Method and apparatus for determining authorization, and storage medium

Abstract

The present disclosure provides a method and apparatus for determining authorization, and a storage medium. The method comprises: receiving a first message sent by a terminal, the first message being used for requesting resumption, re-establishment, or establishment of a radio resource control (RRC) connection; and, on the basis of a terminal context, determining whether the terminal has authorization to use a store-and-forward service. According to the present disclosure, whether a terminal has authorization to use a store-and-forward service can be determined on the basis of a terminal context, such that satellite resources can be prevented from being occupied by terminals not having authorization with respect to the store-and-forward service, and interruption of a satellite access service can be effectively avoided, thereby improving the availability and reliability of NTN communications.

Description

Method and device for determining authorization, and storage medium Technical Field

[0001] The present disclosure relates to the field of communications, and in particular to a method and device for determining authorization, and a storage medium. Background Art

[0002] Currently, non-terrestrial networks (NTNs), as an important supplement to terrestrial cellular communication technology, are increasingly widely used.

[0003] Summary of the Invention

[0004] To improve the availability and reliability of NTN communications, embodiments of the present disclosure provide a method and apparatus for determining authorization, and a storage medium.

[0005] According to a first aspect of an embodiment of the present disclosure, a method for determining authorization is provided. The method is performed by a first access network device deployed on a first satellite, and includes:

[0006] receiving a first message sent by a terminal, where the first message is used to request recovery, re-establishment or establishment of a radio resource control (RRC) connection;

[0007] Based on the terminal context, it is determined whether the terminal is authorized to use the store-and-forward service.

[0008] According to a second aspect of an embodiment of the present disclosure, a method for determining authorization is provided. The method is performed by a second access network device deployed on a second satellite, and includes:

[0009] Receive a second message sent by the first access network device; wherein the second message is used to request to obtain the terminal context;

[0010] A third message is sent to the first access network device, where the third message includes the terminal context stored on the second access network device.

[0011] According to a third aspect of an embodiment of the present disclosure, a first access network device is provided, where the first access network device is deployed on a first satellite, including:

[0012] a transceiver module configured to receive a first message sent by a terminal, where the first message is used to request recovery, re-establishment or establishment of a radio resource control (RRC) connection;

[0013] The processing module is configured to determine whether the terminal is authorized to use the store-and-forward service based on the terminal context.

[0014] According to a fourth aspect of an embodiment of the present disclosure, a second access network device is provided, where the second access network device is deployed on a second satellite, including:

[0015] A transceiver module is configured to receive a second message sent by the first access network device; wherein the second message is used to request to obtain the terminal context;

[0016] The transceiver module is further configured to send a third message to the first access network device, where the third message includes the terminal context stored on the second access network device.

[0017] According to a fifth aspect of an embodiment of the present disclosure, a first access network device is provided, including:

[0018] one or more processors;

[0019] The processor is used to execute the method for determining authorization as described in any one of the first aspects.

[0020] According to a sixth aspect of an embodiment of the present disclosure, a second access network device is provided, including:

[0021] one or more processors;

[0022] The processor is used to execute the method for determining authorization as described in any one of the second aspects.

[0023] According to a seventh aspect of an embodiment of the present disclosure, there is provided a communication system, including:

[0024] terminal;

[0025] A first access network device, wherein the first network device is configured to implement the method for determining authorization according to any one of the first aspects;

[0026] A second access network device, wherein the second satellite is configured to implement the method for determining authorization according to any one of the second aspects;

[0027] core network.

[0028] According to an eighth aspect of an embodiment of the present disclosure, a storage medium is provided, which stores instructions. When the instructions are executed on a communication device, the communication device executes the method for determining authorization as described in any one of the first aspect or the second aspect.

[0029] In the disclosed embodiment, whether a terminal is authorized to use the store-and-forward service can be determined based on the terminal context, thereby preventing satellite resources from being occupied by terminals that do not have the store-and-forward service authorization, effectively avoiding interruptions in satellite access services, and improving the availability and reliability of NTN communications.

[0030] It is to be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0031] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the invention and, together with the description, serve to explain the principles of the invention.

[0032] FIG1 is an exemplary schematic diagram of the architecture of a communication system provided according to an embodiment of the present disclosure.

[0033] FIG2A is an exemplary interactive diagram of a method for determining authorization provided according to an embodiment of the present disclosure.

[0034] FIG2B is an exemplary interactive diagram of a method for determining authorization provided according to an embodiment of the present disclosure.

[0035] FIG3A is an exemplary interaction diagram of a method for determining authorization provided according to an embodiment of the present disclosure.

[0036] FIG3B is an exemplary interactive diagram of a method for determining authorization provided according to an embodiment of the present disclosure.

[0037] FIG3C is an exemplary interaction diagram of a method for determining authorization provided according to an embodiment of the present disclosure.

[0038] FIG4A is an exemplary interactive diagram of a method for determining authorization provided according to an embodiment of the present disclosure.

[0039] FIG4B is an exemplary interactive diagram of a method for determining authorization provided according to an embodiment of the present disclosure.

[0040] FIG5A is a schematic diagram of an exemplary interaction of a first access network device according to an embodiment of the present disclosure.

[0041] FIG5B is a schematic diagram of an exemplary interaction of a second access network device according to an embodiment of the present disclosure.

[0042] FIG6A is a schematic diagram of an exemplary interaction of a communication device according to an embodiment of the present disclosure.

[0043] FIG6B is an exemplary interaction diagram of a chip provided according to an embodiment of the present disclosure. DETAILED DESCRIPTION

[0044] Exemplary embodiments will be described in detail herein, examples of which are illustrated in the accompanying drawings. In the following description, when referring to the drawings, like numbers in different figures represent like or similar elements unless otherwise indicated. The embodiments described in the following exemplary embodiments are not intended to represent all possible embodiments consistent with the present invention. Rather, they are merely examples of apparatus and methods consistent with certain aspects of the present invention, as detailed in the appended claims.

[0045] The embodiments of the present disclosure provide a method, device, and storage medium for determining authorization.

[0046] In a first aspect, an embodiment of the present disclosure provides a method for determining authorization, where the method is performed by a first access network device deployed on a first satellite, and includes:

[0047] receiving a first message sent by a terminal, where the first message is used to request recovery, re-establishment or establishment of a radio resource control (RRC) connection;

[0048] Based on the terminal context, it is determined whether the terminal is authorized to use the store-and-forward service.

[0049] In the above embodiment, whether a terminal is authorized to use the store-and-forward service can be determined based on the terminal context, which can prevent satellite resources from being occupied by terminals that do not have the store-and-forward service authorization, effectively avoid interruption of satellite access services, and improve the availability and reliability of NTN communications.

[0050] In combination with some embodiments of the first aspect, in some embodiments, the first message includes a terminal identifier, and the terminal identifier is used by the first access network device to determine the corresponding terminal context.

[0051] In the above embodiment, the terminal may include a terminal identifier in the first message, so that the first access network device can determine the terminal context corresponding to the terminal identifier, thereby ensuring the accuracy of the determined terminal context.

[0052] In conjunction with some embodiments of the first aspect, in some embodiments, the method further includes:

[0053] The first access network device does not store the terminal context, and sends a second message to the second access network device; wherein the second message is used to request to obtain the terminal context; wherein the second access network device is deployed on a second satellite, and the second access network device retains the terminal context when the RRC connection is released;

[0054] A third message sent by the second access network device is received, where the third message includes the terminal context stored on the second access network device.

[0055] In the above embodiment, when the first access network device does not store the terminal context, the terminal context can be obtained from the second access network device to determine whether the terminal is authorized to use the store-and-forward service based on the terminal context, which is simple to implement and has high availability.

[0056] In combination with some embodiments of the first aspect, in some embodiments, the second message includes a terminal identifier, and the terminal identifier is used by the second access network device to determine the corresponding terminal context.

[0057] In the above embodiment, the second message may include a terminal identifier, so that the second access network device can determine the terminal context corresponding to the terminal identifier, thereby ensuring the accuracy and reliability of obtaining the terminal context.

[0058] In conjunction with some embodiments of the first aspect, in some embodiments, determining whether the terminal is authorized to use the store-and-forward service based on the terminal context includes at least one of the following:

[0059] The terminal context includes first indication information, which determines that the terminal is authorized to use the store-and-forward service; wherein the first indication information is used to indicate that the terminal is allowed to use the store-and-forward service;

[0060] The terminal context includes second indication information, determining that the terminal does not have authorization to use the store-and-forward service; wherein the second indication information is used to indicate that the terminal is prohibited from using the store-and-forward service;

[0061] The terminal context only includes terminal authorization information, and based on the terminal authorization information, it is determined whether the terminal has authorization to use the store-and-forward service; wherein the terminal authorization information is authorization information for the terminal to use the store-and-forward service.

[0062] In the above embodiment, the access network device can directly determine whether the terminal is authorized to use the store-and-forward service, or determine whether the terminal is authorized to use the store-and-forward service based on the terminal authorization information. This achieves the purpose of determining whether the terminal is authorized to use the store-and-forward service, and improves the reliability and availability of NTN communications.

[0063] In conjunction with some embodiments of the first aspect, in some embodiments, determining whether the terminal is authorized to use the store-and-forward service based on the terminal context includes:

[0064] When the terminal context includes the first indication information, it is determined whether the terminal is authorized to use the store-and-forward service based on the terminal authorization information included in the terminal context; wherein the terminal authorization information is authorization information for the terminal to use the store-and-forward service.

[0065] In the above embodiment, when the terminal context includes the first indication information, the access network device can further determine whether the terminal is authorized to use the store-and-forward service based on the terminal authorization information. This achieves the purpose of determining whether the terminal is authorized to use the store-and-forward service, thereby improving the reliability and availability of NTN communications.

[0066] In conjunction with some embodiments of the first aspect, in some embodiments, determining whether the terminal is authorized to use the store-and-forward service based on the terminal authorization information includes at least one of the following:

[0067] The terminal authorization information includes the service type of the store-and-forward service, and determines the service type of the store-and-forward service that the terminal is authorized to use;

[0068] The terminal authorization information includes geographical area information allowing the use of the store-and-forward service, and when the current geographical location of the terminal is within the geographical area indicated by the geographical area information, it is determined that the terminal has the authorization to use the store-and-forward service;

[0069] The terminal authorization information includes geographical area information that allows the use of the store-and-forward service, and when the current geographical location of the terminal is outside the geographical area indicated by the geographical area information, it is determined that the terminal does not have the authorization to use the store-and-forward service;

[0070] The terminal authorization information includes time information for allowing the use of the store-and-forward service, and when the current time point is within the time period indicated by the time information, it is determined that the terminal has the authorization to use the store-and-forward service;

[0071] The terminal authorization information includes time information allowing the use of the store-and-forward service. When the current time point is outside the time period indicated by the time information, it is determined that the terminal does not have the authorization to use the store-and-forward service.

[0072] In the above embodiment, the access network device can use the above method to determine whether the terminal is authorized to use the store-and-forward service based on the terminal authorization information, which is simple to implement and has high availability.

[0073] In conjunction with some embodiments of the first aspect, in some embodiments, the method further includes:

[0074] The terminal is authorized to use the store-and-forward service and stores uplink data.

[0075] In the above embodiment, the access network device can store uplink data when the terminal is authorized to use the store-and-forward service. This prevents satellite resources from being occupied by terminals that do not have store-and-forward service authorization, effectively avoids interruptions in satellite access services, and improves the availability and reliability of NTN communications.

[0076] In conjunction with some embodiments of the first aspect, in some embodiments, the method further includes:

[0077] When the feeder link is available, the stored uplink data is sent to the core network via the feeder link.

[0078] In the above embodiment, if the feeder link is available, the first access network device can send the stored uplink data to the core network via the feeder link. This prevents satellite resources from being occupied by terminals that do not have store-and-forward service authorization, effectively avoids interruptions in satellite access services, and improves the availability and reliability of NTN communications.

[0079] In conjunction with some embodiments of the first aspect, in some embodiments, the method further includes:

[0080] Sending a fourth message to the core network, where the fourth message is used to request the core network to update service link information;

[0081] Receive a fifth message sent by the core network after successfully updating the service link information.

[0082] In the above embodiment, the first access network device can send a fourth message to the core network, requesting the core network to update the service link information, and determine based on the fifth message that the core network has successfully updated the service link information, thereby improving the reliability of NTN communication when the service access network device of the terminal is changed.

[0083] In conjunction with some embodiments of the first aspect, in some embodiments, the method further includes:

[0084] The terminal does not have authorization to use the store-and-forward service, and sends a sixth message to the terminal, where the sixth message is used to reject the request to restore the RRC connection.

[0085] In the above embodiment, it is possible to prevent satellite resources from being occupied by terminals without store-and-forward service authorization, effectively avoid interruption of satellite access services, and improve the availability and reliability of NTN communications.

[0086] In a second aspect, an embodiment of the present disclosure provides a method for determining authorization, where the method is performed by a second access network device deployed on a second satellite, and includes:

[0087] Receive a second message sent by the first access network device; wherein the second message is used to request to obtain the terminal context;

[0088] A third message is sent to the first access network device, where the third message includes the terminal context stored on the second access network device.

[0089] In the above embodiment, the second access network device can provide the stored terminal context to the first access network device, so that the first access network device can determine whether the terminal is authorized to use the store-and-forward service based on the terminal context. This can prevent satellite resources from being occupied by terminals that do not have store-and-forward service authorization, and can effectively avoid interruptions in satellite access services, thereby improving the availability and reliability of NTN communications.

[0090] In conjunction with some embodiments of the second aspect, in some embodiments, the method further includes:

[0091] The corresponding terminal context is determined based on the terminal identifier included in the second message.

[0092] In conjunction with some embodiments of the second aspect, in some embodiments, the method further includes:

[0093] Map the cell identifier, and determine an RRC security key based on the mapping result; wherein the RRC security key is carried in the third message.

[0094] In the above embodiment, the third message carries the RRC security key, which determines that the inter-satellite link between the first satellite and the second satellite is a secure link, thereby ensuring the reliability of the terminal context transmission.

[0095] In a third aspect, an embodiment of the present disclosure provides a first access network device, where the first access network device is deployed on a first satellite and includes:

[0096] a transceiver module configured to receive a first message sent by a terminal, where the first message is used to request recovery, re-establishment or establishment of a radio resource control (RRC) connection;

[0097] The processing module is configured to determine whether the terminal is authorized to use the store-and-forward service based on the terminal context.

[0098] In a fourth aspect, an embodiment of the present disclosure provides a second access network device, where the second access network device is deployed on a second satellite and includes:

[0099] A transceiver module is configured to receive a second message sent by the first access network device; wherein the second message is used to request to obtain the terminal context;

[0100] The transceiver module is further configured to send a third message to the first access network device, where the third message includes the terminal context stored on the second access network device.

[0101] In a fifth aspect, an embodiment of the present disclosure provides a first access network device, including:

[0102] one or more processors;

[0103] The processor is used to execute the method for determining authorization as described in any one of the first aspects.

[0104] In a sixth aspect, an embodiment of the present disclosure provides a second access network device, including:

[0105] one or more processors;

[0106] The processor is used to execute the method for determining authorization as described in any one of the second aspects.

[0107] In a seventh aspect, an embodiment of the present disclosure provides a communication system, including:

[0108] terminal;

[0109] A first access network device, wherein the first network device is configured to implement the method for determining authorization according to any one of the first aspects;

[0110] A second access network device, wherein the second satellite is configured to implement the method for determining authorization according to any one of the second aspects;

[0111] core network.

[0112] In an eighth aspect, an embodiment of the present disclosure proposes a storage medium storing instructions. When the instructions are executed on a communication device, the communication device executes the method for determining authorization as described in either the first aspect or the second aspect.

[0113] It is understandable that the above-mentioned terminals, access network devices, core networks, communication systems, storage media, and computer programs are all used to execute the methods proposed in the embodiments of the present disclosure. Therefore, the beneficial effects that can be achieved can refer to the beneficial effects of the corresponding methods and will not be repeated here.

[0114] The present disclosure provides methods, devices, and storage media for determining authorization. In some embodiments, the terms "method for determining authorization" and "information processing method" and "communication method" are interchangeable; "device for determining authorization" and "information processing device" and "communication device" are interchangeable; and "information processing system" and "communication system" are interchangeable.

[0115] The embodiments of the present disclosure are not exhaustive and are merely illustrative of some embodiments, and are not intended to be a specific limitation on the scope of protection of the present disclosure. In the absence of contradiction, each step in a certain embodiment can be implemented as an independent embodiment, and the steps can be arbitrarily combined. For example, a solution after removing some steps in a certain embodiment can also be implemented as an independent embodiment, and the order of the steps in a certain embodiment can be arbitrarily exchanged. In addition, the optional implementation methods in a certain embodiment can be arbitrarily combined; in addition, the embodiments can be arbitrarily combined. For example, some or all steps of different embodiments can be arbitrarily combined, and a certain embodiment can be arbitrarily combined with the optional implementation methods of other embodiments.

[0116] In each embodiment of the present disclosure, unless otherwise specified or provided for by logic, the terms and / or descriptions between the embodiments are consistent and can be referenced by each other. The technical features in different embodiments can be combined to form a new embodiment based on their inherent logical relationships.

[0117] The terms used in the embodiments of the present disclosure are only for the purpose of describing specific embodiments and are not intended to limit the present disclosure.

[0118] In the embodiments of the present disclosure, unless otherwise specified, elements expressed in the singular, such as "a", "an", "the", "above", "said", "the", "the", etc., may mean "one and only one", or "one or more", "at least one", etc. For example, when using articles such as "a", "an", "the" in English in translation, the noun following the article may be understood as a singular expression or a plural expression.

[0119] In the embodiments of the present disclosure, “plurality” refers to two or more.

[0120] In some embodiments, the terms "at least one," "one or more," "a plurality of," "multiple," etc. may be used interchangeably.

[0121] In some embodiments, descriptions such as "at least one of A and B," "A and / or B," "A in one case, B in another case," or "in response to one case A, in response to another case B" may include the following technical solutions depending on the situation: in some embodiments, A (A is executed independently of B); in some embodiments, B (B is executed independently of A); in some embodiments, execution is selected from A and B (A and B are selectively executed); and in some embodiments, A and B (both A and B are executed). The above is also applicable when there are more branches such as A, B, and C.

[0122] In some embodiments, "A or B" and other descriptions may include the following technical solutions depending on the situation: in some embodiments, A (A is executed independently of B); in some embodiments, B (B is executed independently of A); in some embodiments, execution is selected from A and B (A and B are selectively executed). The above is also applicable when there are more branches such as A, B, C, etc.

[0123] The prefixes such as "first" and "second" in the embodiments of the present disclosure are only used to distinguish different description objects and do not constitute any restriction on the position, order, priority, quantity or content of the description objects. For the statement of the description object, please refer to the description in the context of the claims or embodiments, and no unnecessary restriction should be constituted due to the use of prefixes. For example, if the description object is a "field", the ordinal number before the "field" in the "first field" and the "second field" does not limit the position or order between the "fields". "First" and "second" do not limit whether the "fields" they modify are in the same message, nor do they limit the order of the "first field" and the "second field". For another example, if the description object is a "level", the ordinal number before the "level" in the "first level" and the "second level" does not limit the priority between the "levels". For another example, the number of description objects is not limited by the ordinal number and can be one or more. Taking "first device" as an example, the number of "devices" can be one or more. In addition, the objects modified by different prefixes can be the same or different. For example, if the description object is "device", then the "first device" and the "second device" can be the same device or different devices, and their types can be the same or different; for another example, if the description object is "information", then the "first information" and the "second information" can be the same information or different information, and their contents can be the same or different.

[0124] In some embodiments, “including A,” “comprising A,” “used to indicate A,” and “carrying A” can be interpreted as directly carrying A or indirectly indicating A.

[0125] In some embodiments, devices and equipment can be interpreted as physical or virtual, and their names are not limited to the names recorded in the embodiments. In some cases, they can also be understood as "equipment", "device", "circuit", "network element", "node", "function", "unit", "section", "system", "network", "entity", "subject", etc.

[0126] In some embodiments, "network" can be interpreted as devices included in the network, such as access network equipment, core network elements, etc.

[0127] In some embodiments, "access network device (AN device)" may also be referred to as "radio access network device (RAN device)", "base station (BS)", "radio base station", "fixed station", and in some embodiments may also be understood as "node", "access point", "transmission point (TP)", "reception point (RP)", "transmission and / or reception point (TRP)" "panel", "antenna panel", "antenna array", "cell", "macro cell", "small cell", "femto cell", "pico cell", "sector", "cell group", "serving cell", "carrier", "component carrier", "bandwidth part (BWP)", etc.

[0128] In some embodiments, obtaining data, information, etc. may comply with the laws and regulations of the country where the data is obtained.

[0129] In some embodiments, data, information, etc. may be obtained with the user's consent.

[0130] In addition, each element, each row, or each column in the table of the embodiment of the present disclosure can be implemented as an independent embodiment, and the combination of any elements, any rows, and any columns can also be implemented as an independent embodiment.

[0131] FIG1 is a schematic diagram showing the architecture of a communication system according to an embodiment of the present disclosure.

[0132] As shown in FIG1 , a communication system 100 includes a terminal 101 , an access network device 102 , and a core network 103 .

[0133] In some embodiments, the terminal 101 includes, for example, a mobile phone, a wearable device, an Internet of Things device, a car with communication function, a smart car, a tablet computer, a computer with wireless transceiver function, a virtual reality (VR) terminal device, an Internet of Things (IoT) device, an augmented reality (AR) terminal device, a wireless terminal device in industrial control, a wireless terminal device in self-driving, a wireless terminal device in remote medical surgery, a wireless terminal device in a smart grid, a wireless terminal device in transportation safety, a wireless terminal device in a smart city, and at least one of a wireless terminal device in a smart home, but is not limited thereto.

[0134] In some embodiments, the access network device 102 is, for example, a node or device that accesses a terminal to a wireless network. The access network device may include an evolved NodeB (eNB) in a 4G communication system, a next generation evolved NodeB (ng-eNB), a next generation NodeB (gNB) in a 5G communication system, a node B (NB), a home node B (HNB), a home evolved nodeB (HeNB), a wireless backhaul device, a radio network controller (RNC), a base station controller (BSC), a base transceiver station (BTS), a base band unit (BBU), a mobile switching center, a base station in a 6G communication system, an open base station (Open RAN), a cloud base station (Cloud RAN), a base station in other communication systems, and at least one of an access node in a Wi-Fi system, but is not limited thereto.

[0135] In some embodiments, the access network device 102 can be composed of a centralized unit (CU) and a distributed unit (DU), where the CU can also be called a control unit. The CU-DU structure can be used to split the protocol layer of the access network device, with the functions of some protocol layers centrally controlled by the CU, and the functions of the remaining part or all of the protocol layers distributed in the DU, which is centrally controlled by the CU, but is not limited to this.

[0136] In some embodiments, the access network device 102 may be deployed on a satellite.

[0137] In some embodiments, in addition to the access network device 102, some network elements included in the core network 103 can also be deployed on a satellite.

[0138] In some embodiments, the access network device 102 may include, but is not limited to, a first access network device 102-1 and a second access network device 102-2. The first access network device 102-1 is deployed on a first satellite and serves as a serving access network device for the terminal 101. The second access network device 102-2 is deployed on a second satellite and serves as a legacy access network device for the terminal 101.

[0139] In the embodiment of the present disclosure, the actions performed by the access network device 102 deployed on the satellite may also be performed by the core network elements deployed on the satellite, and the present disclosure does not limit this.

[0140] In some embodiments, the core network 103 may be a device including one or more network elements, or may be multiple devices or a group of devices. The network elements may be virtual or physical. The core network may include, for example, at least one of an Evolved Packet Core (EPC), a 5G Core Network (5GCN), or a Next Generation Core (NGC).

[0141] In some embodiments, the core network 103 may include but is not limited to the following core network elements: a first core network element 103 - 1 .

[0142] Among them, the first core network network element 103-1 can be used for mobility management, authentication management, etc. In the 4G network, the first core network network element 103-1 can be a mobility management entity (Mobility Management Entity, MME), and in the 5G network, the first core network network element 103-1 can be an authentication management function (Authentication Management Function, AMF).

[0143] In some embodiments, the core network 103 may include other network elements or functional entities, such as a home subscriber server (Home Subscriber Server) in a 4G network, a unified data management (UDM) in a 5G network, a location management function (LMF), a session location management function (SMF), etc., but this disclosure does not limit this.

[0144] In some embodiments, the technical solution of the present disclosure can be applied to the Open RAN architecture. In this case, the interfaces between or within the access network devices involved in the embodiments of the present disclosure can be transformed into internal interfaces of the Open RAN, and the processes and information interactions between these internal interfaces can be implemented through software or programs.

[0145] In some embodiments, the terminal 101 is connected to the core network 103 via an access network device 102 deployed on a satellite.

[0146] It can be understood that the communication system described in the embodiment of the present disclosure is for the purpose of more clearly illustrating the technical solution of the embodiment of the present disclosure, and does not constitute a limitation on the technical solution proposed in the embodiment of the present disclosure. Ordinary technicians in this field can know that with the evolution of the system architecture and the emergence of new business scenarios, the technical solution proposed in the embodiment of the present disclosure is also applicable to similar technical problems.

[0147] The following embodiments of the present disclosure may be applied to the communication system 100 shown in FIG1 , or a portion thereof, but are not limited thereto. The entities shown in FIG1 are illustrative only. The communication system may include all or part of the entities shown in FIG1 , or may include other entities outside of FIG1 . The number and form of the entities are arbitrary, and the entities may be physical or virtual. The connection relationships between the entities are illustrative only. The entities may be connected or disconnected, and the connection may be in any manner, including direct or indirect, wired or wireless.

[0148] The embodiments of the present disclosure may be applied to Long Term Evolution (LTE), LTE-Advanced (LTE-A), LTE-Beyond (LTE-B), SUPER 3G, IMT-Advanced, 4th generation mobile communication system (4G), 5th generation mobile communication system (5G), 6th generation mobile communication system (6G), 5G New Radio (NR), Future Radio Access (FRA), New-Radio Access Technology (RAT), New Radio (NR), New Radio Access (NX), Future Generation Radio Access (FX), Global System for Mobile Communications (GSM (registered trademark)), CDMA2000, Ultra Mobile Broadband (UMB), IEEE 802.11 (Wi-Fi (registered trademark)), IEEE 802.16 (WiMAX (registered trademark)), IEEE 802.17 (WiMAX (registered trademark)), IEEE 802.18 (WiMAX (registered trademark)), IEEE 802.19 (WiMAX (registered trademark)), IEEE 802.20 (WiMAX (registered trademark)), IEEE 802.21 (WiMAX (registered trademark)), IEEE 802.22 (WiMAX (registered trademark)), IEEE 802.23 (WiMAX (registered trademark)), IEEE 802.24 (WiMAX (registered trademark)), IEEE 802.25 (WiMAX (registered trademark)), IEEE 802.26 (WiMAX (registered trademark)), IEEE 802.27 (WiMAX (registered trademark)), IEEE 802.28 (WiMAX (registered trademark)), IEEE 802.29 (WiMAX (registered trademark)), IEEE 802.30 (WiMAX (registered trademark)), IEEE 802.31 (WiMAX (registered trademark)), IEEE 802.32 (WiMAX (registered trademark)), IEEE 802.3 802.20, Ultra-WideBand (UWB), Bluetooth (registered trademark), Public Land Mobile Network (PLMN) networks, systems utilizing other communication methods, and next-generation systems based on these. Furthermore, a combination of multiple systems (for example, a combination of LTE or LTE-A with 5G) may also be used.

[0149] Currently, both transparent transmission satellite payloads and regenerative satellite payloads can be used for satellite communications. A transparent transmission satellite payload can be understood as a satellite that lacks signal processing capabilities and is only capable of transparent transmission. A regenerative satellite payload can be understood as a satellite that supports wireless network layer protocols, so if a signal is received from Earth, it can process (or regenerate) the signal. Because the satellite is processing the payload, it can store and forward information and establish communication with neighboring satellites via intersatellite links. This communication mode can be called a store and forward service operation.

[0150] In store-and-forward service operations, the serving link between the terminal and the satellite (SAT) and the feeder link between the SAT and the NTN gateway may not be available simultaneously. If the serving link is available but the feeder link is not, the SAT can temporarily store uplink data from the terminal. If the feeder link is available but the serving link is not, the SAT can temporarily store downlink data from the core network element.

[0151] If terminal authorization is not checked before performing S&F service operations, SAT resources may be occupied or even exhausted by terminals that do not have S&F service operation authorization, and satellite access services will be interrupted.

[0152] The present disclosure provides the following authorization determination method, device, and storage medium, which can determine whether a terminal has authorization to use the store-and-forward service based on the terminal context, thereby preventing satellite resources from being occupied by terminals that do not have the store-and-forward service authorization, effectively avoiding satellite access service interruptions, and improving the availability and reliability of NTN communications.

[0153] FIG2A is an interactive diagram of a method for determining authorization according to an embodiment of the present disclosure. As shown in FIG2A , an embodiment of the present disclosure relates to a method for determining authorization, and the method includes:

[0154] Step S2101: The first access network device 102-1 sends a seventh message to the terminal 101.

[0155] In some embodiments, the first access network device 102-1 may be an eNB in ​​a 4G system and a gNB in ​​a 5G system.

[0156] Due to wireless link failure, satellite mobility, performance optimization or other reasons, in the user plane (UP) consumer Internet of Things (CIoT) optimization process or the control plane (CP) consumer Internet of Things (CIoT) optimization process, the first access network device 102-1 can send a seventh message to the terminal 101, and the seventh message is used to suspend the radio resource control (RRC) connection.

[0157] In some embodiments, the seventh message may be an RRC message. Exemplarily, the seventh message may be any of the following messages:

[0158] RRC release message;

[0159] RRC Suspend message.

[0160] Of course, the seventh message may also be other messages, and this disclosure does not limit this.

[0161] In some embodiments, the name of the seventh message is not limited.

[0162] In some embodiments, after the first access network device 102 - 1 sends the seventh message to the terminal 101 , the terminal context is retained on the first access network device 102 - 1 .

[0163] In some embodiments, terminal 101 receives a seventh message.

[0164] In some embodiments, after receiving the seventh message, the terminal 101 also retains the RRC context and enters the connection management idle (connection management_idle CM_idle) state of suspending the RRC connection, the RRC inactive (inactive) state, the RRC idle suspension (RRC_idle with suspend) state, etc.

[0165] It should be noted that some network elements included in the core network 103 may also be deployed on a satellite. In the embodiments of the present disclosure, the actions performed by the first access network device 102-1 may also be performed by network elements included in the core network 103 and deployed on a satellite, but this disclosure is not limited to this. The subsequent embodiments are described using the first access network device 102-1 as an example.

[0166] Step S2102: Terminal 101 sends a first message to the first access network device 102-1.

[0167] In some embodiments, when the terminal 101 determines to restore the RRC connection and wishes to use the store-and-forward service, it may send a first message to the first access network device 102 - 1 .

[0168] In some embodiments, when the terminal 101 determines that an RRC connection needs to be restored, re-established, or established, the terminal 101 may send a first message to the first access network device 102 - 1 .

[0169] In some embodiments, the first message may be used to request resumption, re-establishment, or establishment of an RRC connection.

[0170] In some embodiments, the first message may include a terminal identifier, which may be used by the first access network device 102 - 1 to determine a corresponding terminal context.

[0171] In some embodiments, the terminal identification includes but is not limited to at least one of the following:

[0172] The identifier distributed by the access network in the recovery message;

[0173] Terminal identity, such as Radio Network Temporary Indentifier (RNTI).

[0174] .

[0175] In some embodiments, the first message may be an RRC message. Exemplarily, the first message may be any of the following messages:

[0176] RRC resume request message;

[0177] RRC Connection Reestablishment request message;

[0178] RRC Connection Establishment request message.

[0179] In some embodiments, the first access network device 102 - 1 receives the first message.

[0180] In some embodiments, the name of the first message is not limited and can be interchangeable with the first RRC message, RRC connection message, etc.

[0181] Step S2103: The first access network device 102-1 determines whether the terminal 101 is authorized to use the store-and-forward service based on the terminal context.

[0182] In some embodiments, the first access network device 102 - 1 determines whether a terminal context corresponding to the terminal identifier is stored locally based on the terminal identifier included in the first message.

[0183] In some embodiments, the first access network device 102 - 1 stores the terminal context, and may directly determine whether the terminal 101 is authorized to use the store-and-forward service based on the stored terminal context.

[0184] In some embodiments, the first access network device 102-1 does not store the terminal context, and the first access network device 102-1 may obtain the terminal context from the second access network device 102-2 or other devices. The specific process is shown in FIG2B and will not be described here.

[0185] In some embodiments, the terminal context is stored on the first access network device 102-1, and the terminal context includes first indication information, which is used to indicate that the terminal 101 is allowed to use the storage and forwarding service. The first access network device 102-1 can directly determine that the terminal 101 is authorized to use the storage and forwarding service.

[0186] In some embodiments, the terminal context is stored on the first access network device 102-1, and the terminal context includes second indication information, and the second indication information is used to indicate that the terminal 101 is prohibited from using the storage and forwarding service. The first access network device 102-1 can directly determine that the terminal 101 does not have authorization to use the storage and forwarding service.

[0187] In some embodiments, the first access network device 102-1 stores a terminal context, which includes only terminal authorization information. Based on the terminal authorization information, the first access network device 102-1 can determine whether the terminal is authorized to use the store-and-forward service. The specific determination method will be described in subsequent embodiments and is not described here.

[0188] In an example, the terminal authorization information is authorization information for the terminal to use the store-and-forward service.

[0189] In one example, the terminal authorization information may include but is not limited to at least one of the following:

[0190] Business type of store-and-forward service;

[0191] Geographical information regarding permitted use of the store-and-forward service;

[0192] Time information that allows use of store-and-forward services.

[0193] In an example, the service type of the store-and-forward service may include but is not limited to at least one of the following: allowing control plane (CP) store-and-forward service; allowing user plane (UP) store-and-forward service; allowing control plane and user plane store-and-forward service.

[0194] In one example, the information about the geographical area in which the use of the store-and-forward service is allowed may be represented by geographical coordinates of a boundary point of the area, or may be represented by a country identifier or a region identifier.

[0195] In an example, the time information may be in units of year, month, day, hour, or minute, which is not limited in the present disclosure.

[0196] In some embodiments, the terminal context includes first indication information, and the first access network device 102 - 1 may determine whether the terminal is authorized to use the store-and-forward service based on the terminal authorization information included in the terminal context.

[0197] In one example, the content of the terminal authorization information has been introduced in the aforementioned embodiment and will not be repeated here.

[0198] In some embodiments, when the terminal context includes only terminal authorization information, or when the terminal context includes the first indication information and the terminal authorization information, the first access network device 102-1 further needs to determine whether the terminal is authorized to use the store-and-forward service based on the terminal authorization information. The specific implementation method is as follows:

[0199] In one example, the terminal authorization information includes the service type of the store-and-forward service. The first access network device 102-1 may determine the service type of the store-and-forward service that the terminal 101 is authorized to use based on the terminal authorization information. If the service type of the store-and-forward service requested by the terminal 101 is an authorized service type, it is determined that the terminal 101 is authorized to use the store-and-forward service. If the service type of the store-and-forward service requested by the terminal 101 is an unauthorized service type, it is determined that the terminal 101 is not authorized to use the store-and-forward service.

[0200] In one example, the terminal authorization information includes geographical area information allowing use of the store-and-forward service. The first access network device 102-1 may determine that the terminal 101 is authorized to use the store-and-forward service when the current geographical location of the terminal 101 is within the geographical area indicated by the geographical area information. If the current geographical location of the terminal 101 is outside the geographical area indicated by the geographical area information, the first access network device 102-1 may determine that the terminal 101 is not authorized to use the store-and-forward service.

[0201] In one example, the terminal authorization information includes time information for allowing use of the store-and-forward service. The first access network device 102-1 may determine that the terminal 101 is authorized to use the store-and-forward service when the current time point is within the time period indicated by the time information. If the current time point is outside the time period indicated by the time information, the first access network device 102-1 may determine that the terminal 101 is not authorized to use the store-and-forward service.

[0202] In one example, the terminal authorization information includes the service type of the store-and-forward service and the geographical area information in which the use of the store-and-forward service is permitted. The first access network device 102-1 can determine the service type of the store-and-forward service that the terminal 101 is authorized to use based on the terminal authorization information. If the service type of the store-and-forward service requested by the terminal 101 is the authorized service type and the current geographical location is within the geographical area indicated by the geographical area information, the terminal 101 is determined to be authorized to use the store-and-forward service. In all other cases, the terminal 101 is determined to be not authorized to use the store-and-forward service.

[0203] In one example, the terminal authorization information includes the service type of the store-and-forward service and the time information during which the use of the store-and-forward service is permitted. The first access network device 102-1 can determine the service type of the store-and-forward service that the terminal 101 is authorized to use based on the terminal authorization information. If the service type of the store-and-forward service requested by the terminal 101 is the authorized service type and the current time point is within the time period indicated by the time information, the first access network device 102-1 determines that the terminal 101 is authorized to use the store-and-forward service. In all other cases, the first access network device 102-1 determines that the terminal 101 is not authorized to use the store-and-forward service.

[0204] In one example, the terminal authorization information includes the service type of the storage and forwarding service, the geographical area information in which the storage and forwarding service is allowed to be used, and the time information in which the storage and forwarding service is allowed to be used. The first access network device 102-1 can determine the service type of the storage and forwarding service that the terminal 101 is authorized to use based on the terminal authorization information, and determine that the terminal 101 is authorized to use the storage and forwarding service when the service type of the storage and forwarding service requested by the terminal 101 is the authorized service type, the current geographical location is within the geographical area indicated by the geographical area information, and the current time point is within the time period indicated by the time information. In all other cases, it is determined that the terminal 101 is not authorized to use the storage and forwarding service.

[0205] The above description is merely an exemplary description, and any solution in which the first access network device 102 determines whether the terminal is authorized to use the store-and-forward service based on the terminal authorization information should fall within the scope of protection of this disclosure.

[0206] In some embodiments, the first access network device 102 executes the following steps S2104 to S2107 when the terminal 101 is authorized to use the store-and-forward service, and executes the following step S2108 when the terminal 101 is not authorized to use the store-and-forward service.

[0207] Step S2104 : The first access network device 102 - 1 sends an eighth message to the terminal 101 .

[0208] In some embodiments, the eighth message may be used to indicate that the terminal 101 is allowed to access the first access network device 102 - 1 .

[0209] In some embodiments, the eighth message may be an RRC message. Exemplarily, the eighth message may be any of the following messages:

[0210] RRC Resume message;

[0211] RRC Connection Reestablishment message;

[0212] RRC connection establishment message.

[0213] In some embodiments, terminal 101 receives an eighth message.

[0214] In some embodiments, the name of the eighth message is not limited.

[0215] Step S2105: The terminal 101 sends uplink data to the first access network device 102-1.

[0216] In some embodiments, the terminal 101 may send uplink data via a ninth message.

[0217] In some embodiments, the ninth message may be an RRC message. Exemplarily, the ninth message may be any of the following messages:

[0218] RRC Resume complete message;

[0219] RRC Connection Reestablishment complete message;

[0220] RRC connection establishment complete message.

[0221] In some embodiments, the first access network device 102 - 1 receives the ninth message.

[0222] Step S2106: The first access network device 102-1 stores the uplink data.

[0223] In some embodiments, the first access network device 102 - 1 uses satellite resources to store the uplink data.

[0224] Step S2107: The first access network device 102-1 sends the stored uplink data to the core network 103 through the feeder link.

[0225] In some embodiments, when the feeder link is available, the first access network device 102 - 1 sends the stored uplink data to the core network 103 through the feeder link.

[0226] In some embodiments, the core network 103 receives uplink data.

[0227] Step S2108 : The first access network device 102 - 1 sends a sixth message to the terminal 101 .

[0228] In some embodiments, the sixth message is used to reject the request to resume the RRC connection.

[0229] In some embodiments, the sixth message may be an RRC message.

[0230] In some embodiments, the terminal 101 receives the sixth message and determines based on the sixth message that the terminal 101 is not authorized to use the store-and-forward service.

[0231] In some embodiments, the names of information, etc. are not limited to the names described in the embodiments, and terms such as "information", "message", "signal", "signaling", "report", "configuration", "indication", "instruction", "command", "channel", "parameter", "domain", "field", "symbol", "symbol", "codeword", "codebook", "codeword", "codepoint", "bit", "data", "program", and "chip" can be used interchangeably.

[0232] In some embodiments, terms such as "send", "transmit", "report", "download", "transmit", "bidirectional transmission", "send and / or receive" can be used interchangeably.

[0233] In some embodiments, "obtain", "get", "get", "receive", "transmit", "bidirectional transmission", "send and / or receive" can be interchangeable, and can be interpreted as receiving from other entities, obtaining from protocols, obtaining from higher layers, obtaining by self-processing, autonomous implementation, etc.

[0234] In some embodiments, terms such as "certain", "preseted", "preset", "setting", "indicated", "a certain", "any", "first", and "designated" can be interchangeable. "Specific A", "preset A", "preset A", "setting A", "indicated A", "a certain A", "any A", and "first A" can be interpreted as A pre-specified in a protocol, etc., or as A obtained through setting, configuration, or indication, etc., or as specific A, a certain A, any A, or first A, etc., but not limited to this.

[0235] In some embodiments, the method for determining authorization involved in the embodiments of the present disclosure may include at least one of steps S2101 to S2108. For example, step S2101 can be implemented as an independent embodiment, step S2102 can be implemented as an independent embodiment, steps S2101+S2102 can be implemented as an independent embodiment, step S2103 can be implemented as an independent embodiment, steps S2101+S2102+step S2103 can be implemented as an independent embodiment, steps S2104 to S2107 can be implemented as independent embodiments, step S2108 can be implemented as an independent embodiment, and steps S2101 to S2108 can be implemented as independent embodiments, but are not limited thereto.

[0236] In some embodiments, step S2101 is optional, and one or more of these steps may be omitted or replaced in different embodiments. For example, when other execution entities suspend the RRC connection, step S2101 may not be executed.

[0237] In some embodiments, step S2102 is optional, and one or more of these steps may be omitted or replaced in different embodiments. For example, when terminal 101 does not need to restore the RRC connection or does not need to use the store-and-forward service, step S2102 may not be performed.

[0238] In some embodiments, steps S2104 to S2107 and step S2108 may be performed alternatively. For example, if terminal 101 is authorized to use the store-and-forward service, steps S2104 to S2107 are performed. If terminal 101 is not authorized to use the store-and-forward service, step S2108 is performed.

[0239] In some embodiments, steps S2101 to S2108 are optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0240] In the above embodiment, the first access network device can determine whether the terminal is authorized to use the store-and-forward service based on the terminal context, thereby preventing satellite resources from being occupied by terminals that do not have the store-and-forward service authorization, and effectively avoiding interruption of satellite access services, thereby improving the availability and reliability of NTN communications.

[0241] FIG2B is an interactive diagram of a method for determining authorization according to an embodiment of the present disclosure. As shown in FIG2B , an embodiment of the present disclosure relates to a method for determining authorization, and the method includes:

[0242] Step S2201: The second access network device 102-2 sends a seventh message to the terminal 101.

[0243] In some embodiments, the second access network device 102-2 is deployed on the second satellite. When the RRC connection needs to be suspended, the terminal 101 is within the coverage of the second satellite. At this time, the second access network device 102-2 can send the seventh message to the terminal 101.

[0244] In some embodiments, the implementation of step S2201 is similar to the above-mentioned step S2101 and will not be repeated here.

[0245] Step S2202: Terminal 101 sends a first message to the first access network device 102-1.

[0246] In some embodiments, the first access network device 102 - 1 is deployed on a first satellite.

[0247] In some embodiments, due to satellite movement, when the terminal 101 determines to restore the RRC connection and wishes to use the store-and-forward service, the second satellite has moved away and the terminal 101 is currently within the coverage of the first satellite. At this time, the terminal 101 can send a first message to the first access network device 102-1.

[0248] In some embodiments, the implementation of step S2202 is similar to the above-mentioned step S2102 and will not be repeated here.

[0249] In some embodiments, the first message may include a terminal identifier, which may be used by the first access network device 102 - 1 to determine a corresponding terminal context.

[0250] In some embodiments, the terminal identification includes but is not limited to at least one of the following:

[0251] The identifier distributed by the access network in the recovery message;

[0252] Terminal identity, such as RNTI.

[0253] In some embodiments, the first access network device 102 - 1 determines whether a terminal context corresponding to the terminal identifier is stored locally based on the terminal identifier included in the first message.

[0254] If the terminal context is not stored in the first access network device 102 - 1 , step S2203 is continued.

[0255] Step S2203: The first access network device 102-1 sends a second message to the second access network device 102-2.

[0256] In some embodiments, since the first access network device 102 - 1 does not store the terminal context, the first access network device 102 - 1 may request to obtain the terminal context through the second message.

[0257] In some embodiments, the second message is used to request obtaining the terminal context.

[0258] In some embodiments, the second message may be a terminal context request message. Exemplarily, the second message may be an Xn-AP Retrieve UE context request message.

[0259] In some embodiments, the second access network device 102 - 2 receives the second message.

[0260] In some embodiments, the second message may include a terminal identifier so that the second access network device 102 - 2 can determine a terminal context corresponding to the terminal identifier.

[0261] The terminal identification may include but is not limited to at least one of the following:

[0262] The identifier distributed by the access network in the recovery message;

[0263] Terminal identity, such as RNTI.

[0264] In some embodiments, the name of the second message is not limited and can be interchangeable with a context request message, a terminal context request message, etc.

[0265] Step S2204: The second access network device 102-2 sends a third message to the first access network device 102-1, wherein the third message includes the terminal context.

[0266] In some embodiments, the second access network device 102 - 2 determines a terminal context corresponding to the terminal identifier based on the terminal identifier included in the second message.

[0267] In some embodiments, the third message includes the terminal context stored in the second access network device 102 - 2 .

[0268] In some embodiments, the second access network device 102 - 2 may map the cell identifier, and based on the mapping result, determine the RRC security key, and then carry the RRC security key in the third message.

[0269] In some embodiments, the cell identifier may be a cell ID or a mapped cell ID.

[0270] In some embodiments, the mapping includes mapping the cell ID or mapped cell ID to a physical cell identifier (PCI), or mapping to a gNB ID, etc.

[0271] In some embodiments, when the second access network device 102-2 generates an RRC security key, any one of the mapped cell ID, PCI, cell ID, and gNB ID can be used as input to generate the RRC security key.

[0272] In some embodiments, the first access network device 102 - 1 receives the third message and obtains the terminal context therein.

[0273] In some embodiments, the third message includes an RRC security key, and the first access network device 102-1 determines that the inter-satellite link between the first satellite and the second satellite is a secure link, thereby ensuring reliability of terminal context transmission.

[0274] In some embodiments, the third message may be a terminal context response message. Exemplarily, the third message may be an Xn-AP Retrieve UE context response message.

[0275] Step S2205: The first access network device 102-1 determines whether the terminal 101 is authorized to use the store-and-forward service based on the terminal context.

[0276] In some embodiments, the implementation of step S2205 is similar to the above-mentioned step S2103 and will not be repeated here.

[0277] Step S2206 : The first access network device 102 - 1 sends an eighth message to the terminal 101 .

[0278] In some embodiments, the implementation of step S2206 is similar to the above-mentioned step S2104 and will not be repeated here.

[0279] Step S2207: The terminal 101 sends a ninth message to the first access network device 102-1.

[0280] In some embodiments, the implementation of step S2207 is similar to the above-mentioned step S2105 and will not be repeated here.

[0281] Step S2208: The first access network device 102-1 stores the uplink data.

[0282] In some embodiments, the implementation of step S2208 is similar to the above-mentioned step S2106 and will not be repeated here.

[0283] Step S2209 : The first access network device 102 - 1 sends a fourth message to the core network 103 .

[0284] In some embodiments, when the feeder link is available, the first access network device may send a fourth message to the core network 103 .

[0285] In some embodiments, the core network 103 receives the fourth message.

[0286] In some embodiments, the fourth message is used to request the core network 103 to update the service link information.

[0287] In some embodiments, the fourth message may be a path switch request message.

[0288] In some embodiments, the name of the fourth message is not limited and can be interchangeable with the path switch request message and the request message.

[0289] In step S2210 , the core network 103 sends a fifth message to the first access network device 102 - 1 .

[0290] In some embodiments, the core network 103 updates the service link information based on the fourth message, including but not limited to updating the service access network device of the terminal 101 to the first access network device 102 - 1 .

[0291] In some embodiments, the core network device sends a fifth message to the first access network device 102 - 1 after successfully updating the service link information.

[0292] In some embodiments, the first access network device 102 - 1 receives the fifth message.

[0293] In some embodiments, the fifth message may be a path switch response message.

[0294] Step S2211: The first access network device 102-1 sends the stored uplink data to the core network 103 through the feeder link.

[0295] In some embodiments, the implementation of step S2211 is similar to the above-mentioned step S2107 and will not be repeated here.

[0296] In some embodiments, the second access network device 102 - 2 stores uplink data from the terminal 101 and / or downlink data of the terminal 101 .

[0297] In some embodiments, after the first access network device 102-1 determines that a connection can be established with the terminal 101, uplink data from the terminal 101 and / or downlink data of the terminal 101 stored on the second access network device 102-2 can be exchanged between the first access network device 102-1 and the second access network device 102-2.

[0298] The above data interaction process may be performed after any step from step S2206 to step S2211, and the present disclosure does not limit this.

[0299] Step S2212 : The first access network device 102 - 1 sends a sixth message to the terminal 101 .

[0300] In some embodiments, the implementation of step S2212 is similar to the above-mentioned step S2108 and will not be repeated here.

[0301] In some embodiments, steps S2201 to S2212 are optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0302] In the above embodiment, the first access network device can obtain the terminal context from the second access network device and determine whether the terminal is authorized to use the store-and-forward service based on the terminal context. This can prevent satellite resources from being occupied by terminals that do not have store-and-forward service authorization, and can effectively avoid satellite access service interruptions, thereby improving the availability and reliability of NTN communications.

[0303] FIG3A is an interactive diagram illustrating a method for determining authorization according to an embodiment of the present disclosure. As shown in FIG3A , the present disclosure embodiment relates to a method for determining authorization, which can be performed by the first access network device 102-1. The method includes:

[0304] Step S3101, sending the seventh message.

[0305] In some embodiments, the first access network device 102 - 1 may send a seventh message to the terminal 101 .

[0306] In some embodiments, the optional implementation of step S3101 can refer to the optional implementation of step S2101 in Figure 2A and other related parts of the embodiment involved in Figure 2A, which will not be repeated here.

[0307] Step S3102, obtain the first message.

[0308] In some embodiments, the first access network device 102 - 1 may obtain the first message from the terminal 101 , but is not limited thereto and may also receive the first message sent by other entities.

[0309] In some embodiments, the first access network device 102 - 1 obtains a first message determined according to a predefined rule.

[0310] In some embodiments, the first access network device 102 - 1 performs processing to obtain the first message.

[0311] In some embodiments, step S3102 is omitted, the first access network device 102-1 autonomously implements the function indicated by the first message, or the first access network device 102-1 obtains the first message based on predefined rules or protocol agreements, or the above functions are default or default.

[0312] In some embodiments, the optional implementation of step S3102 can refer to the optional implementation of step S2102 in Figure 2A and other related parts of the embodiment involved in Figure 2A, which will not be repeated here.

[0313] Step S3103: Determine whether the terminal 101 is authorized to use the store-and-forward service.

[0314] In some embodiments, the optional implementation of step S3103 can refer to the optional implementation of step S2103 in Figure 2A and other related parts of the embodiment involved in Figure 2A, which will not be repeated here.

[0315] Step S3104, sending the eighth message.

[0316] In some embodiments, the first access network device 102 - 1 sends an eighth message to the terminal 101 .

[0317] In some embodiments, the optional implementation of step S3104 can refer to the optional implementation of step S2104 in Figure 2A and other related parts of the embodiment involved in Figure 2A, which will not be repeated here.

[0318] Step S3105, obtain uplink data.

[0319] In some embodiments, the first access network device 102 - 1 may obtain the uplink data from the terminal 101 , but is not limited thereto and may also receive uplink data sent by other entities.

[0320] In some embodiments, the first access network device 102 - 1 obtains uplink data determined according to a predefined rule.

[0321] In some embodiments, the first access network device 102 - 1 performs processing to obtain the uplink data.

[0322] In some embodiments, step S3105 is omitted, the first access network device 102-1 autonomously implements the function indicated by the uplink data, or the first access network device 102-1 obtains the uplink data based on predefined rules or protocol agreements, or the above functions are default or default.

[0323] In some embodiments, the optional implementation of step S3105 can refer to the optional implementation of step S2105 in Figure 2A and other related parts of the embodiment involved in Figure 2A, which will not be repeated here.

[0324] Step S3106: store uplink data.

[0325] In some embodiments, the optional implementation of step S3106 can refer to the optional implementation of step S2106 in Figure 2A and other related parts of the embodiment involved in Figure 2A, which will not be repeated here.

[0326] Step S3107, sending uplink data.

[0327] In some embodiments, the first access network device 102 - 1 sends the stored uplink data to the core network 103 .

[0328] In some embodiments, the optional implementation of step S3107 can refer to the optional implementation of step S2107 in Figure 2A and other related parts of the embodiment involved in Figure 2A, which will not be repeated here.

[0329] Step S3108, sending the sixth message.

[0330] In some embodiments, the first access network device 102 - 1 sends a sixth message to the terminal 101 .

[0331] In some embodiments, the optional implementation of step S3108 can refer to the optional implementation of step S2108 in Figure 2A and other related parts of the embodiment involved in Figure 2A, which will not be repeated here.

[0332] In some embodiments, steps S3101 to S3108 are optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0333] In the above embodiment, the terminal context is stored on the first access network device, and whether the terminal is authorized to use the store-and-forward service can be directly determined based on the terminal context, thereby preventing satellite resources from being occupied by terminals that do not have the store-and-forward service authorization, and effectively avoiding the interruption of satellite access services, thereby improving the availability and reliability of NTN communications.

[0334] FIG3B is an interactive diagram illustrating a method for determining authorization according to an embodiment of the present disclosure. As shown in FIG3B , the embodiment of the present disclosure relates to a method for determining authorization, which can be performed by the first access network device 102-1. The method includes:

[0335] Step S3201, obtain the first message.

[0336] In some embodiments, the first access network device 102 - 1 may obtain the first message from the terminal 101 , but is not limited thereto and may also receive the first message sent by other entities.

[0337] In some embodiments, the first access network device 102 - 1 obtains a first message determined according to a predefined rule.

[0338] In some embodiments, the first access network device 102 - 1 performs processing to obtain the first message.

[0339] In some embodiments, step S3201 is omitted, the first access network device 102-1 autonomously implements the function indicated by the first message, or the first access network device 102-1 obtains the first message based on predefined rules or protocol agreements, or the above functions are default or default.

[0340] In some embodiments, the optional implementation of step S3201 can refer to the optional implementation of step S2202 in Figure 2B and other related parts of the embodiment involved in Figure 2B, which will not be repeated here.

[0341] Step S3202, sending a second message.

[0342] In some embodiments, the first access network device 102 - 1 sends a second message to the second access network device 102 - 2 .

[0343] In some embodiments, the optional implementation of step S3202 can refer to the optional implementation of step S2203 in Figure 2B and other related parts of the embodiment involved in Figure 2B, which will not be repeated here.

[0344] Step S3203, obtain the third message.

[0345] In some embodiments, the first access network device 102 - 1 may obtain the first message from the second access network device 102 - 2 , but is not limited thereto and may also receive a third message sent by other entities.

[0346] In some embodiments, the first access network device 102 - 1 obtains a third message determined according to a predefined rule.

[0347] In some embodiments, the first access network device 102 - 1 performs processing to obtain the third message.

[0348] In some embodiments, step S3203 is omitted, the first access network device 102-1 autonomously implements the function indicated by the third message, or the first access network device 102-1 obtains the third message based on predefined rules or protocol agreements, or the above function is default or default.

[0349] In some embodiments, the optional implementation of step S3203 can refer to the optional implementation of step S2204 in Figure 2B and other related parts of the embodiment involved in Figure 2B, which will not be repeated here.

[0350] Step S3204: Determine whether the terminal 101 is authorized to use the store-and-forward service.

[0351] In some embodiments, the optional implementation of step S3204 can refer to the optional implementation of step S2205 in Figure 2B and other related parts of the embodiment involved in Figure 2B, which will not be repeated here.

[0352] Step S3205, sending the eighth message.

[0353] In some embodiments, the first access network device 102 - 1 sends an eighth message to the terminal 101 .

[0354] In some embodiments, the optional implementation of step S3205 can refer to the optional implementation of step S2206 in Figure 2B and other related parts of the embodiment involved in Figure 2B, which will not be repeated here.

[0355] Step S3206, obtain uplink data.

[0356] In some embodiments, the first access network device 102 - 1 may obtain the uplink data from the terminal 101 , but is not limited thereto and may also receive uplink data sent by other entities.

[0357] In some embodiments, the first access network device 102 - 1 obtains uplink data determined according to a predefined rule.

[0358] In some embodiments, the first access network device 102 - 1 performs processing to obtain the uplink data.

[0359] In some embodiments, step S3106 is omitted, the first access network device 102-1 autonomously implements the function indicated by the uplink data, or the first access network device 102-1 obtains the uplink data based on predefined rules or protocol agreements, or the above functions are default or default.

[0360] In some embodiments, the optional implementation of step S3206 can refer to the optional implementation of step S2207 in Figure 2B and other related parts of the embodiment involved in Figure 2B, which will not be repeated here.

[0361] Step S3207: store uplink data.

[0362] In some embodiments, the optional implementation of step S3207 can refer to the optional implementation of step S2208 in Figure 2B and other related parts of the embodiment involved in Figure 2B, which will not be repeated here.

[0363] Step S3208, sending the fourth message.

[0364] In some embodiments, the first access network device 102 - 1 sends a fourth message to the core network 103 .

[0365] In some embodiments, the optional implementation of step S3208 can refer to the optional implementation of step S2209 in Figure 2B and other related parts of the embodiment involved in Figure 2B, which will not be repeated here.

[0366] Step S3209, obtain the fifth message.

[0367] In some embodiments, the first access network device 102 - 1 may obtain the fifth message from the core network 103 , but is not limited thereto and may also receive the fifth message sent by other entities.

[0368] In some embodiments, the first access network device 102 - 1 obtains a fifth message determined according to a predefined rule.

[0369] In some embodiments, the first access network device 102 - 1 performs processing to obtain the fifth message.

[0370] In some embodiments, step S3109 is omitted, the first access network device 102-1 autonomously implements the function indicated by the fifth message, or the first access network device 102-1 obtains the fifth message based on predefined rules or protocol agreements, or the above functions are default or default.

[0371] In some embodiments, the optional implementation of step S3209 can refer to the optional implementation of step S2210 in Figure 2B and other related parts of the embodiment involved in Figure 2B, which will not be repeated here.

[0372] Step S3210, sending uplink data.

[0373] In some embodiments, the first access network device 102 - 1 sends the stored uplink data to the core network 103 via the feeder link.

[0374] In some embodiments, the optional implementation of step S3210 can refer to the optional implementation of step S2211 in Figure 2B and other related parts of the embodiment involved in Figure 2B, which will not be repeated here.

[0375] Step S3211, sending the sixth message.

[0376] In some embodiments, the first access network device 102 - 1 sends a sixth message to the terminal 101 .

[0377] In some embodiments, the optional implementation of step S3211 can refer to the optional implementation of step S2212 in Figure 2B and other related parts of the embodiment involved in Figure 2B, which will not be repeated here.

[0378] In some embodiments, steps S3201 to S3211 are optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0379] In the above embodiment, the first access network device can obtain the terminal context from the second access network device and determine whether the terminal is authorized to use the store-and-forward service based on the terminal context. This can prevent satellite resources from being occupied by terminals that do not have store-and-forward service authorization, and can effectively avoid satellite access service interruptions, thereby improving the availability and reliability of NTN communications.

[0380] FIG3C is an interactive diagram illustrating a method for determining authorization according to an embodiment of the present disclosure. As shown in FIG3C , the embodiment of the present disclosure relates to a method for determining authorization, which can be performed by the second access network device 102-2. The method includes:

[0381] Step S3301, sending the seventh message.

[0382] In some embodiments, the second access network device 102 - 2 sends a seventh message to the terminal 101 .

[0383] In some embodiments, the optional implementation of step S3301 can refer to the optional implementation of step S2201 in Figure 2B and other related parts of the embodiment involved in Figure 2B, which will not be repeated here.

[0384] Step S3302, obtain the second message.

[0385] In some embodiments, the second access network device 102 - 2 may obtain the second message from the first access network device 102 - 1 , but is not limited thereto and may also receive the second message sent by other entities.

[0386] In some embodiments, the second access network device 102 - 2 obtains a second message determined according to a predefined rule.

[0387] In some embodiments, the second access network device 102 - 2 performs processing to obtain the second message.

[0388] In some embodiments, step S3302 is omitted, the second access network device 102-2 autonomously implements the function indicated by the second message, or the second access network device 102-2 obtains the second message based on predefined rules or protocol agreements, or the above functions are default or default.

[0389] In some embodiments, the optional implementation of step S3302 can refer to the optional implementation of step S2203 in Figure 2B and other related parts of the embodiment involved in Figure 2B, which will not be repeated here.

[0390] Step S3303, sending a second message.

[0391] In some embodiments, the second access network device 102 - 2 sends a third message to the first access network device 102 - 1 .

[0392] In some embodiments, the optional implementation of step S3303 can refer to the optional implementation of step S2204 in Figure 2B and other related parts of the embodiment involved in Figure 2B, which will not be repeated here.

[0393] In some embodiments, steps S3301 to S3303 are optional, and one or more of these steps may be omitted or replaced in different embodiments.

[0394] In the above embodiment, the second access network device can provide the terminal context stored in itself to the first access network device, and the first access network device determines whether the terminal is authorized to use the store-and-forward service based on the terminal context. This can prevent satellite resources from being occupied by terminals that do not have store-and-forward service authorization, and can effectively avoid interruptions in satellite access services, thereby improving the availability and reliability of NTN communications.

[0395] The above process is further illustrated by the following examples:

[0396] FIG4A is an interactive diagram of a method for determining authorization according to an embodiment of the present disclosure. As shown in FIG4A , an embodiment of the present disclosure relates to a method for determining authorization, and the method includes:

[0397] Step S4101: The first access network device 102-1 sends a seventh message to the terminal 101.

[0398] In some embodiments, due to a radio link failure, satellite mobility, or performance optimization, during the UP-CIOT process / CP-CIOT process, the first access network device 102-1 may determine to suspend the RRC connection by sending a seventh message, such as an RRC release message or an RRC suspend message. After sending the RRC release message or the RRC suspend message, the first access network device still maintains the terminal context. Upon receiving the RRC release message, the terminal maintains the RRC context and enters the CM_idle state with suspension, the RRC inactive state, or the RRC_idle with suspend state.

[0399] Step S4102: Terminal 101 sends a first message to the first access network device 102-1.

[0400] If the terminal 101 decides to resume or reestablish the connection to use the S&F service operation, the terminal 101 sends an RRC resumption request or an RRC connection reestablishment request to the first access network device 102 - 1 .

[0401] Step S4103: The first access network device 102-1 determines whether the terminal 101 is authorized to use the store-and-forward service.

[0402] Upon receiving the first message, the first access network device 102 - 1 checks the terminal authorization by using the terminal context.

[0403] In an example, if the terminal context includes the first indication information, the first access network device 102 - 1 accepts the request.

[0404] In one example, if the terminal authorization information is included in the terminal context, the first access network device 102 - 1 may decide whether to accept the request based on the terminal authorization information.

[0405] In one example, if the geographic area information is included in the terminal authorization information, the first access network device 102 - 1 further checks the terminal location information by using the mapped cell identity and determines whether the request can be accepted.

[0406] In one example, the cell identifier may be a cell ID, or may be a mapped cell identifier.

[0407] In one example, the mapping includes mapping the cell identity to a PCI or a gNB ID.

[0408] In one example, the first access network device 102-1 may use a mapped cell identifier, such as a PCI or a gNB ID, to determine the terminal location information.

[0409] In one example, if the time information is included in the terminal authorization information, the first access network device 102 - 1 further checks the time of the RRC recovery request or the RRC connection reestablishment request and determines whether the request can be accepted.

[0410] In one example, if the terminal context does not include the first indication information, or the terminal context includes the second indication information, the first access network device 102-1 rejects the RRC recovery request or the RRC connection reestablishment request and skips the following steps S4104 to S4107.

[0411] Step S4104 : The first access network device 102 - 1 sends an eighth message to the terminal 101 .

[0412] The first access network device 102 - 1 returns an RRC recovery message / RRC connection reestablishment message to the terminal 101 .

[0413] Step S4105: Terminal 101 returns uplink data.

[0414] Terminal 101 returns an RRC recovery complete / RRC connection reestablishment complete message, which includes uplink data.

[0415] Step S4106: The first access network device 102-1 stores the uplink data.

[0416] The first access network device 102 - 1 stores the uplink data until the feeder link becomes available.

[0417] Step S4107 : The first access network device 102 - 1 sends uplink data to the core network 103 .

[0418] The first access network device 102 - 1 forwards the uplink data to the core network 103 .

[0419] In the above embodiment, the terminal context is stored on the first access network device, and whether the terminal is authorized to use the store-and-forward service can be determined based on the terminal context. This can prevent satellite resources from being occupied by terminals that do not have store-and-forward service authorization, effectively avoid interruptions in satellite access services, and improve the availability and reliability of NTN communications.

[0420] FIG4B is an interactive diagram of a method for determining authorization according to an embodiment of the present disclosure. As shown in FIG4B , an embodiment of the present disclosure relates to a method for determining authorization, and the method includes:

[0421] Step S4201: The second access network device 102-2 sends a seventh message to the terminal 101.

[0422] In some embodiments, due to a radio link failure, satellite mobility, or performance optimization, during a user plane CIOT process or a control plane CIOT process, the second access network device 102-2 may determine to suspend the RRC connection by sending a seventh message, such as an RRC release message or an RRC suspend message. After sending the RRC release message or the RRC suspend message, the first access network device still maintains the terminal context. Upon receiving the RRC release message, the terminal maintains the RRC context and enters the CM_idle state with suspension, the RRC inactive state, or the RRC_idle with suspend state.

[0423] Step S4202: Terminal 101 sends a first message to the first access network device 102-1.

[0424] If the terminal 101 decides to resume the connection to use the S&F service operation and enters the coverage of the first access network device 102-1 (due to satellite mobility), the terminal 101 sends an RRC resumption request or an RRC connection re-establishment request to the first access network device 102-1.

[0425] Step S4203: The first access network device 102-1 obtains the terminal context from the second access network device 102-2.

[0426] The second access network device 102 - 2 determines the terminal context based on the terminal identifier included in the request message sent by the first access network device 102 - 1 .

[0427] The first access network device 102-1 interacts with the second access network device 102-2 and obtains the terminal context and RRC security key by using an Xn AP Retrieve UE Context Request / Response.

[0428] The second access network device 102 - 2 determines the RRC security key by using the mapping result of the mapped cell identifier.

[0429] Step S4204: The first access network device 102-1 determines whether the terminal 101 is authorized to use the store-and-forward service.

[0430] The implementation method is similar to step S4103 and will not be repeated here.

[0431] Step S4205 : The first access network device 102 - 1 sends an eighth message to the terminal 101 .

[0432] The implementation method is similar to step S4104 and will not be repeated here.

[0433] Step S4206: Terminal 101 returns uplink data.

[0434] The implementation method is similar to step S4105 and will not be repeated here.

[0435] Step S4207: The first access network device 102-1 stores the uplink data.

[0436] The implementation method is similar to step S4106 and will not be repeated here.

[0437] Step S4208 : The first access network device 102 - 1 exchanges the fourth message / fifth message with the core network 103 .

[0438] The first access network device 102 - 1 performs a path switch request / response process to update the service link information stored in the core network 103 .

[0439] Step S4209 : The first access network device 102 - 1 sends uplink data to the core network 103 .

[0440] The first access network device 102 - 1 forwards the uplink data to the core network 103 .

[0441] In the above embodiment, the terminal context is not stored on the first access network device, and the terminal context can be obtained from the second access network device to determine whether the terminal is authorized to use the store-and-forward service. This can prevent satellite resources from being occupied by terminals that do not have store-and-forward service authorization, effectively avoid interruptions in satellite access services, and improve the availability and reliability of NTN communications.

[0442] It should be understood that the division of the various units or modules in the above device is merely a division of logical functions. In actual implementation, they may be fully or partially integrated into a physical entity, or they may be physically separated. In addition, the units or modules in the device may be implemented in the form of a processor calling software: for example, the device includes a processor, the processor is connected to a memory, and the memory stores instructions. The processor calls the instructions stored in the memory to implement any of the above methods or implement the functions of the various units or modules of the above device, wherein the processor is, for example, a general-purpose processor, such as a central processing unit (CPU) or a microprocessor, and the memory is a memory within the device or a memory outside the device. Alternatively, the units or modules in the device can be implemented in the form of hardware circuits, and the functions of some or all of the units or modules can be realized by designing the hardware circuits. The above-mentioned hardware circuits can be understood as one or more processors; for example, in one implementation, the above-mentioned hardware circuit is an application-specific integrated circuit (ASIC), which realizes the functions of some or all of the above units or modules by designing the logical relationship of the components in the circuit; for example, in another implementation, the above-mentioned hardware circuit can be realized by a programmable logic device (PLD). Taking a field programmable gate array (FPGA) as an example, it can include a large number of logic gate circuits, and the connection relationship between the logic gate circuits is configured by configuring the configuration file, thereby realizing the functions of some or all of the above units or modules. All units or modules of the above devices can be realized in the form of software called by the processor, or in the form of hardware circuits, or in part by the form of software called by the processor, and the rest by hardware circuits.

[0443] In the embodiments of the present disclosure, the processor is a circuit with signal processing capabilities. In one implementation, the processor can be a circuit with instruction reading and execution capabilities, such as a central processing unit (CPU), a microprocessor, a graphics processing unit (GPU) (which can be understood as a microprocessor), or a digital signal processor (DSP). In another implementation, the processor can implement certain functions through the logical relationship of the hardware circuit. The logical relationship of the above-mentioned hardware circuit is fixed or reconfigurable. For example, the processor is a hardware circuit implemented by an application-specific integrated circuit (ASIC) or a programmable logic device (PLD), such as an FPGA. In a reconfigurable hardware circuit, the process of the processor loading a configuration document and implementing the hardware circuit configuration can be understood as the process of the processor loading instructions to implement the functions of some or all of the above units or modules. In addition, it can also be a hardware circuit designed for artificial intelligence, which can be understood as an ASIC, such as a neural network processing unit (NPU), a tensor processing unit (TPU), a deep learning processing unit (DPU), etc.

[0444] FIG5A is a schematic diagram of the structure of a first access network device according to an embodiment of the present disclosure. As shown in FIG5A , the first access network device 5100 may include: a transceiver module 5101 and a processing module 5102 .

[0445] In some embodiments, the above-mentioned transceiver module 5101 is configured to receive a first message sent by the terminal, where the first message is used to request recovery, re-establishment or establishment of a radio resource control RRC connection.

[0446] In some embodiments, the processing module 5102 is configured to determine whether the terminal is authorized to use the store-and-forward service based on the terminal context.

[0447] Optionally, the above-mentioned transceiver module 5101 is used to execute at least one of the communication steps such as sending and / or receiving performed by the first access network device 5100 in any of the above methods (for example, step S2101, step S2102, step S2104, step S2105, step S2107, step S2108, step S2202, step S2203, step S2204, step S2206, step S2207, step S2209, step S2210, step S2211, step S2212, but not limited to these), which are not repeated here.

[0448] Optionally, the above-mentioned processing module 5102 is used to execute at least one of the other steps (such as step S2103, step S2106, step S2205, step S2208, but not limited to these) performed by the first access network device 5100 in any of the above methods, which are not repeated here.

[0449] FIG5B is a schematic diagram of the structure of a second access network device according to an embodiment of the present disclosure. As shown in FIG5B , the second access network device 5200 may include a transceiver module 5201 .

[0450] In some embodiments, the transceiver module 5201 is configured to receive a second message sent by the first access network device; wherein the second message is used to request to obtain the terminal context.

[0451] In some embodiments, the transceiver module 5202 is further configured to send a third message to the first access network device, where the third message includes the terminal context stored on the second access network device.

[0452] Optionally, the above-mentioned transceiver module 5201 is used to execute at least one of the other steps (such as step S2201, step S2203, step S2204, but not limited to these) performed by the second access network device 5200 in any of the above methods, which will not be repeated here.

[0453] In some embodiments, the transceiver module may include a transmitting module and / or a receiving module, and the transmitting module and the receiving module may be separate or integrated. Optionally, the transceiver module may be interchangeable with the transceiver.

[0454] In some embodiments, the processing module can be a single module or can include multiple submodules. Optionally, the multiple submodules respectively execute all or part of the steps required to be executed by the processing module. Optionally, the processing module can be interchangeable with the processor.

[0455] Figure 6A is a schematic diagram of the structure of a communication device 6100 proposed in an embodiment of the present disclosure. Communication device 6100 can be a network device (e.g., an access network device, a core network device, etc.), a terminal (e.g., a user equipment, etc.), a chip, a chip system, or a processor that supports a network device to implement any of the above methods, or a chip, a chip system, or a processor that supports a terminal to implement any of the above methods. Communication device 6100 can be used to implement the methods described in the above method embodiments. For details, please refer to the description of the above method embodiments.

[0456] As shown in Figure 6A, the communication device 6100 includes one or more processors 6101. The processor 6101 can be a general-purpose processor or a dedicated processor, for example, a baseband processor or a central processing unit. The baseband processor can be used to process the communication protocol and communication data, and the central processing unit can be used to control the communication device (such as a base station, a baseband chip, a terminal device, a terminal device chip, a DU or a CU, etc.), execute programs, and process program data. Optionally, the communication device 6100 is used to perform any of the above methods. Optionally, one or more processors 6101 are used to call instructions to enable the communication device 6100 to perform any of the above methods.

[0457] In some embodiments, the communication device 6100 further includes one or more transceivers 6102. When the communication device 6100 includes one or more transceivers 6102, the transceiver 6102 performs at least one of the communication steps such as sending and / or receiving in the above method (for example, step S2101, step S2102, step S2104, step S2105, step S2107, step S2108, step S2201, step S2202, step S2203, step S2204, step S2206, step S2207, step S2209, step S2210, step S2211, and step S2212, but not limited thereto), and the processor 6101 performs at least one of the other steps (for example, step S2103, step S2106, step S2205, and step S2208, but not limited thereto). In an optional embodiment, the transceiver may include a receiver and / or a transmitter. The receiver and transmitter may be separate or integrated. Optionally, the terms transceiver, transceiver unit, transceiver, transceiver circuit, interface circuit, and interface may be used interchangeably; the terms transmitter, transmitting unit, transmitter, and transmitting circuit may be used interchangeably; and the terms receiver, receiving unit, receiver, and receiving circuit may be used interchangeably.

[0458] In some embodiments, the communication device 6100 further includes one or more memories 6103 for storing data. Alternatively, all or part of the memories 6103 may be located outside the communication device 6100. In alternative embodiments, the communication device 6100 may include one or more interface circuits 6104. Optionally, the interface circuits 6104 are connected to the memory 6102 and may be configured to receive data from the memory 6102 or other devices, or to send data to the memory 6102 or other devices. For example, the interface circuits 6104 may read data stored in the memory 6102 and send the data to the processor 6101.

[0459] The communication device 6100 described in the above embodiment may be a network device or a terminal, but the scope of the communication device 6100 described in the present disclosure is not limited thereto, and the structure of the communication device 6100 may not be limited to FIG6A. The communication device may be an independent device or may be part of a larger device. For example, the communication device may be: 1) an independent integrated circuit IC, or a chip, or a chip system or subsystem; (2) a collection of one or more ICs, optionally, the above IC collection may also include a storage component for storing data and programs; (3) an ASIC, such as a modem; (4) a module that can be embedded in other devices; (5) a receiver, a terminal device, an intelligent terminal device, a cellular phone, a wireless device, a handheld device, a mobile unit, an in-vehicle device, a network device, a cloud device, an artificial intelligence device, etc.; (6) others, etc.

[0460] 6B is a schematic diagram of the structure of a chip 6200 according to an embodiment of the present disclosure. If the communication device 6100 can be a chip or a chip system, reference can be made to the schematic diagram of the structure of the chip 6200 shown in FIG6B , but the present disclosure is not limited thereto.

[0461] The chip 6200 includes one or more processors 6201. The chip 6200 is configured to execute any of the above methods.

[0462] In some embodiments, chip 6200 further includes one or more interface circuits 6202. Terms such as interface circuit, interface, and transceiver pins may be used interchangeably. In some embodiments, chip 6200 further includes one or more memories 6203 for storing data. Alternatively, all or part of memory 6203 may be located external to chip 6200. Optionally, interface circuit 6202 is connected to memory 6203 and may be used to receive data from memory 6203 or other devices, or may be used to send data to memory 6203 or other devices. For example, interface circuit 6202 may read data stored in memory 6203 and send the data to processor 6201.

[0463] In some embodiments, the interface circuit 6202 performs at least one of the communication steps (e.g., steps S2101, S2102, S2104, S2105, S2107, S2108, S2202, S2203, S2204, S2206, S2207, S2209, S2210, S2211, and S2212) in the above method. The interface circuit 6202 performing the communication steps (e.g., steps S2101, S2102, S2104, S2105, S2107, S2108, S2202, S2203, S2204, S2206, S2207, S2209, S2210, S2211, and S2212) in the above method, but not limited thereto, means that the interface circuit 6202 performs data exchange between the processor 6201, the chip 6200, the memory 6203, or the transceiver device. In some embodiments, the processor 6201 performs at least one of the other steps (e.g., steps S2103, S2106, S2205, and S2208, but not limited thereto).

[0464] The modules and / or devices described in various embodiments, such as virtual devices, physical devices, and chips, can be arbitrarily combined or separated according to circumstances. Optionally, some or all steps can also be performed collaboratively by multiple modules and / or devices, which is not limited here.

[0465] The present disclosure also proposes a storage medium having instructions stored thereon. When the instructions are executed on the communication device 6100, the communication device 6100 executes any of the above methods. Optionally, the storage medium is an electronic storage medium. Optionally, the storage medium is a computer-readable storage medium, but is not limited thereto and may also be a storage medium readable by other devices. Optionally, the storage medium may be a non-transitory storage medium, but is not limited thereto and may also be a temporary storage medium.

[0466] The present disclosure also provides a program product, which, when executed by the communication device 6100, enables the communication device 6100 to perform any of the above methods. Optionally, the program product is a computer program product.

[0467] The present disclosure also proposes a computer program, which, when executed on a computer, causes the computer to perform any one of the above methods.

[0468] It should be understood that the present disclosure is not limited to the exact structures that have been described above and shown in the drawings, and that various modifications and changes can be made without departing from the scope thereof. The scope of the present disclosure is limited only by the appended claims.

Claims

1. A method for determining authorization, characterized in that, The method is executed by a first access network device deployed on a first satellite, and includes: Receiving a first message sent by a terminal, where the first message is used to request to resume, re - establish, or establish a Radio Resource Control (RRC) connection; Based on the terminal context, determining whether the terminal has the authorization to use the store - and - forward service.

2. The method according to claim 1, wherein The terminal identifier is included in the first message, and the terminal identifier is used for the first access network device to determine the corresponding terminal context.

3. The method according to claim 1 or 2, characterized in that, The method further includes: When the terminal context is not stored on the first access network device, sending a second message to a second access network device; where the second message is used to request to obtain the terminal context; where the second access network device is deployed on a second satellite, and the second access network device retains the terminal context when the RRC connection is released; Receiving a third message sent by the second access network device, where the third message includes the terminal context stored on the second access network device.

4. The method according to claim 3, wherein The terminal identifier is included in the second message, and the terminal identifier is used for the second access network device to determine the corresponding terminal context.

5. The method according to any one of claims 1 to 4, characterized in that, The determining, based on the terminal context, whether the terminal has the authorization to use the store - and - forward service includes at least one of the following: When the first indication information is included in the terminal context, determining that the terminal has the authorization to use the store - and - forward service; where the first indication information is used to indicate that the terminal is allowed to use the store - and - forward service; When the second indication information is included in the terminal context, determining that the terminal does not have the authorization to use the store - and - forward service; where the second indication information is used to indicate that the terminal is prohibited from using the store - and - forward service; When only the terminal authorization information is included in the terminal context, determining whether the terminal has the authorization to use the store - and - forward service based on the terminal authorization information; where the terminal authorization information is the authorization information for the terminal to use the store - and - forward service.

6. The method according to claim 5, characterized in that, The determining, based on the terminal context, whether the terminal has the authorization to use the store - and - forward service includes: When the first indication information is included in the terminal context, determining whether the terminal has the authorization to use the store - and - forward service based on the terminal authorization information included in the terminal context; where the terminal authorization information is the authorization information for the terminal to use the store - and - forward service.

7. The method according to claim 5 or 6, characterized in that, The determining whether the terminal has the authorization to use the store - and - forward service based on the terminal authorization information includes at least one of the following: When the terminal authorization information includes the service type of the store - and - forward service, determining the service type of the store - and - forward service that the terminal is authorized to use; When the terminal authorization information includes the geographical area information allowing the use of the store - and - forward service, and the current geographical location of the terminal is within the geographical area indicated by the geographical area information, determining that the terminal has the authorization to use the store - and - forward service; The terminal authorization information includes geographical area information allowing the use of the store-and-forward service. When the current geographical location of the terminal is outside the geographical area indicated by the geographical area information, it is determined that the terminal does not have the authorization to use the store-and-forward service; The terminal authorization information includes time information allowing the use of the store-and-forward service. When the current time point is within the time period indicated by the time information, it is determined that the terminal has the authorization to use the store-and-forward service; The terminal authorization information includes time information allowing the use of the store-and-forward service. When the current time point is outside the time period indicated by the time information, it is determined that the terminal does not have the authorization to use the store-and-forward service.

8. The method according to any one of claims 1-7, characterized in that, The method further includes: When the terminal has the authorization to use the store-and-forward service, store the uplink data.

9. The method according to claim 8, wherein The method further includes: When the feeder link is available, send the stored uplink data to the core network through the feeder link.

10. The method according to claim 8 or 9, characterized in that, The method further includes: Send a fourth message to the core network, where the fourth message is used to request the core network to update the service link information; Receive a fifth message sent by the core network after successfully updating the service link information.

11. The method according to any one of claims 1-7, characterized in that, The method further includes: When the terminal does not have the authorization to use the store-and-forward service, send a sixth message to the terminal, where the sixth message is used to reject the request to resume the RRC connection.

12. A method for determining authorization, characterized in that, The method is executed by a second access network device deployed on a second satellite, and includes: Receive a second message sent by a first access network device; wherein, the second message is used to request to obtain the terminal context; Send a third message to the first access network device, where the third message includes the terminal context stored on the second access network device.

13. The method according to claim 12, wherein The method further includes: Based on the terminal identifier included in the second message, determine the corresponding terminal context.

14. The method according to claim 12 or 13, characterized in that, The method further includes: Map the cell identifier, and based on the mapping result, determine the RRC security key; wherein, the RRC security key is carried in the third message.

15. A first access network device, characterized in that, The first access network device is deployed on a first satellite and includes: A transceiver module configured to receive a first message sent by a terminal, where the first message is used to request to resume, re-establish, or establish a Radio Resource Control (RRC) connection; A processing module configured to determine whether the terminal has the authorization to use the store-and-forward service based on the terminal context.

16. A second access network device, characterized in that, The second access network device is deployed on a second satellite and includes: A transceiver module configured to receive a second message sent by a first access network device; wherein, the second message is used to request to obtain the terminal context; The transceiver module is further configured to send a third message to the first access network device, where the third message includes the terminal context stored on the second access network device.

17. A first access network device, characterized in that, Includes: One or more processors; Wherein, the processor is used to execute the authorization determination method according to any one of claims 1-11.

18. A second access network device, characterized in that, Includes: One or more processors; Wherein, the processor is used to execute the authorization determination method according to any one of claims 12-14.

19. A communication system, characterized in that, Includes: A terminal; The first access network device, the first network device is configured to implement the method for determining authorization according to any one of claims 1-11; The second access network device, the second satellite is configured to implement the method for determining authorization according to any one of claims 12-14; The core network.

20. A storage medium storing instructions, characterized in that, When the instruction runs on the communication device, the communication device is caused to execute the method for determining authorization according to any one of claims 1-11 or 12-14.

Images