Authentication method, data configuration method, electronic device and storage medium

Abstract

The present application relates to the technical field of wireless communications. Provided are an authentication method, a data configuration method, an electronic device and a storage medium. The authentication method comprises: analyzing acquired data to be authenticated, and determining configuration information in said data, wherein the configuration information comprises modification information of a network configuration parameter; and according to the configuration information in said data, performing authentication by using an authentication mode corresponding to the configuration information.

Description

Authentication method, data configuration method, electronic device and storage medium

[0001] CROSS-REFERENCE TO RELATED APPLICATIONS

[0002] This application claims priority to Chinese patent application No. 202310799745.8 filed on June 30, 2023, the contents of which are incorporated herein by reference in their entirety. Technical Field

[0003] The present application relates to the field of wireless communication technology, and in particular to an authentication method, a data configuration method, an electronic device, and a storage medium. Background Art

[0004] In communications networks, different network elements can control network capacity and service functions through configuration data. For example, communications operators obtain licenses to authenticate the configuration data of network elements. After a communications operator (or enterprise customer) purchases a license from a device vendor, the operator can use the software functions corresponding to the license based on the vendor's authorization.

[0005] However, in the related technologies for authenticating devices based on licenses, there is a problem that the modification time of configuration data is too long, which reduces the efficiency of data configuration. Especially when there are many devices in the communication network and a large amount of data needs to be modified in batches at one time, it greatly affects the efficiency of operation and maintenance.

[0006] Summary of the Invention

[0007] The present application provides an authentication method, a data configuration method, an electronic device, and a storage medium.

[0008] An embodiment of the present application provides an authentication method, which includes: analyzing the acquired data to be authenticated, determining configuration information in the data to be authenticated, the configuration information including modification information of network configuration parameters; and performing authentication based on the configuration information in the data to be authenticated using an authentication method corresponding to the configuration information.

[0009] An embodiment of the present application provides a data configuration method, which includes: sending data to be authenticated to an authentication management device, wherein the data to be authenticated includes configuration information, and the configuration information includes modification information of network configuration parameters; based on the authentication result of the authentication management device on the data to be authenticated, determining to use the configuration information in the data to be authenticated to configure the device.

[0010] An embodiment of the present application provides an electronic device, comprising: one or more processors; a memory on which one or more programs are stored. When the one or more programs are executed by one or more processors, the one or more processors implement any one of the authentication methods or data configuration methods in the embodiments of the present application.

[0011] An embodiment of the present application provides a readable storage medium, which stores a computer program. When the computer program is executed by a processor, any one of the authentication methods or data configuration methods in the embodiments of the present application is implemented.

[0012] With respect to the above embodiments and other aspects of the present application and their implementation, further description is provided in the accompanying drawings, detailed description and claims. BRIEF DESCRIPTION OF THE DRAWINGS

[0013] FIG1 is a flow chart showing an authentication method according to an embodiment of the present application.

[0014] FIG2 is a flow chart showing a data configuration method according to an embodiment of the present application.

[0015] FIG3 shows a block diagram of the authentication device provided in an embodiment of the present application.

[0016] FIG4 shows a block diagram of the data configuration device provided in an embodiment of the present application.

[0017] FIG5 shows a block diagram of the authentication system provided in an embodiment of the present application.

[0018] FIG6 shows a schematic diagram of the interaction process between various devices in the authentication system provided in an embodiment of the present application.

[0019] FIG7 shows a flow chart of the authentication method provided in an embodiment of the present application.

[0020] FIG8 is a flow chart showing an authentication method according to an embodiment of the present application.

[0021] FIG9 shows a block diagram of the components of a computing device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0022] To make the purpose, technical solutions and advantages of this application more clear, the embodiments of this application will be described in detail below with reference to the accompanying drawings. It should be noted that, unless there is a conflict, the embodiments and features in the embodiments of this application can be combined with each other in any way.

[0023] As used herein, unless conflicting, the conjunction "and / or" includes any and all combinations of one or more of the associated listed items.

[0024] In the absence of conflict, the term “in the case of A,” as used herein, means in response to determining that the condition represented by A is met or the event represented by A occurs (subsequent operation or determination is performed).

[0025] In a communication network, the capacity and service functions of the communication network are usually controlled based on configuration data, wherein the management of the license can be achieved by authenticating the configuration data. In the existing license management method, any modification of the configuration data requires authentication, that is, it is determined whether the configuration data meets the authorization permission of the license. If it is determined that the configuration data does not meet the authorization permission of the license, the configuration data will be prohibited from taking effect. However, the above processing method will cause the modification time of the configuration data to be too long, which reduces the configuration efficiency of the data, especially when batch configuration is performed on multiple network element devices, which greatly affects the operation and maintenance efficiency in the communication network.

[0026] The present application provides an authentication method, a data configuration method, an electronic device and a storage medium to solve the above problems.

[0027] Figure 1 illustrates a schematic flow chart of an authentication method according to an embodiment of the present application. This authentication method can be applied to an authentication device, which can be installed in any of a base station, a network management device, and an authentication control center server. As shown in Figure 1, the authentication method according to an embodiment of the present application includes, but is not limited to, the following steps S101 and S102.

[0028] In step S101, the acquired data to be authenticated is analyzed to determine configuration information in the data to be authenticated.

[0029] In this embodiment, the data to be authenticated may be data carried in a request message sent by an operation and maintenance management module in the base station; may be data carried in a request message sent by a network management device to the base station; may be data carried in a request message in which an operation and maintenance personnel uses a local maintenance terminal (LMT) to modify the configuration parameters of the base station; or may be data carried in a request message in which an operation and maintenance personnel uses a third-party tool to call a preset application program interface provided by the base station to modify the configuration parameters of the base station.

[0030] The above data to be authenticated are only examples, which can be set specifically according to actual needs. Other unspecified data to be authenticated are also within the scope of protection of this application and will not be described in detail here.

[0031] In this embodiment, the configuration information includes modification information of network configuration parameters, including modification information of single-station configuration parameters for a base station and / or modification information of configuration parameters for all base stations within the network management device's jurisdiction.

[0032] In step S102, authentication is performed according to the configuration information in the data to be authenticated using an authentication method corresponding to the configuration information.

[0033] In this embodiment, the obtained data to be authenticated is analyzed to determine the configuration information in the data to be authenticated, where the configuration information includes modification information of network configuration parameters, so as to obtain the modification information of network configuration parameters and clarify the data to be authenticated that (actually) needs to be authenticated; based on the configuration information in the data to be authenticated, authentication is performed using an authentication method corresponding to the configuration information, and the authentication method corresponding to the configuration information can be selectively used for authentication, thereby reducing the authentication time of the data to be authenticated and effectively improving the authentication efficiency.

[0034] In some exemplary embodiments, authentication in step S102 is performed based on the configuration information in the data to be authenticated using an authentication method corresponding to the configuration information, which can be implemented in the following manner: determining the type of control item contained in the modification information of the network configuration parameters; and performing authentication based on the control item type using an authentication method corresponding to the configuration information.

[0035] In some exemplary embodiments, the control item types include critical control items and non-critical control items. A critical control item may be a preset license item that determines software revenue and has an impact on basic service functions in the communication network. For example, a critical control item may be a license item set for the number of communication cells, or a license item set for the number of carriers, and so on. The above description of the critical control items is merely an example, and specific settings may be made according to actual circumstances. Other unspecified critical control items are also within the scope of protection of this application and will not be described in detail here.

[0036] By determining the control item type contained in the network configuration parameter modification information, the importance of the network configuration parameter modification information can be clarified, and then authentication can be performed based on the control item type using the authentication method corresponding to the configuration information, so that the authentication method can meet the authentication requirements of the control item type. In addition, due to the importance of key control items, the first authentication method can be used to authenticate key control items; while for non-key control items with relatively low importance, the second authentication method can be used to authenticate non-key control items. This allows different authentication methods to be used for different control item types, improving authentication efficiency.

[0037] In some exemplary embodiments, authentication is performed based on the control item type using an authentication method corresponding to the configuration information, including: using a first authentication method to authenticate critical control items; and when it is determined that the modification information of the network configuration parameters includes modification information of non-critical control items, using a second authentication method to authenticate the non-critical control items.

[0038] In some exemplary embodiments, the key control items correspond to a plurality of core configuration parameters; the non-key control items correspond to a plurality of other configuration parameters, where the plurality of other configuration parameters are parameters other than the plurality of core configuration parameters.

[0039] For example, the key control items correspond to multiple core configuration parameters including at least one of the number of communication cells, the number of carriers, frequency band information (eg, the frequency range of the frequency band, etc.), and energy-saving parameters.

[0040] In a communication system, a license entry may include one or more of the following: the license type, a license certificate code that uniquely identifies the license, a license certificate version number, a license certificate creation date, and a license certificate expiration date. Each license entry may correspond to multiple core configuration parameters. For example, under a license entry for the number of communication cells, key control items may include core configuration parameters such as the number and type of communication cells. Under a key control item for the number of carriers, key control items may include multiple core configuration parameters such as carrier frequency information, the number of carriers, and carrier amplitude or phase information.

[0041] If the network configuration parameter modification information includes a critical control item, authentication of the critical control item is required. If the network configuration parameter modification information does not include a critical control item, authentication of the critical control item is also required due to its importance to ensure the normal operation of the communication system. In other words, full authentication is required for critical control items.

[0042] For non-critical control items, authentication of non-critical control items is required only when it is determined that the modification information of network configuration parameters includes modification information of non-critical control items, so as to determine whether the modification of non-critical control items meets the requirements, thereby reducing the data modification time and improving data configuration efficiency.

[0043] Different authentication methods are used to authenticate key control items and non-key control items respectively, and different authentication processes can be performed on different categories of information in the configuration information, thereby speeding up the processing speed of authentication data and improving data authentication efficiency.

[0044] In some exemplary embodiments, a first authentication method is used to authenticate a key control item, including: determining a target license quantity; determining that authentication of the key control item is successful if the target license quantity is less than or equal to a preset license quantity threshold; determining that authentication of the key control item is successful if the target license quantity is greater than the preset license quantity threshold and the modification information of the key control item is used to reduce the required license quantity of the modified key control item; and determining that authentication is unsuccessful if the target license quantity is greater than the preset license quantity threshold and the modification information of the key control item is used to reduce the required license quantity of the modified key control item is not satisfied. The unsuccessful authentication refers to the failure of authentication of all data in the authentication data.

[0045] It should be noted that the target license quantity has different meanings in different situations to reflect the impact of modifications to different configuration parameters of key control items and non-key control items on the license quantity.

[0046] For example, if the preset license quantity threshold is set to A and the target license quantity is set to B, where both A and B are integers greater than 1. When B ≤ A, the authentication of the key control item can be directly determined to be successful. When B > A, a different judgment needs to be made based on the impact of the modified key control item information on the required license quantity of the modified key control item.

[0047] In some embodiments, determining the target license quantity includes: when the modification information of the network configuration parameters includes modification information of the key control item, the target license quantity is the modified required license quantity of the key control item determined based on the modification information of the key control item; when the modification information of the network configuration parameters does not include modification information of the key control item, the target license quantity is the current required license quantity of the key control item.

[0048] If the modified information of the key control item is used to reduce the number of required licenses for the modified key control item, that is, after the modification is made according to the modified information of the key control item, the number of required licenses for the modified key control item is reduced based on the number of licenses originally obtained, then it can be determined that the authentication of the key control item is successful.

[0049] For example, if the network configuration parameter modification information does not include modification information for a critical control item, and the current required license quantity for the critical control item is 3, then the target license quantity is 3, and the preset license quantity threshold is set to 5. Since the target license quantity is less than the preset license quantity threshold, authentication for the critical control item is considered successful. This eliminates the need to apply for additional licenses to satisfy the modification request for the critical control item. Furthermore, licenses can be recycled to reduce license resource waste.

[0050] If the modification information of the key control item is not satisfied, the number of required licenses for the modified key control item is reduced, that is, after the modification is made according to the modification information of the key control item, the number of required licenses for the modified key control item needs to be increased based on the number of licenses originally obtained. At this time, the number of licenses originally obtained cannot meet the modification requirements for the key control item, and therefore, the authentication is determined to fail.

[0051] For example, if the network configuration parameter modification information includes modification information for a critical control item, and the critical control item is modified according to the modification information, and the required license quantity for the modified critical control item is 8, while the target license quantity (e.g., 5) is greater than the preset license quantity threshold (e.g., 6), authentication is determined to have failed. Furthermore, if further modifications are desired to the critical control item, additional licenses must be requested from the authentication control device to further determine whether authentication for the critical control item has passed.

[0052] By comparing the target license quantity and the preset license quantity threshold under different circumstances, and considering the impact of the modification information of the key control item on the required license quantity of the modified key control item, the authentication accuracy of the authentication data can be improved and the occurrence rate of configuration errors of the authentication data can be reduced.

[0053] In some exemplary embodiments, a second authentication method is used to authenticate non-critical control items, including: skipping the authentication step when it is determined that the modification information of the non-critical control item is not related to the number of licenses; determining the target number of licenses when it is determined that the modification information of the non-critical control item is related to the number of licenses; determining that the authentication of the non-critical control item is passed when the target number of licenses is less than or equal to a preset license number threshold; and determining that the authentication is failed when the target number of licenses is greater than the preset license number threshold. The target number of licenses is the required number of licenses for the non-critical control item after modification according to the modification information of the non-critical control item. Failure to authenticate the authentication data means that all data in the authentication data are failed to be authenticated.

[0054] Since non-critical control items correspond to multiple other configuration parameters, which are parameters other than the core configuration parameters, modifications to these non-critical control items will not affect the normal operation of the device. During the authentication process of the authentication data, if it is determined that the modification information of the non-critical control items is not related to the number of licenses, the authentication step can be skipped directly, speeding up the processing of the authentication data and reducing the processing time of the authentication data.

[0055] If it is determined that the modification information of the non-critical control items is related to the number of licenses, then based on the determined number of target licenses, the non-critical control items that need to be authenticated can be obtained by extracting data related to the usage of licenses in the data to be authenticated. Furthermore, the non-critical control items are modified according to the modification information of the non-critical control items, and the required number of licenses for the modified non-critical control items (i.e., the target number of licenses) is determined, which can effectively reduce the amount of data processing. As for other data in the data to be authenticated other than the modification information of the non-critical control items, since they do not involve the usage of licenses, the authentication step can be skipped for other data in the data to be authenticated other than the modification information of the non-critical control items, thereby shortening the authentication time and speeding up the processing speed of the data to be authenticated.

[0056] If the target license quantity is less than or equal to the preset license quantity threshold, that is, the number of licenses that the current device can authorize to obtain (that is, the preset license quantity threshold) can meet the current authentication requirements for non-critical control items, it can be directly determined that the authentication of non-critical control items is passed, thereby shortening the authentication time.

[0057] If the target license quantity exceeds the number of licenses that the current device can be authorized to obtain (i.e., the target license quantity is greater than the preset license quantity threshold), then the current device can no longer use the number of licenses that have been obtained to authenticate non-critical control items, and therefore determines that the authentication fails.

[0058] Based on the judgment of the number of licenses in the above different situations, different processing can be performed on non-critical control items according to different situations, thereby accelerating the processing speed of authentication data and improving data maintenance efficiency.

[0059] In some exemplary embodiments, when the target license quantity is greater than a preset license quantity threshold, the method further includes: applying for a license for authentication from an authentication control device.

[0060] In some exemplary embodiments, the authentication control device may be an authentication control center server connected to a network management device, or may be a network management device connected to a base station.

[0061] By applying for a license for authentication from the authentication control device, more licenses for authentication can be obtained to meet the authentication requirements of the authentication data and speed up the processing of the authentication data.

[0062] In some exemplary embodiments, before applying for a license for authentication from the authentication control device, the method further includes: determining a subnet identifier and a group identifier corresponding to the data to be authenticated; determining the number of licenses to be applied for based on the number of licenses currently acquired by the device and the target number of licenses, where the type of the license is a shared license (e.g., a shared license);

[0063] Applying for a license for authentication from the authentication control device includes: generating an authentication request according to the number of licenses to be applied for and the subnet identifier and group identifier corresponding to the data to be authenticated; and sending the authentication request to the authentication control device.

[0064] In some exemplary embodiments, the number of licenses required to be applied for may be a number determined based on the difference between the target number of licenses and the number of licenses currently acquired by the device, and the number of licenses required to be applied for can meet the usage requirements for authenticating the data to be authenticated.

[0065] It should be noted that network grouping, operator classification, etc. can be used to distinguish all devices in the communication network where the current device is located, so as to obtain the subnet identifier and group identifier corresponding to the current device; when the current device receives the data to be authenticated and determines that the subnet identifier and group identifier corresponding to the data to be authenticated are the same as the subnet identifier and group identifier corresponding to the current device, an authentication request can be generated based on the number of licenses to be applied for and the subnet identifier and group identifier corresponding to the data to be authenticated; then, the authentication request is sent to the authentication control device so that the authentication control device issues a license for authentication to the current device, thereby improving the accuracy of processing the authentication data.

[0066] In some exemplary embodiments, before executing step S102 of performing authentication based on the configuration information in the data to be authenticated using an authentication method corresponding to the configuration information, the method further includes: matching the data to be authenticated with the attribute information of the current device; and when it is determined that the data to be authenticated matches the attribute information of the current device, determining that the data to be authenticated needs to be authenticated.

[0067] In some exemplary embodiments, the attribute information of the current device includes a device identifier corresponding to the current device and a network identifier of the current device in the network in which the current device is located.

[0068] By matching the data to be authenticated with the attribute information of the current device, the proportion of parameter configuration errors in the current device using the data to be authenticated can be reduced; only when it is determined that the data to be authenticated matches the attribute information of the current device, the data to be authenticated needs to be authenticated, thereby improving the processing accuracy of the data to be authenticated.

[0069] In some exemplary embodiments, the preset license quantity threshold is the quantity of licenses that a single base station is allowed to obtain.

[0070] In the case where the modification information of the network configuration parameters includes the modification information of the key control items, the target license quantity is the number of required licenses for the modified key control items determined by modifying the core configuration parameters within a single base station based on the modification information of the key control items; in the case where the modification information of the network configuration parameters does not include the modification information of the key control items, the target license quantity is the current number of required licenses for the key control items within a single base station.

[0071] Within the scope of a single base station, the acquired data to be authenticated is analyzed. When it is determined that the modification information of the network configuration parameters includes the modification information of the key control items, the core configuration parameters within the single base station are modified according to the modification information of the key control items to obtain the core configuration parameters corresponding to the modified key control items, and based on the core configuration parameters corresponding to the modified key control items, the required number of licenses for the modified key control items is determined; so as to facilitate rapid authentication processing of the key control items and speed up the processing speed of the authentication data.

[0072] When it is determined that the configuration information does not include modification information of key control items, the target license quantity is the current required license quantity for key control items within a single base station. In other words, in the process of authenticating the authentication data, it is only necessary to compare the target license quantity within the range of a single base station with the preset license quantity threshold (the number of licenses allowed to be obtained by a single base station) to determine whether the authentication data is authenticated, thereby improving the authentication efficiency.

[0073] In some exemplary embodiments, the preset license quantity threshold represents the quantity of licenses allowed to be obtained within the communication network managed by the network management device.

[0074] In the case where the modification information of the network configuration parameters includes the modification information of the key control items, the target license quantity is the required license quantity of the modified key control items determined by modifying the core configuration parameters in the communication network under the jurisdiction of the network management device according to the modification information of the key control items; in the case where the modification information of the network configuration parameters does not include the modification information of the key control items, the target license quantity is the current required license quantity of the key control items in the communication network under the jurisdiction of the network management device.

[0075] In some exemplary embodiments, the preset license quantity threshold represents the quantity of licenses that all network element devices in the communication network managed by the network management device are allowed to obtain in common.

[0076] For example, if the preset license quantity threshold is set to 50, and the communication network managed by the network management device includes 5 network element devices, then these 5 network element devices can share the 50 licenses.

[0077] It should be noted that the obtained preset license quantity threshold is shared within the communication network managed by the network management device. However, the processing of shared licenses also authenticates the internal configuration parameters of each base station. Therefore, the target license quantity is determined based on whether the modification information of the network configuration parameters includes modification information of key control items, so that the comparison between the target license quantity and the preset license quantity threshold is changed to determine whether the authentication is passed.

[0078] For example, the data of the license corresponding to a base station can be obtained by the difference between the total number of licenses obtained in the communication network managed by the network management device and the data of the licenses corresponding to other base stations; or the total number of licenses obtained in the communication network managed by the network management device can be determined by the sum of the numbers of licenses corresponding to all base stations.

[0079] Figure 2 shows a flow chart of a data configuration method according to an embodiment of the present application. The data configuration method can be applied to a data configuration device, which can be installed in a base station, a network management device, or a terminal held by an operation and maintenance personnel.

[0080] For example, when the authentication management device is set in the network management equipment, the corresponding data configuration device can be set in the base station; when the authentication management device is set in the authentication control center server, the corresponding data configuration device can be set in the network management equipment; when the authentication management device is set in the OAM module in the base station, the corresponding data configuration device can be set in the terminal held by the operation and maintenance personnel.

[0081] As shown in FIG. 2 , the data configuration method in the embodiment of the present application includes but is not limited to the following steps S201 and S202 .

[0082] In step S201, data to be authenticated is sent to an authentication management device.

[0083] In this embodiment, the data to be authenticated includes configuration information, and the configuration information includes modification information of network configuration parameters.

[0084] In step S202, based on the authentication result of the data to be authenticated obtained by the authentication management apparatus, it is determined to configure the device using the configuration information in the data to be authenticated.

[0085] In this embodiment, determining whether to configure the device using the configuration information in the data to be authenticated can be to configure the base station (for example, to configure the overall configuration parameters of the base station, etc.), or to configure the data processing module inside the base station (for example, to configure the service data parameters in the data processing module, etc.).

[0086] In this embodiment, by sending the data to be authenticated to the authentication management device, the data to be authenticated includes configuration information, and the configuration information includes modification information of network configuration parameters, so that the authentication management device can obtain the modification information of the network configuration parameters, and clarify the data that needs to be authenticated in the data to be authenticated, so that the authentication management device can selectively use the authentication method corresponding to the configuration information for authentication, thereby reducing the authentication time of the data to be authenticated and effectively improving the authentication efficiency; further, based on the authentication result of the authentication management device on the data to be authenticated, it is determined to use the data to be authenticated to configure the device, which can improve the configuration effectiveness of the device and improve the operation and maintenance efficiency of the device.

[0087] The following describes in detail the device according to the embodiment of the present application in conjunction with the accompanying drawings. Figure 3 shows a block diagram of the authentication device provided by the embodiment of the present application. As shown in Figure 3, the authentication device 300 includes but is not limited to an analysis module 301 and an authentication module 302.

[0088] The analysis module 301 is configured to analyze the acquired data to be authenticated and determine configuration information in the data to be authenticated, where the configuration information includes modification information of network configuration parameters.

[0089] The authentication module 302 is configured to perform authentication based on the configuration information in the data to be authenticated and using an authentication method corresponding to the configuration information.

[0090] It should be noted that the authentication device 300 in this embodiment can implement any authentication method in the embodiments of the present application.

[0091] According to the authentication device of the embodiment of the present application, the acquired data to be authenticated is analyzed by the analysis module to determine the configuration information in the data to be authenticated, where the configuration information includes the modification information of the network configuration parameters, so as to facilitate the acquisition of the modification information of the network configuration parameters and clarify the data to be authenticated that needs to be authenticated; the authentication module is used to perform authentication based on the configuration information in the data to be authenticated using the authentication method corresponding to the configuration information, and the authentication method corresponding to the configuration information can be selectively used for authentication, thereby reducing the authentication time of the data to be authenticated and effectively improving the authentication efficiency.

[0092] Figure 4 shows a block diagram of a data configuration device according to an embodiment of the present application. As shown in Figure 4 , the data configuration device 400 includes but is not limited to the following modules.

[0093] The sending module 401 is configured to send data to be authenticated to the authentication management device, wherein the data to be authenticated includes configuration information, and the configuration information includes modification information of network configuration parameters.

[0094] The determination module 402 is configured to determine, based on the authentication result of the authentication management device obtained on the data to be authenticated, to use the configuration information in the data to be authenticated to configure the device.

[0095] It should be noted that the data configuration device 400 in this embodiment can implement any data configuration method in the embodiments of the present application.

[0096] According to the data configuration device of the embodiment of the present application, the data to be authenticated is sent to the authentication management device through the sending module. The data to be authenticated includes configuration information, and the configuration information includes modification information of network configuration parameters, so that the authentication management device can obtain the modification information of the network configuration parameters, and clarify the data that needs to be authenticated in the data to be authenticated, so that the authentication management device can selectively use the authentication method corresponding to the configuration information for authentication, reduce the authentication time of the data to be authenticated, and effectively improve the authentication efficiency; further, the determination module is used to determine the use of the data to be authenticated to configure the device based on the authentication result of the authentication management device for the data to be authenticated, which can improve the configuration effectiveness of the device and improve the operation and maintenance efficiency of the device.

[0097] Figure 5 shows a block diagram of the authentication system provided by an embodiment of the present application. As shown in Figure 5, the authentication system includes a base station 510, a network management device 520 and an authentication control center server 530 that are in communication connection.

[0098] The base station 510 includes a communication connection operation administration and maintenance (OAM) module 511 and a license processing module 512 ; the network management device 520 includes a communication connection configuration management module 521 , a license management module 522 and a license center module 523 .

[0099] The authentication control center server 530 is configured to review and approve the license applied for by the network management device 520 or the base station 510 and / or issue the license.

[0100] The configuration management module 521 is configured to perform configuration management on information such as parameters of various modules within the base station 510 and support batch modification and activation of various parameters.

[0101] The license management module 522 is configured to receive an authentication request and authenticate the data to be authenticated in the authentication request; query the information of all site licenses stored in the base station 510 and export data reports; and support the import and loading of site license files.

[0102] The data to be authenticated includes configuration information, including modifications to network configuration parameters. A site license is used only by base station 510 and cannot be shared with other network elements. For example, a site license can be represented by a file; for example, a site license file defines the license authorization for base station 510, and can be managed by loading the site license file onto base station 510.

[0103] License Center Module 523 is configured to centrally manage shared licenses in base station 510. It supports importing shared license files from multiple network elements and manages and controls shared licenses by parsing and managing shared license files. License Center Module 523 is also used to query shared license information (e.g., the number of authorized and used licenses) and export it as a data report.

[0104] A shared license is a license that can be shared among multiple network element devices. This shared license is allocated and authorized by the authentication control center server 530 based on the total number of licenses in the communication network where the base station 510 is located. For example, a shared license can be represented in the form of a file; for example, a shared license file can store multiple shared licenses, and each shared license can be allocated and shared among multiple network element devices.

[0105] The OAM module 511 is configured to provide an external interface related to the operation and maintenance data in the base station 510; when receiving configuration information issued by the network management device 520, the OAM module 511 authenticates the key control items or non-key control items corresponding to the configuration information by calling the license processing module 512, and determines whether to allow the modification information of the network configuration parameters in the configuration information to take effect in the base station 510 based on the authentication result.

[0106] The license processing module 512 is configured to manage the site license file, parse the site license file to obtain the parsed data; authenticate the data to be authenticated in the authentication request, determine the authentication result, and feed the authentication result back to the OAM module 511.

[0107] In some implementations, the license processing module 512 is further configured to store multiple licenses, key control items (or non-key control items) corresponding to the licenses, and authentication scopes corresponding to each license.

[0108] Key control items can be pre-set licensing items that determine software revenue and impact basic service functionality within a communication network. Key control items correspond to multiple core configuration parameters, while non-key control items correspond to multiple other configuration parameters, which are parameters other than the core configuration parameters.

[0109] For example, the key control items correspond to multiple core configuration parameters including at least one of the number of communication cells, the number of carriers, frequency band information (eg, the frequency range of the frequency band, etc.), and energy-saving parameters.

[0110] For key control items, full authentication can be used to authenticate the key control items; in other words, when it is determined that the data to be authenticated includes the key control items, all data in the data to be authenticated are authenticated.

[0111] When the target license quantity is greater than the preset license quantity threshold, and the modification information of the key control item is not satisfied for reducing the required license quantity of the modified key control item, no key control item is allowed to be modified, and the authentication is determined to be failed at this time; it is necessary to apply for more licenses from the authentication control center server 530 before continuing to authenticate the authentication data.

[0112] If the target license quantity is greater than a preset license quantity threshold, and the modified information for the key control item is used to reduce the required license quantity for the modified key control item, authentication for the key control item is determined to be successful. In this case, authentication for the key control item is determined to be successful, and the modification requirement for the key control item can be satisfied without applying for additional licenses. Furthermore, license quantity can be recycled to reduce license resource waste.

[0113] When the target license quantity is less than or equal to the preset license quantity threshold, determining that the authentication of the key control item is passed can speed up the processing speed of the key control item.

[0114] If it is determined that the configuration information includes modification information of non-critical control items, authentication can be performed in the following manner:

[0115] If it is determined that the modification information of the non-critical control item is not related to the number of licenses, the authentication step is skipped; if it is determined that the modification information of the non-critical control item is related to the number of licenses, the target number of licenses is determined; if the target number of licenses is less than or equal to the preset license number threshold, it is determined that the authentication of the non-critical control item is passed; if the target number of licenses is greater than the preset license number threshold, it is determined that the authentication is failed.

[0116] The target license quantity is the required license quantity of the non-critical control item after modification according to the modification information of the non-critical control item.

[0117] By combining incremental authentication and full authentication, the processing time of authentication data can be reduced and the operation and maintenance efficiency of the communication network can be improved.

[0118] It should be noted that when the base station 510 modifies the configuration parameters, each network element device only needs to request the required license quantity corresponding to the configuration parameter modification when applying for a license from the license center module 523 in the network management device 520 based on the number of shared licenses required.

[0119] License center module 523 authenticates base station 510 based on the order of the license application messages received. If authentication is successful, the modified network configuration parameters in the data to be authenticated are enabled on base station 510. If authentication is unsuccessful, the modified network configuration parameters in the data to be authenticated are not enabled on base station 510.

[0120] Figure 6 shows a schematic diagram of the interaction process between various devices in the authentication system provided by an embodiment of the present application. As shown in Figure 6, the interaction process between various devices in the authentication system includes but is not limited to the following steps S601 to S611.

[0121] In step S601 , the configuration management module 521 in the network management device 520 sends a configuration request to the base station 510 .

[0122] In step S602, after receiving the configuration request, the operation and maintenance management module 511 in the base station 510 verifies the configuration information in the configuration request to determine whether the configuration information meets the usage requirements of the base station 510. Verifying the configuration information is to verify the relationship between the configuration information and the corresponding data service.

[0123] In step S603, if it is determined that the configuration information meets the usage requirements of the base station 510, the operation and maintenance management module 511 sends an authentication request to the license processing module 512. The authentication request includes data to be authenticated, which includes modification information of network configuration parameters.

[0124] In step S604, the license processing module 512 calculates the usage of the license acquired by the base station 510 and authenticates the data to be authenticated in the authentication request.

[0125] The license processing module 512 confirms the license usage amount obtained in the base station 510 to determine whether the license usage amount obtained in the base station 510 can meet the license quantity corresponding to the modification information of the network configuration parameters.

[0126] If it is determined that the license usage amount obtained in the base station 510 can meet the license quantity corresponding to the modification information of the network configuration parameters, it is determined that the authentication is successful; otherwise, it is determined that the authentication is unsuccessful.

[0127] Among them, authentication can be performed using incremental authentication or full authentication.

[0128] For example, for a key control item, the base station 510 first determines the target license quantity; when the target license quantity is less than or equal to the preset license quantity threshold, it determines that the authentication of the key control item is passed; when the target license quantity is greater than the preset license quantity threshold, and the modification information of the key control item is used to reduce the required license quantity of the modified key control item, it determines that the authentication of the key control item is passed; when the target license quantity is greater than the preset license quantity threshold, and the modification information of the key control item is not used to reduce the required license quantity of the modified key control item, it determines that the authentication fails.

[0129] Among them, when the modification information of the network configuration parameters includes the modification information of the key control items, the target license quantity is the required license quantity of the modified key control items determined according to the modification information of the key control items; when the modification information of the network configuration parameters does not include the modification information of the key control items, the target license quantity is the current required license quantity of the key control items.

[0130] When it is determined that the modification information of the network configuration parameters includes the modification information of non-critical control items, the base station 510 skips the authentication step when it is determined that the modification information of the non-critical control items is not related to the number of licenses; when it is determined that the modification information of the non-critical control items is related to the number of licenses, the target number of licenses is determined; when the target number of licenses is less than or equal to the preset license number threshold, it is determined that the authentication of the non-critical control items is passed; when the target number of licenses is greater than the preset license number threshold, it is determined that the authentication is failed.

[0131] The target license quantity is the required license quantity of the non-critical control item after modification according to the modification information of the non-critical control item.

[0132] In step S605 , the license processing module 512 also calculates the usage of the shared licenses corresponding to all network element devices in the communication network where the base station 510 is located, as well as the usage of the shared license obtained by the base station 510 .

[0133] If it is determined that the usage of the shared license obtained by the base station 510 cannot meet the license quantity corresponding to the modification information of the network configuration parameters, the license processing module 512 executes step S606.

[0134] In step S606 , the license processing module 512 applies for a shared license from the license management module 522 in the network management device 520 .

[0135] In step S607 , the license management module 522 in the network management device 520 processes the received request for applying for a shared license.

[0136] Among them, the license management module 522 in the network management device 520 matches the data to be authenticated with the attribute information of the base station 510, and when it is determined that the data to be authenticated matches the attribute information of the base station 510, it determines that the data to be authenticated needs to be authenticated, and issues a license for authentication to the base station 510.

[0137] In step S608 , when the license management module 522 in the network management device 520 determines that the usage of the currently acquired license cannot meet the usage demand, the license management module 522 applies to the license center module 523 for a shared license.

[0138] In step S609, the license center module 523 authenticates the received request for obtaining a shared license.

[0139] For example, the license center module 523 applies for a license for authentication from the authentication control center server 530 and determines an authentication result of the authentication data (eg, an application result for a shared license) based on an authentication response fed back by the authentication control center server 530 .

[0140] In step S610, the license center module 523 feeds back the application result of the shared license it has determined to the license management module 522, which then feeds back the application result of the shared license to the license processing module 512 in the base station 510; further, the license processing module 512 determines an authentication result based on the obtained application result of the shared license, and feeds back the authentication result to the configuration management module 521.

[0141] Among them, the above steps S603 to S610 constitute the entire authentication process.

[0142] In step S611 , the configuration management module 521 determines whether the modification information of the network configuration parameters in the base station 510 by the network management device 520 is effective based on the obtained authentication result, and returns a configuration response to the configuration management module 521 in the network management device 520 .

[0143] Based on the interaction process between various devices in the authentication system, the corresponding authentication method may include the authentication method shown in Figure 7. Figure 7 shows a schematic flow chart of the authentication method provided by an embodiment of the present application. As shown in Figure 7, the authentication method includes but is not limited to the following steps S701 to S713.

[0144] In step S701, the base station 510 obtains an authentication request including data to be authenticated, analyzes the data to be authenticated, and obtains configuration information in the data to be authenticated.

[0145] The authentication request may be sent by the operation and maintenance management module 511 in the base station 510, or may be sent by the network management device 520 to the base station 510. The configuration information includes network configuration parameter modification information. This network configuration parameter modification information includes single-station configuration parameter modification information for the base station 510 and / or configuration parameter modification information for all base stations within the network management device 520's jurisdiction.

[0146] In some embodiments, the authentication request may also be a request by the operation and maintenance personnel to modify the single-station configuration parameters of the base station 510 using the LMT; the authentication request may also be a request by the operation and maintenance personnel to modify the configuration parameters of the base station 510 by calling the preset application interface provided by the base station 510 using a third-party tool.

[0147] In step S702 , it is determined whether the data to be authenticated involves information of a license in the base station 510 .

[0148] If it is determined that the information is related to the license in the base station 510, step S703 is executed; otherwise, step S705 is executed.

[0149] In step S703 , the license processing module 512 authenticates the data to be authenticated within the base station 510 .

[0150] Among them, the preset license quantity threshold is the number of licenses allowed to be obtained by a single base station; when it is determined that the modification information of the network configuration parameters includes the modification information of the key control items, the target license quantity is the required number of licenses for the modified key control items determined in a single base station based on the modification information of the key control items; when it is determined that the modification information of the network configuration parameters does not include the modification information of the key control items, the target license quantity is the current required number of licenses for the key control items in a single base station.

[0151] Among them, the key control items correspond to multiple core configuration parameters; the non-key control items correspond to multiple other configuration parameters, and the multiple other configuration parameters are parameters other than the multiple core configuration parameters.

[0152] For example, the key control items correspond to multiple core configuration parameters including at least one of the number of communication cells, the number of carriers, frequency band information (eg, the frequency range of the frequency band, etc.), and energy-saving parameters.

[0153] In some embodiments, authentication for the key control item may be performed in the following manner: determining a target license quantity; determining that authentication for the key control item is successful when the target license quantity is less than or equal to a preset license quantity threshold;

[0154] When the target license quantity is greater than the preset license quantity threshold and the modification information of the key control item is used to reduce the required license quantity of the modified key control item, it is determined that the authentication of the key control item is passed; when the target license quantity is greater than the preset license quantity threshold and the modification information of the key control item is not used to reduce the required license quantity of the modified key control item, it is determined that the authentication is failed.

[0155] Among them, when the configuration information includes modification information of the key control item, the target license quantity is the required license quantity of the modified key control item determined based on the modification information of the key control item; when the configuration information does not include modification information of the key control item, the target license quantity is the current required license quantity of the key control item.

[0156] In some implementations, for non-critical control items, authentication may be performed in the following manner: if it is determined that the modification information for the non-critical control item is not related to the number of licenses, the authentication step is skipped;

[0157] When it is determined that the modification information of the non-critical control item is related to the number of licenses, the target number of licenses is determined; when the target number of licenses is less than or equal to the preset license number threshold, it is determined that the authentication of the non-critical control item is passed; when the target number of licenses is greater than the preset license number threshold, it is determined that the authentication is failed.

[0158] The target license quantity is the required license quantity of the non-critical control item after modification according to the modification information of the non-critical control item.

[0159] In step S704, it is determined whether the base station 510 has successfully authenticated the configuration information in the authentication data.

[0160] If the authentication is successful, execute step S705; otherwise, execute step S713.

[0161] In step S705 , the license processing module 512 calculates the usage of the shared license corresponding to all network element devices in the communication network where the base station 510 is located.

[0162] It should be noted that the license processing module 512 will also determine the number of required licenses for the modified non-critical control items based on the modification information of the non-critical control items, and / or determine the number of required licenses for the modified critical control items based on the modification information of the critical control items, and determine the calculated number of required licenses for the modified critical control items (or non-critical control items) as the target license number.

[0163] In the case that the configuration information does not include modification information of the key control item, the target license quantity is the current required license quantity of the key control item.

[0164] In step S706 , it is determined whether the number of shared licenses acquired by the base station 510 is the same as a preset license quantity threshold.

[0165] If it is determined that the number of shared licenses acquired by the base station 510 is the same as the preset license quantity threshold, step S707 is executed; if it is determined that the number of shared licenses acquired by the base station 510 is different from the preset license quantity threshold, step S708 is executed.

[0166] In step S707 , it is determined whether each network element device has applied for a shared license based on the number of shared licenses acquired by the base station 510 .

[0167] If it is determined that the number of shared licenses obtained by a certain network element device is zero, it is determined that the network element device has not applied for a shared license, and step S712 is executed; if it is determined that the number of shared licenses obtained by a certain network element device is not zero, it is determined that the network element device has applied for a shared license, and step S708 is executed.

[0168] The judgment in step S707 is performed on all network element devices in the communication network where the base station 510 is located, so as to determine whether each network element device has applied for a shared license.

[0169] In step S708 , the license processing module 512 applies for a shared license from the network management device 520 , wherein the number of shared licenses applied for includes the number of licenses corresponding to all critical control items and the number of licenses corresponding to non-critical control items.

[0170] The number of licenses corresponding to all key control items is the number of licenses in the case of full authentication; the number of licenses corresponding to non-key control items is the number of licenses in the case of incremental authentication.

[0171] In step S709 , the license management module 522 in the network management device 520 matches the data to be authenticated with the attribute information of the base station 510 , and if it is determined that the data to be authenticated matches the attribute information of the base station 510 , determines that the data to be authenticated needs to be authenticated.

[0172] The attribute information of the base station 510 includes the device identifier corresponding to the current device and the network identifier of the current device in the network in which it is located.

[0173] It should be noted that the license management module 522 can use network grouping, operator classification, etc. to authorize all shared licenses in the communication network where the base station 510 is located. Therefore, the license management module 522 needs to match the data to be authenticated with the attribute information of the base station 510 so that the data to be authenticated can match the attribute information of the base station 510, so as to determine that the data to be authenticated obtained by the base station 510 needs to be authenticated.

[0174] In step S710, when the license management module 522 in the network management device 520 determines that the target license quantity is greater than the preset license quantity threshold, the license management module 522 applies to the license center module 523 (or the authentication control center server 530) for a shared license.

[0175] The fact that the target license quantity is greater than the preset license quantity threshold indicates that the usage of the license currently acquired by the license management module 522 cannot meet the usage requirement of the license for authenticating the authentication data.

[0176] In step S711, it is determined whether the authentication data has been authenticated.

[0177] If it is determined that the authentication data has been authenticated, execute step S712; otherwise, execute step S713.

[0178] In step S712, it is determined that the authentication data has been authenticated, and an authentication success response is returned.

[0179] In step S713, it is determined that the authentication of the data to be authenticated fails, and an authentication failure response is returned.

[0180] In this embodiment, the acquired data to be authenticated is analyzed to determine configuration information in the data to be authenticated, the configuration information including modification information of network configuration parameters, so as to obtain modification information of network configuration parameters and clarify the data to be authenticated that needs to be authenticated; according to the configuration information in the data to be authenticated, authentication is performed using an authentication method corresponding to the configuration information, and the authentication method corresponding to the configuration information can be selectively used for authentication, for example, full authentication and / or incremental authentication can be selectively used to authenticate the data to be authenticated, thereby reducing the authentication time of the data to be authenticated and effectively improving the authentication efficiency.

[0181] In some implementations, license authentication is performed in a network element device supporting the fifth generation mobile communication technology (5G). Table 1 shows license information for a 5G network element device.

[0182] Table 1 License information for 5G network element devices

[0183] The license information includes information for controlling the number of licenses, such as different control parameters defined in a JSON (JavaScript Object Notation) file. Each piece of license information can be represented by the following code, i.e., defined in a .json file as follows:

[0184] Where "funcId" represents the control item number in Table 1;

[0185] "type" indicates the data type, for example, "number" indicates that the data type is a number;

[0186] "defaultvalue" indicates the default value of the setting;

[0187] "en_name" indicates the English name; "zh_name" indicates the Chinese name;

[0188] "is_shared" indicates whether the license type corresponding to the authentication scope of the data to be authenticated is a shared license. True indicates "yes", and false indicates "no";

[0189] "is_key" indicates whether the information type corresponding to the data to be authenticated is a key control type;

[0190] "en_decription" indicates English explanation; "zh_decription" indicates Chinese explanation;

[0191] "mo" represents a managed object (MO), which can be represented by an application scenario processing function corresponding to a control item.

[0192] For example, NRPhysicalCellDU.NRCarrier.AntConfig.dlAntNum represents the configuration scenario of the number of antennas of the carrier in the physical cell of the new radio (NR) applied by the control item; NRPhysicalCellDU.duplexMode represents the configuration scenario of the duplex mode in the physical cell of NR applied by the control item, etc.; AAUPowerSaving represents the power saving scenario of AAU; ReplaceableUnit.hwWorkScence represents the working scenario in the replaceable unit; ReplaceableUnit.hwFunction represents the function configuration scenario in the replaceable unit; CarrierESPolicy.autoStartStopNRSwitch represents the starting switch configuration scenario in the carrier priority configuration scenario; CarrierESPolicy.carrierShutdownIRatSwitch represents the stop switch configuration scenario in the carrier priority configuration scenario, etc.

[0193] It should be noted that, in the application scenario where the base station 510 is powered on, the base station 510 needs to perform full configuration verification and license authentication on the data within the base station site.

[0194] When the base station 510 is powered on to load configuration data, the base station 510 needs to first ensure that the power-on is successful; then, when it is determined that the base station 510 is powered on successfully, the site license is verified; when it is determined that the site license verification fails, the base station 510 will generate an alarm message and report the alarm message to the terminal held by the operation and maintenance personnel, so that the operation and maintenance personnel can update the license file stored in the base station 510 based on the alarm information to ensure that the base station 510 no longer has abnormal alarms.

[0195] For shared licenses, when the base station 510 loads configuration data, the base station 510 needs to calculate the required number of shared licenses (config Value) and the number of shared licenses obtained (granted Value) so as to subsequently authenticate the shared license based on the above two numbers.

[0196] In some implementations, base station 510 may not have saved the data to disk or replaced a single board. In this case, network management device 520 can calculate the change in the shared license and perform network-wide calibration to improve the accuracy of the calculation of the change in the shared license. Network management device 520 stores the number of shared licenses granted (granted value) for multiple base stations and multiple control items.

[0197] For the control items corresponding to the four license information shown in Table 1, the authentication method provided by this application is implemented based on the flowchart of the authentication method shown in Figure 8. Figure 8 shows a flowchart of the authentication method provided by an embodiment of this application. As shown in Figure 8, the authentication method includes but is not limited to the following steps S801 to S813.

[0198] In step S801, the base station 510 obtains an authentication request including data to be authenticated, analyzes the data to be authenticated, and obtains configuration information in the data to be authenticated.

[0199] The configuration information includes modification information of network configuration parameters, including modification information of single-station configuration parameters for base station 510 and / or modification information of configuration parameters of all base stations within the jurisdiction of network management device 520.

[0200] In step S802, based on the definition in the .json file, it is determined whether this parameter modification involves NR_GNB_F001 and NR_GNB_F002.

[0201] If it is determined that NR_GNB_F001 is involved, execute step S803; otherwise, execute step S805.

[0202] In step S803, when it is determined that only NR_GNB_F001 is involved, the usage of the license corresponding to NR_GNB_F001 is calculated and authentication is performed.

[0203] Since the data to be authenticated in NR_GNB_F001 includes a key control item (i.e., the number of NR cells), the key control item corresponds to multiple core configuration parameters. For example, the key control item corresponds to multiple core configuration parameters including at least one of the number of communication cells, the number of carriers, frequency band information (e.g., the frequency range of the frequency band, etc.), and energy-saving parameters.

[0204] The authentication scope of the data to be authenticated is within the base station 510 (that is, the license type corresponding to the authentication scope of the data to be authenticated is a site license). Therefore, the base station 510 needs to authenticate the data to be authenticated based on the number of site licenses it has obtained (that is, there is no need to calculate the number of shared licenses across the entire network).

[0205] For example, a target license quantity is determined; when the target license quantity is less than or equal to a preset license quantity threshold, it is determined that the authentication of the key control item is passed.

[0206] Among them, when the modification information of the network configuration parameters includes the modification information of the key control items, the target license quantity is the number of required licenses for the modified key control items determined by modifying the core configuration parameters in a single base station according to the modification information of the key control items; when the modification information of the network configuration parameters does not include the modification information of the key control items, the target license quantity is the current number of required licenses for the key control items in a single base station.

[0207] In step S804, it is determined whether the authentication data has been authenticated.

[0208] If it is determined that the authentication data has been authenticated, step S805 is executed; otherwise, step S813 is executed.

[0209] In step S805, the license processing module 512 calculates the number of shared licenses required by NR_F001 and NR_F002.

[0210] In some implementations, the license processing module 512 may further generate a shared license request message based on the calculated number of shared licenses required by NR_F001 and NR_F002, the control item identifier, and the Public Land Mobile Network (PLMN) identifier corresponding to the control item, and send the shared license request message to the network management device 520 so that the network management device 520 can verify the number of shared licenses obtained.

[0211] In step S806, it is determined whether the number of shared licenses required by NR_F001 and NR_F002 is the same as the number of acquired licenses.

[0212] The number of licenses obtained may be set as a preset license quantity threshold.

[0213] If it is determined that the number of shared licenses required by NR_F001 and NR_F002 is the same as the preset license quantity threshold, step S807 is executed; if it is determined that the number of shared licenses required by NR_F001 and NR_F002 is different from the preset license quantity threshold, step S808 is executed.

[0214] In step S807, it is determined whether the number of shared licenses acquired by NR_F001 is zero.

[0215] If it is determined that the number of shared licenses obtained by NR_F001 is zero, it is determined that NR_F001 has not applied for a shared license, and step S712 is executed; if it is determined that the number of shared licenses obtained by NR_F001 is not zero, it is determined that NR_F001 has applied for a shared license, and step S808 is executed.

[0216] In step S808, if it is determined that the number of shared licenses acquired by NR_F001 is not zero and the number of shared licenses required by NR_F002 is the same as the preset license quantity threshold, a request for applying for a license is sent to the network management device 520, and the request for applying for a license includes the number of shared licenses required by NR_F001.

[0217] For example, the request for applying for a license includes information such as NR_F001, the PLMN identifier corresponding to the carrier software package, the number of shared licenses required by NR_F001 (config Value), and the number of shared licenses already obtained (granted Value).

[0218] In step S809, the license management module 522 in the network management device 520 matches the data to be authenticated corresponding to NR_F001 with the attribute information of the network element device executing NR_F001, and when it is determined that the data to be authenticated matches the attribute information of the network element device executing NR_F001, it is determined that the data to be authenticated needs to be authenticated.

[0219] In some embodiments, the license management module 522 can also process the authentication data. For example, the license management module 522 calculates the group to which NR_F001 belongs based on the information in the shared license file stored by itself, and determines its corresponding group identifier based on the subnet identifier; then, based on the information in the shared license file, it determines the operator information to which NR_F001 belongs and the number of changes in the license required by NR_F001.

[0220] The information in the shared license file includes multiple groups, subnet information corresponding to each group (such as subnet identification, etc.), control item information corresponding to each group, the number of license authorizations of the operator, and the number of license authorizations supported in network sharing scenarios.

[0221] The license change quantity required by NR_F001 can be calculated based on the difference between the config value and the granted value.

[0222] In step S810, when the license management module 522 in the network management device 520 determines that the target license quantity is greater than the preset license quantity threshold, the license management module 522 applies to the license center module 523 (or the authentication control center server 530) to obtain the number of shared licenses required by NR_F001.

[0223] The fact that the target license quantity is greater than the preset license quantity threshold indicates that the usage of the license currently acquired by the license management module 522 cannot meet the usage requirement of the license for authenticating the authentication data.

[0224] License management module 522 sends a request to license center module 523 (or authentication control center server 530) to obtain a shared license. The request includes a control item identifier (e.g., NR_F001), a group identifier, a PLMN identifier, and the number of changes to the shared license. If authentication is complete, license center module 523 (or authentication control center server 530) feeds back the authentication result to license management module 522, which then forwards the authentication result to base station 510.

[0225] In step S811, determine whether the authentication of the data to be authenticated corresponding to NR_F001 is successful.

[0226] If it is determined that the authentication data has been authenticated, execute step S812; otherwise, execute step S813.

[0227] In step S812, it is determined that the authentication data has been authenticated and an authentication success response is returned.

[0228] In step S813, it is determined that the authentication of the data to be authenticated fails, and an authentication failure response is returned.

[0229] In this embodiment, through the above-mentioned processing, different authentication methods can be selectively used to authenticate different data to be authenticated, thereby reducing the authentication time of the data to be authenticated. For example, the activation time of the network operation and maintenance configuration parameters in the data to be authenticated is reduced from the original hour level to the minute level (for example, when performing batch configuration of network operation and maintenance configuration parameters for 3,000 network element devices, the activation time of the network operation and maintenance configuration parameters can be reduced from the original 1 hour to less than 30 minutes), which can effectively improve the authentication efficiency and the processing efficiency of parameter configuration.

[0230] It should be understood that the present application is not limited to the specific configurations and processes described in the above embodiments and illustrated in the figures. For the sake of convenience and brevity, detailed descriptions of known methods are omitted here. The specific working processes of the systems, modules, and units described above can be referred to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0231] FIG9 shows a block diagram of the components of a computing device provided in an embodiment of the present application.

[0232] As shown in Figure 9, computing device 900 includes an input device 901, an input interface 902, a central processing unit 903, a memory 904, an output interface 905, and an output device 906. The input interface 902, the central processing unit 903, the memory 904, and the output interface 905 are interconnected via a bus 907. The input device 901 and the output device 906 are connected to the bus 907 via the input interface 902 and the output interface 905, respectively, and are further connected to other components of the computing device 900.

[0233] The input device 901 receives input information from the outside and transmits the input information to the central processing unit 903 through the input interface 902; the central processing unit 903 processes the input information based on the computer-executable instructions stored in the memory 904 to generate output information, stores the output information temporarily or permanently in the memory 904, and then transmits the output information to the output device 906 through the output interface 905; the output device 906 outputs the output information to the outside of the computing device 900 for user use.

[0234] In one embodiment, the computing device shown in Figure 9 can be implemented as an electronic device, which may include: a memory configured to store a program; and a processor configured to run the program stored in the memory to execute the authentication method or data configuration method described in the above embodiment.

[0235] In one embodiment, the computing device shown in Figure 9 can be implemented as an authentication system, which may include: a memory configured to store a program; and a processor configured to run the program stored in the memory to execute the authentication method or data configuration method described in the above embodiment.

[0236] The foregoing is merely an exemplary embodiment of the present application and is not intended to limit the scope of protection of the present application. Generally speaking, various embodiments of the present application can be implemented in hardware or dedicated circuits, software, logic, or any combination thereof. For example, some aspects can be implemented in hardware, while other aspects can be implemented in firmware or software that can be executed by a controller, microprocessor, or other computing device, although the present application is not limited thereto.

[0237] Embodiments of the present application may be implemented by a processor executing computer program instructions, for example, in a processor entity, or by hardware, or by a combination of software and hardware. The computer program instructions may be assembly instructions, instruction set architecture (ISA) instructions, machine instructions, machine-dependent instructions, microcode, firmware instructions, state setting data, or source code or object code written in any combination of one or more programming languages.

[0238] The block diagram of any logical flow in the accompanying drawings of the present application can represent program steps, or can represent interconnected logical circuits, modules and functions, or can represent a combination of program steps and logical circuits, modules and functions. The computer program can be stored on a memory. The memory can have any type suitable for the local technical environment and can be implemented using any suitable data storage technology, such as but not limited to read-only memory (ROM), random access memory (RAM), optical storage device and system (digital versatile disc DVD or CD optical disc) etc. The computer readable medium may include non-transient storage media. The processor can be any type suitable for the local technical environment, such as but not limited to a general-purpose computer, a special-purpose computer, a microprocessor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a programmable logic device (FPGA) and a processor based on a multi-core processor architecture.

[0239] The above description of exemplary embodiments of the present application has been provided by way of exemplary and non-limiting examples. However, various modifications and adaptations of the above embodiments will be apparent to those skilled in the art, when considered in conjunction with the accompanying drawings and the appended claims, without departing from the scope of the present application. Therefore, the proper scope of the present application will be determined by reference to the appended claims.

Claims

1. An authentication method, comprising: Analyze the acquired data to be authenticated to determine configuration information in the data to be authenticated, wherein the configuration information includes modification information of network configuration parameters; According to the configuration information in the data to be authenticated, authentication is performed using an authentication method corresponding to the configuration information.

2. The method according to claim 1, wherein: The step of performing authentication according to the configuration information in the data to be authenticated using an authentication method corresponding to the configuration information includes: Determining a control item type included in the modification information of the network configuration parameter, the control item type including a critical control item and a non-critical control item; Authentication is performed based on the control item type using an authentication method corresponding to the configuration information.

3. The method according to claim 2, wherein: The performing authentication based on the control item type and using an authentication method corresponding to the configuration information includes: Authenticating the key control item using a first authentication method, where the key control item corresponds to a plurality of core configuration parameters; When it is determined that the modification information of the network configuration parameters includes the modification information of the non-critical control items, a second authentication method is used to authenticate the non-critical control items, and the non-critical control items correspond to multiple other configuration parameters, and the multiple other configuration parameters are parameters other than the multiple core configuration parameters.

4. The method according to claim 3, wherein: The adopting the first authentication method to authenticate the key control item includes: Determine target license quantity; When the target license quantity is less than or equal to a preset license quantity threshold, determining that the authentication of the key control item is passed; In a case where the target license quantity is greater than the preset license quantity threshold, and the modification information of the key control item is used to reduce the required license quantity of the modified key control item, determining that the authentication of the key control item is passed; When the target license quantity is greater than the preset license quantity threshold and the modification information of the key control item is not used to reduce the required license quantity of the modified key control item, it is determined that the authentication of the key control item fails.

5. The method according to claim 4, wherein: The step of determining the target license quantity includes: In the case where the modification information of the network configuration parameters includes the modification information of the key control item, the target license quantity is the required license quantity of the modified key control item determined by modifying the modification information of the key control item; In the case that the modification information of the network configuration parameters does not include the modification information of the key control item, the target license quantity is the current required license quantity of the key control item.

6. The method according to claim 3, wherein: The adopting the second authentication method to authenticate the non-critical control item includes: If it is determined that the modification information of the non-critical control item is irrelevant to the number of licenses, skipping the authentication step; In the case where it is determined that the modification information of the non-critical control item is related to the number of the licenses, determining a target number of licenses, the target number of licenses being the required number of licenses for the non-critical control item after modification according to the modification information of the non-critical control item; When the target license quantity is less than or equal to a preset license quantity threshold, determining that the authentication of the non-critical control item is passed; When the target license quantity is greater than a preset license quantity threshold, it is determined that the authentication of the non-critical control item fails.

7. The method according to any one of claims 4 to 6, wherein: When the target license quantity is greater than the preset license quantity threshold, the method further includes: Apply to the authentication control device for a license for authentication.

8. The method according to claim 7, wherein: Before applying to the authentication control device for a license for authentication, the method further includes: Determine the subnet identifier and group identifier corresponding to the data to be authenticated; Determine the number of licenses to be applied for based on the number of licenses currently acquired by the device and the target number of licenses; and, Wherein, applying to the authentication control device for a license for authentication includes: Generate an authentication request according to the number of licenses to be applied for, and the subnet identifier and the group identifier corresponding to the data to be authenticated; The authentication request is sent to the authentication control device.

9. The method according to any one of claims 4 to 6, wherein: The preset license quantity threshold is the number of licenses that a single base station is allowed to obtain; In the case where the modification information of the network configuration parameters includes the modification information of the key control items, the target license quantity is the required license quantity of the modified key control items determined by modifying the core configuration parameters in the single base station according to the modification information of the key control items; In a case where the modification information of the network configuration parameters does not include the modification information of the key control item, the target license quantity is the current required license quantity of the key control item in the single base station.

10. The method according to any one of claims 4 to 6, wherein: The preset license quantity threshold represents the quantity of licenses allowed to be obtained in the communication network governed by the network management device; In the case where the modification information of the network configuration parameters includes the modification information of the key control items, the target license quantity is the required license quantity of the modified key control items determined by modifying the core configuration parameters in the communication network governed by the network management device according to the modification information of the key control items; In the case where the modification information of the network configuration parameters does not include the modification information of the key control item, the target The number of licenses is the number of licenses currently required for the key control item in the communication network managed by the network management device.

11. The method according to claim 1, wherein: Before performing authentication according to the configuration information in the data to be authenticated, using an authentication method corresponding to the configuration information, the method further includes: Matching the data to be authenticated with the attribute information of the current device; When it is determined that the data to be authenticated matches the attribute information of the current device, it is determined that the data to be authenticated needs to be authenticated.

12. A data configuration method, comprising: Sending data to be authenticated to an authentication management device, wherein the data to be authenticated includes configuration information, and the configuration information includes modification information of network configuration parameters; Based on the obtained authentication result of the authentication management device on the data to be authenticated, it is determined to use the configuration information in the data to be authenticated to configure the device.

13. An electronic device, comprising: one or more processors; A memory having one or more programs stored thereon, wherein when the one or more programs are executed by the one or more processors, the one or more processors implement the authentication method as described in any one of claims 1 to 11, or the data configuration method as described in claim 12.

14. A readable storage medium, wherein: The readable storage medium stores a computer program, and when the computer program is executed by a processor, the authentication method according to any one of claims 1 to 11, or the data configuration method according to claim 12 is implemented.

Images