Information processing method, terminal, access network device, communication system, and storage medium

Abstract

An information processing method, a terminal, an access network device, a communication system, and a storage medium. The method comprises: a terminal sending first information to an access network device, wherein the first information comprises information related to a first credentials holder and / or information related to a first non-public network. It is possible to effectively ensure that the access network device can route a message to a correct non-public network, and the correct non-public network can route the message to a correct first credentials holder, so that the terminal can reliably realize non-3GPP access.

Description

Information processing method, terminal, access network equipment, communication system and storage medium Technical Field

[0001] The present disclosure relates to the field of communication technologies, and in particular to an information processing method, a terminal, an access network device, a communication system, and a storage medium. Background Art

[0002] Non-5G-capable over WLAN devices (N5CW devices) can access the Public Land Mobile Network (PLMN) or Stand-alone Non-Public Network (SNPN) through a non-3GPP (Non-3rd Generation Partnership Project) approach.

[0003] Summary of the Invention

[0004] How to ensure the reliability of non-3GPP access of terminals is an urgent problem to be solved.

[0005] The embodiments of the present disclosure provide an information processing method, a terminal, an access network device, a communication system, and a storage medium.

[0006] In a first aspect, an embodiment of the present disclosure provides an information processing method, the method comprising:

[0007] The terminal sends first information to the access network device, where the first information includes information related to the first certificate holder and / or information related to the first non-public network.

[0008] In a second aspect, an embodiment of the present disclosure provides an information processing method, the method comprising:

[0009] The access network device receives first information sent by the terminal, where the first information includes information related to the first certificate holder and / or information related to the first non-public network.

[0010] In a third aspect, an embodiment of the present disclosure provides a terminal, comprising:

[0011] The transceiver module is configured to send first information to the access network device, where the first information includes information related to the first certificate holder and / or information related to the first non-public network.

[0012] In a fourth aspect, an embodiment of the present disclosure provides an access network device, wherein the first device includes:

[0013] The transceiver module is configured to receive first information sent by the terminal, where the first information includes information related to the first credential holder and / or information related to the first non-public network.

[0014] In a fifth aspect, an embodiment of the present disclosure provides a terminal, including:

[0015] one or more processors;

[0016] A memory coupled to the one or more processors, the memory comprising executable instructions, which, when executed by the one or more processors, enable the terminal to execute the information processing method described in the first aspect.

[0017] In a sixth aspect, an embodiment of the present disclosure provides an access network device, including:

[0018] one or more processors;

[0019] A memory coupled to the one or more processors, the memory comprising executable instructions, which, when executed by the one or more processors, causes the access network device to execute the information processing method described in the second aspect.

[0020] In the seventh aspect, an embodiment of the present disclosure proposes a communication system, including a terminal and an access network device, wherein the terminal is configured to implement the information processing method described in the first aspect, and the access network device is configured to implement the information processing method described in the second aspect.

[0021] In an eighth aspect, an embodiment of the present disclosure proposes a storage medium storing instructions. When the instructions are executed on a communication device, the communication device executes the information processing method as described in the first aspect or the second aspect.

[0022] It can effectively ensure that the access network device can route the message to the correct non-public network, and enable the correct non-public network to route the message to the correct first certificate holder, so that the terminal can reliably achieve non-3GPP access. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] In order to more clearly illustrate the technical solutions in the embodiments of the present disclosure, the following drawings required for describing the embodiments are introduced. The following drawings are merely some embodiments of the present disclosure and do not impose specific limitations on the protection scope of the present disclosure.

[0024] FIG1 is an exemplary schematic diagram of the architecture of a communication system provided according to an embodiment of the present disclosure.

[0025] FIG2 is an exemplary interaction diagram of an information processing method provided according to an embodiment of the present disclosure.

[0026] FIG3A is a schematic diagram of an exemplary flow chart of an information processing method provided according to an embodiment of the present disclosure.

[0027] FIG4A is a schematic diagram of an exemplary flow chart of an information processing method provided according to an embodiment of the present disclosure.

[0028] FIG4B is a schematic diagram of an exemplary flow chart of an information processing method provided according to an embodiment of the present disclosure.

[0029] FIG4C is a schematic diagram of an exemplary flow chart of an information processing method provided according to an embodiment of the present disclosure.

[0030] FIG5 is an exemplary interaction diagram of an information processing method provided according to an embodiment of the present disclosure.

[0031] FIG6A is a schematic diagram of an exemplary flow chart of an information processing method provided according to an embodiment of the present disclosure.

[0032] FIG6B is a schematic diagram of an exemplary flow chart of an information processing method provided according to an embodiment of the present disclosure.

[0033] FIG7A is a schematic diagram of an exemplary structure of a terminal provided according to an embodiment of the present disclosure.

[0034] FIG7B is a schematic diagram of an exemplary structure of a network device provided according to an embodiment of the present disclosure.

[0035] FIG8A is a schematic diagram of an exemplary structure of a communication device provided according to an embodiment of the present disclosure.

[0036] FIG8B is a schematic diagram of an exemplary structure of a communication device provided according to an embodiment of the present disclosure. DETAILED DESCRIPTION

[0037] The embodiments of the present disclosure provide an information processing method, a terminal, an access network device, a communication system, and a storage medium.

[0038] In a first aspect, an embodiment of the present disclosure provides an information processing method, the method comprising:

[0039] The terminal sends first information to the access network device, where the first information includes information related to the first certificate holder and / or information related to the first non-public network.

[0040] In the above embodiment, the terminal can send first information including information related to the first credential holder and / or information related to the first non-public network to the access network device, so that the access network device can reliably route a message (e.g., an authentication-related message) to the correct non-public network based on the information related to the first non-public network, and the correct non-public network can route the message to the correct first credential holder based on the information related to the first credential holder. The message can be an authentication-related message.

[0041] In conjunction with some embodiments of the first aspect, in some embodiments, the first credential holder is any one of the following:

[0042] Credential holders based on authentication, authorization and accounting (AAA) servers;

[0043] Non-public network (NPN)-based certificate holders;

[0044] A certificate holder based on a Public Land Mobile Network (PLMN).

[0045] In the above embodiment, the access network device can send messages to the corresponding non-public network based on the information related to the above-mentioned first non-public network, and the corresponding non-public network can send messages to the corresponding credential owner based on the information related to the above-mentioned first credential owner, thereby ensuring that the terminal can access the network based on the credential holder.

[0046] In combination with some embodiments of the first aspect, in some embodiments, the first credential holder is the credential holder based on the AAA server, and the information related to the first credential holder includes: realm information of the AAA server.

[0047] In the above embodiment, the terminal can send the area information of the AAA server so that the access network device can send the message to the corresponding non-public network based on the information related to the above-mentioned first non-public network, and enable the network element or device in the corresponding non-public network to accurately determine the credential holder based on the AAA server according to the area information of the AAA server, and then route the message to the credential holder, thereby ensuring that the terminal can reliably access the network using the credential holder based on the AAA server.

[0048] In conjunction with some embodiments of the first aspect, in some embodiments, the first credential holder is the NPN-based credential holder, and the information related to the first credential holder includes at least one of the following:

[0049] The network identification of the NPN-based credential holder;

[0050] the mobile network code of the NPN-based credential holder;

[0051] The mobile country code of the NPN-based credential holder.

[0052] In the above embodiment, the terminal can send one or more of the above information of the NPN-based credential holder, so that the access network device can send the message to the corresponding non-public network based on the information related to the above-mentioned first non-public network, and enable the network element or device in the corresponding non-public network to determine the NPN-based credential holder based on the above information, and then send the message to the credential holder, thereby ensuring that the terminal can reliably access the network using the NPN-based credential holder.

[0053] In conjunction with some embodiments of the first aspect, in some embodiments, the first credential holder is the PLMN-based credential holder, and the information related to the first credential holder includes at least one of the following:

[0054] The mobile network code of the PLMN-based certificate holder;

[0055] The PLMN-based certificate holder's Mobile Country Code.

[0056] In the above embodiment, the terminal can send one or more of the above information of the PLMN-based certificate holder, so that the access network device sends the message to the corresponding non-public network based on the information related to the above first non-public network, and enables the network element or device in the corresponding first non-public network to determine the PLMN-based certificate holder based on the above information, and then send the message to the certificate holder, thereby ensuring that the terminal can reliably access the network using the PLMN-based certificate holder.

[0057] In conjunction with some embodiments of the first aspect, in some embodiments, the first non-public network-related information includes at least one of the following:

[0058] a network identifier of the first non-public network;

[0059] a mobile network code of the first non-public network;

[0060] The mobile country code of the first non-public network.

[0061] In conjunction with some embodiments of the first aspect, in some embodiments, the first non-public network is any one of the following:

[0062] The non-public network that the terminal is accessing;

[0063] a serving non-public network (serving NPN) of the terminal;

[0064] A non-public network associated with the first credential holder.

[0065] In the above embodiment, by sending at least one of the above information related to the first non-public network, the terminal can enable the access network device to accurately determine the non-public network that the terminal is currently visiting, the terminal's service non-public network, or the non-public network associated with the first certificate holder, thereby ensuring that the access network device can send the message to the correct non-public network.

[0066] In conjunction with some embodiments of the first aspect, in some embodiments, the non-public network associated with the first credential holder is any one of the following:

[0067] SNPN with Credentials Holder using AAA Server for primary authentication and authorization;

[0068] SNPN with Credentials Holder using AUSF and UDM for primary authentication and authorization.

[0069] In the above embodiment, the access network device may also be enabled to determine independent non-public networks associated with different credential holders.

[0070] In combination with some embodiments of the first aspect, in some embodiments, the terminal is a terminal that does not support 5G on a wireless local area network (non-5G-capable over WLAN device, N5CW device), and the access network device is a trusted wireless local area network access network (trusted wlan access network, TWAN) device.

[0071] In combination with some embodiments of the first aspect, in some embodiments, the access network device includes a trusted wireless LAN access point (TWAP)-related device and a trusted wireless LAN interworking function (TWIF)-related device.

[0072] In conjunction with some embodiments of the first aspect, in some embodiments, the terminal sending the first information to the access network device includes:

[0073] The terminal sends the first information to the TWIF-related device through the TWAP-related device.

[0074] In combination with some embodiments of the first aspect, in some embodiments, the first information also includes an indicator, which is used to indicate that the information related to the first certificate holder and / or the information related to the first non-public network is used for trusted non-3GPP access of terminals that do not support 5G on the wireless local area network.

[0075] In the above embodiment, N5CW devices that do not support 5G on the wireless local area network can access the network through TWAN in a non-3GPP manner, thereby ensuring the communication performance of the N5CW devices.

[0076] In a second aspect, an embodiment of the present disclosure provides an information processing method, the method comprising:

[0077] The access network device receives first information sent by the terminal, where the first information includes information related to the first certificate holder and / or information related to the first non-public network.

[0078] In conjunction with some embodiments of the second aspect, in some embodiments, the first credential holder is any one of the following:

[0079] Credential holder based authentication, authorization and accounting AAA server;

[0080] Certificate holders based on non-public network (NPN);

[0081] A certificate holder based on a Public Land Mobile Network (PLMN).

[0082] In combination with some embodiments of the second aspect, in some embodiments, the first credential holder is the credential holder based on the AAA server, and the information related to the first credential holder includes: realm information of the AAA server.

[0083] In conjunction with some embodiments of the second aspect, in some embodiments, the first credential holder is the NPN-based credential holder, and the information related to the first credential holder includes at least one of the following:

[0084] The network identification of the NPN-based credential holder;

[0085] the mobile network code of the NPN-based credential holder;

[0086] The mobile country code of the NPN-based credential holder.

[0087] In conjunction with some embodiments of the second aspect, in some embodiments, the first credential holder is the PLMN-based credential holder, and the information related to the first credential holder includes at least one of the following:

[0088] The mobile network code of the PLMN-based certificate holder;

[0089] The PLMN-based certificate holder's Mobile Country Code.

[0090] In conjunction with some embodiments of the second aspect, in some embodiments, the first non-public network-related information further includes at least one of the following:

[0091] a network identifier of the first non-public network;

[0092] a mobile network code of the first non-public network;

[0093] The mobile country code of the first non-public network.

[0094] In conjunction with some embodiments of the second aspect, in some embodiments, the first non-public network is any one of the following:

[0095] The non-public network that the terminal is accessing;

[0096] The service network of the terminal is not a public network;

[0097] A non-public network associated with the first credential holder.

[0098] In conjunction with some embodiments of the second aspect, in some embodiments, the non-public network associated with the first credential holder is any one of the following:

[0099] an independent non-public network associated with a first credential holder that performs initial authentication and authorization using the AAA server;

[0100] An independent, non-public network associated with the first credential holder that uses UDM and AUSF for initial authentication and authorization.

[0101] In conjunction with some embodiments of the second aspect, in some embodiments, the method further includes:

[0102] The access network device deletes the information related to the first non-public network in the first information to generate second information.

[0103] In conjunction with some embodiments of the second aspect, in some embodiments, the method further includes:

[0104] The access network device sends the second information to the first non-public network.

[0105] In the above embodiment, the access network device can delete the information related to the first non-public network in the first information, so that the network elements or devices in the first non-public network (such as network functions such as AMF and / or SEAF and / or UDM and / or NSSAAF in the first non-public network) do not need to support decorated NAI, or the network elements or devices in the first non-public network do not need to perform further operations on the first information, effectively reducing the impact on the information processing of the network device and contributing to the smooth upgrade of the network.

[0106] In combination with some embodiments of the second aspect, in some embodiments, the terminal is a terminal that does not support 5G on a wireless local area network, and the access network device is a trusted wireless local area network access network TWAN device.

[0107] In combination with some embodiments of the second aspect, in some embodiments, the access network device includes a device related to a trusted wireless local area network access point TWAP and a device related to a trusted wireless local area network interaction function TWIF.

[0108] In conjunction with some embodiments of the second aspect, in some embodiments, the access network device receiving the first information sent by the terminal includes:

[0109] The TWIF-related device receives the first information sent by the terminal through the TWAP-related device.

[0110] In combination with some embodiments of the second aspect, in some embodiments, the first information also includes an indicator, which is used to indicate that the information related to the first certificate holder and / or the information related to the first non-public network is used for trusted non-3GPP access of the terminal.

[0111] In a third aspect, an embodiment of the present disclosure provides a terminal, comprising:

[0112] The transceiver module is configured to send first information to the access network device, where the first information includes information related to the first certificate holder and / or information related to the first non-public network.

[0113] In a fourth aspect, an embodiment of the present disclosure provides an access network device, wherein the first device includes:

[0114] The transceiver module is configured to receive first information sent by the terminal, where the first information includes information related to the first credential holder and / or information related to the first non-public network.

[0115] In a fifth aspect, an embodiment of the present disclosure proposes a terminal, which includes: one or more processors; a memory for storing processor-executable instructions; wherein the processor is configured to execute an optional implementation method of the first aspect.

[0116] In a sixth aspect, an embodiment of the present disclosure proposes an access network device, which includes: one or more processors; a memory for storing processor-executable instructions; wherein the processor is configured to execute the optional implementation method of the second aspect.

[0117] In the seventh aspect, an embodiment of the present disclosure proposes a communication system, which includes: a terminal and an access network device; wherein the terminal is configured to execute the method described in the optional implementation manner of the first aspect, and the access network device is configured to execute the method described in the optional implementation manner of the second aspect.

[0118] In an eighth aspect, an embodiment of the present disclosure proposes a storage medium, wherein the storage medium stores instructions. When the instructions are executed on a communication device, the communication device executes the method described in the optional implementation of the first and second aspects.

[0119] In a ninth aspect, an embodiment of the present disclosure proposes a program product. When the program product is executed by a communication device, the communication device executes the method described in the optional implementation of the first and second aspects.

[0120] In a tenth aspect, an embodiment of the present disclosure proposes a computer program, which, when executed on a computer, enables the computer to execute the method described in the optional implementation of the first and second aspects.

[0121] In an eleventh aspect, an embodiment of the present disclosure provides a chip or a chip system, wherein the chip or chip system includes a processing circuit configured to execute the method described in the optional implementation of the first and second aspects above.

[0122] It is understandable that the above-mentioned terminals, access network devices, communication systems, storage media, program products, computer programs, chips, or chip systems are all used to perform the methods proposed in the embodiments of the present disclosure. Therefore, the beneficial effects that can be achieved can refer to the beneficial effects of the corresponding methods and will not be repeated here.

[0123] The embodiments of the present disclosure provide information processing methods, terminals, access network devices, communication systems, and storage media. In some embodiments, the terms "information processing method," "information sending method," and "communication method" are interchangeable; the terms "information processing device," "information sending device," and "communication device" are interchangeable; and the terms "information processing system," "communication system," and "communication system" are interchangeable.

[0124] The embodiments of the present disclosure are not exhaustive and are merely illustrative of some embodiments, and are not intended to be a specific limitation on the scope of protection of the present disclosure. In the absence of contradiction, each step in a certain embodiment can be implemented as an independent embodiment, and the steps can be arbitrarily combined. For example, a solution after removing some steps in a certain embodiment can also be implemented as an independent embodiment, and the order of the steps in a certain embodiment can be arbitrarily exchanged. In addition, the optional implementation methods in a certain embodiment can be arbitrarily combined; in addition, the embodiments can be arbitrarily combined. For example, some or all steps of different embodiments can be arbitrarily combined, and a certain embodiment can be arbitrarily combined with the optional implementation methods of other embodiments.

[0125] In each embodiment of the present disclosure, unless otherwise specified or provided for by logic, the terms and / or descriptions between the embodiments are consistent and can be referenced by each other. The technical features in different embodiments can be combined to form a new embodiment based on their inherent logical relationships.

[0126] The terms used in the embodiments of the present disclosure are only for the purpose of describing specific embodiments and are not intended to limit the present disclosure.

[0127] In the embodiments of the present disclosure, unless otherwise specified, elements expressed in the singular, such as "a", "an", "the", "above", "said", "the", "the", etc., may mean "one and only one", or "one or more", "at least one", etc. For example, when using articles such as "a", "an", "the" in English in translation, the noun following the article may be understood as a singular expression or a plural expression.

[0128] In the embodiments of the present disclosure, “plurality” refers to two or more.

[0129] In some embodiments, the terms "at least one," "one or more," "a plurality of," "multiple," etc. may be used interchangeably.

[0130] In some embodiments, descriptions such as "at least one of A and B," "A and / or B," "A in one case, B in another case," or "in response to one case A, in response to another case B" may include the following technical solutions depending on the situation: in some embodiments, A (A is executed independently of B); in some embodiments, B (B is executed independently of A); in some embodiments, execution is selected from A and B (A and B are selectively executed); and in some embodiments, A and B (both A and B are executed). The above is also applicable when there are more branches such as A, B, and C.

[0131] In some embodiments, "A or B" and other descriptions may include the following technical solutions depending on the situation: in some embodiments, A (A is executed independently of B); in some embodiments, B (B is executed independently of A); in some embodiments, execution is selected from A and B (A and B are selectively executed). The above is also applicable when there are more branches such as A, B, C, etc.

[0132] The prefixes such as "first" and "second" in the embodiments of the present disclosure are only used to distinguish different description objects and do not constitute any restriction on the position, order, priority, quantity or content of the description objects. For the statement of the description object, please refer to the description in the context of the claims or embodiments, and no unnecessary restriction should be constituted due to the use of prefixes. For example, if the description object is a "field", the ordinal number before the "field" in the "first field" and the "second field" does not limit the position or order between the "fields". "First" and "second" do not limit whether the "fields" they modify are in the same message, nor do they limit the order of the "first field" and the "second field". For another example, if the description object is a "level", the ordinal number before the "level" in the "first level" and the "second level" does not limit the priority between the "levels". For another example, the number of description objects is not limited by the ordinal number and can be one or more. Taking "first device" as an example, the number of "devices" can be one or more. In addition, the objects modified by different prefixes can be the same or different. For example, if the description object is "device", then the "first device" and the "second device" can be the same device or different devices, and their types can be the same or different; for another example, if the description object is "information", then the "first information" and the "second information" can be the same information or different information, and their contents can be the same or different.

[0133] In some embodiments, “including A,” “comprising A,” “used to indicate A,” and “carrying A” can be interpreted as directly carrying A or indirectly indicating A.

[0134] In some embodiments, terms such as "time / frequency" and "time / frequency domain" refer to the time domain and / or the frequency domain.

[0135] In some embodiments, terms such as "in response to...", "in response to determining...", "in the case of...", "at the time of...", "when...", "if...", "if...", etc. can be used interchangeably.

[0136] In some embodiments, terms such as "greater than", "greater than or equal to", "not less than", "more than", "more than or equal to", "not less than", "higher than", "higher than or equal to", "not less than", and "above" can be replaced with each other, and terms such as "less than", "less than or equal to", "not greater than", "less than", "less than or equal to", "not more than", "lower than", "lower than or equal to", "not higher than", and "below" can be replaced with each other.

[0137] In some embodiments, devices, etc. can be interpreted as physical or virtual, and their names are not limited to the names recorded in the embodiments. Terms such as "device", "equipment", "device", "circuit", "network element", "node", "function", "unit", "section", "system", "network", "chip", "chip system", "entity", and "subject" can be used interchangeably.

[0138] In some embodiments, "network" can be interpreted as devices included in the network (eg, access network equipment, core network equipment, etc.).

[0139] In some embodiments, the terms "access network device (AN device)", "radio access network device (RAN device)", "base station (BS)", "radio base station" "fixed station", "node", "access point", "transmission point (TP)", "reception point (RP)", "transmission / reception point (TRP)" "panel", "antenna panel", "antenna array", "cell", "macro cell", "small cell", "femto cell", "pico cell", "sector", "cell group", "serving cell", "carrier", "component carrier", "bandwidth part (BWP)" and the like may be used interchangeably.

[0140] In some embodiments, the terms "terminal", "terminal device", "user equipment (UE)", "user terminal", "mobile station (MS)", "mobile terminal (MT)", subscriber station, mobile unit, subscriber unit, wireless unit, remote unit, mobile device, wireless device, wireless communication device, remote device, mobile subscriber station, access terminal, mobile terminal, wireless terminal, remote terminal, handset, user agent, mobile client, client, etc. can be used interchangeably.

[0141] In some embodiments, the access network device, the core network device, or the network device can be replaced by a terminal. For example, the various embodiments of the present disclosure can also be applied to a structure in which the communication between the access network device, the core network device, or the network device and the terminal is replaced by communication between multiple terminals (for example, device-to-device (D2D), vehicle-to-everything (V2X), etc.). In this case, it is also possible to set the structure in which the terminal has all or part of the functions of the access network device. In addition, terms such as "uplink" and "downlink" can also be replaced by terms corresponding to communication between terminals (for example, "side"). For example, uplink channels, downlink channels, etc. can be replaced by side channels, and uplinks, downlinks, etc. can be replaced by side links.

[0142] In some embodiments, the terminal may be replaced by an access network device, a core network device, or a network device. In this case, the access network device, the core network device, or the network device may have a structure that has all or part of the functions of the terminal.

[0143] In some embodiments, obtaining data, information, etc. may comply with the laws and regulations of the country where the data is obtained.

[0144] In some embodiments, data, information, etc. may be obtained with the user's consent.

[0145] In addition, each element, each row, or each column in the table of the embodiment of the present disclosure can be implemented as an independent embodiment, and the combination of any elements, any rows, and any columns can also be implemented as an independent embodiment.

[0146] FIG1A is a schematic diagram illustrating the architecture of a communication system according to an embodiment of the present disclosure. As shown in FIG1A , a communication system 100 includes a terminal 101 and an access network device 102 .

[0147] In some embodiments, the terminal 101 includes, for example, a mobile phone, a wearable device, an Internet of Things device, a car with communication function, a smart car, a tablet computer, a computer with wireless transceiver function, a virtual reality (VR) terminal device, an augmented reality (AR) terminal device, a wireless terminal device in industrial control, a wireless terminal device in self-driving, a wireless terminal device in remote medical surgery, a wireless terminal device in a smart grid, a wireless terminal device in transportation safety, a wireless terminal device in a smart city, and at least one of a wireless terminal device in a smart home, but is not limited thereto.

[0148] In some embodiments, the access network device 102 is, for example, a node or device that accesses a terminal to a wireless network. The access network device may include an evolved NodeB (eNB), a next generation evolved NodeB (ng-eNB), a next generation NodeB (gNB), a node B (NB), a home node B (HNB), a home evolved nodeB (HeNB), a wireless backhaul device, a radio network controller (RNC), a base station controller (BSC), a base transceiver station (BTS), a base band unit (BBU), a mobile switching center, a base station in a 6G communication system, an open base station (Open RAN), a cloud base station (Cloud RAN), a base station in other communication systems, and at least one of an access node in a Wi-Fi system, but is not limited thereto.

[0149] In some embodiments, the technical solution of the present disclosure can be applied to the Open RAN architecture. In this case, the interfaces between or within the access network devices involved in the embodiments of the present disclosure can be transformed into internal interfaces of the Open RAN, and the processes and information interactions between these internal interfaces can be implemented through software or programs.

[0150] In some embodiments, the access network device 103 can be composed of a centralized unit (CU) and a distributed unit (DU), where the CU can also be called a control unit. The CU-DU structure can be used to split the protocol layer of the access network device, with the functions of some protocol layers centrally controlled by the CU, and the functions of the remaining part or all of the protocol layers distributed in the DU, which is centrally controlled by the CU, but is not limited to this.

[0151] In some embodiments, the access network device 103 may be a trusted wireless local area network (TWAN) device. Optionally, the access network device includes devices related to a trusted wireless local area network (TWAP) access point and devices related to a trusted wireless local area network (TWIF) interworking function. Optionally, the TWAP-related devices may be, for example, base stations or WLAN routers. Optionally, the TWIF-related devices may be, for example, provided as TWIF network elements.

[0152] In some embodiments, the terminal 101 is a non-5G-capable over WLAN (N5CW) device on a wireless local area network. Optionally, the terminal 101 can access the NPN through a trusted WLAN using credentials provided by a credential holder. Optionally, the NPN may include an access network device 102 and a core network device. Optionally, the core network device may be a device including a first network element, a second network element, a third network element, a fourth network element, a fifth network element, etc., or may be a plurality of devices or a group of devices including all or part of the first network element, the second network element, the third network element, the fourth network element, the fifth network element, etc. The network element may be virtual or physical. The core network, for example, includes at least one of an evolved packet core (EPC), a 5G core network (5GCN), and a next generation core (NGC).

[0153] In some embodiments, the first network element is, for example, an authentication management function (AMF) network element.

[0154] In some other embodiments, the first network element is, for example, a Security Anchor Function (SEAF) network element.

[0155] In some embodiments, the second network element is, for example, an authentication service function (AUSF) network element.

[0156] In some embodiments, the third network element is, for example, a unified data management (UDM) network element.

[0157] In some embodiments, the fourth network element is, for example, a network slice-specific authentication and authorization function (NSSAAF) network element.

[0158] In some embodiments, the fifth network element is, for example, an authentication, authorization, and accounting (AAA) server.

[0159] In some embodiments, the second network element, the third network element, the fourth network element, and the fifth network element may belong to the certificate holder.

[0160] In some embodiments, the second network element and the third network element may be used to construct the credential holder. Alternatively, the fifth network element may be used alone to construct the credential holder.

[0161] FIG1B is a schematic diagram illustrating an architecture of a communication system according to an embodiment of the present disclosure. As shown in FIG1B , the communication system 100 may include a terminal 101 , an access network device 102 , a first non-public network 103 , and a first certificate holder 104 .

[0162] As shown in Figure 1B, terminal 101 can be connected to access network device 102. Optionally, terminal 102 can access first non-public network 103 through access network device 102. In some embodiments, terminal 102 can also access second network 105 through access network device 102. It is understood that access network device 102 can be a device in first non-public network 103 or a device in second network 105.

[0163] In some embodiments, the access network device 102 includes a TWAP 1021 and a TWIF 1022. Optionally, the TWAP 1021 and the TWIF 1022 can exchange data.

[0164] In some embodiments, if the terminal 101 wants to access the first network 102, it needs to be authenticated by the first credential holder 104. Optionally, the terminal 101 can send a first message to the access network device 102. Optionally, the access network device 102 determines, based on the information related to the first non-public network 103 in the first message, that the terminal 101 needs to send authentication-related information to the first non-public network 103, such as the first network element 1031 (such as the AMF network element and / or the SEAF network element) in the first non-public network 103. Optionally, the access network device 102 can delete the information related to the first non-public network 103 in the first message, reformat it, and send the reformatted data to the first non-public network 103.

[0165] In some embodiments, terminal 101 may send the first message to TWIF 1022. Alternatively, terminal 101 may send the first message to TWIF 1022 via TWAP 1021. Alternatively, TWIF 1022 may determine, based on information related to first non-public network 103 in the first message, that terminal 101 needs to send authentication-related information to first non-public network 103.

[0166] Optionally, a device or network element (e.g., first network element 1031) in the first non-public network 103 may determine that the terminal needs to send a message to the first credential holder 104 based on the information related to the first credential holder 104 in the first information. Optionally, the first non-public network 103 sends a message to the first credential holder 104, such as an AUSF or AAA server in the network where the first credential holder 104 is located, so that the first credential holder 104 authenticates the terminal 101. Optionally, the network where the first credential holder 104 is located and the first non-public network may be in different realms. Optionally, the network where the first credential holder 104 is located may be built based on a PLMN, may be built based on an NPN, or may be built based on an AAA server, and this is not limited in the embodiments of the present disclosure.

[0167] In some embodiments, the network where the first credential holder 104 is located may be constructed based on an NPN. The NPN may be a first non-public network or a second non-public network different from the first non-public network. This embodiment of the present disclosure does not limit this.

[0168] It is worth noting that in the above embodiment, only the authentication process of the terminal 101 is taken as an example. The access network device 102 can not only route authentication-related information to the first non-public network 103, but also route other messages to the first non-public network 103 or the second network 105, such as messages related to the slicing information of the terminal 101, etc. The embodiment of the present disclosure does not limit this.

[0169] It can be understood that the communication system described in the embodiment of the present disclosure is for the purpose of more clearly illustrating the technical solution of the embodiment of the present disclosure, and does not constitute a limitation on the technical solution proposed in the embodiment of the present disclosure. Ordinary technicians in this field can know that with the evolution of the system architecture and the emergence of new business scenarios, the technical solution proposed in the embodiment of the present disclosure is also applicable to similar technical problems.

[0170] The following embodiments of the present disclosure may be applied to the communication system 100 shown in FIG1 , or a portion thereof, but are not limited thereto. The entities shown in FIG1 are illustrative only. The communication system may include all or part of the entities shown in FIG1 , or may include other entities outside of FIG1 . The number and form of the entities are arbitrary, and the entities may be physical or virtual. The connection relationships between the entities are illustrative only. The entities may be connected or disconnected, and the connection may be in any manner, including direct or indirect, wired or wireless.

[0171] The embodiments of the present disclosure can be applied to Long Term Evolution (LTE), LTE-Advanced (LTE-A), LTE-Beyond (LTE-B), SUPER 3G, IMT-Advanced, 4th generation mobile communication system (4G), 5th generation mobile communication system (5G), 5G new radio (NR), future radio access (FRA), new radio access technology (RAT), new radio (NR), new radio access (NX), future generation radio access (FX), Global System for Mobile communications (GSM (registered trademark)), CDMA2000, Ultra Mobile Broadband (UMB), IEEE 802.11 (Wi-Fi (registered trademark)), IEEE 802.16 (WiMAX (registered trademark)), IEEE 802.20, Ultra-WideBand (UWB), Bluetooth (registered trademark), Public Land Mobile Network (PLMN) networks, Device-to-Device (D2D) systems, Machine-to-Machine (M2M) systems, Internet of Things (IoT) systems, Vehicle-to-Everything (V2X), systems utilizing other communication methods, and next-generation systems based on and extending these methods. Furthermore, multiple systems may be combined (for example, a combination of LTE or LTE-A with 5G).

[0172] In some embodiments, to enable an N5CW device to access the NPN, the credential holder will authenticate the N5CW device using the credential and provide the authentication result to the NPN. If the NPN and the credential holder are in different realms, the N5CW authentication information should be routed through two different realms (i.e., the NPN realm and the credential holder realm).

[0173] In some embodiments, a trusted wireless LAN access point (TWAP) may be connected to multiple NPNs. In order for the TWAP to route information to the correct NPN, the N5CW device needs to send an NAI containing the NPN field and the credential holder field to the TWAN.

[0174] In some embodiments, the credential holder itself can be built based on an AAA server, an NPN, or a PLMN, which means that the NPN accessed by the N5CW device can be connected to the NPN or PLMN. In other words, the information of the N5CW device should be able to be routed to different types of credential holders.

[0175] FIG2 is an interactive diagram of an information processing method according to an embodiment of the present disclosure. As shown in FIG2 , the present disclosure embodiment relates to an information processing method, which includes:

[0176] Step S2101: The terminal sends first information to the access network device.

[0177] In some embodiments, the first information includes information related to the first credential holder and / or information related to the first non-public network. Optionally, the first information can be constructed by the terminal based on information related to the first credential holder and / or information related to the first non-public network. In some embodiments, the access network device can connect to multiple networks, such as multiple non-public networks (NPNs). Optionally, the terminal can access the multiple networks through the access network device. Optionally, the multiple networks include at least the first non-public network. Optionally, the first credential holder and the first non-public network are in different realms. Optionally, the first information is used by the access network device to determine the first non-public network. Optionally, the terminal determines the first non-public network based on information related to the first non-public network.

[0178] In some embodiments, the first message is used by the access network device to route a message. Optionally, the first information includes the message. Optionally, the message may be, for example, authentication-related information. Optionally, the first message is used by the access network device to route the authentication-related message to the corresponding first non-public network.

[0179] In some embodiments, the terminal is a non-5G-capable over WLAN (N5CW) device that does not support 5G on a wireless local area network. Optionally, the access network device is a trusted wireless local area network access network (TWAN) device. Optionally, the access network device includes trusted wireless local area network access point (TWAP)-related devices and trusted wireless local area network interworking function (TWIF)-related devices. Optionally, TWAP-related devices may be, for example, base stations or WLAN routers. Optionally, TWIF-related devices may be provided as TWIF network elements, for example.

[0180] In some embodiments, the terminal may hold a credential provided by a first credential holder. Optionally, the credential is used by the first credential holder to authenticate the terminal. Optionally, the terminal may determine the first credential holder based on the credential. Optionally, the terminal may also determine information related to the first credential holder based on the credential.

[0181] In some embodiments, optionally, the first information is used for trusted non-3GPP access of the terminal. Optionally, the first information is used for trusted WLAM access of the terminal. Optionally, the first information includes an indicator, which is used to indicate the trusted non-3GPP access of the terminal of information related to the first certificate holder and / or information related to the first non-public network. For example, the terminal sends the first information to the access network device, so that the access network device routes the authentication-related information to the first non-public network based on the first information, and then the non-public network sends the authentication-related information to the first certificate holder. After the first certificate holder and the terminal complete mutual authentication, the first certificate holder provides the corresponding key to the non-public network, so that the terminal and the non-public network can be securely connected based on the key, thereby completing the trusted non-3GPP access of the terminal.

[0182] In some embodiments, the first information may be a Subscription Concealed Identifier (SUCI). Alternatively, the first information may be a Network Access Identifier (NAI). Alternatively, the first information may be a Decorated Network Access Identifier (NAI). In some embodiments, the name of the first information is not limited, and may be, for example, "routing indication information," "access authentication information," "network indication information," etc., which is not limited in the embodiments of the present disclosure.

[0183] In some embodiments, the first credential holder may be created based on an AAA server. Alternatively, the first credential holder may be created based on an NPN. Alternatively, the first credential holder may be created based on a PLMN.

[0184] In some embodiments, the first credential holder is any one of the following:

[0185] AAA server based Credentials Holder;

[0186] NPN based Credentials Holder;

[0187] PLMN based Credentials Holder.

[0188] Optionally, the certificate held by the terminal may be provided by any of the above certificate holders. Optionally, the terminal has the ability to access the corresponding network through any of the above certificate holders.

[0189] In some embodiments, the information related to the first non-public network includes at least one of the following: a network identifier of the first non-public network, such as NID (Network Identifier); a mobile network code of the first non-public network, such as MNC (mobile network code); and a mobile country code of the first non-public network, such as MCC (mobile country code).

[0190] For example, if the first non-public network is a network provided by China Mobile, the mobile network code of the first non-public network may be 00 or 02, and the mobile country code may be 460.

[0191] In some embodiments, the first non-public network is any one of the following: a non-public network being accessed by the terminal; a serving non-public network of the terminal; or a non-public network associated with the first credential holder.

[0192] In some embodiments, the first credential holder can be deployed in a variety of ways. The first credential holder can be a credential holder using an AAA server for primary authentication and authorization. Alternatively, the first credential holder can be a credential holder using AUSF and UDM for primary authentication and authorization.

[0193] In some embodiments, the non-public network associated with the first credential holder is any one of the following: an independent non-public network associated with the first credential holder that uses an AAA server for initial authentication and authorization, that is, the independent non-public network is a non-public network connected to the credential holder built based on the AAA server; an independent non-public network associated with the first credential holder that uses UDM and AUSF for initial authentication and authorization, that is, the independent non-public network is a non-public network connected to the credential holder built based on UDM and AUSF.

[0194] In some embodiments, the first information may further include terminal identification information. Optionally, the terminal identification information is used to identify the terminal. Optionally, the terminal identification information is used by the access network device to determine that the first information is sent by the terminal.

[0195] In some embodiments, the first credential holder is a credential holder based on an AAA server, and the information related to the first credential holder includes: realm information of the AAA server. Optionally, the information related to the first credential holder may also include a fully qualified domain name (FQDN) of the AAA server.

[0196] For example, taking the first information as decorated NAI as an example, the first information can be constructed in the following format: "nai.5gc-nn.AAArealm <aaarealm>!<5G_device_unique_identity>@nai.5gc-nn.nid <servingnid>.mnc <servingmnc>.mcc <servingmcc>.3gppnetwork.org".

[0197] AAArealm represents the regional information of the AAA server, for example, it can be the FQDN of the AAA server. servingNID, servingMNC, and servingMCC represent the NID, MNC, and MCC of the first non-public network, respectively. <5G_device_unique_identity> is used to identify the terminal. 5gc-nn indicates that the NAI is used for trusted non-3GPP access of the N5CW terminal. In some embodiments, the first credential holder is an NPN-based credential holder, and the information related to the first credential holder includes at least one of the following: a network identifier of the NPN-based credential holder; a mobile network code of the NPN-based credential holder; and a mobile country code of the NPN-based credential holder.

[0198] For example, taking the first information as decorated NAI, the first information can be constructed in the following format: "nai.5gc-nn.nid<NID_CH> .mnc<MNC_CH> .mcc<MCC_CH> .3gppnetwork.org! <5G_device_unique_identity>@nai.5gc-nn.nid <servingnid>.mnc <servingmnc>.mcc <servingmcc>.3gppnetwork.org".

[0199] Where NID_CH, MNC_CH, and MCC_CH represent the NID, MNC, and MCC of the NPN-based credential holder, respectively. ServingNID, servingMNC, and servingMCC represent the NID, MNC, and MCC of the first non-public network, respectively. <5G_device_unique_identity> identifies the terminal. 5gc-nn indicates that the NAI is used for trusted non-3GPP access for N5CW terminals.

[0200] In some embodiments, the first certificate holder is a PLMN-based certificate holder, and the information related to the first certificate holder includes at least one of the following: a mobile network code of the PLMN-based certificate holder; and a mobile country code of the PLMN-based certificate holder.

[0201] For example, taking the first information as decorated NAI, the first information can be constructed in the following format: "nai.5gc-nn.mnc<MNC_CH> .mcc<MCC_CH> .3gppnetwork.org! <5G_device_unique_identity>@nai.5gc-nn.nid <servingnid>.mnc <servingmnc>.mcc <servingmcc>.3gppnetwork.org".

[0202] Where MNC_CH and MCC_CH represent the MNC and MCC of the PLMN-based certificate holder, respectively. ServingNID, servingMNC, and servingMCC represent the NID, MNC, and MCC of the first non-public network, respectively. <5G_device_unique_identity> identifies the terminal. 5gc-nn indicates that the NAI is used for trusted non-3GPP access of the N5CW terminal.

[0203] It can be understood that in the first information in the above example, some information may be omitted or replaced. For example, when the first credential holder is an NPN-based credential holder, the first information may not include MNC_CH and / or MCC_CH. When the first credential holder is a PLMN-based credential holder, MNC_CH and MCC_CH and <5G_device_unique_identity> can be replaced with an International Mobile Subscriber Identity (IMSI), etc. The present disclosed embodiment is not limited to this.

[0204] In some embodiments, the access network device receives first information. Optionally, the access network device determines information related to the first credential holder and / or information related to the first non-public network based on the first information. Optionally, the access network device determines the first non-public network based on the first information.

[0205] Step S2102: The access network device deletes information related to the first non-public network in the first information to obtain second information.

[0206] In some embodiments, the access network device deletes the first non-public network-related information from the first information and reformats it to obtain the second information. Alternatively, a TWIF-related device (e.g., a TWIF network element) deletes the first non-public network-related information from the first information to obtain the second information. Alternatively, the TWIF-related device deletes the first non-public network-related information from the first information and reformats it to obtain the second information.

[0207] In some embodiments, the access network device determines the second information based on information related to the first credential holder. Optionally, the access network device determines the second information based on information related to the first credential holder and terminal identification information. Optionally, the access network device reformats the information related to the first credential holder to obtain the second information. Optionally, the access network device reformats the information related to the first credential holder and terminal identification information to obtain the second information.

[0208] In some embodiments, the second information is an NAI. Optionally, the second information is an NAI different from the first information. For example, the first information may be a first NAI, and the second information may be a second NAI. Optionally, the access network device deletes information related to the first non-public network in the first information and constructs a new NAI.

[0209] For example, if the first credential holder is an NPN-based credential holder, the second information may be constructed in the following format: "<5G_device_unique_identity>@nai.5gc-nn.nid<NID_CH> .mnc<MNC_CH> .mcc<MCC_CH> .3gppnetwork.org”.

[0210] If the first certificate holder is a PLMN-based certificate holder, the second information may be constructed in the following format: "<5G_device_unique_identity>@nai.5gc-nn.mnc<MNC_CH> .mcc<MCC_CH> .3gppnetwork.org”.

[0211] If the first credential holder is a credential holder based on an AAA server, the second information may be constructed in the following format: "<5G_device_unique_identity>@nai.5gc-nn.AAArealm <aaaarealm>”.

[0212] Among them, NID_CH, MNC_CH and MCC_CH respectively represent the NID, MNC and MCC of the first certificate holder, AAAArealm represents the area information of the AAA server, and <5G_device_unique_identity> is used to identify the terminal.

[0213] Step S2103: The access network device sends second information to the first non-public network.

[0214] In some embodiments, the access network device routes the second information to the first non-public network. Optionally, the first non-public network includes an AMF or SEAF network element, and the access network device routes the second information to the AMF network element or SEAF network element of the first non-public network. Optionally, a TWIF-related device routes the second information to the first non-public network. Optionally, the TWIF-related device routes the second information to the AMF network element or SEAF network element of the first non-public network.

[0215] In some embodiments, the first non-public network may further route the second information to the first credential holder. Optionally, the terminal may exchange information with the first credential holder via the first non-public network, thereby enabling the first credential holder to authenticate the terminal.

[0216] Optionally, the first non-public network, such as an AMF network element in the first non-public network, routes the second information to the first credential holder based on the information related to the first credential holder. Optionally, the first non-public network routes the second information to the AAA server, PLMN, or NPN corresponding to the first credential holder based on the information related to the first credential holder. Optionally, the first non-public network routes the second information to an AUSF or AAA server in the network where the first credential holder is located based on the information related to the first credential holder.

[0217] In some embodiments, the second information is used by the first non-public network to route the message. Optionally, the second information is used by the first non-public network to route the message to the first credential holder. Optionally, the second information is used to instruct the first non-public network to determine the first credential holder. Optionally, the second information is used to indicate the AAA server, PLMN, or NPN corresponding to the first credential holder.

[0218] In some embodiments, the first credential holder receives second information sent by the first non-public network. Optionally, the first credential holder authenticates the terminal based on the second information. Optionally, the AAA server, PLMN, or NPN corresponding to the first credential holder receives the second information. Optionally, the AAA server, PLMN, or NPN corresponding to the first credential holder authenticates the terminal based on the second information. For example, the AUSF network function and / or UDM network function in the network where the first credential holder is located authenticates the terminal based on the second information. For example, the AAA server in the network where the first credential holder is located authenticates the terminal based on the second information.

[0219] In some embodiments, the second information may be “routing indication information”, “authentication information”, “identity information”, etc. The embodiment of the present disclosure does not limit the name of the second information.

[0220] In some embodiments, the names of information, etc. are not limited to the names described in the embodiments, and terms such as "information", "message", "signal", "signaling", "report", "configuration", "indication", "instruction", "command", "channel", "parameter", "domain", "field", "symbol", "symbol", "codeword", "codepoint", "bit", "data", "program", and "chip" can be used interchangeably.

[0221] In some embodiments, the terms "radio", "wireless", "radio access network (RAN)", "access network (AN)", "RAN-based" and the like may be used interchangeably.

[0222] In some embodiments, "obtain", "get", "get", "receive", "transmit", "bidirectional transmission", and "send and / or receive" can be used interchangeably, and can be interpreted as receiving from other entities, obtaining from protocols, obtaining from higher levels, obtaining by self-processing, and autonomous implementation, etc.

[0223] In some embodiments, terms such as "send", "transmit", "report", "send", "transmit", "bidirectional transmission", and "send and / or receive" can be used interchangeably.

[0224] In some embodiments, terms such as "certain", "preset", "preset", "setting", "indicated", "certain", "arbitrary", and "first" can be used interchangeably. "Specific A", "preset A", "preset A", "setting A", "indicated A", "certain A", "arbitrary A", and "first A" can be interpreted as A pre-specified in a protocol, etc., or as A obtained through setting, configuration, or indication, etc., or as specific A, certain A, arbitrary A, or first A, etc., but are not limited to this.

[0225] In some embodiments, the determination or judgment can be performed by a value represented by 1 bit (0 or 1), or by a true or false value (Boolean value) represented by true or false, or by comparison of numerical values ​​(for example, comparison with a predetermined value), but is not limited thereto.

[0226] The communication method involved in the embodiments of the present disclosure may include at least one of steps S2101 to S2103. For example, step S2101 may be implemented as an independent embodiment, step S2102 may be implemented as an independent embodiment, step S2103 may be implemented as an independent embodiment, and steps S2101+S2102 may be implemented as independent embodiments, but the present invention is not limited thereto.

[0227] In some embodiments, step S2102 and step S2103 are optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0228] In some embodiments, step S2101 and step S2103 are optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0229] In some embodiments, reference may be made to other optional implementations described before or after the description corresponding to FIG. 2 .

[0230] FIG3A is a flow chart of an information processing method according to an embodiment of the present disclosure. As shown in FIG3A , the present disclosure embodiment relates to an information processing method, which is executed by a terminal. The method includes:

[0231] Step S3101, sending the first information.

[0232] The optional implementation of step S3101 can refer to the optional implementation of step S2101 in Figure 2 and other related parts in the embodiment involved in Figure 2, which will not be repeated here.

[0233] In some embodiments, the terminal sends the first information to the access network device, but is not limited thereto, and the first information may also be sent to other entities.

[0234] Optionally, the first information is used by the access network device to determine the second information. Optionally, the first information is used by the access network device to send the second information to the first non-public network. Optionally, the access network device sends the second information to the first credential holder via the first non-public network (e.g., an AMF / SEAF network element in the first non-public network). For optional implementations, please refer to the optional implementations of step S2102 and / or step S2103 in Figure 2, and other related parts of the embodiment involved in Figure 2, which will not be repeated here.

[0235] In some embodiments, the first information includes information related to the first credential holder and / or information related to the first non-public network.

[0236] In some embodiments, the first credential holder is any one of the following:

[0237] Credential holder based authentication, authorization and accounting AAA server;

[0238] Certificate holders based on non-public network (NPN);

[0239] A certificate holder based on a Public Land Mobile Network (PLMN).

[0240] In some embodiments, the first credential holder is a credential holder based on an AAA server, and the information related to the first credential holder includes: area information of the AAA server.

[0241] In some embodiments, the first credential holder is an NPN-based credential holder, and the information related to the first credential holder includes at least one of the following:

[0242] Network identification of the credential holder based on NPN;

[0243] The mobile network code of the NPN-based credential holder;

[0244] The mobile country code of the credential holder based on the NPN.

[0245] In some embodiments, the first certificate holder is a PLMN-based certificate holder, and the information related to the first certificate holder includes at least one of the following:

[0246] The mobile network code of the certificate holder based on the PLMN;

[0247] The mobile country code of the certificate holder based on the PLMN.

[0248] In some embodiments, the first non-public network-related information includes at least one of the following:

[0249] a network identifier of the first non-public network;

[0250] a mobile network code of the first non-public network;

[0251] Mobile country code for the first non-public network.

[0252] In some embodiments, the first non-public network is any one of the following:

[0253] The non-public network that the terminal is accessing;

[0254] The terminal's service is not a public network;

[0255] A non-public network associated with the first credential holder.

[0256] In some embodiments, the non-public network associated with the first credential holder is any one of the following:

[0257] an independent non-public network associated with a first credential holder that performs initial authentication and authorization using the AAA server;

[0258] An independent, non-public network associated with the first credential holder that uses UDM and AUSF for initial authentication and authorization.

[0259] In some embodiments, the terminal is a terminal on a wireless local area network that does not support 5G, and the access network device is a trusted wireless local area network access network TWAN device.

[0260] In some embodiments, the access network device includes a device related to a trusted wireless local area network access point (TWAP) and a device related to a trusted wireless local area network interaction function (TWIF).

[0261] In some embodiments, the terminal sends the first information to the access network device, including:

[0262] The terminal sends the first information to the TWIF-related device through the TWAP-related device.

[0263] In some embodiments, the first information further includes an indicator for indicating that the information related to the first credential holder and / or the information related to the first non-public network is used for trusted non-3GPP access of a terminal that does not support 5G on the wireless local area network.

[0264] FIG4A is a flow chart of an information processing method according to an embodiment of the present disclosure. As shown in FIG4A , the present disclosure embodiment relates to an information processing method, which is executed by an access network device. The method includes:

[0265] Step S4101, obtain first information.

[0266] The optional implementation of step S4101 can refer to the optional implementation of step S2101 in Figure 2 and other related parts in the embodiment involved in Figure 2, which will not be repeated here.

[0267] In some embodiments, the access network device receives the first information sent by the terminal, but is not limited thereto and may also receive the first information sent by other entities.

[0268] In some embodiments, the access network device obtains first information specified by a protocol.

[0269] In some embodiments, the access network device obtains the first information from an upper layer(s).

[0270] In some embodiments, the access network device performs processing to obtain the first information.

[0271] In some embodiments, step S4101 is omitted, and the access network device autonomously implements the function indicated by the first information, or the above function is default or by default.

[0272] Step S4102, determine the second information.

[0273] In some embodiments, the access network device determines the second information based on the first information. Alternatively, the access network device determines the second information based on information related to the first credential holder. Alternatively, the access network device determines the second information based on information related to the first credential holder and terminal identification information.

[0274] The optional implementation of step S4102 can refer to the optional implementation of step S2102 in Figure 2 and other related parts in the embodiment involved in Figure 2, which will not be repeated here.

[0275] Step S4103, sending the second information.

[0276] In some embodiments, the access network device sends the second information to the first non-public network, but is not limited thereto, and the second information may also be sent to other entities. Optionally, the access network device sends the second information to the first credential holder via the first non-public network.

[0277] Optionally, the second information is used by the first certificate holder to authenticate the terminal. Optional implementations thereof can be found in other related parts of the embodiment involved in FIG2 , and will not be described in detail here.

[0278] The communication method involved in the embodiments of the present disclosure may include at least one of steps S4101 to S4103. For example, step S4101 may be implemented as an independent embodiment, step S4102 may be implemented as an independent embodiment, step S4103 may be implemented as an independent embodiment, and steps S4101+S4102 may be implemented as independent embodiments, but the present invention is not limited thereto.

[0279] In some embodiments, step S4102 and step S4103 are optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0280] In some embodiments, step S4101 and step S4103 are optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0281] FIG4B is a flow chart of an information processing method according to an embodiment of the present disclosure. As shown in FIG4B , the present disclosure embodiment relates to an information processing method, which is executed by an access network device. The method includes:

[0282] Step S4201, obtain first information.

[0283] The optional implementation of step S4201 can refer to step S2101 in Figure 2, the optional implementation of step S4101 in Figure 4A, and other related parts in the embodiments involved in Figures 2 and 4A, which will not be repeated here.

[0284] Step S4202, determine the second information.

[0285] The optional implementation of step S4202 can refer to the optional implementation of step S2101 in Figure 2, step S4102 in Figure 4A, and other related parts in the embodiments involved in Figures 2 and 4A, which will not be repeated here.

[0286] The communication method involved in the embodiment of the present disclosure may include at least one of steps S4201 and S4202. For example, step S4201 may be implemented as an independent embodiment, and step S4202 may be implemented as an independent embodiment.

[0287] In some embodiments, step S4201 is optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0288] In some embodiments, step S4202 is optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0289] FIG4C is a flow chart of an information processing method according to an embodiment of the present disclosure. As shown in FIG4C , the embodiment of the present disclosure relates to an information processing method, which is executed by an access network device. The method includes:

[0290] Step S4301, obtain first information.

[0291] The optional implementation of step S4301 can refer to the optional implementation of step S2101 in Figure 2, step S4101 in Figure 4A, step S4201 in Figure 4B, and other related parts in the embodiments involved in Figures 2, 4A, and 4B, which will not be repeated here.

[0292] In some embodiments, the first information includes information related to the first credential holder and / or information related to the first non-public network.

[0293] In some embodiments, the first credential holder is any one of the following:

[0294] Credential holder based authentication, authorization and accounting AAA server;

[0295] Certificate holders based on non-public network (NPN);

[0296] A certificate holder based on a Public Land Mobile Network (PLMN).

[0297] In some embodiments, the first credential holder is a credential holder based on an AAA server, and the information related to the first credential holder includes: area information of the AAA server.

[0298] In some embodiments, the first credential holder is an NPN-based credential holder, and the information related to the first credential holder includes at least one of the following:

[0299] Network identification of the credential holder based on NPN;

[0300] The mobile network code of the NPN-based credential holder;

[0301] The mobile country code of the credential holder based on the NPN.

[0302] In some embodiments, the first certificate holder is a PLMN-based certificate holder, and the information related to the first certificate holder includes at least one of the following:

[0303] The mobile network code of the certificate holder based on the PLMN;

[0304] The mobile country code of the certificate holder based on the PLMN.

[0305] In some embodiments, the information related to the first non-public network further includes at least one of the following:

[0306] a network identifier of the first non-public network;

[0307] a mobile network code of the first non-public network;

[0308] Mobile country code for the first non-public network.

[0309] In some embodiments, the first non-public network is any one of the following:

[0310] The non-public network that the terminal is accessing;

[0311] The terminal's service is not a public network;

[0312] A non-public network associated with the first credential holder.

[0313] In some embodiments, the non-public network associated with the first credential holder is any one of the following:

[0314] an independent non-public network associated with a first credential holder that performs initial authentication and authorization using the AAA server;

[0315] An independent, non-public network associated with the first credential holder that uses UDM and AUSF for initial authentication and authorization.

[0316] In some embodiments, the method further comprises:

[0317] The access network device deletes the information related to the first non-public network in the first information to generate second information.

[0318] In some embodiments, the method further comprises:

[0319] The access network device sends the second information to the first non-public network.

[0320] In some embodiments, the terminal is a terminal on a wireless local area network that does not support 5G, and the access network device is a trusted wireless local area network access network TWAN device.

[0321] In some embodiments, the access network device includes a device related to a trusted wireless local area network access point (TWAP) and a device related to a trusted wireless local area network interaction function (TWIF).

[0322] In some embodiments, the access network device receives the first information sent by the terminal, including:

[0323] The TWIF-related device receives the first information sent by the terminal through the TWAP-related device.

[0324] In some embodiments, the first information further includes an indicator, where the indicator is used to indicate that the first credential holder-related information and / or the first non-public network-related information are used for trusted non-3GPP access of the terminal.

[0325] Figure 5 is an interactive diagram of an information processing method according to an embodiment of the present disclosure. As shown in Figure 5, the embodiment of the present disclosure relates to an information processing method, which includes:

[0326] Step S5101: The terminal sends first information to the access network device.

[0327] For the optional implementation of step S5101, please refer to the optional implementation of step S2101 in Figure 2, step S3101 in Figure 3A, step S4101 in Figure 4A, step S4201 in Figure 4B, and step S4301 in Figure 4C, as well as other related parts in the embodiments involved in Figures 2, 3A, 4A, 4B, and 4C, which will not be repeated here.

[0328] In some embodiments, the above method may include the method described in the above embodiments related to the core network device side, terminal side, etc., which will not be repeated here.

[0329] FIG6A is a flow chart of an information processing method according to an embodiment of the present disclosure. As shown in FIG6A , the present disclosure embodiment relates to an information processing method, which is executed by an N5CW device. The method includes:

[0330] Step S6101: The N5CW device constructs a decorated NAI.

[0331] Optionally, the decorated NAI constructed by the N5CW device enables the access network to route authentication information to the credential holder based on the AAA server, PLMN, or NPN.

[0332] In some embodiments, considering that the TWAN may be connected to multiple NPNs, in order for the TWAN to route information to the correct NPN, the N5CW device needs to send a NAI containing the NPN realm information and the credential holder realm information to the TWAN.

[0333] In some embodiments, to route information to a credential holder based on an NPN, the N5CW device should be able to establish the following NAI:

[0334] "nai.5gc-nn.nid<NID_CH>.mnc<MNC_CH>.mcc<MCC_CH>.3gppnetwork.org!<5G_device_unique_identity>@nai.5gc-nn.nid <servingnid>.mnc <servingmnc>.mcc <servingmcc>.3gppnetwork.org".

[0335] Where NID_CH, MNC_CH, and MCC_CH represent the NID, MNC, and MCC of the NPN-based credential holder, respectively. ServingNID, servingMNC, and servingMCC represent the NID, MNC, and MCC of the NPN serving the N5CW device, respectively.

[0336] In some embodiments, to route information to a PLMN-based certificate holder, the N5CW device should be able to establish the following NAI:

[0337] "nai.5gc-nn.mnc<MNC_CH> .mcc<MCC_CH> .3gppnetwork.org! <5G_device_unique_identity>@nai.5gc-nn.nid <servingnid>.mnc <servingmnc>.mcc <servingmcc>.3gppnetwork.org".

[0338] Where MNC_CH and MCC_CH represent the MNC and MCC of the PLMN-based certificate holder, respectively. ServingNID, servingMNC, and servingMCC represent the NID, MNC, and MCC of the NPN serving the N5CW device, respectively.

[0339] In some embodiments, to route information to the AAA-based credential holder, the N5CW should be able to establish the following NAI:

[0340] "nai.5gc-nn.AAArealm <aaarealm>!<5G_device_unique_identity>@nai.5gc-nn.nid <servingnid>.mnc <servingmnc>.mcc <servingmcc>.3gppnetwork.org".

[0341] AAArealm indicates the realm information of the AAA server, such as the FQDN of the AAA server. servingNID, servingMNC, and servingMCC respectively indicate the NID, MNC, and MCC of the NPN serving the N5CW device.

[0342] FIG6B is a flow chart of an information processing method according to an embodiment of the present disclosure. As shown in FIG6B , the embodiment of the present disclosure relates to an information processing method, which is executed by a wireless local area network access network (WLAN AN) device, and the method includes:

[0343] Step S6201: The WLAN AN device receives the NAI sent by the N5CW device.

[0344] In some embodiments, the WLAN AN device should be able to understand the NAI sent by the N5CW device.

[0345] In some embodiments, the format of the NAI is as follows:

[0346] "nai.5gc-nn.nid<NID_CH> .mnc<MNC_CH> .mcc<MCC_CH> .3gppnetwork.org! <5G_device_unique_identity>@nai.5gc-nn.nid <nid>.mnc <mnc>.mcc <mcc>.3gppnetwork.org".

[0347] Where NID_CH, MNC_CH, and MCC_CH represent the NID, MNC, and MCC of the NPN-based credential holder, respectively. ServingNID, servingMNC, and servingMCC represent the NID, MNC, and MCC of the NPN that the N5CW device is accessing, respectively.

[0348] In some embodiments, the format of the NAI is as follows:

[0349] "nai.5gc-nn.mnc<MNC_CH> .mcc<MCC_CH> .3gppnetwork.org! <5G_device_unique_identity>@nai.5gc-nn.nid <nid>.mnc <mnc>.mcc <mcc>.3gppnetwork.org".

[0350] Where MNC_CH and MCC_CH represent the MNC and MCC of the PLMN-based certificate holder, respectively. ServingNID, servingMNC, and servingMCC represent the NID, MNC, and MCC of the NPN serving the N5CW device, respectively.

[0351] In some embodiments, the format of the NAI is as follows:

[0352] "nai.5gc-nn.AAArealm <aaarealm>!<5G_device_unique_identity>@nai.5gc-nn.nid <nid>.mnc <mnc>.mcc <mcc>.3gppnetwork.org".

[0353] AAArealm indicates the realm information of the AAA server, such as the FQDN of the AAA server. servingNID, servingMNC, and servingMCC respectively indicate the NID, MNC, and MCC of the NPN serving the N5CW.

[0354] In some embodiments, the WLAN AN device should be able to delete the information of the NPN serving the N5CW device, reformat the NAI, and construct at least one new NAI as follows:

[0355] <5G_device_unique_identity>@nai.5gc-nn.nid<NID_CH> .mnc<MNC_CH> .mcc<MCC_CH> .3gppnetwork.org;

[0356] <5G_device_unique_identity>@nai.5gc-nn.mnc<MNC_CH> .mcc<MCC_CH> .3gppnetwork.org;

[0357] <5G_device_unique_identity>@nai.5gc-nn.AAArealm <aaaarealm>.

[0358] In one example, the decorated NAI constructed by the N5CW device is sent from the N5CW device to the TWAN, which is shared by multiple NPNs and belongs to multiple NPNs.

[0359] Optionally, TWAN selects the correct NPN based on the NPN information in the decorated NAI, such as the first non-public network in the above embodiment, and then removes the NPN information from the decorated NAI and sends it to the AMF of the NPN. The AMF routes the message to the first credential holder based on the obtained NAI with the NPN information removed. For example, the AMF can directly route the message to the AUSF of the first credential holder, or the AMF can directly route the message to the AAA server belonging to the first credential owner, or the AMF can indirectly route the message to the AAA server belonging to the first credential owner through network elements such as AUSF. Optionally, TWAN directly routes the message to the AAA server belonging to the first credential owner based on the first credential owner information in the decorated NAI.

[0360] Figure 7A is a structural diagram of the terminal proposed in an embodiment of the present disclosure. As shown in Figure 7A, the terminal 7100 may include: at least one of a transceiver module 7101, a processing module 7102, etc. In some embodiments, the processing module 7102 can be used to construct a first message. In some embodiments, the above-mentioned transceiver module 7101 is used to send a first message to an access network device, and the first information includes information related to the first certificate holder and / or information related to the first non-public network. Optionally, the above-mentioned transceiver module 7101 is used to execute at least one of the communication steps such as sending and / or receiving (such as step S2101, but not limited to this) executed by the terminal in any of the above methods, which will not be repeated here. Optionally, the above-mentioned processing module 7102 is used to execute other steps executed by the terminal in any of the above methods (such as constructing the first information, but not limited to this), which will not be repeated here.

[0361] Figure 7B is a structural diagram of the access network device proposed in an embodiment of the present disclosure. As shown in Figure 7B, the access network device 7200 may include: at least one of a transceiver module 7201, a processing module 7202, etc. In some embodiments, the above-mentioned transceiver module 7201 is used to receive a first information sent by a terminal, and the first information includes information related to the first certificate holder and / or information related to the first non-public network. Optionally, the above-mentioned transceiver module 7201 is used to execute at least one of the communication steps such as sending and / or receiving (for example, step S2101, step S2103, but not limited to this) performed by the access network device in any of the above methods, which will not be repeated here. Optionally, the above-mentioned processing module 7202 is used to execute at least one of the other steps performed by the access network device in any of the above methods (for example, S2102, but not limited to this), which will not be repeated here.

[0362] In some embodiments, the transceiver module may include a transmitting module and / or a receiving module, and the transmitting module and the receiving module may be separate or integrated. Optionally, the transceiver module may be interchangeable with the transceiver.

[0363] In some embodiments, the processing module can be a single module or can include multiple submodules. Optionally, the multiple submodules respectively execute all or part of the steps required to be executed by the processing module. Optionally, the processing module can be interchangeable with the processor.

[0364] Figure 8A is a schematic diagram of the structure of a communication device 8100 proposed in an embodiment of the present disclosure. Communication device 8100 can be an access network device (e.g., an access network device, a core network device, etc.), a terminal (e.g., a user equipment, etc.), a chip, a chip system, or a processor that supports an access network device in implementing any of the above methods, or a chip, a chip system, or a processor that supports a terminal in implementing any of the above methods. Communication device 8100 can be used to implement the methods described in the above method embodiments. For details, please refer to the description of the above method embodiments.

[0365] As shown in Figure 8A, the communication device 8100 includes one or more processors 8101. The processor 8101 can be a general-purpose processor or a dedicated processor, for example, a baseband processor or a central processing unit. The baseband processor can be used to process the communication protocol and communication data, and the central processing unit can be used to control the communication device (such as a base station, a baseband chip, a terminal device, a terminal device chip, a DU or a CU, etc.), execute programs, and process program data. Optionally, the communication device 8100 is used to perform any of the above methods. Optionally, one or more processors 8101 are used to call instructions to enable the communication device 8100 to perform any of the above methods.

[0366] In some embodiments, the communication device 8100 further includes one or more transceivers 8102. When the communication device 8100 includes one or more transceivers 8102, the transceiver 8102 performs at least one of the communication steps such as sending and / or receiving in the above method (for example, step S2101 and step S2103, but not limited thereto), and the processor 8101 performs at least one of the other steps (for example, step S2102, but not limited thereto). In an optional embodiment, the transceiver may include a receiver and / or a transmitter, and the receiver and transmitter may be separate or integrated. Optionally, the terms transceiver, transceiver unit, transceiver, transceiver circuit, interface circuit, and interface may be interchangeable, the terms transmitter, transmitting unit, transmitter, and transmitting circuit may be interchangeable, and the terms receiver, receiving unit, receiver, and receiving circuit may be interchangeable.

[0367] In some embodiments, the communication device 8100 further includes one or more memories 8103 for storing data. Alternatively, all or part of the memories 8103 may be located outside the communication device 8100. In alternative embodiments, the communication device 8100 may include one or more interface circuits 8104. Optionally, the interface circuits 8104 are connected to the memory 8102 and may be configured to receive data from the memory 8102 or other devices, or to send data to the memory 8102 or other devices. For example, the interface circuits 8104 may read data stored in the memory 8102 and send the data to the processor 8101.

[0368] The communication device 8100 described in the above embodiment may be an access network device or a terminal, but the scope of the communication device 8100 described in the present disclosure is not limited thereto, and the structure of the communication device 8100 may not be limited by FIG. 8A. The communication device may be an independent device or may be part of a larger device. For example, the communication device may be: 1) an independent integrated circuit IC, or a chip, or a chip system or subsystem; (2) a collection of one or more ICs, optionally, the above IC collection may also include a storage component for storing data or programs; (3) an ASIC, such as a modem; (4) a module that can be embedded in other devices; (5) a receiver, a terminal device, an intelligent terminal device, a cellular phone, a wireless device, a handheld device, a mobile unit, an in-vehicle device, an access network device, a cloud device, an artificial intelligence device, etc.; (6) others, etc.

[0369] FIG8B is a schematic diagram of the structure of a chip 8200 according to an embodiment of the present disclosure. If the communication device 8100 can be a chip or a chip system, please refer to the schematic diagram of the structure of the chip 8200 shown in FIG8B , but the present disclosure is not limited thereto.

[0370] The chip 8200 includes one or more processors 8201 , and the chip 8200 is configured to execute any of the above methods.

[0371] The chip 8200 includes one or more processors 8201. The chip 8200 is configured to execute any of the above methods.

[0372] In some embodiments, chip 8200 further includes one or more interface circuits 8202. Terms such as interface circuit, interface, and transceiver pins may be used interchangeably. In some embodiments, chip 8200 further includes one or more memories 8203 for storing data. Alternatively, all or part of memory 8203 may be located external to chip 8200. Optionally, interface circuit 8202 is connected to memory 8203 and may be used to receive data from memory 8203 or other devices, or may be used to send data to memory 8203 or other devices. For example, interface circuit 8202 may read data stored in memory 8203 and send the data to processor 8201.

[0373] In some embodiments, the interface circuit 8202 performs at least one of the communication steps (e.g., step S2101 and step S2103, but not limited thereto) of the aforementioned method. The interface circuit 8202 performing the communication steps (e.g., step S2101 and step S2103, but not limited thereto) of the aforementioned method means, for example, that the interface circuit 8202 performs data exchange between the processor 8201, chip 8200, memory 8203, or a transceiver device. In some embodiments, the processor 8201 performs at least one of the other steps (e.g., step S2102, but not limited thereto).

[0374] The modules and / or devices described in various embodiments, such as virtual devices, physical devices, and chips, can be arbitrarily combined or separated according to circumstances. Optionally, some or all steps can also be performed collaboratively by multiple modules and / or devices, which is not limited here.

[0375] The present disclosure also proposes a storage medium having instructions stored thereon, which, when executed on the communication device 8100, causes the communication device 8100 to execute any of the above methods. Optionally, the storage medium is an electronic storage medium. Optionally, the storage medium is a computer-readable storage medium, but is not limited thereto, and may also be a storage medium readable by other devices. Optionally, the storage medium may be a non-transitory storage medium, but is not limited thereto, and may also be a temporary storage medium.

[0376] The present disclosure also provides a program product, which, when executed by the communication device 8100, enables the communication device 8100 to perform any of the above methods. Optionally, the program product is a computer program product.

[0377] The present disclosure also proposes a computer program, which, when executed on a computer, causes the computer to perform any one of the above methods.< / aaaarealm> < / mcc> < / mnc> < / nid> < / aaarealm> < / mcc> < / mnc> < / nid> < / mcc> < / mnc> < / nid> < / servingmcc> < / servingmnc> < / servingnid> < / aaarealm> < / servingmcc> < / servingmnc> < / servingnid> < / servingmcc> < / servingmnc> < / servingnid> < / aaaarealm> < / servingmcc> < / servingmnc> < / servingnid> < / servingmcc> < / servingmnc> < / servingnid> < / servingmcc> < / servingmnc> < / servingnid> < / aaarealm>

Claims

1. An information processing method, characterized in that: The method comprises: The terminal sends first information to the access network device, where the first information includes information related to the first credential holder and / or information related to the first non-public network.

2. The method according to claim 1, characterized in that The first certificate holder is any one of the following: Credential holder based authentication, authorization and accounting AAA server; Certificate holders based on non-public network NPN; A certificate holder based on a Public Land Mobile Network (PLMN).

3. The method according to claim 2, characterized in that The first credential holder is the credential holder based on the AAA server, and the information related to the first credential holder includes: the area information of the AAA server.

4. The method according to claim 2 or 3, characterized in that: The first credential holder is the NPN-based credential holder, and the information related to the first credential holder includes at least one of the following: The network identification of the NPN-based credential holder; the mobile network code of the NPN-based credential holder; The NPN-based credential holder's mobile country code.

5. The method according to any one of claims 2 to 4, characterized in that: The first certificate holder is the PLMN-based certificate holder, and the information related to the first certificate holder includes at least one of the following: The mobile network code of the PLMN-based certificate holder; The PLMN-based certificate holder's Mobile Country Code.

6. The method according to any one of claims 1 to 5, characterized in that: The first non-public network-related information includes at least one of the following: a network identifier of the first non-public network; a mobile network code of the first non-public network; The mobile country code of the first non-public network.

7. The method according to any one of claims 1 to 6, characterized in that: The first non-public network is any one of the following: The non-public network that the terminal is accessing; The service network of the terminal is not a public network; A non-public network associated with the first credential holder.

8. The method according to claim 7, characterized in that The non-public network associated with the first credential holder is any one of the following: an independent non-public network associated with a first credential holder that performs initial authentication and authorization using the AAA server; An independent non-public network associated with the first credential holder that uses UDM and AUSF for initial authentication and authorization.

9. The method according to any one of claims 1 to 8, characterized in that: The terminal is a terminal on the wireless local area network that does not support 5G, and the access network device is a trusted wireless local area network access network TWAN device.

10. The method according to claim 9, characterized in that The access network equipment includes equipment related to a trusted wireless local area network access point TWAP and equipment related to a trusted wireless local area network interaction function TWIF.

11. The method according to claim 9, characterized in that The terminal sends first information to the access network device, including: The terminal sends the first information to the TWIF-related device through the TWAP-related device.

12. The method according to any one of claims 1 to 10, characterized in that: The first information also includes an indicator, which is used to indicate that the information related to the first certificate holder and / or the first non-public network is used for trusted non-3GPP access of terminals that do not support 5G on the wireless local area network.

13. An information processing method, characterized in that: The method comprises: The access network device receives first information sent by the terminal, where the first information includes information related to the first certificate holder and / or information related to the first non-public network.

14. The method according to claim 13, characterized in that The first certificate holder is any one of the following: Credential holder based authentication, authorization and accounting AAA server; NPN-based certificate holders; A certificate holder based on a Public Land Mobile Network (PLMN).

15. The method according to claim 14, characterized in that The first credential holder is the credential holder based on the AAA server, and the information related to the first credential holder includes: the area information of the AAA server.

16. The method according to claim 14 or 15, characterized in that The first credential holder is the NPN-based credential holder, and the information related to the first credential holder includes at least one of the following: The network identification of the NPN-based credential holder; the mobile network code of the NPN-based credential holder; The NPN-based credential holder's mobile country code.

17. The method according to any one of claims 14 to 16, characterized in that: The first certificate holder is the PLMN-based certificate holder, and the information related to the first certificate holder includes at least one of the following: The mobile network code of the PLMN-based certificate holder; The PLMN-based certificate holder's Mobile Country Code.

18. The method according to any one of claims 13 or 17, characterized in that: The first non-public network-related information further includes at least one of the following: a network identifier of the first non-public network; a mobile network code of the first non-public network; The mobile country code of the first non-public network.

19. The method according to any one of claims 13 to 18, characterized in that: The first non-public network is any one of the following: The non-public network that the terminal is accessing; The service network of the terminal is not a public network; A non-public network associated with the first credential holder.

20. The method according to claim 19, characterized in that The non-public network associated with the first credential holder is any one of the following: an independent non-public network associated with a first credential holder that performs initial authentication and authorization using the AAA server; An independent non-public network associated with the first credential holder that uses UDM and AUSF for initial authentication and authorization.

21. The method according to any one of claims 13 to 20, wherein the method further comprises: The access network device deletes the information related to the first non-public network in the first information to generate second information.

22. The method according to claim 21, characterized in that The method further comprises: The access network device sends the second information to the first non-public network.

23. The method according to any one of claims 13 to 22, characterized in that: The terminal is a terminal on the wireless local area network that does not support 5G, and the access network device is a trusted wireless local area network access network TWAN device.

24. The method according to claim 23, characterized in that The access network equipment includes equipment related to a trusted wireless local area network access point TWAP and equipment related to a trusted wireless local area network interaction function TWIF.

25. The method according to claim 24, characterized in that The access network device receives first information sent by a terminal, including: The TWIF-related device receives the first information sent by the terminal through the TWAP-related device.

26. The method according to any one of claims 13 to 25, characterized in that: The first information further includes an indicator, where the indicator is used to indicate that the first credential holder-related information and / or the first non-public network-related information is used for trusted non-3GPP access of the terminal.

27. A terminal, characterized in that: The terminal comprises: The transceiver module is configured to send first information to the access network device, where the first information includes information related to the first certificate holder and / or information related to the first non-public network.

28. An access network device, characterized in that: The first device comprises: The transceiver module is configured to receive first information sent by the terminal, where the first information includes information related to the first credential holder and / or information related to the first non-public network.

29. A terminal, characterized in that: include: one or more processors; A memory coupled to the one or more processors, the memory comprising executable instructions, and when the executable instructions are executed by the one or more processors, the terminal executes the information processing method according to any one of claims 1 to 12.

30. An access network device, characterized in that: include: one or more processors; A memory coupled to the one or more processors, the memory comprising executable instructions, which, when executed by the one or more processors, causes the access network device to execute the information processing method described in any one of claims 13-26.

31. A communication system, characterized in that: It comprises a terminal and an access network device, wherein the terminal is configured to implement the information processing method according to any one of claims 1 to 12, and the access network device is configured to implement the information processing method according to any one of claims 13 to 26.

32. A storage medium storing instructions, characterized in that: When the instruction is executed on the communication device, the communication device executes the information processing method according to any one of claims 1 to 12 or claims 13 to 26.

Images