Information processing method and apparatus

Abstract

Disclosed in embodiments of the present disclosure are an information processing method and apparatus. The method comprises: on the basis of routing indicator (RID) data, a first network element determines to request a terminal to perform re-registration and / or re-authentication. By implementing the embodiments of the present disclosure, on the basis of the RID data, the first network element can determine to request the terminal to perform re-registration and / or re-authentication, so that normal communication can be guaranteed.

Description

Information processing method and device thereof Technical Field

[0001] The present disclosure relates to the field of communication technology, and in particular to an information processing method and device thereof. Background Art

[0002] In the core network, a network function (such as AUSF (Authentication Server Function), UDM (Unified Data Management), AAnF (AKMA Anchor Function)) can support multiple routing indicators (RIDs). RIDs can be applied to the AKMA (Authentication and Key Management for Applications) process, the SoR (Steering of Roaming) process, and the UPU (UE parameter update) process.

[0003] Summary of the Invention

[0004] The embodiments of the present disclosure provide an information processing method and an apparatus thereof.

[0005] According to a first aspect of an embodiment of the present disclosure, an information processing method is proposed, including:

[0006] The first network element determines to request the terminal to re-register and / or re-authenticate based on the routing indication RID data.

[0007] According to a second aspect of the embodiments of the present disclosure, an information processing method is proposed, including:

[0008] The terminal receives the updated routing indication RID, triggering re-registration and / or re-authentication.

[0009] According to a third aspect of an embodiment of the present disclosure, a communication system is provided, including:

[0010] A first network element, configured to execute the information processing method according to the first aspect;

[0011] The terminal is configured to execute the information processing method described in the second aspect above.

[0012] According to a fourth aspect of an embodiment of the present disclosure, a first network element is provided, including:

[0013] The processing module is used to determine whether to request the terminal to re-register and / or re-authenticate based on the routing indication RID data.

[0014] According to a fifth aspect of an embodiment of the present disclosure, a terminal is provided, including:

[0015] The processing module is configured to trigger re-registration and / or re-authentication upon receiving an updated routing indication RID.

[0016] According to a sixth aspect of an embodiment of the present disclosure, a communication device is provided, including: one or more processors;

[0017] The processor is used to call instructions to enable the communication device to execute the optional implementation of the first and second aspects mentioned above.

[0018] According to a seventh aspect of an embodiment of the present disclosure, a storage medium is proposed, which stores instructions. When the instructions are executed on a communication device, the communication device executes optional implementation methods of the aforementioned first and second aspects.

[0019] According to the technical solution disclosed in the present invention, the first network element can determine based on the RID data whether the requesting terminal needs to re-register and / or re-authenticate, thereby ensuring normal communication. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] In order to more clearly illustrate the technical solutions in the embodiments of the present disclosure, the following drawings required for describing the embodiments are introduced. The following drawings are merely some embodiments of the present disclosure and do not impose specific limitations on the protection scope of the present disclosure.

[0021] FIG1 is a schematic diagram of the architecture of a communication system provided by an embodiment of the present disclosure;

[0022] FIG2A is an interactive schematic diagram illustrating an information processing method according to an embodiment of the present disclosure;

[0023] FIG2B is an interactive schematic diagram illustrating an information processing method according to an embodiment of the present disclosure;

[0024] FIG3A is a flow chart illustrating an information processing method according to an embodiment of the present disclosure;

[0025] FIG3B is a flow chart of an information processing method according to an embodiment of the present disclosure;

[0026] FIG3C is a flow chart illustrating an information processing method according to an embodiment of the present disclosure;

[0027] FIG4A is a flow chart illustrating an information processing method according to an embodiment of the present disclosure;

[0028] FIG4B is a flow chart illustrating an information processing method according to an embodiment of the present disclosure;

[0029] FIG4C is a flow chart illustrating an information processing method according to an embodiment of the present disclosure;

[0030] FIG5 is an interactive diagram of the information processing method proposed in an embodiment of the present disclosure;

[0031] FIG6 is a schematic diagram of a process of updating UE parameters via a UDM control plane process according to an embodiment of the present disclosure;

[0032] FIG7A is a schematic structural diagram of a first network element proposed in an embodiment of the present disclosure;

[0033] FIG7B is a schematic structural diagram of a terminal proposed in an embodiment of the present disclosure;

[0034] FIG8A is a schematic structural diagram of a communication device 8100 proposed in an embodiment of the present disclosure;

[0035] FIG8B is a schematic structural diagram of a chip 8200 according to an embodiment of the present disclosure. DETAILED DESCRIPTION

[0036] The embodiments of the present disclosure provide an information processing method and an apparatus thereof.

[0037] In a first aspect, an embodiment of the present disclosure provides an information processing method, including:

[0038] The first network element determines to request the terminal to re-register and / or re-authenticate based on the routing indication RID data.

[0039] In the above embodiment, the first network element can determine based on the RID data that the requesting terminal needs to re-register and / or re-authenticate, thereby ensuring normal communication.

[0040] In combination with some embodiments of the first aspect, in some embodiments, the terminal re-registration and / or re-authentication is used to enable at least one of application authentication and key management AKMA, roaming steering SoR and UE parameter update UPU procedures.

[0041] In the above embodiment, at least one of the AKMA process, SoR process and UPU process can be enabled after the terminal is re-registered and / or re-authenticated, thereby ensuring that the RID data can be used in at least one of the AKMA process, SoR process and UPU process.

[0042] In conjunction with some embodiments of the first aspect, in some embodiments, the first network element determines, based on the routing indication RID data, that the terminal is requested to re-register and / or re-authenticate, including:

[0043] The first network element determines to update the RID of the terminal, and the AKMA anchor function AAnF does not support the updated RID;

[0044] The first network element determines to request the terminal to re-register and / or re-authenticate.

[0045] In the above embodiment, when the RID is updated, the first network element determines that AAnF does not support the updated RID, then the first network element may request the terminal to re-register and / or re-authenticate, so that the AKMA process can be enabled after the terminal is re-registered and / or re-authenticated, thereby ensuring that the RID data can be used in the AKMA process, and facilitating the use of the A-KID including the updated RID to discover AAnF to ensure the success of the AKMA process, thereby ensuring normal communication.

[0046] In conjunction with some embodiments of the first aspect, in some embodiments, the first network element determines, based on the routing indication RID data, that the terminal is requested to re-register and / or re-authenticate, including:

[0047] The first network element determines to update the RID of the terminal, and the authentication service function AUSF does not support the updated RID;

[0048] The first network element determines to request the terminal to re-register and / or re-authenticate.

[0049] In the above embodiment, when the RID is updated, the first network element determines that the AUSF does not support the updated RID, then the first network element may request the terminal to re-register and / or re-authenticate. In this way, after the terminal is re-registered and / or re-authenticated, at least one of the AKMA process, SoR process and UPU process may be enabled, thereby ensuring that the RID data can be used in at least one of the AKMA process, SoR process and UPU process, thereby ensuring normal communication.

[0050] In combination with some embodiments of the first aspect, in some embodiments, the AUSF performs identity authentication on the terminal and / or stores the key K of the terminal. AUSF Authentication service function.

[0051] In conjunction with some embodiments of the first aspect, in some embodiments, the first network element determines, based on the routing indication RID data, that the terminal is requested to re-register and / or re-authenticate, including:

[0052] The first network element determines to update the RID of the terminal, and the terminal supports AKMA;

[0053] The first network element determines to request the terminal to re-register and / or re-authenticate.

[0054] In the above embodiment, when the RID is updated, the first network element determines that the terminal supports AKMA, then the first network element can request the terminal to re-register and / or re-authenticate. In this way, the AKMA process can be enabled after the terminal is re-registered and / or re-authenticated, thereby ensuring that the RID data can be used in the AKMA process, and facilitating the use of the A-KID including the updated RID to discover the AAnF to ensure the success of the AKMA process, thereby ensuring normal communication.

[0055] In conjunction with some embodiments of the first aspect, in some embodiments, the first network element determines, based on the routing indication RID data, that the terminal is requested to re-register and / or re-authenticate, including:

[0056] The first network element determines to update the RID of the terminal, and the terminal supports AKMA;

[0057] After determining that the terminal supports AKMA, the first network element determines whether AAnF supports the updated RID;

[0058] The first network element determines that the AAnF does not support the updated RID, and determines to request the terminal to re-register and / or re-authenticate.

[0059] In the above embodiment, when the RID is updated, the first network element determines that the terminal supports AKMA, and further determines that AAnF does not support the updated RID, then the first network element can request the terminal to re-register and / or re-authenticate. In this way, after the terminal is re-registered and / or re-authenticated, at least one of the AKMA process, SoR process and UPU process can be enabled, thereby ensuring that the RID data can be used in at least one of the AKMA process, SoR process and UPU process, thereby ensuring normal communication.

[0060] In conjunction with some embodiments of the first aspect, in some embodiments, the first network element determining that the terminal supports AKMA includes:

[0061] The first network element determines, based on subscription information of the terminal, that the terminal supports AKMA.

[0062] In combination with some embodiments of the first aspect, in some embodiments, the AAnF stores the identifier of the terminal, the AKMA key identifier A-KID and the AKMA anchor key K AKMA The AKMA anchor function of at least one of them.

[0063] In conjunction with some embodiments of the first aspect, in some embodiments, the method further includes:

[0064] After determining to request the terminal to re-register and / or re-authenticate, the first network element sends a first message to the terminal;

[0065] The first message includes first indication information, and the first indication information is used to instruct the terminal to initiate re-registration and / or re-authentication to a PLMN (Public Land Mobile Network) or an NPN (Non-Public Network).

[0066] In combination with some embodiments of the first aspect, in some embodiments, the first message also includes second indication information, and the second indication information is used to indicate that the terminal needs to send confirmation ACK information to the first network element after the security check of the first message is successful.

[0067] In a second aspect, an embodiment of the present disclosure provides an information processing method, including:

[0068] The terminal receives the updated routing indication RID, triggering re-registration and / or re-authentication.

[0069] In the above embodiment, when the terminal receives the new RID, it needs to trigger re-registration and / or re-authentication, so as to ensure normal communication.

[0070] In combination with some embodiments of the second aspect, in some embodiments, the triggering of re-registration and / or re-authentication is used to enable at least one of the application authentication and key management AKMA, roaming steering SoR and UE parameter update UPU processes.

[0071] In the above embodiment, after the terminal triggers re-registration and / or re-authentication, at least one of the AKMA process, SoR process and UPU process can be enabled, thereby ensuring that the RID data can be used in at least one of the AKMA process, SoR process and UPU process.

[0072] In conjunction with some embodiments of the second aspect, in some embodiments, the terminal receives the updated routing indication RID, triggering re-registration and / or re-authentication, including:

[0073] The terminal receives a first message; wherein the first message is a message sent by the first network element after determining to request the terminal to re-register and / or re-authenticate, and the first message includes first indication information, and the first indication information is used to instruct the terminal to initiate re-registration and / or re-authentication with a public land mobile network PLMN or a non-public network NPN;

[0074] The terminal triggers re-registration and / or re-authentication based on the first indication information.

[0075] In the above embodiment, when the RID is updated, the terminal can be instructed to trigger re-registration and / or re-authentication through the first network element. In this way, after the terminal triggers re-registration and / or re-authentication, at least one of the AKMA process, SoR process and UPU process can be enabled, thereby ensuring that the RID data can be used in at least one of the AKMA process, SoR process and UPU process.

[0076] In conjunction with some embodiments of the second aspect, in some embodiments, the first message further includes second indication information, where the second indication information is used to indicate that the terminal needs to send confirmation ACK information to the first network element after the security check of the first message is successful; the method further includes:

[0077] After the security check on the first message is successful, the terminal sends the ACK information to the first network element.

[0078] In conjunction with some embodiments of the second aspect, in some embodiments, the terminal receives the updated routing indication RID, triggering re-registration and / or re-authentication, including:

[0079] The terminal receives the updated RID, and the terminal supports application authentication and key management AKMA, triggering re-registration and / or re-authentication.

[0080] In conjunction with some embodiments of the second aspect, in some embodiments, the method further includes:

[0081] The terminal initiates re-registration and / or re-authentication to the PLMN or NPN.

[0082] In a third aspect, an embodiment of the present disclosure proposes a first network element, comprising at least one of a transceiver module and a processing module; wherein the above-mentioned first network element is used to execute an optional implementation method of the first aspect.

[0083] In a fourth aspect, an embodiment of the present disclosure proposes a terminal, comprising at least one of a transceiver module and a processing module; wherein the terminal is used to execute the optional implementation method of the second aspect.

[0084] In a fifth aspect, an embodiment of the present disclosure provides a communication system, including:

[0085] A first network element, configured as an optional implementation of the first aspect;

[0086] The terminal is configured to execute the optional implementation of the aforementioned second aspect.

[0087] In a sixth aspect, an embodiment of the present disclosure proposes a communication device, comprising: one or more processors; wherein the processor is used to call instructions to enable the communication device to execute the optional implementation method of the aforementioned first aspect.

[0088] In a seventh aspect, an embodiment of the present disclosure proposes a communication device, comprising: one or more processors; wherein the processor is used to call instructions to enable the communication device to execute the optional implementation method of the aforementioned second aspect.

[0089] In an eighth aspect, an embodiment of the present disclosure proposes a storage medium storing instructions. When the instructions are executed on a communication device, the communication device executes optional implementation methods of the aforementioned first and second aspects.

[0090] In a ninth aspect, an embodiment of the present disclosure proposes a program product. When the program product is executed by a communication device, the communication device executes the method described in the optional implementation of the first and second aspects.

[0091] In a tenth aspect, an embodiment of the present disclosure proposes a computer program, which, when executed on a computer, enables the computer to execute the method described in the optional implementation of the first and second aspects.

[0092] In an eleventh aspect, an embodiment of the present disclosure provides a chip or a chip system, wherein the chip or chip system includes a processing circuit configured to execute the method described in the optional implementation of the first and second aspects above.

[0093] It is understandable that the first network element, terminal, communication system, storage medium, program product, computer program, chip, or chip system described above are all used to perform the method proposed in the embodiment of the present disclosure. Therefore, the beneficial effects that can be achieved can refer to the beneficial effects of the corresponding method and will not be repeated here.

[0094] The present disclosure provides an information processing method and apparatus thereof. In some embodiments, the terms information processing method, communication method, etc. are interchangeable, the terms information processing apparatus, communication apparatus, etc. are interchangeable, and the terms information processing system, communication system, etc. are interchangeable.

[0095] The embodiments of the present disclosure are not exhaustive and are merely illustrative of some embodiments, and are not intended to be a specific limitation on the scope of protection of the present disclosure. In the absence of contradiction, each step in a certain embodiment can be implemented as an independent embodiment, and the steps can be arbitrarily combined. For example, a solution after removing some steps in a certain embodiment can also be implemented as an independent embodiment, and the order of the steps in a certain embodiment can be arbitrarily exchanged. In addition, the optional implementation methods in a certain embodiment can be arbitrarily combined; in addition, the embodiments can be arbitrarily combined. For example, some or all steps of different embodiments can be arbitrarily combined, and a certain embodiment can be arbitrarily combined with the optional implementation methods of other embodiments.

[0096] In each embodiment of the present disclosure, unless otherwise specified or provided for by logic, the terms and / or descriptions between the embodiments are consistent and can be referenced by each other. The technical features in different embodiments can be combined to form a new embodiment based on their inherent logical relationships.

[0097] The terms used in the embodiments of the present disclosure are only for the purpose of describing specific embodiments and are not intended to limit the present disclosure.

[0098] In the embodiments of the present disclosure, unless otherwise specified, elements expressed in the singular, such as "a", "an", "the", "above", "said", "the", "the", etc., may mean "one and only one", or "one or more", "at least one", etc. For example, when using articles such as "a", "an", "the" in English in translation, the noun following the article may be understood as a singular expression or a plural expression.

[0099] In the embodiments of the present disclosure, “plurality” refers to two or more.

[0100] In some embodiments, the terms "at least one," "one or more," "a plurality of," "multiple," etc. may be used interchangeably.

[0101] In some embodiments, descriptions such as "at least one of A and B," "A and / or B," "A in one case, B in another case," or "in response to one case A, in response to another case B" may include the following technical solutions depending on the situation: in some embodiments, A (A is executed independently of B); in some embodiments, B (B is executed independently of A); in some embodiments, execution is selected from A and B (A and B are selectively executed); and in some embodiments, A and B (both A and B are executed). The above is also applicable when there are more branches such as A, B, and C.

[0102] In some embodiments, "A or B" and other descriptions may include the following technical solutions depending on the situation: in some embodiments, A (A is executed independently of B); in some embodiments, B (B is executed independently of A); in some embodiments, execution is selected from A and B (A and B are selectively executed). The above is also applicable when there are more branches such as A, B, C, etc.

[0103] The prefixes such as "first" and "second" in the embodiments of the present disclosure are only used to distinguish different description objects and do not constitute any restriction on the position, order, priority, quantity or content of the description objects. For the statement of the description object, please refer to the description in the context of the claims or embodiments, and no unnecessary restriction should be constituted due to the use of prefixes. For example, if the description object is a "field", the ordinal number before the "field" in the "first field" and the "second field" does not limit the position or order between the "fields". "First" and "second" do not limit whether the "fields" they modify are in the same message, nor do they limit the order of the "first field" and the "second field". For another example, if the description object is a "level", the ordinal number before the "level" in the "first level" and the "second level" does not limit the priority between the "levels". For another example, the number of description objects is not limited by the ordinal number and can be one or more. Taking "first device" as an example, the number of "devices" can be one or more. In addition, the objects modified by different prefixes can be the same or different. For example, if the description object is "device", then the "first device" and the "second device" can be the same device or different devices, and their types can be the same or different; for another example, if the description object is "information", then the "first information" and the "second information" can be the same information or different information, and their contents can be the same or different.

[0104] In some embodiments, “including A,” “comprising A,” “used to indicate A,” and “carrying A” can be interpreted as directly carrying A or indirectly indicating A.

[0105] In some embodiments, terms such as "time / frequency" and "time / frequency domain" refer to the time domain and / or the frequency domain.

[0106] In some embodiments, terms such as "in response to...", "in response to determining...", "in the case of...", "at the time of...", "when...", "if...", "if...", etc. can be used interchangeably.

[0107] In some embodiments, terms such as "greater than", "greater than or equal to", "not less than", "more than", "more than or equal to", "not less than", "higher than", "higher than or equal to", "not less than", and "above" can be replaced with each other, and terms such as "less than", "less than or equal to", "not greater than", "less than", "less than or equal to", "not more than", "lower than", "lower than or equal to", "not higher than", and "below" can be replaced with each other.

[0108] In some embodiments, devices and equipment can be interpreted as physical or virtual, and their names are not limited to the names recorded in the embodiments. In some cases, they can also be understood as "equipment", "device", "circuit", "network element", "node", "function", "unit", "section", "system", "network", "chip", "chip system", "entity", "subject", etc.

[0109] In some embodiments, "network" can be interpreted as devices included in the network, such as access network equipment, core network equipment, etc.

[0110] In some embodiments, "access network device (AN device)" may also be referred to as "radio access network device (RAN device)", "base station (BS)", "radio base station", "fixed station", and in some embodiments may also be understood as "node", "access point", "transmission point (TP)", "reception point (RP)", "transmission and / or reception point (TRP)" "panel", "antenna panel", "antenna array", "cell", "macro cell", "small cell", "femto cell", "pico cell", "sector", "cell group", "serving cell", "carrier", "component carrier", "bandwidth part (BWP)", etc.

[0111] In some embodiments, "terminal" or "terminal device" may be referred to as "user equipment (UE)", "user terminal" "mobile station (MS)", "mobile terminal (MT)", subscriber station, mobile unit, subscriber unit, wireless unit, remote unit, mobile device, wireless device, wireless communication device, remote device, mobile subscriber station, access terminal, mobile terminal, wireless terminal, remote terminal, handset, user agent, mobile client, client, etc.

[0112] In some embodiments, obtaining data, information, etc. may comply with the laws and regulations of the country where the data is obtained.

[0113] In some embodiments, data, information, etc. may be obtained with the user's consent.

[0114] Figure 1 is a schematic diagram illustrating the architecture of a communications system according to an embodiment of the present disclosure. The communications system may include, but is not limited to, core network devices and one terminal. The number and configuration of devices shown in Figure 1 are for illustrative purposes only and do not limit the present disclosure. In practical applications, core network devices and two or more terminals may be included. The communications system 100 shown in Figure 1 includes, for example, core network device 103 and one terminal 102.

[0115] In some embodiments, the terminal 102 herein may be an entity on the user side for receiving or transmitting signals, such as a mobile phone. It may also be referred to as a terminal, user equipment (UE), mobile station (MS), mobile terminal (MT), etc. The terminal may be a car with communication capabilities, a smart car, a mobile phone, a wearable device, a tablet computer (Pad), a computer with wireless transceiver capabilities, a virtual reality (VR) terminal, an augmented reality (AR) terminal, a wireless terminal in industrial control, a wireless terminal in self-driving, a wireless terminal in remote medical surgery, a wireless terminal in a smart grid, a wireless terminal in transportation safety, a wireless terminal in a smart city, a wireless terminal in a smart home, etc. The embodiments of the present disclosure do not limit the specific technology and specific device form adopted by the terminal.

[0116] In some embodiments, the network device may include, for example, at least one of an access network device and a core network device.

[0117] In some embodiments, the access network device 103 is, for example, a node or device that accesses a terminal device to a wireless network. The access network device may include an evolved NodeB (eNB), a next generation evolved NodeB (ng-eNB), a next generation NodeB (gNB), a node B (NB), a home node B (HNB), a home evolved nodeB (HeNB), a wireless backhaul device, a radio network controller (RNC), a base station controller (BSC), a base transceiver station (BTS), a base band unit (BBU), a mobile switching center, a base station in a 6G communication system, an open base station (Open RAN), a cloud base station (Cloud RAN), a base station in other communication systems, and at least one of an access node in a Wi-Fi system, but is not limited thereto.

[0118] In some embodiments, the technical solution of the present disclosure can be applied to the Open RAN architecture. In this case, the interfaces between or within the access network devices involved in the embodiments of the present disclosure can be transformed into internal interfaces of the Open RAN, and the processes and information interactions between these internal interfaces can be implemented through software or programs.

[0119] In some embodiments, the access network device can be composed of a centralized unit (CU) and a distributed unit (DU), where the CU can also be called a control unit. The CU-DU structure can be used to split the protocol layer of the access network device, with the functions of some protocol layers centrally controlled by the CU, and the functions of the remaining part or all of the protocol layers distributed in the DU, which is centrally controlled by the CU, but is not limited to this.

[0120] In some embodiments, a core network device may be a device including one or more network elements, or may be multiple devices or device groups, each including all or part of the one or more network elements. The network element may be virtual or physical. The core network may include, for example, at least one of an Evolved Packet Core (EPC), a 5G Core Network (5GCN), and a Next Generation Core (NGC).

[0121] In some embodiments, the core network device may be a single device including the first network element 101, the second network element, etc., or may be a plurality of devices or a group of devices, each including all or part of the first network element 101, the second network element, etc. The network element may be virtual or physical. The core network may include, for example, at least one of an evolved packet core (EPC), a 5G core network (5GCN), and a next generation core (NGC).

[0122] In some embodiments, the first network element 101 is, for example, a unified data manager (UDM). For example, the UDM is a permanent storage location for user subscription data and is located in the user's subscribed home network.

[0123] In some embodiments, the second network element is, for example, an access and mobility management function (AMF), which is used to manage the user's access needs to the network, and is responsible for terminal-to-network non-access stratum (NAS) signaling management, user mobility management, etc.

[0124] Exemplarily, the UE communicates with the Access Network (AN) or Radio Access Network (RAN) through a variety of network functions. The AMF is used to manage the user's demand for access to the network, and is responsible for the terminal-to-network Non-Access Stratum (NAS) signaling management, user mobility management, etc. The AMF has a security anchor function and can interact with the Authentication Server Function (AUSF) and the UE to receive the intermediate key established for the UE authentication process. For the authentication method based on the Universal Subscriber Identity Module (USIM), the AMF also obtains security-related data from the AUSF entity. The Application Function (AF) is used to manage the session of the User Equipment (UE).

[0125] UDM is used to store user subscription data and is located in the home network where the user has signed a contract. The Authentication Credential Repository and Processing Function (ARPF) stores long-term security credentials used for authentication and uses long-term security credentials as input to perform key operations. AUSF interacts with ARPF and provides authentication services. AAnF (AKMA Anchor Function) is located in the home network and is mainly used to generate session keys between the UE and AF, as well as maintain the security context between the UE and the UE. AAnF is similar to the Bootstrapping Server Function (BSF) in the General Bootstrapping Architecture (GBA). The Network Exposure Function (NEF) is used to manage network data open to the outside world. External applications can access the internal data of the core network through NEF.

[0126] Before accessing the network, the UE requests AUSF and UDM to perform key negotiation authentication. AUSF is used to generate the session key between the UE and AF and maintain the security context between the UE and the AF. UDM is used to store user subscription data, determine whether the user is an AKMA (Authentication and Key management for Applications based on 3GPP credentials) subscriber, etc. After passing the key negotiation authentication, the UE can generate the AKMA anchor key key identifier (AKMA-Key Identification, A-KID) and the related AKMA anchor key (denoted as K) according to the RID. AKMA ) and use AF to convert A-KID and K AKMA During this process, AUSF also uses RID to generate A-KID, and sends the terminal's SUPI (SUbscription Permanent Identifier), the generated A-KID and K AKMA Sent to AAnF, AAnF responds to AUSF, completing the authentication and registration of the terminal.

[0127] It can be understood that the communication system described in the embodiment of the present disclosure is for the purpose of more clearly illustrating the technical solution of the embodiment of the present disclosure, and does not constitute a limitation on the technical solution proposed in the embodiment of the present disclosure. Ordinary technicians in this field can know that with the evolution of the system architecture and the emergence of new business scenarios, the technical solution proposed in the embodiment of the present disclosure is also applicable to similar technical problems.

[0128] The following embodiments of the present disclosure may be applied to the communication system 100 shown in FIG1 , or a portion thereof, but are not limited thereto. The entities shown in FIG1 are illustrative only. The communication system may include all or part of the entities shown in FIG1 , or may include other entities outside of FIG1 . The number and form of the entities are arbitrary, and the entities may be physical or virtual. The connection relationships between the entities are illustrative only. The entities may be connected or disconnected, and the connection may be in any manner, including direct or indirect, wired or wireless.

[0129] The embodiments of the present disclosure can be applied to Long Term Evolution (LTE), LTE-Advanced (LTE-A), LTE-Beyond (LTE-B), SUPER 3G, IMT-Advanced, 4th generation mobile communication system (4G), 5th generation mobile communication system (5G), 5G new radio (NR), future radio access (FRA), new radio access technology (RAT), new radio (NR), new radio access (NX), future generation radio access (FX), Global System for Mobile Communications (GSM (registered trademark)), CDMA2000, Ultra Mobile Broadband (UMB), IEEE 802.11 (Wi-Fi (registered trademark)), IEEE 802.16 (WiMAX (registered trademark)), IEEE 802.20, Ultra-WideBand (UWB), Bluetooth (registered trademark), Public Land Mobile Network (PLMN) networks, Device-to-Device (D2D) systems, Machine-to-Machine (M2M) systems, Internet of Things (IoT) systems, Vehicle-to-Everything (V2X), systems utilizing other communication methods, and next-generation systems based on and extending these methods. Furthermore, multiple systems may be combined (for example, a combination of LTE or LTE-A with 5G).

[0130] In some embodiments, the AKMA function has been used as a solution to protect communications between terminals and AF (Application Function) in scenarios such as ProSe (Proximity Based Service) and MSGin5G (5G messaging service).

[0131] In some embodiments, in the AKMA scenario, the authentication between the terminal and the AF depends on K AF (AF key). The terminal can generate K by itself AF To help AF get K AF , the terminal needs to send A-KID (AKMA key identifier) ​​to AF. For the internal AF owned by the 3GPP operator, AF sends A-KID to AAnF (AKMA Anchor Function) to obtain K AF For external AFs that do not belong to 3GPP operators, AF sends A-KID to NEF to obtain K AF .

[0132] In some embodiments, a Routing Indicator (RID) is part of the A-KID, and the Routing Indicator (ie, RID) is used by the AF / NEF / AUSF to locate the AAnF.

[0133] In some embodiments, for the AF, the terminal needs to send an A-KID containing the RID to the AF. For an internal AF owned by a 3GPP operator, the AF uses the A-KID to discover the AAnF. For an external AF not belonging to a 3GPP operator, the AF sends the A-KID to the NEF, and the NEF uses the A-KID to discover the AAnF for the AF.

[0134] In some embodiments, for the case of AUSF, AUSF will generate A-KID and corresponding K after primary authentication. AKMA (AKMA's key). In order for AF to locate K from AAnF AKMA , AUSF will send the terminal's K to AAnF AKMA , A-KID and SUPI. AUSF uses the RID contained in A-KID to identify AAnF.

[0135] In some embodiments, during the primary authentication process, the AUSF is identified by the RID and the identified AUSF can generate specific keys for a specific UE.

[0136] In some embodiments, in the UPU (UE parameter update) procedure (UE parameter update via UDM control plane procedure), UDM can provide parameter data to a specific terminal through AUSF (for example, if a UEMINT (Minimization of Service Interruption) support indicator is received or the terminal is currently registered for the Disaster Roaming service, it indicates whether disaster roaming is enabled in the terminal). UDM can use the K AUSF The UDM locates (or searches for) the AUSF containing the key based on the RID.

[0137] In some embodiments, during the SoR (Steering of Roaming) process, the UDM may use control plane mechanisms to provide guidance of roaming information to the UE during and after registration (e.g., a list of "operator-controlled PLMN selectors with access technologies" in the UE). AUSF The UDM locates the AUSF containing the key based on the RID.

[0138] In some embodiments, in the core network, a network function (such as AUSF, UDM, AAnF) can support multiple RIDs. In some cases, the UDM may update the RID on the terminal side.

[0139] In the case of AKMA, the terminal can generate an A-KID based on the newly updated RID and send it to the AF. However, when the AF obtains the A-KID generated based on the newly updated RID, the AF cannot recognize the A-KID that contains the original A-KID, SUPI and KID. AKMA Therefore, if the RID is updated, the AKMA-related processes will fail.

[0140] In the case of UPU / SoR, UDM will locate a new AUSF based on the newly updated RID. And the new AUSF did not participate in the main authentication process, so it does not contain the key associated with the terminal. Due to the lack of the key associated with the terminal, the new AUSF cannot generate a MAC for the terminal (the new AUSF cannot generate a MAC for the terminal due to the lack of the key associated with the terminal). Therefore, if the RID is updated, the UPU / SoR process will fail.

[0141] Therefore, it can be seen that when the RID is updated, how the first network element (such as UDM) handles it to ensure normal communication has become an urgent problem to be solved.

[0142] To this end, the embodiments of the present disclosure provide an information processing method and apparatus thereof, which can determine through a first network element that a requesting terminal needs to re-register and / or re-authenticate based on RID data, thereby ensuring normal communication.

[0143] Figure 2A is an interactive diagram illustrating an information processing method according to an embodiment of the present disclosure. It should be noted that the first network element can be used to instruct the terminal to re-register and / or re-authenticate. As shown in Figure 2A , the information processing method according to an embodiment of the present disclosure can be applied to communication system 100, and the method includes but is not limited to the following steps.

[0144] Step S2101: The first network element 101 determines to request the terminal 102 to re-register and / or re-authenticate based on the RID data.

[0145] In some embodiments, under certain circumstances, the first network element 101 may update the RID on the terminal 102 side. For example, if the operator needs to configure a new RID based on business needs or other reasons, the first network element 101 needs to update the RID on the terminal 102 side according to the operator's newly configured RID. Based on this, the first network element 101 can determine whether it is necessary to request the terminal 102 to re-register and / or re-authenticate based on the RID data. Exemplarily, when determining to update the RID of the terminal 102, the first network element 101 can determine that it is necessary to request the terminal 102 to re-register and / or re-authenticate. In this way, it can be ensured that the updated RID can be used, ensuring normal communication.

[0146] For example, taking the first network element 101 as a UDM, the UDM may perform a UE parameter update to update the RID on the terminal 102 side. If the UDM performs a UE parameter update due to RID update data, the UDM may determine that it is necessary to request the terminal 102 to re-register and / or re-authenticate based on the updated RID data.

[0147] In some embodiments, the first network element 101 determines to update the RID of the terminal 102, and the AAnF does not support the updated RID, and the first network element 101 determines to request the terminal 102 to re-register and / or re-authenticate. Optionally, when the first network element 101 determines to update the RID of the terminal 102 and determines that the AAnF does not support the updated RID, the first network element 101 may determine that it is necessary to request the terminal 102 to re-register and / or re-authenticate.

[0148] For example, taking the first network element 101 as a UDM, the UDM can update the parameters of the terminal 102 side by performing a UE parameter update. If the UDM performs a UE parameter update due to RID update data, and the AKMA anchor function AAnF does not support the updated RID, the UDM can determine that it is necessary to request the terminal 102 to re-register and / or re-authenticate. In some embodiments, the AAnF can be a device that stores the identity of the terminal 102, the A-KID, and the K AKMA The AKMA anchor function of at least one of them.

[0149] In some embodiments, the first network element 101 determines to update the RID of the terminal 102, and the AUSF does not support the updated RID; the first network element 101 determines to request the terminal 102 to re-register and / or re-authenticate. In some embodiments, the AUSF has performed identity authentication on the terminal 102 and / or stored the key K of the terminal 102. AUSF Authentication service function.

[0150] For example, taking the first network element 101 as the UDM, the UDM can update the parameters of the terminal 102 by performing a UE parameter update. If the UDM performs a UE parameter update due to RID update data, and the AUSF (which has authenticated the terminal 102 and / or stored the key K of the terminal 102) AUSF If the authentication service function of the terminal 102 does not support the updated RID, the UDM may determine that it is necessary to request the terminal 102 to re-register and / or re-authenticate.

[0151] In some embodiments, the first network element 101 determines to update the RID of the terminal 102 , and the terminal 102 supports AKMA; the first network element 101 determines to request the terminal 102 to re-register and / or re-authenticate.

[0152] For example, taking the first network element 101 as a UDM, the UDM may perform a UE parameter update to update parameters on the terminal 102 side. If the UDM performs a UE parameter update due to RID update data and the terminal 102 supports AKMA, the UDM may determine that it is necessary to request the terminal 102 to re-register and / or re-authenticate.

[0153] In some embodiments, the first network element 101 determines to update the RID of the terminal 102, and the terminal supports AKMA; after determining that the terminal 102 supports AKMA, the first network element 101 determines whether the AKMA anchor function AAnF supports the updated RID; the first network element 101 determines that the AAnF does not support the updated RID, and determines to request the terminal 102 to re-register and / or re-authenticate.

[0154] Exemplarily, taking the first network element 101 as the UDM, the UDM can update the parameters on the terminal 102 side by performing a UE parameter update. If the UDM performs a UE parameter update due to RID update data, and the terminal 102 supports AKMA, the UDM should further check the AKMA anchor function AAnF. Optionally, the UDM checks whether the updated RID is supported by the AKMA anchor function AAnF, that is, the UDM checks whether the AKMA anchor function AAnF supports the updated RID. If the AKMA anchor function AAnF does not support the updated RID, the UDM may determine to request the terminal 102 to re-register and / or re-authenticate. In some embodiments, the AAnF may be a storage device that stores the identity of the terminal 102, the A-KID, and the K AKMA The AKMA anchor function of at least one of them.

[0155] In some embodiments, the first network element 101 may determine that the terminal 102 supports AKMA based on the subscription information of the terminal 102. For example, taking the first network element 101 as a UDM, the UDM stores the subscription information of the terminal 102. The UDM may determine whether the terminal 102 supports AKMA based on the subscription information of the terminal 102. For example, if the subscription information includes support for AKMA, the UDM may determine that the terminal 102 supports AKMA based on the subscription information of the terminal 102.

[0156] In some embodiments, the terminal 102 re-registers and / or re-authenticates to enable at least one of the AKMA process, the SoR process, and the UPU process. That is, the purpose of the terminal 102 re-registering and / or re-authenticating is to enable at least one of the AKMA process, the SoR process, and the UPU process. Exemplarily, the terminal 102 re-registers and / or re-authenticates to enable the AKMA process so that the updated RID can be used in the AKMA process. Exemplarily, the terminal 102 re-registers and / or re-authenticates to enable the SoR process so that the updated RID can be used in the SoR process. Exemplarily, the terminal 102 re-registers and / or re-authenticates to enable the UPU process so that the updated RID can be used in the UPU process. Exemplarily, the terminal 102 re-registers and / or re-authenticates to enable at least two of the AKMA process, the SoR process, and the UPU process, which will not be further described here.

[0157] Step S2102: The first network element 101 sends a first message.

[0158] In some embodiments, the first message may be sent directly from the first network element 101 to the terminal 102 , or may be indirectly transmitted to the terminal 102 through other network elements.

[0159] In some embodiments, the first message may be sent by the first network element 101 to the terminal 102. Optionally, the first network element 101 sends the first message to the terminal 102. Exemplarily, the terminal 102 may receive the first message sent by the first network element 101. In one implementation, the first network element 101 sends the first message after determining that the terminal 102 is requested to re-register and / or re-authenticate. Exemplarily, the first network element 101 sends the first message to the terminal 102 after determining that the terminal 102 is requested to re-register and / or re-authenticate.

[0160] In some embodiments, the first message may be sent from the first network element 101 to the terminal 102 via the second network element. For example, taking the first network element 101 as a UDM and the second network element as an AMF, the UDM sends the first message to the AMF by invoking the Nudm_SDM_Notification service operation. For example, the first message needs to be transparently transmitted to the terminal 102 via NAS within the access and mobility subscription data. For example, the AMF may send a downlink non-access stratum transport (DL NAS TRANSPORT) message to the terminal 102, where the DL NAS TRANSPORT message includes the first message received from the UDM. Optionally, in some embodiments, the first message may be UDM update data.

[0161] In some embodiments, the first message may include first indication information, where the first indication information is used to indicate whether the terminal 102 re-registers and / or re-authenticates. Exemplarily, the first indication information is used to indicate whether the terminal 102 initiates re-registration and / or re-authentication with the PLMN or NPN. Exemplarily, the first indication information is used to instruct the terminal 102 to re-register and / or re-authenticate, such as instructing the terminal 102 to initiate re-registration and / or re-authentication with the PLMN or NPN after the UE parameters are updated.

[0162] Exemplarily, the value of the first indication information is a first value, indicating that the terminal 102 needs to re-register and / or re-authenticate, and the value of the first indication information is a second value, indicating that the terminal 102 does not need to re-register and / or re-authenticate. The first value may be a bit value of 1, and the second value may be 0; or the first value may be 0, and the second value may be 1; or the first value may be enable, and the second value may be disable; or the first value and the second value may be other types of values, which are not limited in this disclosure and will not be described in detail.

[0163] In some embodiments, the first message may be included in a subscription data update notification (Nudm_SDM_Notification) message. In some embodiments, the first message may be a Nudm_SDM_Notification message. For example, assuming that first network element 101 is a UDM, the UDM invokes the Nudm_SDM_Notification service operation to send the indication information to terminal 102, thereby instructing terminal 102 to initiate re-registration and / or re-authentication with the PLMN or NPN after the UE parameters are updated.

[0164] In some embodiments, the first network element 101 may further send the updated RID to the terminal 102. Optionally, the first network element may send the updated RID to the terminal 102 via the first message. Exemplarily, the first message may further include the updated RID, and the first network element 101 may send the first message to the terminal 102. After receiving the first message, the terminal 102 may obtain the updated RID. After successfully performing a security check on the first message, the terminal 102 may store the updated RID for subsequent use, such as using the updated RID to initiate an AKMA process, a SoR process, a UPU process, and the like.

[0165] In some embodiments, the first message may further include second indication information, which indicates whether terminal 102 needs to send an ACK (acknowledgement) message to first network element 101. Exemplarily, the second indication information indicates whether terminal 102 needs to send an ACK message to first network element 101 after the security check on the first message succeeds. Exemplarily, the second indication information instructs terminal 102 to send an ACK message to first network element 101 after the security check on the first message succeeds. Exemplarily, the value of the second indication information is a first value, instructing terminal 102 to send an ACK message to first network element 101 after the security check on the first message succeeds; the value of the second indication information is a second value, instructing terminal 102 not to send an ACK message to first network element 101 after the security check on the first message succeeds. The first value may be a bit value of 1, and the second value may be 0; or the first value may be 0, and the second value may be 1; or the first value may be enable, and the second value may be disable; or the first and second values ​​may be other types of values, which are not limited in this disclosure and will not be described in detail.

[0166] Step S2103: The terminal 102 receives the first message and triggers re-registration and / or re-authentication based on the first indication information in the first message.

[0167] Optionally, the terminal may be instructed to re-register and / or re-authenticate via the first network element. Exemplarily, the first message carries first instruction information for instructing the terminal 102 whether to re-register and / or re-authenticate.

[0168] In some embodiments, after receiving the first message, the terminal 102 needs to verify whether the first message is provided by at least one of the HPLMN, SNPN, or CH (Credentials Holder). If the terminal 102 has verified that the first message is provided by at least one of the HPLMN, SNPN, or CH (Credentials Holder), it can be determined that the security check of the first message is successful. The terminal 102 can then store the updated RID for subsequent use, or the terminal 102 can forward the updated RID to the USIM.

[0169] In some embodiments, if the terminal 102 has verified that the first message is not provided by the HPLMN, SNPN, and CH, it can be determined that the security check of the first message fails, and the terminal 102 discards the content of the first message.

[0170] In some embodiments, after the security check on the first message is successful, the terminal 102 may trigger re-registration and / or re-authentication based on the first indication information in the first message. Exemplarily, taking the case where the value of the first indication information is the first value, indicating that the terminal 102 re-registers and / or re-authenticates, and the value of the first indication information is the second value, indicating that the terminal 102 does not need to re-register and / or re-authenticate, the terminal 102 determines that the value of the first indication information is the first value, indicating that the first network element 101 indicates that the terminal 102 needs to re-register and / or re-authenticate, then the terminal 102 triggers re-registration and / or re-authentication. Exemplarily, the terminal 102 determines that the value of the first indication information is not the first value (such as the second value), indicating that the first network element 101 indicates that the terminal 102 does not need to re-register and / or re-authenticate, then the terminal 102 does not trigger re-registration and / or re-authentication.

[0171] In some embodiments, the first message received by the terminal 102 may further include the second indication information described above, where the second indication information is used to indicate whether the terminal 102 needs to send ACK (acknowledgement) information to the first network element 101. Exemplarily, the second indication information is used to indicate whether the terminal 102 needs to send ACK information to the first network element 101 after the security check on the first message is successful. Exemplarily, the second indication information is used to instruct the terminal 102 to send ACK information to the first network element 101 after the security check on the first message is successful.

[0172] In some embodiments, the terminal 102 verifies that the above-mentioned first message is provided by at least one of HPLMN, SNPN or CH, that is, the terminal 102 successfully performs a security check on the first message, and the first network element 101 has requested the terminal 102 to send an ACK to the first network element 101 (such as the second indication information in the first message indicates that the terminal 102 sends an ACK information to the first network element 101), then the terminal 102 can send an ACK information to the service AMF.

[0173] In some embodiments, the ACK information may be included in an uplink non-access layer transport (UL NAS TRANSPORT) message. Exemplarily, the terminal 102 sends a UL NAS TRANSPORT message to the serving AMF. The UL NAS TRANSPORT message includes ACK information. Exemplarily, the ACK information may be a transparent container confirmed by the UE (such as a UPU confirmation, also called UPU ACK). After receiving the UL NAS TRANSPORT message sent by the terminal 102, the AMF may send a subscription data message (Nudm_SDM_Info) request message including the ACK information to the UDM. For specific implementation, please refer to the description of subsequent embodiments and will not be repeated here.

[0174] In step S2104, the terminal 102 initiates re-registration and / or re-authentication with the PLMN or NPN.

[0175] In some embodiments, when re-registration and / or re-authentication needs to be triggered, the terminal 102 may initiate re-registration and / or re-authentication with the PLMN or NPN. That is, the terminal may re-register with the PLMN or NPN and / or re-authenticate on the PLMN or NPN. For optional implementations of the terminal initiating re-registration and / or re-authentication with the PLMN or NPN, reference may be made to the implementations of the terminal initiating registration and / or authentication with the PLMN or NPN in the prior art, which will not be described in detail here.

[0176] In some embodiments, the names of information, etc. are not limited to the names described in the embodiments, and terms such as "information", "message", "signal", "signaling", "report", "configuration", "indication", "instruction", "command", "channel", "parameter", "domain", "field", "symbol", "symbol", "codeword", "codebook", "codeword", "codepoint", "bit", "data", "program", and "chip" can be used interchangeably.

[0177] In some embodiments, terms such as "uplink", "uplink", "physical uplink" can be interchangeable with each other, and terms such as "downlink", "downlink", "physical downlink" can be interchangeable with each other, and terms such as "side", "sidelink", "side communication", "sidelink communication", "direct connection", "direct link", "direct communication", "direct link communication" can be interchangeable with each other.

[0178] In some embodiments, "obtain", "get", "get", "receive", "transmit", "bidirectional transmission", "send and / or receive" can be interchangeable, and can be interpreted as receiving from other entities, obtaining from protocols, obtaining from higher layers, obtaining by self-processing, autonomous implementation, etc.

[0179] In some embodiments, terms such as "send", "transmit", "report", "download", "transmit", "bidirectional transmission", "send and / or receive" can be used interchangeably.

[0180] In some embodiments, terms such as "certain", "preset", "preset", "setting", "indicated", "a certain", "any", and "first" can be interchangeable. "Specific A", "preset A", "preset A", "setting A", "indicated A", "a certain A", "any A", and "first A" can be interpreted as A pre-specified in a protocol, etc., or as A obtained through setting, configuration, or indication, etc., or as specific A, a certain A, any A, or first A, etc., but not limited to this.

[0181] In some embodiments, the determination or judgment can be performed by a value represented by 1 bit (0 or 1), or by a true or false value (Boolean value) represented by true or false, or by comparison of numerical values ​​(for example, comparison with a predetermined value), but is not limited thereto.

[0182] The method involved in the embodiments of the present disclosure may include at least one of steps S2101 to S2104. For example, steps S2101, S2102, and S2103 may be implemented as independent embodiments, and steps S2101, S2102, S2103, and S2104 may be implemented as independent embodiments, but are not limited thereto.

[0183] In some embodiments, step S2104 is optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0184] In some embodiments, reference may be made to other optional implementations described before or after the description corresponding to FIG. 2A .

[0185] Figure 2B is an interactive diagram illustrating an information processing method according to an embodiment of the present disclosure. It should be noted that the first network element 101 may not be used to instruct the terminal 102 to re-register and / or re-authenticate. Instead, upon receiving the updated RID, the terminal triggers re-registration and / or re-authentication. Optionally, as shown in Figure 2B , the information processing method according to an embodiment of the present disclosure may be applied to the communication system 100. The method includes, but is not limited to, the following steps.

[0186] Step S2201: The first network element 101 sends an updated RID.

[0187] In some embodiments, the updated RID may be included in the first message.

[0188] In some embodiments, the first message may further include second indication information, where the second indication information is used to indicate whether the terminal 102 needs to send ACK (acknowledgement) information to the first network element 101. Optional implementations thereof may refer to the optional implementations of step S2102 in FIG. 2A and other related parts of the embodiment involved in FIG. 2A , which will not be described in detail here.

[0189] In some embodiments, the updated RID may be sent by the first network element 101 to the terminal 102. Optionally, the terminal 102 may obtain the updated RID of the first network element 101.

[0190] In some embodiments, the updated RID may be sent by the first network element 101 to the terminal 102 via the second network element. Optionally, the first network element 101 sends the updated RID to the second network element, and the second network element sends the updated RID to the terminal 102.

[0191] In some embodiments, the first message may be sent from the first network element 101 to the terminal 102 via the second network element. For example, taking the first network element 101 as a UDM and the second network element as an AMF, the UDM sends the first message to the AMF by invoking the Nudm_SDM_Notification service operation. For example, the first message needs to be transparently transmitted to the terminal 102 via NAS within the access and mobility subscription data. For example, the AMF may send a downlink non-access stratum transport (DL NAS TRANSPORT) message to the terminal 102, where the DL NAS TRANSPORT message includes the first message received from the UDM. Optionally, in some embodiments, the first message may be UDM update data.

[0192] In step S2202 , the terminal 102 triggers re-registration and / or re-authentication.

[0193] In some embodiments, the terminal 102 receives the updated RID, triggering re-registration and / or re-authentication.

[0194] In some embodiments, the terminal 102 receives an updated RID. Since the update of the RID will affect the AKMA process, SoR process, UPU process, etc., the terminal 102 needs to trigger re-registration and / or re-authentication to facilitate the use of the new RID in the AKMA process, SoR process, and UPU process.

[0195] In some embodiments, when the terminal 102 receives the updated RID and the terminal 102 supports AKMA, the terminal 102 triggers re-registration and / or re-authentication.

[0196] In some embodiments, re-registration and / or re-authentication is triggered to enable at least one of the AKMA process, the SoR process, and the UPU process. That is, the purpose of terminal 102 re-registering and / or re-authenticating is to enable at least one of the AKMA process, the SoR process, and the UPU process. Exemplarily, terminal 102 re-registers and / or re-authenticates to enable the AKMA process so that the updated RID can be used in the AKMA process. Exemplarily, terminal 102 re-registers and / or re-authenticates to enable the SoR process so that the updated RID can be used in the SoR process. Exemplarily, terminal 102 re-registers and / or re-authenticates to enable the UPU process so that the updated RID can be used in the UPU process. Exemplarily, terminal 102 re-registers and / or re-authenticates to enable at least two of the AKMA process, the SoR process, and the UPU process, which will not be further described here.

[0197] In step S2203, the terminal 102 initiates re-registration and / or re-authentication to the PLMN or NPN.

[0198] The optional implementation of step S2203 can refer to the optional implementation of step S2104 in Figure 2A and other related parts in the embodiment involved in Figure 2A, which will not be repeated here.

[0199] The method involved in the embodiment of the present disclosure may include at least one of steps S2201 to S2203. For example, step S2201 + step S2202 may be implemented as an independent embodiment, and step S2201 + step S2202 + step S2203 may be implemented as an independent embodiment, but the present invention is not limited thereto.

[0200] In some embodiments, step S2203 is optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0201] In some embodiments, reference may be made to other optional implementations described before or after the description corresponding to FIG. 2B .

[0202] FIG3A is a flow chart showing an information processing method according to an embodiment of the present disclosure. As shown in FIG3A , the embodiment of the present disclosure relates to an information processing method, which can be executed by the first network element 101 and can include but is not limited to the following steps.

[0203] Step S3101: Based on the RID data, determine whether to request the terminal to re-register and / or re-authenticate.

[0204] In some embodiments, the terminal re-registration and / or re-authentication is used to enable at least one of an AKMA process, a SoR process, and a UPU process.

[0205] The optional implementation of step S3101 can refer to the optional implementation of step S2101 in Figure 2A and other related parts in the embodiment involved in Figure 2A, which will not be repeated here.

[0206] Step S3102, sending the first message.

[0207] In some embodiments, the first message may be sent by the first network element 101 to the terminal 102. Optionally, the first network element 101 sends the first message to the terminal 102. Exemplarily, the terminal 102 may receive the first message sent by the first network element 101. In one implementation, the first network element 101 sends the first message after determining that the terminal 102 is requested to re-register and / or re-authenticate. Exemplarily, the first network element 101 sends the first message to the terminal 102 after determining that the terminal 102 is requested to re-register and / or re-authenticate.

[0208] In some embodiments, the first message may be sent from the first network element 101 to the terminal 102 via the second network element.

[0209] In some embodiments, the first message includes first indication information, where the first indication information is used to instruct the terminal 102 to initiate re-registration and / or re-authentication with the PLMN or NPN.

[0210] In some embodiments, the first message also includes second indication information, and the second indication information is used to indicate that the terminal 102 needs to send ACK information to the first network element after the security check on the first message is successful.

[0211] The optional implementation of step S3102 can refer to the optional implementation of step S2102 in Figure 2A and other related parts in the embodiment involved in Figure 2A, which will not be repeated here.

[0212] The method involved in the embodiment of the present disclosure may include at least one of step S3101 and step S3102. For example, step S3101 and step S3102 may be implemented as independent embodiments, but are not limited thereto.

[0213] FIG3B is a flow chart of an information processing method according to an embodiment of the present disclosure. As shown in FIG3B , the embodiment of the present disclosure relates to an information processing method, which can be executed by the first network element 101 and can include but is not limited to the following steps.

[0214] Step S3201, sending the updated RID.

[0215] In some embodiments, the updated RID may be included in the first message. In some embodiments, the updated RID is used by the terminal 102 to trigger re-registration and / or re-authentication. That is, the terminal 102 may not be instructed to re-register and / or re-authenticate through the first network element 101, but the terminal will trigger re-registration and / or re-authentication after receiving the updated RID. Exemplarily, when the terminal 102 receives the updated RID, it may trigger re-registration and / or re-authentication. Its optional implementation method can be found in the optional implementation method of step S2202 of Figure 2B and other related parts of the embodiment involved in Figure 2B, which will not be repeated here.

[0216] In some embodiments, the first message may further include second indication information, where the second indication information is used to indicate whether the terminal 102 needs to send ACK (acknowledgement) information to the first network element 101. Optional implementations thereof may refer to the optional implementations of step S2102 in FIG. 2A and other related parts of the embodiment involved in FIG. 2A , which will not be described in detail here.

[0217] In some embodiments, the updated RID may be sent by the first network element 101 to the terminal 102. Optionally, the terminal 102 may obtain the updated RID of the first network element 101.

[0218] In some embodiments, the updated RID may be sent by the first network element 101 to the terminal 102 via the second network element. Optionally, the first network element 101 sends the updated RID to the second network element, and the second network element sends the updated RID to the terminal 102.

[0219] The optional implementation of step S3201 can refer to the optional implementation of step S2201 in Figure 2B and other related parts in the embodiment involved in Figure 2B, which will not be repeated here.

[0220] Figure 3C is a flow chart of an information processing method according to an embodiment of the present disclosure. As shown in Figure 3C, the embodiment of the present disclosure relates to an information processing method, which can be executed by the first network element 101 and can include but is not limited to the following steps.

[0221] Step S3301: Based on the RID data, determine whether to request the terminal to re-register and / or re-authenticate.

[0222] In some embodiments, terminal re-registration and / or re-authentication is used to enable at least one of AKMA, SoR, and UPU procedures.

[0223] In some embodiments, the first network element determines to update the RID of the terminal, and the AKMA anchor function AAnF does not support the updated RID; the first network element determines to request the terminal to re-register and / or re-authenticate.

[0224] In some embodiments, the first network element determines to update the RID of the terminal, and the authentication service function AUSF does not support the updated RID; the first network element determines to request the terminal to re-register and / or re-authenticate. Wherein, AUSF has performed identity authentication on the terminal and / or stored the key K of the terminal. AUSF Authentication service function.

[0225] In some embodiments, the first network element determines to update the RID of the terminal, and the terminal supports AKMA; the first network element determines to request the terminal to re-register and / or re-authenticate.

[0226] In some embodiments, the first network element determines to update the RID of the terminal, and the terminal supports AKMA; after determining that the terminal supports AKMA, the first network element determines whether AAnF supports the updated RID; the first network element determines that AAnF does not support the updated RID, and determines to request the terminal to re-register and / or re-authenticate. Optionally, in some embodiments, the first network element determines that the terminal supports AKMA based on the subscription information of the terminal. AAnF is a storage device that stores the terminal's identifier, AKMA key identifier A-KID, and AKMA anchor key K AKMA The AKMA anchor function of at least one of them.

[0227] In some embodiments, after determining that the terminal is requested to re-register and / or re-authenticate, the first network element sends a first message to the terminal; wherein the first message includes first indication information, and the first indication information is used to instruct the terminal to initiate re-registration and / or re-authentication with the public land mobile network PLMN or the non-public network NPN.

[0228] In some embodiments, the first message further includes second indication information, where the second indication information is used to indicate that the terminal needs to send confirmation ACK information to the first network element after the security check on the first message is successful.

[0229] The optional implementation of step S3301 can be found in the optional implementation of the relevant steps in the embodiments involved in Figures 2A, 2B and 3A, 3B, and will not be repeated here.

[0230] FIG4A is a flow chart showing an information processing method according to an embodiment of the present disclosure. As shown in FIG4A , the embodiment of the present disclosure relates to an information processing method, which can be executed by terminal 102 and may include but is not limited to the following steps.

[0231] Step S4101, receiving a first message.

[0232] In some embodiments, the first message may be obtained by the terminal 102 from the first network element 101. Exemplarily, the first message may be sent by the first network element 101 to the terminal 102.

[0233] In some embodiments, the first message may be obtained by the terminal 102 from the first network element 101 via the second network element. Exemplarily, the first network element 101 sends the first message to the second network element, and the second network element sends the first message to the terminal 102.

[0234] In some embodiments, the first message may include first indication information, where the first indication information is used to indicate whether the terminal 102 re-registers and / or re-authenticates. Exemplarily, the first indication information is used to indicate whether the terminal 102 initiates re-registration and / or re-authentication with the PLMN or NPN. Exemplarily, the first indication information is used to instruct the terminal 102 to re-register and / or re-authenticate, such as the first indication information is used to instruct the terminal 102 to initiate re-registration and / or re-authentication with the PLMN or NPN.

[0235] In some embodiments, the first message may further include second indication information, where the second indication information is used to indicate whether the terminal 102 needs to send ACK (acknowledgement) information to the first network element 101. Exemplarily, the second indication information is used to indicate whether the terminal 102 needs to send ACK information to the first network element 101 after the security check on the first message is successful. Exemplarily, the second indication information is used to instruct the terminal 102 to send ACK information to the first network element 101 after the security check on the first message is successful.

[0236] The optional implementation of step S4101 can refer to the optional implementation of step S2102 in 2A and other related parts in the embodiment involved in Figure 2A, which will not be repeated here.

[0237] Step S4102: trigger re-registration and / or re-authentication based on the first indication information in the first message.

[0238] In some embodiments, the terminal 102 receives a first message and triggers re-registration and / or re-authentication based on first indication information in the first message.

[0239] The optional implementation of step S4102 can refer to the optional implementation of step S2103 in 2A and other related parts in the embodiment involved in Figure 2A, which will not be repeated here.

[0240] Step S4103: Initiate re-registration and / or re-authentication to the PLMN or NPN.

[0241] The optional implementation of step S4103 can refer to the optional implementation of step S2104 in 2A and other related parts in the embodiment involved in Figure 2A, which will not be repeated here.

[0242] The method involved in the embodiment of the present disclosure may include at least one of steps S4101 to S4103. For example, step S4101 + step S4102 may be implemented as an independent embodiment, and step S4101 + step S4102 + step S4103 may be implemented as an independent embodiment, but the present invention is not limited thereto.

[0243] In some embodiments, step S4103 is optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0244] FIG4B is a flow chart of an information processing method according to an embodiment of the present disclosure. As shown in FIG4B , the embodiment of the present disclosure relates to an information processing method, which can be executed by terminal 102 and may include but is not limited to the following steps.

[0245] Step S4201, receiving the updated RID.

[0246] In some embodiments, the updated RID may be included in the first message.

[0247] In some embodiments, the first message may further include second indication information, where the second indication information is used to indicate whether the terminal 102 needs to send ACK (acknowledgement) information to the first network element 101. Optional implementations thereof may refer to the optional implementations of step S2102 in FIG. 2A and other related parts of the embodiment involved in FIG. 2A , which will not be described in detail here.

[0248] In some embodiments, the updated RID may be sent by the first network element 101 to the terminal 102. Optionally, the terminal 102 may obtain the updated RID of the first network element 101.

[0249] In some embodiments, the updated RID may be sent by the first network element 101 to the terminal 102 via the second network element. Optionally, the first network element 101 sends the updated RID to the second network element, and the second network element sends the updated RID to the terminal 102.

[0250] The optional implementation of step S4201 can refer to the optional implementation of step S2201 in 2B and other related parts in the embodiment involved in Figure 2B, which will not be repeated here.

[0251] Step S4202: trigger re-registration and / or re-authentication.

[0252] The optional implementation of step S4202 can refer to the optional implementation of step S2202 in 2B and other related parts in the embodiment involved in Figure 2B, which will not be repeated here.

[0253] Step S4203: Initiate re-registration and / or re-authentication to the PLMN or NPN.

[0254] The optional implementation of step S4203 can refer to the optional implementation of step S2203 in 2B and other related parts in the embodiment involved in Figure 2B, which will not be repeated here.

[0255] The method involved in the embodiment of the present disclosure may include at least one of steps S4201 to S4203. For example, step S4201 + step S4202 may be implemented as an independent embodiment, and step S4201 + step S4202 + step S4203 may be implemented as an independent embodiment, but the present invention is not limited thereto.

[0256] In some embodiments, step S4203 is optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0257] FIG4C is a flow chart showing an information processing method according to an embodiment of the present disclosure. As shown in FIG4C , the embodiment of the present disclosure relates to an information processing method, which can be executed by terminal 102 and may include but is not limited to the following steps.

[0258] Step S4301: receiving an updated routing indication RID, triggering re-registration and / or re-authentication.

[0259] In some embodiments, triggering re-registration and / or re-authentication is used to enable at least one of Application Authentication and Key Management AKMA, Steering of Roaming SoR, and UE Parameter Update UPU procedures.

[0260] In some embodiments, the terminal 102 receives a first message; wherein the first message is a message sent by the first network element after determining to request the terminal 102 to re-register and / or re-authenticate, the first message includes first indication information, and the first indication information is used to instruct the terminal 102 to initiate re-registration and / or re-authentication to the public land mobile network PLMN or the non-public network NPN; the terminal 102 triggers re-registration and / or re-authentication based on the first indication information.

[0261] In some embodiments, the first message also includes second indication information, which is used to indicate that the terminal 102 needs to send confirmation ACK information to the first network element after the security check on the first message is successful; wherein, the terminal 102 sends ACK information to the first network element after the security check on the first message is successful.

[0262] In some embodiments, the terminal 102 receives an updated RID, and the terminal 102 supports application authentication and key management (AKMA), triggering re-registration and / or re-authentication.

[0263] In some embodiments, terminal 102 initiates re-registration and / or re-authentication with the PLMN or NPN.

[0264] The optional implementation of step S4301 can be found in the description of the relevant steps in any of the above embodiments, and will not be repeated here.

[0265] Figure 5 is an interactive diagram illustrating an information processing method according to an embodiment of the present disclosure. As shown in Figure 5, the method according to the embodiment of the present disclosure can be applied to a communication system 100, which includes a core network device and a terminal, wherein the core network device includes a first network element. The method includes but is not limited to the following steps.

[0266] Step S5101: The first network element 101 determines to request the terminal to re-register and / or re-authenticate based on the routing indication RID data.

[0267] The optional implementation of step S5101 can refer to the optional implementation of step S2101 and step S2102 in Figure 2A, step S2201 in Figure 2B, and other related parts in the embodiments involved in Figures 2A and 2B, which will not be repeated here.

[0268] Step S5102: Terminal 102 receives the updated routing indication RID, triggering re-registration and / or re-authentication.

[0269] The optional implementation of step S5102 can be found in step S2103 and the optional implementation of step S2104 in Figure 2A, step S2202 and step S2203 in Figure 2B, and other related parts in the embodiments involved in Figures 2A and 2B, which will not be repeated here.

[0270] In some embodiments, the above method may include the method described in the above embodiments of the first network element side, terminal side, etc., which will not be repeated here.

[0271] FIG6 is a schematic diagram illustrating a process of updating UE parameters via a UDM control plane process according to an embodiment of the present disclosure. As shown in FIG6 , the process may include but is not limited to the following steps.

[0272] In step S61 , the UDM decides to perform UE parameter update.

[0273] In step S62, from UDM to AMF: UDM notifies the affected AMF of changes in UE-related information by calling the subscription data update notification (Nudm_SDM_Notification) service operation.

[0274] In some embodiments, the Nudm_SDM_Notification service operation includes UDM update data, which needs to be transparently transmitted to the UE via NAS within the access and mobility subscription data. The UDM update data may be the first message mentioned above.

[0275] In some embodiments, the UDM update data may include at least one of the following:

[0276] Update parameters to be passed to the UE (such as the updated RID);

[0277] Whether the UE needs to send an ack to the UDM (such as the second indication information, indicating whether the UE needs to send an ack message to the UDM);

[0278] Whether the UE needs to re-register after updating data (such as the first indication information, indicating whether the UE needs to re-register after updating data).

[0279] In some embodiments, if a UE parameter update is performed due to Routing Indicator update data, and the UDM currently registered with the AMF does not support the updated RID (Routing Indicator) value, the UDM shall request the UE to re-register after the update data.

[0280] In some embodiments, if a UE parameter update is performed due to Routing Indicator update data and the UE subscription information shows that the UE supports AKMA service, the UDM shall request the UE to re-register or re-authenticate after the update data.

[0281] In some embodiments, if a UE parameter update is performed due to Routing Indicator update data, and the UE subscribes to support AKMA services, and the updated Routing Indicator value is not supported by the AAnF that receives or stores the A-KID for the UE, the UDM shall request the UE to re-register or re-authenticate after the update data.

[0282] In some embodiments, if a UE parameter update is performed due to Routing Indicator update data and the updated Routing Indicator value is not supported by the AUSF that authenticated the UE, the UDM shall request the UE to re-register or re-authenticate after the update data.

[0283] In some embodiments, if a UE parameter update is performed due to Routing Indicator update data, and the UE subscription information indicates that the UE supports AKMA, the UDM shall further check the AAnF. Specifically, the UDM checks if the updated Routing Indicator value is supported by the AAnF that generates the A-KID for the UE. If the AAnF cannot support the updated RID value, the UDM shall request the UE to re-register or re-authenticate after the update data.

[0284] In step S63, from AMF to UDM: If AMF determines that the UE is not reachable, then AMF invokes the Nudm_SDM_Info service operation to UDM indicating that the transmission of UE Parameters Update data is not successful. The UDM considers the procedure as UE Parameters Update procedure as pending and subsequent steps from 4-7 are skipped.

[0285] In step S64, from AMF to UE: The AMF sends a DL NAS TRANSPORT message to the served UE. The AMF includes in the DL NAS TRANSPORT message the transparent container received from the UDM (such as UPU container, also called UDM update data).

[0286] In some embodiments, the UE needs to verify whether the UDM Update Data is provided by the HPLMN, SNPN, or CH (Credentials Holder). In some embodiments, if the security check on the UDM Update Data is successful, the UE either stores the information and uses those parameters from that point onwards, or forwards the information to the USIM. This information may include the UDM Update Data.

[0287] In some embodiments, if the security check on the UDM Update Data fails, the UE discards the contents of the UDM Update Data.

[0288] In step S65, UE to AMF: If the UE has verified that the UDM Update Data is provided by HPLMN, SNPN, or CH and the UDM has requested the UE to send an ack to the UDM, the UE sends an UL NAS TRANSPORT message to the serving AMF with a transparent container including the UE acknowledgement (such as UPU confirmation, also called UPU ACK).

[0289] In step S66, AMF to UDM: If the AMF receives an UL NAS TRANSPORT message with a transparent container carrying a UE acknowledgement from the UE, the AMF sends a Nudm_SDM_Info request message including the transparent container to the UDM.

[0290] In step S66a, if the UE parameter update is performed due to "Routing Indicator update data", the updated Routing Indicator value is also supported by the UDM where the AMF is currently registered and the UDM requests the UE to send an ack but does not request the UE to re-register, then upon reception of the transparent container indicating the acknowledgement of successful reception, the UDM shall trigger a Nudm_SDM_Notification service operation to update the UE Context in the AMF with the updated Routing Indicator Data (eg to avoid transmitting an outdated Routing Indicator Data). Indicator on UE context transfer to another AMF)).

[0291] In some embodiments, the UDM shall also notify other NFs registered in UDM (ie, SMF and SMSF) about the update of the Routing Indicator value assigned to the SUPI using the Nudm_SDM_Notification service operation.

[0292] In step S67, if the UDM has requested the UE to re-register or re-authenticate, the UE shall initiate the re-registration or re-authentication procedure.

[0293] The embodiments of the present disclosure further provide an apparatus for implementing any of the above methods. For example, an apparatus is provided that includes units or modules for implementing each step performed by the first network element in any of the above methods. For another example, another apparatus is provided that includes units or modules for implementing each step performed by the terminal in any of the above methods.

[0294] It should be understood that the division of the various units or modules in the above device is merely a division of logical functions. In actual implementation, they may be fully or partially integrated into a physical entity, or they may be physically separated. In addition, the units or modules in the device may be implemented in the form of a processor calling software: for example, the device includes a processor, the processor is connected to a memory, and the memory stores instructions. The processor calls the instructions stored in the memory to implement any of the above methods or implement the functions of the various units or modules of the above device, wherein the processor is, for example, a general-purpose processor, such as a central processing unit (CPU) or a microprocessor, and the memory is a memory within the device or a memory outside the device. Alternatively, the units or modules in the device can be implemented in the form of hardware circuits, and the functions of some or all of the units or modules can be realized by designing the hardware circuits. The above-mentioned hardware circuits can be understood as one or more processors; for example, in one implementation, the above-mentioned hardware circuit is an application-specific integrated circuit (ASIC), which realizes the functions of some or all of the above units or modules by designing the logical relationship of the components in the circuit; for example, in another implementation, the above-mentioned hardware circuit can be realized by a programmable logic device (PLD). Taking a field programmable gate array (FPGA) as an example, it can include a large number of logic gate circuits, and the connection relationship between the logic gate circuits is configured by configuring the configuration file, thereby realizing the functions of some or all of the above units or modules. All units or modules of the above devices can be realized in the form of software called by the processor, or in the form of hardware circuits, or in part by the form of software called by the processor, and the rest by hardware circuits.

[0295] In the embodiments of the present disclosure, the processor is a circuit with information processing capabilities. In one implementation, the processor can be a circuit with instruction reading and execution capabilities, such as a central processing unit (CPU), a microprocessor, a graphics processing unit (GPU) (which can be understood as a microprocessor), or a digital signal processor (DSP). In another implementation, the processor can implement certain functions through the logical relationship of the hardware circuit. The logical relationship of the above-mentioned hardware circuit is fixed or reconfigurable. For example, the processor is a hardware circuit implemented by an application-specific integrated circuit (ASIC) or a programmable logic device (PLD), such as an FPGA. In a reconfigurable hardware circuit, the process of the processor loading a configuration document and implementing the hardware circuit configuration can be understood as the process of the processor loading instructions to implement the functions of some or all of the above units or modules. In addition, it can also be a hardware circuit designed for artificial intelligence, which can be understood as an ASIC, such as a neural network processing unit (NPU), a tensor processing unit (TPU), a deep learning processing unit (DPU), etc.

[0296] Figure 7A is a schematic diagram of the structure of a first network element according to an embodiment of the present disclosure. As shown in Figure 7A , first network element 7100 may include at least one of a transceiver module 7101 and a processing module 7102. In some embodiments, processing module 7102 is configured to determine, based on routing indication (RID) data, whether to request terminal re-registration and / or re-authentication.

[0297] In some embodiments, terminal re-registration and / or re-authentication is used to enable at least one of AKMA, SoR, and UPU procedures.

[0298] In some embodiments, the processing module 7102 is configured to determine to request the terminal to re-register and / or re-authenticate when it is determined that the RID of the terminal is updated and the AKMA anchor function AAnF does not support the updated RID.

[0299] In some embodiments, the processing module 7102 is configured to determine to request the terminal to re-register and / or re-authenticate when determining to update the RID of the terminal and the authentication service function AUSF does not support the updated RID.

[0300] In some embodiments, the AUSF has authenticated the terminal and / or stored the key K of the terminal. AUSF Authentication service function.

[0301] In some embodiments, the processing module 7102 is configured to determine to request the terminal to re-register and / or re-authenticate when it is determined that the RID of the terminal is updated and the terminal supports AKMA.

[0302] In some embodiments, the processing module 7102 is used to determine whether the RID of the terminal is updated and the terminal supports AKMA, and after determining that the terminal supports AKMA, determine whether AAnF supports the updated RID; the processing module 7102 determines that AAnF does not support the updated RID, and determines to request the terminal to re-register and / or re-authenticate.

[0303] In some embodiments, the processing module 7102 is configured to determine, based on subscription information of the terminal, whether the terminal supports AKMA.

[0304] In some embodiments, AAnF is a file that stores the terminal's identity, AKMA key identifier A-KID, and AKMA anchor key K AKMA The AKMA anchor function of at least one of them.

[0305] In some embodiments, after determining that the terminal is requested to re-register and / or re-authenticate, the transceiver module 7101 sends a first message to the terminal; wherein the first message includes first indication information, and the first indication information is used to instruct the terminal to initiate re-registration and / or re-authentication with the public land mobile network PLMN or the non-public network NPN.

[0306] In some embodiments, the first message further includes second indication information, where the second indication information is used to indicate that the terminal needs to send confirmation ACK information to the first network element after the security check on the first message is successful.

[0307] Optionally, the transceiver module is used to execute at least one of the communication steps such as sending and / or receiving performed by the first network element 101 in any of the above methods (for example, step S2102, step S2201, but not limited thereto), which are not described in detail here. Optionally, the processing module is used to execute at least one of the other steps (for example, step S2101, but not limited thereto) performed by the first network element 7100 in any of the above methods, which are not described in detail here.

[0308] Figure 7B is a schematic diagram of the terminal structure proposed in an embodiment of the present disclosure. As shown in Figure 7B, terminal 7200 may include at least one of a transceiver module 7201 and a processing module 7202. In some embodiments, the processing module is configured to trigger re-registration and / or re-authentication upon receipt of an updated routing indication (RID).

[0309] In some embodiments, triggering re-registration and / or re-authentication is used to enable at least one of Application Authentication and Key Management (AKMA), Steering of Roaming (SoR), and UE Parameter Update (UPU) procedures.

[0310] In some embodiments, the transceiver module 7201 is used to receive a first message; wherein, the first message is a message sent by the first network element after determining that the terminal is requested to re-register and / or re-authenticate, and the first message includes first indication information, and the first indication information is used to instruct the terminal to initiate re-registration and / or re-authentication to the public land mobile network PLMN or the non-public network NPN; the processing module 7202 is used to trigger re-registration and / or re-authentication based on the first indication information.

[0311] In some embodiments, the first message also includes second indication information, and the second indication information is used to indicate that the terminal needs to send confirmation ACK information to the first network element after the security check of the first message is successful; wherein, the transceiver module 7201 is also used to send ACK information to the first network element after the security check of the first message is successful.

[0312] In some embodiments, the processing module 7202 is configured to trigger re-registration and / or re-authentication when an updated RID is received and the terminal supports application authentication and key management AKMA.

[0313] In some embodiments, the processing module 7202 is further configured to initiate re-registration and / or re-authentication with the PLMN or NPN.

[0314] Optionally, the transceiver module is used to perform at least one of the communication steps such as sending and / or receiving performed by the terminal 7200 in any of the above methods, which are not described in detail here. Optionally, the processing module is used to perform at least one of the other steps (such as step S2103, step S2104, step S2202, step S2203, but not limited thereto) performed by the terminal 7200 in any of the above methods, which are not described in detail here.

[0315] In some embodiments, the transceiver module may include a transmitting module and / or a receiving module, and the transmitting module and the receiving module may be separate or integrated. Optionally, the transceiver module may be interchangeable with the transceiver.

[0316] In some embodiments, the processing module can be a single module or can include multiple submodules. Optionally, the multiple submodules respectively execute all or part of the steps required to be executed by the processing module. Optionally, the processing module can be interchangeable with the processor.

[0317] Figure 8A is a schematic diagram of the structure of a communication device 8100 proposed in an embodiment of the present disclosure. Communication device 8100 can be a network device (e.g., an access network device, a core network device, etc.), a terminal (e.g., a user equipment, etc.), a chip, a chip system, or a processor that supports a network device to implement any of the above methods, or a chip, a chip system, or a processor that supports a terminal to implement any of the above methods. Communication device 8100 can be used to implement the methods described in the above method embodiments. For details, please refer to the description of the above method embodiments.

[0318] As shown in Figure 8A, the communication device 8100 includes one or more processors 8101. The processor 8101 can be a general-purpose processor or a dedicated processor, for example, a baseband processor or a central processing unit. The baseband processor can be used to process the communication protocol and communication data, and the central processing unit can be used to control the communication device (such as a base station, a baseband chip, a terminal device, a terminal device chip, a DU or a CU, etc.), execute programs, and process program data. Optionally, the communication device 8100 is used to perform any of the above methods. Optionally, one or more processors 8101 are used to call instructions to enable the communication device 8100 to perform any of the above methods.

[0319] In some embodiments, the communication device 8100 further includes one or more transceivers 8102. When the communication device 8100 includes one or more transceivers 8102, the transceiver 8102 performs at least one of the communication steps (e.g., step S2102 and step S2201, but not limited thereto) of the above method, such as sending and / or receiving, and the processor 8101 performs at least one of the other steps (e.g., step S2101, step S2103, step S2104, step S2202, and step S2203, but not limited thereto). In an optional embodiment, the transceiver may include a receiver and / or a transmitter, and the receiver and transmitter may be separate or integrated. Optionally, the terms transceiver, transceiver unit, transceiver, transceiver circuit, interface circuit, and interface may be interchangeable, the terms transmitter, transmitting unit, transmitter, and transmitting circuit may be interchangeable, and the terms receiver, receiving unit, receiver, and receiving circuit may be interchangeable.

[0320] In some embodiments, the communication device 8100 further includes one or more memories 8103 for storing data. Alternatively, all or part of the memories 8103 may be located outside the communication device 8100. In alternative embodiments, the communication device 8100 may include one or more interface circuits 8104. Optionally, the interface circuits 8104 are connected to the memory 8102 and may be configured to receive data from the memory 8102 or other devices, or to send data to the memory 8102 or other devices. For example, the interface circuits 8104 may read data stored in the memory 8102 and send the data to the processor 8101.

[0321] The communication device 8100 described in the above embodiment may be a network device or a terminal, but the scope of the communication device 8100 described in the present disclosure is not limited thereto, and the structure of the communication device 8100 may not be limited by FIG. 8A. The communication device may be an independent device or may be part of a larger device. For example, the communication device may be: 1) an independent integrated circuit IC, or a chip, or a chip system or subsystem; (2) a collection of one or more ICs, optionally, the above IC collection may also include a storage component for storing data or programs; (3) an ASIC, such as a modem; (4) a module that can be embedded in other devices; (5) a receiver, a terminal device, an intelligent terminal device, a cellular phone, a wireless device, a handheld device, a mobile unit, an in-vehicle device, a network device, a cloud device, an artificial intelligence device, etc.; (6) others, etc.

[0322] FIG8B is a schematic diagram of the structure of a chip 8200 according to an embodiment of the present disclosure. If the communication device 8100 can be a chip or a chip system, please refer to the schematic diagram of the structure of the chip 8200 shown in FIG8B , but the present disclosure is not limited thereto.

[0323] The chip 8200 includes one or more processors 8201. The chip 8200 is configured to execute any of the above methods.

[0324] In some embodiments, chip 8200 further includes one or more interface circuits 8202. Terms such as interface circuit, interface, and transceiver pins may be used interchangeably. In some embodiments, chip 8200 further includes one or more memories 8203 for storing data. Alternatively, all or part of memory 8203 may be located external to chip 8200. Optionally, interface circuit 8202 is connected to memory 8203 and may be used to receive data from memory 8203 or other devices, or may be used to send data to memory 8203 or other devices. For example, interface circuit 8202 may read data stored in memory 8203 and send the data to processor 8201.

[0325] In some embodiments, the interface circuit 8202 performs at least one of the communication steps (e.g., step S2102 and step S2201, but not limited thereto) of the aforementioned method. The interface circuit 8202 performing the communication steps (e.g., step S2102 and step S2201, but not limited thereto) of the aforementioned method means, for example, that the interface circuit 8202 performs data exchange between the processor 8201, chip 8200, memory 8203, or a transceiver device. In some embodiments, the processor 8201 performs at least one of the other steps (e.g., step S2101, step S2103, step S2104, step S2202, and step S2203, but not limited thereto).

[0326] The present disclosure also proposes a storage medium having instructions stored thereon, which, when executed on the communication device 8100, causes the communication device 8100 to execute any of the above methods. Optionally, the storage medium is an electronic storage medium. Optionally, the storage medium is a computer-readable storage medium, but is not limited thereto, and may also be a storage medium readable by other devices. Optionally, the storage medium may be a non-transitory storage medium, but is not limited thereto, and may also be a temporary storage medium.

[0327] The present disclosure also provides a program product, which, when executed by the communication device 8100, enables the communication device 8100 to perform any of the above methods. Optionally, the program product is a computer program product.

[0328] The present disclosure also proposes a computer program, which, when executed on a computer, causes the computer to perform any one of the above methods.

[0329] In the above embodiments, all or part of the embodiments can be implemented by software, hardware, firmware or any combination thereof. When implemented using software, all or part of the embodiments can be implemented in the form of a computer program product. The computer program product includes one or more computer programs. When the computer program is loaded and executed on a computer, all or part of the processes or functions described in the embodiments of the present disclosure are generated. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer program can be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer program can be transmitted from one website, computer, server or data center to another website, computer, server or data center via a wired (e.g., coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) method. The computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device such as a server or data center that includes one or more available media integrated therein. The available medium may be a magnetic medium (eg, a floppy disk, a hard disk, a magnetic tape), an optical medium (eg, a high-density digital video disc (DVD)), or a semiconductor medium (eg, a solid state disk (SSD)).

[0330] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this disclosure.

[0331] Those skilled in the art will clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0332] The above description is merely a specific embodiment of the present disclosure, but the scope of protection of the present disclosure is not limited thereto. Any changes or substitutions that can be easily conceived by a person skilled in the art within the technical scope disclosed in this disclosure should be included in the scope of protection of the present disclosure. Therefore, the scope of protection of the present disclosure should be based on the scope of protection of the claims.

Claims

1. An information processing method, characterized in that: The method comprises: The first network element determines to request the terminal to re-register and / or re-authenticate based on the routing indication RID data.

2. The method according to claim 1, characterized in that The terminal re-registration and / or re-authentication is used to enable at least one of the application authentication and key management AKMA, roaming steering SoR and UE parameter update UPU procedures.

3. The method according to claim 1 or 2, characterized in that The first network element determines, based on the routing indication RID data, to request the terminal to re-register and / or re-authenticate, including: The first network element determines to update the RID of the terminal, and the AKMA anchor function AAnF does not support the updated RID; The first network element determines to request the terminal to re-register and / or re-authenticate.

4. The method according to claim 1 or 2, characterized in that: The first network element determines, based on the routing indication RID data, to request the terminal to re-register and / or re-authenticate, including: The first network element determines to update the RID of the terminal, and the authentication service function AUSF does not support the updated RID; The first network element determines to request the terminal to re-register and / or re-authenticate.

5. The method according to claim 4, characterized in that The AUSF has authenticated the terminal and / or stored the key K of the terminal. AUSF Authentication service function.

6. The method according to claim 1 or 2, characterized in that: The first network element determines, based on the routing indication RID data, to request the terminal to re-register and / or re-authenticate, including: The first network element determines to update the RID of the terminal, and the terminal supports AKMA; The first network element determines to request the terminal to re-register and / or re-authenticate.

7. The method according to claim 1 or 2, characterized in that: The first network element determines, based on the routing indication RID data, to request the terminal to re-register and / or re-authenticate, including: The first network element determines to update the RID of the terminal, and the terminal supports AKMA; After determining that the terminal supports AKMA, the first network element determines whether AAnF supports the updated RID; The first network element determines that the AAnF does not support the updated RID, and determines to request the terminal to re-register and / or re-authenticate.

8. The method according to claim 6 or 7, characterized in that: The first network element determines that the terminal supports AKMA, including: The first network element determines, based on subscription information of the terminal, that the terminal supports AKMA.

9. The method according to claim 3 or 7, characterized in that: The AAnF stores the terminal's identity, the AKMA key identifier A-KID and the AKMA anchor key K AKMA The AKMA anchor function of at least one of them.

10. The method according to any one of claims 1 to 9, characterized in that The method further comprises: After determining to request the terminal to re-register and / or re-authenticate, the first network element sends a first message to the terminal; The first message includes first indication information, and the first indication information is used to instruct the terminal to initiate re-registration and / or re-authentication with a public land mobile network PLMN or a non-public network NPN.

11. The method according to claim 10, characterized in that The first message also includes second indication information, where the second indication information is used to indicate that the terminal needs to send confirmation ACK information to the first network element after the security check on the first message is successful.

12. An information processing method, characterized in that: The method comprises: The terminal receives the updated routing indication RID, triggering re-registration and / or re-authentication.

13. The method according to claim 12, characterized in that The triggering of re-registration and / or re-authentication is used to enable at least one of Application Authentication and Key Management AKMA, Roaming Steering SoR and UE Parameter Update UPU procedures.

14. The method according to claim 12 or 13, characterized in that The terminal receives the updated routing indication RID, triggering re-registration and / or re-authentication, including: The terminal receives a first message; wherein the first message is a message sent by the first network element after determining to request the terminal to re-register and / or re-authenticate, and the first message includes first indication information, and the first indication information is used to instruct the terminal to initiate re-registration and / or re-authentication with a public land mobile network PLMN or a non-public network NPN; The terminal triggers re-registration and / or re-authentication based on the first indication information.

15. The method according to claim 14, characterized in that The first message also includes second indication information, where the second indication information is used to indicate that the terminal needs to send confirmation ACK information to the first network element after the security check on the first message is successful; The method further comprises: After the terminal successfully performs a security check on the first message, the terminal sends the ACK information to the first network element.

16. The method according to claim 12 or 13, characterized in that: The terminal receives the updated routing indication RID, triggering re-registration and / or re-authentication, including: The terminal receives the updated RID, and the terminal supports application authentication and key management AKMA, triggering re-registration and / or re-authentication.

17. The method according to any one of claims 12 to 16, characterized in that The method further comprises: The terminal initiates re-registration and / or re-authentication to the PLMN or NPN.

18. A communication system, characterized in that: include: A core network device, the core network device comprising a first network element, the first network element being configured to execute the information processing method according to any one of claims 1 to 11; A terminal, configured to execute the information processing method according to any one of claims 12 to 17.

19. A first network element, characterized in that: include: The processing module is used to determine whether to request the terminal to re-register and / or re-authenticate based on the routing indication RID data.

20. A terminal, characterized in that: include: The processing module is used to receive the updated routing indication RID and trigger re-registration and / or re-authentication.

21. A communication device, characterized in that: include: one or more processors; The processor is used to call instructions so that the communication device executes the information processing method described in any one of claims 1-11 and 12-17.

22. A storage medium storing instructions, characterized in that: When the instruction is executed on a communication device, the communication device executes the information processing method according to any one of claims 1 to 11 and 12 to 17.

Images