Communication methods and communication devices

Abstract

A communication method is provided. This method includes: the EES receiving a first request message from a terminal device to obtain the identifier of the terminal device, wherein the first request message includes the private IP address of the terminal device; the EES obtaining the public IP address and port number of the terminal device and sending a second request message to the NEF to be used to request the identifier of the terminal device, wherein the second request message includes the private IP address and the public IP address and port number of the terminal device; and the EES receiving a response message from the NEF, wherein the response message includes the identifier of the terminal device, or the response message indicates that the acquisition failed. The public IP address and port number of the terminal device are carried in the request message, and as a result, the network side verifies the accuracy of the private IP address provided by the terminal device based on the public IP address and port number. In this way, a terminal device does not use the private IP address of another terminal device to obtain the identifier of another terminal device, thus improving security.

Claims

1. A method of communication, A step of receiving a first request message from a terminal device, wherein the first request message is used to obtain an identifier of the terminal device, and the first request message includes a first private address of the terminal device. A step of obtaining the public address and port number of the terminal device and sending a second request message to a network exposure function network element, wherein the second request message is used to obtain the identifier of the terminal device, and the second request message includes the first private address, the public address, and the port number. A step of receiving first instruction information or the identifier of the terminal device from the network public function network element, wherein the first instruction information indicates that it failed to obtain the identifier of the terminal device. A communication method that includes this.

2. Receiving the first request message from the aforementioned terminal device means that The user plane function includes receiving an Internet Protocol IP data packet from a network element, wherein the payload portion of the IP data packet includes the first request message from the terminal device. Obtaining the aforementioned public address and port number is: The process includes determining the public address and the port number based on the source address and source port number of the IP data packet, wherein the source address represents the public address and the source port number represents the port number. The method according to claim 1.

3. Obtaining the public address and port number includes obtaining the public address and port number from the edge application server. The method according to claim 1.

4. When the method receives the first instruction information for the terminal device from the network public function network element, the method The process further includes the step of receiving a cause value for the terminal device from the network-publishing function network element, wherein the cause value indicates the reason for the failure to obtain the identifier of the terminal device. The method according to any one of claims 1 to 3.

5. When receiving the identifier of the terminal device from the network public function network element, the method The process further includes the step of sending a first response message to the terminal device, wherein the first response message includes the identifier of the terminal device. The method according to any one of claims 1 to 4.

6. Sending the second request message to the network public function network element means When the terminal device or the edge enabler client within the terminal device is not authenticated, the second request message is sent to the network exposure function network element, The method according to any one of claims 1 to 5.

7. A method of communication, A step of receiving a second request message from an edge enabler server, wherein the second request message is used to obtain an identifier for a terminal device, and the second request message includes a first private address of the terminal device, and the public address and port number of the terminal device. When it is determined that the first private address is valid based on the public address and the port number, the steps include obtaining the identifier of the terminal device and sending the identifier of the terminal device to the edge enabler server, A communication method that includes this.

8. When it is determined that the first private address is invalid based on the public address and the port number, the first instruction information is sent to the edge enabler server, and the first instruction information indicates that it failed to obtain the identifier of the terminal device. The method according to claim 7.

9. This method is A step of determining whether the first private address is valid based on the public address and the port number, The method according to claim 7 or 8, further comprising:

10. To determine whether the first private address is valid based on the public address and the port number is to determine whether the first private address is valid. This includes determining whether the first private address is the same as the second private address, the second private address being determined based on the public address and the port number. The method according to claim 9.

11. This method is A step of sending a third request message to a user plane functional network element, wherein the third request message includes the public address and the port number. A step of receiving a third response message from the user plane functional network element, wherein the third response message includes the second private address, The method according to claim 10, further comprising:

12. This method is The steps include obtaining at least one private address corresponding to the public address and a port number corresponding to the at least one private address, A step of obtaining the second private address based on the obtained at least one private address and the port number corresponding to the at least one private address and the port number in the second request message, The method according to claim 10, further comprising:

13. This method is A step of sending a fourth request message to a user plane functional network element, wherein the fourth request message includes the public address, A step of receiving a fourth response message from the user plane functional network element, wherein the fourth response message includes the at least one private address corresponding to the public address and the port number corresponding to the at least one private address. The method according to claim 12, further comprising:

14. This method is A step of sending a join request message to a user plane functional network element, wherein the join request message includes the public address, A step of receiving one or more join response messages from the user plane functional network element, wherein the one or more join response messages include the at least one private address corresponding to the public address and the port number corresponding to the at least one private address. The method according to claim 12, further comprising:

15. This method is A step of discovering that the at least one private address corresponding to the public address and the port number corresponding to the at least one private address are not stored locally. The method according to claim 13 or 14, further comprising:

16. This method is If the at least one private address does not include the first private address, the step of determining that the first private address is invalid, or If the at least one private address includes the first private address and the port number corresponding to the first private address is the same as the port number, the first private address is determined to be valid. The method according to any one of claims 13 to 15, further comprising:

17. To determine whether the first private address is valid based on the public address and the port number is to determine whether the first private address is valid. Sending a fifth request message to a user plane functional network element, wherein the fifth request message includes the first private address, the public address, and the port number, and the fifth request message is used to request the user plane functional network element to determine whether the first private address is valid. Receiving a fifth response message from the user plane functional network element, wherein the fifth response message indicates whether the first private address is valid. The method according to claim 9, including the method described in claim 9.

18. This method is A step of sending a discovery request message to a network function repository function network element, wherein the discovery request message includes the public address, and the discovery request message is used to obtain the address of a user plane function network element that implements an address translation function. A step of receiving a discovery response message from the network function repository function network element, wherein the discovery response message includes the address of the user plane function network element, The method according to any one of claims 7 to 17, further comprising:

19. When the first instruction information is transmitted to the edge enabler server, the method is: The process further includes the step of sending a cause value to the edge enabler server, the cause value indicating the reason for the failure to obtain the identifier of the terminal device. The method according to claim 8.

20. A method of communication, A step of receiving a third request message from a network-publishing network element, wherein the third request message is used to obtain a second private internet protocol address of a terminal device, and the third request message includes the public address and port number of the terminal device. The steps include determining a second private address of the terminal device based on the public address and the port number, A step of sending a third response message to the network public function network element, wherein the third response message includes the second private address, A communication method that includes this.

21. A method of communication, A step of receiving a fourth request message from a network-publishing function network element, wherein the fourth request message includes a first public Internet Protocol address of a terminal device. A step of determining, based on a public address, at least one private address corresponding to the public address and a port number corresponding to the at least one private address, A step of sending a fourth response message to the network public function network element, wherein the fourth response message includes the at least one private address corresponding to the public address and the port number corresponding to the at least one private address. A communication method that includes this.

22. A method of communication, A step of receiving a join request message from a network-publishing function network element, wherein the join request message includes a first public Internet Protocol address of a terminal device; A step of sending one or more join response messages to the network exposure function network element, wherein each of the one or more join response messages includes at least one private address corresponding to a public address and a port number corresponding to the at least one private address. A communication method that includes this.

23. A method of communication, A step of receiving a fifth request message from a network exposure function network element, wherein the fifth request message includes a first private Internet Protocol address of a terminal device, the public address and port number of the terminal device, and the fifth request message is used to request a user plane function network element to determine whether the first private address is valid. A step of determining whether the first private address is valid based on the correspondence between the private address, public address and port number stored locally, A step of sending a fifth response message to the network public function network element, wherein the fifth response message indicates whether the first private address is valid. A communication method that includes this.

24. Determining whether the first private address is valid based on the correspondence between the locally stored private address, the public address, and the port number is: This includes determining a public address and port number corresponding to the first private address based on the correspondence relationship and the first private address, If the public address and port number corresponding to the first private address are the same as the public address and port number, the fifth response message indicates that the first private address is valid; or if the public address and port number corresponding to the first private address are not the same as the public address and port number, the fifth response message indicates that the first private address is invalid. The method according to claim 23.

25. Determining whether the first private address is valid based on the correspondence between the locally stored private address, the public address, and the port number is: If it is determined that it has failed to obtain the public address and port number corresponding to the first private address based on the correspondence and the first private address, the fifth response message includes indicating that the first private address is invalid. The method according to claim 23.

26. Determining whether the first private address is valid based on the correspondence between the locally stored private address, the public address, and the port number is: This includes determining a private address corresponding to the public address and the port number based on the aforementioned correspondence, the public address, and the port number. If the private address corresponding to the public address and port number is the same as the first private address and port number, the fifth response message indicates that the first private address is valid; if the private address corresponding to the public address and port number is not the same as the first private address and port number, it indicates that the first private address is invalid. The method according to claim 23.

27. A communication system including an edge enabler server and a network exposure function network element, The edge enabler server is configured to receive a first request message from a terminal device, the first request message is used to obtain the identifier of the terminal device, and the first request message includes a first private address of the terminal device. The edge enabler server is further configured to obtain the public address and port number of the terminal device. The edge enabler server is further configured to send a second request message to the network exposure function network element, the second request message is used to obtain the identifier of the terminal device, the second request message includes the first private address, the public address, and the port number, When the network public function network element determines that the first private address is valid based on the public address and the port number, it is configured to transmit the identifier of the terminal device to the edge enabler server. Communication system.

28. When the network public function network element determines that the first private address is invalid based on the public address and the port number, the network public function network element is further configured to send first instruction information to the edge enabler server, the first instruction information indicating that it failed to obtain the identifier of the communication device. The system according to claim 27.

29. A communication device comprising a unit configured to perform the method described in any one of claims 1 to 6.

30. A communication device comprising a unit configured to perform the method described in any one of claims 7 to 19.

31. A communication device comprising a unit configured to perform the method described in any one of claims 20 to 26.

32. A communication device, Memory configured to store computer programs, A processor configured to execute the computer program stored in the memory and to cause the communication device to perform the method described in any one of claims 1 to 26, A communication device equipped with the following features.

33. A computer-readable storage medium, wherein the computer-readable storage medium stores computer instructions, and when the computer instructions are executed on a computer, the method described in any one of claims 1 to 26 is executed.

34. A computer program product, the computer program product comprising instructions used to perform steps performed by a repository function network element in the method according to any one of claims 1 to 26.

Images