CN115915491A

CN115915491A - Communication path establishing method and device

Info

Publication number: CN115915491A
Application number: CN202110975096.3A
Authority: CN
Inventors: 侯云静; 王胡成
Original assignee: Datang Mobile Communications Equipment Co Ltd
Current assignee: Datang Mobile Communications Equipment Co Ltd
Priority date: 2021-08-24
Filing date: 2021-08-24
Publication date: 2023-04-04

Abstract

The invention provides a method and a device for establishing a communication path, which solve the problem that an end-to-end data communication path cannot be dynamically established between UE according to the request of an application layer in the related technology. The method of the invention comprises the following steps: acquiring application layer data sent by a first terminal UE, wherein the application layer data comprises an identifier of a second UE; the application function entity sends first request information to first network equipment, wherein the first request information is used for requesting to establish a data transmission path between first terminal UE and second UE. In the embodiment of the invention, after the function sends the first request information to the first network equipment, the first network equipment sends the first request information to a mobile management function AMF or a session management function SMF, and the AMF or the SMF triggers the establishment of the data transmission path, thereby realizing the aim of dynamically establishing an end-to-end data communication path between UE based on the request of an application layer.

Description

Communication path establishing method and device

Technical Field

The present invention relates to the field of communications technologies, and in particular, to a method and an apparatus for establishing a communication path.

Background

A network may support end-to-end data communication through a 5G local area network technology, which requires that group information where User Equipment (UE, also referred to as a terminal) is located is configured in advance, and the UE can only send data to UEs in a group. However, in the related art, an end-to-end data communication path cannot be dynamically established between 2 UEs according to a request of an application layer.

Disclosure of Invention

The present invention provides a method and an apparatus for establishing a communication path, so as to solve the problem in the related art that an end-to-end data communication path cannot be dynamically established between UEs according to a request of an application layer.

In order to achieve the above object, the present invention provides a method for establishing a communication path, which is executed by an application function entity, and comprises:

acquiring application layer data sent by a first terminal UE, wherein the application layer data comprises an identifier of a second UE;

and sending first request information to first network equipment, wherein the first request information is used for requesting to establish a data transmission path between the first UE and the second UE.

Optionally, after acquiring the application layer data sent by the first terminal UE, the method further includes:

and if the identifier of the first UE and the identifier of the second UE are both terminal identifiers in a preset terminal identifier list, determining to establish the data transmission path, wherein the preset terminal identifier list comprises at least one terminal identifier.

Optionally, the method further comprises:

acquiring a registration request sent by target UE, wherein the registration request comprises one or more of a communication path type of application layer data of the target UE, an identifier of the target UE and an identifier of a user of the target UE;

determining whether the application layer data of the target UE can be transmitted through the data transmission path or not according to the registration request and/or a preset strategy;

and if the application layer data of the target UE can be transmitted through the data transmission path, adding the identifier of the target UE into the preset terminal identifier list.

Optionally, determining whether the application layer data of the target UE can be transmitted through the data transmission path according to the registration request and/or a preset policy includes:

sending an authentication and authorization request to a security server according to the registration request, wherein the authentication and authorization request comprises one or more of the identification of the target UE and the identification of a user of the target UE;

and if receiving authentication and authorization confirmation sent by the security server, determining whether the application layer data of the target UE can be transmitted through the data transmission path or not according to the registration request and/or a preset strategy, wherein the authentication and authorization confirmation is sent by the security server under the condition that the security level of the target UE or the user is greater than a first preset level threshold value.

Optionally, after sending the first request information to the first network device, the method further includes:

receiving a first reply message, wherein the first reply message is used for indicating that a data transmission path is successfully established between the first UE and the second UE.

Optionally, after receiving the first reply message, the method further includes:

sending a data analysis request to a second network device;

acquiring a data analysis result fed back by the second network equipment according to the data analysis request;

and if the data analysis result does not meet the preset condition, sending a release request of the data transmission path.

sending a security analysis request to a security server;

acquiring a security analysis result sent by the security server according to the security analysis request, wherein the security analysis result comprises the security level of at least one of the first UE and the second UE;

and sending a release request of the data transmission path under the condition that the security level is lower than a second preset level threshold value.

The embodiment of the invention also provides a method for establishing a communication path, which is applied to the first network equipment and comprises the following steps:

acquiring first request information sent by an application function entity, wherein the first request information is used for requesting to establish a data transmission path between first UE and second UE;

and sending the first request message to a mobile management function (AMF) or a Session Management Function (SMF), and triggering and establishing the data transmission path by the AMF or the SMF.

Optionally, sending the first request message to the AMF includes:

sending second request information to a unified data management function (UDM), wherein the second request information is used for requesting to acquire information of a service AMF (advanced resource management) which comprises one or more of an AMF corresponding to the first UE and an AMF corresponding to the second UE;

acquiring the information of the service AMF fed back by the UDM according to the second request information;

and sending the first request message to the service AMF according to the information of the service AMF.

Optionally, sending the first request message to the SMF includes:

sending third request information to the UDM, where the third request information is used to request to acquire information of a serving SMF, where the serving SMF includes one or more of an SMF corresponding to the first UE and an SMF corresponding to the second UE;

obtaining the information of the service SMF fed back by the UDM according to the third request information;

and sending the first request message to the service SMF according to the information of the service SMF.

The embodiment of the invention also provides a method for establishing a communication path, which is applied to a mobile management function AMF and comprises the following steps:

acquiring first request information sent by first network equipment, wherein the first request information is used for requesting to establish a data transmission path between first terminal UE and second UE;

and triggering and establishing the data transmission path according to the first request information.

Optionally, triggering establishment of the data transmission path according to the first request information includes:

sending a fourth request message to a serving SMF according to at least one of the identifier of the first UE, the identifier of the second UE and indication information in the first request message, wherein the indication information is used for indicating that a data transmission path is established between the first UE and the second UE;

acquiring a fourth reply message returned by the service SMF according to the fourth request message;

wherein the fourth request message includes one or more of:

the indication information;

an identity of the first UE;

an identity of the second UE;

DNN；

S-NSSAI；

managing SM information by a first session, wherein the first SM information is SM information corresponding to first UE;

managing SM information by a second session, wherein the second SM information is SM information corresponding to second UE;

the fourth reply message includes one or more of:

result indication information, wherein the result indication information is used for indicating whether the data transmission path is successfully established;

the first SM information;

the second SM information.

The embodiment of the invention also provides a method for establishing a communication path, which is applied to a Session Management Function (SMF) and comprises the following steps:

Optionally, the triggering of establishing the data transmission path according to the first request information includes:

sending the first request information to an AMF (advanced resource management) according to at least one of indication information in the first request information, an identifier of a first UE (user equipment) and an identifier of a second UE, wherein the indication information is used for indicating that a data transmission path is established between the first UE and the second UE;

acquiring a fourth request message sent by the AMF;

sending a fourth reply message according to the fourth request message;

wherein the fourth request message comprises one or more of:

the indication information;

an identity of the first UE;

an identity of the second UE;

DNN；

S-NSSAI；

the fourth reply message comprises one or more of:

the first SM information;

the second SM information.

The embodiment of the invention also provides a device for establishing the communication path, which is applied to the application function entity and comprises a memory, a transceiver and a processor;

a memory for storing a computer program; a transceiver for transceiving data under control of the processor; a processor for reading the computer program in the memory and performing the following operations:

acquiring application layer data sent by first terminal UE through a transceiver, wherein the application layer data comprises an identifier of second UE; and sending first request information to the first network equipment, wherein the first request information is used for requesting to establish a data transmission path between the first terminal UE and the second UE.

Optionally, the processor is further configured to:

acquiring a registration request sent by a target UE through a transceiver, wherein the registration request comprises one or more of a communication path type of application layer data of the target UE, an identification of the target UE and an identification of a user of the target UE;

and if the data transmission path is determined to be capable of transmitting the application layer data of the target UE, adding the identifier of the target UE into the preset terminal identifier list.

The embodiment of the invention also provides a device for establishing the communication path, which is applied to the first network equipment and comprises a memory, a transceiver and a processor;

a memory for storing a computer program; a transceiver for transceiving data under the control of the processor; a processor for reading the computer program in the memory and performing the following:

acquiring first request information sent by an application function entity through a transceiver, wherein the first request information is used for requesting to establish a data transmission path between first UE and second UE;

and sending the first request message to a mobile management function (AMF) or a Session Management Function (SMF) through a transceiver, and triggering the establishment of the data transmission path by the AMF or the SMF.

The embodiment of the invention also provides a device for establishing the communication path, which is applied to the AMF with the mobile management function and comprises a memory, a transceiver and a processor;

acquiring first request information sent by first network equipment through a transceiver, wherein the first request information is used for requesting to establish a data transmission path between first terminal UE and second UE;

The embodiment of the invention also provides a device for establishing the communication path, which is applied to the SMF with the session management function and comprises a memory, a transceiver and a processor;

and triggering to establish the data transmission path according to the first request information.

The embodiment of the present invention further provides a device for establishing a communication path, which is applied to an application function entity, and includes:

a first obtaining unit, configured to obtain application layer data sent by a first terminal UE, where the application layer data includes an identifier of a second UE;

a first sending unit, configured to send first request information to a first network device, where the first request information is used to request that a data transmission path be established between the first UE and the second UE.

The embodiment of the present invention further provides a device for establishing a communication path, which is applied to a first network device, and includes:

a second obtaining unit, configured to obtain first request information sent by an application function entity, where the first request information is used to request that a data transmission path is established between a first UE and a second UE;

and a second sending unit, configured to send the first request message to a mobility management function AMF or a session management function SMF, where the AMF or the SMF triggers establishment of the data transmission path.

An embodiment of the present invention further provides a device for establishing a communication path, which is applied to an AMF (mobility management function), and includes:

a third obtaining unit, configured to obtain first request information sent by a first network device, where the first request information is used to request that a data transmission path be established between a first terminal UE and a second UE;

and the first processing unit is used for triggering the establishment of the data transmission path according to the first request information.

The embodiment of the invention also provides a device for establishing the communication path, which is applied to the SMF and comprises the following steps:

a fourth obtaining unit, configured to obtain first request information sent by a first network device, where the first request information is used to request that a data transmission path be established between a first terminal UE and a second UE;

and the second processing unit is used for triggering and establishing the data transmission path according to the first request information.

An embodiment of the present invention further provides a processor-readable storage medium, where the processor-readable storage medium stores program instructions, and the program instructions are configured to cause the processor to execute the steps of the method for establishing a communication path as described above.

The technical scheme of the invention at least has the following beneficial effects:

in the embodiment of the present invention, after the functional entity sends the first request information to the first network device, the first network device sends the first request information to a Mobility Management Function (AMF) or a Session Management Function (SMF), and the AMF or the SMF triggers the establishment of the data transmission path, so as to achieve the purpose of dynamically establishing an end-to-end data communication path between UEs based on the request of the application layer.

Drawings

Fig. 1 is a block diagram showing a network system to which an embodiment of the present invention is applicable;

fig. 2 is a flowchart illustrating a method for establishing a communication path according to an embodiment of the present invention;

FIG. 3 is an interaction diagram of a method for establishing a communication path according to an embodiment of the present invention;

FIG. 4 is a second schematic diagram illustrating an interaction of a method for establishing a communication path according to an embodiment of the present invention;

FIG. 5 is a third exemplary interaction diagram illustrating a method for establishing a communication path according to an embodiment of the present invention;

FIG. 6 is a second flowchart illustrating a method for establishing a communication path according to an embodiment of the invention;

fig. 7 is a third flowchart illustrating a method for establishing a communication path according to an embodiment of the present invention;

FIG. 8 is a fourth flowchart illustrating a method for establishing a communication path according to an embodiment of the invention;

FIG. 9 is a fourth exemplary interaction diagram illustrating a method for establishing a communication path according to an embodiment of the present invention;

FIG. 10 is a diagram illustrating a fifth interaction of the method for establishing a communication path according to an embodiment of the present invention;

FIG. 11 shows a sixth exemplary interaction diagram of a method for establishing a communication path according to an embodiment of the present invention;

fig. 12 is a seventh interactive view illustrating a method of establishing a communication path according to an embodiment of the present invention;

fig. 13 is a block diagram showing a configuration of a communication path establishing apparatus according to an embodiment of the present invention;

fig. 14 shows one of the block diagrams of the communication path establishment apparatus according to the embodiment of the present invention;

fig. 15 is a second block diagram of a communication path establishing apparatus according to an embodiment of the present invention;

fig. 16 is a third block diagram of a communication path establishment apparatus according to an embodiment of the present invention;

fig. 17 is a block diagram of a communication path establishing apparatus according to an embodiment of the present invention.

Detailed Description

The technical scheme provided by the embodiment of the invention can be suitable for various systems, particularly 5G systems. For example, the applicable System may be a Global System For Mobile communications (GSM) System, a Code Division Multiple Access (CDMA) System, a Wideband Code Division Multiple Access (WCDMA) System, a Time Division Synchronous CDMA (Time Division Multiple Access, TD-SCDMA) System, a General Packet Radio Service (GPRS) System, a Long Term Evolution (Long Term Evolution, LTE) System (including TD-LTE and FDD LTE), a Long Term Evolution (Long Term Evolution, LTE-a) System, a Universal Mobile Telecommunications System (UMTS) System, a Universal Microwave Access (world wide Mobile telecommunications, UMTS) System, a New Radio Access (NR 5, new air interface (NR 5) System, and the like. These various systems include terminal devices and network devices. The System may further include a core network portion, such as an Evolved Packet System (EPS), a 5G System (5 GS/5 GC), and the like.

Fig. 1 shows a block diagram of a wireless communication system to which embodiments of the present application are applicable. The wireless communication system includes a terminal 11 and a network device 12. Wherein, the terminal 11 may also be called as a terminal Device or a User Equipment (UE), the terminal 11 may be a Mobile phone, a Tablet Personal Computer (Tablet Personal Computer), a Laptop Computer (Laptop Computer) or a notebook Computer, a Personal Digital Assistant (PDA), a palmtop Computer, a netbook, an Ultra-Mobile Personal Computer (UMPC), a Mobile Internet Device (MID), a Wearable Device (Wearable Device) or a vehicle-mounted Device (VUE), a pedestrian terminal (PUE), and other terminal side devices, the Wearable Device includes: bracelets, earphones, glasses and the like. It should be noted that the embodiment of the present application does not limit the specific type of the terminal 11. The network device 12 may be a Base Station or a core network, wherein the Base Station may be referred to as a node B, an evolved node B, an access Point, a Base Transceiver Station (BTS), a radio Base Station, a radio Transceiver, a Basic Service Set (BSS), an Extended Service Set (ESS), a node B, an evolved node B (eNB), a home node B, a home evolved node B, a WLAN access Point, a WiFi node, a Transmit Receiving Point (TRP), or some other suitable terminology in the field, as long as the same technical effect is achieved, the Base Station is not limited to a specific technical vocabulary, and it should be noted that only the Base Station in the NR system is taken as an example in the present embodiment, but the specific type of the Base Station is not limited.

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only some embodiments of the present application, and not all embodiments. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments in the present application without making any creative effort belong to the protection scope of the present application.

As shown in fig. 2, an embodiment of the present invention provides a method for establishing a communication path, where the method is performed by an application function entity, and the method includes:

step 201: and acquiring application layer data sent by the first terminal UE, wherein the application layer data comprises an identifier of the second UE.

Here, the first UE transmits application-layer data containing a representation of the second UE to indicate that the first UE wishes to establish a data transmission path with the second UE. The first UE may be specifically a calling UE, and the second UE is a called UE.

Step 202: and sending first request information to first network equipment, wherein the first request information is used for requesting to establish a data transmission path between the first UE and the second UE.

In the embodiment of the present invention, the data transmission path between the first UE and the second UE refers to that application data is directly transmitted between anchor points UPFs of the two UEs, and does not need to be relayed through a data network (for example, does not need to be forwarded through an N6 interface), and the data transmission path may be referred to as an end-to-end communication path, and may also be another communication path, which is not specifically limited herein.

The application function entity may include at least one of an application server and an application function of an operator-deployed control panel.

The first Network device may be specifically a Policy Control Function (PCF) entity or a Network Exposure Function (NEF).

Here, after the functional entity sends the first request information to the first network device, the first network device sends the first request information to a Mobility Management Function (AMF) or a Session Management Function (SMF), and the AMF or SMF triggers the establishment of the data transmission path, so that the purpose of dynamically establishing an end-to-end data communication path between UEs based on a request of an application layer is achieved.

Optionally, the first request information includes one or more of:

indication information, wherein the indication information is used for indicating that a data transmission path is established between the first UE and the second UE;

an identity of the first UE;

an identity of the second UE;

data Network Name (DNN);

single Network Slice Selection Assistance Information (S-NSSAI).

Optionally, after acquiring the application layer data sent by the first terminal UE, the method of the embodiment of the present invention further includes:

In the embodiment of the present invention, after receiving application layer data sent by a first UE, an application function entity may determine an identifier of the first UE, for example, determine the identifier of the first UE according to website information of the application layer data sent by the first UE.

Optionally, the method in the embodiment of the present invention further includes:

acquiring a registration request sent by target UE, wherein the registration request comprises one or more of a communication path type of application layer data of the target UE, an identification of the target UE and an identification of a user of the target UE;

In the embodiment of the invention, an application function entity maintains a UE list (a preset terminal identification list), wherein the UE list comprises the identification of UE which can transmit the application layer data of the UE through an end-to-end communication path. When the UE registers in the application server, the UE can provide the application server with the communication path type, user identification (name and/or identity card number), UE identification, access technology used by the UE and the like which are preferred for transmitting user data. When the calling UE wishes to communicate with the called UE, the calling UE sends the identity of the called UE to the application server. The application server judges whether the UE identifications of the calling UE and the called UE are both located in the UE list, and if so, the application server determines to transmit communication data between the calling UE and the called UE by using an end-to-end communication path. Specifically, as shown in fig. 3, the process may include:

step 301: the UE sends a registration request to the application server.

Step 302: and the application server determines that the application layer data of the UE can be transmitted through an end-to-end communication path according to the information provided by the UE and/or a preset strategy, and adds the identifier of the UE into a locally maintained UE list.

Step 303: the application server returns a registration confirmation to the UE.

Step 304: the UE sends a communication request to the application server, wherein the communication request comprises the identification of the called UE.

Step 305: and if the identification of the calling UE and the identification of the called UE are both in the UE list, determining to establish a data communication path between the calling UE and the called UE.

In addition, in the above embodiment, when the end-to-end path is used to transmit data, the data does not need to be relayed by the application server, so that there may be a security risk, for example, an attacker may use this method to distribute unreal information, or send a large amount of information to a correspondent node at the same time, so that the UE of the correspondent node cannot work because the CPU is occupied. To avoid this problem, the application server also requests authentication and authorization of the user/UE from the security server before determining to join the UE to the UE list. Only authenticated and authorized UEs can be added to the UE list.

Based on this, determining whether the application layer data of the target UE can be transmitted through the data transmission path according to the registration request and/or a preset policy includes:

In an embodiment of the present invention, as shown in fig. 4, the method includes:

step 401: the UE sends a registration request to the application server.

Step 402: the application server sends an authentication and authorization request to the security server.

The authentication and authorization request includes at least one of a user identity and a UE identity. The security server analyzes the security level of the UE/user according to the Internet access habit of the UE (the data analysis result generated by the UE can be acquired from the NWDAF of the network), based on the information issued by the network (by using a big data search technology), the habit of the UE using the application, the data generated by the application and the like, if the security level exceeds a specific threshold, the authentication and the authorization are successful, otherwise, the authentication and the authorization fail.

Step 403: the security server sends authentication and authorization confirmation to the application server, and the message carries authentication and authorization results.

Step 404: and the application server determines whether to add the UE into the UE list or not according to a result returned by the security server, information in the registration request and/or a preset strategy.

This step 404 is performed in case the result of step 403 is successful.

Step 405: the application server returns a registration confirmation to the UE.

Step 406: the UE sends a communication request to the application server, wherein the communication request comprises the identification of the called UE.

Step 407: and if the identification of the calling UE and the identification of the called UE are both in the UE list, determining to establish a data communication path between the calling UE and the called UE.

Further, when two UEs start to use the end-to-end communication path to transfer application layer data, the application server also requests the network to provide information of the amount of data transferred between the two UEs, and the application server performs statistical analysis on the information, and if an abnormality is found, requests the network to release the end-to-end communication path between the two UEs. Or the application server requests the security server to analyze the security level of the UE, and when the result returned by the security server is lower than a certain threshold, the application server requests the network to terminate the end-to-end communication path between the security server and the UE. Based on this, the method of the embodiment of the present invention further includes:

as an optional implementation manner, after receiving the first reply message, the method further includes:

sending a data analysis request to a second network device;

As another optional implementation manner, after receiving the first reply message, the method further includes:

sending a security analysis request to a security server;

The following describes an implementation procedure for requesting release of an end-to-end communication path between two UEs in the embodiment of the present invention with reference to fig. 5.

As shown in fig. 5, the process includes:

step 501a: the application server requests to send a data analysis request to the network; or step 501b: the application server sends a communication security analysis request to the security server.

The Network may be embodied as a Network Data analysis Function (NWDAF) or NEF. The data analysis request may contain an identity of the calling UE and an identity of the called UE.

The communication security analysis request is used for requesting to analyze the security of the communication between the calling and called UEs.

Step 502a: the network sends a data analysis reply to the application server; or step 502b: the security server returns a communication security analysis reply.

For example, the data analysis reply may be a plot of the amount of data generated by the two communicating over time. The communication security analysis reply may include a security level of at least one of the first UE and the second UE.

Step 503: the application server decides to stop the end-to-end communication path and sends a release request to the network.

Step 504: the AMF/SMF transfers the end-to-end communication path to the communication path via the N6 interface.

Step 505: the network returns a terminating end-to-end communication path acknowledgment to the application server.

In the method for establishing a communication path according to the embodiment of the present invention, after the function sends the first request message to the first network device, the first network device sends the first request message to the AMF or the SMF, and the AMF or the SMF triggers the establishment of the data transmission path, thereby achieving the purpose of dynamically establishing an end-to-end data communication path between UEs based on a request of an application layer.

As shown in fig. 6, an embodiment of the present invention further provides a method for establishing a communication path, where the method is applied to a first network device, where the first network device may specifically be a PCF or a NEF, and the method includes:

step 601: the method comprises the steps of obtaining first request information sent by an application function entity, wherein the first request information is used for requesting to establish a data transmission path between first UE and second UE.

Step 602: and sending the first request message to a mobile management function (AMF) or a Session Management Function (SMF), and triggering and establishing the data transmission path by the AMF or the SMF.

In the embodiment of the invention, first request information sent by an application function entity is obtained, the first request information is sent to a mobile management function AMF or a session management function SMF, and the AMF or the SMF triggers the establishment of the data transmission path, thereby realizing the aim of dynamically establishing an end-to-end data communication path between UE based on the request of an application layer.

Optionally, the first request information includes one or more of:

an identity of the first UE;

an identity of the second UE;

a data network name DNN;

the single network slice selects the side information S-NSSAI.

Optionally, sending the first request message to the AMF includes:

sending second request information to a unified data management function (UDM), wherein the second request information is used for requesting to acquire information of a service AMF (advanced metering framework), and the service AMF comprises one or more items of an AMF corresponding to the first UE and an AMF corresponding to the second UE;

In the embodiment of the present invention, the AMF corresponding to the first UE and the AMF corresponding to the second UE may be the same AMF or different AMFs.

Optionally, sending the first request message to the SMF includes:

and sending the first request information to the service SMF according to the information of the service SMF.

In the embodiment of the present invention, the SMF corresponding to the first UE and the SMF corresponding to the second UE may be the same SMF or different SMFs.

As shown in fig. 7, an embodiment of the present invention further provides a method for establishing a communication path, which is applied to a mobility management function AMF, and includes:

step 701: the method comprises the steps of obtaining first request information sent by first network equipment, wherein the first request information is used for requesting to establish a data transmission path between first terminal UE and second UE.

The first request message is sent by the application function entity to the first network device.

Step 702: and triggering and establishing the data transmission path according to the first request information.

In the embodiment of the invention, first request information sent by first network equipment is obtained, and the first request information is sent to the first network equipment by an application function entity; and triggering the establishment of the data transmission path according to the first request information, thereby realizing the purpose of dynamically establishing an end-to-end data communication path between the UE based on the request of an application layer.

Optionally, the first request information includes one or more of:

an identity of the first UE;

an identity of the second UE;

a data network name DNN;

the single network slice selects the side information S-NSSAI.

wherein the fourth request message includes one or more of:

an identity of the first UE;

an identity of the second UE;

DNN；

S-NSSAI；

the fourth reply message comprises one or more of:

result indication information, wherein the result indication information is used for indicating whether the data transmission path is successfully established or not;

the first SM information;

the second SM information.

It should be noted that the first SM information is specifically information related to a first PDU session, where the first PDU session is a PDU session corresponding to the first terminal, and is specifically a PDU session established through an anchor UPF (first UPF) of the first terminal. The first SM information may include N19 tunnel information allocated by the first UPF.

The second SM information is specifically information related to a second PDU session, where the second PDU session is a PDU session corresponding to the second terminal, and specifically is a PDU session established through an anchor point UPF (second UPF) of the second terminal. The second SM information may include N19 tunnel information of the second UPF allocation.

The serving SMF includes one or more of an SMF corresponding to the first UE and an SMF corresponding to the second UE. The SMF corresponding to the first UE and the SMF corresponding to the second UE may be the same or different.

In an embodiment of the present invention, if the SMF corresponding to the first UE is the same as the SMF corresponding to the second UE, the fourth request message may include one or more of the following: an identity of the first UE; an identity of the second UE; DNN; S-NSSAI; a first session management SM information; the second session manages SM information. The fourth reply message may include the result indication information.

In another specific embodiment of the present invention, if the SMF corresponding to the first UE is different from the SMF corresponding to the second UE, the fourth request message is sent to the first SMF and the second SMF, respectively. The first SMF is a serving SMF of the first UE, and the second SMF is a serving SMF of the second UE. The fourth request message sent to the first SMF or the fourth request message sent to the second SMF includes one or more of: indication information; an identity of the first UE; an identity of the second UE; DNN; S-NSSAI. The first SMF and the second SMF return fourth reply messages to the corresponding AMF, respectively, the fourth reply message returned by the first SMF to the corresponding AMF may include the first SM information, and the fourth reply message returned by the second SMF to the corresponding AMF may include the second SM information.

As shown in fig. 8, an embodiment of the present invention further provides a method for establishing a communication path, which is applied to a session management function SMF, and includes:

step 801: the method comprises the steps of obtaining first request information sent by first network equipment, wherein the first request information is used for requesting to establish a data transmission path between first terminal UE and second UE.

Step 802: and triggering and establishing the data transmission path according to the first request information.

In the embodiment of the invention, first request information sent by first network equipment is obtained, and the first request information is sent to the first network equipment by an application function entity; and triggering and establishing the data transmission path according to the first request information, thereby realizing the purpose of dynamically establishing an end-to-end data communication path between the UE based on the request of an application layer.

Optionally, the first request information includes one or more of:

an identity of the first UE;

an identity of the second UE;

a data network name DNN;

the single network slice selects the side information S-NSSAI.

sending the first request information to an AMF according to at least one of indication information in the first request information, an identifier of a first UE and an identifier of a second UE, wherein the indication information is used for indicating that a data transmission path is established between the first UE and the second UE;

acquiring a fourth request message sent by the AMF;

sending a fourth reply message according to the fourth request message;

wherein the fourth request message includes one or more of:

an identity of the first UE;

an identity of the second UE;

DNN；

S-NSSAI；

the fourth reply message includes one or more of:

the first SM information;

the second SM information.

Here, the specific interaction process between the SMF and the AMF is already described in the above embodiment of the method on the AMF side, and is not described here again.

In the embodiment of the invention, first request information sent by first network equipment is obtained, and the first request information is sent to the first network equipment by an application function entity; and triggering and establishing the data transmission path according to the first request information, thereby realizing the aim of dynamically establishing an end-to-end data communication path between the UE based on the request of an application layer.

The following describes a method for establishing a communication path according to an embodiment of the present invention with reference to a specific embodiment.

The first embodiment is as follows: the first UE is a calling UE, the second UE is a called UE, and the service SMF of the first UE is the same as that of the second UE. In this embodiment, an application server (which may be an IMS server or a specific application server) sends application layer information to the PCF/NEF, the PCF/NEF obtains information of a serving AMF of a calling UE/a called UE from the UDM, and the serving AMF triggers an end-to-end communication path establishment procedure, specifically, as shown in fig. 9, the procedure includes:

step 901: the calling UE initiates a PDU session setup procedure.

Step 902: the calling UE sends application layer data to the application server, wherein the application layer data comprises the identification of the called UE, namely, the calling UE is indicated to want to communicate with the called UE.

Step 903: the application server decides to establish a data transmission path between the calling UE and the called UE.

Step 904: the application server sends the first request message to the PCF/NEF.

The first request information is used for requesting to establish a data transmission path between the first terminal UE and the second UE, and the first request information comprises indication information, an identifier of the first UE and an identifier of the second UE, and the indication information is used for indicating to establish the data transmission path between the first UE and the second UE.

Step 905: PCF/NEF sends service AMF request message to UDM, and UDM returns service AMF information to PCF/NEF.

The serving AMF request message may be specifically a numm _ UECM _ Get message, and the numm _ UECM _ Get message may include an identifier of the calling UE and/or the called UE, requesting the UDM to provide the serving AMF of the corresponding UE.

Step 906: the PCF/NEF sends a connection setup request to the serving AMF.

The connection establishment request may include one or more of: the indication information, the identity of the first UE, the identity of the second UE, DNN and S-NSSAI.

Step 907: the service AMF searches the context of the called UE, judges whether the related PDU session is established or not, if the related PDU session is not established, the AMF selects the SMF, and the AMF sends the connection establishment request to the SMF.

If the called UE does not establish the related PDU session, then step 908 to step 910 are executed, otherwise, step 911 is executed directly.

Step 908: the SMF sends a session management message to the AMF.

The session management message may be specifically a naf _ Communication _ N1N2message transfer message, where the naf _ Communication _ N1N2message transfer message includes a user Permanent Identifier (SUPI) of the called UE and an N1 message, and the N1 message is used to request the called UE to establish a PDU session for transmitting end-to-end service data.

Step 909: the AMF sends a downlink non-access stratum NAS message (N1 message) to the called UE.

Step 910: the called UE establishes a PDU session for transmitting end-to-end service data.

Step 911: the SMF establishes an N19 tunnel between UPF1 and UPF2.

In the embodiment of the invention, the UPF1 is an anchor point UPF of a first UE (calling UE), and the UPF2 is an anchor point UPF of a second UE (called UE).

Step 912: the SMF returns a connection establishment reply to the AMF.

Step 913: the AMF returns a connection setup reply to the PCF/NEF.

Step 914: the PCF/NEF sends a first reply message to the application server.

The first reply message indicates that the end-to-end transmission path has been successfully established.

Step 915: and the application server sends the application layer data to the calling UE.

Here, the end-to-end transmission path has been successfully established by sending application layer data to the calling UE. After this step, the application layer data may be transmitted between UE1 and UE2 via an end-to-end data transmission path.

The second embodiment: this embodiment adds to the first embodiment, that is, the calling UE and the called UE are served by different SMFs, and it is assumed that the serving SMF of the calling UE (UE 1) is SMF1, the serving SMF of the called UE (UE 2) is SMF2, the anchor point UPF of the first UE is UPF1, and the anchor point UPF of the second UE is UPF2. The specific process is shown in fig. 10, and includes:

step 1001: the calling UE initiates a PDU session setup procedure.

Step 1002: the calling UE sends application layer data to the application server, wherein the application layer data comprises the identification of the called UE, namely, the calling UE is indicated to want to communicate with the called UE.

Step 1003: the application server decides to establish a data transmission path between the calling UE and the called UE.

Step 1004: the application server sends the first request message to the PCF/NEF.

The first request information is used for requesting to establish a data transmission path between the first terminal UE and the second UE, the first request information comprises indication information, an identification of the first UE and an identification of the second UE, and the indication information is used for indicating to establish the data transmission path between the first UE and the second UE.

Step 1005: the PCF/NEF obtains information of a serving AMF of the called UE from the UDM.

Specifically, the information of the serving AMF of the called UE is acquired by transmitting a numm _ UECM _ Get message to the UDM.

Step 1006: the PCF/NEF sends a connection setup request to the AMF.

The connection establishment request may include one or more of: the indication information, the identity of the first UE, the identity of the second UE, DNN, and S-NSSAI.

In this step, the AMF locally configures information such as DNN and S-NSSAI for end-to-end communication, or the PCF/NEF provides information such as DNN and S-NSSAI to the AMF. The AMF in this step may be specifically the serving AMF in step 1005 described above.

Step 1007: the AMF forwards the connection establishment request to the SMF of the called UE.

The following steps 1008 to 1010 are optional steps, if the called UE does not establish the related PDU session, the SMF2 performs steps 1008 to 1010, otherwise, jumps to step 1011.

Step 1008: SMF2 sends a session management message to AMF.

The session management message may specifically be a naf _ Communication _ N1N2message transfer message, where the naf _ Communication _ N1N2message transfer message includes a user persistent Identifier (SUPI) of the called UE and an N1 message, and the N1 message is used to request the called UE to establish a PDU session for transmitting end-to-end service data.

Step 1009: the AMF sends a downlink non-access stratum NAS message (N1 message) to the called UE.

Step 1010: the called UE initiates a PDU session setup procedure. During the N4 session establishment, the SMF requests the UPF2 to assign N19 tunnel information.

Step 1011: SMF2 sends a PDU session setup request to AMF.

The PDU session setup request includes the identity of the calling UE, an indication of the end-to-end communication and session management SM information, including the N19 tunnel information assigned by the UPF2.

Step 1012: the AMF sends a PDU session setup request to SMF 1.

Step 1013: because the UE1 has established the PDU session required for transmitting end-to-end service data, the SMF1 initiates an N4 session modification procedure, sends the N19 tunnel allocated by the UPF2 to the UPF1, and requests the UPF1 to allocate N19 tunnel information.

Step 1014: SMF1 sends a PDU session setup reply to AMF.

The PDU session setup reply includes an SM message including the N19 tunnel information assigned by the UPF 1.

Step 1015: the AMF sends a PDU session setup reply to SMF2.

The PDU session setup reply in this step is specifically the PDU session setup reply in step 1014 described above.

Step 1016: SMF2 initiates an N4 session modification procedure to send the N19 tunnel information of UPF1 to UPF2.

Step 1017: SMF2 sends a connection establishment reply to AMF.

Step 1018: the AMF sends a connection setup reply to the PCF/NEF.

Step 1019: the PCF/NEF returns a first reply message to the application server.

Step 1020: and the application server sends the application layer data to the calling UE.

It should be noted that, in the second embodiment, the AMF interacts with the SMF of the called UE first, establishes a PDU session and allocates N19 tunnel information on the called side, and then interacts with the SMF of the calling UE to notify the N19 tunnel information of the called side to the calling side. The AMF may also interact with the SMF of the calling UE first, and after the calling side allocates the N19 tunnel information, the AMF interacts with the SMF of the called UE, notifies the called side of the N19 tunnel information allocated by the calling side, and triggers the SMF of the called UE to establish the PDU session and allocate the N19 tunnel information. In this scenario, the modification to the upper graph is as follows:

1. the AMF may also send a connection setup request to the SMF of the calling UE (i.e., SMF 1) in step 1007, and SMF1 performs step 1013 and then sends the PDU session setup request of step 1011 to the SMF of the called UE (i.e., SMF 2) through the AMF.

2. SMF2 is responsible for triggering the execution of steps 1008-1010 and then returns the N19 tunnel information for UPF2 to SMF1 via AMF in step 1015.

Example three: since the calling UE triggers the communication setup via the user plane, the calling UE has already established a PDU session for transmitting application layer data. According to the prior art, the SMF stores the information of the PDU session in the UDM during the PDU session setup procedure. The embodiment is different from the first embodiment, the PCF/NEF acquires the information of the SMF of the calling UE from the UDM, and the SMF triggers the end-to-end communication path establishment procedure. The specific process is shown in fig. 11, and includes:

step 1101: the calling UE initiates a PDU session setup procedure.

Step 1102: the calling UE sends application layer data to the application server, wherein the application layer data comprises the identification of the called UE, namely, the calling UE is indicated to be in communication with the called UE.

Step 1103: the application server decides to establish a data transmission path between the calling UE and the called UE.

Step 1104: the application server sends the first request message to the PCF/NEF.

Step 1105: PCF/NEF sends PDU session information acquisition request to UDM, and UDM provides information of SMF of PDU session to PCF/NEF.

The PDU session information obtaining request may specifically be a numm _ SDM _ Get message, where the message is used to request to obtain information of a PDU session established by the calling UE and used for transmitting end-to-end service data, and the PDU session information obtaining request may include at least one of an identifier of the calling UE, DNN, S-NSSAI, and an end-to-end data transmission instruction, where DNN and S-NSSAI may be information related to transmitting end-to-end service data included in configuration data of the PCF/NEF, or may be provided to the PCF/NEF by the application server in step 1104.

Step 1106: PCF/NEF sends a connection setup request to SMF.

If the SMF finds that the called UE has not established a PDU session for transmitting end-to-end service data, steps 1107-1109 are performed, otherwise steps 1107-1109 are skipped.

Step 1107: the SMF sends a session management message to the AMF.

Step 1108: the AMF sends a downlink non-access stratum NAS message (N1 message) to the called UE.

Step 1109: the called UE establishes a PDU session for transmitting end-to-end service data.

Step 1110: the SMF establishes an N19 tunnel between UPF1 and UPF2.

Step 1111: the SMF returns a connection establishment reply to the PCF/NEF, indicating that the end-to-end transmission path has been successfully established.

Step 1112: the PCF/NEF sends a first reply message to the application server indicating that the end-to-end transmission path has been successfully established.

Step 1113: and the application server sends the application layer data to the calling UE.

Example four: the embodiment enhances the third embodiment, in which the serving SMFs of the calling UE and the called UE are the same SMF, and in this embodiment, the calling UE and the called UE are served by different SMFs. As shown in fig. 12, this embodiment includes:

step 1201: the calling UE initiates a PDU session setup procedure.

Step 1202: the calling UE sends application layer data to the application server, wherein the application layer data comprises the identification of the called UE, namely, the calling UE is indicated to want to communicate with the called UE.

Step 1203: the application server decides to establish a data transmission path between the calling UE and the called UE.

Step 1204: the application server sends the first request message to the PCF/NEF.

Step 1205: PCF/NEF sends PDU session information acquisition request to UDM, and UDM provides information of SMF of PDU session to PCF/NEF.

The PDU session information obtaining request may specifically be a numm _ SDM _ Get message, where the message is used to request to obtain information of a PDU session established by the calling UE for transmitting end-to-end service data, and the PDU session information obtaining request may include at least one of an identifier of the calling UE, DNN, S-NSSAI, and an end-to-end data transmission indication, where DNN and S-NSSAI may be information related to transmitting end-to-end service data included in configuration data of the PCF/NEF, or may be provided by the application server to the PCF/NEF in step 1204.

Step 1206: the PCF/NEF sends a connection setup request to SMF 1.

Step 1207: the SMF1 does not find the information of the called UE locally, and the SMF1 sends an AMF2 information acquisition request to the UDM.

The AMF2 information obtaining request may specifically be a Nudm _ SDM _ Get message, the AMF2 is specifically an AMF of the called UE, and the AMF1 of the AMF2 that is the calling UE may be the same AMF or different AMFs.

Step 1208: SMF1 sends a connection establishment request to AMF 2.

The connection establishment request may include an identification of the called UE, an indication to establish an end-to-end communication path, and SM information including N19 tunnel information allocated by SMF1 requesting UPF 1.

The AMF searches whether the called UE establishes the PDU session for transmitting the end-to-end service communication data (for example, whether the called UE establishes the PDU session related to a specific DNN or a specific S-NSSAI) according to the context of the called UE. If established, the steps in block (a) are performed, otherwise the steps in block (B) are performed.

The steps (1209) in block (A) are as follows:

step 1209: AMF2 sends a connection establishment request to SMF2.

The SMF2 is the serving SMF of the PDU session found by the AMF2 in step 1208, and the connection establishment request includes the identity of the called UE and an indication to establish end-to-end communication.

The steps (1210-1214) in block (B) are as follows:

step 1210: AMF2 selects SMF2.

The SMF selected by AMF2 is marked as SMF2.

Step 1211: the AMF sends a connection establishment request to the selected SMF2.

The connection establishment request includes an identity of the called UE, an indication to establish end-to-end communication. AMF may also provide DNN and S-NSSAI.

Step 1212: SMF2 sends a session management message to AMF.

Step 1213: the AMF sends a downlink non-access stratum NAS message (N1 message) to the called UE.

Step 1214: the called UE establishes a PDU session for transmitting end-to-end service data.

Step 1215: SMF2 sends an N4 session modification procedure to UPF2, allocating the N19 tunnel information needed for the transmission of end-to-end traffic data.

Step 1216: SMF2 sends a connection establishment reply to AMF.

The connection setup reply includes the N19 tunnel information assigned at step 1215.

Step 1217: the AMF sends a connection establishment reply to SMF 1.

The connection establishment reply includes the UPF2 assigned N19 tunnel information.

Step 1218: SMF1 initiates an N4 session modification procedure to UPF1, the message including the N19 tunnel information assigned by UPF2. So far, the establishment of the N19 tunnel between the UPF1 and the UPF2 is successful.

Step 1219: SMF1 returns a connection establishment reply to PCF/NEF, which indicates that the end-to-end transmission path is successfully established.

Step 1220: the PCF/NEF sends a first reply message to the application server indicating that the end-to-end transmission path has been successfully established.

Step 1221: and the application server sends the application layer data to the calling UE.

In the method of the embodiment of the present invention, after the Function sends the first request information to the first network device, the first network device sends the first request information to a Mobility Management Function (AMF) or a Session Management Function (SMF), and the AMF or the SMF triggers the establishment of the data transmission path, thereby achieving the purpose of dynamically establishing an end-to-end data communication path between UEs based on the application layer request.

As shown in fig. 13, an embodiment of the present invention provides an apparatus for establishing a communication path, including a memory 1320, a transceiver 1300, a processor 1310;

a memory 1320 for storing computer programs; a transceiver 1300 for transceiving data under the control of the processor 1310;

in the first embodiment of the present invention, the processor 1310 is configured to read the computer program in the memory 1320 and execute the following operations:

Optionally, the first request information includes one or more of:

an identity of the first UE;

an identity of the second UE;

a data network name DNN;

the single network slice selects the side information S-NSSAI.

Optionally, the processor is further configured to perform the following operations:

Optionally, the processor performs a step of determining whether the application layer data of the target UE can be transmitted through the data transmission path according to the registration request and/or a preset policy, including:

Optionally, after the transceiver transmits the first request message to the first network device, the transceiver is further configured to:

Optionally, after receiving the first reply message through the transceiver, the processor is further configured to:

sending a data analysis request to a second network device through a transceiver;

acquiring a data analysis result fed back by the second network equipment according to the data analysis request through a transceiver;

and if the data analysis result does not meet the preset condition, sending a release request of the data transmission path through a transceiver.

Optionally, after receiving the first reply message by the transceiver, the processor is further configured to:

sending a security analysis request to a security server through a transceiver;

obtaining, by a transceiver, a security analysis result sent by the security server according to the security analysis request, where the security analysis result includes a security level of at least one of the first UE and the second UE;

and sending a release request of the data transmission path through a transceiver under the condition that the security level is lower than a second preset level threshold value.

In a second embodiment of the invention, a processor is operative to read the computer program in the memory and perform the following:

Optionally, the processor performs the step of sending the first request message to the AMF through the transceiver, including:

sending second request information to a unified data management function (UDM) through a transceiver, wherein the second request information is used for requesting to acquire information of a service AMF (advanced resource management) which comprises one or more items of an AMF corresponding to the first UE and an AMF corresponding to the second UE;

obtaining, by a transceiver, information of a serving AMF fed back by the UDM according to the second request information;

and sending the first request message to the service AMF through a transceiver according to the information of the service AMF.

Optionally, the processor performs the step of sending the first request message to the SMF via the transceiver, including:

sending third request information to the UDM through a transceiver, where the third request information is used to request to acquire information of a serving SMF, where the serving SMF includes one or more of an SMF corresponding to the first UE and an SMF corresponding to the second UE;

obtaining, by a transceiver, information of a serving SMF fed back by the UDM according to the third request information;

and sending the first request message to the service SMF through a transceiver according to the information of the service SMF.

In a third embodiment of the invention, a processor is configured to read the computer program in the memory and perform the following operations:

Optionally, the processor executes a step of triggering establishment of the data transmission path according to the first request information, where the step includes:

sending a fourth request message to a serving SMF through a transceiver according to at least one of an identifier of a first UE, an identifier of a second UE and indication information in the first request message, wherein the indication information is used for indicating that a data transmission path is established between the first UE and the second UE;

acquiring a fourth reply message returned by the service SMF according to the fourth request message through a transceiver;

wherein the fourth request message comprises one or more of:

an identity of the first UE;

an identity of the second UE;

DNN；

S-NSSAI；

the fourth reply message includes one or more of:

the first SM information;

the second SM information.

In a fourth embodiment of the invention, a processor is configured to read the computer program in the memory and perform the following operations:

sending the first request information to the AMF through a transceiver according to at least one of indication information in the first request information, an identifier of a first UE and an identifier of a second UE, wherein the indication information is used for indicating that a data transmission path is established between the first UE and the second UE;

acquiring a fourth request message sent by the AMF through the transceiver;

sending a fourth reply message through the transceiver according to the fourth request message;

wherein the fourth request message includes one or more of:

an identity of the first UE;

an identity of the second UE;

DNN；

S-NSSAI；

second session management SM information, wherein the second SM information is SM information corresponding to second UE;

the fourth reply message includes one or more of:

the first SM information;

the second SM information.

Optionally, in the above embodiment, the first request information includes one or more of the following items:

an identity of the first UE;

an identity of the second UE;

a data network name DNN;

the single network slice selects the side information S-NSSAI.

In fig. 13, among other things, the bus architecture may include any number of interconnected buses and bridges with various circuits being linked together, particularly one or more processors represented by processor 1310 and memory represented by memory 1320. The bus architecture may also link together various other circuits such as peripherals, voltage regulators, power management circuits, and the like, which are well known in the art, and therefore, will not be described any further herein. The bus interface provides an interface. The transceiver 1300 may be a plurality of elements including a transmitter and a receiver that provide a means for communicating with various other apparatus over a transmission medium including wireless channels, wired channels, fiber optic cables, and the like. The processor 1310 is responsible for managing the bus architecture and general processing, and the memory 1320 may store data used by the processor 1310 in performing operations.

The processor 1310 may be a Central Processing Unit (CPU), an Application Specific Integrated Circuit (ASIC), a Field Programmable Gate Array (FPGA), or a Complex Programmable Logic Device (CPLD), and may also have a multi-core architecture.

It should be noted that, the apparatus provided in the embodiment of the present invention can implement all the method steps implemented in the embodiment of the method for establishing a communication path, and can achieve the same technical effect, and details of the same parts and beneficial effects as those in the embodiment of the method are not described herein again.

As shown in fig. 14, an embodiment of the present invention further provides a device for establishing a communication path, which is applied to an application function entity, and includes:

a first obtaining unit 1401, configured to obtain application layer data sent by a first terminal UE, where the application layer data includes an identifier of a second UE;

a first sending unit 1402, configured to send first request information to the first network device, where the first request information is used to request that a data transmission path is established between the first terminal UE and the second UE.

Optionally, the first request information includes one or more of:

an identity of the first UE;

an identity of the second UE;

a data network name DNN;

the single network slice selects the side information S-NSSAI.

Optionally, the apparatus in the embodiment of the present invention further includes:

a first determining unit, configured to determine to establish the data transmission path if the identifier of the first UE and the identifier of the second UE are both terminal identifiers in a preset terminal identifier list, where the preset terminal identifier list includes at least one terminal identifier.

a fifth obtaining unit, configured to obtain a registration request sent by a target UE, where the registration request includes one or more of a communication path type for transmitting application layer data of the target UE, an identifier of the target UE, and an identifier of a user of the target UE;

a second determining unit, configured to determine whether the application layer data of the target UE can be transmitted through the data transmission path according to the registration request and/or a preset policy;

and a third processing unit, configured to add the identifier of the target UE to the preset terminal identifier list if it is determined that the application layer data of the target UE can be transmitted through the data transmission path.

Optionally, the second determining unit includes:

a first sending subunit, configured to send an authentication and authorization request to a security server according to the registration request, where the authentication and authorization request includes one or more of an identifier of the target UE and an identifier of a user of the target UE;

a first determining subunit, configured to determine, according to the registration request and/or a preset policy, whether to transmit application layer data of the target UE through the data transmission path if authentication and authorization confirmation sent by the security server is received, where the authentication and authorization confirmation is sent by the security server when it is determined that a security level of the target UE or the user is greater than a first preset level threshold.

a receiving unit, configured to receive a first reply message, where the first reply message is used to indicate that a data transmission path has been successfully established between the first UE and the second UE.

a third sending unit, configured to send a data analysis request to the second network device after the receiving unit receives the first reply message;

a sixth obtaining unit, configured to obtain a data analysis result fed back by the second network device according to the data analysis request;

and the fourth sending unit is used for sending the release request of the data transmission path if the data analysis result does not meet the preset condition.

a fifth sending unit, configured to send a security analysis request to the security server after the first receiving unit receives the first reply message;

a seventh obtaining unit, configured to obtain a security analysis result sent by the security server according to the security analysis request, where the security analysis result includes a security level of at least one of the first UE and the second UE;

a sixth sending unit, configured to send a release request of the data transmission path when the security level is lower than a second preset level threshold.

It should be noted that, the apparatus for establishing a communication path according to the embodiment of the present invention can implement all the method steps implemented by the method for establishing a communication path on the application function entity side, and can achieve the same technical effect, and detailed descriptions of the same parts and beneficial effects as those of the method embodiment in this embodiment are omitted here.

As shown in fig. 15, an embodiment of the present invention further provides an apparatus for establishing a communication path, which is applied to a first network device, and includes:

a second obtaining unit 1501, configured to obtain first request information sent by an application function entity, where the first request information is used to request that a data transmission path is established between a first UE and a second UE;

a second sending unit 1502, configured to send the first request message to a mobility management function AMF or a session management function SMF, where the AMF or the SMF triggers establishment of the data transmission path.

Optionally, the first request information includes one or more of:

an identity of the first UE;

an identity of the second UE;

a data network name DNN;

the single network slice selects the side information S-NSSAI.

Optionally, the second sending unit includes:

a second sending subunit, configured to send second request information to a unified data management function UDM, where the second request information is used to request to obtain information of a serving AMF, and the serving AMF includes one or more of an AMF corresponding to the first UE and an AMF corresponding to the second UE;

a first obtaining subunit, configured to obtain information of a serving AMF fed back by the UDM according to the second request information;

and the third sending subunit is configured to send the first request message to the serving AMF according to the information of the serving AMF.

Optionally, the second sending unit includes:

a fourth sending subunit, configured to send third request information to the UDM, where the third request information is used to request to obtain information of a serving SMF, and the serving SMF includes one or more of an SMF corresponding to the first UE and an SMF corresponding to the second UE;

a second obtaining subunit, configured to obtain information of the serving SMF fed back by the UDM according to the third request information;

and a fifth sending subunit, configured to send the first request information to the serving SMF according to the information of the serving SMF.

It should be noted that the apparatus for establishing a communication path according to the embodiment of the present invention can implement all the method steps implemented by the method for establishing a communication path on the first network device side, and can achieve the same technical effect, and details of the same parts and beneficial effects as those of the method embodiment in this embodiment are not repeated herein.

As shown in fig. 16, an embodiment of the present invention further provides a device for establishing a communication path, which is applied to a mobility management function AMF, and includes:

a third obtaining unit 1601, configured to obtain first request information sent by a first network device, where the first request information is used to request that a data transmission path is established between a first terminal UE and a second UE;

a first processing unit 1602, configured to trigger establishment of the data transmission path according to the first request information.

Optionally, the first request information includes one or more of:

an identity of the first UE;

an identity of the second UE;

a data network name DNN;

the single network slice selects the side information S-NSSAI.

Optionally, the first processing unit includes:

a sixth sending subunit, configured to send a fourth request message to a serving SMF according to at least one of an identifier of a first UE, an identifier of a second UE, and indication information in the first request message, where the indication information is used to indicate that a data transmission path is established between the first UE and the second UE;

a third obtaining subunit, configured to obtain a fourth reply message returned by the service SMF according to the fourth request message;

wherein the fourth request message includes one or more of:

the indication information is used for indicating that a data transmission path is established between the first UE and the second UE;

an identity of the first UE;

an identity of the second UE;

DNN；

S-NSSAI；

the fourth reply message includes one or more of:

the first SM information;

the second SM information.

It should be noted that, the apparatus for establishing a communication path according to the embodiment of the present invention can implement all the method steps implemented by the embodiment of the method for establishing a communication path on the AMF side, and can achieve the same technical effect, and details of the same parts and beneficial effects as those of the embodiment of the method are not described herein again.

As shown in fig. 17, an embodiment of the present invention further provides a device for establishing a communication path, which is applied to a session management function SMF, and includes:

a fourth obtaining unit 1701, configured to obtain first request information sent by a first network device, where the first request information is used to request that a data transmission path is established between a first terminal UE and a second UE;

a second processing unit 1702, configured to trigger establishment of the data transmission path according to the first request information.

Optionally, the first request information includes one or more of:

an identity of the first UE;

an identity of the second UE;

a data network name DNN;

the single network slice selects the side information S-NSSAI.

Optionally, the second processing unit includes:

a seventh sending subunit, configured to send the first request information to the AMF according to at least one of indication information in the first request information, an identifier of the first UE, and an identifier of the second UE, where the indication information is used to indicate that a data transmission path is established between the first UE and the second UE;

a fourth obtaining subunit, configured to obtain a fourth request message sent by the AMF;

an eighth sending subunit, configured to send a fourth reply message according to the fourth request message;

wherein the fourth request message includes one or more of:

the indication information;

an identity of the first UE;

an identity of the second UE;

DNN；

S-NSSAI；

the fourth reply message includes one or more of:

the first SM information;

the second SM information.

It should be noted that, the apparatus for establishing a communication path according to the embodiment of the present invention can implement all the method steps implemented by the method for establishing a communication path on an SMF side, and can achieve the same technical effect, and details of the same parts and beneficial effects as those of the method embodiment in this embodiment are not repeated herein.

It should be noted that the division of the unit in the embodiment of the present application is schematic, and is only a logic function division, and there may be another division manner in actual implementation. In addition, functional units in the embodiments of the present application may be integrated into one processing unit, or each unit may exist alone physically, or two or more units are integrated into one unit. The integrated unit can be realized in a form of hardware, and can also be realized in a form of a software functional unit.

The integrated unit, if implemented as a software functional unit and sold or used as a stand-alone product, may be stored in a processor readable storage medium. Based on such understanding, the technical solution of the present application may be substantially implemented or contributed by the prior art, or all or part of the technical solution may be embodied in a software product, which is stored in a storage medium and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device) or a Processor (Processor) to execute all or part of the steps of the method according to the embodiments of the present application. And the aforementioned storage medium includes: various media capable of storing program codes, such as a usb disk, a removable hard disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a magnetic disk, or an optical disk.

In some embodiments of the invention, there is also provided a processor-readable storage medium storing program instructions for causing a processor to perform steps of:

and sending first request information to the first network equipment, wherein the first request information is used for requesting to establish a data transmission path between the first terminal UE and the second UE.

Alternatively, the program instructions are for causing the processor to perform the steps of:

acquiring first request information sent by an application function entity through a transceiver, wherein the first request information is used for requesting to establish a data transmission path between first UE and second UE; and sending the first request message to a mobile management function (AMF) or a Session Management Function (SMF) through a transceiver, and triggering the establishment of the data transmission path by the AMF or the SMF.

acquiring first request information sent by first network equipment through a transceiver, wherein the first request information is used for requesting to establish a data transmission path between first terminal UE and second UE; and triggering and establishing the data transmission path according to the first request information.

When executed by the processor, the program instructions may implement all implementation manners in the above-described method for establishing a communication path, and are not described herein again to avoid repetition.

The terminal device referred to in the embodiments of the present application may refer to a device providing voice and/or data connectivity to a user, a handheld device having a wireless connection function, or another processing device connected to a wireless modem. In different systems, the names of the terminal devices may be different, for example, in a 5G system, the terminal device may be called a User Equipment (UE). A wireless terminal device, which may be a mobile terminal device such as a mobile phone (or called a "cellular" phone) and a computer having a mobile terminal device, for example, a portable, pocket, hand-held, computer-included or vehicle-mounted mobile device, may communicate with one or more Core Networks (CNs) via a Radio Access Network (RAN), and may exchange languages and/or data with the RAN. Examples of such devices include Personal Communication Service (PCS) phones, cordless phones, session Initiation Protocol (SIP) phones, wireless Local Loop (WLL) stations, and Personal Digital Assistants (PDAs). The wireless Terminal Device may also be referred to as a system, a Subscriber Unit (Subscriber Unit), a Subscriber Station (Subscriber Station), a Mobile Station (Mobile), a Remote Station (Remote Station), an Access Point (Access Point), a Remote Terminal Device (Remote Terminal), an Access Terminal Device (Access Terminal), a User Terminal Device (User Terminal), a User Agent (User Agent), and a User Device (User Device), which are not limited in this embodiment of the present application.

The network device according to the embodiment of the present application may be a base station, and the base station may include a plurality of cells for providing services to a terminal. A base station may also be referred to as an access point, or a device in an access network that communicates over the air-interface, through one or more sectors, with wireless terminal devices, or by other names, depending on the particular application. The network device may be configured to exchange received air frames with Internet Protocol (IP) packets as a router between the wireless terminal device and the rest of the access network, which may include an Internet Protocol (IP) communication network. The network device may also coordinate attribute management for the air interface. For example, the network device according to the embodiment of the present application may be a Base Transceiver Station (BTS) in a Global System for Mobile communications (GSM) or Code Division Multiple Access (CDMA), a network device (NodeB) in a Wideband Code Division Multiple Access (WCDMA), an evolved Node B (eNB or e-NodeB) in a Long Term Evolution (Long Term Evolution, LTE) System, a 5G Base Station (gNB) in a 5G network architecture (Next Generation), a Home evolved Node B (HeNB), a Relay Node (Relay Node), a Home Base Station (Femto), a Pico Base Station (Pico), and the like, which are not limited in the embodiments of the present application. In some network architectures, network devices may include Centralized Unit (CU) nodes and Distributed Unit (DU) nodes, which may also be geographically separated.

Multiple Input Multiple Output (MIMO) transmission may be performed between the network device and the terminal device by using one or more antennas, where the MIMO transmission may be Single User MIMO (SU-MIMO) or Multi-User MIMO (MU-MIMO). According to the form and the number of the root antenna combination, the MIMO transmission can be 2D-MIMO, 3D-MIMO, FD-MIMO or massive-MIMO, and can also be diversity transmission, precoding transmission, beamforming transmission, etc.

As will be appreciated by one skilled in the art, embodiments of the present application may be provided as a method, system, or computer program product. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, optical storage, and the like) having computer-usable program code embodied therein.

The present application is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the application. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer-executable instructions. These computer-executable instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.

These processor-executable instructions may also be stored in a processor-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the processor-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.

These processor-executable instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.

It will be apparent to those skilled in the art that various changes and modifications may be made in the present application without departing from the spirit and scope of the application. Thus, if such modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is intended to include such modifications and variations as well.

Claims

1. A method for establishing a communication path, performed by an application function entity, comprising:

2. The method of claim 1, wherein after acquiring the application layer data sent by the first UE, the method further comprises:

3. The method of claim 2, further comprising:

4. The method of claim 3, wherein determining whether the application layer data of the target UE can be transmitted through the data transmission path according to the registration request and/or a preset policy comprises:

5. The method of claim 1, wherein after sending the first request message to the first network device, further comprising:

6. The method of claim 5, wherein after receiving the first reply message, further comprising:

sending a data analysis request to a second network device;

7. The method of claim 5, wherein after receiving the first reply message, further comprising:

sending a security analysis request to a security server;

8. A method for establishing a communication path, applied to a first network device, includes:

9. The method of claim 8, wherein sending the first request message to the AMF comprises:

and sending the first request information to the service AMF according to the information of the service AMF.

10. The method of claim 8, wherein sending the first request message to the SMF comprises:

11. A method for establishing a communication path is applied to a mobile management function (AMF), and is characterized by comprising the following steps:

12. The method of claim 11, wherein triggering establishment of the data transmission path according to the first request message comprises:

wherein the fourth request message includes one or more of:

the indication information;

an identity of the first UE;

an identity of the second UE;

DNN；

S-NSSAI；

the fourth reply message comprises one or more of:

the first SM information;

the second SM information.

13. A method for establishing a communication path is applied to a Session Management Function (SMF), and is characterized by comprising the following steps:

14. The method of claim 13, wherein triggering establishment of the data transmission path according to the first request information comprises:

acquiring a fourth request message sent by the AMF;

sending a fourth reply message according to the fourth request message;

wherein the fourth request message includes one or more of:

the indication information;

an identity of the first UE;

an identity of the second UE;

DNN；

S-NSSAI；

the fourth reply message includes one or more of:

the first SM information;

the second SM information.

15. A communication path establishing device is applied to an application function entity and is characterized by comprising a memory, a transceiver and a processor;

16. The apparatus of claim 15, wherein the processor is further configured to:

17. The apparatus of claim 16, wherein the processor is further configured to:

18. The device for establishing the communication path is applied to a first network device and is characterized by comprising a memory, a transceiver and a processor;

19. A communication path establishing device is applied to a mobile management function (AMF) and is characterized by comprising a memory, a transceiver and a processor;

20. A communication path establishing device is applied to a Session Management Function (SMF) and is characterized by comprising a memory, a transceiver and a processor;

21. An apparatus for establishing a communication path, applied to an application function entity, comprising:

a first sending unit, configured to send first request information to a first network device, where the first request information is used to request establishment of a data transmission path between the first UE and the second UE.

22. An apparatus for establishing a communication path, applied to a first network device, includes:

23. A communication path establishing device applied to a mobile management function (AMF) is characterized by comprising:

24. A communication path establishing device applied to a Session Management Function (SMF), comprising:

25. A processor-readable storage medium, characterized in that the processor-readable storage medium stores program instructions for causing the processor to execute the steps of the establishment method of a communication path according to any one of claims 1 to 7, or the steps of the establishment method of a communication path according to any one of claims 8 to 10, or the steps of the establishment method of a communication path according to any one of claims 11 to 12, or the steps of the establishment method of a communication path according to any one of claims 13 to 14.