CN114885321A

CN114885321A - Method, device and equipment for supporting network selection and readable storage medium

Info

Publication number: CN114885321A
Application number: CN202110164165.2A
Authority: CN
Inventors: 柯小婉
Original assignee: Vivo Mobile Communication Co Ltd
Current assignee: Vivo Mobile Communication Co Ltd
Priority date: 2021-02-05
Filing date: 2021-02-05
Publication date: 2022-08-09
Also published as: WO2022166891A1

Abstract

The application discloses a method, a device, equipment and a readable storage medium for supporting network selection, wherein the method comprises the following steps: obtaining first information, the first information comprising: the first list, the second list and/or the first indication information; and selecting a network according to the first information. In an embodiment of the present application, the first communication device may select a network for downloading the certificate and/or the subscription according to the first information.

Description

Method, device and equipment for supporting network selection and readable storage medium

Technical Field

The present application belongs to the field of communications technologies, and in particular, to a method, an apparatus, a device, and a readable storage medium for supporting network selection.

Background

A terminal, e.g. a User Equipment (UE), desires to temporarily access the first network to obtain a certificate and/or a subscription of the first object. The problem of how to select the first network is a challenge to solve.

Disclosure of Invention

Embodiments of the present application provide a method, an apparatus, a device, and a readable storage medium for supporting network selection, which solve a problem of how to select a network for downloading a certificate and/or signing a contract.

In a first aspect, a method for supporting network selection is provided, which is performed by a first communication device and includes:

obtaining first information, the first information comprising: a first list, a second list and/or first indication information;

selecting a network according to the first information;

wherein the content of the first and second substances,

the first list includes: one or more network objects, or identification information of one or more network objects, the characteristics of the networks in the first list including at least one of: the first communication equipment can be accessed in a limited way, and can obtain certificates and/or signing contracts, and the first communication equipment can be accessed by adopting default certificates;

alternatively, the first list comprises at least one of:

a list of networks that can be restricted access;

a list of networks that can configure certificates and/or subscriptions;

a list of networks that can be accessed using default credentials;

the second list includes one or more network objects, or identification information of one or more network objects, and the characteristics of the networks in the second list include at least one of: the first communication equipment cannot be accessed, the first communication equipment cannot obtain a certificate and/or a subscription, and the first communication equipment cannot be accessed by adopting a default certificate;

alternatively, the second list comprises at least one of:

a list of networks that cannot be restricted access;

a list of networks that cannot configure certificates and/or subscriptions;

a list of networks that cannot be accessed using default credentials;

wherein the network list comprises one or more network objects or identification information of one or more network objects; the network object comprises a network and/or a network group;

the first indication information is used for indicating at least one of the following items:

supporting or not supporting provisioning credentials and/or subscriptions;

supporting or not supporting the configuration of the certificate and/or the subscription in a control plane mode;

supporting or not supporting the configuration of certificates and/or subscriptions in a user plane manner;

supporting or not supporting restricted access based configuration credentials and/or subscriptions;

supporting or not configuring the certificate and/or subscription in a control plane mode based on the limited access;

supporting or not configuring the certificate and/or subscription in a user plane manner based on the limited access;

supporting or not supporting provisioning credentials and/or subscriptions based on unrestricted access;

supporting or not configuring the certificate and/or the subscription in a control plane mode based on the unrestricted access;

provisioning of credentials and/or subscriptions in a user plane manner based on unrestricted access is supported or not.

In a second aspect, a method for supporting network selection is provided, which is performed by a second communication device and includes:

sending first indication information;

wherein the first indication information is used for indicating at least one of the following:

supporting or not supporting provisioning credentials and/or subscriptions;

In a third aspect, a method for supporting network selection is provided, which is performed by a third communication device and includes:

sending the first list and/or the second list;

alternatively, the first list comprises at least one of:

a list of networks that can be restricted from access,

a list of networks that can configure certificates and/or subscriptions,

a list of networks that can be accessed using default credentials;

alternatively, the second list comprises at least one of:

a list of networks that cannot be restricted access;

a list of networks that cannot configure certificates and/or subscriptions;

a list of networks that cannot be accessed using default credentials;

the network list comprises one or more network objects, or the network list comprises identification information of one or more network objects, the network objects comprising networks and/or network groups.

In a fourth aspect, an apparatus for supporting network selection, executed by a first communication device, includes:

a first obtaining module, configured to obtain first information, where the first information includes: the first list, the second list and/or the first indication information;

a selection module for selecting a network according to the first information;

wherein the content of the first and second substances,

alternatively, the first list comprises at least one of:

a list of networks that can be restricted access;

a list of networks that can configure certificates and/or subscriptions;

a list of networks that can be accessed using default credentials;

alternatively, the second list comprises at least one of:

a list of networks that cannot be restricted access;

a list of networks that cannot configure certificates and/or subscriptions;

a list of networks that cannot be accessed using default credentials;

supporting or not supporting provisioning credentials and/or subscriptions;

provisioning credentials and/or subscriptions in a user plane manner based on unrestricted access is supported or not supported.

In a fifth aspect, an apparatus for supporting network selection is provided, which is applied to a second communication device, and includes:

the first sending module is used for sending first indication information;

supporting or not supporting provisioning credentials and/or subscriptions;

In a sixth aspect, an apparatus for supporting network selection is provided, which is applied to a third communication device, and includes:

the second sending module is used for sending the first list and/or the second list;

alternatively, the first list includes at least one of:

a list of networks that can be restricted from access,

a list of networks that can configure certificates and/or subscriptions,

a list of networks that can be accessed using default credentials;

alternatively, the second list comprises at least one of:

a list of networks that cannot be restricted access;

a list of networks that cannot configure certificates and/or subscriptions;

a list of networks that cannot be accessed using default credentials;

In a seventh aspect, a terminal is provided, including: a processor, a memory and a program stored on the memory and executable on the processor, which program, when executed by the processor, carries out the steps of the method according to the first aspect.

In an eighth aspect, a network side device is provided, which includes: a processor, a memory and a program stored on the memory and executable on the processor, which program, when executed by the processor, carries out the steps of the method according to the second or third aspect.

In a ninth aspect, there is provided a readable storage medium on which a program or instructions are stored, which program or instructions, when executed by a processor, implement the steps of the method as described above.

A tenth aspect provides a program product stored on a non-volatile storage medium for execution by at least one processor to implement the steps of the method as described above.

In an eleventh aspect, a chip is provided, the chip comprising a processor and a communication interface, the communication interface being coupled to the processor, the processor being configured to execute a program or instructions to implement the steps of the method as described above.

In an embodiment of the application, the first communication device is enabled to confirm the network selected for downloading the certificate and/or signing up.

Drawings

Fig. 1 is a schematic diagram of a wireless communication system to which embodiments of the present application are applicable;

fig. 2 is a flowchart of a method for supporting network selection according to an embodiment of the present application;

fig. 3 is a second flowchart of a method for supporting network selection according to an embodiment of the present application;

fig. 4 is a third flowchart of a method for supporting network selection according to an embodiment of the present application;

fig. 5 is a fourth flowchart of a method for supporting network selection according to an embodiment of the present application;

fig. 6 is a schematic diagram of an apparatus for supporting network selection according to an embodiment of the present application;

fig. 7 is a second schematic diagram of an apparatus for supporting network selection according to an embodiment of the present application;

fig. 8 is a third schematic diagram of an apparatus for supporting network selection according to an embodiment of the present application;

fig. 9 is a schematic diagram of a terminal provided in an embodiment of the present application;

fig. 10 is a schematic diagram of a network-side device according to an embodiment of the present application.

Detailed Description

The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application, and it is obvious that the described embodiments are some, but not all, embodiments of the present application. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present application.

The terms first, second and the like in the description and in the claims of the present application are used for distinguishing between similar elements and not necessarily for describing a particular sequential or chronological order. It should be understood that the data so used are interchangeable under appropriate circumstances such that embodiments of the application can be practiced in sequences other than those illustrated or described herein, and the terms "first" and "second" used herein generally do not denote any order, nor do they denote any order, for example, the first object may be one or more. In addition, "and/or" in the specification and claims means at least one of connected objects, and a character "/" generally means that a preceding and succeeding related objects are in a relationship of "and/or".

It is noted that the technology described in the embodiments of the present application is not limited to Long Term Evolution (LTE)/LTE-Advanced (LTE-a) systems, but may also be used in other wireless communication systems, such as Code Division Multiple Access (CDMA), time Division Multiple Access (tdm-a), for exampleTime Division Multiple Access (TDMA), Frequency Division Multiple Access (FDMA), Orthogonal Frequency Division Multiple Access (OFDMA), Single-carrier Frequency-Division Multiple Access (SC-FDMA), and other systems. The terms "system" and "network" in the embodiments of the present application are often used interchangeably, and the described techniques can be used for both the above-mentioned systems and radio technologies, as well as for other systems and radio technologies. However, the following description describes a New Radio (NR) system for purposes of example, and NR terminology is used in much of the description below, although the techniques may also be applied to applications other than NR system applications, such as 6 th generation (6 th generation) ^th Generation, 6G) communication system.

Fig. 1 shows a block diagram of a wireless communication system to which embodiments of the present application are applicable. The wireless communication system includes a terminal 11 and a network-side device 12. Wherein, the terminal 11 may also be called as a terminal Device or a User Equipment (UE), the terminal 11 may be a Mobile phone, a Tablet Personal Computer (Tablet Personal Computer), a Laptop Computer (Laptop Computer) or a notebook Computer, a Personal Digital Assistant (PDA), a palmtop Computer, a netbook, an ultra-Mobile Personal Computer (UMPC), a Mobile Internet Device (MID), a Wearable Device (Wearable Device) or a Vehicle-mounted Device (Vehicle User Equipment, VUE), a Pedestrian terminal (Pedestrian User Equipment, PUE), and other terminal side devices, the Wearable Device includes: bracelets, earphones, glasses and the like. It should be noted that the embodiment of the present application does not limit the specific type of the terminal 11. The network-side device 12 may be a Base Station or a core network, where the Base Station may be referred to as a node B, an evolved node B, an access Point, a Base Transceiver Station (BTS), a radio Base Station, a radio Transceiver, a Basic Service Set (BSS), an Extended Service Set (ESS), a node B, an evolved node B (eNB), a home node B, a WLAN access Point, a WiFi node, a Transmit Receiving Point (TRP), or some other suitable terminology in the field, as long as the same technical effect is achieved, the Base Station is not limited to a specific technical vocabulary, and it should be noted that, in the embodiment of the present application, only the Base Station in the NR system is taken as an example, but a specific type of the Base Station is not limited.

In the related art, a terminal (e.g., a User Equipment (UE)) may access a Public Land Mobile Network (PLMN) or a stand-alone Non-Public Network (SNPN) 1 to download a certificate of a first object (e.g., a certificate of SNPN2, or a certificate for secondary authentication and/or authorization). When the UE does not have a certificate of the SNPN1 (e.g., a certificate for unrestricted access), if the SNPN1 supports a function of the first access means (e.g., associating), the SNPN1 may be referred to as an associating SNPN (O-SNPN for short). The first access means may be an access means for obtaining credentials of the first network through the restricted access network and/or through the network. When accessing the Onboarding SNPN, the UE has no certificate of the O-SNPN (no certificate for unrestricted access), uses a Default certificate (e.g. certificate for restricted access) to access the O-SNPN, and provides an Onboarding indication to illustrate the specificity of the registration type of the UE. Thus, in the O-SNPN scenario, two functions are included:

(1) a Default certificate networking (Default networking) or a limited access mode access network;

(2) a certificate and/or subscription of the first object is configured.

The cell of the O-SNPN may broadcast an indication of onboarrding for the UE to select the O-SNPN and obtain credentials and/or a subscription for the first object.

When the SNPN2 certificate is downloaded through the PLMN or SNPN3, since the UE has a certificate capable of accessing the PLMN or SNPN3 (such as a certificate for unrestricted access), essentially the PLMN or SNPN3 may not support the function of (1) and may support only the function of (2). Therefore, the PLMN or SNPN3 is not suitable for broadcasting indication information indicating support of onbroadcasting if the capabilities of the network are to be broadcasted. Therefore, the following problems are also to be solved.

The first problem is that: how the UE accesses the network that has selected the credentials and/or subscription for unrestricted access (e.g., PLMN and SNPN3) to download the SNPN's credentials.

In order to support the network selection problem, in an optional embodiment of the present application, the optional solution is as follows:

the network side does not broadcast indication information for indicating that the onbroadcasting is supported, but broadcasts first indication information, which may be used to indicate one of the following: the first indication information of the configuration certificate and/or the subscription is supported, and the configuration certificate and/or the subscription is supported based on the non-limited access condition.

For the UE, the first list is configured on the UE if the UE wants to obtain a certificate and/or a subscription for a first object (e.g., SNPN 2). The UE can access the networks in said first list to obtain the credentials and/or subscription of the first object, and the first list may be a promiscuous list of networks of PLMN and/or SNPN type.

The terminal may select a network according to the first list and the first indication information.

In one embodiment, the first list may include at least one of:

(1) configuring a certificate and/or a signed network list in a control plane mode;

optionally, configuring the certificate and/or subscription in a control plane manner includes obtaining the certificate and/or subscription of the network through control plane signaling. It will be appreciated that the terminal may need to have the capability to obtain the certificate and/or subscription in a control plane, and the first network may need to have the capability to configure the certificate and/or subscription in a control plane. The first network is a network in the first list.

(2) The list of networks on which the certificate and/or subscription is configured in a user plane manner.

Optionally, configuring the certificate and/or the signed network column in a user plane manner includes obtaining the certificate and/or the signed network column through a data channel. For example, the terminal establishes a data channel in the first network, and the terminal connects to a configuration server in the data network through the data channel to obtain a certificate and/or a subscription of the first object. Therefore, the terminal needs to have the capability of obtaining the certificate and/or the subscription in a user plane manner

In one embodiment, the terminal needs to obtain address information of the configuration server from the first network (the first network being a network in the first list). At this point, the first network is required to have the certificate and/or subscription configured in a user plane manner to support.

In an alternative embodiment of the present application, optionally, obtaining or acquiring may be understood as obtaining, receiving after a request, obtaining by self-learning, deriving and acquiring according to information not received, or obtaining after processing the received information, which may be determined according to actual needs, and is not limited by the embodiment of the present application. For example, when a certain capability indication sent by the device is not received, it can be deduced that the device does not support the capability.

In an alternative embodiment of the present invention, the sending may include broadcasting, broadcasting in a system message, and returning after responding to the request.

In an alternative embodiment of the invention, at least one of the following can be represented: allowed, supported, inclined, priority, capability. Cannot represent at least one of: disallowed, not supported, disallowed, not inclined, not having the ability.

In an optional embodiment of the present application, the first access manner includes at least one of: in order to obtain the certificate and/or sign a contract, the access mode of the access network is limited, and the access mode of the default certificate access network is adopted;

in one embodiment, the manner of accessing the network by using the limited access network for downloading the certificate for accessing the first object, or the manner of accessing the network for downloading the certificate for accessing the first object may be referred to as onkeying. When the first object comprises an a-network, the first network and the a-network may be the same network or different networks. The first network is a network to which the terminal accesses, such as a currently accessed network.

In an optional embodiment of the present application, the first server is a server configured to configure a certificate and/or a subscription of the first object for the terminal.

In an optional embodiment of the invention, the supporting configuration certificate and/or subscription is for further indicating at least one of: the certificate and/or subscription configuration in a control plane mode is supported, and the certificate and/or subscription configuration in a user plane mode is supported.

In an optional embodiment of the present invention, the non-support of provisioning the certificate and/or the subscription is used to further indicate that the certificate and/or the subscription are not supported by provisioning in a control plane manner, and the certificate and/or the subscription are not supported by provisioning in a user plane manner.

In an optional embodiment of the present invention, the certificate and/or subscription is obtained remotely, for example, in a case where the terminal accesses the first network to obtain the certificate and/or subscription, a provider of the certificate and/or subscription is the first entity. The first entity is an entity in a Data Network (DN) or an entity (entity) outside a Network to which the terminal is accessed.

In an alternative embodiment of the invention, the provider of the certificate and/or the subscription is one of: entities outside the network in the first list, entities outside the network to which the terminal has access, entities in the Data Network (DN), entities in other networks. The entity in the data network may be an application server, a certificate in the data network and/or a contracted configuration server. The goal of the terminal to access the network includes obtaining a certificate and/or signing up.

In an optional embodiment of the present invention, the certificate and/or subscription is a certificate and/or subscription of a network to which the terminal has access. The certificate and/or subscription of the network to which the terminal has access includes at least one of: the terminal is used for the certificate and/or the subscription of the network with the unrestricted access, and the terminal is used for the certificate and/or the subscription of the network with the restricted access.

In an optional embodiment of the invention, the certificate and/or subscription comprises at least one of: credentials and/or subscriptions for unrestricted access, credentials and/or subscriptions for restricted access, credentials and/or subscriptions for master authentication and/or authorization, credentials and/or subscriptions for non-master authentication and/or authorization. Primary Authentication, such as Primary Authentication, may include: authentication and Key Agreement (AKA) such as, for example, the fifth generation communication technology (5th generation, 5G) AKA, Extensible Authentication Protocol (EAP) AKA).

For non-primary authentication and/or authorization includes at least one of: secondary Authentication/Authorization, Slice-related Authentication and Authorization (NSSAA Network Slice-Specific Authentication and Authorization).

In one embodiment, the terminal may access the first network using a certificate (e.g., a default certificate) and/or a subscription for the restricted access network and then obtain a certificate and/or a subscription for unrestricted access of the first object (including the a-network) through the first network. The a network is the same as or different from the first network.

In an optional embodiment of the present invention, obtaining the certificate and/or the subscription in a control plane manner and/or configuring the certificate and/or the subscription in a control plane manner includes at least one of: the first entity configures the certificate and/or the subscription to the terminal through a control plane signaling of a network accessed by the terminal; the terminal acquires the certificate and/or the subscription to the first entity through a control plane signaling of a network accessed by the terminal;

in an optional embodiment of the present invention, obtaining the certificate and/or the subscription in a user plane manner and/or configuring the certificate and/or the subscription in a user plane manner comprises at least one of: the terminal establishes a data channel in an accessed network, and acquires the certificate and/or the subscription to the first entity through the data channel; or the first entity configures the certificate and/or the subscription to the terminal through a data channel established by the terminal in an accessed network.

In an alternative embodiment of the invention, the data channel comprises at least one of: the data channel may include, but is not limited to, one of: PDU session, PDN connection, QoS flow, Bearer, Internet Protocol Security (IPsec) channel, where the Bearer may be an Evolved Radio Access Bearer (E-RAB), an Evolved Radio Access Bearer (RAB), a Data Radio Bearer (DRB), a Signaling Radio Bearer (SRB), and the like.

In an optional embodiment of the present invention, the network to which the default certificate allows access includes a network to which the terminal can obtain a restricted connection, and the terminal accesses the network by using a terminal identifier corresponding to the default certificate.

In an alternative embodiment of the invention, the default credentials comprise credentials for a restricted access mode.

In an alternative embodiment of the invention, restricted access and restricted connection are synonymous and may be mixed.

In one embodiment, the restricted access includes at least one of: only the first data channel is allowed to be established, data channels except the first data channel are not allowed to be established, only the certificate and/or the contract are allowed to be acquired, and services except the certificate and/or the contract are not allowed to be acquired. The first data channel is used for acquiring the certificate and/or the signed data channel.

In one embodiment, the certificate and/or subscription of the first object may be obtained through the restricted access.

In an alternative embodiment of the invention, the restricted access comprises restricted control plane access and/or restricted user plane access.

In an alternative embodiment of the invention, the restricted connection comprises a restricted control plane connection and/or a restricted user plane connection. A certificate and/or a subscription may be obtained through the restricted connection.

In an optional embodiment of the present invention, the network accessible by using the default certificate includes the terminal corresponding to the default certificate identifying the access network and being capable of authentication and/or authorization through the network by using the default certificate.

In an alternative embodiment of the invention, the networks in the first list comprise networks of the network group mapping in the first list. A network group may be mapped to one or more networks.

In an optional embodiment of the present invention, the networks in the list of networks capable of configuring the certificate and/or the subscription include networks to which the first communication device is capable of limited access and which enable the first communication device to obtain the certificate and/or the subscription.

In an alternative embodiment of the present invention, the characteristics of the networks in the first list include the networks to which the first communication device has limited access and which enable the first communication device to obtain a certificate and/or a subscription.

In an alternative embodiment of the invention, the subscription (description) comprises subscription data, such as slice information, DNN, etc.

In an alternative embodiment of the invention, a network is used to refer to a network in general, or to a network or networks in particular.

In an optional embodiment of the invention, the certificate and/or subscription of the first object comprises a certificate and/or subscription for accessing the first object. The certificate and/or subscription for accessing the first object comprises at least one of: a certificate and/or subscription for unrestricted access to the first object, a certificate and/or subscription for restricted access to the first object.

In an alternative embodiment of the invention, the certificate and/or subscription of the a-network comprises a certificate and/or subscription for accessing the a-network. The certificate and/or subscription for accessing the a network comprises at least one of: credentials and/or subscriptions for unrestricted access a networks, credentials and/or subscriptions for restricted access a networks.

In an optional embodiment of the invention, configuring the certificate and/or subscription for the first communication device comprises causing the first communication device to obtain the certificate and/or subscription.

In an alternative embodiment of the present invention,

(1) optionally, causing the first communication device to obtain the certificate and/or sign up comprises: configuring a certificate and/or subscription for the first communication device.

(2) Optionally, the causing the first communication device to obtain the certificate and/or the subscription in a control plane manner includes: and configuring the certificate and/or the subscription for the first communication equipment in a control plane mode.

(3) Optionally, the enabling the first communication device to obtain the certificate and/or the subscription in a user plane manner includes: and configuring the certificate and/or the subscription for the first communication equipment in a user plane mode.

(4) Optionally, the causing the first communication device to obtain the certificate and/or the subscription of the first object in a control plane manner includes: and configuring the certificate and/or the subscription of the first object for the first communication equipment in a control plane mode.

And/or

(5) Optionally, the enabling the first communication device to obtain the certificate and/or the subscription of the first object in a user plane manner includes: and configuring the certificate and/or the subscription of the first object for the first communication equipment in a user plane mode.

In an alternative embodiment of the present invention,

(1) optionally, configuring the certificate and/or the subscription for the first communication device comprises: causing the first communication device to obtain the certificate and/or sign up comprises: .

(2) Optionally, configuring the certificate and/or the subscription for the first communication device in a control plane manner includes: the making the first communication device obtain the certificate and/or sign on through a control plane manner includes: .

(3) Optionally, configuring the certificate and/or the subscription for the first communication device in a user plane manner includes: causing the first communication device to obtain the certificate and/or sign on in a user plane manner comprises: .

(4) Optionally, configuring, by the first communication device, the certificate and/or the subscription of the first object in a control plane manner includes enabling the first communication device to obtain the certificate and/or the subscription of the first object in the control plane manner.

And/or

(5) Optionally, configuring, by the first communication device, a certificate and/or a subscription of the first object in a user plane manner includes: and enabling the first communication equipment to obtain the certificate and/or the subscription of the first object in a user plane mode. It is to be understood that, in a case where the certificate and/or the subscription of the first network is provided by an entity other than the network to which the terminal accesses, configuring the certificate and/or the subscription for the first communication device may be understood as enabling the first communication device to obtain the certificate and/or the subscription for the first object in a user plane manner.

A method, an apparatus, a device and a readable storage medium for supporting network selection according to embodiments of the present application are described in detail below with reference to the accompanying drawings.

Referring to fig. 2, an embodiment of the present application provides a method for supporting network selection, which is performed by a first communication device, where the first communication device includes but is not limited to a terminal (UE), and the method includes: step 201 and step 202.

Step 201: obtaining first information, the first information comprising: a first list, a second list and/or first indication information;

step 202: selecting a network according to the first information;

in an alternative embodiment of the invention, the first list comprises one of:

(1) one or more network objects;

(2) identification information of one or more network objects;

in an alternative embodiment of the invention, the characteristics of the networks in the first list comprise at least one of:

(1) the first communication device is capable of limited access;

(2) enabling the first communication device to obtain a certificate and/or a subscription;

(3) the first communication device is accessible using a default credential;

in one embodiment, the characteristics of the networks in the first list include the networks to which the first communication device has limited access and which enable the first communication device to obtain credentials and/or to sign up.

In one embodiment, the default credentials include credentials for a restricted access mode.

In another alternative embodiment of the invention, the first list comprises at least one of:

(1) a list of networks that can be restricted access;

(2) a list of networks that can configure certificates and/or subscriptions;

(3) a list of networks that can be accessed using default credentials;

in one embodiment, the feature of the network in the list of networks capable of provisioning certificates and/or subscriptions comprises one of: the first communication device can be accessed in a limited way, and can obtain certificates and/or signing contracts, and the first communication device can be accessed by adopting default certificates.

In an alternative embodiment of the invention, the second list comprises:

(1) one or more network objects;

(2) identification information of one or more network objects;

in an alternative embodiment of the invention, the characteristics of the networks in the second list comprise at least one of:

(1) the first communication device is not accessible;

(2) not enabling the first communication device to obtain a certificate and/or a subscription;

(3) the first communication device is inaccessible using a default credential;

in another alternative embodiment of the invention, the second list comprises at least one of:

(1) a list of networks that cannot be restricted access;

(2) a list of networks that cannot configure certificates and/or subscriptions;

(3) a list of networks that cannot be accessed using default credentials;

wherein the network list comprises:

(1) one or more network objects;

(2) identification information of one or more network objects;

wherein the network object comprises a network and/or a network group;

(1) supporting or not supporting provisioning credentials and/or subscriptions;

(2) supporting or not supporting the configuration of the certificate and/or the subscription in a control plane mode;

(3) supporting or not supporting the configuration of certificates and/or subscriptions in a user plane manner;

(4) supporting or not supporting restricted access based configuration credentials and/or subscriptions;

(5) supporting or not configuring the certificate and/or subscription in a control plane mode based on the limited access;

(6) supporting or not configuring the certificate and/or subscription in a user plane manner based on the limited access;

(7) supporting or not supporting provisioning credentials and/or subscriptions based on unrestricted access;

(8) supporting or not configuring the certificate and/or the subscription in a control plane mode based on the unrestricted access;

(9) provisioning of credentials and/or subscriptions in a user plane manner based on unrestricted access is supported or not.

In one embodiment, the first communication device obtains the first list and/or the second list by pre-configuration. In another embodiment, the first communication device obtains the first list and/or the second list from an accessed network or a first server. The first server is a server that configures a certificate and/or a subscription for the first communication device.

In an optional embodiment of the invention, the certificate and/or subscription comprises at least one of: a certificate and/or subscription of the first object; certificates and/or subscriptions for primary authentication and/or authorization, certificates and/or subscriptions for non-primary authentication and/or authorization;

in one embodiment, the means for non-primary authentication and/or authorization includes at least one of: secondary Authentication/Authorization, Slice-related Authentication and Authorization (NSSAA Network Slice-Specific Authentication and Authorization).

Wherein the content of the first and second substances,

the first object includes at least one of: the method comprises the following steps that A, a network, a first entity, a network accessed by first communication equipment, main authentication and/or authorization and non-main authentication and/or authorization are/is carried out;

the first entity comprises one of: an entity in the data network, an entity outside the network to which the first communication device is connected;

wherein the content of the first and second substances,

the A network is the same or different from the networks in the first list;

and/or the presence of a gas in the gas,

the A network is the same or different from the networks in the second list;

and/or the presence of a gas in the gas,

the A network is the same as or different from a network accessed by the first communication equipment; and/or the presence of a gas in the gas,

the obtaining a certificate and/or a subscription comprises at least one of: obtaining the certificate and/or the subscription in a control plane mode, and obtaining the certificate and/or the subscription in a user plane mode;

and/or the presence of a gas in the gas,

the list of networks capable of provisioning certificates and/or subscriptions comprises at least one of: the certificate and/or the signed network list can be configured in a control plane mode, and the certificate and/or the signed network list can be configured in a user plane mode;

in one embodiment, the feature that enables configuring the network in the list of networks that have a certificate and/or subscription in a control plane manner includes one of: the first communication equipment can be accessed in a limited way, the first communication equipment can obtain a certificate and/or sign through a control plane mode, and the first communication equipment can be accessed by adopting a default certificate.

In one embodiment, the feature of the network in the list of networks that can be configured in a user plane manner for a certificate and/or a subscription includes one of: the first communication equipment can be accessed in a limited way, the first communication equipment can obtain a certificate and/or sign a contract in a user plane mode, and the first communication equipment can be accessed by adopting a default certificate.

In an optional embodiment of the invention, enabling the first communication device to obtain the certificate and/or the subscription comprises at least one of: the first communication device can obtain the certificate and/or the subscription in a control plane mode, and the first communication device can obtain the certificate and/or the subscription in a user plane mode.

In an optional embodiment of the invention, the certificate and/or subscription of the first object comprises a certificate and/or subscription for accessing the first object.

In an optional embodiment of the present invention, the first list is a first list corresponding to the first object, and the first lists corresponding to different first objects are the same or different;

and/or the presence of a gas in the gas,

the second list is a second list corresponding to the first object, and the second lists corresponding to different first objects are the same or different;

and/or the presence of a gas in the gas,

the list of networks that can configure certificates and/or subscriptions includes: a list of networks that can configure the certificate and/or subscription of the first object;

and/or the presence of a gas in the gas,

the list of networks that cannot configure certificates and/or subscriptions includes: a list of networks that are not capable of configuring a certificate and/or a subscription of the first object;

and/or the presence of a gas in the atmosphere,

enabling the first communication device to obtain a certificate and/or sign up comprises: enabling the first communication device to obtain a certificate and/or a subscription of the first object;

and/or the presence of a gas in the gas,

the inability to cause the first communication device to obtain a certificate and/or sign up comprises: the first communication device cannot be made to obtain a certificate and/or a subscription of the first object.

In an optional embodiment of the present invention, the first list corresponding to the first object includes: a first list corresponding to the first object in a control plane manner, and a first list corresponding to the first object in a user plane manner;

wherein the content of the first and second substances,

the first list in the control plane mode corresponding to the first object is the same as or different from the first list in the user plane mode corresponding to the first object;

the network in the first list corresponding to the first object in the control plane manner includes a network which enables the first communication device to obtain a certificate and/or a subscription of the first object in the control plane manner;

the network in the first list corresponding to the first object in the user plane manner comprises a network which can enable the first communication device to obtain the certificate and/or the subscription of the first object in the user plane manner;

and/or the presence of a gas in the gas,

the second list corresponding to the first object comprises: a second list corresponding to the first object in a control plane manner, and a second list corresponding to the first object in a user plane manner;

wherein the content of the first and second substances,

the second list corresponding to the first object and passing through the control plane mode is the same as or different from the second list corresponding to the first object and passing through the user plane mode;

the network in the second list corresponding to the first object in the control plane manner includes a network which cannot enable the first communication device to obtain the certificate and/or the subscription of the first object in the control plane manner;

the network in the second list corresponding to the first object in the user plane manner comprises a network which can not enable the first communication device to obtain the certificate and/or the subscription of the first object in the user plane manner;

and/or the presence of a gas in the gas,

the list of networks that can configure the certificate and/or the subscription of the first object comprises at least one of: the certificate and/or signed network list of the first object can be configured in a control plane mode, and the certificate and/or signed network list of the first object can be configured in a user plane mode;

and/or the presence of a gas in the gas,

the list of networks that are not capable of configuring the certificate and/or subscription of the first object comprises at least one of: the certificate and/or signed network list of the first object cannot be configured in a control plane mode, and the certificate and/or signed network list of the first object cannot be configured in a user plane mode;

and/or the presence of a gas in the gas,

enabling the first communication device to obtain a certificate and/or a subscription of the a object comprises at least one of: the first communication equipment can obtain the certificate and/or the subscription of the first object in a control plane mode, and the first communication equipment can obtain the certificate and/or the subscription of the first object in a user plane mode;

and/or the presence of a gas in the gas,

the inability to cause the first communications device to obtain a certificate and/or a subscription to the a object comprises at least one of: the first communication device cannot be enabled to obtain the certificate and/or the subscription of the first object in a control plane manner, and the first communication device cannot be enabled to obtain the certificate and/or the subscription of the first object in a user plane manner.

In an alternative embodiment of the invention, the network types of the networks in the first list, the network types of the networks in the second list, and/or the network types of the a-networks comprise at least one of: public Network, Non-Public Network, PLMN, Non-independent Non-Public Network (PNI-NPN), SNPN.

In an optional embodiment of the present invention, the obtaining the first indication information includes:

first indication information is broadcast from the cell or received from the second communication device.

In an alternative embodiment of the invention, the method further comprises:

obtaining, by accessing a network in the first list, at least one of:

(1) a certificate and/or a subscription of the first object,

(2) identification information of the first object;

(3) a first list corresponding to the first object;

(4) a second list corresponding to the first object;

in an optional embodiment of the present invention, the selecting a network according to the first information includes: when a first condition is met, selecting a first network;

wherein the first condition comprises at least one of:

the first network is a network in the first list;

obtaining first indication information from the first network, the first indication information indicating at least one of: supporting provisioning certificates and/or subscriptions; supporting the configuration of certificates and/or subscription in a control plane mode; supporting the configuration of certificates and/or signing in a user plane mode; support provisioning credentials and/or subscriptions based on restricted access; supporting certificate configuration and/or subscription based on limited access in a control plane manner; supporting certificate configuration and/or subscription based on limited access in a user plane manner; support provisioning credentials and/or subscriptions based on unrestricted access; supporting the configuration of certificates and/or subscription in a control plane mode based on the unrestricted access; supporting the configuration of certificates and/or subscriptions in a user plane manner based on the unrestricted access;

the terminal needs to obtain a certificate and/or a subscription of a first object;

the first list includes at least one of: a list of networks that can configure the certificate and/or the subscription of the first object; a first list corresponding to the first object; the networks in the first list enable the first communication device to obtain a certificate and/or a subscription of the first object; a certificate and/or a list of allowed networks corresponding to the subscription of the first object;

the first network is highest priority in the first list;

the first communication device is within the coverage of the first network or the first communication device is able to monitor signals of the first network.

In an optional embodiment of the present invention, the selecting a network according to the first information includes:

when a second condition is met, selecting a second network;

wherein the second condition comprises at least one of:

the second network is not a network in the second list;

obtaining first indication information from the second network, the first indication information indicating at least one of: supporting provisioning certificates and/or subscriptions; supporting the configuration of certificates and/or subscription in a control plane mode; supporting the configuration of certificates and/or signing in a user plane mode; support provisioning credentials and/or subscriptions based on restricted access; supporting certificate configuration and/or subscription based on limited access in a control plane manner; supporting certificate configuration and/or subscription based on limited access in a user plane manner; support provisioning credentials and/or subscriptions based on unrestricted access; supporting the configuration of certificates and/or subscription in a control plane mode based on the unrestricted access; supporting the configuration of certificates and/or subscriptions in a user plane manner based on the unrestricted access;

the second list comprises at least one of: a list of networks that are not capable of configuring the certificate and/or subscription of the first object; a second list corresponding to the first object; the networks in the second list are not capable of causing the first communication device to obtain a certificate and/or a subscription of the first object; a certificate and/or a list of disallowed networks corresponding to the subscription of the first object;

the first communication device is out of coverage of any network of the first list or the first communication device is unable to monitor signals of any network of the first list.

In an alternative embodiment of the invention, the networks in the first list are ordered by priority.

selecting a third network when a third condition is satisfied;

wherein the third condition comprises at least one of:

the third network is a network in the first list;

obtaining first indication information from the third network, the first indication information indicating at least one of: supporting provisioning certificates and/or subscriptions; supporting the configuration of certificates and/or subscription in a control plane mode; supporting the configuration of a certificate and/or a subscription in a user plane mode; support provisioning credentials and/or subscriptions based on restricted access; supporting certificate configuration and/or subscription based on limited access in a control plane manner; supporting certificate configuration and/or subscription based on limited access in a user plane manner; support provisioning credentials and/or subscriptions based on unrestricted access; supporting the configuration of certificates and/or subscription in a control plane mode based on the unrestricted access; supporting the configuration of a certificate and/or a subscription based on the unrestricted access in a user plane mode;

the first list includes at least one of: the first list corresponding to the first object in a control plane mode can configure a certificate and/or a signed network list of the first object in the control plane mode; the networks in the first list enable the first communication device to obtain the certificate and/or the subscription of the first object in a control plane manner; the first communication equipment is in the coverage range of the third network or can monitor the signal of the third network;

and/or the presence of a gas in the gas,

when the fourth condition is met, selecting a fourth network;

wherein the fourth condition comprises at least one of:

the fourth network is a network in the first list;

obtaining first indication information from the fourth network, the first indication information indicating at least one of: supporting provisioning certificates and/or subscriptions; supporting the configuration of certificates and/or subscription in a control plane mode; supporting the configuration of the certificate and/or the subscription in a user plane mode, and supporting the configuration of the certificate and/or the subscription based on the limited access; supporting certificate configuration and/or subscription based on limited access in a control plane manner; supporting certificate configuration and/or subscription based on limited access in a user plane manner; support provisioning credentials and/or subscriptions based on unrestricted access; supporting the configuration of certificates and/or subscription in a control plane mode based on the unrestricted access; supporting the configuration of certificates and/or subscriptions in a user plane manner based on the unrestricted access;

the first list includes at least one of: the first list corresponding to the first object in the user plane mode can configure the certificate and/or signed network list of the first object in the user plane mode; the networks in the first list enable the first communication device to obtain a certificate and/or a subscription of the first object in a user plane manner;

the first communication device is within the coverage of the fourth network or the first communication device is able to monitor the signal of the fourth network.

In the embodiment of the application, the first communication device is instructed to select the network for downloading the certificate and/or signing by the first indication information.

In an embodiment of the present application, the first communication device may select a network for downloading the certificate and/or the subscription according to the first information.

Referring to fig. 3, an embodiment of the present application provides a method for supporting network selection, which is performed by a second communication device, where the second communication device includes, but is not limited to, one of the following: RAN network elements, CN network elements (such as Access and Mobility Management Function (AMF), Session Management Function (SMF)), and the specific steps include:

step 301: sending first indication information;

(1) supporting or not supporting provisioning credentials and/or subscriptions;

(3) supporting or not supporting the configuration of the certificate and/or the subscription in a control plane mode;

(4) supporting or not supporting the configuration of certificates and/or subscriptions in a user plane manner;

(5) support or non-support for restricted access based configuration credentials and/or subscriptions;

(6) supporting or not configuring the certificate and/or subscription in a control plane mode based on the limited access;

(7) supporting or not configuring the certificate and/or subscription in a user plane manner based on the limited access;

(8) supporting or not supporting provisioning credentials and/or subscriptions based on unrestricted access;

(9) supporting or not configuring the certificate and/or the subscription in a control plane mode based on the unrestricted access;

(10) provisioning of credentials and/or subscriptions in a user plane manner based on unrestricted access is supported or not.

In one embodiment, the first indication information is broadcast by a cell system message.

In one embodiment, the second communication device is a communication device in the first network or the second network

Referring to fig. 4, an embodiment of the present application provides a method for supporting network selection, which is performed by a third communication device, where the third communication device includes, but is not limited to, one of the following: the RAN network element, CN network element (such as AMF, SMF), first server, and first entity, the specific steps include:

step 401: sending the first list and/or the second list;

in an alternative embodiment of the invention, the first list comprises:

(1) one or more network objects;

(2) identification information of one or more network objects;

the characteristics of the networks in the first list include at least one of:

(1) the first communication device is capable of limited access;

(3) the first communication device is accessible using a default credential;

in one embodiment, the networks in the first list include networks to which the first communication device has limited access and which enable the first communication device to obtain credentials and/or to sign up.

(1) a list of networks that can be restricted from access,

(2) a list of networks that can configure certificates and/or subscriptions,

(3) a list of networks that can be accessed using default credentials;

In an alternative embodiment of the present invention, the second list includes:

(1) one or more network objects;

(2) identification information of one or more network objects;

the characteristics of the networks in the second list include at least one of:

(1) the first communication device is not accessible;

(3) the first communication device is inaccessible using a default credential;

in another optional embodiment of the invention, the second list comprises at least one of:

(1) a list of networks that cannot be restricted access;

(2) a list of networks that cannot configure certificates and/or subscriptions;

(3) a list of networks that cannot be accessed using default credentials;

wherein the network list comprises one or more network objects or identification information of one or more network objects, and the network objects comprise networks and/or network groups.

In another optional embodiment of the invention, the certificate and/or subscription comprises at least one of: a certificate and/or subscription of the first object; certificates and/or subscriptions for primary authentication and/or authorization, certificates and/or subscriptions for non-primary authentication and/or authorization;

wherein the content of the first and second substances,

the A network is the same or different from the networks in the first list;

and/or the presence of a gas in the gas,

the A network is the same or different from the networks in the second list.

And/or the presence of a gas in the gas,

the A network is the same as or different from a network accessed by the first communication equipment;

and/or the presence of a gas in the gas,

In one embodiment, enabling the first communication device to obtain a certificate and/or a subscription comprises at least one of: the first communication device can obtain the certificate and/or the subscription in a control plane mode, and the first communication device can obtain the certificate and/or the subscription in a user plane mode.

In an alternative embodiment of the invention, the network types of the networks in the first list, the network types of the networks in the second list, and/or the network types of the a-networks comprise at least one of: public network, non-public network, PLMN, PNI NPN, SNPN.

In an embodiment of the present application, the first communication device is instructed by the first list and/or the second list to select a network for downloading the certificate and/or the subscription.

Referring to FIG. 5, the specific steps are as follows

Step 1: a first list (e.g., a mixed network list of SNPN and PLMN) corresponding to a certificate and/or subscription of a first object (e.g., SNPN2) is provisioned on the terminal.

Step 2: receiving first indication information sent by a second communication device (such as a RAN network element or a CN network element);

and 3, step 3: and selecting a network according to the first list and the first indication information.

It is understood that the implementation of step 3 can refer to the description of the embodiment shown in fig. 2.

Referring to fig. 6, an apparatus for supporting network selection according to an embodiment of the present application is applied to a first communication device, where the apparatus 600 includes:

a first obtaining module 601, configured to obtain first information, where the first information includes: a first list, a second list and/or first indication information;

a selecting module 602, configured to select a network according to the first information;

in an alternative embodiment of the invention, the first list comprises: one or more network objects, or identification information of one or more network objects, the characteristics of the networks in the first list including at least one of: the first communication equipment can be accessed in a limited way, and can obtain certificates and/or signing contracts, and the first communication equipment can be accessed by adopting default certificates;

a list of networks that can be restricted access;

a list of networks that can configure certificates and/or subscriptions;

a list of networks that can be accessed using default credentials;

in one embodiment, the networks in the list of networks capable of configuring the certificate and/or the subscription include networks that the first communication device is capable of limited access and that the first communication device is capable of obtaining the certificate and/or the subscription.

In an optional embodiment of the invention, the second list comprises one or more network objects, or identification information of one or more network objects, and the characteristics of the networks in the second list comprise at least one of: the first communication equipment cannot be accessed, the first communication equipment cannot obtain a certificate and/or a subscription, and the first communication equipment cannot be accessed by adopting a default certificate;

a list of networks that cannot be restricted access;

a list of networks that cannot configure certificates and/or subscriptions;

a list of networks that cannot be accessed using default credentials;

supporting or not supporting provisioning credentials and/or subscriptions;

In one embodiment, the first communication device obtains the first list and/or the second list by pre-configuration.

The certificate and/or subscription of the first object includes a certificate and/or subscription for accessing the first object.

wherein the content of the first and second substances,

the first entity comprises one of: an entity in the data network, an entity outside the network to which the first communication device has access;

wherein the A network is the same or different from the networks in the first list;

and/or the presence of a gas in the gas,

the A network is the same or different from the networks in the second list;

and/or the presence of a gas in the gas,

enabling the first communication device to obtain a certificate and/or a subscription comprises at least one of: the first communication device can obtain the certificate and/or the subscription in a control plane mode, and the first communication device can obtain the certificate and/or the subscription in a user plane mode.

and/or the presence of a gas in the gas,

the list of networks that can configure certificates and/or subscriptions includes: a list of networks that can configure the first object's certificate and/or subscription;

and/or the presence of a gas in the gas,

the inability to cause the first communication device to obtain a certificate and/or sign up comprises: the first communication device is not enabled to obtain a certificate and/or a subscription of the first object.

wherein the content of the first and second substances,

the first list corresponding to the first object in the control plane mode and the first list corresponding to the first object in the user plane mode are the same or different;

the network in the first list through the control plane mode corresponding to the first object includes: enabling the first communication device to obtain a certificate and/or a signed network of a first object in a control plane manner;

the network in the first list through the user plane mode corresponding to the first object includes: enabling the first communication device to obtain a certificate and/or a signed network of a first object in a user plane manner;

and/or the presence of a gas in the gas,

wherein the content of the first and second substances,

and/or the presence of a gas in the gas,

the list of networks that can configure the certificate and/or subscription of the first object comprises at least one of: the certificate and/or signed network list of the first object can be configured in a control plane mode, and the certificate and/or signed network list of the first object can be configured in a user plane mode;

and/or the presence of a gas in the gas,

the list of networks that are not capable of configuring the certificate and/or subscription of the first object comprises at least one of: the certificate and/or signed network list of the first object cannot be configured in a control plane manner, and the certificate and/or signed network list of the first object cannot be configured in a user plane manner;

and/or the presence of a gas in the gas,

enabling the first communication device to obtain a certificate and/or a subscription of the first object comprises at least one of: the first communication device can obtain the certificate and/or the subscription of the first object in a control plane manner, and the first communication device can obtain the certificate and/or the subscription of the first object in a user plane manner;

and/or the presence of a gas in the gas,

the inability to cause the first communication device to obtain the certificate and/or the subscription of the first object comprises at least one of: the first communication device cannot be enabled to obtain the certificate and/or the subscription of the first object in a control plane manner, and the first communication device cannot be enabled to obtain the certificate and/or the subscription of the first object in a user plane manner.

In an alternative embodiment of the present invention, the network types of the networks in the first list, the networks in the second list, and/or the a-network include at least one of the following: public network, non-public network, PLMN, PNI NPN, SNPN.

In an optional embodiment of the present invention, the first obtaining module 601 is further configured to: first indication information is broadcast from the cell or received from the second communication device.

In an alternative embodiment of the present invention, the apparatus 600 further comprises:

a second obtaining module, configured to obtain, by accessing the networks in the first list, at least one of:

a certificate and/or a subscription of the first object,

identification information of the first object;

a first list corresponding to the first object;

a second list corresponding to the first object;

in an alternative embodiment of the present invention, the selection module 602 is further configured to:

when a first condition is met, selecting a first network;

wherein the first condition comprises at least one of:

the first network is a network in the first list;

the first network is highest priority in the first list;

when a second condition is met, selecting a second network;

wherein the second condition comprises at least one of:

the second network is not a network in the second list;

the terminal needs to obtain a certificate and/or a subscription of the first object;

the second list comprises at least one of: a list of networks that are not capable of configuring a certificate and/or a subscription of the first object; a second list corresponding to the first object; the networks in the second list are not capable of causing the first communication device to obtain a certificate and/or a subscription of the first object; a certificate and/or a list of disallowed networks corresponding to a subscription of the first object;

when a third condition is met, selecting a third network;

wherein the third condition comprises at least one of:

the third network is a network in the first list;

obtaining first indication information from the third network, the first indication information indicating at least one of: supporting provisioning certificates and/or subscriptions; supporting the configuration of certificates and/or subscription in a control plane mode; supporting the configuration of certificates and/or signing in a user plane mode; support provisioning credentials and/or subscriptions based on restricted access; supporting certificate configuration and/or subscription based on limited access in a control plane manner; supporting certificate configuration and/or subscription based on limited access in a user plane manner; support provisioning credentials and/or subscriptions based on unrestricted access; supporting the configuration of certificates and/or subscription in a control plane mode based on the unrestricted access; supporting the configuration of certificates and/or subscriptions in a user plane manner based on the unrestricted access;

and/or the presence of a gas in the gas,

when the fourth condition is met, selecting a fourth network;

wherein the fourth condition comprises at least one of:

the fourth network is a network in the first list;

obtaining first indication information from the fourth network, the first indication information indicating at least one of: supporting provisioning certificates and/or subscriptions; supporting the configuration of certificates and/or subscription in a control plane mode; supporting the configuration of the certificate and/or the subscription in a user plane mode, and supporting the configuration of the certificate and/or the subscription based on the limited access; supporting certificate configuration and/or subscription based on limited access in a control plane manner; supporting certificate configuration and/or subscription based on limited access in a user plane manner; supporting provisioning of credentials and/or subscriptions based on unrestricted access; supporting the configuration of certificates and/or subscription in a control plane mode based on the unrestricted access; supporting the configuration of a certificate and/or a subscription based on the unrestricted access in a user plane mode;

The device provided in the embodiment of the present application can implement each process implemented by the method embodiment shown in fig. 2, and achieve the same technical effect, and for avoiding repetition, details are not described here again.

Referring to fig. 7, an apparatus for supporting network selection according to an embodiment of the present application is applied to a second communication device, where the apparatus 700 includes:

a first sending module 701, configured to send first indication information;

supporting or not supporting provisioning credentials and/or subscriptions;

The device provided in the embodiment of the present application can implement each process implemented by the method embodiment shown in fig. 3, and achieve the same technical effect, and for avoiding repetition, details are not described here again.

Referring to fig. 8, an apparatus for supporting network selection according to an embodiment of the present application is applied to a third communication device, where the apparatus 800 includes:

a second sending module 801, configured to send the first list and/or the second list;

a list of networks that can be restricted from access,

a list of networks that can configure certificates and/or subscriptions,

a list of networks that can be accessed using default credentials;

a list of networks that cannot be restricted access;

a list of networks that cannot configure certificates and/or subscriptions;

a list of networks that cannot be accessed using default credentials;

wherein the content of the first and second substances,

the A network is the same or different from the networks in the first list;

and/or the presence of a gas in the gas,

the A network is the same or different from the networks in the second list.

And/or the presence of a gas in the gas,

and/or the presence of a gas in the gas,

In an optional embodiment of the invention, the network type of the network in the first list, the network type of the network in the second list, and/or the network type of the a-network comprises at least one of: public network, non-public network, PLMN, PNI NPN, SNPN.

The device provided in the embodiment of the present application can implement each process implemented in the method embodiment shown in fig. 4, and achieve the same technical effect, and is not described here again to avoid repetition.

The device provided in the embodiment of the present application can implement each process implemented by the method embodiment shown in fig. 4, and achieve the same technical effect, and for avoiding repetition, details are not described here again.

Fig. 9 is a schematic hardware structure diagram of a terminal for implementing an embodiment of the present application, where the terminal 900 includes, but is not limited to: a radio frequency unit 901, a network module 902, an audio output unit 903, an input unit 904, a sensor 905, a display unit 906, a user input unit 907, an interface unit 908, a memory 909, and a processor 910.

Those skilled in the art will appreciate that the terminal 900 may further include a power source (e.g., a battery) for supplying power to various components, and the power source may be logically connected to the processor 910 through a power management system, so as to manage charging, discharging, and power consumption management functions through the power management system. The terminal structure shown in fig. 9 does not constitute a limitation of the terminal, and the terminal may include more or less components than those shown, or combine some components, or have a different arrangement of components, and thus will not be described again.

It should be understood that, in the embodiment of the present application, the input Unit 904 may include a Graphics Processing Unit (GPU) 9041 and a microphone 9042, and the Graphics Processing Unit 9041 processes image data of a still picture or a video obtained by an image capturing device (such as a camera) in a video capturing mode or an image capturing mode. The display unit 906 may include a display panel 9061, and the display panel 9061 may be configured in the form of a liquid crystal display, an organic light emitting diode, or the like. The user input unit 907 includes a touch panel 9071 and other input devices 9072. A touch panel 9071 also referred to as a touch screen. The touch panel 9071 may include two parts, a touch detection device and a touch controller. Other input devices 9072 may include, but are not limited to, a physical keyboard, function keys (e.g., volume control keys, switch keys, etc.), a trackball, a mouse, and a joystick, which are not described in detail herein.

In this embodiment of the application, the radio frequency unit 901 receives downlink data from a network side device and then processes the downlink data to the processor 910; in addition, the uplink data is sent to the network side equipment. Generally, the radio frequency unit 901 includes, but is not limited to, an antenna, at least one amplifier, a transceiver, a coupler, a low noise amplifier, a duplexer, and the like.

Memory 909 can be used to store software programs or instructions as well as various data. The memory 909 may mainly include a storage program or instruction area and a storage data area, wherein the storage program or instruction area may store an operating system, an application program or instruction (such as a sound playing function, an image playing function, etc.) required for at least one function, and the like. In addition, the Memory 909 may include a high-speed random access Memory, and may also include a nonvolatile Memory, wherein the nonvolatile Memory may be a Read-Only Memory (ROM), a Programmable ROM (PROM), an Erasable Programmable PROM (EPROM), an Electrically Erasable Programmable ROM (EEPROM), or a flash Memory. Such as at least one magnetic disk storage device, flash memory device, or other non-volatile solid state storage device.

Processor 910 may include one or more processing units; alternatively, the processor 910 may integrate an application processor, which mainly handles operating systems, user interfaces, and applications or instructions, etc., and a modem processor, which mainly handles wireless communications, such as a baseband processor. It is to be appreciated that the modem processor described above may not be integrated into processor 910.

The terminal provided in the embodiment of the present application can implement each process implemented by the method embodiment shown in fig. 2, and achieve the same technical effect, and for avoiding repetition, details are not described here again.

The embodiment of the application also provides network side equipment. As shown in fig. 10, the network-side device 1000 includes: antenna 1001, rf device 1002, and baseband device 1003. The antenna 1001 is connected to the radio frequency device 1002. In the uplink direction, rf device 1002 receives information via antenna 1001 and transmits the received information to baseband device 1003 for processing. In the downlink direction, the baseband device 1003 processes information to be transmitted and transmits the information to the rf device 1002, and the rf device 1002 processes the received information and transmits the processed information through the antenna 1001.

The above band processing means may be located in the baseband means 1003, and the method executed by the network side device in the above embodiment may be implemented in the baseband means 1003, where the baseband means 1003 includes a processor 1004 and a memory 1005.

The baseband device 1003 may include, for example, at least one baseband board, on which a plurality of chips are disposed, as shown in fig. 10, where one chip, for example, a processor 1004, is connected to a memory 1005 and calls a program in the memory 1005 to perform the network device operations shown in the above method embodiments.

The baseband device 1003 may further include a network interface 1006, for exchanging information with the radio frequency device 1002, and the interface is, for example, a Common Public Radio Interface (CPRI).

Specifically, the network side device in the embodiment of the present application further includes: the instructions or programs stored in the memory 1005 and executable on the processor 1004 are called by the processor 1004 to execute the methods executed by the modules shown in fig. 7 to 8, and achieve the same technical effects, and are not described herein in detail to avoid repetition.

Embodiments of the present application also provide a program product stored on a non-volatile storage medium for execution by at least one processor to implement the steps of the method of processing as described in fig. 2-4.

An embodiment of the present application further provides a readable storage medium, where a program or an instruction is stored on the readable storage medium, and when the program or the instruction is executed by a processor, the program or the instruction implements each process of the method embodiments shown in fig. 2 to fig. 4, and can achieve the same technical effect, and in order to avoid repetition, details are not repeated here.

Wherein, the processor is the processor in the terminal described in the above embodiment. The readable storage medium includes a computer readable storage medium, such as a Read-Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk or an optical disk, and so on.

The embodiment of the present application further provides a chip, where the chip includes a processor and a communication interface, the communication interface is coupled to the processor, and the processor is configured to run a network-side device program or an instruction, to implement each process of the method embodiments shown in fig. 2 to 4, and can achieve the same technical effect, and details are not repeated here to avoid repetition.

It should be understood that the chips mentioned in the embodiments of the present application may also be referred to as a system-on-chip, a system-on-chip or a system-on-chip, etc.

It should be noted that, in this document, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other like elements in a process, method, article, or apparatus that comprises the element. Further, it should be noted that the scope of the methods and apparatus of the embodiments of the present application is not limited to performing the functions in the order illustrated or discussed, but may include performing the functions in a substantially simultaneous manner or in a reverse order based on the functions involved, e.g., the methods described may be performed in an order different than that described, and various steps may be added, omitted, or combined. In addition, features described with reference to certain examples may be combined in other examples.

Through the above description of the embodiments, those skilled in the art will clearly understand that the method of the above embodiments can be implemented by software plus a necessary general hardware platform, and certainly can also be implemented by hardware, but in many cases, the former is a better implementation manner. Based on such understanding, the technical solutions of the present application may be embodied in the form of a software product, which is stored in a storage medium (e.g., ROM/RAM, magnetic disk, optical disk) and includes instructions for enabling a terminal (e.g., a mobile phone, a computer, a server, or a network device) to execute the method according to the embodiments of the present application.

While the present embodiments have been described with reference to the accompanying drawings, it is to be understood that the invention is not limited to the precise embodiments described above, which are meant to be illustrative and not restrictive, and that various changes may be made therein by those skilled in the art without departing from the spirit and scope of the invention as defined by the appended claims.

Claims

1. A method for supporting network selection, performed by a first communications device, comprising:

selecting a network according to the first information;

wherein the content of the first and second substances,

alternatively, the first list comprises at least one of:

a list of networks that can be restricted access;

a list of networks that can configure certificates and/or subscriptions;

a list of networks that can be accessed using default credentials;

alternatively, the second list comprises at least one of:

a list of networks that cannot be restricted access;

a list of networks that cannot configure certificates and/or subscriptions;

a list of networks that cannot be accessed using default credentials;

the first indication information is used for indicating at least one of the following:

supporting or not supporting provisioning credentials and/or subscriptions;

2. The method of claim 1, wherein the certificate and/or subscription includes at least one of: a certificate and/or subscription of the first object; certificates and/or subscriptions for primary authentication and/or authorization, certificates and/or subscriptions for non-primary authentication and/or authorization;

wherein the content of the first and second substances,

the first entity comprises one of: an entity in a data network, an entity outside a network to which the first communication device has access;

wherein the content of the first and second substances,

the A network is the same or different from the networks in the first list;

and/or the presence of a gas in the gas,

the A network is the same or different from the networks in the second list;

and/or the presence of a gas in the gas,

and/or the presence of a gas in the atmosphere,

3. The method of claim 2,

the first lists are first lists corresponding to the first objects, and the first lists corresponding to different first objects are the same or different;

and/or the presence of a gas in the gas,

and/or the presence of a gas in the atmosphere,

and/or the presence of a gas in the gas,

and/or the presence of a gas in the atmosphere,

4. The method of claim 3, wherein the first list corresponding to the first object comprises: a first list corresponding to the first object in a control plane manner, and a first list corresponding to the first object in a user plane manner;

wherein the content of the first and second substances,

and/or the presence of a gas in the gas,

wherein the content of the first and second substances,

and/or the presence of a gas in the gas,

5. The method according to claim 1 or 2, wherein the network type of the networks in the first list, the networks in the second list, and/or the a-network comprises at least one of: public network, non-public network, PLMN, PNI NPN, SNPN.

6. The method of claim 1, wherein the obtaining the first indication information comprises:

7. The method of claim 1, further comprising:

obtaining, by accessing a network in the first list, at least one of:

a certificate and/or a subscription of the first object,

identification information of the first object;

a first list corresponding to the first object;

a second list corresponding to the first object.

8. The method according to any of claims 1 to 3, wherein said selecting a network based on said first information comprises:

when a first condition is met, selecting a first network;

wherein the first condition comprises at least one of:

the first network is a network in the first list;

the first network is highest priority in the first list;

9. The method according to any of claims 1 to 4, wherein said selecting a network based on said first information comprises:

when a second condition is met, selecting a second network;

wherein the second condition comprises at least one of:

the second network is not a network in the second list;

obtaining first indication information from the second network, the first indication information indicating at least one of: supporting provisioning certificates and/or subscriptions; supporting the configuration of certificates and/or subscription in a control plane mode; supporting the configuration of certificates and/or signing in a user plane mode; support provisioning credentials and/or subscriptions based on restricted access; supporting certificate configuration and/or subscription based on limited access in a control plane manner; supporting certificate configuration and/or subscription based on limited access in a user plane manner; support provisioning credentials and/or subscriptions based on unrestricted access; supporting the configuration of a certificate and/or a subscription based on the unrestricted access in a control plane mode; supporting the configuration of certificates and/or subscriptions in a user plane manner based on the unrestricted access;

the second list comprises at least one of: a list of networks that are not capable of configuring a certificate and/or a subscription of the first object; a second list corresponding to the first object; the networks in the second list are not able to make the first communication device obtain the certificate and/or the subscription of the first object; a certificate and/or a list of disallowed networks corresponding to a subscription of the first object;

10. The method of claim 1, wherein the networks in the first list are ordered by priority.

11. The method according to any of claims 2 to 4, wherein said selecting a network based on said first information comprises:

selecting a third network when a third condition is satisfied;

wherein the third condition comprises at least one of:

the third network is a network in the first list;

and/or the presence of a gas in the gas,

when the fourth condition is met, selecting a fourth network;

wherein the fourth condition comprises at least one of:

the fourth network is a network in the first list;

12. A method of supporting network selection, performed by a second communication device, comprising:

sending first indication information;

supporting or not supporting provisioning credentials and/or subscriptions;

13. A method of supporting network selection, performed by a third communications device, comprising:

sending the first list and/or the second list;

alternatively, the first list comprises at least one of:

a list of networks that can be restricted from access,

a list of networks that can configure certificates and/or subscriptions,

a list of networks that can be accessed using default credentials;

alternatively, the second list comprises at least one of:

a list of networks that cannot be restricted access;

a list of networks that cannot configure certificates and/or subscriptions;

a list of networks that cannot be accessed using default credentials;

14. The method of claim 12, wherein the certificate and/or subscription includes at least one of: a certificate and/or subscription of the first object; certificates and/or subscriptions for primary authentication and/or authorization, certificates and/or subscriptions for non-primary authentication and/or authorization;

wherein the content of the first and second substances,

the A network is the same or different from the networks in the first list;

and/or the presence of a gas in the gas,

the A network is the same or different from the networks in the second list;

and/or the presence of a gas in the gas,

15. The method according to claim 13 or 14, wherein the network type of the networks in the first list, the network type of the networks in the second list, and/or the network type of the a-network comprises at least one of: public network, non-public network, PLMN, PNI NPN, SNPN.

16. The method of claim 13, wherein the networks in the first list are ordered by priority.

17. An apparatus for supporting network selection, wherein a first communication device is employed, comprising:

a first obtaining module, configured to obtain first information, where the first information includes: a first list, a second list and/or first indication information;

a selection module for selecting a network according to the first information;

wherein the content of the first and second substances,

alternatively, the first list comprises at least one of:

a list of networks that can be restricted access;

a list of networks that can configure certificates and/or subscriptions;

a list of networks that can be accessed using default credentials;

alternatively, the second list comprises at least one of:

a list of networks that cannot be restricted access;

a list of networks that cannot configure certificates and/or subscriptions;

a list of networks that cannot be accessed using default credentials;

supporting or not supporting provisioning credentials and/or subscriptions;

18. An apparatus for supporting network selection, applied to a second communication device, comprising:

the first sending module is used for sending first indication information;

supporting or not supporting provisioning certificates and/or subscriptions;

19. An apparatus for supporting network selection, applied to a third communication device, comprising:

alternatively, the first list comprises at least one of:

a list of networks that can be restricted from access,

a list of networks that can configure certificates and/or subscriptions,

a list of networks that can be accessed using default credentials;

alternatively, the second list comprises at least one of:

a list of networks that cannot be restricted access;

a list of networks that cannot configure certificates and/or subscriptions;

a list of networks that cannot be accessed using default credentials;

20. A terminal, comprising: processor, memory and program stored on the memory and executable on the processor, which when executed by the processor implements the steps of the method according to any one of claims 1 to 11.

21. A network-side device, comprising: a processor, a memory and a program stored on the memory and executable on the processor, which when executed by the processor implements the steps of the method of any one of claims 12 to 16.

22. A readable storage medium, characterized in that it stores thereon a program or instructions which, when executed by a processor, implement the steps of the method according to any one of claims 1 to 16.