

[0011] In one embodiment, the SUCI calculation information update request further includes a private key corresponding to the home network public key in the new SUCI calculation information; the UDM network element is also used to store the private key, which is used to decrypt the SUCI sent by the user equipment.

[0012] In one embodiment, before receiving the User Hidden Identifier (SUCI) calculation information update notification sent by the Unified Data Management (UDM) network element in the home network, the method further includes: Write the locally saved SUCI calculation information version to the SUCI calculation information version field of SUCI; The SUCI is sent to the UDM network element; The UDM network element is used to obtain the SUCI computing information version of the user equipment from the SUCI computing information version field of the SUCI and store it in the UDM database; after the user equipment completes AKA authentication and successfully accesses the network, if the SUCI computing information version of the user equipment is not the new SUCI computing information version, a SUCI computing information update notification is triggered; the new SUCI computing information version is obtained by the CAM network element when it needs to update the SUCI computing information and sent to the UDM network element.

[0013] In one embodiment, if the SUCI calculation information version is not stored locally, the method further includes: Set the SUCI calculation information version to 0.

[0014] Secondly, embodiments of this application provide a method for updating SUCI calculation information in a communication network, applied to CAM network elements in a home network, the method comprising: When it is necessary to update SUCI calculation information, obtain the new SUCI calculation information and generate a SUCI calculation information update link; A SUCI computing information update request is sent to a UDM network element in the home network. The SUCI computing information update request includes the SUCI computing information update link. The UDM network element is used to send a SUCI computing information update notification to an ME. The SUCI computing information update notification includes the SUCI computing information update link. The system receives a SUCI computing information retrieval request sent by the ME through the SUCI computing information update link and returns a SUCI computing information retrieval response to the ME. The SUCI computing information retrieval response includes the new SUCI computing information and is used to update the SUCI computing information stored locally by the ME with the new SUCI computing information.

[0015] In one embodiment, the method of obtaining new SUCI calculation information also includes: Obtain the latest version of SUCI computational information; The SUCI computation information acquisition response also includes the new SUCI computation information version, which is used to update the SUCI computation information version stored locally on the ME to the new SUCI computation information version.

[0016] In one embodiment, the SUCI calculation information update request further includes the new SUCI calculation information and the new SUCI calculation information version; after sending the SUCI calculation information update request to the UDM network element in the home network, it further includes: Receive the SUCI calculation information update response returned by the UDM network element; the SUCI calculation information update response is returned by the UDM network element after updating the SUCI calculation information stored locally in the UDM network element to the new SUCI calculation information.

[0017] In one embodiment, the SUCI calculation information update request further includes a private key corresponding to the home network public key in the new SUCI calculation information; the UDM network element is also used to store the private key, which is used to decrypt the SUCI sent by the user equipment.

[0018] Thirdly, embodiments of this application provide a method for updating SUCI calculation information in a communication network, applied to a UDM network element in a home network, the method comprising: Receive a SUCI calculation information update request sent by a CAM network element in the home network; the SUCI calculation information update request includes a SUCI calculation information update link, which is generated by the CAM network element when it needs to update the SUCI calculation information; Send a SUCI calculation information update notification to the ME in the User Equipment (UE), wherein the SUCI calculation information update notification includes the SUCI calculation information update link; The ME is used to obtain new SUCI calculation information from the CAM network element through the SUCI calculation information update link, and update the SUCI calculation information stored locally by the ME to the new SUCI calculation information.

[0019] In one embodiment, the SUCI calculation information update request further includes a new SUCI calculation information version; the step of sending the SUCI calculation information update notification to the ME in the user equipment (UE) includes: If the user equipment matches the target user type and the SUCI computing information version of the user equipment recorded in the UDM database is not the new SUCI computing information version, a SUCI computing information update notification is triggered and the SUCI computing information update notification is sent to the ME. The target user type includes at least one of the following: currently online users, users who subsequently successfully access the network, and users who have completed AKA authentication access.

[0020] In one embodiment, sending the SUCI calculation information update notification to the ME in the user equipment (UE) includes: Based on the user equipment parameter update mechanism, SUCI calculation information update notifications are sent to ME through AMF network elements.

[0021] In one embodiment, the SUCI calculation information update request further includes new SUCI calculation information; after receiving the SUCI calculation information update request sent by the CAM network element in the home network, it further includes: The SUCI calculation information stored locally in the UDM network element is updated to the new SUCI calculation information, and a SUCI calculation information update response is returned to the CAM network element.

[0022] In one embodiment, the SUCI calculation information update request further includes a new SUCI calculation information version; after sending the SUCI calculation information update notification to the ME in the user equipment (UE), it further includes: Receive confirmation of SUCI calculation information update notification returned by ME based on the user equipment parameter update mechanism; Update the SUCI calculation information version of the user equipment recorded in the UDM database to the new SUCI calculation information version.

[0023] In one embodiment, the SUCI computation information update request further includes a private key corresponding to the home network public key in the new SUCI computation information; after receiving the SUCI computation information update request sent by the CAM network element in the home network, it further includes: Store the private key corresponding to the home network public key in the new SUCI calculation information; the private key is used to decrypt the SUCI sent by the user equipment.

[0024] In one embodiment, the SUCI calculation information update request further includes a new SUCI calculation information version; the step of sending the SUCI calculation information update notification to the ME in the user equipment (UE) includes: Receive SUCI sent by ME; The SUCI computing information version of the user equipment is obtained from the SUCI computing information version field of the SUCI and stored in the UDM database; After the user equipment completes AKA authentication and successfully accesses the network, if the SUCI computing information version of the user equipment is not the new SUCI computing information version, a SUCI computing information update notification is triggered and sent to the ME.

[0025] Fourthly, embodiments of this application provide a communication network SUCI calculation information update apparatus, applied to a mobile device ME in a user equipment (UE), comprising: The notification receiving module is used to receive a User Hidden Identifier (SUCI) calculation information update notification sent by the Unified Data Management (UDM) network element in the home network; the SUCI calculation information update notification includes a SUCI calculation information update link, which is generated and sent to the UDM network element by the Cryptographic Application Management (CAM) network element in the home network when it is necessary to update the SUCI calculation information; The request sending module is used to send a SUCI calculation information acquisition request to the CAM network element through the SUCI calculation information update link. The response acquisition module is used to receive the SUCI calculation information acquisition response returned by the CAM network element; the SUCI calculation information acquisition response includes new SUCI calculation information. The calculation information update module is used to update the SUCI calculation information stored locally by the ME to the new SUCI calculation information.

[0026] Fifthly, embodiments of this application provide a communication network SUCI calculation information update device, applied to a CAM network element in a home network, comprising: The link generation module is used to obtain new SUCI calculation information and generate SUCI calculation information update links when it is necessary to update SUCI calculation information. An update request sending module is used to send a SUCI computing information update request to a UDM network element in the home network, wherein the SUCI computing information update request includes the SUCI computing information update link; the UDM network element is used to send a SUCI computing information update notification to an ME, wherein the SUCI computing information update notification includes the SUCI computing information update link. The request receiving module is used to receive the SUCI calculation information acquisition request sent by the ME through the SUCI calculation information update link, and return the SUCI calculation information acquisition response to the ME; the SUCI calculation information acquisition response includes the new SUCI calculation information, and is used to update the SUCI calculation information stored locally by the ME with the new SUCI calculation information.

[0027] Sixthly, embodiments of this application provide a communication network SUCI calculation information update device, applied to a UDM network element in a home network, comprising: An update request receiving module is used to receive a SUCI calculation information update request sent by a CAM network element in the home network; the SUCI calculation information update request includes a SUCI calculation information update link, which is generated by the CAM network element when it needs to update the SUCI calculation information; The update notification sending module is used to send a SUCI calculation information update notification to the ME in the user equipment (UE), wherein the SUCI calculation information update notification includes the SUCI calculation information update link; The computational information acquisition module is used by the ME to obtain new SUCI computational information from the CAM network element through the SUCI computational information update link, and update the SUCI computational information stored locally by the ME to the new SUCI computational information.

[0028] In a seventh aspect, embodiments of this application provide an electronic device, including a processor and a memory storing a computer program, wherein the processor executes the program to implement the steps of the communication network SUCI calculation information update method described in the first or second aspect.

[0029] Eighthly, embodiments of this application provide a non-transitory computer-readable storage medium having a computer program stored thereon, wherein when the computer program is executed by a processor, it implements the steps of the communication network SUCI calculation information update method described in the first or second aspect.

[0030] Ninthly, embodiments of this application provide a computer program product, including a computer program that, when executed by a processor, implements the steps of the XX method described in the first or second aspect.

[0031] The communication network SUCI computing information update method and apparatus provided in this application manage SUCI computing-related cryptographic application policies through a newly added CAM network element. When SUCI computing information needs to be updated, the CAM network element generates a SUCI computing information update link and sends it to the ME. The ME obtains the latest SUCI computing information from the CAM network element through the SUCI computing information update link and updates the locally stored SUCI computing information to the new SUCI computing information. This allows the ME to utilize its computing and storage capabilities to update the user equipment's local SUCI computing information without replacing the USIM card. This makes the local SUCI computing information update capability not limited by the USIM card, thus solving the SUCI computing information update and SUCI computing problem for existing USIM card terminals that do not need to change cards. Furthermore, for existing users who do not change cards, the ME can obtain the latest SUCI computing information from the USIM's home network to effectively counter quantum computing attacks. Attached Figure Description

[0032] To more clearly illustrate the technical solutions in this application or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0033] Figure 1 This is one of the flowcharts illustrating the SUCI calculation information update method for communication networks provided in this application embodiment.

[0034] Figure 2 This is the second flowchart illustrating the SUCI calculation information update method for communication networks provided in this application embodiment.

[0035] Figure 3 This is the third flowchart illustrating the SUCI calculation information update method for communication networks provided in this application embodiment.

[0036] Figure 4 This is a schematic diagram of the SUCI calculation information update process provided in the embodiments of this application.

[0037] Figure 5 This is a schematic diagram of the user identifier submission process that supports triggering SUCI calculation information updates, provided in an embodiment of this application.

[0038] Figure 6This is a schematic diagram of the SUCI structure that supports SUCI calculation information versions provided in the embodiments of this application.

[0039] Figure 7 This is one of the structural schematic diagrams of the communication network SUCI calculation information update device provided in the embodiments of this application.

[0040] Figure 8 This is the second schematic diagram of the communication network SUCI computing information update device provided in the embodiments of this application.

[0041] Figure 9 This is the third schematic diagram of the communication network SUCI calculation information update device provided in the embodiments of this application.

[0042] Figure 10 This is a schematic diagram of the structure of the electronic device provided in the embodiments of this application. Detailed Implementation

[0043] To make the objectives, technical solutions, and advantages of this application clearer, the technical solutions of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0044] In 5G networks, to enhance the security of the User Permanent Identifier (SUPI) transmission over the air interface, the User Equipment (UE) employs ECIES (Elliptic Curve Integrated Encryption Scheme). Based on the home network's public key, the SUPI is encrypted and encapsulated to generate a hidden user identifier (SUCI). This SUCI is then transmitted over the air interface to the home network, replacing the SUPI, effectively protecting user privacy and preventing security risks such as tracking attacks. The ECIES algorithm is based on the ECC (Elliptic Curve Cryptography) system and uses either Profile A or Profile B schemes for key negotiation and data encryption.

[0045] With the rapid development of quantum computing technology, traditional public-key cryptosystems, represented by ECC and RSA (Rivest–Shamir–Adleman algorithm), face fundamental security threats. The mathematical problems they rely on, such as discrete logarithms and large integer factorization, can be efficiently solved by quantum algorithms, making existing encryption mechanisms vulnerable to quantum attacks. To address this, the National Institute for Standardization (NIST) has released the Module-Lattice-Based Key Encapsulation Mechanism (ML-KEM) as a standard algorithm for post-quantum cryptography (PQC). However, due to the relatively recent development of ML-KEM, its security has not been rigorously verified through long-term practical application. It is anticipated that during the transition period, traditional cryptographic algorithms and post-quantum cryptographic algorithms will coexist.

[0046] From a global perspective, countries are accelerating the development of localized PQC algorithms, potentially leading to regionally specific PQC cryptographic systems. In terms of industry applications, some operators or dedicated communication networks may adopt customized encryption algorithms for specific security needs. This trend indicates that future communication networks, represented by 6G, will face a complex ecosystem where multiple algorithms coexist, including traditional algorithms (ECC), international PQC algorithms (ML-KEM), domestic PQC algorithms, and industry-specific algorithms.

[0047] To protect SUPI security, the terminal needs to update its local policy in a timely manner and apply the network-side encryption policy to SUPI protection according to the network-side encryption policy requirements.

[0048] However, existing technical solutions have the following problems: 1. The ability to update SUCI computational information is limited by the USIM card. In existing technologies, the updating of SUCI computational information mainly employs the following methods: 1.1 Replacing the USIM card: This is costly, and users do not replace their cards frequently.

[0049] 1.2. Remotely updating SUCI calculation information on the USIM card via OTA: OTA update channel bandwidth is low, and the storage space of existing USIM cards is limited. Furthermore, SUCI calculation information files supporting PQC may be quite large, and data SMS transmission is inefficient and cannot save large SUCI calculation information files.

[0050] (2) Existing users who do not change their SIM cards cannot solve the problem of quantum attack resistance for SUPI protection. Existing users who do not change their SIM cards cannot update SUCI calculation information via OTA. Even if the USIM instructs the ME (Mobile Equipment) to calculate SUCI, the ME can only obtain the old SUCI calculation information from the USIM card and cannot obtain the latest SUCI calculation information from the HN (Home Network). That is, they cannot apply the latest SUCI protection strategy of the home network to deal with quantum computing attacks.

[0051] To address the aforementioned issues, a new CAM network element is added to manage SUCI computation-related cryptographic application policies. When SUCI computation information needs updating, the CAM network element generates a SUCI computation information update link and sends it to the ME. The ME then retrieves the latest SUCI computation information from the CAM network element via this link and updates its locally stored SUCI computation information accordingly. This leverages the ME's computing and storage capabilities to update the user device's local SUCI computation information without requiring a replacement of the USIM card. This ensures that the update capability of local SUCI computation information is not limited by the USIM card, thus resolving the SUCI computation information update and SUCI computation issues for existing USIM card terminals that do not require card replacement. Furthermore, for existing users who do not replace their cards, the ME can obtain the latest SUCI computation information from the USIM's home network, effectively countering quantum computing attacks.

[0052] Figure 1 This is one of the flowcharts illustrating the SUCI calculation information update method for a communication network provided in this application embodiment. (Refer to...) Figure 1 This application provides a method for updating SUCI calculation information in a communication network, which may specifically include the following steps: Step 101: Receive a User Hidden Identifier (SUCI) calculation information update notification sent by the Unified Data Management (UDM) network element in the home network; the SUCI calculation information update notification includes a SUCI calculation information update link, which is generated and sent to the UDM network element by the Cryptographic Application Management (CAM) network element in the home network when it is necessary to update the SUCI calculation information.

[0053] It should be noted that the execution entity of the communication network SUCI calculation information update method provided in this application embodiment can be a user equipment. The user equipment involved in this application embodiment can be a device that provides voice and / or data connectivity to the user, a handheld device with wireless connection function, or other processing devices connected to a wireless modem, etc.

[0054] It should be noted that the embodiments of this application are applicable not only to 5G communication networks, but also to future communication networks such as 6G, and this application makes no limitation herein. The following embodiments of this application use a 5G communication network as an example for illustration.

[0055] In this embodiment, the CAM (Cryptography Application Management) network element can be used to manage cryptographic application policies related to SUCI computation, synchronize them with the UDM (Unified Data Management) network element in the home network, and provide update interface services. The CAM network element can be a standalone network element or a component running on other network elements. The following embodiment uses the CAM network element as a standalone network element as an example for illustration.

[0056] In this embodiment of the application, SUCI calculation information can be used to record the priority list of SUCI protection schemes defined by the home network of the user equipment and the corresponding home network HN public key list, etc.

[0057] In some embodiments, when the cryptographic application policy for SUCI computation is updated on the home network side, i.e., when the SUCI computation information needs to be updated, new SUCI computation information can be set on the CAM network element in the home network. Then, the CAM network element can generate a SUCI computation information update link, which can be used to open an update service, providing the latest SUCI computation information. The CAM network element can send a SUCI computation information update request to the UDM network element in the home network. The SUCI computation information update request may include the SUCI computation information update link and the new SUCI computation information.

[0058] In some embodiments, after receiving a SUCI computing information update request, the UDM network element can trigger a SUCI computing information update notification based on the user's online status, and send the SUCI computing information update notification carrying a SUCI computing information update link to the mobile device ME in the user equipment (UE). The UE's ME can receive the SUCI computing information update notification sent by the UDM network element through the UE Parameters Update (UPU) mechanism and save the SUCI computing information update link.

[0059] Step 102: Send a SUCI calculation information acquisition request to the CAM network element through the SUCI calculation information update link.

[0060] In some embodiments, the ME can send a SUCI calculation information retrieval request to the CAM network element via a secure channel by accessing the SUCI calculation information update link provided by the CAM network element.

[0061] In some embodiments, the secure channel may be one-way HTTPS (HyperText Transfer Protocol Secure), TLS (Transport Layer Security), etc.

[0062] Step 103: Receive the SUCI calculation information acquisition response returned by the CAM network element; the SUCI calculation information acquisition response includes new SUCI calculation information.

[0063] In some embodiments, after receiving a SUCI computation information retrieval request from an ME, the CAM network element can return a SUCI computation information retrieval response to the ME. The SUCI computation information retrieval response may include the latest SUCI computation information, enabling the ME to update its information based on the latest SUCI computation information.

[0064] Step 104: Update the SUCI calculation information stored locally on the ME to the new SUCI calculation information.

[0065] In some embodiments, after receiving a SUCI calculation information acquisition response from the CAM network element carrying the latest SUCI calculation information, the ME can update the SUCI calculation information stored locally on the ME to the latest SUCI calculation information, thereby obtaining the latest SUCI calculation information from the CAM network element through the ME, and updating the local SUCI calculation information can be achieved without replacing the USIM card.

[0066] In some embodiments, the new SUCI computation information may include an updated list of SUCI protection scheme priorities and one or more corresponding public keys.

[0067] This application embodiment manages SUCI computation-related cryptographic application policies through a newly added CAM network element. When SUCI computation information needs to be updated, the CAM network element generates a SUCI computation information update link and sends it to the ME. The ME obtains the latest SUCI computation information from the CAM network element through the SUCI computation information update link and updates the locally stored SUCI computation information to the new SUCI computation information. This allows the ME's computing and storage capabilities to be utilized to update the user equipment's local SUCI computation information without replacing the USIM card. This makes the local SUCI computation information update capability not limited by the USIM card, thus solving the problem of SUCI computation information update and SUCI computation for existing USIM card terminals that do not need to change their cards. Furthermore, for existing users who do not change their cards, the ME can obtain the latest SUCI computation information from the USIM's home network to effectively counter quantum computing attacks.

[0068] Furthermore, in this embodiment, the service network does not need to be modified and is unaware of the new protocol modification; it is also compatible with existing 3GPP protocols. Compared with the original 3GPP AKA authentication protocol, only the ME and UDM network elements need to be modified, without modifying other network elements and related interfaces, resulting in lower modification costs and higher compatibility with the original protocol.

[0069] In one optional embodiment, the SUCI calculation information update notification is triggered by the UDM network element when the user equipment meets the target user type and the SUCI calculation information version of the user equipment recorded in the UDM database is not a new SUCI calculation information version; the new SUCI calculation information version is obtained by the CAM network element when it needs to update the SUCI calculation information and sent to the UDM network element; wherein, the target user type includes at least one of currently online users, users who subsequently successfully access the network, and users who have completed authentication and key negotiation (AKA) authentication access.

[0070] In some embodiments, when the network side updates the cryptographic application policy for SUCI calculation, i.e., when the SUCI calculation information needs to be updated, a new version of the SUCI calculation information can be set on the CAM network element at the same time as setting the new SUCI calculation information.

[0071] In some embodiments, the SUCI computing information update link can also be used to provide an update service for the latest version of SUCI computing information. When generating the SUCI computing information update link to provide an update service for the latest SUCI computing information and its version, the CAM network element can simultaneously disable the update service for the old version of SUCI computing information.

[0072] In some embodiments, the CAM network element can send a SUCI computing information update request to the UDM network element. The SUCI computing information update request may include a new version of the SUCI computing information. The UDM network element can determine whether to trigger a SUCI computing information update notification based on the user's online status to see if the SUCI computing information version recorded in the UDM database by the user equipment is the latest version (i.e., whether it is a new SUCI computing information version).

[0073] In some specific embodiments, for currently online users, if the UDM network element determines that the SUCI computing information version recorded by the user equipment in the UDM database is not the latest version, it can trigger the SUCI computing information update notification one by one or in batches.

[0074] In some specific embodiments, for users who subsequently successfully access the network or complete AKA (Authentication and Key Agreement) authentication access, if their SUCI calculation information version in the UDM database is not the latest version, a SUCI calculation information update notification can be triggered, and the UDM network element sends the SUCI calculation information update notification to the UE.

[0075] Existing technologies employ a method where the ME periodically retrieves the latest SUCI calculation information from the USIM home network (HN). Since the SUCI calculation information is updated infrequently, this periodic retrieval by the ME from the home network adds extra signaling interactions and consumes bandwidth resources. To address this issue, this application's embodiment triggers a SUCI calculation information update notification via a UDM network element based on the user's online status when the SUCI calculation information is updated. This eliminates the need for the ME to periodically retrieve the latest SUCI calculation information from the USIM home network, preventing additional network load and reducing bandwidth consumption.

[0076] In an optional embodiment, the SUCI calculation information acquisition response further includes a new version of SUCI calculation information; while updating the SUCI calculation information stored locally on the ME to the new SUCI calculation information, it may also include updating the version of SUCI calculation information stored locally on the ME to the new version of SUCI calculation information.

[0077] In some embodiments, the SUCI calculation information acquisition response returned by the CAM network element may also carry a new version of the SUCI calculation information. While updating the SUCI calculation information stored locally by the ME to the new SUCI calculation information, the ME may also update the version of the SUCI calculation information stored locally by the ME to the new version.

[0078] This application embodiment obtains a new SUCI computing information version from the CAM network element through the SUCI computing information update link by the ME, and updates the locally stored SUCI computing information version to the new SUCI computing information version. Thus, without replacing the USIM card, the local SUCI computing information version of the user equipment can be updated in a timely manner.

[0079] In an optional embodiment, after updating the SUCI calculation information stored locally on the ME to the new SUCI calculation information, the method may further include: returning a SUCI calculation information update notification confirmation to the UDM network element based on the user equipment parameter update mechanism; the UDM network element is used to receive the SUCI calculation information update notification confirmation and update the version of the user equipment's SUCI calculation information recorded in the UDM database to the new SUCI calculation information version.

[0080] In some embodiments, the UDM network element may send a SUCI calculation information update notification to the ME carrying a SUCI calculation information update link, and indicate that the UE is required to return an acknowledgment.

[0081] In some embodiments, after the ME obtains the new SUCI computing information and its version from the CAM network element via the SUCI computing information update link, and updates its local SUCI computing information and its version, if the ME successfully updates its local SUCI computing information, the ME can return a SUCI computing information update notification confirmation to the UDM network element through the UPU mechanism. If the ME fails to update its local SUCI computing information, the ME does not return a SUCI computing information update notification confirmation.

[0082] In some embodiments, after receiving confirmation of the SUCI calculation information update notification returned by the UE through the UPU mechanism, the UDM network element can update the SUCI calculation information version of the user equipment to the latest version in the UDM database (that is, update the SUCI calculation information version of the user equipment recorded in the UDM database to the new SUCI calculation information version).

[0083] In this embodiment, the ME returns a SUCI calculation information update notification confirmation to the UDM network element through the UPU mechanism. The UDM network element can promptly know the SUCI calculation information version status of the UE without repeatedly triggering the SUCI calculation information update notification, thus avoiding additional network load and reducing bandwidth resource consumption.

[0084] In one optional embodiment, the new SUCI calculation information and the new SUCI calculation information version are obtained by the CAM network element when it needs to update the SUCI calculation information; the CAM network element is used to send a SUCI calculation information update request to the UDM network element, the SUCI calculation information update request including the SUCI calculation information update link, the new SUCI calculation information, and the new SUCI calculation information version; the UDM network element is used to update the SUCI calculation information stored locally in the UDM network element to the new SUCI calculation information, and return a SUCI calculation information update response to the CAM network element; based on the user equipment parameter update mechanism, the SUCI calculation information update notification is sent to the ME through the Access and Mobility Management Function (AMF) network element.

[0085] In some embodiments, when the cryptographic application policy for SUCI computation is updated on the network side, i.e., when the SUCI computation information needs to be updated, new SUCI computation information (including an updated SUCI protection scheme priority list and one or more corresponding public keys) and a version of the SUCI computation information can be set on the CAM network element, and a SUCI computation information update link can be generated to open the update service. The CAM network element can send a SUCI computation information update request to the UDM network element, which may include the new SUCI computation information, the new version of the SUCI computation information, and the SUCI computation information update link.

[0086] In some embodiments, after receiving a SUCI computing information update request, the UDM network element can update the SUCI computing information stored locally in the UDM network element with the new SUCI computing information and return a SUCI computing information update response to the CAM network element. The SUCI computing information update response may include the update result.

[0087] In some embodiments, after the UDM network element returns a SUCI calculation information update response to the CAM network element, the UDM network element can trigger a SUCI calculation information update notification based on the user's online status. Then, based on the UPU mechanism, the UDM network element can send the SUCI calculation information update notification to the ME through the AMF (Access and Mobility Management Function) network element, including a SUCI calculation information update link, and specifying that the UE is required to return a confirmation of the SUCI calculation information update notification.

[0088] In this embodiment, the new SUCI calculation information is sent to the UDM network element through the CAM network element, and the UDM network element updates the SUCI calculation information stored locally in the UDM network element with the new SUCI calculation information, which helps to ensure that the latest SUCI calculation information is updated to the UDM network element in a timely manner.

[0089] In an optional embodiment, the SUCI calculation information update request may further include a private key corresponding to the home network public key in the new SUCI calculation information; the UDM network element is also used to store the private key, which is used to decrypt the SUCI sent by the user equipment.

[0090] In some embodiments, when the cryptographic application policy for SUCI computation is updated on the network side, i.e., when the SUCI computation information needs to be updated, the new SUCI computation information and its version can be set on the CAM network element, along with one or more private keys corresponding to the new SUCI computation information. The private key can refer to the private key corresponding to the home network public key in the new SUCI computation information.

[0091] In some embodiments, the SUCI calculation information update request sent by the CAM network element to the UDM network element may also carry one or more corresponding private keys, which the UDM network element can store. The UDM network element can use these private key information to decrypt the SUCI sent by the user equipment to obtain the SUPI.

[0092] This application embodiment saves one or more private keys corresponding to the new SUCI calculation information set on the CAM network element to the UDM network element, which helps to ensure the timely update of one or more private keys corresponding to the SUCI calculation information.

[0093] In an optional embodiment, before receiving the User Hidden Identifier (SUCI) calculation information update notification sent by the Unified Data Management (UDM) network element in the home network, the method may further include: writing a locally stored SUCI calculation information version into the SUCI calculation information version field of the SUCI; sending the SUCI to the UDM network element; the UDM network element is used to obtain the SUCI calculation information version of the user equipment from the SUCI calculation information version field of the SUCI and store it in the UDM database; after the user equipment completes AKA authentication and successfully accesses the network, if the SUCI calculation information version of the user equipment is not the new SUCI calculation information version, a SUCI calculation information update notification is triggered; the new SUCI calculation information version is obtained by the CAM network element when it needs to update the SUCI calculation information and sent to the UDM network element.

[0094] In this embodiment of the application, the user identifier submission process can support triggering SUCI calculation information updates.

[0095] In some embodiments, the UE can select the highest priority protection scheme that the UE can support to calculate the SUCI based on the locally stored SUCI protection information and SUCI calculation information version (e.g., using the ECIES mechanism), and write the locally stored SUCI calculation information version into the SUCI calculation information version field of the SUCI.

[0096] In some embodiments, the UE can send SUCI to the UDM network element on the home network side through network elements such as AMF.

[0097] In some embodiments, the UDM network element can decrypt the SUCI to obtain the SUPI, retrieve the SUCI calculation information version field from the SUCI, and store the SUCI calculation information of the user equipment recorded in the SUCI calculation information version field in the UDM database.

[0098] In some embodiments, after the UE and the network side complete AKA authentication and successfully access the network, if the SUCI calculation information version of the user equipment in SUCI is not the latest version, the UDM network element can trigger a SUCI calculation information update notification. The UDM network element can send a SUCI calculation information update notification carrying a SUCI calculation information update link to the UE, so that the UE can obtain the latest SUCI calculation information and SUCI calculation information version from the CAM network element by accessing the SUCI calculation information update link, and update the locally stored SUCI calculation information to the new SUCI calculation information and update the locally stored SUCI calculation information version to the new SUCI calculation information version.

[0099] In the user identifier submission process that supports triggering SUCI calculation information updates provided in the embodiments of this application, the UDM network element can trigger SUCI calculation information updates based on the SUCI calculation information version in the SUCI submitted by the UE, so that the user equipment side can actively trigger SUCI calculation information updates, which can be used to solve the problem of SUCI calculation information updates in the scenario of replacing the USIM card with a new terminal.

[0100] In an optional embodiment, if the SUCI calculation information version is not stored locally, the method may further include setting the SUCI calculation information version to 0.

[0101] In some embodiments, if the UE does not have a local SUCI calculation information version (e.g., an existing USIM card that does not support SUCI calculation information version, or a new ME after initialization), the SUCI calculation information version can be set to 0.

[0102] This application embodiment sets the SUCI calculation information version to 0 when the UE does not store the SUCI calculation information version locally. This allows the UDM network element to perform subsequent authentication in plaintext after receiving the SUCI with SUCI calculation information version 0, thus avoiding the problem of registration failure due to decryption failure.

[0103] Figure 2 This is the second flowchart illustrating the SUCI calculation information update method for a communication network provided in this application embodiment. (Refer to...) Figure 2 This application provides a method for updating SUCI calculation information in a communication network, which may specifically include the following steps: Step 201: If it is necessary to update the SUCI calculation information, obtain the new SUCI calculation information and generate a SUCI calculation information update link. Step 202: Send a SUCI computing information update request to the UDM network element in the home network. The SUCI computing information update request includes the SUCI computing information update link. The UDM network element is used to send a SUCI computing information update notification to the ME. The SUCI computing information update notification includes the SUCI computing information update link. Step 203: Receive the SUCI computing information acquisition request sent by the ME through the SUCI computing information update link, and return a SUCI computing information acquisition response to the ME; the SUCI computing information acquisition response includes the new SUCI computing information, which is used to update the SUCI computing information stored locally by the ME with the new SUCI computing information.

[0104] It should be noted that the execution entity of the communication network SUCI computing information update method provided in this application embodiment can be a CAM network element in the home network. The CAM network element can be used to manage SUCI computing-related cryptographic application policies, synchronize them with the UDM network elements in the home network, and provide update interface services. The CAM network element can be a standalone network element or a component running on other network elements. The following embodiment of this application uses the CAM network element as a standalone network element as an example for explanation.

[0105] In some embodiments, when the cryptographic application policy for SUCI computation is updated on the home network side, i.e., when the SUCI computation information needs to be updated, new SUCI computation information can be set on the CAM network element in the home network. Then, the CAM network element can generate a SUCI computation information update link, which can be used to open an update service, providing the latest SUCI computation information. The CAM network element can send a SUCI computation information update request to the UDM network element in the home network. The SUCI computation information update request may include the SUCI computation information update link and the new SUCI computation information.

[0106] In some embodiments, after receiving a SUCI computing information update request, the UDM network element can trigger a SUCI computing information update notification based on the user's online status, and send the SUCI computing information update notification carrying a SUCI computing information update link to the mobile device ME in the user equipment (UE). The UE's ME can receive the SUCI computing information update notification sent by the UDM network element through the UPU mechanism and save the SUCI computing information update link.

[0107] In some embodiments, the ME can send a SUCI calculation information retrieval request to the CAM network element via a secure channel by accessing the SUCI calculation information update link provided by the CAM network element.

[0108] In some embodiments, after receiving a SUCI computation information retrieval request from an ME, the CAM network element can return a SUCI computation information retrieval response to the ME. The SUCI computation information retrieval response may include the latest SUCI computation information, enabling the ME to update its locally stored SUCI computation information with the new information.

[0109] This application embodiment manages SUCI computation-related cryptographic application policies through a newly added CAM network element. When SUCI computation information needs to be updated, the CAM network element generates a SUCI computation information update link and sends it to the ME. The ME obtains the latest SUCI computation information from the CAM network element through the SUCI computation information update link and updates the locally stored SUCI computation information to the new SUCI computation information. This allows the ME's computing and storage capabilities to be utilized to update the user equipment's local SUCI computation information without replacing the USIM card. This makes the local SUCI computation information update capability not limited by the USIM card, thus solving the problem of SUCI computation information update and SUCI computation for existing USIM card terminals that do not need to change their cards. Furthermore, for existing users who do not change their cards, the ME can obtain the latest SUCI computation information from the USIM's home network to effectively counter quantum computing attacks.

[0110] In an optional embodiment, the process of obtaining new SUCI calculation information may also include obtaining a new version of SUCI calculation information; the SUCI calculation information acquisition response may further include the new version of SUCI calculation information, used to update the SUCI calculation information version stored locally on the ME to the new version of SUCI calculation information.

[0111] In some embodiments, when the network side updates the cryptographic application policy for SUCI calculation, i.e., when the SUCI calculation information needs to be updated, a new version of the SUCI calculation information can be set on the CAM network element at the same time as setting the new SUCI calculation information.

[0112] In some embodiments, after receiving a SUCI computation information retrieval request from the ME, the CAM network element may also return a SUCI computation information retrieval response containing a new version of the SUCI computation information. The ME may update its locally stored SUCI computation information to the new version while simultaneously updating the version of the SUCI computation information stored locally to the new version.

[0113] This application embodiment obtains a new SUCI computing information version from the CAM network element through the SUCI computing information update link by the ME, and updates the locally stored SUCI computing information version to the new SUCI computing information version. Thus, without replacing the USIM card, the local SUCI computing information version of the user equipment can be updated in a timely manner.

[0114] In an optional embodiment, the SUCI calculation information update request further includes the new SUCI calculation information and the new SUCI calculation information version; after sending the SUCI calculation information update request to the UDM network element in the home network, it may further include: receiving a SUCI calculation information update response returned by the UDM network element; the SUCI calculation information update response is returned by the UDM network element after updating the SUCI calculation information stored locally in the UDM network element to the new SUCI calculation information.

[0115] In some embodiments, when the cryptographic application policy for SUCI computation is updated on the network side, i.e., when the SUCI computation information needs to be updated, new SUCI computation information (including an updated SUCI protection scheme priority list and one or more corresponding public keys) and a version of the SUCI computation information can be set on the CAM network element, and a SUCI computation information update link can be generated to open the update service. The CAM network element can send a SUCI computation information update request to the UDM network element, which may include the new SUCI computation information, the new version of the SUCI computation information, and the SUCI computation information update link.

[0116] In some embodiments, after receiving a SUCI computing information update request, the UDM network element can update the SUCI computing information stored locally in the UDM network element with the new SUCI computing information and return a SUCI computing information update response to the CAM network element. The SUCI computing information update response may include the update result.

[0117] In this embodiment, the new SUCI calculation information is sent to the UDM network element through the CAM network element, and the UDM network element updates the SUCI calculation information stored locally in the UDM network element with the new SUCI calculation information, which helps to ensure that the latest SUCI calculation information is updated to the UDM network element in a timely manner.

[0118] In an optional embodiment, the SUCI calculation information update request further includes a private key corresponding to the home network public key in the new SUCI calculation information; the UDM network element is also used to store the private key, which is used to decrypt the SUCI sent by the user equipment.

[0119] In some embodiments, when the cryptographic application policy for SUCI computation is updated on the network side, i.e., when the SUCI computation information needs to be updated, the new SUCI computation information and its version can be set on the CAM network element, along with one or more private keys corresponding to the new SUCI computation information. The private key can refer to the private key corresponding to the home network public key in the new SUCI computation information.

[0120] In some embodiments, the SUCI calculation information update request sent by the CAM network element to the UDM network element may also carry one or more corresponding private keys, which the UDM network element can store. The UDM network element can use these private key information to decrypt the SUCI sent by the user equipment to obtain the SUPI.

[0121] This application embodiment saves one or more private keys corresponding to the new SUCI calculation information set on the CAM network element to the UDM network element, which helps to ensure the timely update of one or more private keys corresponding to the SUCI calculation information.

[0122] Figure 3 This is the third flowchart illustrating the SUCI calculation information update method for communication networks provided in this application embodiment. (Refer to...) Figure 3 This application provides a method for updating SUCI calculation information in a communication network, which may specifically include the following steps: Step 301: Receive a SUCI calculation information update request sent by a CAM network element in the home network; the SUCI calculation information update request includes a SUCI calculation information update link, which is generated by the CAM network element when it needs to update the SUCI calculation information; Step 302: Send a SUCI calculation information update notification to the ME in the user equipment (UE), wherein the SUCI calculation information update notification includes the SUCI calculation information update link; Step 303: The ME is used to obtain new SUCI calculation information from the CAM network element through the SUCI calculation information update link, and update the SUCI calculation information stored locally by the ME to the new SUCI calculation information.

[0123] It should be noted that the execution subject of the communication network SUCI calculation information update method provided in this application embodiment can be a UDM network element in the home network.

[0124] In some embodiments, when the cryptographic application policy for SUCI computation is updated on the home network side, i.e., when the SUCI computation information needs to be updated, new SUCI computation information can be set on the CAM network element in the home network. Then, the CAM network element can generate a SUCI computation information update link, which can be used to open an update service, providing the latest SUCI computation information. The CAM network element can send a SUCI computation information update request to the UDM network element in the home network. The SUCI computation information update request may include the SUCI computation information update link and the new SUCI computation information.

[0125] In some embodiments, after receiving a SUCI computing information update request, the UDM network element can trigger a SUCI computing information update notification based on the user's online status, and send the SUCI computing information update notification carrying a SUCI computing information update link to the mobile device ME in the user equipment (UE). The UE's ME can receive the SUCI computing information update notification sent by the UDM network element through the UPU mechanism and save the SUCI computing information update link.

[0126] In some embodiments, the ME can send a SUCI calculation information retrieval request to the CAM network element via a secure channel by accessing the SUCI calculation information update link provided by the CAM network element.

[0127] In some embodiments, after receiving a SUCI computation information retrieval request from an ME, the CAM network element can return a SUCI computation information retrieval response to the ME. The SUCI computation information retrieval response may include the latest SUCI computation information, enabling the ME to update its locally stored SUCI computation information with the new information.

[0128] This application embodiment manages SUCI computation-related cryptographic application policies through a newly added CAM network element. When SUCI computation information needs to be updated, the CAM network element generates a SUCI computation information update link and sends it to the ME. The ME obtains the latest SUCI computation information from the CAM network element through the SUCI computation information update link and updates the locally stored SUCI computation information to the new SUCI computation information. This allows the ME's computing and storage capabilities to be utilized to update the user equipment's local SUCI computation information without replacing the USIM card. This makes the local SUCI computation information update capability not limited by the USIM card, thus solving the problem of SUCI computation information update and SUCI computation for existing USIM card terminals that do not need to change their cards. Furthermore, for existing users who do not change their cards, the ME can obtain the latest SUCI computation information from the USIM's home network to effectively counter quantum computing attacks.

[0129] In an optional embodiment, the SUCI calculation information update request further includes a new SUCI calculation information version; sending the SUCI calculation information update notification to the ME in the user equipment (UE) may include: triggering the SUCI calculation information update notification and sending the SUCI calculation information update notification to the ME if the user equipment meets the target user type and the SUCI calculation information version of the user equipment recorded in the UDM database is not the new SUCI calculation information version; wherein, the target user type includes at least one of currently online users, users who subsequently successfully access the network, and users who have completed AKA authentication access.

[0130] In some embodiments, when the network side updates the cryptographic application policy for SUCI calculation, i.e., when the SUCI calculation information needs to be updated, a new version of the SUCI calculation information can be set on the CAM network element at the same time as setting the new SUCI calculation information.

[0131] In some embodiments, the SUCI computing information update link can also be used to provide an update service for the latest version of SUCI computing information. When generating the SUCI computing information update link to provide an update service for the latest SUCI computing information and its version, the CAM network element can simultaneously disable the update service for the old version of SUCI computing information.

[0132] In some embodiments, the CAM network element can send a SUCI computing information update request to the UDM network element. The SUCI computing information update request may include a new version of the SUCI computing information. The UDM network element can determine whether to trigger a SUCI computing information update notification based on the user's online status to see if the SUCI computing information version recorded in the UDM database by the user equipment is the latest version (i.e., whether it is a new SUCI computing information version).

[0133] In some specific embodiments, for currently online users, if the UDM network element determines that the SUCI computing information version recorded by the user equipment in the UDM database is not the latest version, it can trigger the SUCI computing information update notification one by one or in batches.

[0134] In some specific embodiments, if a user who subsequently successfully accesses the network or completes AKA authentication access has a SUCI calculation information version in the UDM database that is not the latest version, a SUCI calculation information update notification can be triggered, and the UDM network element will send the SUCI calculation information update notification to the UE.

[0135] In this embodiment of the application, when the SUCI calculation information is updated, the UDM network element triggers the SUCI calculation information update notification based on the user's online status. This eliminates the need for the ME to periodically obtain the latest SUCI calculation information from the USIM's home network, thus avoiding additional network load and reducing bandwidth resource consumption.

[0136] In an optional embodiment, sending the SUCI calculation information update notification to the ME in the user equipment (UE) may include: sending the SUCI calculation information update notification to the ME through the AMF network element based on the user equipment parameter update mechanism.

[0137] In some embodiments, after the UDM network element returns a SUCI calculation information update response to the CAM network element, the UDM network element can trigger a SUCI calculation information update notification based on the user's online status. Then, the UDM network element can send the SUCI calculation information update notification to the ME via the AMF network element based on the UPU mechanism. This notification includes a SUCI calculation information update link and specifies that the UE is required to return a confirmation of the SUCI calculation information update notification.

[0138] In this embodiment of the application, the UDM network element sends a SUCI computing information update notification to the ME through the UPU mechanism, which helps the ME to obtain the latest SUCI computing information update link in a timely manner.

[0139] In an optional embodiment, the SUCI calculation information update request further includes new SUCI calculation information; after receiving the SUCI calculation information update request sent by the CAM network element in the home network, it may further include: updating the SUCI calculation information stored locally by the UDM network element to the new SUCI calculation information, and returning a SUCI calculation information update response to the CAM network element.

[0140] In some embodiments, when the cryptographic application policy for SUCI computation is updated on the network side, i.e., when the SUCI computation information needs to be updated, new SUCI computation information (including an updated SUCI protection scheme priority list and one or more corresponding public keys) and a version of the SUCI computation information can be set on the CAM network element, and a SUCI computation information update link can be generated to open the update service. The CAM network element can send a SUCI computation information update request to the UDM network element, which may include the new SUCI computation information, the new version of the SUCI computation information, and the SUCI computation information update link.

[0141] In some embodiments, after receiving a SUCI computing information update request, the UDM network element can update the SUCI computing information stored locally in the UDM network element with the new SUCI computing information and return a SUCI computing information update response to the CAM network element. The SUCI computing information update response may include the update result.

[0142] In this embodiment, the new SUCI calculation information is sent to the UDM network element through the CAM network element, and the UDM network element updates the SUCI calculation information stored locally in the UDM network element with the new SUCI calculation information, which helps to ensure that the latest SUCI calculation information is updated to the UDM network element in a timely manner.

[0143] In an optional embodiment, the SUCI calculation information update request further includes a new SUCI calculation information version; after sending the SUCI calculation information update notification to the ME in the user equipment UE, it may further include: receiving the SUCI calculation information update notification confirmation returned by the ME based on the user equipment parameter update mechanism; updating the SUCI calculation information version of the user equipment recorded in the UDM database to the new SUCI calculation information version.

[0144] In some embodiments, the UDM network element may send a SUCI calculation information update notification to the ME carrying a SUCI calculation information update link, and indicate that the UE is required to return an acknowledgment.

[0145] In some embodiments, after the ME obtains the new SUCI computing information and its version from the CAM network element via the SUCI computing information update link, and updates its local SUCI computing information and its version, if the ME successfully updates its local SUCI computing information, the ME can return a SUCI computing information update notification confirmation to the UDM network element through the UPU mechanism. If the ME fails to update its local SUCI computing information, the ME does not return a SUCI computing information update notification confirmation.

[0146] In some embodiments, after receiving confirmation of the SUCI calculation information update notification returned by the UE through the UPU mechanism, the UDM network element can update the SUCI calculation information version of the user equipment to the latest version in the UDM database (that is, update the SUCI calculation information version of the user equipment recorded in the UDM database to the new SUCI calculation information version).

[0147] In this embodiment, the ME returns a SUCI calculation information update notification confirmation to the UDM network element through the UPU mechanism. The UDM network element can promptly know the SUCI calculation information version status of the UE without repeatedly triggering the SUCI calculation information update notification, thus avoiding additional network load and reducing bandwidth resource consumption.

[0148] In an optional embodiment, the SUCI calculation information update request further includes a private key corresponding to the home network public key in the new SUCI calculation information; after receiving the SUCI calculation information update request sent by the CAM network element in the home network, it may further include: saving the private key corresponding to the home network public key in the new SUCI calculation information; the private key is used to decrypt the SUCI sent by the user equipment.

[0149] In some embodiments, when the cryptographic application policy for SUCI computation is updated on the network side, i.e., when the SUCI computation information needs to be updated, the new SUCI computation information and its version can be set on the CAM network element, along with one or more private keys corresponding to the new SUCI computation information. The private key can refer to the private key corresponding to the home network public key in the new SUCI computation information.

[0150] In some embodiments, the SUCI calculation information update request sent by the CAM network element to the UDM network element may also carry one or more corresponding private keys, which the UDM network element can store. The UDM network element can use these private key information to decrypt the SUCI sent by the user equipment to obtain the SUPI.

[0151] This application embodiment saves one or more private keys corresponding to the new SUCI calculation information set on the CAM network element to the UDM network element, which helps to ensure the timely update of one or more private keys corresponding to the SUCI calculation information.

[0152] In an optional embodiment, the SUCI calculation information update request further includes a new SUCI calculation information version; sending the SUCI calculation information update notification to the ME in the user equipment (UE) may include: receiving the SUCI sent by the ME; obtaining the SUCI calculation information version of the user equipment from the SUCI calculation information version field of the SUCI and storing it in the UDM database; after the user equipment completes AKA authentication and successfully accesses the network, if the SUCI calculation information version of the user equipment is not a new SUCI calculation information version, triggering the SUCI calculation information update notification and sending the SUCI calculation information update notification to the ME.

[0153] In this embodiment of the application, the user identifier submission process can support triggering SUCI calculation information updates.

[0154] In some embodiments, the UE can select the highest priority protection scheme that the UE can support to calculate the SUCI based on the locally stored SUCI protection information and SUCI calculation information version (e.g., using the ECIES mechanism), and write the locally stored SUCI calculation information version into the SUCI calculation information version field of the SUCI.

[0155] In some embodiments, the UE can send SUCI to the UDM network element on the home network side through network elements such as AMF.

[0156] In some embodiments, the UDM network element can decrypt the SUCI to obtain the SUPI, retrieve the SUCI calculation information version field from the SUCI, and store the SUCI calculation information of the user equipment recorded in the SUCI calculation information version field in the UDM database.

[0157] In some embodiments, after the UE and the network side complete AKA authentication and successfully access the network, if the SUCI calculation information version of the user equipment in SUCI is not the latest version, the UDM network element can trigger a SUCI calculation information update notification. The UDM network element can send a SUCI calculation information update notification carrying a SUCI calculation information update link to the UE, so that the UE can obtain the latest SUCI calculation information and SUCI calculation information version from the CAM network element by accessing the SUCI calculation information update link, and update the locally stored SUCI calculation information to the new SUCI calculation information and update the locally stored SUCI calculation information version to the new SUCI calculation information version.

[0158] In some embodiments, if the UE does not have a local SUCI calculation information version (e.g., an existing USIM card that does not support SUCI calculation information version, or a new ME after initialization), the SUCI calculation information version can be set to 0.

[0159] In the user identifier submission process that supports triggering SUCI calculation information updates provided in the embodiments of this application, the UDM network element can trigger SUCI calculation information updates based on the SUCI calculation information version in the SUCI submitted by the UE, so that the user equipment side can actively trigger SUCI calculation information updates, which can be used to solve the problem of SUCI calculation information updates in the scenario of replacing the USIM card with a new terminal.

[0160] To enable those skilled in the art to better understand the embodiments of this application, the embodiments of this application are described below through some specific examples.

[0161] Figure 4 This is a schematic diagram of the SUCI calculation information update process provided in an embodiment of this application. (Refer to...) Figure 4 In one specific embodiment, the SUCI calculation information update process may include the following steps: Step 1: When the network side updates its cryptographic application policy for SUCI computation, requiring an update to the SUCI computation information, set the new SUCI computation information (including the updated SUCI protection scheme priority list and one or more corresponding public keys), the SUCI computation information version, and one or more corresponding private keys on the CAM. Generate a SUCI computation information update link to open the update service, providing access to the latest SUCI computation information and its version. Simultaneously, disable the update service for the old version of the SUCI computation information.

[0162] Step 2: CAM sends a SUCI computation information update request to UDM, including the new SUCI computation information, the SUCI computation information version, one or more corresponding private keys, and the SUCI computation information update link.

[0163] Step 3: UDM receives and updates local SUCI calculation information.

[0164] Step 4: UDM returns a SUCI calculation information update response to CAM, including the update results.

[0165] Step 5: UDM triggers a SUCI computation information update notification based on the user's online status. Step 5.1: For currently online users, if their SUCI calculation information version in the UDM database is not the latest version, trigger the SUCI calculation information update notification one by one or in batches.

[0166] Step 5.2: For users who successfully access the network or complete AKA authentication, if their SUCI calculation information version in the UDM database is not the latest version, a SUCI calculation information update notification will be triggered, and the UDM will send the SUCI calculation information update notification to the UE.

[0167] Step 6: UDM sends a SUCI calculation information update notification to ME through AMF based on the UE Parameters Update (UPU) mechanism, including the SUCI calculation information update link, and indicates that the UE is required to return confirmation.

[0168] Step 7: The UE's ME receives the SUCI calculation information update notification sent by the UDM through the UPU mechanism and saves the SUCI calculation information update link.

[0169] Step 8: ME sends a SUCI computing information retrieval request to CAM by accessing the SUCI computing information update link provided by CAM through a secure channel (such as one-way HTTPS, TLS, etc.).

[0170] Step 9: CAM returns SUCI calculation information to ME and receives a response, including the latest SUCI calculation information and the version of SUCI calculation information.

[0171] Step 10: ME receives and updates the local SUCI calculation information and SUCI calculation information version.

[0172] Step 11: If the ME successfully updates the local SUCI calculation information, the ME will return a SUCI calculation information update notification to the UDM via the UPU mechanism. If the update of the local SUCI calculation information fails, the ME will not return a confirmation.

[0173] Step 12: Once the UDM receives the SUCI calculation information update notification returned by the UE through the UPU mechanism, it updates the user's SUCI calculation information version to the latest version in the UDM database.

[0174] Figure 5 This is a schematic diagram illustrating the user identifier submission process that supports triggering SUCI calculation information updates, provided in an embodiment of this application. (Refer to...) Figure 5 In one specific embodiment, the user identifier submission process that supports triggering SUCI calculation information updates may include the following steps: Step 1: The UE selects the highest priority protection scheme it supports to calculate the SUCI (such as using the ECIES mechanism) based on the locally stored SUCI protection information and SUCI calculation information version, and writes the SUCI calculation information version into the SUCI calculation information version field of the SUCI.

[0175] Step 1.1: If there is no SUCI computing information version locally (existing USIM cards that do not support SUCI computing information version, or new MEs after initialization), then set the SUCI information version to 0.

[0176] Step 2: The UE sends SUCI to the network-side UDM through network elements such as AMF.

[0177] Step 3: UDM decrypts SUCI to obtain SUPI, retrieves the SUCI calculation information version field from SUCI, and saves it in UDM's database.

[0178] Step 4: The UE and the network side complete AKA authentication and other procedures and successfully access the network.

[0179] Step 5: If the SUCI calculation information version is not the latest version, the UDM will trigger a SUCI calculation information update notification and send the SUCI calculation information update notification to the UE.

[0180] Step 6: UDM sends a SUCI calculation information update notification to ME through AMF based on the UE Parameters Update (UPU) mechanism, including the SUCI calculation information update link, and indicates that the UE is required to return confirmation.

[0181] Step 7: The ME of the UUE receives the SUCI calculation information update notification sent by the UDM through the UPU mechanism and saves the SUCI calculation information update link.

[0182] Step 8: ME sends a SUCI computing information retrieval request to CAM by accessing the SUCI computing information update link provided by CAM through a secure channel (such as one-way HTTPS, TLS, etc.).

[0183] Step 9: CAM returns SUCI calculation information to ME and receives a response, including the latest SUCI calculation information and the version of SUCI calculation information.

[0184] Step 10: ME receives and updates the local SUCI calculation information and SUCI calculation information version.

[0185] Step 11: If the ME successfully updates the local SUCI calculation information, the ME will return a SUCI calculation information update notification to the UDM via the UPU mechanism. If the update of the local SUCI calculation information fails, the ME will not return a confirmation.

[0186] Step 12: Once the UDM receives the SUCI calculation information update notification returned by the UE through the UPU mechanism, it updates the user's SUCI calculation information version to the latest version in the UDM database.

[0187] Figure 6 This is a schematic diagram of the SUCI structure supporting SUCI calculation information versions provided in this application embodiment. (Refer to...) Figure 6 In one specific embodiment, the SUCI structure that supports SUCI compute information version may include a SUCI compute information version field, a SUPI type field, a home network ID field, a routing indication field, a protection scheme ID field, and a protection scheme public key ID. The scheme output part may include a temporary public key field generated by the protection scheme, an encrypted ciphertext value field, and an integrity digest value field.

[0188] The communication network SUCI calculation information updating device provided in this application is described below. The communication network SUCI calculation information updating device described below can be referred to in correspondence with the communication network SUCI calculation information updating method described above.

[0189] Figure 7 This is one of the structural schematic diagrams of the SUCI computing information update device for a communication network provided in this application embodiment. (Refer to...) Figure 7 This application provides a communication network SUCI calculation information update device, applied to the mobile device ME in the user equipment UE. The device may specifically include the following modules: The notification receiving module 710 is used to receive a User Hidden Identifier (SUCI) calculation information update notification sent by the Unified Data Management (UDM) network element in the home network; the SUCI calculation information update notification includes a SUCI calculation information update link, which is generated and sent to the UDM network element by the Cryptographic Application Management (CAM) network element in the home network when it is necessary to update the SUCI calculation information; The request sending module 720 is used to send a SUCI calculation information acquisition request to the CAM network element through the SUCI calculation information update link; The response receiving module 730 is used to receive the SUCI calculation information acquisition response returned by the CAM network element; the SUCI calculation information acquisition response includes new SUCI calculation information. The calculation information update module 740 is used to update the SUCI calculation information stored locally on the ME with the new SUCI calculation information.

[0190] Figure 8 This is a second schematic diagram of the SUCI computing information update device for the communication network provided in this application embodiment. (Refer to...) Figure 8 This application provides a communication network SUCI calculation information update device, applied to CAM network elements in a home network. The device may specifically include the following modules: The link generation module 810 is used to obtain new SUCI calculation information and generate SUCI calculation information update links when it is necessary to update SUCI calculation information. The update request sending module 820 is used to send a SUCI computing information update request to a UDM network element in the home network, wherein the SUCI computing information update request includes the SUCI computing information update link; the UDM network element is used to send a SUCI computing information update notification to the ME, wherein the SUCI computing information update notification includes the SUCI computing information update link. The request receiving module 830 is used to receive the SUCI computing information acquisition request sent by the ME through the SUCI computing information update link, and return the SUCI computing information acquisition response to the ME; the SUCI computing information acquisition response includes the new SUCI computing information, and is used to update the SUCI computing information stored locally by the ME with the new SUCI computing information.

[0191] Figure 9 This is the third schematic diagram of the communication network SUCI computing information update device provided in the embodiments of this application. (Refer to...) Figure 9 This application provides a communication network SUCI calculation information update device, applied to a UDM network element in a home network. The device may specifically include the following modules: The update request receiving module 910 is used to receive a SUCI calculation information update request sent by a CAM network element in the home network; the SUCI calculation information update request includes a SUCI calculation information update link, which is generated by the CAM network element when it needs to update the SUCI calculation information; The update notification sending module 920 is used to send a SUCI calculation information update notification to the ME in the user equipment UE, wherein the SUCI calculation information update notification includes the SUCI calculation information update link; The computational information acquisition module 930 is used by the ME to obtain new SUCI computational information from the CAM network element through the SUCI computational information update link, and update the SUCI computational information stored locally by the ME to the new SUCI computational information.

[0192] Figure 10 An example is a schematic diagram of the physical structure of an electronic device, such as... Figure 10 As shown, the electronic device may include: a processor 1010, a communication interface 1020, a memory 1030, and a communication bus 1040, wherein the processor 1010, the communication interface 1020, and the memory 1030 communicate with each other via the communication bus 1040. The processor 1010 can call a computer program in the memory 1030 to execute the steps of the SUCI calculation information update method for the communication network, such as including: Receive a User Hidden Identifier (SUCI) calculation information update notification sent by a Unified Data Management (UDM) network element in the home network; the SUCI calculation information update notification includes a SUCI calculation information update link, which is generated and sent to the UDM network element by a Cryptographic Application Management (CAM) network element in the home network when it is necessary to update the SUCI calculation information; A SUCI calculation information acquisition request is sent to the CAM network element via the SUCI calculation information update link. The system receives a response from the CAM network element regarding SUCI calculation information; the response includes new SUCI calculation information. Update the SUCI calculation information stored locally on the ME to the new SUCI calculation information; or When it is necessary to update SUCI calculation information, obtain the new SUCI calculation information and generate a SUCI calculation information update link; A SUCI computing information update request is sent to a UDM network element in the home network. The SUCI computing information update request includes the SUCI computing information update link. The UDM network element is used to send a SUCI computing information update notification to an ME. The SUCI computing information update notification includes the SUCI computing information update link. The system receives a SUCI computing information retrieval request sent by the ME via the SUCI computing information update link, and returns a SUCI computing information retrieval response to the ME; the SUCI computing information retrieval response includes the new SUCI computing information, used to update the SUCI computing information stored locally by the ME with the new SUCI computing information; or Receive a SUCI calculation information update request sent by a CAM network element in the home network; the SUCI calculation information update request includes a SUCI calculation information update link, which is generated by the CAM network element when it needs to update the SUCI calculation information; Send a SUCI calculation information update notification to the ME in the User Equipment (UE), wherein the SUCI calculation information update notification includes the SUCI calculation information update link; The ME is used to obtain new SUCI calculation information from the CAM network element through the SUCI calculation information update link, and update the SUCI calculation information stored locally by the ME to the new SUCI calculation information.

[0193] Furthermore, the logical instructions in the aforementioned memory 1030 can be implemented as software functional units and, when sold or used as independent products, can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or a part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0194] On the other hand, this application also provides a computer program product, which includes a computer program that can be stored on a non-transitory computer-readable storage medium. When the computer program is executed by a processor, the computer can perform the steps of the communication network SUCI calculation information update method provided in the above embodiments, such as including: Receive a User Hidden Identifier (SUCI) calculation information update notification sent by a Unified Data Management (UDM) network element in the home network; the SUCI calculation information update notification includes a SUCI calculation information update link, which is generated and sent to the UDM network element by a Cryptographic Application Management (CAM) network element in the home network when it is necessary to update the SUCI calculation information; A SUCI calculation information acquisition request is sent to the CAM network element via the SUCI calculation information update link. The system receives a response from the CAM network element regarding SUCI calculation information; the response includes new SUCI calculation information. Update the SUCI calculation information stored locally on the ME to the new SUCI calculation information; or When it is necessary to update SUCI calculation information, obtain the new SUCI calculation information and generate a SUCI calculation information update link; A SUCI computing information update request is sent to a UDM network element in the home network. The SUCI computing information update request includes the SUCI computing information update link. The UDM network element is used to send a SUCI computing information update notification to an ME. The SUCI computing information update notification includes the SUCI computing information update link. The system receives a SUCI computing information retrieval request sent by the ME via the SUCI computing information update link, and returns a SUCI computing information retrieval response to the ME; the SUCI computing information retrieval response includes the new SUCI computing information, used to update the SUCI computing information stored locally by the ME with the new SUCI computing information; or Receive a SUCI calculation information update request sent by a CAM network element in the home network; the SUCI calculation information update request includes a SUCI calculation information update link, which is generated by the CAM network element when it needs to update the SUCI calculation information; Send a SUCI calculation information update notification to the ME in the User Equipment (UE), wherein the SUCI calculation information update notification includes the SUCI calculation information update link; The ME is used to obtain new SUCI calculation information from the CAM network element through the SUCI calculation information update link, and update the SUCI calculation information stored locally by the ME to the new SUCI calculation information.

[0195] On the other hand, embodiments of this application also provide a processor-readable storage medium storing a computer program for causing a processor to execute the steps of the communication network SUCI calculation information update method provided in the above embodiments, including, for example: Receive a User Hidden Identifier (SUCI) calculation information update notification sent by a Unified Data Management (UDM) network element in the home network; the SUCI calculation information update notification includes a SUCI calculation information update link, which is generated and sent to the UDM network element by a Cryptographic Application Management (CAM) network element in the home network when it is necessary to update the SUCI calculation information; A SUCI calculation information acquisition request is sent to the CAM network element via the SUCI calculation information update link. The system receives a response from the CAM network element regarding SUCI calculation information; the response includes new SUCI calculation information. Update the SUCI calculation information stored locally on the ME to the new SUCI calculation information; or When it is necessary to update SUCI calculation information, obtain the new SUCI calculation information and generate a SUCI calculation information update link; A SUCI computing information update request is sent to a UDM network element in the home network. The SUCI computing information update request includes the SUCI computing information update link. The UDM network element is used to send a SUCI computing information update notification to an ME. The SUCI computing information update notification includes the SUCI computing information update link. The system receives a SUCI computing information retrieval request sent by the ME via the SUCI computing information update link, and returns a SUCI computing information retrieval response to the ME; the SUCI computing information retrieval response includes the new SUCI computing information, used to update the SUCI computing information stored locally by the ME with the new SUCI computing information; or Receive a SUCI calculation information update request sent by a CAM network element in the home network; the SUCI calculation information update request includes a SUCI calculation information update link, which is generated by the CAM network element when it needs to update the SUCI calculation information; Send a SUCI calculation information update notification to the ME in the User Equipment (UE), wherein the SUCI calculation information update notification includes the SUCI calculation information update link; The ME is used to obtain new SUCI calculation information from the CAM network element through the SUCI calculation information update link, and update the SUCI calculation information stored locally by the ME to the new SUCI calculation information.

[0196] The processor-readable storage medium can be any available medium or data storage device that the processor can access, including but not limited to magnetic memory (e.g., floppy disk, hard disk, magnetic tape, magneto-optical disk (MO)), optical memory (e.g., CD, DVD, BD, HVD), and semiconductor memory (e.g., ROM, EPROM, EEPROM, non-volatile memory (NAND FLASH), solid-state drive (SSD)).

[0197] The device embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs. Those skilled in the art can understand and implement this without any creative effort.

[0198] Through the above description of the embodiments, those skilled in the art can clearly understand that each embodiment can be implemented by means of software plus necessary general-purpose hardware platforms, and of course, it can also be implemented by hardware. Based on this understanding, the above technical solutions, in essence or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, magnetic disk, optical disk, etc., and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute the methods described in the various embodiments or some parts of the embodiments.

[0199] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of this application, and are not intended to limit them. Although this application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features. Such modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of this application.

Claims

1. A method for updating SUCI calculation information of a communication network, characterized in that, A method applied to a mobile equipment (ME) in a user equipment (UE), the method comprising: receiving a subscriber concealed identifier (SUCI) calculation information update notification sent by a unified data management (UDM) network element in a home network, wherein the SUCI calculation information update notification comprises a SUCI calculation information update link generated and sent by a cryptographic application management (CAM) network element in the home network to the UDM network element when SUCI calculation information needs to be updated; sending a SUCI calculation information acquisition request to the CAM network element through the SUCI calculation information update link; receiving a SUCI calculation information acquisition response returned by the CAM network element, wherein the SUCI calculation information acquisition response comprises new SUCI calculation information; updating the SUCI calculation information locally saved by the ME to the new SUCI calculation information.

2. The communication network SUCI calculation information update method according to claim 1, characterized in that, The SUCI calculation information update notification is triggered by the UDM network element when the user equipment meets a target user type and a SUCI calculation information version of the user equipment recorded in a UDM database is not a new SUCI calculation information version; the new SUCI calculation information version is acquired and sent by the CAM network element to the UDM network element when SUCI calculation information needs to be updated. The target user type comprises at least one of a currently online user, a user successfully accessing to a network in the future, and a user accessing after completing authentication and key agreement (AKA) authentication. 3.The method of claim 1, wherein, The SUCI calculation information acquisition response further comprises a new SUCI calculation information version; when the SUCI calculation information locally saved by the ME is updated to the new SUCI calculation information, the SUCI calculation information version locally saved by the ME is further updated to the new SUCI calculation information version. After the SUCI calculation information locally saved by the ME is updated to the new SUCI calculation information, the method further comprises:

4. The communication network SUCI calculation information update method according to claim 3, characterized in that, sending a SUCI calculation information update notification confirmation to the UDM network element based on a user equipment parameter update mechanism, wherein the UDM network element is configured to receive the SUCI calculation information update notification confirmation and update the SUCI calculation information version of the user equipment recorded in a UDM database to the new SUCI calculation information version. The new SUCI calculation information and the new SUCI calculation information version are acquired by the CAM network element when SUCI calculation information needs to be updated.

5. The communication network SUCI calculation information update method according to claim 3, characterized in that, The CAM network element is configured to send a SUCI calculation information update request to the UDM network element, wherein the SUCI calculation information update request comprises the SUCI calculation information update link, the new SUCI calculation information, and the new SUCI calculation information version. ​ The UDM network element is configured to update the SUCI calculation information locally saved by the UDM network element to the new SUCI calculation information, and return a SUCI calculation information update response to the CAM network element; based on a user equipment parameter update mechanism, send a SUCI calculation information update notification to the ME through an access and mobility management function (AMF) network element.

6. The communication network SUCI calculation information update method according to claim 5, characterized in that, The SUCI calculation information update request further comprises a private key corresponding to the home network public key in the new SUCI calculation information; and the UDM network element is further configured to save the private key, which is used to decrypt the SUCI sent by the user equipment.

7. The communication network SUCI calculation information update method according to claim 1, characterized in that, Before the receiving of the SUCI calculation information update notification sent by the UDM network element in the home network, the method further comprises: writing the locally saved SUCI calculation information version into a SUCI calculation information version field of the SUCI; sending the SUCI to the UDM network element; The UDM network element is configured to obtain the SUCI calculation information version of the user equipment from the SUCI calculation information version field of the SUCI and save it in the UDM database; after the user equipment completes the AKA authentication and successfully accesses the network, if the SUCI calculation information version of the user equipment is not the new SUCI calculation information version, trigger a SUCI calculation information update notification; the new SUCI calculation information version is obtained by the CAM network element in the case of needing to update the SUCI calculation information and sent to the UDM network element.

8. The communication network SUCI calculation information update method according to claim 7, characterized in that, In the case of not saving the SUCI calculation information version locally, the method further comprises: setting the SUCI calculation information version to 0. 9.A method for updating SUCI calculation information of a communication network, characterized in that, The method is applied to the CAM network element in the home network, and comprises: in the case of needing to update the SUCI calculation information, obtaining new SUCI calculation information, and generating a SUCI calculation information update link; sending a SUCI calculation information update request to the UDM network element in the home network, the SUCI calculation information update request comprising the SUCI calculation information update link; the UDM network element is configured to send a SUCI calculation information update notification to the ME, the SUCI calculation information update notification comprising the SUCI calculation information update link; receiving a SUCI calculation information obtaining request sent by the ME through the SUCI calculation information update link, and returning a SUCI calculation information obtaining response to the ME; the SUCI calculation information obtaining response comprises the new SUCI calculation information, which is used to update the SUCI calculation information locally saved by the ME to the new SUCI calculation information.

10. The communication network SUCI calculation information update method according to claim 9, characterized in that, In the case of obtaining the new SUCI calculation information, the method further comprises: obtaining a new SUCI calculation information version; the SUCI calculation information obtaining response further comprises the new SUCI calculation information version, which is used to update the SUCI calculation information version locally saved by the ME to the new SUCI calculation information version.

11. The communication network SUCI calculation information updating method according to claim 10, characterized in that, The SUCI calculation information update request further comprises the new SUCI calculation information and the new SUCI calculation information version; After the SUCI calculation information update request is sent to the UDM network element in the home network, the method further comprises: receiving a SUCI calculation information update response returned by the UDM network element; the SUCI calculation information update response is returned by the UDM network element after the SUCI calculation information locally saved by the UDM network element is updated to the new SUCI calculation information.

12. The communication network SUCI calculation information update method according to claim 10, characterized in that, The SUCI calculation information update request further comprises a private key corresponding to the home network public key in the new SUCI calculation information; and the UDM network element is further configured to save the private key, which is used to decrypt the SUCI sent by the user equipment. 13.A method for updating SUCI calculation information of a communication network, characterized in that, The method is applied to a UDM network element in a home network, and the method comprises: receiving a SUCI calculation information update request sent by a CAM network element in the home network; the SUCI calculation information update request comprises a SUCI calculation information update link, which is generated by the CAM network element when the SUCI calculation information needs to be updated; sending a SUCI calculation information update notification to an ME in a user equipment UE, the SUCI calculation information update notification comprising the SUCI calculation information update link; the ME is configured to acquire new SUCI calculation information from the CAM network element through the SUCI calculation information update link, and update the SUCI calculation information locally saved by the ME to the new SUCI calculation information.

14. The communication network SUCI calculation information updating method according to claim 13, characterized in that, The SUCI calculation information update request further comprises a new SUCI calculation information version; and the sending of the SUCI calculation information update notification to the ME in the user equipment UE comprises: in a case where the user equipment meets a target user type and a SUCI calculation information version of the user equipment recorded in the UDM database is not the new SUCI calculation information version, triggering a SUCI calculation information update notification and sending the SUCI calculation information update notification to the ME; wherein the target user type comprises at least one of a current online user, a user who successfully accesses to the network in the future, and a user who completes AKA authentication access.

15. The communication network SUCI calculation information updating method according to claim 13, characterized in that, The sending of the SUCI calculation information update notification to the ME in the user equipment UE comprises: sending the SUCI calculation information update notification to the ME through an AMF network element based on a user equipment parameter update mechanism.

16. The communication network SUCI calculation information updating method according to claim 13, characterized in that, The SUCI calculation information update request further comprises new SUCI calculation information; after the SUCI calculation information update request sent by the CAM network element in the home network is received, the method further comprises: updating the SUCI calculation information locally saved by the UDM network element to the new SUCI calculation information, and returning a SUCI calculation information update response to the CAM network element.

17. The communication network SUCI calculation information updating method according to claim 13, characterized in that, The SUCI calculation information update request further comprises a new SUCI calculation information version; after the SUCI calculation information update notification is sent to the ME in the user equipment UE, the method further comprises: receiving a SUCI calculation information update notification confirmation returned by the ME based on a user equipment parameter update mechanism; and updating the SUCI calculation information version of the user equipment recorded in the UDM database to the new SUCI calculation information version.

18. The communication network SUCI calculation information updating method according to claim 13, characterized in that, The SUCI calculation information update request further comprises a private key corresponding to the home network public key in the new SUCI calculation information. After receiving the SUCI calculation information update request sent by the CAM network element in the home network, further comprising: saving the private key corresponding to the home network public key in the new SUCI calculation information; The private key is used to decrypt the SUCI sent by the user equipment.

19. The communication network SUCI calculation information updating method according to claim 13, characterized in that, The SUCI calculation information update request further comprises a new SUCI calculation information version; the SUCI calculation information update notification sent to the ME in the user equipment UE comprises: receiving the SUCI sent by the ME; obtaining the SUCI calculation information version of the user equipment from the SUCI calculation information version field of the SUCI and saving it in the UDM database; After the user equipment completes the AKA authentication and successfully accesses the network, if the SUCI calculation information version of the user equipment is not the new SUCI calculation information version, triggering the SUCI calculation information update notification and sending the SUCI calculation information update notification to the ME.

20. A communication network SUCI computing information updating apparatus characterized by comprising: A mobile equipment ME applied to a user equipment UE, comprising: a notification receiving module configured to receive a subscriber concealed identifier SUCI calculation information update notification sent by a unified data management UDM network element in a home network; the SUCI calculation information update notification comprises a SUCI calculation information update link, and the SUCI calculation information update link is generated by a password application management CAM network element in the home network and sent to the UDM network element when the SUCI calculation information needs to be updated; an obtaining request sending module configured to send a SUCI calculation information obtaining request to the CAM network element through the SUCI calculation information update link; an obtaining response receiving module configured to receive a SUCI calculation information obtaining response returned by the CAM network element; the SUCI calculation information obtaining response comprises new SUCI calculation information; a calculation information updating module configured to update the SUCI calculation information locally saved by the ME to the new SUCI calculation information.

21. A communication network SUCI calculation information updating apparatus characterized by comprising: A CAM network element applied to a home network, comprising: a link generating module configured to obtain new SUCI calculation information and generate a SUCI calculation information update link when the SUCI calculation information needs to be updated; an update request sending module configured to send a SUCI calculation information update request to a UDM network element in the home network; the SUCI calculation information update request comprises the SUCI calculation information update link; the UDM network element is configured to send a SUCI calculation information update notification to the ME, and the SUCI calculation information update notification comprises the SUCI calculation information update link; The acquisition request receiving module is configured to receive a SUCI calculation information acquisition request sent by the ME through the SUCI calculation information update link, and return a SUCI calculation information acquisition response to the ME; the SUCI calculation information acquisition response comprises the new SUCI calculation information, and is configured to update the SUCI calculation information locally saved by the ME to the new SUCI calculation information.

22. A communication network SUCI calculation information updating apparatus characterized by comprising: The UDM network element applied to a home network comprises: The update request receiving module is configured to receive a SUCI calculation information update request sent by a CAM network element in a home network; the SUCI calculation information update request comprises a SUCI calculation information update link, and the SUCI calculation information update link is generated by the CAM network element in the case of needing to update the SUCI calculation information; The update notification sending module is configured to send a SUCI calculation information update notification to an ME in a user equipment (UE); the SUCI calculation information update notification comprises the SUCI calculation information update link; The calculation information acquisition module is configured to be used by the ME to acquire new SUCI calculation information from the CAM network element through the SUCI calculation information update link, and update the SUCI calculation information locally saved by the ME to the new SUCI calculation information.

23. An electronic device comprising a processor and a memory having a computer program stored therein, characterized in that, The processor executes the computer program to implement the steps of the communication network SUCI calculation information update method in any one of claims 1-8 or 9-12 or 13-19. 24.A non-transitory computer-readable storage medium having stored thereon a computer program, characterized in that, The computer program is executed by the processor to implement the communication network SUCI calculation information update method in any one of claims 1-8 or 9-12 or 13-19.

25. A computer program product comprising a computer program, characterized in that, The computer program is executed by the processor to implement the steps of the communication network SUCI calculation information update method in any one of claims 1-8 or 9-12 or 13-19.

Images