5G authentication method, 5G account opening method and system, electronic device, and computer-readable storage medium

Abstract

The present application relates to the technical field of mobile communications and discloses a 5G authentication method, a 5G account opening method and system, an electronic device, and a computer-readable storage medium. The 5G authentication method includes: determining whether authentication data exists locally in response to an authentication vector acquisition request sent from an authentication network element (AUSF); if the authentication data does not exist locally, acquiring an authentication vector from a home subscription server (HSS) in response to the authentication vector acquisition request; generating a home authentication vector based on the authentication vector; sending the home authentication vector to the AUSF; and having the AUSF perform authentication verification based on the home authentication vector.

Description

[Technical field]

[0001] This application claims priority to a Chinese patent application bearing application number 202010598962.7, filed with the China Patent Office on June 28, 2020, the entire contents of which are incorporated herein by reference.

[0002] The present application relates to the technical field of mobile communications. [Background technology]

[0003] With the development of wireless communication technology, wireless networks have evolved from 2G (2-Generation Wireless Telephone Technology), 3G (3rd-Generation), 4G (4th Generation Mobile Communication Technology) to 5G (5th Generation Mobile Communication Technology). While traditional user data is stored in the Home Subscriber Server (HSS), in the 5G network, user data is stored in the Unified Data Management (UDM). Therefore, when activating a 5G service, the user's authentication data needs to be transferred from the HSS to the UDM and subscribe to 5G. Summary of the Invention [Means for solving the problem]

[0004] According to a first aspect of an embodiment of the present application, there is provided a 5G authentication method including: determining whether authentication data exists locally in response to an authentication vector acquisition request sent from an Authentication Server Function (AUSF, authentication network element); acquiring an authentication vector from an HSS based on the authentication vector acquisition request in response to the authentication data not existing locally; generating a home authentication vector based on the authentication vector, sending the home authentication vector to the AUSF, and causing the AUSF to perform authentication verification based on the home authentication vector.

[0005] According to a second aspect of an embodiment of the present application, there is provided a 5G account opening method including: in response to a registration request transmitted from a UE (User Equipment, terminal), performing authentication verification of the UE according to the above-mentioned 5G authentication method; and, in response to successful authentication verification, sending an account opening command to an account opening system, causing the account opening system to perform data transfer of the UE and open a 5G registration account according to the account opening command.

[0006] According to a third aspect of an embodiment of the present application, there is provided an electronic device comprising a memory and a processor, the memory being configured to store a computer program, the processor being configured to execute the computer program and, upon execution of the computer program, to implement at least one step of the 5G authentication method.

[0007] According to a fourth aspect of the embodiment of the present application, there is provided a 5G account opening system, comprising a UE, a UDM, and an account opening system. The UE is configured to send a registration request. The UDM is configured to receive the registration request sent from the UE and perform at least one step of the above 5G account opening method. The account opening system is configured to perform data migration and 5G registration account opening of the UE according to the account opening command sent from the UDM.

[0008] According to a fifth aspect of an embodiment of the present application, there is provided a computer-readable storage medium having a computer program stored therein, the computer program being configured to cause the processor to perform at least one step of the above-mentioned 5G authentication method or 5G account opening method when executed by a processor. [Brief description of the drawings]

[0009] [Figure 1] 1 is a schematic flowchart of a 5G authentication method provided by an embodiment of the present application. [Diagram 2] FIG. 2 is a schematic interaction diagram of a 5G authentication method provided by an embodiment of the present application. [Diagram 3] FIG. 2 is a schematic interaction diagram of resynchronization in a 5G authentication method provided by an embodiment of the present application. [Figure 4] 1 is a schematic flowchart of a 5G account opening method provided by an embodiment of the present application. [Diagram 5] FIG. 2 is a schematic interaction diagram of a 5G account opening method provided by an embodiment of the present application. [Figure 6] FIG. 1 is a schematic block diagram of an electronic device provided by an embodiment of the present application. [Figure 7] FIG. 1 is a schematic configuration diagram of a 5G account opening system provided by an embodiment of the present application. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0010] The following will clearly and completely describe the technical solutions in the embodiments of the present application in combination with the drawings in the embodiments of the present application. It is clear that the described embodiments are not all the embodiments of the present application, but are only some of the embodiments of the present application. All other embodiments that can be obtained based on the embodiments of the present application without the need for creative work by those skilled in the art are within the scope of protection of the present application.

[0011] The flowcharts shown in the drawings are merely exemplary illustrations and do not necessarily include all contents and operations / steps, nor do they necessarily have to be performed in the order described. For example, some operations / steps can be separated, combined or partially combined, so that the order in which they are actually performed may vary depending on the actual situation.

[0012] It should be understood that the terms used herein are used only to describe particular embodiments and are not intended to limit the present application. As used in this specification and the appended claims, the singular forms "a," "one," and "the" are intended to include the plural forms unless the context clearly indicates otherwise.

[0013] It should also be understood that the term "and / or" as used in this specification and the appended claims means and includes any and all possible combinations of one or more of the associated listed items.

[0014] The related authentication procedure requires that the authentication data of the HSS user be pre-stored in the UDM to perform authentication verification, but due to the large number of users and data volume, the construction period of the UDM is too long and difficult. In order to rapidly deploy 5G services, it is an urgent problem to be solved: how to automatically complete the authentication verification and activate the 5G service after the user inserts a card into a UE that supports 5G SA, thereby reducing the difficulty and construction period of the UDM and improving the convenience of opening an account for 5G services.

[0015] In view of this, the embodiments of the present application provide a 5G authentication method, a 5G account opening method, an electronic device, a 5G account opening system, and a computer-readable storage medium. The 5G authentication method enables authentication verification of a 5G UE without storing authentication data in a UDM in advance, thereby reducing the difficulty and time required to build a UDM.

[0016] 1 is a schematic flow chart of a 5G authentication method provided by an embodiment of the present application, in which authentication data is obtained from an HSS to authenticate a UE, thereby reducing the difficulty and period of establishing a UDM.

[0017] As shown in FIG. 1, this 5G authentication method specifically includes steps S101 to S103.

[0018] In step S101, in response to an authentication vector acquisition request sent from the AUSF, it is determined whether or not authentication data exists locally.

[0019] AUSF is a network element with authentication server function. When a UE supporting 5G is powered on, it automatically sends a registration request to the 5G network, and when the AMF (Access and Mobility Management Function) receives the registration request sent from the UE, it sends an authentication vector acquisition request to the AUSF to perform authentication verification for the UE. Powering on the UE may be inserting a phone card into the 5G UE.

[0020] The AUSF sends an authentication vector acquisition request to the UDM, and the UDM determines whether there is authentication data of the UE locally in response to the authentication vector acquisition request.

[0021] In one possible embodiment, the authentication request includes a terminal identifier, and the UDM determines from the terminal identifier whether authentication data corresponding to the terminal identifier exists locally based on the terminal identifier, and if authentication data corresponding to the terminal identifier exists locally, it is considered that 5G authentication has already been completed for this UE, and there is no need to further obtain authentication data from the HSS. If authentication data corresponding to the terminal identifier does not exist locally, it is considered that 5G authentication has not yet been performed for this UE, and it is necessary to obtain authentication data from the HSS to perform authentication verification, so as to open a 5G account for the UE after the authentication verification is successful.

[0022] In step S102, if the authentication data does not exist locally, an authentication vector is obtained from the HSS in response to the authentication vector acquisition request.

[0023] If the UDM determines that no authentication data exists locally, the UDM obtains an authentication vector from the HSS in response to an authentication vector obtainment request.

[0024] In one possible embodiment, the authentication vector acquisition request includes a terminal identifier, and obtaining an authentication vector from the HSS in response to the authentication vector acquisition request includes obtaining an authentication vector corresponding to the terminal identifier from the HSS based on the terminal identifier.

[0025] Obtain an authentication vector from the HSS based on the terminal identifier, and ensure that the obtained authentication vector corresponds to the UE initiating the registration request. The authentication vector includes RAND, AUTN, XRES, CK, and IK. RAND is a random number provided to the UE, AUTN is an authentication token provided to the UE so that the UE can authenticate with the 5G network based on the AUTN, XRES is a desired UE authentication response parameter used to determine whether the authentication is successful, CK is an encryption key, and IK is an integrity key.

[0026] In step S103, generate a home authentication vector based on the authentication vector, send the home authentication vector to the AUSF, and let the AUSF perform authentication verification based on the home authentication vector.

[0027] The UDM calculates the authentication vector to obtain a home authentication vector, and sends the generated home authentication vector to the AUSF so that the AUSF performs authentication verification based on the home authentication vector.

[0028] In one possible embodiment, generating a home authentication vector based on the authentication vector comprises: Performing a calculation on the authentication vector according to a predefined authentication algorithm to obtain a home authentication vector.

[0029] The home authentication vector is a 5G HE AVs, which includes RAND, AUTN, XRES* and Kausf, and when calculating the authentication vector based on a predetermined authentication algorithm, it can be calculated based on the calculation method specified in the 5G specification. Specifically, Kausf is derived according to TS33.501 Annex A.2, and XRES* is derived according to TS33.501 Annex A.4, and finally the home authentication vector 5G HE AVs can be created.

[0030] Upon obtaining the home authentication vector 5G HE AVs, the UDM transmits the home authentication vector 5G HE AVs to the AUSF, and the AUSF performs authentication verification based on the home authentication vector 5G HE AVs.

[0031] When the AUSF performs authentication verification based on the home authentication vector 5G HE AVs, the AUSF can store XRES* in the home authentication vector 5G HE AVs, and obtain the network element authentication vector 5G SE AVs by calculating and deriving according to the 5G specification based on the home authentication vector 5G HE AVs, and then send the obtained network element authentication vector 5G SE AVs to the AMF. The network element authentication vector 5G SE AVs includes RAND, AUTN, and HXRES*, and specifically, the network element authentication vector 5G SE AVs can be obtained by deriving HXRES* from XRES* according to TS33.501 Annex A.5, and replacing the XRES* of the home authentication vector 5G HE AVs with the derived HXRES*.

[0032] When the AMF receives the network element authentication vector 5G SE AVs, the AMF's security anchor (SEAF) initiates an authentication procedure for the UE via a non-access stratum (NAS) message, carrying the RAND authentication parameters and the AUTN authentication parameters in the authentication vector.

[0033] The USIM (Universal Subscriber Identity Module) in the UE calculates XMAC based on the received RAND, compares the calculated XMAC with the MAC value in the AUTN, and if MAC=XMAC, the verification is successful. After the verification is successful, it verifies whether the sequence number (SQN) in the AUTN is valid. If the verification of SQN is successful, the USIM calculates a response (RES) and returns the RES to the ME, and the ME calculates RES* based on the RES and sends the calculated RES* to the SEAF of the AMF. Specifically, when verifying whether MAC and XMAC are equal, the verification is performed according to the description of TS 33.102, and the ME can derive RES* from RES according to TS33.501 Annex A.4.

[0034] The SEAF calculates HRES* based on the calculated RES*, and compares HRES* with HXRES* to see if they are the same. If they match, it determines that the authentication is successful and sends RES* and the UE's terminal identifier together to the AUSF to confirm the authentication.

[0035] The AUSF compares the received RES* with the stored XRES* to see if they match, and if they do, the AUSF assumes that the authentication verification has been successful and sends the verification result to the SEAF to complete the authentication.

[0036] In one possible embodiment, the 5G authentication method may further include receiving a resynchronization request sent from the AUSF to perform resynchronization if authentication verification performed by the AUSF based on the home authentication vector fails.

[0037] If the AUSF fails the authentication verification based on the home authentication vector, it can initiate a resynchronization request and re-perform the authentication verification in response to the resynchronization request.

[0038] In one possible embodiment, receiving a resynchronization request sent from the AUSF and performing resynchronization includes: determining whether authentication data exists locally in response to the resynchronization request sent from the AUSF; if the authentication data does not exist locally, obtaining an authentication vector from the HSS in response to the resynchronization request; generating a home authentication vector based on the authentication vector, sending the home authentication vector to the AUSF, and causing the AUSF to perform authentication verification based on the home authentication vector.

[0039] If the authentication verification performed by the AUSF based on the home authentication vector fails, the UE returns information indicating authentication failure, and the AMF initiates a resynchronization request to the AUSF based on the information indicating authentication failure returned from the UE. When the AUSF receives the resynchronization request sent from the AMF, it initiates a resynchronization request to the UDM, so that the UDM re-determines whether or not authentication data exists locally in response to this resynchronization request, and if the authentication data does not exist locally, it can obtain an authentication vector from the HSS in response to the resynchronization request.

[0040] When the UDM receives the authentication vector, the UDM generates a home authentication vector based on the authentication vector, and sends the home authentication vector to the AUSF so that the AUSF can perform authentication verification based on the home authentication vector. The procedure by which the AUSF performs authentication verification based on the home authentication vector is similar to the above procedure, and therefore is not described here.

[0041] 2 is a schematic interaction diagram of a 5G authentication method provided by an embodiment of the present application. As shown in FIG. 2, the interaction procedure of the 5G authentication method can specifically include the following steps 1) to 10).

[0042] In step 1), a UE that supports 5G automatically sends a registration request to the 5G network when it is powered on.

[0043] In step 2), the AMF initiates an authentication request including a terminal identifier to the AUSF in response to a registration request sent from the UE.

[0044] In step 3), the AUSF requests the UDM to obtain an authentication vector in response to the authentication request.

[0045] In step 4), in response to the request sent from the AUSF, the UDM determines that there is no authentication data corresponding to the UE locally, and obtains an authentication vector from the HSS.

[0046] In step 5), the HSS sends the authentication vector corresponding to the UE to the UDM, and then the UDM performs calculations on the authentication vector to obtain a home authentication vector 5G HE AVs, and sends the generated home authentication vector 5G HE AVs to the AUSF.

[0047] In step 6), the AUSF obtains a network element authentication vector 5G SE AVs based on the home authentication vector 5G HE AVs, and sends the obtained network element authentication vector 5G SE AVs to the AMF. The AUSF should store the XRES* in the home authentication vector 5G HE AVs.

[0048] In step 7), when the AMF receives the network element authentication vector 5G SE AVs, the SEAF initiates an authentication procedure for the UE via a NAS message, carrying the RAND authentication parameters and the AUTN authentication parameters in the authentication vector.

[0049] In step 8), if the UE successfully verifies the SQN based on the received RAND and AUTN, it calculates RES* and sends the calculated RES* to the SEAF of the AMF.

[0050] In step 9), the SEAF calculates HRES* based on the calculated RES*, and if HRES* and HXRES* match, it considers the authentication successful and sends RES* and the UE's terminal identifier together to the AUSF.

[0051] In step 10), if the received RES* and the stored XRES* match, the AUSF considers that the authentication verification has been successful and sends the verification result to the SEAF.

[0052] 3 is a schematic interaction diagram of resynchronization in the 5G authentication method provided by an embodiment of the present application. As shown in FIG. 3, the interaction procedure of resynchronization in the 5G authentication method can specifically include the following steps 1) to 11).

[0053] In step 1), when the AMF receives the network element authentication vector 5G SE AVs, the SEAF initiates an authentication procedure for the UE via a NAS message, carrying the RAND authentication parameter and the AUTN authentication parameter in the authentication vector.

[0054] In step 2), if the UE fails to verify the SQN based on the received RAND and AUTN, it returns an authentication failure message to the AMF, including the RAND authentication parameters and the AUTN authentication parameters in the received authentication vector.

[0055] In step 3), when the AMF receives a message indicating authentication failure sent from the UE, it sends a resynchronization request to the AUSF, including a terminal identifier, a RAND authentication parameter, and an AUTN authentication parameter.

[0056] In step 4), the AUSF sends a resynchronization request to the UDM, which includes the terminal identifier, the RAND authentication parameter, and the AUTN authentication parameter.

[0057] In step 5), in response to the request sent from the AUSF, the UDM determines that there is no authentication data corresponding to the UE locally, and obtains an authentication vector from the HSS.

[0058] In step 6), the HSS sends the authentication vector corresponding to the UE to the UDM, and then the UDM performs calculations on the authentication vector to obtain a home authentication vector 5G HE AVs, and sends the generated home authentication vector 5G HE AVs to the AUSF.

[0059] In step 7), the AUSF obtains a network element authentication vector 5G SE AVs based on the home authentication vector 5G HE AVs, and sends the obtained network element authentication vector 5G SE AVs to the AMF. The AUSF should store the XRES* in the home authentication vector 5G HE AVs.

[0060] In step 8), when the AMF receives the network element authentication vector 5G SE AVs, the SEAF initiates an authentication procedure for the UE via a NAS message, carrying the RAND authentication parameter and the AUTN authentication parameter in the authentication vector.

[0061] In step 9), if the UE successfully verifies the SQN based on the received RAND and AUTN, it calculates RES* and sends the calculated RES* to the SEAF of the AMF.

[0062] In step 10), the SEAF calculates HRES* based on the calculated RES*, and if HRES* and HXRES* match, it considers the authentication successful and sends RES* and the UE's terminal identifier together to the AUSF.

[0063] In step 11), if the received RES* and the stored XRES* match, the AUSF considers that the authentication verification has been successful and sends the verification result to the SEAF.

[0064] According to the 5G authentication method provided by the embodiment of the present application, according to the authentication vector acquisition request sent from the AUSF, determine whether authentication data exists locally; if authentication data does not exist locally, acquire an authentication vector from the HSS according to the authentication vector acquisition request, generate a home authentication vector according to the authentication vector, send the home authentication vector to the AUSF, and let the AUSF perform authentication verification according to the home authentication vector. When performing 5G authentication verification for a UE, there is no need to pre-store the authentication data of the UE user in the UDM; when it is necessary to perform 5G authentication for a UE user, the corresponding authentication vector can be directly obtained from the HSS and the authentication data can be stored in the UDM, so as to avoid storing the authentication data of a user who has not yet used 5G UE in the UDM, reduce the amount of invalid storage data stored in the UDM, save the storage space of the UDM, and reduce the construction time and difficulty of the UDM.

[0065] 4 is a schematic flow chart of a 5G account opening method provided by an embodiment of the present application. According to this 5G account opening method, when the authentication of the UE is successful, the 5G account can be automatically opened for the UE, so that the convenience of opening the 5G account is improved.

[0066] As shown in FIG. 4, this 5G account opening method specifically includes steps S201 and S202.

[0067] In step S201, in response to a registration request sent from the UE, authentication verification is performed for the UE according to the above-mentioned 5G authentication method.

[0068] A user uses a UE that supports 5G SA, inserts a SIM card into the UE, and controls the UE to be powered on, and the UE automatically initiates a registration request to a 5G network after being powered on. The UDM performs authentication verification for the UE according to the 5G authentication method in response to the registration request sent by the UE.

[0069] In step S202, if the authentication verification is successful, send an account opening command to the account opening system, and have the account opening system perform data migration of the UE and opening a 5G registration account according to the account opening command.

[0070] If the authentication verification of the UE by the UDM is successful, the UDM can send an account opening command to the account opening system, thereby controlling the account opening system to perform data migration of the UE and opening of a 5G registration account in accordance with the account opening command.

[0071] In one possible embodiment, having the account opening system perform data migration and 5G registration account opening for the UE in accordance with the account opening command includes: determining whether the subscription data of the UE exists locally in response to a data acquisition request sent from the AMF; and if the subscription data of the UE does not exist locally, having the account opening system perform data migration and 5G registration account opening for the UE in accordance with the account opening command.

[0072] If the authentication verification is successful, the AMF can request the UDM to obtain the subscription data of the UE. The subscription data includes a terminal identifier. The UDM determines whether the subscription data of the UE is stored locally based on the terminal identifier and the data acquisition request sent from the AMF. If the UDM determines that the subscription data of the UE is not stored locally, it determines that the user does not exist and sends an account opening command to the account opening system, so that the account opening system can automatically perform the data transfer of the UE and the opening of a 5G registration account according to the account opening command.

[0073] 5 is a schematic interaction diagram of a 5G account opening method provided by an embodiment of the present application. As shown in FIG. 5, the interaction procedure of the 5G account opening method specifically can include the following steps 1) to 5).

[0074] In step 1), the UE is powered on and automatically initiates a registration request to the SA network, and the AMF receives the UE's registration request.

[0075] In step 2), the AMF initiates an authentication verification request to the UDM, requesting 5G authentication to be performed for the UE.

[0076] In step 3), if the authentication verification of the UE by the UDM is successful, the AMF obtains the subscription data of the UE from the UDM.

[0077] In step 4), if the UDM detects that the user's subscription data does not exist locally, it returns an error to the AMF.

[0078] In step 5), the UDM sends an account opening command to the account opening system, and causes the account opening system to open a 5G account according to the account opening command.

[0079] According to the 5G account opening method provided by the embodiment of the present application, in response to a registration request sent from a UE, authentication verification is performed on the UE according to the 5G authentication method, and if the authentication verification is successful, an account opening command is sent to the account opening system, and the account opening system performs data transfer of the UE and opening of a 5G registration account according to the account opening command. When performing authentication verification, there is no need to store authentication data in the UDM in advance, and the authentication data of the UE is directly obtained from the HSS, thereby reducing the amount of invalid storage data in the UDM. If the authentication verification is successful, the 5G registration account can be automatically opened, thereby avoiding the impact on the account opening system caused by invalid or fraudulent cards and improving the convenience of opening a 5G registration account.

[0080] 6 is a schematic block diagram of an electronic device provided by an embodiment of the present application. The electronic device 300 may include a processor 301 and a memory 302 that may be connected via a bus.

[0081] The memory 302 may include a non-volatile storage medium and an internal memory.

[0082] The non-volatile storage medium can store an operating system and a computer program, which includes program instructions, which, when executed, can cause the processor 301 to perform at least one step of the 5G authentication method provided by the embodiment of the present application.

[0083] Processor 301 is configured to provide computational and control capabilities to support the overall operation of electronic device 300 .

[0084] The internal memory can provide an environment for the execution of a computer program in a non-volatile storage medium, which, when executed by the processor 301, can cause the processor 301 to perform at least one step of the 5G authentication method provided by an embodiment of the present application.

[0085] It should be noted that the processor 301 may be a Central Processing Unit (CPU) or may be another general purpose processor, a Digital Signal Processor (DSP), an Application Specific Integrated Circuit (ASIC), a Field-Programmable Gate Array (FPGA) or other programmable logic device, a discrete gate or transistor logic device, a discrete hardware component, etc. The general purpose processor may be a microprocessor or any conventional processor, etc.

[0086] 6 is merely a block diagram of a portion of the configuration related to the proposal of the present application, and does not constitute a limitation on the electronic device 300 to which the proposal of the present application is applied. A specific electronic device 300 may include more or fewer components than those shown in the figure, or some components may be combined or arranged in a different manner.

[0087] In one possible embodiment, the processor 301 is configured to execute a computer program stored in the memory 302 to determine whether authentication data exists locally in response to an authentication vector acquisition request sent from the AUSF; if the authentication data does not exist locally, acquire an authentication vector from the HSS in response to the authentication vector acquisition request; generate a home authentication vector based on the authentication vector, send the home authentication vector to the AUSF, and have the AUSF perform authentication verification based on the home authentication vector.

[0088] In one possible embodiment, the authentication vector acquisition request includes a terminal identifier, and the processor 301 is configured to, when executing acquiring an authentication vector from the HSS in response to the authentication vector acquisition request, realize acquiring an authentication vector corresponding to the terminal identifier from the HSS based on the terminal identifier.

[0089] In one possible embodiment, when processor 301 executes generating a home authentication vector based on an authentication vector, it is configured to obtain the home authentication vector by performing calculations on the authentication vector according to a predetermined authentication algorithm.

[0090] In one possible embodiment, the processor 301 is further configured to receive a resynchronization request sent from the AUSF and perform resynchronization when the authentication verification performed by the AUSF based on the home authentication vector fails.

[0091] In one possible embodiment, when the processor 301 receives a resynchronization request sent from the AUSF and performs resynchronization, the processor 301 is configured to: determine whether authentication data exists locally in response to the resynchronization request sent from the AUSF; if the authentication data does not exist locally, obtain an authentication vector from the HSS in response to the resynchronization request; generate a home authentication vector based on the authentication vector, send the home authentication vector to the AUSF, and cause the AUSF to perform authentication verification based on the home authentication vector.

[0092] 7 is a schematic configuration diagram of a 5G account opening system provided by an embodiment of the present application. The 5G account opening system 400 includes a UE 401, a UDM 402, and an account opening system 403, and the UE 401, the UDM 402, and the account opening system 403 are communicatively connected.

[0093] The UE 401 is configured to send a registration request when powered on.

[0094] The UDM402 is configured to execute any one of the 5G account opening methods in response to a registration request sent from the UE401.

[0095] The account opening system 403 is configured to perform data migration and 5G account opening for UE 401 in accordance with an account opening command sent from UDM 402.

[0096] The UDM402 includes a processor and a memory, the memory is configured to store a computer program, and the processor is configured to execute at least one step of a 5G account opening method provided by an embodiment of the present application.

[0097] 7 is merely a block diagram of a portion of the configuration related to the proposal of the present application, and does not constitute a limitation on the 5G account opening system 400 to which the proposal of the present application is applied. A specific 5G account opening system 400 may include more or fewer components than those shown in the figure, or some components may be combined or arranged differently.

[0098] In one possible embodiment, the processor is configured to execute a computer program stored in the memory to perform authentication verification of UE 401 according to the above-mentioned 5G authentication method in response to a registration request sent from UE 401, and if the authentication verification is successful, send an account opening command to the account opening system 403, and have the account opening system 403 perform data migration and 5G registration account opening for UE 401 in accordance with the account opening command.

[0099] In one possible embodiment, when executing the process of sending an account opening command to the account opening system 403 and having the account opening system 403 perform data migration and 5G registration account opening for UE 401 based on the registration information, the processor is configured to: determine whether subscription data of UE 401 exists locally in response to a data acquisition request sent from the AMF; and if the subscription data of UE 401 does not exist locally, send an account opening command to the account opening system 403 and have the account opening system 403 perform data migration and 5G registration account opening for UE 401 in accordance with the account opening command.

[0100] An embodiment of the present application further provides a computer-readable storage medium, the computer-readable storage medium storing a computer program, the computer program including program instructions, and a processor executing the program instructions to realize at least one step of a 5G authentication method or a 5G account opening method provided by an embodiment of the present application.

[0101] The computer-readable storage medium may be an internal storage unit of the electronic device in the above embodiment, such as a hard disk or memory of the electronic device. The computer-readable storage medium may be an external storage device of the electronic device, such as an external hard disk mounted on the electronic device, a smart memory card (Smart Media Card, SMC), a secure digital (Secure Digital, SD) card, a flash memory card (Flash Card), etc.

[0102] The above description is merely a specific embodiment of the present application, and the scope of protection of the present application is not limited thereto, and a person skilled in the art can easily think of various equivalent modifications or replacements within the technical scope disclosed in the present application, and all such modifications or replacements should be considered to be included in the scope of protection of the present application. Therefore, the scope of protection of the present application shall be subject to the scope of the claims.

Claims

1. 1. A 5G authentication method performed by a unified data management (UDM) device, comprising: In response to an authentication vector acquisition request sent from an authentication network element (AUSF), determining whether authentication data corresponding to the authentication vector acquisition request exists locally, where the authentication data corresponds to a predetermined terminal that has sent a registration request to a 5G network among a plurality of terminals; in response to the authentication vector obtainment request being received from a home subscription server (HSS), the authentication vector corresponding to the authentication vector obtainment request is obtained in response to the authentication vector obtainment request being received from a home subscription server (HSS) in response to the authentication vector obtainment request being received from a home subscription server (HSS). acquiring the authentication vector corresponding to the authentication vector acquisition request from the HSS; Generate a home authentication vector based on the authentication vector, send the home authentication vector to the AUSF, and have the AUSF perform authentication verification corresponding to the predetermined terminal that sent the registration request to the 5G network based on the home authentication vector; 5G authentication methods including:

2. the authentication vector acquisition request includes a terminal identifier; acquiring the authentication vector from the HSS in response to the authentication vector acquisition request, obtaining, from the HSS, the authentication vector corresponding to the terminal identifier based on the terminal identifier; The 5G authentication method of claim 1, comprising:

3. generating the home authentication vector based on the authentication vector, performing a calculation on said authentication vector according to a predefined authentication algorithm to obtain said home authentication vector; The 5G authentication method of claim 1, comprising:

4. receiving a resynchronization request sent from the AUSF in response to a failure of authentication verification performed by the AUSF based on the home authentication vector, and performing resynchronization; The 5G authentication method of claim 1, comprising:

5. Receiving the resynchronization request transmitted from the AUSF and performing resynchronization includes: determining whether authentication data exists locally in response to the resynchronization request sent from the AUSF; in response to the absence of local authentication data, obtaining the authentication vector from the HSS in response to the resynchronization request; generating the home authentication vector based on the authentication vector, sending the home authentication vector to the AUSF, and having the AUSF perform authentication verification based on the home authentication vector; The 5G authentication method of claim 4, comprising:

6. 1. A 5G account opening method performed by a unified data management (UDM) device, comprising: In response to the registration request transmitted from the predetermined terminal among the plurality of terminals to the 5G network, performing authentication verification corresponding to the predetermined terminal for the predetermined terminal according to the 5G authentication method according to any one of claims 1 to 5; In response to the success of the authentication verification corresponding to the specified terminal, an account opening command is sent to an account opening system, and the account opening system performs data transfer and 5G registration account opening for the specified terminal among the plurality of terminals in accordance with the account opening command; Including how to open a 5G account.

7. Sending the account opening command to the account opening system and having the account opening system perform data transfer of the specified terminal and opening a 5G registration account in accordance with the account opening command, Determining whether subscription data of the given terminal exists locally in response to a data acquisition request sent from an Access and Mobility Management Function (AMF); In response to the fact that the subscription data of the specified terminal does not exist locally, sending an account opening command to the account opening system, and having the account opening system perform data transfer of the specified terminal and opening a 5G registration account according to the account opening command; The 5G account opening method according to claim 6, comprising:

8. An electronic device comprising a memory and a processor, the memory is configured to store a computer program; The processor is configured to execute the computer program and, upon execution of the computer program, to implement the 5G authentication method according to any one of claims 1 to 5. electronic equipment.

9. A 5G account opening system comprising the plurality of terminals, the unified data management (UDM) device, and an account opening system, The predetermined terminal among the plurality of terminals is configured to transmit the registration request corresponding to the predetermined terminal to the 5G network; The UDM is configured to receive the registration request transmitted from the predetermined terminal and execute the 5G account opening method according to any one of claims 6 to 7, The account opening system is configured to perform data migration and 5G registration account opening of the specified terminal among the plurality of terminals in accordance with the account opening command transmitted from the UDM. 5G account opening system.

10. A computer-readable storage medium storing a computer program, the computer program being executed by a processor to cause the processor to implement the 5G authentication method according to any one of claims 1 to 5. A computer-readable storage medium.

Images