A communication method and apparatus
By using the first and second network elements in a service-oriented NAS architecture to discover the address of the terminal's home data management network element and establish a binding relationship, the secure direct delivery of subscribed data in the roaming state of the terminal is realized. This solves the security problem of the terminal interacting with the service network to deliver subscribed data and ensures the security and reliability of data transmission.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- HUAWEI TECH CO LTD
- Filing Date
- 2024-11-27
- Publication Date
- 2026-05-29
AI Technical Summary
In a service-oriented NAS architecture, the relevant schemes for how terminals and service networks interact with subscription data are not clear, making it difficult to guarantee the security and reliability of subscription data. In particular, when the terminal is roaming, the visited network may obtain sensitive data from the home network.
By discovering the address of the data management network element of the terminal's home location through the first and second network elements, a binding relationship is established to enable the direct distribution of home location contract data in roaming status. The contract data is also exchanged with the terminal through the signaling distribution network element to ensure the security of data transmission.
It enables the secure direct transmission of contracted data while the terminal is roaming, ensuring the security and reliability of the contracted data and preventing the visited network from illegally obtaining sensitive data from the home network.
Smart Images

Figure CN122120751A_ABST
Abstract
Description
Technical Field
[0001] This application relates to the field of communication technology, and in particular to a communication method and apparatus. Background Technology
[0002] In 5G systems, non-access stratum (NAS) protocols are anchored to access and mobility management function (AMF) network elements. NAS signaling transmitted between terminals and other core network elements must be forwarded through AMF network elements. Some solutions propose a service-oriented NAS architecture to decouple the binding relationship between NAS signaling and AMF.
[0003] However, the relevant solutions do not explain how the terminal and the service network interact with the subscription data under the service-oriented NAS architecture. Summary of the Invention
[0004] This application provides a communication method and apparatus to clarify how a terminal and a service network interact with subscription data in a service-oriented NAS architecture.
[0005] Firstly, this application provides a communication method applicable to a first network element. This first network element is used for NAS service management at the terminal's visited location. The first network element can be the first network element itself, a component within the first network element (e.g., a processor, chip, or chip system), or a logical module or software implementing all or part of the functions of the first network element. This application does not specifically limit the scope of the method.
[0006] This method can be applied to 5G communication systems or communication systems above 5G, and can also be applied to non-terrestrial communication systems; however, this application does not specifically limit its application. The execution is as follows:
[0007] The system receives first information, which is used to request the discovery of the data management network element in the home region of the terminal. The first information includes first identification information of the data management network element, which is used to indicate the service type of the data management network element. Based on the first information, the system sends second information to a second network element, which is used to request the discovery of the data management network element in the home region of the terminal. The second information includes first identification information of the data management network element. The system receives second identification information from the data management network element in the second network element, which is used to indicate the address of the data management network element.
[0008] In this application, when the terminal is in roaming mode, the address of the data management network element of the terminal's home location is discovered through the first network element (i.e., the NAS service management network element of the visited location) and the second network element (i.e., the NAS service management network element of the home location), and a binding relationship is established between the data management network element of the home location, the signaling distribution network element of the home location, and the terminal. This enables the direct delivery of the home location's subscribed data to the roaming terminal when in roaming mode, ensuring the security of the subscribed data delivery.
[0009] In one alternative approach, the first information also includes the terminal's home network identifier information, and the first network element further obtains the identifier information of the second network element based on the terminal's home network identifier information.
[0010] The first network element can more quickly discover the corresponding second network element based on the terminal's home network identifier information, so as to obtain the address of the data management network element of the terminal's home location based on the second network element.
[0011] In one alternative approach, the first network element determines that the terminal is in a roaming state based on the terminal's home network identifier information.
[0012] If the first network element determines that the terminal is in a roaming state based on the terminal's home network identifier information, then it is clear that it does not need to request the terminal's subscription data from the network corresponding to the first network element, but should request the terminal's subscription data from the terminal's home network.
[0013] In one alternative approach, the second information may also include the terminal's identification information, the identification information of the signaling distribution network element of the terminal's visited location, and the network identification information of the first network element.
[0014] The second information includes the terminal's identification information, so that the second network element can determine which terminal's subscription data it needs to request. The second information also includes the identification information of the signaling distribution network element in the terminal's visited location, so that after obtaining the address of the data management network element, the second network element can send the home terminal's subscription data to the visited signaling distribution network element. Finally, the second information includes the network identification information of the first network element, so that the second network element can determine which network the terminal is currently roaming in.
[0015] Secondly, this application provides a communication method applicable to a second network element. This second network element is used for NAS service management of the terminal's home location. The second network element can be the second network element itself, a component within the second network element (e.g., a processor, chip, or chip system), or a logical module or software implementing all or part of the functions of the second network element. This application does not specifically limit the scope of the method.
[0016] This method can be applied to 5G communication systems or communication systems above 5G, and can also be applied to non-terrestrial communication systems; however, this application does not specifically limit its application. The execution is as follows:
[0017] The system receives second information from a first network element. The second information is used to request the discovery of the data management network element in the home region of the terminal. The second information includes first identification information of the data management network element, which is used to indicate the service type of the data management network element. The system obtains second identification information of the data management network element based on the second information. The second identification information is used to indicate the address of the data management network element. The system then sends the second identification information of the data management network element to the first network element.
[0018] In this application, when the terminal is in roaming mode, the address of the data management network element of the terminal's home location is discovered through the first network element (i.e., the NAS service management network element of the visited location) and the second network element (i.e., the NAS service management network element of the home location), and a binding relationship is established between the data management network element of the home location, the signaling distribution network element of the home location, and the terminal. This enables the direct delivery of the home location's subscribed data to the roaming terminal when in roaming mode, ensuring the security of the subscribed data delivery.
[0019] In one alternative approach, the second information may also include the terminal's identification information, the identification information of the signaling distribution network element of the terminal's visited location, and the network identification information of the first network element.
[0020] In one alternative approach, the second network element also sends a data service notification to the data management network element, the data service notification including: the identification information of the signaling distribution network element of the terminal's visited location.
[0021] Based on this, the data management network element can clearly determine which network element in the visited area to send the home terminal's contracted data.
[0022] In one alternative approach, the data service notification may also include the network identification information of the first network element.
[0023] In one alternative approach, the first network element's identity is authenticated before the second network element obtains the second identification information of the data management network element based on the second information.
[0024] Only after the second network element has verified the identity of the first network element will it request the address of the data management network element, thus preventing the terminal's subscription data from being sent to an unauthorized network.
[0025] Thirdly, this application provides a communication method applicable to a data management network element. This data management network element is used for terminal subscription data management. The data management network element can be the data management network element itself, a component within the data management network element (e.g., a processor, chip, or chip system), or a logic module or software that implements all or part of the data management network element's functions. This application does not specifically limit the scope of the application.
[0026] This method can be applied to 5G communication systems or communication systems above 5G, and can also be applied to non-terrestrial communication systems; however, this application does not specifically limit its application. The execution is as follows:
[0027] Determine the subscription data of the updated terminal; send a data update notification to the terminal through the signaling distribution network element. The data update notification includes the terminal's subscription data.
[0028] The data management network element distributes the contracted data between the network element and the terminal through signaling, which can improve the security of contracted data transmission.
[0029] In one alternative approach, determining the updated terminal's subscription data is triggered based on one or more of the following conditions:
[0030] Condition 1: Changes in the terminal's contract data;
[0031] Condition 2: The receiving terminal submits a data subscription request.
[0032] Condition 3: The subscription data received from the terminal is different from the subscription data of the terminal stored in the data management network element;
[0033] Condition 4: Determine the update time of the contract data arriving at the terminal;
[0034] Condition 5: Receive initial registration from a roaming terminal.
[0035] Based on the above conditions, the data management network element can determine when to update the contracted data.
[0036] In one alternative approach, the data management network element also receives a data service notification, which includes: identification information of the signaling distribution network element of the terminal's visited location; and determines a first relationship based on the data service notification, the first relationship indicating the correspondence between the data management network element, the terminal, and the signaling distribution network element of the terminal's visited location.
[0037] After receiving the data service notification, the data management network element determines the correspondence between the data management network element, the terminal, and the signaling distribution network element of the terminal's visited location, so as to clarify how to transmit the updated subscription data when the subscription data is updated.
[0038] In one alternative approach, when the terminal is in roaming mode, the data management network element determines the signaling distribution network element of the visited location of the terminal based on the first relationship; and sends a data update notification to the terminal through the signaling distribution network element of the visited location of the terminal.
[0039] In one alternative approach, the data update notification may further include: second identification information of the data management network element and identification information of the terminal, wherein the second identification information is used to indicate the address of the data management network element.
[0040] Fourthly, this application provides a communication method applicable to a terminal. The terminal can be the terminal itself, a component within the terminal (e.g., a processor, chip, or chip system), or a logic module or software implementing all or part of the terminal's functions. This application does not specifically limit the scope of the application.
[0041] This method can be applied to 5G communication systems or communication systems above 5G, and can also be applied to non-terrestrial communication systems; however, this application does not specifically limit its application. The execution is as follows:
[0042] The subscription data of the terminal is determined; a subscription data request is sent to the data management network element through the signaling distribution network element. The subscription data request includes: the second identification information of the data management network element and the identification information of the subscription data. The second identification information is used to indicate the address of the data management network element.
[0043] The terminal interacts with the data management network element through signaling distribution network element, which can improve the security of contracted data transmission.
[0044] In one alternative approach, the subscription data request may also include the terminal's identification information.
[0045] In one alternative approach, the terminal further sends first information, which is used to request the discovery of the data management network element of the terminal's home location. The first information includes first identification information of the data management network element, which is used to indicate the service type of the data management network element.
[0046] In one alternative approach, the first information may also include: the terminal's home network identifier information.
[0047] In one alternative approach, the terminal also receives data update notifications, which include the terminal's subscribed data.
[0048] In an alternative approach, the terminal also sends a data reporting request, which includes subscription data stored in the terminal.
[0049] Fifthly, a communication device is provided, including a processor and an interface circuit. The interface circuit is used to receive signals from other communication devices outside the communication device and transmit them to the processor, or to send signals from the processor to other communication devices outside the communication device. The processor implements the functional modules of the methods in any possible implementation of any of the first to fourth aspects through logic circuits or by executing computer programs or instructions. Optionally, the communication device further includes a memory for storing computer programs or instructions.
[0050] In a sixth aspect, a computer program product storing instructions is provided, which, when read and executed by a computer, implements the method in any possible implementation of any of the first to fourth aspects.
[0051] A seventh aspect provides a circuit for performing the methods in any possible implementation of any of the first to fourth aspects described above, the circuit including chip circuitry. Optionally, the circuit may also be coupled to a memory.
[0052] Eighthly, a chip is provided, comprising a processor, which, when executing a computer program or instructions, implements the methods in any possible implementation of any of the first to fourth aspects. Optionally, the chip may further include a memory, and the chip may be composed of chips or may include chips and other discrete devices.
[0053] Ninth aspect, a communication device is provided, including a processor that implements the method in any possible implementation of any of the first to fourth aspects by means of logic circuits or by executing computer programs or instructions.
[0054] In a tenth aspect, a communication apparatus is provided, comprising a unit or module for performing a method in any possible implementation of any of the first to fourth aspects described above.
[0055] Eleventhly, a computer-readable storage medium is provided, which stores a computer program or instructions that, when executed by a processor, implement the method in any possible implementation of any of the first to fourth aspects.
[0056] In a twelfth aspect, embodiments of this application also provide a communication system. The communication system includes: a first network element for implementing the methods of the first aspect and any possible implementations thereof; a second network element for implementing the methods of the second aspect and any possible implementations thereof; a data management network element for implementing the methods of the third aspect and any possible implementations thereof; and a terminal for implementing the methods of the fourth aspect and any possible implementations thereof. Attached Figure Description
[0057] Figure 1A This application provides a schematic diagram of a mobile communication network architecture.
[0058] Figure 1B This application provides a schematic diagram of a mobile communication network architecture.
[0059] Figure 2 A schematic diagram of a protocol stack structure provided in an embodiment of this application;
[0060] Figure 3 A schematic diagram of a data management network element discovery process provided in this application embodiment;
[0061] Figure 4A This application provides a schematic diagram of a data retrieval process according to an embodiment of the present application.
[0062] Figure 4B This is a schematic diagram of another data retrieval process provided in an embodiment of this application;
[0063] Figure 5 This application provides a schematic diagram of a data subscription process as an embodiment of the present application.
[0064] Figure 6 This application provides a schematic diagram of a data reporting process.
[0065] Figure 7 This is a schematic diagram of a communication device structure provided in an embodiment of this application;
[0066] Figure 8 This is a schematic diagram of a communication device structure provided in an embodiment of this application;
[0067] Figure 9 This is a schematic diagram of a communication device structure provided in an embodiment of this application. Detailed Implementation
[0068] The technical solutions of the embodiments of this application will be described below with reference to the accompanying drawings. Obviously, the described embodiments are only a part of the embodiments of this application, and not all of them. The terms "first," "second," and corresponding terminology in this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such terms can be interchanged where appropriate; this is merely a way of distinguishing objects with the same attributes in the embodiments of this application. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion, so that a process, method, system, product, or device that comprises a series of units is not necessarily limited to those units, but may include other units not explicitly listed or inherent to these processes, methods, products, or devices. The methods and apparatus provided in the embodiments of this application are based on the same or similar technical concepts. Since the principles by which the methods and apparatus solve problems are similar, the implementations of the apparatus and methods can refer to each other, and repeated details will not be repeated.
[0069] In this application embodiment, "at least one" refers to one or more, and "more than one" refers to two or more. "And / or" describes the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent: A alone, A and B simultaneously, or B alone, where A and B can be singular or plural. The character " / " generally indicates that the preceding and following related objects are in an "or" relationship. "At least one of the following" or similar expressions refer to any combination of these dozen or more items, including any combination of single or plural items. For example, at least one of a, b, or c can represent: a, b, c, ab, ac, bc, or abc, where a, b, and c can be single or multiple.
[0070] In the embodiments of this application, "send" and "receive" indicate the direction of signal transmission. For example, "send information to XX" can be understood as the destination of the information being XX, which may include direct transmission via the air interface or indirect transmission by other units or modules via the air interface. "Receive information from YY" can be understood as the source of the information being YY, which may include direct reception from YY via the air interface or indirect reception from YY by other units or modules via the air interface. "Send" can also be understood as the "output" of the chip interface, and "receive" can also be understood as the "input" of the chip interface. In other words, sending and receiving can occur between devices, such as between network devices and terminals, or within a device, such as between components, modules, chips, software modules, or hardware modules within the device via a bus, wiring, or interface. It is understood that information may undergo necessary processing, such as encoding and modulation, between the source and destination of information transmission, but the destination can understand the valid information from the source. Similar expressions in this application can be understood in a similar way and will not be repeated here.
[0071] In the embodiments of this application, "when," "if," and "if" all refer to the device taking corresponding actions under certain objective circumstances, not a time limit, nor do they require the device to perform a judgment action, nor do they imply any other limitations. Unless otherwise specified, "if" and "if" are interchangeable, and "when" and "in the case of" are interchangeable. "When" and "if" / "if" are interchangeable. In the embodiments of this application, "*" can be used to represent "multiplication."
[0072] The ordinal numbers such as "first" and "second" mentioned in the embodiments of this application are used to distinguish multiple objects and are not used to limit the size, content, order, timing, priority, or importance of the multiple objects. Words such as "exemplary" or "for example" are used to indicate that something is being described as an example, illustration, or description. Any embodiment or design scheme described as "exemplary" or "for example" in this application should not be construed as being better or more advantageous than other embodiments or design schemes. Specifically, the use of words such as "exemplary" or "for example" is intended to present the relevant concepts in a concrete manner.
[0073] The method provided in this application can be applied to various mobile communication systems, such as the Internet of Things (IoT), narrowband Internet of Things (NB-IoT), fourth-generation (4G) communication systems (e.g., long term evolution (LTE)), 5G communication systems (e.g., 5G new radio (NR)), LTE and NR hybrid architectures, or new communication systems that will emerge in the future development of communication.
[0074] The following section will first explain some of the terms used in the embodiments of this application so that those skilled in the art can understand them.
[0075] Figure 1A A schematic diagram of a mobile communication network architecture in a non-roaming scenario is shown. This network architecture includes terminals, access network equipment, signaling distribution function (SDF) network elements, NAS service management network elements, mobility management network elements, session management network elements, computing management network elements, perception management network elements, artificial intelligence (AI) management network elements, and data management network elements. These network elements can communicate through service-oriented interfaces. Optionally, the terminal can also communicate with each network element through service-oriented interfaces.
[0076] Figure 1BA schematic diagram of a mobile communication network architecture in a roaming scenario is shown. This network architecture is divided into a visited network and a home network. The NAS service management network element in the visited location of the terminal can call the services provided by the data management network element in the home location of the terminal through the NAS service management network element in the home location of the terminal. The SDF network element discovers the data management services provided by the data management network element in the home location of the terminal, establishes a binding relationship between the terminal and the data management network element in the home location of the terminal, and enables the terminal to directly call NAS services with the data management network element in the home location of the terminal.
[0077] Network elements such as mobile management network elements, session management network elements, computing management network elements, sensing management network elements, AI management network elements, and data management network elements can be collectively referred to as NAS service network elements. These elements provide NAS services, which can be accessed by terminals on demand. NAS services can also be called NAS business or NAS function. NAS service network elements can also be called NAS service network functions or NAS service devices, and are hereinafter referred to as NAS service network elements. The NAS services provided by NAS service network elements will be referred to as network-side NAS services in the following text.
[0078] The NAS service management network element is used to manage NAS service information. Specifically, the NAS service information of a terminal indicates one or more NAS services that the terminal can provide; the NAS service information of a NAS service network element indicates one or more NAS services that the NAS service network element can provide; and the NAS service information corresponding to a NAS service indicates at least one terminal and / or at least one NAS service network element capable of providing that NAS service. For example, the NAS service management network element can be used for registering, updating, or deregistering NAS service information. The NAS service management network element can also be used for NAS service discovery, that is, providing NAS service information of other devices or network elements to the initiator of NAS service discovery, where the initiator of NAS service discovery can be a terminal, a NAS service network element, or a signaling distribution network element.
[0079] The session management network element can be a session management function (SMF) network element in a 5G communication system, or a network element with SMF functionality in a next-generation communication system. The session management network element can provide session management services, such as session management in mobile networks (e.g., session establishment, modification, and release), and can also be used to allocate Internet Protocol addresses to terminals and select user plane network elements for transmitting data within a session.
[0080] Mobility management network elements can be AMF (Active Mobile Functions) network elements in 5G communication systems or network elements with AMF functionality in next-generation communication systems. Mobility management network elements can be used to provide mobility management services, such as managing terminal attachment or registration, mobility, and updating the terminal's tracking area.
[0081] The computing management network element, a control plane network element for handling computing tasks, can be used to provide computing services, such as establishing and maintaining computing sessions based on terminal-based service calls, establishing and maintaining computing tasks, and distributing network configuration policy information. It can also invoke computing services provided by terminals on demand.
[0082] The perception management network element, as the control plane network element for handling perception tasks, can be used to provide perception services. For example, during the process of a terminal invoking a perception service, the perception management network element performs the establishment and maintenance of the perception session corresponding to the perception service, and issues the perception task offloading policy configured by the network to the terminal. The perception management network element can also invoke the perception services provided by the terminal on demand. The perception management network element can also register, update, and deregister its own provided perception services with the NAS service management network element to achieve perception service discovery.
[0083] AI management network elements can be used to provide AI services such as AI training and AI model calculation.
[0084] Data management network elements can be used to provide data services such as data storage and data processing.
[0085] The signaling distribution function network element, also known as a signaling distribution network element or signaling distribution device, is referred to as the signaling distribution network element below. The signaling distribution network element primarily acts as the link anchor between the terminal and the network, realizing the distribution of NAS messages between the terminal and various NAS service network elements. NAS messages can also be called NAS signaling or signaling. The signaling distribution network element can act as an agent for the terminal to discover NAS service network elements, construct and maintain the NAS service network element network topology, and establish the binding relationship between the terminal and the NAS service network elements. The NAS service network topology can indicate the NAS services provided by the NAS service network elements and the address information of the NAS service network elements. The signaling distribution function network element differs from the AMF network element in the existing network. For NAS service registration initiated by the terminal, the signaling distribution function network element can forward NAS messages related to NAS service registration from the terminal to the NAS service management network element; for NAS service discovery initiated by the terminal on the network side, the signaling distribution function network element can forward NAS service discovery-related NAS messages to the NAS service management network element. For NAS service calls initiated by the terminal, the corresponding NAS service network element is selected based on the NAS service type information, and the terminal's NAS message is forwarded to that NAS service network element. Optionally, if the terminal is in an idle state, the terminal can be paged before forwarding the NAS message to it.
[0086] In the embodiments of this application, the network element may also be referred to as a network function (NF), functional entity, device, etc. For example, the NAS service management network element may also be referred to as a NAS service management network function, etc. The names of each function are not limited in this application. Those skilled in the art can replace the names of the above functions with other names to perform the same function, and all such replacements are within the scope of protection of this application.
[0087] In this embodiment, the access network device can be a device in a wireless network, or it can be called a network device or a wireless access network device. For example, the access network device can be a radio access network (RAN) node that connects a terminal to a wireless network, and it can also be called an access network device. Access network devices include, but are not limited to: base stations, evolved NodeBs (eNodeBs), transmission reception points (TRPs), next-generation NodeBs (gNBs) in 5G mobile communication systems, access network devices in open radio access networks (O-RANs), base stations in future mobile communication systems, or access nodes in wireless fidelity (WiFi) systems; or it can be a module or unit that performs some of the functions of a base station, such as a central unit (CU), a distributed unit (DU), a central unit control plane (CU-CP) module, or a central unit user plane (CU-UP) module. The access network device can be a macro base station, a micro base station, an indoor station, a relay node, or a donor node, etc. This application does not limit the specific technology or equipment form used in the access network equipment.
[0088] In some implementations, access network equipment can include centralized units (CUs) and distributed units (DUs). This includes RAN equipment at CU and DU nodes that separate the protocol layers of the gNB in the NR system. Some protocol layer functions are centrally controlled by the CU, while the remaining partial or complete protocol layer functions are distributed across the DUs, which are then centrally controlled by the CU. Furthermore, the CU can be divided into a control plane (CU-CP) and a user plane (CU-UP). The CU-CP handles control plane functions, primarily including radio resource control (RRC) and the corresponding packet data convergence protocol (PDCP) (PDCP-C). PDCP-C is mainly responsible for control plane data encryption / decryption, integrity protection, and data transmission. The CU-UP handles user plane functions, primarily including the service data adaptation protocol (SDAP) and the corresponding PDCP (PDCP-U). SDAP is mainly responsible for processing core network data and mapping flows to bearers. PDCP-U is primarily responsible for data plane encryption / decryption, integrity protection, header compression, sequence number maintenance, and data transmission. CU-CP and CU-UP are connected via the E1 interface. CU-CP represents the gNB connected to the core network via the NG interface and to the DU via the F1 interface control plane (F1-C). CU-UP is connected to the DU via the F1 interface user plane (F1-U). Alternatively, PDCP-C may also be located within CU-UP.
[0089] It is understood that CU (including CU-CP or CU-UP) or DU may have different names in different systems, but those skilled in the art will understand their meaning. For example, in an open radio access network (O-RAN) system, CU can also be called O-CU (open CU), DU can also be called O-DU, CU-CP can also be called O-CU-CP, and CU-UP can also be called O-CU-UP. For ease of description, this application uses CU, CU-CP, CU-UP, and DU as examples. The access network equipment may also include an active antenna unit (AAU). CU implements some of the functions of gNB, and DU implements some of the functions of gNB. For example, CU is responsible for handling non-real-time protocols and services, implementing the functions of the RRC layer. DU is responsible for handling physical layer protocols and real-time services, implementing the functions of the radio link control (RLC) layer, media access control (MAC) layer, and physical (PHY) layer. In some deployments, the CU can also be divided into a centralized unit control plane (CU-CP) node and a centralized unit user plane (CU-UP) node. The CU-CP is responsible for control plane functions, while the CU-UP is responsible for user plane functions.
[0090] The terminal involved in this application embodiment can be a wireless terminal device capable of receiving network device scheduling and instruction information. The terminal can invoke basic NAS services provided by the network side, including: access management service, mobility management service, NAS security service, etc. The terminal can also invoke new NAS services provided by the network side, including: session management service, policy control service, computing service, sensing service, AI service, data service, artificial intelligence proxy communication service, digital identity service, etc. The terminal can also provide NAS services, and the network side can invoke the NAS services provided by the terminal as needed. For example, the NAS services provided by the terminal may include computing services, sensing services, or artificial intelligence services, etc.
[0091] A terminal can be called a terminal device, user equipment (UE), terminal, mobile station (MS), mobile terminal (MT), etc. A terminal device can be a device that includes wireless communication capabilities (providing voice / data connectivity to the user). Examples include handheld devices with wireless connectivity, vehicle-mounted devices, and vehicle modules. Currently, examples of terminal devices include: mobile phones, tablets, laptops, PDAs, mobile internet devices (MIDs), wearable devices, virtual reality (VR) devices, augmented reality (AR) devices, wireless terminals in industrial control, wireless terminals in vehicle-to-everything (V2X) communication, wireless terminals in vehicle-to-everything (V2X) communication, intelligent vehicles, in-vehicle infotainment systems (or onboard transmitters) (T-boxes), machine-to-machine / machine-type communications (M2M / MTC) terminal devices, and the Internet of Things (IoT). Wireless terminals in industrial control systems can include devices such as IoT (Internet of Things) terminals. For example, terminal devices can be in-vehicle equipment, vehicle-mounted modules, vehicles, on-board units (OBUs), roadside units (RSUs), T-boxes, chips, or systems-on-chips (SoCs), which can be installed in vehicles, OBUs, RSUs, or T-boxes. Wireless terminals in industrial control systems can be cameras, robots, etc. Wireless terminals in smart homes can be televisions, air conditioners, robot vacuums, speakers, set-top boxes, etc.The terminal can also be a V2X device, such as a smart car, intelligent car, digital car, unmanned car, driverless car, pilotless car, or automobile, self-driving car, or autonomous car, pure electric vehicle (EV), hybrid electric vehicle (HEV), range-extended electric vehicle (REEV), plug-in hybrid electric vehicle (PHEV), new energy vehicle, or roadside unit (RSU). The terminal can also be a device in device-to-device (D2D) communication, such as an electricity meter or water meter. Furthermore, in this embodiment, the terminal can also be a terminal in an IoT system. IoT is an important component of future information technology development, and its main technical characteristic is connecting objects to networks through communication technology, thereby realizing an intelligent network of human-machine interconnection and machine-to-machine interconnection.
[0092] like Figure 2 The diagram shown illustrates an end-to-end protocol stack structure applicable to this application. In this application, the service-oriented NAS protocol terminates between the terminal and the NAS service network element, and the NAS service is carried on the service-oriented NAS protocol. Both the RAN and the signaling distribution network element transparently transmit service-oriented NAS messages. These service-oriented NAS messages can be encoded using an open application programming interface (open API), which is more suitable for the interaction mechanism of NAS service calls.
[0093] On the terminal side, the protocol stack structure may include a service-oriented NAS layer, Hypertext Transfer Protocol (HTTP) / 2 or HTTP / 3, Transmission Control Protocol (TCP) / Quick UDP Internet Connections (QUIC), Internet Protocol (IP) layer, Layer 2 (L2), and Layer 1 (L1). L1 may include the physical (PHY) layer, etc.; L2 may include the Service Data Adaptation Protocol (SDAP) layer, Packet Data Convergence Protocol (PDCP) layer, Radio Link Control (RLC) layer, and Media Access Control (MAC) layer, etc. The service-oriented NAS layer primarily implements NAS services, such as basic NAS services (e.g., access management services, mobility management services) and newer NAS services (e.g., computing services, sensing services, artificial intelligence services).
[0094] The protocol layer between the terminal and the RAN can be the access network (AN) protocol layer, such as the L1 and L2 related protocol layers, but this application does not limit it.
[0095] The protocol layer between the RAN and the signaling distribution network element can be the protocol layer between the RAN and the core network (CN) (RAN-CN protocol layer), and this application does not limit this.
[0096] The protocol layer between the signaling distribution network element and the NAS service network element can be a service-oriented interface protocol, such as HTTP / 2 or HTTP / 3, transport layer security (TLS), TCP / QUIC, IP, L2, L1, etc.
[0097] The protocol stack described above is just an example and should not be construed as limiting, such as having fewer or more layers than the example.
[0098] Based on the preceding description, this application enables NAS functionality to be service-oriented. Both terminals and NAS service network elements can register their own NAS services as needed, allowing for flexible and on-demand mutual invocation of NAS services. This will be described in detail below.
[0099] In this application, the names of each message and each piece of information are just examples. As the network architecture evolves and new business scenarios emerge, the names of messages or information may change. However, the technical solutions provided in the embodiments of this application are also applicable to similar technical problems.
[0100] When the method provided in this application is applied Figure 1A In the system shown in 1B, the terminal device can be Figure 1A Or the terminal or chip or module in the terminal in 1B; the signaling distribution network element can be Figure 1A Or a chip or module in the signaling distribution function network element of 1B; the computing management network element can be... Figure 1A Or the chip or module in the computing management network element in 1B.
[0101] In a service-oriented NAS architecture, the relevant solutions do not specify how the terminal and the service network interact with subscription data. This subscription data indicates the network capabilities or supported service attributes that the terminal is allowed to use. The following, in conjunction with the accompanying drawings, illustrates how the terminal and the service network interact with the terminal's subscription data. The subscription data sent to the terminal by the data management network element can also be replaced with configuration data or configuration parameters. This configuration data or parameters are information pre-configured by the network based on the terminal's supported capabilities and the network's capabilities, allowing the terminal to perform corresponding operations. In this application, subscription data, configuration parameters, and configuration data can be interchanged; no specific limitations are imposed here. The following explanation uses subscription data as an example.
[0102] When a terminal is roaming, the following example illustrates the discovery of a data management network element that provides the terminal's subscription data. Roaming can be understood as a terminal receiving communication services across mobile networks, such as a terminal in mobile network A registering and obtaining communication services in mobile network B. This is merely an example and does not limit the specific understanding of roaming. When a terminal is roaming, it needs to obtain the subscription data configured by its home network to access the visited network and obtain the communication services provided by it. The terminal's subscription data is critical and sensitive data for the operator. When a network element in the home network sends this data to a terminal roaming in the visited network, it must ensure that the visited network cannot obtain the home network's subscription data. This prevents the visited network from modifying the terminal's capabilities and service attributes, ensuring the security of the subscription data and the reliability of the service.
[0103] Reference Figure 3This method can be illustrated through data interaction between a terminal, a signaling distribution network element, a first network element, a second network element, and a data management network element. The terminal can be the terminal itself, a component within the terminal (e.g., a processor, chip, or chip system), or a logical module or software implementing all or part of the terminal's functions. The first network element is used for NAS service management at the terminal's visited location. This first network element can be the first network element itself, a component within the first network element (e.g., a processor, chip, or chip system), or a logical module or software implementing all or part of the first network element's functions. For example, this first network element is the NAS service management network element at the terminal's visited location. The signaling distribution network element serves as the link anchor between the terminal and the network, enabling NAS message distribution between the terminal and various NAS service network elements. For example, this signaling distribution network element is an SDF (Software as a Function). The second network element is used for NAS service management in the terminal's home location. This second network element can be the second network element itself, a component within the second network element (e.g., a processor, chip, or chip system), or a logical module or software that implements all or part of the functions of the second network element. For example, this second network element is the NAS service management network element for the terminal's home location. The data management network element is used for terminal subscription data management. This data management network element can be the data management network element itself, a component within the data management network element (e.g., a processor, chip, or chip system), or a logical module or software that implements all or part of the functions of the data management network element. The execution is as follows:
[0104] Step 301: The terminal sends a NAS service discovery request message to the signaling distribution network element.
[0105] Accordingly, the signaling distribution network element receives the NAS service discovery request message. This NAS service discovery request message is used to request the discovery of the data management network element of the terminal's home location. This NAS service discovery request message can reuse existing NAS messages, or it can be a new type of message used to discover NAS services; this is not specifically limited here.
[0106] The NAS service discovery request message includes the NAS service type, the terminal's identification information, and the first identification information of the data management network element. The NAS service type indicates that the NAS service discovery request message is for NAS service discovery.
[0107] The first identification information is used to indicate the service type or service name of the data management network element, or to identify the type of the data management network element, wherein the data management network element is used for contracted data management. The first identification information can also be referred to as the type information of the data management network element, and can also be replaced by descriptions such as the service name information or service index information of the data management network element, used to identify the contracted data management service. The following references to the first identification information can be understood with reference to this description; further elaboration elsewhere will not be repeated.
[0108] As an example, the first identification information includes either the service type information or the service name information of the data management network element. As another example, there is a correspondence between the first identification information and the service type information or the service name information of the data management network element; the service type information or the service name information of the data management network element can be determined based on the first identification information. This is merely illustrative and not intended to be specific.
[0109] The aforementioned NAS service discovery request message also includes the terminal's home network identifier information, such as the public land mobile network (PLMN) identifier.
[0110] As an example, a NAS service discovery request message includes the NAS service type, the terminal's identification information, and the NAS service discovery container. The NAS container carries information such as primary identification information, the terminal's identification information, and the terminal's home network identification information.
[0111] After receiving the NAS service discovery request message, the signaling distribution network element determines to execute step 302 based on the NAS service type.
[0112] Step 302: The signaling distribution network element sends the first information to the first network element.
[0113] The first piece of information is used to request the data management network element of the terminal's home location.
[0114] Accordingly, the first network element receives the first information. This first information includes the first identification information of the data management network element, which indicates the service type of the data management network element. As an example, the first information also includes the home network identification information of the terminal and the terminal's identification information. For instance, if the aforementioned NAS service discovery request message includes the NAS service type, the terminal's identification information, and the NAS container, the signaling distribution network element may send the NAS container as the first information to the first network element.
[0115] In one possible implementation, the first network element determines that the terminal is in a roaming state based on other indication information of the terminal. For example, the terminal sends indication information indicating that it is in a roaming state to the first network element through a signaling distribution network element. In another possible implementation, the first network element determines that the terminal is in a roaming state based on the terminal's home network identifier information in the first information. For example, if the terminal's home network identifier information is PLMN1 and the network identifier information corresponding to the network where the first network element is located is PLMN2, and PLMN1 and PLMN2 are different, then the terminal is determined to be in a roaming state.
[0116] After the first network element determines that the terminal is in roaming mode, it also obtains the identification information of the second network element based on the terminal's home network identifier information. As an example, after obtaining the terminal's home network identifier information, the first network element looks up the address of the NAS service management network element in the NAS service architecture based on that information, and then uses that address as the identification information of the second network element. Afterwards, the first network element executes step 303.
[0117] Step 303: The first network element sends the second information to the second network element based on the first information.
[0118] The second piece of information is used to request the data management network element of the terminal's home location.
[0119] Accordingly, the second network element receives the second information. The second information includes the first identification information of the data management network element.
[0120] The second information also includes the terminal's identification information, the identification information of the signaling distribution network element in the terminal's visited location, and the network identification information of the first network element. Specifically, the second information includes the terminal's identification information so that the second network element can determine which terminal's subscription data it needs to request. The second information includes the identification information of the signaling distribution network element in the terminal's visited location so that, after obtaining the address of the data management network element, the second network element can send the home terminal's subscription data to the signaling distribution network element in the visited location. The second information includes the network identification information of the first network element so that the second network element can determine which network the terminal is currently roaming in.
[0121] Step 304: The second network element obtains the second identification information of the data management network element based on the second information. The second identification information is used to indicate the address of the data management network element.
[0122] The second identification information is used to indicate the address or domain name of the data management network element, or to identify the data management network element and / or the address of the data management network element. The second identification information can also be referred to as the address information or domain name information of the data management network element, and can also be replaced by descriptions such as the address information or address index information of the data management network element. The following references to the second identification information are for illustrative purposes only; further elaboration elsewhere will not be repeated.
[0123] As an example, the second identification information includes the identity information and address information of the data management network element. As another example, there is a correspondence between the second identification information and the identity information and address information of the data management network element; the identity information and address information of the data management network element can be determined based on the second identification information. This is merely illustrative and not intended to be specific.
[0124] As an example, the second network element registers information for multiple data management network elements. The second network element can select one data management network element to provide services to the terminal while it is roaming. For instance, the second network element registers three data management network elements: data management network element 1, data management network element 2, and data management network element 3. Data management network element 1 stores a large amount of subscription data and consumes 90% of its memory. Data management network element 2 is not always active but activates intermittently. Data management network element 3 is active, stores a small amount of subscription data, and consumes 10% of its memory. Since the terminal is roaming, to better serve the terminal, the second network element can select data management network element 3 to provide services to the terminal.
[0125] Furthermore, before executing step 304, the second network element authenticates the identity of the first network element. Only after successfully verifying the identity of the first network element does the second network element request the address of the data management network element, preventing the terminal's subscribed data from being sent to an unauthorized network. As an example, the second network element can verify based on the second information whether the first network element has the authority to request the discovery of the terminal's home data management network element. If authorized, step 304 is executed; otherwise, the process of discovering the terminal's home data management network element ends. For example, the second network element obtains the terminal's identification information, the user-hidden identifier (SUCI) 1. However, SUCI1 is not the identification information of a terminal registered in the PLMN2 corresponding to the second network element, and the second network element rejects the discovery request from the terminal's home data management network element. For example, the second network element obtains the terminal's identification information, SUCI1, where SUCI1 is the identification information of a terminal registered in the PLMN2 corresponding to the second network element. The second network element receives the discovery request from the terminal's home data management network element and executes step 304.
[0126] The execution order of steps 305-308 and steps 309-310 is not limited. They can be executed simultaneously, or steps 305-308 can be executed first, followed by steps 309-310. Alternatively, steps 309-310 can be executed first, followed by steps 305-308; there is no specific limitation here.
[0127] Step 305: The second network element sends the second identification information of the data management network element to the first network element.
[0128] Accordingly, the first network element receives the second identification information. For example, the second network element also sends the terminal's identification information to the first network element.
[0129] Step 306: The first network element sends the second identification information of the data management network element to the signaling distribution network element.
[0130] Accordingly, the signaling distribution network element receives the second identification information. For example, the first network element also sends the terminal's identification information to the signaling distribution network element.
[0131] For example, the second identification information and the terminal's identification information can be carried by a container.
[0132] Step 307: The signaling distribution network element determines the correspondence between the terminal and the second identification information.
[0133] After the signaling distribution network element determines the correspondence between the terminal and the second identification information, it facilitates data interaction between the terminal and the data management network element, which can improve the security of contracted data transmission.
[0134] Furthermore, since the signaling distribution network element only performs signaling distribution and routing between the terminal and the core network element, it is unaware that the terminal is in a roaming state. Therefore, it is unaware of whether the established correspondence is with the data management network element of the visited location or the data management network element of the home location.
[0135] Step 308: The signaling distribution network element sends a NAS service discovery response message to the terminal.
[0136] Accordingly, the terminal receives a NAS service discovery response message. This NAS service discovery response message includes second identification information.
[0137] The terminal can store a second identification information for future use in accessing or reporting contracted data in the data management network element.
[0138] Step 309: The second network element sends a data service notification to the data management network element.
[0139] Accordingly, the data management network element receives a data service notification. This data service notification includes the identification information of the signaling distribution network element of the terminal's visited location.
[0140] For example, the data service notification may also include the network identification information of the first network element and the identification information of the terminal.
[0141] Step 310: The data management network element determines the first relationship based on the data service notification.
[0142] Among them, the first relationship indicates the correspondence between the data management network element, the terminal, and the signaling distribution network element of the terminal's visited location.
[0143] In this application, when the terminal is in roaming mode, the address of the data management network element of the terminal's home location is discovered through the first network element (i.e., the NAS service management network element of the visited location) and the second network element (i.e., the NAS service management network element of the home location), and a binding relationship is established between the data management network element of the home location, the signaling distribution network element of the home location, and the terminal. This enables the direct delivery of the home location's subscribed data to the roaming terminal when in roaming mode, ensuring the security of the subscribed data delivery.
[0144] The data service discovery method described above for roaming scenarios is also applicable to the discovery method for other NAS services in roaming scenarios. For example, the discovery of the home policy control service involves the visited NAS service management network element (i.e., the first network element) sending a NAS service discovery request to the home NAS service management network element (i.e., the second network element), carrying the name of the NAS service to be discovered and the NAS service NF type (such as policy control service) to request the address of the policy control service network element.
[0145] The following reference Figure 4AThis section introduces how to access contracted data stored in the data management service network element in non-roaming scenarios. (Refer to...) Figure 4B This section will introduce how to access the contracted data stored in the data management service network element during roaming scenarios.
[0146] Figure 4A This is illustrated through data interaction between the terminal, the signaling distribution network element, and the data management network element (which belongs to the terminal's home network). The number of terminals is not limited here; only one is used as an example. The execution is as follows:
[0147] Step 401: The data management network element determines to update the terminal's subscription data.
[0148] In practical applications, the data management network element may store the subscription data of multiple terminals, and the data management network element can determine which terminal(s)'s subscription data needs to be updated.
[0149] In one possible implementation, determining the updated terminal's subscription data is triggered based on one or more of the following conditions:
[0150] Condition 1: Changes in the terminal's contract data.
[0151] For example, during initial registration of a terminal, the subscription data includes network support for providing service A to the terminal. Due to network upgrades, the network no longer supports providing service A, therefore the terminal's subscription data will change. This is merely an example and does not specifically limit the changes in subscription data.
[0152] Condition 2: The receiving terminal submits a data subscription request.
[0153] For example, the terminal sends a data subscription request to the data management network element to subscribe to the updated terminal's subscribed data.
[0154] Condition 3: The subscription data received from the terminal is different from the subscription data of the terminal stored in the data management network element.
[0155] For example, a terminal reports its subscription data to a data management network element. If the subscription data reported by the terminal is different from the subscription data stored in the data management network element, then the data management network element determines that the terminal's subscription data needs to be updated.
[0156] Condition 4: Determine the update time of the contract data arriving at the terminal.
[0157] For example, the terminal's subscription data is updated periodically. The data management network element determines the time when the terminal's subscription data will be updated and then determines that the terminal's subscription data needs to be updated.
[0158] Based on one or more of the above conditions, the data management network element can determine the timing for updating the contracted data.
[0159] Step 402: The data management network element sends a data update notification to the terminal through the signaling distribution network element. The data update notification includes the terminal's subscribed data.
[0160] The data update notification includes the terminal's contracted data, which is the most recently stored or most recently acquired contracted data in the data management network element. For example, the contracted data of terminal 1 stored in the data management network element includes version 1 and version 2. Version 1 was stored in November 2024, and version 2 was stored in April 2023. Therefore, the most recently stored contracted data is version 1.
[0161] For example, the data management network element sends a data update notification to the signaling distribution network element. If the signaling distribution network element determines that the terminal is in a disconnected state, it pages the terminal; if the terminal is in a connected state, it directly forwards the data update notification.
[0162] For example, the data update notification also includes the terminal's identification information and the second identification information of the data management network element.
[0163] In addition, the terminal's identification information, the data management network element's second identification information, and the terminal's subscription data can be carried in the container, without specific limitations here.
[0164] Step 403: The terminal saves the terminal's contract data.
[0165] For example, the terminal sends a response message to the data management network element through the signaling distribution network element, the response message indicating that the terminal has obtained the updated subscription data.
[0166] Based on this, the data management network element can improve the security of contracted data transmission by distributing the contracted data between the network element and the terminal through signaling. Figure 4B This is illustrated through data interaction between the terminal, the terminal's visited location signaling distribution network element, and the data management network element (which belongs to the terminal's home location). The number of terminals is not limited here; only one is used as an example. The execution is as follows:
[0167] Step 501: The data management network element determines and updates the terminal's subscription data.
[0168] In practical applications, the data management network element may store the subscription data of multiple terminals, and the data management network element can determine which terminal(s)'s subscription data needs to be updated.
[0169] In one possible implementation, determining the updated terminal's subscription data is triggered based on one or more of the following conditions:
[0170] Condition 1: Changes in the terminal's contract data.
[0171] For example, the subscription data includes network support for providing service A to the terminal. Due to network upgrades, the network no longer supports providing service A, therefore the terminal's subscription data will change. This is merely an example and does not specifically limit the changes in subscription data.
[0172] Condition 2: The receiving terminal submits a data subscription request.
[0173] For example, the terminal sends a data subscription request to the data management network element to subscribe to the updated terminal's subscribed data.
[0174] Condition 3: The subscription data received from the terminal is different from the subscription data of the terminal stored in the data management network element.
[0175] For example, a terminal reports its subscription data to a data management network element. If the subscription data reported by the terminal is different from the subscription data stored in the data management network element, then the data management network element determines that the terminal's subscription data needs to be updated.
[0176] Condition 4: Determine the update time of the contract data arriving at the terminal.
[0177] For example, the terminal's subscription data is updated periodically. The data management network element determines the time when the terminal's subscription data will be updated and then determines that the terminal's subscription data needs to be updated.
[0178] Condition 5: Determine the initial registration of the terminal in roaming status.
[0179] For example, when a roaming terminal initially registers with the roaming network, it needs to obtain the subscription data configured by the home network in order to access the visited network and obtain the communication services provided by the visited network.
[0180] Based on one or more of the above conditions, the data management network element can determine the timing for updating the contracted data.
[0181] Step 502: The data management network element determines that the terminal is in a roaming state based on the first relationship and obtains the address of the terminal's visited location signaling distribution network element.
[0182] As an example, after the data management network element determines that the terminal's subscription data needs to be updated, it finds the information related to that terminal as the primary relation (based on the above). Figure 3(Obtained through the data management network element discovery process). Since the first relationship indicates the correspondence between the data management network element, the terminal, and the signaling distribution network element of the terminal's visited location, the data management network element determines that the terminal is in a roaming state based on this. The data management network element obtains the address of the visited location signaling distribution network element based on the first relationship. For example, the first relationship indicates the correspondence between terminal 1, the data management network element, and SDF1. If the data management network element determines that it needs to update the subscription data of terminal 1, it determines that terminal 1 is in a roaming state based on the first relationship.
[0183] Step 503: The data management network element sends a data update notification to the terminal through the visited location signaling distribution network element. The data update notification includes the terminal's subscribed data.
[0184] The data update notification includes the terminal's subscription data, which is the subscription data recently stored by the data management network element. This can be understood with reference to the description in step 402 above, and will not be repeated here.
[0185] As an example, the data management network element sends a data update notification to the visited signaling distribution network element. If the visited signaling distribution network element determines that the terminal is in a disconnected state, it will page the terminal. If the terminal is in a connected state, it will directly forward the data update notification.
[0186] For example, the data update notification also includes the terminal's identification information and the identity information of the data management network element.
[0187] In addition, the terminal's identification information, the data management network element's identity information, and the terminal's subscription data can be carried in the container, without specific limitations here.
[0188] Step 504: The terminal saves the terminal's contract data.
[0189] Optionally, the terminal sends a response message to the data management network element through the signaling distribution network element. The response message indicates that the terminal has obtained the updated subscription data.
[0190] Based on this, the data management network element can improve the security of subscribed data transmission by distributing the subscribed data between the network element and the terminal interaction terminal through signaling. The following references... Figure 5 This section describes how terminals subscribe to contracted or configured data stored in the data management service network element in both non-roaming and roaming scenarios. The following explanation uses contracted data as an example. Figure 5 This is illustrated through data interaction between the terminal, the signaling distribution network element, and the data management network element (which belongs to the terminal's home network). The number of terminals is not limited here; only one is used as an example. The execution is as follows:
[0191] Step 601: The terminal determines the subscription data of the terminal.
[0192] For example, the terminal determines to proactively subscribe to a subscribed data update service from the network based on local configuration or an upper-layer request. Local configuration may include the terminal's factory settings, such as periodically subscribing to the data update service from the network; or the operator's configuration on the SIM card, which instructs the terminal to periodically subscribe to the data update service from the network based on the SIM card's configuration. Upper-layer requests may include: a user submitting a request to subscribe to the data update service from the network through a human-machine interface, or an upper-layer application submitting a request to subscribe to the data update service from the network. This is merely an example and not a specific limitation.
[0193] Step 602: The terminal sends a subscription request for data to the data management network element through the signaling distribution network element.
[0194] The contracted data subscription request includes: the second identification information of the data management network element and the identification information of the contracted data.
[0195] The second identifier is the address for data management. The identifier for subscribed data is used to identify the data category, thus clarifying the type of data the terminal is subscribing to.
[0196] For example, the data subscription request may also include the terminal's identification information.
[0197] In addition, the terminal's identification information, the data management network element's second identification information, and the contracted data's identification information can be carried in the container, without specific limitations here.
[0198] If the terminal is in roaming mode, the signaling distribution network element is the signaling distribution network element of the terminal's visited location, and the data management network element is the data management network element of the terminal's home location. The signaling distribution network element is based on the above. Figure 3 The processing flow stores the correspondence between the terminal and the second identification information of the data management network element. The signaling distribution network element can send a subscription request for data to the terminal's home data management network element.
[0199] Step 603: The data management network element sends a subscription response message to the terminal through the signaling distribution network element.
[0200] For example, when the data management network element determines that the terminal's subscription data has been updated, or periodically, it sends back the updated subscription data of the terminal based on the terminal's subscription data subscription request. The subscription data subscription response message includes the updated subscription data of the terminal.
[0201] Based on this, the data management network element can improve the security of contracted data transmission by distributing the contracted data between the network element and the terminal through signaling.
[0202] The following reference Figure 6This section will introduce how terminals report contracted data to the data management service network element in both non-roaming and roaming scenarios. Figure 6 This is illustrated through data interaction between the terminal, the signaling distribution network element, and the data management network element (which belongs to the terminal's home network). The number of terminals is not limited here; only one is used as an example. The execution is as follows:
[0203] Step 701: The terminal determines the contract data to be reported.
[0204] For example, the terminal determines to proactively report data subscription data to the network based on local configuration or upper-layer requests. Local configuration may include the terminal's factory settings, such as periodically reporting data update services to the network; or the operator's configuration on the SIM card, which instructs the terminal to periodically report data update services to the network based on the SIM card's configuration. Upper-layer requests may include: a user submitting a request to report data update services to the network through a human-machine interface, or an upper-layer application submitting a request to report data update services to the network. This is merely an example and not a specific limitation.
[0205] Step 702: The terminal sends a data reporting request to the data management network element through the signaling distribution network element.
[0206] The data reporting request includes: the contracted data stored on the terminal.
[0207] For example, the data reporting request may also include the terminal's identification information and the second identification information of the data management network element.
[0208] In addition, the terminal's identification information, the data management network element's second identification information, and the contract data can be carried in the container, without specific limitations here.
[0209] If the terminal is in roaming mode, the signaling distribution network element is the signaling distribution network element of the terminal's visited location, and the data management network element is the data management network element of the terminal's home location. The signaling distribution network element is based on the above. Figure 3 The processing flow stores the correspondence between the terminal and the second identification information of the data management network element. The signaling distribution network element can send a data reporting request to the terminal's home data management network element.
[0210] Step 703: The data management network element sends a reporting request response message to the terminal through the signaling distribution network element.
[0211] For example, the data management network element compares the subscription data reported by the terminal with its stored subscription data to determine whether to update the terminal's subscription data, that is, whether to execute the above-mentioned procedure. Figure 4A or Figure 4BThe data processing flow is as follows: When it is determined that the terminal's subscription data has been updated, the subscription data subscription response message includes the updated terminal's subscription data.
[0212] This application is based on a service-oriented NAS communication architecture, defining the data management service provided by the network to the terminal as a NAS service. The terminal and the data management network element can directly call the data management NAS service to report, distribute, and update subscribed data. Because the signaling distribution network element only distributes and routes NAS signaling and is unaware of the terminal's roaming status, the solution adopted in this application can ensure the security of the distribution of subscribed data or configuration parameters in roaming scenarios.
[0213] The foregoing primarily describes the solutions provided by the embodiments of this application from the perspective of device interaction. It is understood that, in order to achieve the above functions, each device may include corresponding hardware structures and / or software modules for executing each function. Those skilled in the art should readily recognize that, in conjunction with the units and algorithm steps of the various examples described in the embodiments disclosed herein, the embodiments of this application can be implemented in hardware or a combination of hardware and computer software. Whether a function is executed in hardware or by computer software driving hardware depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.
[0214] The embodiments of this application can divide the device into functional units according to the above method examples. For example, each function can be divided into a separate functional unit, or two or more functions can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.
[0215] When using integrated units, Figure 7 A possible exemplary block diagram of the communication device involved in an embodiment of this application is shown. For example... Figure 7As shown, the communication device 800 may include a processing unit 801 and a transceiver unit 802. The processing unit 801 is used to control and manage the operation of the communication device 800. The transceiver unit 802 is used to support communication between the communication device 800 and other devices. Optionally, the transceiver unit 802 may include a receiving unit and / or a transmitting unit, respectively used to perform receiving and transmitting operations. Optionally, the communication device 800 may also include a storage unit for storing the program code and / or data of the communication device 800. The transceiver unit may be called an input / output unit, a communication unit, etc., and may be a transceiver; the processing unit may be a processor. When the communication device is a module (e.g., a chip) in a communication device, the transceiver unit may be an input / output interface, an input / output circuit, or an input / output pin, etc., and may also be called an interface, a communication interface, or an interface circuit, etc.; the processing unit may be a processor, a processing circuit, or a logic circuit, etc. Specifically, the communication device may be the aforementioned first network element, second network element, data management network element, or terminal, etc.
[0216] More detailed descriptions of the processing unit 801 and the transceiver unit 802 can be obtained directly from the relevant descriptions in the above method embodiments, and will not be repeated here.
[0217] It should be understood that the division of units in the above device is merely a logical functional division. In actual implementation, they can be fully or partially integrated into a single physical entity, or they can be physically separated. Furthermore, all units in the device can be implemented entirely through software calls from processing elements; all units can be implemented entirely in hardware; or some units can be implemented through software calls from processing elements, while others are implemented in hardware. For example, each unit can be a separate processing element, or it can be integrated into a chip within the device. Alternatively, it can be stored as a program in memory, called and executed by a processing element of the device. Moreover, these units can be fully or partially integrated together, or implemented independently. The processing element here can also be called a processor, which can be an integrated circuit with signal processing capabilities. In the implementation process, the operations or units described above can be implemented through integrated logic circuits in the processor element or through software calls from processing elements.
[0218] In one example, a unit in any of the above devices can be one or more integrated circuits configured to implement the methods described above, such as: one or more application-specific integrated circuits (ASICs), or one or more digital signal processors (DSPs), or one or more field-programmable gate arrays (FPGAs), or a combination of at least two of these forms of integrated circuits. As another example, when a unit in the device can be implemented in the form of a processing element scheduler, the processing element can be a processor, such as a general-purpose central processing unit (CPU), or other processor capable of calling programs. Furthermore, these units can be integrated together to implement a system-on-a-chip (SOC).
[0219] The receiving unit described above is an interface circuit of the device, used to receive signals from other devices. For example, when the device is implemented as a chip, the receiving unit is an interface circuit for the chip to receive signals from other chips or devices. The transmitting unit described above is an interface circuit of the device, used to transmit signals to other devices. For example, when the device is implemented as a chip, the transmitting unit is an interface circuit for the chip to transmit signals to other chips or devices.
[0220] As another possible product form, the terminal device, computing management network element, or signaling distribution network element in the embodiments of this application can be implemented using a general bus architecture. For ease of explanation, see [link to documentation]. Figure 8 , Figure 8 This is a schematic diagram of the structure of a communication device 900 provided in an embodiment of this application. The communication device 900 includes a processor 901; optionally, the communication device 900 also includes a transceiver 902. The communication device 900 can be a terminal, or a chip or chip system therein; or, the communication device 900 can be a network device, or a chip or module therein. Figure 9 Only the main components of the communication device 900 are shown. In addition to the processor 901 and transceiver 902, the communication device 900 may further include a memory 903 and input / output devices (not shown).
[0221] Optionally, the processor 901 is mainly used to process communication protocols and communication data, control the entire communication device, execute software programs, and process the data of the software programs. The memory 903 is mainly used to store software programs and data. The transceiver 902 may include radio frequency (RF) circuitry and an antenna. The RF circuitry is mainly used for converting baseband signals to RF signals and processing RF signals. The antenna is mainly used for transmitting and receiving RF signals in the form of electromagnetic waves. Input / output devices, such as touchscreens, displays, and keyboards, are mainly used to receive user input data and output data to the user.
[0222] Optionally, the processor 901, transceiver 902, and memory 903 can be connected via a communication bus.
[0223] When the communication device is powered on, the processor 901 can read the software program in the memory 903, interpret and execute the instructions of the software program, and process the data of the software program. When data needs to be transmitted wirelessly, the processor 901 performs baseband processing on the data to be transmitted and outputs the baseband signal to the radio frequency (RF) circuit. The RF circuit processes the baseband signal and transmits the RF signal outward in the form of electromagnetic waves through the antenna. When data is sent to the communication device, the RF circuit receives the RF signal through the antenna, converts the RF signal into a baseband signal, and outputs the baseband signal to the processor 901. The processor 901 converts the baseband signal into data and processes the data.
[0224] In another implementation, the radio frequency circuitry and antenna can be set up independently of the processor that performs baseband processing. For example, in a distributed scenario, the radio frequency circuitry and antenna can be arranged remotely, independent of the communication device.
[0225] In some embodiments, those skilled in the art will recognize that the above-described communication device 800 can be implemented in hardware using... Figure 8 The communication device shown is in the form of 900.
[0226] As an example, Figure 7 The function / implementation process of the processing unit 801 can be achieved through... Figure 8 The processor 901 in the communication device 900 shown calls computer execution instructions stored in the memory 903 to implement the function. Figure 7 The function / implementation process of the transceiver unit 802 in the middle can be obtained through Figure 8 This is achieved through the transceiver 902 in the communication device 900 shown.
[0227] As another possible product form, the terminal, first network element, second network element, or signaling distribution network element in this application can adopt... Figure 9 The shown composition structure, or including Figure 9 The components shown. Figure 9 A schematic diagram of the composition of a communication device 1000 provided in this application.
[0228] like Figure 9 As shown, the communication device 1000 includes at least one processor 1001. Optionally, the communication device also includes a communication interface 1002.
[0229] When the relevant program instructions are executed in the at least one processor 1001, the communication device 1000 can implement the methods and any possible designs provided in any of the foregoing embodiments. Alternatively, the processor 1001 can implement the methods and any possible designs provided in any of the foregoing embodiments through logic circuits or executable code instructions.
[0230] The communication interface 1002 can be used to receive program instructions and transmit them to the processor, or it can be used for communication interaction between the communication device 1000 and other communication devices, such as exchanging control signaling and / or service data. For example, the communication interface 1002 can be used to receive signals from other devices besides the communication device 1000 and transmit them to the processor 1001, or to send signals from the processor 1001 to other communication devices besides the communication device 1000.
[0231] Optionally, the communication interface 1002 can be a code and / or data read / write interface circuit, or the communication interface 1002 can be a signal transmission interface circuit between a communication processor and a transceiver, or a chip pin.
[0232] Optionally, the communication device 1000 may further include at least one memory 1003, which can be used to store the required program instructions and / or data. It should be noted that the memory 1003 may exist independently of the processor 1001 or may be integrated with the processor 1001. The memory 1003 may be located within or outside the communication device 1000, without limitation.
[0233] Optionally, the communication device 1000 may further include a power supply circuit 1004, which can be used to power the processor 1001. The power supply circuit 1004 may be located in the same chip as the processor 1001, or in a separate chip outside the chip containing the processor 1001.
[0234] Optionally, the communication device 1000 may also include a bus, through which the various parts of the communication device 1000 can be interconnected.
[0235] In some embodiments, the hardware implementation will be apparent to those skilled in the art as described above. Figure 7 The communication device 800 shown can be adopted Figure 9 The communication device 1000 shown is in the form of this device.
[0236] As an example, Figure 7 The function / implementation process of the processing unit 701 can be achieved through... Figure 9 The processor 1001 in the communication device 1000 shown calls computer execution instructions stored in the memory 1003 to implement the function. Figure 7 The function / implementation process of the transceiver unit 702 in the middle can be achieved through Figure 9 This is achieved through the communication interface 1002 in the communication device 1000 shown.
[0237] It should be pointed out that, Figure 9 The structures shown do not constitute a specific limitation on the terminal device, computing management network element, or signaling distribution network element. For example, in other embodiments of this application, the terminal, the first network element, the second network element, the signaling distribution network element, or the data management network element may include more or fewer components than those shown in the figures, or combine some components, or split some components, or arrange different components. The components shown in the figures may be implemented in hardware, software, or a combination of software and hardware.
[0238] When the aforementioned communication device is a chip applied to a terminal, the terminal chip implements the functions of the terminal in the above method embodiments. The terminal chip receives information from other modules (such as radio frequency modules or antennas) in the terminal, which is information sent to the terminal by the base station; or, the terminal chip sends information to other modules (such as radio frequency modules or antennas) in the terminal, which is information sent to the base station by the terminal.
[0239] When the aforementioned communication device is a module applied to a base station, the base station module implements the functions of the base station in the above method embodiments. The base station module receives information from other modules (such as radio frequency modules or antennas) in the base station, information sent by the terminal to the base station; or, the base station module sends information to other modules (such as radio frequency modules or antennas) in the base station, information sent by the base station to the terminal. Here, the base station module can be the baseband chip of the base station, or a DU (Digital Unit) or other modules. The DU can be a DU under an Open Radio Access Network (O-RAN) architecture.
[0240] It is understood that the processor in the embodiments of this application may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, transistor logic devices, hardware components, or any combination thereof. A general-purpose processor may be a microprocessor or any conventional processor.
[0241] Based on the same technical concept, embodiments of this application also provide a computer-readable storage medium storing instructions, which may also be referred to as computer programs, computer program code, etc. The instructions, when executed on a computer, cause the computer to perform the functions of the terminal device, signaling distribution network element, first NAS service network element, or first network element in the above method embodiments.
[0242] Based on the same technical concept, this application also provides a computer program product, which includes a computer program or instructions. When the computer program or instructions are run by a communication device, the method steps executed by the terminal or signaling distribution network element or the first network element or the second network element or the data management network element in the above method embodiments are executed.
[0243] Based on the same concept, embodiments of this application also provide a chip, which may include a processor and a memory (or the chip may be coupled to the memory). The chip executes program instructions in the memory to perform the methods provided in the above embodiments. Here, "coupling" refers to two components being directly or indirectly connected to each other; for example, coupling can refer to an electrical connection between two components.
[0244] Based on the same concept, embodiments of this application also provide a communication system, including a terminal, a first network element, a second network element, a signaling distribution network element, and a data management network element.
[0245] The method steps in the embodiments of this application can be implemented in hardware or by a processor executing software instructions. The software instructions can consist of corresponding software modules, which can be stored in random access memory, flash memory, read-only memory, programmable read-only memory, erasable programmable read-only memory, electrically erasable programmable read-only memory, registers, hard disks, portable hard disks, CD-ROMs, or any other form of storage medium known in the art. An exemplary storage medium is coupled to a processor, enabling the processor to read information from and write information to the storage medium. Of course, the storage medium can also be a component of the processor. The processor and storage medium can reside in an ASIC. Alternatively, the ASIC can reside in a base station or terminal. Of course, the processor and storage medium can also exist as discrete components in the base station or terminal.
[0246] In the above embodiments, implementation can be achieved entirely or partially through software, hardware, firmware, or any combination thereof. When implemented using software, it can be implemented entirely or partially in the form of a computer program product. The computer program product includes one or more computer programs or instructions. When the computer program or instructions are loaded and executed on a computer, the processes or functions described in the embodiments of this application are performed entirely or partially. The computer can be a general-purpose computer, a special-purpose computer, a computer network, a network device, a user equipment, or other programmable device. The computer program or instructions can be stored in a computer-readable storage medium or transferred from one computer-readable storage medium to another. For example, the computer program or instructions can be transferred from one website, computer, server, or data center to another website, computer, server, or data center via wired or wireless means. The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or data center that integrates one or more available media. The available medium can be a magnetic medium, such as a floppy disk, hard disk, or magnetic tape; it can also be an optical medium, such as a digital video optical disc; or it can be a semiconductor medium, such as a solid-state drive. The computer-readable storage medium may be a volatile or non-volatile storage medium, or may include both types of storage media.
[0247] In the various embodiments of this application, unless otherwise specified or in case of logical conflict, the terminology and / or descriptions of different embodiments are consistent and can be referenced by each other. The technical features of different embodiments can be combined to form new embodiments according to their inherent logical relationship.
[0248] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, optical storage, etc.) containing computer-usable program code.
[0249] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to this application. It should be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in one or more blocks of the flowchart illustrations and / or one or more blocks of the block diagrams.
[0250] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means that implement the functions specified in one or more flowcharts and / or one or more block diagrams.
[0251] Obviously, those skilled in the art can make various modifications and variations to this application without departing from the scope of this application. Therefore, if such modifications and variations fall within the scope of the claims of this application and their equivalents, this application also intends to include such modifications and variations.
Claims
1. A communication method, characterized in that, Applied to the first network element, including: Receive first information, the first information being used to request the discovery of the data management network element of the terminal's home location, the first information including first identification information of the data management network element, the first identification information being used to indicate the service type of the data management network element; The second information is sent to the second network element according to the first information. The second information is used to request the discovery of the data management network element of the terminal's home location. The second information includes the first identification information of the data management network element. The system receives second identification information of the data management network element from the second network element, the second identification information being used to indicate the address of the data management network element.
2. The method according to claim 1, characterized in that, The first information also includes the terminal's home network identifier information, and the method further includes: The identification information of the second network element is obtained based on the home network identification information of the terminal.
3. The method according to claim 2, characterized in that, The method further includes: Based on the terminal's home network identifier information, it is determined that the terminal is in a roaming state.
4. The method according to any one of claims 1-3, characterized in that, The second information also includes the terminal's identification information, the identification information of the signaling distribution network element of the terminal's visited location, and the network identification information of the first network element.
5. A communication method, characterized in that, Applied to the second network element, including The system receives second information from a first network element. The second information is used to request the discovery of the data management network element in the home region of the terminal. The second information includes first identification information of the data management network element, which is used to indicate the service type of the data management network element. The second identification information of the data management network element is obtained based on the second information, and the second identification information is used to indicate the address of the data management network element; Send the second identification information of the data management network element to the first network element.
6. The method according to claim 5, characterized in that, The second information also includes the terminal's identification information, the identification information of the signaling distribution network element of the terminal's visited location, and the network identification information of the first network element.
7. The method according to claim 6, characterized in that, The method further includes: Send a data service notification to the data management network element, the data service notification including: the identification information of the signaling distribution network element of the visited location of the terminal.
8. The method according to claim 7, characterized in that, The data service notification also includes the network identification information of the first network element.
9. The method according to any one of claims 5-8, characterized in that, Before obtaining the second identification information of the data management network element based on the second information, the identity authentication of the first network element is passed.
10. A communication method, characterized in that, Applied to data management network elements, including: Confirm and update the contract data for the terminal; The signaling distribution network element sends a data update notification to the terminal, and the data update notification includes the terminal's subscription data.
11. The method according to claim 10, characterized in that, The determination of updating the terminal's subscription data is triggered based on one or more of the following conditions: Condition 1: The contract data of the terminal changes; Condition 2: Receive the terminal's subscription request for signed data; Condition 3: The received subscription data of the terminal is different from the subscription data of the terminal stored in the data management network element; Condition 4: Determine the update time of the contract data arriving at the terminal; Condition 5: Receive the initial registration from the terminal that is in roaming status.
12. The method according to claim 10 or 11, characterized in that, The method further includes: Receive a data service notification, the data service notification including: the identification information of the signaling distribution network element of the visited location of the terminal; A first relationship is determined based on the data service notification, and the first relationship indicates the correspondence between the data management network element, the terminal, and the signaling distribution network element of the visited location of the terminal.
13. The method according to claim 12, characterized in that, The method further includes: When the terminal is in roaming mode, the signaling distribution network element of the visited location of the terminal is determined according to the first relationship; The step of sending a data update notification to the terminal via a signaling distribution network element includes: The data update notification is sent to the terminal through the signaling distribution network element of the visited location of the terminal.
14. The method according to any one of claims 10-13, characterized in that, The data update notification also includes: the second identification information of the data management network element and the identification information of the terminal, wherein the second identification information is used to indicate the address of the data management network element.
15. A communication method, characterized in that, Applied to terminals, including: Determine the subscription data for the terminal; The signaling distribution network element sends a subscription request for data to the data management network element. The subscription request includes: second identification information of the data management network element and identification information of the subscription data. The second identification information is used to indicate the address of the data management network element.
16. The method according to claim 15, characterized in that, The method further includes: Send a first message, the first message being used to request the discovery of the data management network element of the terminal's home location, the first message including a first identification information of the data management network element, the first identification information being used to indicate the service type of the data management network element.
17. The method according to claim 16, characterized in that, The first information also includes: the home network identifier information of the terminal.
18. The method according to any one of claims 15-17, characterized in that, The method further includes: Receive data update notifications, which include the subscription data of the terminal.
19. The method according to any one of claims 15-18, characterized in that, The method further includes: Send a data reporting request, the data reporting request including: the subscription data stored in the terminal.
20. A communication device, characterized in that, include: The module is used to perform the method as described in any one of claims 1 to 4, or includes a module for performing the method as described in any one of claims 5 to 9, or includes a module for performing the method as described in any one of claims 10 to 14, or includes a module for performing the method as described in any one of claims 15 to 19.
21. A communication device, characterized in that, The method includes at least one processor; and a communication interface communicatively connected to the at least one processor; wherein the at least one processor executes instructions stored in a memory to cause the method of any one of claims 1 to 4 to be executed, or causes the method of any one of claims 5 to 9 to be executed, or causes the method of any one of claims 10 to 14 to be executed, or causes the method of any one of claims 15 to 19 to be executed.
22. A computer-readable storage medium, characterized in that, The computer contains a computer program or instructions that, when executed on a computer, cause the computer to perform the method as described in any one of claims 1 to 19.
23. A computer program product, characterized in that, When the computer reads and executes the computer program product, the method described in any one of claims 1 to 19 is performed.