CN112383920B

CN112383920B - 5G slice network access method and device based on UE position

Info

Publication number: CN112383920B
Application number: CN202011269555.8A
Authority: CN
Inventors: 邱权冠; 苏国章
Original assignee: Guangzhou Aipu Road Network Technology Co Ltd
Current assignee: Guangzhou Aipu Road Network Technology Co Ltd
Priority date: 2020-11-13
Filing date: 2020-11-13
Publication date: 2021-08-31
Anticipated expiration: 2040-11-13
Also published as: CN112383920A

Abstract

The invention discloses a 5G slice network access method and a device based on UE position, the device is used for realizing the method, the method is that when AMF receives UE request to obtain a slice set which allows access, the slice set which allows access in the UE request and the slice set signed by UE in UDM are submitted to NSSF to decide the slice set which allows UE access and return to AMF; when the AMF finds that the slices allowing the UE to access are concentrated with slices which can be accessed according to the position of the UE, the AMF sends a message for acquiring a UE positioning request to the LMF; and the AMF receives the UE positioning data sent by the LMF and judges whether the current UE is in the designated area of the slicing network in the slicing set according to the UE positioning data. The technical scheme of the invention improves the data transmission safety and the network safety of the designated area of the slice network.

Description

5G slice network access method and device based on UE position

Technical Field

The invention relates to the technical field of mobile communication, in particular to a 5G slice network access method and device based on UE positions.

Background

In the 5G era, in order to meet the increasing demand of communication services, the concept of a slice network is added in a 5G core network, the 5G core network is divided into the slice networks in a logic manner, and communication operators can directly sell the slice network resources to third-party company enterprises, so that the company enterprises can adopt the slice network to perform data communication of private services of the company enterprises. However, for some companies, there may be some requirements for access to the slice network, for example, in a specific area, such as the range of the head office and the subsidiary companies, or in an area where UE devices can access to the slice network, and access to data services is performed by using the slice network, which increases the requirement for combining UE positioning and slice network.

According to The 23501-g51 protocol of TS 3GPP, AMF (The Access and Mobility Management function) can use Network Slice Specific Authentication and Authorization function NSSAAF (The Network Slice Specific Authentication and Authorization function) to authenticate and authorize The identity of UE during The process of accessing a Slice Network by UE, and according to The 23502-g51 protocol, NSSAAF mainly authenticates and authorizes The identity of UE through AAA server to ensure The security of Slice Network. However, the method for verifying and authorizing the UE identity through NSSAAF cannot meet some specific requirement scenarios, such as limiting the UE to access the slice network in a specific region (e.g., a certain company or a certain cell) and a specific access mode (e.g., 3GPP access or non-3 GPP access). Although the method of identifying the tracking area TA where the UE is located can also be used for judging whether the UE can be accessed to a certain slice network according to the location of the UE, the range of the TA is indefinite, the boundary is fuzzy, and the general TA range is set by an operator and does not meet the requirement of the accurate range of the user.

Disclosure of Invention

The invention mainly aims to provide a 5G slice network access method based on UE (user equipment) position, aiming at overcoming the problems.

In order to achieve the above object, the present invention provides a 5G slice network access method based on UE location, which includes the following steps:

s10, when AMF receives UE request to obtain the slice set allowing access, AMF submits the slice set allowing access in UE request and the slice set signed by UE in UDM to NSSF to decide the slice set allowing UE access and return to AMF;

s20, if AMF finds that the slice set allowing UE access has the slice that can be accessed according to UE position, then sends UE positioning request information to LMF;

s30 AMF receives UE positioning data sent by LMF, and judges whether the current UE is in the designated area of the slicing network in the slicing set according to the UE positioning data;

s40, if judging that the current UE is not in the designated area of the slice network in the slice set, AMF starts the redirection flow or returns the current UE which is allowed to access the slice set and does not carry the slice network; and if the current UE is judged to be in the designated area of the slice network in the slice set, allowing the current UE to access the slice network and continuing the registration process.

Preferably, when the UE leaves the designated area of the slice network, the S40 further includes:

s50 UE triggers the relocation event of slice network, AMF restricts UE access to corresponding slice network service according to LMF UE current location data.

Preferably, the S50 specifically includes:

s501, UE triggers a network relocation event and requests the current location data of the UE from an LMF;

s502, the LMF responds to the UE current positioning notification and triggers to reacquire the UE current positioning data;

s503, after receiving the current UE positioning data sent by the LMF, the AMF judges whether the UE leaves the designated area of the slice network according to the current UE positioning data;

s504, when the UE is judged to leave the designated area of the slice network, if the AMF supports the multi-slice network, a message of disconnecting the designated slice session is sent to the SMF supporting the designated slice; and if the AMF only supports the single-slice network, triggering the UE to register.

Preferably, when the UE re-enters the designated area of the slice network, the method further includes:

s60 the UE informs the LMF to trigger the UE positioning event and sends the UE relocation data to the AMF, and the AMF updates the slice set allowed to be accessed by the UE according to the UE relocation data.

Preferably, the S60 includes:

s601, if the UE supports position triggering, when the UE enters a designated area of a slice network, informing an LMF to trigger a UE positioning event; if the UE does not support position triggering, when the UE enters a designated area of the slice network, the UE periodically requests a positioning process of the UE from the LMF;

s602, after triggering a UE positioning event, the LMF acquires the current positioning data of the UE and submits the current positioning data to the AMF;

s603, if the AMF finds that the UE is in the designated area of the slice network, the slice set allowed to be accessed by the UE is updated, and the UE is allowed to access the designated slice network.

Preferably, the shape of the designated area of the slice network is circular or polygonal.

Preferably, the method for judging whether the UE is in the designated area of the slice network according to the UE location data includes:

when the designated area of the slice network is circular, calculating the distance between the UE and the center of the designated area by using the Pythagorean theorem according to the longitude and latitude of the UE and the longitude and latitude of the center of the designated area, comparing the distance with the length of the radius of the designated area, and if the distance is smaller than the radius of the designated area, determining that the UE is positioned in the designated area of the slice network;

when the shape of the designated area of the slice network is a polygon, a ray is led out in any direction by taking the current positioning of the UE as a point, the intersection point number of the ray and the edge of the polygon is calculated, if the intersection point number is an odd number, the UE is positioned in the designated area of the slice network, and if the intersection point number is an even number, the UE is not positioned in the designated area of the slice network.

Preferably, the UE and the AMF communicate with each other through a base station AN.

The invention also discloses a 5G slice network access device based on the UE position, which comprises:

a submitting module, configured to, when the AMF receives a UE request to obtain a slice set allowed to be accessed, submit the slice set allowed to be accessed in the UE request and a slice set signed by the UE in the UDM to the NSSF by the AMF, so as to decide the slice set allowed to be accessed by the UE and return the slice set to the AMF;

the acquisition module is used for sending a message for acquiring the UE positioning request to the LMF if the AMF finds that the slices allowing the UE to access are concentrated with the slices which can be accessed according to the position of the UE;

the judging module is used for receiving the UE positioning data sent by the LMF by the AMF and judging whether the current UE is in the designated area of the slicing network in the slicing set according to the UE positioning data;

the execution module is used for starting a redirection flow or returning the current UE which is allowed to be accessed into the slice set and does not carry the slice network if the current UE is judged not to be in the specified area of the slice network in the slice set; if the current UE is judged to be in the designated area of the slicing network in the slicing set, the current UE is allowed to access the slicing network, and the registration process is continued;

the first relocation module is used for triggering a relocation event of the slice network by the UE when the UE leaves a designated area of the slice network, and the AMF restricts the UE from accessing the corresponding slice network service again according to the current UE location data of the LMF;

and the second relocation module is used for informing the LMF to trigger a UE location event when the UE re-enters the designated area of the slice network, and sending the UE relocation data to the AMF, and the AMF updates the slice set allowed to be accessed by the UE according to the UE relocation data.

Preferably, the first relocation module comprises:

the notification unit is used for triggering a network relocation event by the UE and requesting the current location data of the UE to the LMF again;

the first acquisition unit is used for responding the current positioning notification of the UE by the LMF and triggering the current positioning data of the UE to be acquired again;

the judging unit is used for judging whether the UE leaves the designated area of the slice network according to the current positioning data of the UE after the AMF receives the current positioning data of the UE sent by the LMF;

the first execution unit is used for sending a message of disconnecting the specified slice session to the SMF supporting the specified slice if the AMF supports the multi-slice network when the UE is judged to leave the specified area of the slice network; if the AMF only supports the single-slice network, triggering the UE to register the process;

the second repositioning module includes:

the starting positioning unit is used for informing the LMF to trigger the UE positioning event when the UE enters the designated area of the slice network if the UE supports position triggering; if the UE does not support position triggering, when the UE enters a designated area of the slice network, the UE periodically requests a positioning process of the UE from the LMF;

the second acquisition unit is used for acquiring the current positioning data of the UE and submitting the current positioning data to the AMF after the LMF triggers the UE positioning event;

and the second execution unit is used for updating the slice set allowed to be accessed by the UE and allowing the UE to be accessed to the specified slice network if the AMF finds that the UE is in the specified area of the slice network.

The technical scheme of the invention combines the positioning service function of 5G, firstly obtains the current positioning data of the UE, then judges whether the UE is in the designated area of the slice network of 5G according to the positioning data of the UE, and then executes whether the UE is allowed to obtain the accessed registration request according to the judgment. The method ensures that the UE can be accessed to the private data network in the designated area, provides private data service, improves the security of data transmission in the designated area and the security of the private network, only connects the private slice network to the client in the area in some commercial areas, and ensures the quality of data transmission by limiting network access equipment through the area.

Drawings

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, it is obvious that the drawings in the following description are only some embodiments of the present invention, and for those skilled in the art, other drawings can be obtained according to the structures shown in the drawings without creative efforts.

Fig. 1 is a flowchart illustrating a UE registration triggered positioning method according to an embodiment of the present invention;

FIG. 2 is a UE registration triggering positioning topology diagram;

FIG. 3 is a flowchart of the UE leaving the designated area triggering positioning according to the present invention

FIG. 4 is a triggered positioning topology diagram of UE leaving a designated area when AMF belongs to a single slice network;

FIG. 5 is a triggered positioning topology diagram of UE leaving a designated area when AMF belongs to a multi-slice network;

FIG. 6 is a flowchart illustrating a triggering procedure when the UE re-enters the designated area according to the present invention;

FIG. 7 is a diagram of a UE re-entering a designated area triggering location topology;

FIG. 8 is an algorithm diagram of AMF for determining whether UE and the designated area are polygons or circles;

FIG. 9 is a functional block diagram of an embodiment of an apparatus according to the present invention;

the implementation, functional features and advantages of the objects of the present invention will be further explained with reference to the accompanying drawings.

Detailed Description

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.

It should be noted that, if directional indications (such as up, down, left, right, front, and back … …) are involved in the embodiment of the present invention, the directional indications are only used to explain the relative positional relationship between the components, the movement situation, and the like in a specific posture (as shown in the drawing), and if the specific posture is changed, the directional indications are changed accordingly.

In addition, if there is a description of "first", "second", etc. in an embodiment of the present invention, the description of "first", "second", etc. is for descriptive purposes only and is not to be construed as indicating or implying relative importance or implicitly indicating the number of technical features indicated. Thus, a feature defined as "first" or "second" may explicitly or implicitly include at least one such feature. In addition, technical solutions between various embodiments may be combined with each other, but must be realized by a person skilled in the art, and when the technical solutions are contradictory or cannot be realized, such a combination should not be considered to exist, and is not within the protection scope of the present invention.

The invention aims to meet the requirements of some enterprises that UE can access to a private data network in a designated area, provide private data service to ensure the safety of data transmission in the designated area and the safety of the private network, connect private slice networks to clients in the designated area only in some business areas, limit the data network connection crowd, ensure the quality of data transmission, and provide private service to the clients in a certain area in the private slice networks.

The invention provides a 5G slice network access method based on UE position, which comprises the following steps:

In the embodiment of the present invention, as shown in fig. 1-2, according to the service function protocol related to 5G positioning, such as TS 23273, 23032, 29572, 38305 of 3GPP, and in combination with the positioning service function of 5G, the present invention first obtains the current positioning data of the UE, then determines whether the UE is in the designated area of the slice network of 5G according to the positioning data of the UE, and then executes the registration request for allowing the UE to obtain the access slice according to the determination. In the 5G network, the UE requests to obtain a slice network allowing access in a registration request message, and after receiving the request message of the UE, the AMF finds slice Data supported by each UE access mode supported by the UE during subscription in the UDM (Unified Data Management function), where the slice Data includes a 3GPP access mode and a non-3 GPP access mode, and slices supported by the two access modes may be different. AMF submits the request registration slice set (if any) in UE slice request message and the signed slice set in UDM to NSSF to decide the slice set which the current access type allows UE to access, then returns the slice set which allows UE to access to AMF, when AMF finds that the slice set which allows UE to access contains the slice which can be accessed according to UE position, UE positioning message is sent to LMF; after receiving the UE positioning message of the AMF, the LMF starts a UE positioning event, obtains the longitude and latitude (if the adopted positioning algorithm supports, the height) position data of the UE, and then sends the UE position data back to the AMF. If the AMF finds that the UE position is not in the area designated by the slice network, the AMF can start an AMF redirection process or return to an allowed access slice set of the UE without carrying the slice; and if the UE is in the designated area, allowing the UE to access the slice network, and continuing the registration process.

According to the invention, by combining the positioning service function of 5G, the current positioning data of the UE is acquired, whether the UE is in the designated area of the slice network of 5G is judged according to the positioning data of the UE, and whether the UE is allowed to acquire the accessed registration request is executed according to the judgment. The method ensures that the UE can be accessed to the private data network in the designated area, provides private data service, improves the security of data transmission in the designated area and the security of the private network, only connects the private slice network to the client in the area in some commercial areas, and ensures the quality of data transmission by limiting network access equipment through the area.

Preferably, the S50 specifically includes:

In the embodiment of the present invention, as shown in fig. 3 to 5, in consideration of that the usage of the UE changes anytime and anywhere, when the AMF determines that the UE leaves the designated area of the slice network, the AMF prohibits the UE from accessing the slice network, so as to ensure data security and data transmission quality of the private network. If the AMF supports a multi-slice network, a message of disconnecting the Session of the specified slice is sent to an SMF (Session Management Function) supporting the specified slice, and the SMF releases the Session of the specified slice, so that the Session flow of other slices is not influenced, and network resources are saved.

Preferably, the S60 includes:

In the embodiment of the present invention, as shown in fig. 6 to 7, the present invention considers that the usage of the UE changes anytime and anywhere, so when the UE re-enters the designated area of the slice network, the AMF re-determines the UE positioning data, and then performs processing according to the new UE positioning data. According to the method and the device, the two conditions of supporting the position triggering and not supporting the position triggering of the UE are considered, distinguishing processing is carried out, and the safety of data transmission in the designated area and the safety of the private network are improved.

In the embodiment of the present invention, as shown in fig. 8, two algorithms for determining whether the UE is in the designated area of the slice network by the AMF according to the UE location data are described by taking the designated area of the slice network as a circle or a polygon as an example. It should be understood that the slice network in the present application designates an area having, but not limited to, a circle or a polygon, and in the present embodiment, a circle or a polygon is preferred.

As shown in fig. 9, the present invention further provides a UE location-based 5G slice network access apparatus, which is used to implement the method, and the specific structure of the apparatus refers to the foregoing embodiments, and since the apparatus employs all technical solutions of all the foregoing embodiments, the apparatus at least has all beneficial effects brought by the technical solutions of the foregoing embodiments, and details are not repeated here. The device comprises:

a submitting module 10, configured to, when the AMF receives the UE request to obtain the slice set allowed to be accessed, submit the slice set allowed to be accessed in the UE request and the slice set signed by the UE in the UDM to the NSSF by the AMF, so as to decide the slice set allowed to be accessed by the UE and return the slice set to the AMF;

an obtaining module 20, configured to send a message for obtaining a UE location request to the LMF if the AMF finds that a slice that needs to be accessed according to the UE location exists in the slice set that allows the UE to access;

the judging module 30 is used for receiving the UE positioning data sent by the LMF by the AMF, and judging whether the current UE is in the designated area of the slice network in the slice set according to the UE positioning data;

the execution module 40 is configured to, if it is determined that the current UE is not in the designated area of the slice network in the slice set, start a redirection procedure by the AMF or return the current UE that is allowed to access the slice set and does not carry the slice network; if the current UE is judged to be in the designated area of the slicing network in the slicing set, the current UE is allowed to access the slicing network, and the registration process is continued;

the first relocation module 50 is configured to trigger a slice network relocation event by the UE when the UE leaves the designated area of the slice network, and the AMF restricts the UE from accessing a corresponding slice network service again according to the current UE location data of the LMF;

and a second relocation module 60, configured to, when the UE re-enters the designated area of the slice network, notify the LMF of triggering a UE location event, and send the UE relocation data to the AMF, where the AMF updates the slice set allowed to be accessed by the UE according to the UE relocation data.

Preferably, the first relocation module 50 includes:

a notification unit 501, configured to trigger a network relocation event by the UE, and request the LMF for the current location data of the UE again;

a first obtaining unit 502, configured to respond to the UE current location notification by the LMF, and trigger to reacquire the UE current location data;

a determining unit 503, configured to determine, by the AMF, whether the UE leaves an area designated by the slice network according to the current UE location data after receiving the current UE location data sent by the LMF;

a first executing unit 504, configured to, when it is determined that the UE has left the designated area of the slice network, send a message to disconnect the designated slice session to an SMF that supports the designated slice if the AMF supports a multi-slice network; if the AMF only supports the single-slice network, triggering the UE to register the process;

the second repositioning module 60 includes:

a start positioning unit 601, configured to, if the UE supports location triggering, notify the LMF to trigger a UE positioning event when the UE enters a designated area of the slice network; if the UE does not support position triggering, when the UE enters a designated area of the slice network, the UE periodically requests a positioning process of the UE from the LMF;

a second obtaining unit 602, configured to obtain current location data of the UE after the LMF triggers a UE location event and submit the current location data to the AMF;

a second executing unit 603, configured to update the slice set allowed to be accessed by the UE and allow the UE to access the designated slice network if the AMF finds that the UE is in the designated area of the slice network.

The above description is only a preferred embodiment of the present invention, and is not intended to limit the scope of the present invention, and all modifications and equivalents of the present invention, which are made by the contents of the present specification and the accompanying drawings, or directly/indirectly applied to other related technical fields, are included in the scope of the present invention.

Claims

1. A5G slice network access method based on UE position is characterized by comprising the following steps:

s40, if judging that the current UE is not in the designated area of the slice network in the slice set, AMF starts the redirection flow or returns the current UE which is allowed to access the slice set and does not carry the slice network; if the current UE is judged to be in the designated area of the slicing network in the slicing set, the current UE is allowed to access the slicing network;

when the UE leaves the designated area of the slice network, the S40 further includes:

s50, triggering a slicing network relocation event by the UE, and limiting the UE to access the corresponding slicing network service by the AMF according to the current location data of the LMF; the S50 specifically includes:

s501, UE triggers a network relocation event and requests the LMF for a notification of the current location data of the UE again;

2. The UE location based 5G slice network access method of claim 1, when the UE re-enters a slice network designated area, further comprising:

3. The UE location based 5G slice network access method of claim 2, wherein the S60 comprises:

4. The UE location based 5G slice network access method of any of claims 1-3, wherein the slice network designated area is circular or polygonal in shape.

5. The UE location-based 5G slice network access method of claim 4, wherein the method for determining whether the UE is in the designated area of the slice network according to the UE location data comprises:

6. The UE location based 5G slice network access method of claim 4, wherein the UE and the AMF are in interactive communication through a base station AN.

7. A 5G slice network access apparatus based on UE location, comprising:

the execution module 40 is configured to, if it is determined that the current UE is not in the designated area of the slice network in the slice set, start a redirection procedure by the AMF or return the current UE that is allowed to access the slice set and does not carry the slice network; if the current UE is judged to be in the designated area of the slicing network in the slicing set, the current UE is allowed to access the slicing network;

a second relocation module 60, configured to, when the UE re-enters the designated area of the slice network, notify the LMF to trigger a UE location event, and send UE relocation data to the AMF, where the AMF updates a slice set allowed to be accessed by the UE according to the UE relocation data;

the first relocation module 50 includes:

a first executing unit 504, configured to, when it is determined that the UE has left the designated area of the slice network, send a message to disconnect the designated slice session to an SMF that supports the designated slice if the AMF supports a multi-slice network; and if the AMF only supports the single-slice network, triggering the UE to register.

8. The UE location based 5G slice network access apparatus of claim 7, wherein the second relocation module 60 comprises: