CN116634491A - Inter-network subscription signaling topology hiding method, restoration method, device and medium - Google Patents

Abstract

The invention provides a topology hiding method, a restoring method, a device and a medium for inter-network subscription signaling, which relate to the technical field of communication and are used for solving the problem that the prior art lacks a scheme for carrying out topology hiding on local network lNRF network element topology information in the inter-network subscription signaling and possibly causes local network sensitive information to leak to different networks, wherein the hiding method comprises the following steps: receiving a first inter-network subscription signaling from a home network; acquiring a home network registration function (lNRF) network element real address from a first inter-network subscription signaling; performing topology hiding on the true address of the home network lNRF network element to obtain a hidden address of the home network lNRF network element; replacing the real address of the home network lNRF network element in the first inter-network subscription signaling by using the hidden address of the home network lNRF network element to obtain a second inter-network subscription signaling; and sending second inter-network subscription signaling to the different network. The invention avoids the leakage of the true address of the home network lNRF network element to the foreign network, which needs to be kept secret, and ensures the information security of the home network.

Description

Inter-network subscription signaling topology hiding method, restoration method, device and medium

Technical Field

The present invention relates to the field of communications technologies, and in particular, to an inter-network subscription signaling topology hiding method, an inter-network subscription signaling topology restoration method, an inter-network subscription signaling topology hiding device, an inter-network subscription signaling topology restoration device, and a computer readable storage medium.

Background

3GPP (third generation partnership project, 3rd generation partnership project) requires: SEPP (Security Edge Protection Proxy, secure edge protection agent) should perform topology hiding by restricting the internal topology information that is visible to outside parties, which standard is implemented in 5G (5 th Generation Mobile Communication Technology, fifth generation mobile communication technology) SA (stand alone access) network sharing and international roaming architecture.

However, the current standards and techniques do not specify a specific implementation of SEPP topology hiding. In particular for PLMN (Public Land Mobile Network ) inter-Network subscription flows, the prior art may consider hiding NF (Network Functions, network function) Network element topology information in inter-Network subscription signaling, but if inter-Network subscription signaling adds NRF (Network) for some reason

Repository Function, network storage function), the prior art lacks a corresponding topology hiding scheme, which may cause that the NRF network element topology information of the local network to be kept secret is revealed to the heterogeneous network, and the information security of the local network is affected.

Disclosure of Invention

The technical problem to be solved by the present invention is to address the above-mentioned deficiencies of the prior art, provides an inter-network subscription signaling topology hiding method, an inter-network subscription signaling topology restoring method,

An inter-network subscription signaling topology hiding device, an inter-network subscription signaling topology restoring device and a computer readable storage medium are used for solving the problem that the prior art lacks a scheme for carrying out topology hiding on local network lNRF network element topology information in inter-network subscription signaling, which may cause local network sensitive information to be leaked to different networks.

In a first aspect, the present invention provides a method for hiding an inter-network subscription signaling topology, which is applied to an SEPP network element of a security edge protection proxy of a home network, and includes:

receiving a first inter-network subscription signaling from a home network;

acquiring a home network registration function (lNRF) network element real address from a first inter-network subscription signaling;

performing topology hiding on the true address of the home network lNRF network element to obtain a hidden address of the home network lNRF network element;

replacing the real address of the home network lNRF network element in the first inter-network subscription signaling by using the hidden address of the home network lNRF network element to obtain a second inter-network subscription signaling;

and sending second inter-network subscription signaling to the different network.

Optionally, receiving the first inter-network subscription signaling from the home network specifically includes:

receiving a first inter-network subscription signaling from a home network boundary iNRF network element, wherein the first inter-network subscription signaling comprises a second subscription identification ID, the second subscription ID comprises a first subscription ID and a first routing label, the first subscription ID is used for indicating home network subscription resources which the home network lNRF network element allows the foreign network to access, and the first routing label comprises a home network lNRF network element real address.

Optionally:

the method for acquiring the real address of the home network lNRF network element from the first inter-network subscription signaling specifically comprises the following steps:

acquiring a second subscription ID from the first inter-network subscription signaling, acquiring a first routing tag from the second subscription ID, and acquiring a real address of a home network lNRF network element from the first routing tag;

replacing a home network lNRF network element real address in the first inter-network subscription signaling with a home network lNRF network element hidden address to obtain a second inter-network subscription signaling, including:

replacing the real address of the home network lNRF network element in the first routing label with the hidden address of the home network lNRF network element to obtain a second routing label, replacing the first routing label of the second subscription ID with the second routing label to obtain a third subscription ID, and replacing the second subscription ID in the first inter-network subscription signaling with the third subscription ID to obtain a second inter-network subscription signaling.

Optionally, the home network is a home public land mobile network HPLMN, the foreign network is a visiting VPLMN, and the first subscription ID is determined by the home network lNRF network element according to a request of subscribing or updating the subscription home network resource of the foreign network;

the method for sending the second inter-network subscription signaling to the different network specifically comprises the following steps:

and sending the second inter-network subscription signaling to the heterogeneous network SEPP network element so that the heterogeneous network acquires the third subscription ID.

Optionally, performing topology hiding on the real address of the lNRF network element of the home network to obtain the hidden address of the lNRF network element of the home network, which specifically includes:

and performing topology hiding on the real address of the home network lNRF network element in the full-limit domain name FQDN format or the Internet protocol IP address format to obtain the home network lNRF network element hiding address in the FQDN format.

In a second aspect, the present invention provides a method for restoring an inter-network subscription signaling topology, which is applied to an SEPP network element of a security edge protection proxy of a home network, and includes:

receiving fourth inter-network subscription signaling from the different network;

acquiring a local network registration function (lNRF) network element hidden address from fourth inter-network subscription signaling;

performing topology restoration on the hidden address of the home network lNRF network element to obtain the real address of the home network lNRF network element;

replacing the home network lNRF network element hidden address in the fourth inter-network subscription signaling with the home network lNRF network element real address to obtain a fifth inter-network subscription signaling;

and sending the fifth inter-network subscription signaling in the home network.

Optionally, receiving fourth inter-network subscription signaling from the heterogeneous network, specifically including:

and receiving fourth inter-network subscription signaling from the heterogeneous network SEPP network element, wherein the fourth inter-network subscription signaling comprises a third subscription identification ID, the third subscription ID comprises a first subscription ID and a second routing label, the first subscription ID is used for indicating the local network subscription resource which is allowed to be accessed by the heterogeneous network by the local network lNRF network element, and the second routing label comprises the hidden address of the local network lNRF network element.

Optionally:

the method for acquiring the hidden address of the home network lNRF network element from the fourth inter-network subscription signaling specifically comprises the following steps:

acquiring a third subscription ID from fourth inter-network subscription signaling, acquiring a second routing tag from the third subscription ID, and acquiring a hidden address of a local network lNRF network element from the second routing tag;

replacing the home network lNRF network element hidden address in the fourth inter-network subscription signaling with the home network lNRF network element real address to obtain a fifth inter-network subscription signaling, which specifically comprises:

replacing the home network lNRF network element hidden address in the second routing label with the home network lNRF network element real address to obtain a first routing label, replacing the second routing label of the third subscription ID with the first routing label to obtain a second subscription ID, and replacing the third subscription ID in the fourth inter-network subscription signaling with the second subscription ID to obtain a fifth inter-network subscription signaling.

Optionally, the home network is a home public land mobile network HPLMN, the foreign network is a visited VPLMN, and the fourth and fifth inter-network subscription signaling further includes updating or unsubscribing the home network resource request;

the method for sending the fifth inter-network subscription signaling in the home network specifically comprises the following steps:

and transmitting the fifth inter-network subscription signaling to the home network boundary iNRF network element, so that the home network iNRF network element transmits the update or unsubscribe home network resource request in the fifth inter-network subscription signaling to the home network lNRF network element according to the home network lNRF network element real address.

Optionally, performing topology restoration on the hidden address of the home network lNRF network element to obtain the real address of the home network lNRF network element, which specifically includes:

and performing topology restoration on the home network lNRF network element hidden address in the FQDN format to obtain the home network lNRF network element real address in the fully defined domain name FQDN format or the Internet protocol IP address format.

In a third aspect, the present invention provides an inter-network subscription signaling topology hiding apparatus, including:

a first receiving module, configured to receive a first inter-network subscription signaling from a home network;

the first acquisition module is connected with the first receiving module and is used for acquiring the real address of the home network registration function (lNRF) network element from the first inter-network subscription signaling;

the topology hiding module is connected with the first acquisition module and is used for performing topology hiding on the real address of the home network lNRF network element so as to obtain a hidden address of the home network lNRF network element;

the first replacing module is connected with the topology hiding module and is used for replacing the real address of the home network lNRF network element in the first inter-network subscription signaling by using the hidden address of the home network lNRF network element so as to obtain a second inter-network subscription signaling;

and the first sending module is connected with the first replacing module and used for sending the second inter-network subscription signaling to the different network.

In a fourth aspect, the present invention provides an inter-network subscription signaling topology restoration device, including:

the second receiving module is used for receiving fourth inter-network subscription signaling from the different network;

the second acquisition module is connected with the second receiving module and is used for acquiring a local network registration function (lNRF) network element hidden address from the fourth inter-network subscription signaling;

the topology restoration module is connected with the second acquisition module and is used for performing topology restoration on the hidden address of the home network lNRF network element so as to obtain the real address of the home network lNRF network element;

the second replacing module is connected with the topology restoring module and is used for replacing the home network lNRF network element hidden address in the fourth inter-network subscription signaling by using the home network lNRF network element real address so as to obtain a fifth inter-network subscription signaling;

and the second sending module is connected with the second replacing module and is used for sending the fifth inter-network subscription signaling in the home network.

In a fifth aspect, the present invention provides a computer readable storage medium having stored thereon a computer program which, when executed by a processor, implements an inter-network subscription signaling topology hiding method as described in the first aspect above and/or an inter-network subscription signaling topology restoration method as described in the second aspect above.

The invention provides an inter-network subscription signaling topology hiding method, an inter-network subscription signaling topology hiding device and a computer readable storage medium, wherein the inter-network subscription signaling from a local network is subjected to topology hiding through a local network SEPP network element so as to hide the real address of the local network lNRF network element, so that the inter-network subscription signaling sent to a different network only contains the hidden address of the local network lNRF network element, thereby avoiding the real address of the local network lNRF network element needing to be kept secret from leaking to the different network and ensuring the information security of the local network;

the invention provides an inter-network subscription signaling topology reduction method, an inter-network subscription signaling topology reduction device and a computer readable storage medium, wherein the inter-network subscription signaling from a different network is subjected to topology reduction through a local network SEPP network element so as to restore a local network lNRF network element hidden address, so that the inter-network subscription signaling sent by the local network contains a local network lNRF network element real address, and the subscription signaling from the different network can be correctly forwarded in the local network.

Drawings

FIG. 1 is a flow chart of a method for hiding an inter-network subscription signaling topology in an embodiment of the present invention;

FIG. 2 is a flow chart of an inter-network subscription method in accordance with an embodiment of the present invention;

FIG. 3 is a flow chart of a method for topology restoration of inter-network subscription signaling in accordance with an embodiment of the present invention;

FIG. 4 is a flow chart of a method of updating or canceling an inter-network subscription in accordance with an embodiment of the present invention;

fig. 5 is a schematic structural diagram of an inter-network subscription signaling topology hiding apparatus according to an embodiment of the present invention;

fig. 6 is a schematic structural diagram of an inter-network subscription signaling topology restoration device according to an embodiment of the present invention.

Detailed Description

In order to make the technical scheme of the present invention better understood by those skilled in the art, the following detailed description of the embodiments of the present invention will be given with reference to the accompanying drawings.

It is to be understood that the specific embodiments and figures described herein are merely illustrative of the invention, and are not limiting of the invention.

It is to be understood that the various embodiments of the invention and the features of the embodiments may be combined with each other without conflict.

It is to be understood that only the portions relevant to the present invention are shown in the drawings for convenience of description, and the portions irrelevant to the present invention are not shown in the drawings.

It should be understood that each unit and module in the embodiments of the present invention may correspond to only one physical structure, may be formed by a plurality of physical structures, or may be integrated into one physical structure.

It will be appreciated that, without conflict, the functions and steps noted in the flowcharts and block diagrams of the present invention may occur out of the order noted in the figures.

It is to be understood that the flowcharts and block diagrams of the present invention illustrate the architecture, functionality, and operation of possible implementations of systems, apparatuses, devices, methods according to various embodiments of the present invention. Where each block in the flowchart or block diagrams may represent a unit, module, segment, code, or the like, which comprises executable instructions for implementing the specified functions. Moreover, each block or combination of blocks in the block diagrams and flowchart illustrations can be implemented by hardware-based systems that perform the specified functions, or by combinations of hardware and computer instructions.

Example 1:

as shown in fig. 1, embodiment 1 of the present invention provides an inter-network subscription signaling topology hiding method applied to a security edge protection proxy SEPP network element of a home network, including:

s11, receiving a first inter-network subscription signaling from a home network;

s12, acquiring a local network registration function lNRF network element real address from a first inter-network subscription signaling;

s13, performing topology hiding on the true address of the home network lNRF network element to obtain a hidden address of the home network lNRF network element;

S14, replacing the real address of the home network lNRF network element in the first inter-network subscription signaling by using the hidden address of the home network lNRF network element to obtain a second inter-network subscription signaling;

s15, sending second inter-network subscription signaling to the different network.

Specifically, in this embodiment, between the networks refers to between two PLMNs, as shown in fig. 2, where the two PLMNs may be a VPLMN (Visited PLMN) and an HPLMN (Home PLMN) respectively, and data interaction is directly performed between the VPLMN and the HPLMN through SEPP network elements, where the SEPP network element of the VPLMN is denoted by vsep, the SEPP network element of the HPLMN is denoted by hsep, where the SEPP network element of any party finds that the network of the party is to be sent to an inter-network subscription signaling of an opposite network (i.e., the network SEPP network element of the Home network receives an inter-network subscription signaling from the Home network), and then checks whether the inter-network subscription signaling includes the Home network sensitive information, where a hidden part of the Home network sensitive information is already existing in the prior art, and the first inter-network subscription signaling of the present application does not include the Home network sensitive information where the hidden scheme has been proposed in the prior art (i.e., the first inter-network subscription signaling is not signaling existing in the prior art), but includes the Home network lNRF (local NRF) network element, so that the Home network topology is only needs to be sent to the Home network element by implementing the first inter-network subscription signaling, and the Home network privacy is guaranteed to be sent to the Home network element by the Home network element.

Optionally, receiving the first inter-network subscription signaling from the home network specifically includes:

receiving a first inter-network subscription signaling from a home network boundary iNRF network element, wherein the first inter-network subscription signaling comprises a second subscription identification ID, the second subscription ID comprises a first subscription ID and a first routing label, the first subscription ID is used for indicating home network subscription resources which the home network lNRF network element allows the foreign network to access, and the first routing label comprises a home network lNRF network element real address.

Optionally:

the method for acquiring the real address of the home network lNRF network element from the first inter-network subscription signaling specifically comprises the following steps:

acquiring a second subscription ID from the first inter-network subscription signaling, acquiring a first routing tag from the second subscription ID, and acquiring a real address of a home network lNRF network element from the first routing tag;

replacing a home network lNRF network element real address in the first inter-network subscription signaling with a home network lNRF network element hidden address to obtain a second inter-network subscription signaling, including:

replacing the real address of the home network lNRF network element in the first routing label with the hidden address of the home network lNRF network element to obtain a second routing label, replacing the first routing label of the second subscription ID with the second routing label to obtain a third subscription ID, and replacing the second subscription ID in the first inter-network subscription signaling with the third subscription ID to obtain a second inter-network subscription signaling.

Optionally, the home network is a home public land mobile network HPLMN, the foreign network is a visiting VPLMN, and the first subscription ID is determined by the home network lNRF network element according to a request of subscribing or updating the subscription home network resource of the foreign network;

the method for sending the second inter-network subscription signaling to the different network specifically comprises the following steps:

and sending the second inter-network subscription signaling to the heterogeneous network SEPP network element so that the heterogeneous network acquires the third subscription ID.

Optionally, performing topology hiding on the real address of the lNRF network element of the home network to obtain the hidden address of the lNRF network element of the home network, which specifically includes:

and performing topology hiding on the real address of the home network lNRF network element in the full-limit domain name FQDN format or the Internet protocol IP address format to obtain the home network lNRF network element hiding address in the FQDN format.

Specifically, in this embodiment, when the method is mainly applied to a scenario where the NRF of the home network is hierarchically deployed, as shown in fig. 2, the NRF of the HPLMN is a hierarchical network, and includes multiple levels, such as h-isrf, h-hNRF, h-lNRF, and the like, where h-isrf is an internetwork boundary NRF of the home network, h-hNRF is a higher-level NRF (or called primary NRF) of the home network, h-lNRF is a local NRF (or called secondary NRF), and when the NRF of the home network is hierarchical network, multiple levels, such as v-isrf, v-hNRF, v-lNRF, and the like, are included, where v-isrf is an internetwork boundary NRF of the visited network, v-hNRF is a higher-level NRF (or called primary NRF) of the visited network, and v-lNRF is a local NRF (or called secondary NRF); the method is mainly applied to an internetwork NF subscription process across PLMNs, particularly when there is a multi-level NRF networking, in the case that a visited network subscribes to NF notification of a home network, for example, a vmf (Access and Mobility Management Function ) subscribes to notification of a hmdm (unified data management function, unified Data Management), when the current international standard does not subscribe to such NRF hierarchical deployment, how to notify the vmf of local NRF addresses or routing information, such as in a notification process across PLMNs, a relatively efficient manner is that a routing tag is filled in a subscription id (subscription identifier), but the routing tag may include an IP (internet protocol ) address of the local NRF, and topology hiding is required for the IP address of the home network included in the subscription id, and when a producer sep sends out a response to an internetwork service to send out a qscript to the corresponding to the pSEPP (full-defined domain name Fully Qualified Domain Name).

As shown in fig. 2, a more specific example of NF for the visited network subscribing to the home network is as follows:

step (101): a vNF network element (such as vAMF) of a visiting network (VPLMN) initiates a subscription request to a hNF network element (such as hUDM/hASSF (authentication service function, authentication Server Function)) of a home network (HPLMN), wherein the subscription request carries an nfInstanceId (network function instance ID) of h-iNRF, and the vNF network element firstly sends the subscription request to v-lNRF;

step (102): v-lNRF forwards subscription requests to v-hNRF;

step (103): v-hNRF forwards the subscription request to v-iinrf;

step (104): v-iNRF forwards the subscription request to vSEPP, wherein the subscription request carries FQDN of h-iNRF;

step (105): the vSEPP forwards the subscription request to the hSEPP;

step (106): the hSEPP forwards the subscription request to the h-iNRF;

step (107): h-iNRF forwards the subscription request to h-hNRF;

step (108): h-hNRF transmits a subscription request to h-lNRF, h-lNRF completes subscription, generates a subscriptionID of a subscribed resource (at this time, the first subscription ID only comprises information indicating the subscribed resource, the information does not reveal topology information of the subscribed resource to a heterogeneous network), returns a subscription response, and the apiRoot of location in the subscription response points to h-lNRF (namely, the real address of an h-lNRF network element);

Step (109): h-lNRF sends subscription response to h-hNRF;

step (110): h-hNRF forwards subscription response to h-iNRF;

step (111): h-iNRF adds routing information in the subscriptionID, the routing information can be used for subsequent processing of updating subscription and unsubscribing requests, the routing information points to hl-NRF, the specific method is that the apiRoot of location is used as routing information RouteTag (a first routing label comprises the real address of hl-NRF) to be encoded in the subscriptionID (the second subscription ID is formed at the moment, the first subscription ID and the first routing label are included), and subscription response (the first inter-network subscription signaling is formed at the moment, the second subscription ID is included, and both the iNRF and the SEPP are network elements responsible for processing the inter-network signaling) is forwarded to hSEPP;

step (112): if the RouteTag in the subscript ionid adopts the apiRoot information in the location in the subscription response, the RouteTag contains topology information or IP address information of h-lNRF, and may be leaked to the visited network if no special processing is performed on the home network side, so in this case, hsep needs to topologically hide the IP address contained in the subscript ionid, replace it with a hidden FQDN (i.e., the first routing label is converted into the second routing label, the second routing label includes the hidden address of hl-NRF, and meanwhile, the second subscription ID is also converted into the third subscription ID, and the third subscription ID includes the first subscription ID and the second routing label), the hsep forwards the subscription response (at this time, forms a second inter-network subscription signaling including the third subscription ID) to the vsep, in this step, the hsep actually performs the steps S11-S15 shown in fig. 1 and the embodiment 1, and the specific key can be encrypted by adopting a symmetric algorithm to realize the specific encryption algorithm of the present application, and the present embodiment is a specific encryption algorithm, and a specific encryption algorithm can be implemented by the present embodiment of the present application, but the present application is an encryption algorithm;

Step (113): the vSEPP forwards the subscription response (second inter-network subscription signaling) to the v-isrf;

step (114): v-iNRF adds hPLMN prefix (fourth subscription ID, including third subscription ID and hPLMN prefix) in the subscription ID (third subscription ID), and forwards subscription response (third inter-network subscription signaling) to v-hNRF after pointing the apiRoot modification in location to v-iNRF;

step (115): v-hNRF forwards the subscription response to v-lNRF;

step (116): v-lNRF forwards the subscription response to vmf, which maintains subscription information (including the fourth subscription ID).

Example 2:

as shown in fig. 3, embodiment 2 of the present invention provides an inter-network subscription signaling topology restoration method, which is applied to a security edge protection proxy SEPP network element of a home network, and includes:

s21, receiving fourth inter-network subscription signaling from the different network;

s22, acquiring a local network registration function (lNRF) network element hidden address from fourth inter-network subscription signaling;

s23, performing topology restoration on the hidden address of the home network lNRF network element to obtain the real address of the home network lNRF network element;

s24, replacing the home network lNRF network element hidden address in the fourth inter-network subscription signaling by using the home network lNRF network element real address to obtain a fifth inter-network subscription signaling;

s25, sending a fifth inter-network subscription signaling in the home network.

Specifically, in this embodiment, between the networks refers to between two PLMNs, as shown in fig. 4, where the two PLMNs may be a VPLMN and an HPLMN, and the VPLMN and the HPLMN may directly perform data interaction through an SEPP network element, where the SEPP network element of the VPLMN is denoted by vSEPP, the SEPP network element of the HPLMN is denoted by hSEPP, where if an inter-network subscription signaling sent by the opposite end network is found (i.e., the local network SEPP network element receives an inter-network subscription signaling from a different network), it is checked whether the inter-network subscription signaling includes local network hidden information, where the prior art has a scheme for reducing part of the local network hidden information, and the fourth inter-network subscription signaling of the present application does not include the local network hidden information in which the prior art has proposed a reduction scheme (i.e., the fourth inter-network subscription signaling is not signaling existing in the prior art), but includes a local network element hidden address of the local network lNRF, so that the local network SEPP network element sends the local network element by performing topology reduction to reduce the inter-network subscription signaling, so that the local network element sends the local network hidden signaling to the local network hidden address of the local network element from the different network element to the true network; optionally, the home network lNRF network element hidden address carried in the fourth inter-network subscription signaling is derived from the second inter-network subscription signaling received by the different network as described in embodiment 1, that is, the fourth inter-network subscription signaling is sent by the different network according to the home network lNRF network element hidden address in the second inter-network subscription signaling after the second inter-network subscription signaling sent by the home network SEPP network element according to the inter-network subscription signaling topology hiding method described in embodiment 1 is received by the different network.

Optionally, receiving fourth inter-network subscription signaling from the heterogeneous network, specifically including:

and receiving fourth inter-network subscription signaling from the heterogeneous network SEPP network element, wherein the fourth inter-network subscription signaling comprises a third subscription identification ID, the third subscription ID comprises a first subscription ID and a second routing label, the first subscription ID is used for indicating the local network subscription resource which is allowed to be accessed by the heterogeneous network by the local network lNRF network element, and the second routing label comprises the hidden address of the local network lNRF network element.

Optionally:

the method for acquiring the hidden address of the home network lNRF network element from the fourth inter-network subscription signaling specifically comprises the following steps:

acquiring a third subscription ID from fourth inter-network subscription signaling, acquiring a second routing tag from the third subscription ID, and acquiring a hidden address of a local network lNRF network element from the second routing tag;

replacing the home network lNRF network element hidden address in the fourth inter-network subscription signaling with the home network lNRF network element real address to obtain a fifth inter-network subscription signaling, which specifically comprises:

replacing the home network lNRF network element hidden address in the second routing label with the home network lNRF network element real address to obtain a first routing label, replacing the second routing label of the third subscription ID with the first routing label to obtain a second subscription ID, and replacing the third subscription ID in the fourth inter-network subscription signaling with the second subscription ID to obtain a fifth inter-network subscription signaling.

Optionally, the home network is a home public land mobile network HPLMN, the foreign network is a visited VPLMN, and the fourth and fifth inter-network subscription signaling further includes updating or unsubscribing the home network resource request;

the method for sending the fifth inter-network subscription signaling in the home network specifically comprises the following steps:

and transmitting the fifth inter-network subscription signaling to the home network boundary iNRF network element, so that the home network iNRF network element transmits the update or unsubscribe home network resource request in the fifth inter-network subscription signaling to the home network lNRF network element according to the home network lNRF network element real address.

Optionally, performing topology restoration on the hidden address of the home network lNRF network element to obtain the real address of the home network lNRF network element, which specifically includes:

and performing topology restoration on the home network lNRF network element hidden address in the FQDN format to obtain the home network lNRF network element real address in the fully defined domain name FQDN format or the Internet protocol IP address format.

Specifically, in this embodiment, the method is mainly applied to a scenario where NRF of the local network is hierarchically deployed, as shown in fig. 4, where the NRF hierarchical networking structures of the HPLMN and the VPLMN are the same as those of fig. 2; the method is mainly applied to an internetwork NF subscription cancellation or change process of a cross-PLMN, particularly when a multi-level NRF networking is carried out, as the current international standard does not subscribe to the hierarchical deployment of the NRF, a corresponding topology hiding method does not exist, and further a corresponding topology restoring method does not exist, under the condition that a visiting network cancels or changes the NF notification of a subscription home network, for example, when a certain hUDM registers to the information of the hNRF to change, the NRF of the home network is to notify to the vAMF, the vAMF initiates subscription cancellation or change to the hNRF, in the subscription cancellation (subscription update) process, the HPLMN needs to restore the hidden FQDN of the topology of the subscription cancellation signaling or subscription change signaling of the like from the VPLMN to the IP address of the home network local NRF, and the hidden FQDN in the subscription cancellation signaling or subscription change signaling is restored to the IP address by the pSEPP when a subsequent internetwork service request is received.

As shown in fig. 4, after the flow shown in fig. 2, a more specific example of subscription update (or subscription cancellation) of NF to the home network with respect to the visited network is as follows:

step (201): a vNF (such as vAMF) initiates a request for updating subscription (or canceling subscription) of heterogeneous roaming to v-iNRF, and the request carries a subscriptionID (fourth subscription ID, which comprises a third subscription ID and an hPLMN prefix);

step (202): after v-iNRF removes hPLMN prefix in the subscriptionID (converted into a third subscription ID, where the third subscription ID includes a first subscription ID and a second routing tag, and the second routing tag includes a hidden address of hl-NRF), forwarding an update subscription (or subscription cancellation) request (fourth inter-network subscription signaling, including the third subscription ID) to vSEPP;

step (203): the vSEPP forwards the update subscription (or subscription cancellation) request to the hSEPP;

step (204): the hSEPP performs topology reduction on a hidden address (hl-NRF hidden address) in a subscription ID (third subscription ID) in a subscription update (or subscription cancellation) request (fourth inter-network subscription signaling), restores the hidden address (hl-NRF hidden address) to an IP address (hl-NRF real address) of h-lNRF, and forwards the subscription update (or subscription cancellation) request (which is converted into fifth inter-network subscription signaling, wherein the fifth inter-network subscription signaling comprises a second subscription ID, the second subscription ID comprises a first subscription ID and a first routing label, and the first routing label comprises hl-NRF real address) to h-iNRF; in this step, hSEPP actually performs all the technical features included in steps S21 to S25 and embodiment 2 shown in fig. 3, and the specific topology restoration method corresponds to the topology hiding method of embodiment 1, and the flow of this example is not the prior art, but the content of the present application is the technical content of performing topology restoration with respect to the flow of this example;

Step (205): h-iNRF fetches routing information RouteTag (first routing tag) in a subscription update (or subscription cancellation) request (fifth inter-network subscription signaling) from a subscription ID (second subscription ID), the RouteTag contains IP address information of h-lNRF, removes RouteTag (second subscription ID into first subscription ID including only information indicating subscribed resources) from the subscription ID, and forwards the subscription update (or subscription cancellation) request (sixth inter-network subscription signaling) to h-lNRF according to IP address information (real address of hl-NRF in the first routing tag);

step (206): h-lNRF sends a subscription update (or subscription cancel) response to h-iinrf;

step (207): h-iNRF forwards a subscription update (or subscription cancel) response to hSEPP;

step (208): the hSEPP forwards a subscription update (or subscription cancel) response to the vSEPP;

step (209): the vSEPP forwards the subscription update (or subscription cancellation) response to the v-isrf;

step (210): v-iNRF forwards subscription update (or subscription cancellation) responses to vNF (e.g., vmf).

Example 3:

as shown in fig. 5, embodiment 3 of the present invention provides an inter-network subscription signaling topology hiding apparatus, including:

a first receiving module 11, configured to receive a first inter-network subscription signaling from a home network;

The first obtaining module 12 is connected with the first receiving module 11, and is configured to obtain a real address of a home network registration function lNRF network element from the first inter-network subscription signaling;

the topology hiding module 13 is connected with the first obtaining module 12 and is used for performing topology hiding on the real address of the home network lNRF network element so as to obtain a hidden address of the home network lNRF network element;

a first replacing module 14, connected to the topology hiding module 13, configured to replace a home network lNRF network element real address in the first inter-network subscription signaling with a home network lNRF network element hidden address to obtain a second inter-network subscription signaling;

the first sending module 15 is connected to the first replacing module 14, and is configured to send the second inter-network subscription signaling to the different network.

Optionally, the first receiving module 11 is specifically configured to:

receiving a first inter-network subscription signaling from a home network boundary iNRF network element, wherein the first inter-network subscription signaling comprises a second subscription identification ID, the second subscription ID comprises a first subscription ID and a first routing label, the first subscription ID is used for indicating home network subscription resources which the home network lNRF network element allows the foreign network to access, and the first routing label comprises a home network lNRF network element real address.

Optionally:

the first obtaining module 12 is specifically configured to:

Acquiring a second subscription ID from the first inter-network subscription signaling, acquiring a first routing tag from the second subscription ID, and acquiring a real address of a home network lNRF network element from the first routing tag;

the first replacing module 14 is specifically configured to:

replacing the real address of the home network lNRF network element in the first routing label with the hidden address of the home network lNRF network element to obtain a second routing label, replacing the first routing label of the second subscription ID with the second routing label to obtain a third subscription ID, and replacing the second subscription ID in the first inter-network subscription signaling with the third subscription ID to obtain a second inter-network subscription signaling.

Optionally, the home network is a home public land mobile network HPLMN, the foreign network is a visiting VPLMN, and the first subscription ID is determined by the home network lNRF network element according to a request of subscribing or updating the subscription home network resource of the foreign network;

the first sending module 15 is specifically configured to:

and sending the second inter-network subscription signaling to the heterogeneous network SEPP network element so that the heterogeneous network acquires the third subscription ID.

Optionally, the topology hiding module 13 is specifically configured to:

and performing topology hiding on the real address of the home network lNRF network element in the full-limit domain name FQDN format or the Internet protocol IP address format to obtain the home network lNRF network element hiding address in the FQDN format.

Example 4:

as shown in fig. 6, embodiment 4 of the present invention provides an inter-network subscription signaling topology restoration device, including:

a second receiving module 21, configured to receive fourth inter-network subscription signaling from the different network;

a second obtaining module 22, connected to the second receiving module 21, for obtaining a hidden address of the home network registration function lNRF network element from the fourth inter-network subscription signaling;

the topology restoration module 23 is connected with the second acquisition module 22, and is configured to perform topology restoration on the home network lNRF network element hidden address, so as to obtain a home network lNRF network element real address;

a second replacing module 24, connected to the topology restoring module 23, configured to replace a home network lNRF network element hidden address in the fourth inter-network subscription signaling with a home network lNRF network element real address to obtain a fifth inter-network subscription signaling;

and the second sending module 25 is connected with the second replacing module 24 and is used for sending the fifth inter-network subscription signaling in the home network.

Optionally, the second receiving module 21 is specifically configured to:

and receiving fourth inter-network subscription signaling from the heterogeneous network SEPP network element, wherein the fourth inter-network subscription signaling comprises a third subscription identification ID, the third subscription ID comprises a first subscription ID and a second routing label, the first subscription ID is used for indicating the local network subscription resource which is allowed to be accessed by the heterogeneous network by the local network lNRF network element, and the second routing label comprises the hidden address of the local network lNRF network element.

Optionally:

the second obtaining module 22 is specifically configured to:

acquiring a third subscription ID from fourth inter-network subscription signaling, acquiring a second routing tag from the third subscription ID, and acquiring a hidden address of a local network lNRF network element from the second routing tag;

the second replacing module 24 is specifically configured to:

replacing the home network lNRF network element hidden address in the second routing label with the home network lNRF network element real address to obtain a first routing label, replacing the second routing label of the third subscription ID with the first routing label to obtain a second subscription ID, and replacing the third subscription ID in the fourth inter-network subscription signaling with the second subscription ID to obtain a fifth inter-network subscription signaling.

Optionally, the home network is a home public land mobile network HPLMN, the foreign network is a visited VPLMN, and the fourth and fifth inter-network subscription signaling further includes updating or unsubscribing the home network resource request;

the second sending module 25 is specifically configured to:

and transmitting the fifth inter-network subscription signaling to the home network boundary iNRF network element, so that the home network iNRF network element transmits the update or unsubscribe home network resource request in the fifth inter-network subscription signaling to the home network lNRF network element according to the home network lNRF network element real address.

Optionally, the topology reducing module 23 is specifically configured to:

And performing topology restoration on the home network lNRF network element hidden address in the FQDN format to obtain the home network lNRF network element real address in the fully defined domain name FQDN format or the Internet protocol IP address format.

Example 5:

embodiment 5 of the present invention provides a computer readable storage medium having stored thereon a computer program which, when executed by a processor, implements an inter-network subscription signaling topology hiding method as described in embodiment 1 and/or an inter-network subscription signaling topology restoration method as described in embodiment 2.

In particular, in this embodiment, the inter-network subscription signaling topology hiding method and/or the inter-network subscription signaling topology restoration method may run on a secure edge protection proxy SEPP network element for hiding and restoring local network lNRF network element topology information in inter-network subscription signaling, the computer-readable storage medium comprising volatile or non-volatile, removable or non-removable media implemented in any method or technology for storing information, such as computer-readable instructions, data structures, computer program modules or other data. Computer-readable storage media includes, but is not limited to, RAM (Random Access Memory ), ROM (Read-Only Memory), EEPROM (Electrically Erasable Programmable Read Only Memory, charged erasable programmable Read-Only Memory), flash Memory or other Memory technology, CD-ROM (Compact Disc Read-Only Memory), digital Versatile Disks (DVD) or other optical disk storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other medium which can be used to store the desired information and which can be accessed by a computer.

In addition, the present invention may also provide a computer apparatus, where the apparatus includes a memory and a processor, where the memory stores a computer program, and where the processor executes the inter-network subscription signaling topology hiding method as described in embodiment 1 and/or the inter-network subscription signaling topology restoring method as described in embodiment 2 when the processor runs the computer program stored in the memory.

Furthermore, the invention can also provide a public land mobile network PLMN, which comprises a local network Security Edge Protection Proxy (SEPP) network element and is connected with a different network through the local network SEPP network element;

the home network SEPP network element includes a home network first SEPP network element, and the home network first SEPP network element implements the inter-network subscription signaling topology hiding method as described in embodiment 1.

Optionally, implementing, by the first SEPP network element of the home network, an inter-network subscription signaling topology reduction method as described in embodiment 2; or alternatively, the process may be performed,

the home network SEPP network element further includes a home network second SEPP network element, and the home network second SEPP network element implements the inter-network subscription signaling topology restoration method as described in embodiment 2.

Embodiments 1, 3, and 5 of the present invention provide an inter-network subscription signaling topology hiding method, an inter-network subscription signaling topology hiding device, and a computer readable storage medium, where an inter-network subscription signaling from a home network is subjected to topology hiding by a home network SEPP network element to hide a home network lNRF network element real address therein, so that an inter-network subscription signaling sent to a foreign network only includes a home network lNRF network element hiding address, thereby avoiding leakage of a home network lNRF network element real address to the foreign network that needs to be kept secret, and ensuring information security of the home network;

Embodiments 2, 4, and 5 of the present invention provide an inter-network subscription signaling topology restoration method, an inter-network subscription signaling topology restoration device, and a computer readable storage medium, where an inter-network subscription signaling from a different network is subjected to topology restoration by a local network SEPP network element to restore a local network lNRF network element hidden address, so that the inter-network subscription signaling sent by the local network includes a local network lNRF network element real address, so that the subscription signaling from the different network can be correctly forwarded in the local network.

It is to be understood that the above embodiments are merely illustrative of the application of the principles of the present invention, but not in limitation thereof. Various modifications and improvements may be made by those skilled in the art without departing from the spirit and substance of the invention, and are also considered to be within the scope of the invention.

Claims (13)

1. An inter-network subscription signaling topology hiding method is characterized by being applied to a Security Edge Protection Proxy (SEPP) network element of a home network, and comprising the following steps:

receiving a first inter-network subscription signaling from a home network;

acquiring a home network registration function (lNRF) network element real address from a first inter-network subscription signaling;

Performing topology hiding on the true address of the home network lNRF network element to obtain a hidden address of the home network lNRF network element;

replacing the real address of the home network lNRF network element in the first inter-network subscription signaling by using the hidden address of the home network lNRF network element to obtain a second inter-network subscription signaling;

and sending second inter-network subscription signaling to the different network.

2. The method according to claim 1, wherein receiving the first inter-network subscription signaling from the home network comprises:

receiving a first inter-network subscription signaling from a home network boundary iNRF network element, wherein the first inter-network subscription signaling comprises a second subscription identification ID, the second subscription ID comprises a first subscription ID and a first routing label, the first subscription ID is used for indicating home network subscription resources which the home network lNRF network element allows the foreign network to access, and the first routing label comprises a home network lNRF network element real address.

3. The method according to claim 2, characterized in that:

the method for acquiring the real address of the home network lNRF network element from the first inter-network subscription signaling specifically comprises the following steps:

acquiring a second subscription ID from the first inter-network subscription signaling, acquiring a first routing tag from the second subscription ID, and acquiring a real address of a home network lNRF network element from the first routing tag;

replacing a home network lNRF network element real address in the first inter-network subscription signaling with a home network lNRF network element hidden address to obtain a second inter-network subscription signaling, including:

Replacing the real address of the home network lNRF network element in the first routing label with the hidden address of the home network lNRF network element to obtain a second routing label, replacing the first routing label of the second subscription ID with the second routing label to obtain a third subscription ID, and replacing the second subscription ID in the first inter-network subscription signaling with the third subscription ID to obtain a second inter-network subscription signaling.

4. A method according to claim 3, characterized in that the home network is a home public land mobile network HPLMN, the foreign network is a visited VPLMN, the first subscription ID is determined by the home network lNRF network element according to a foreign network subscription or update subscription home network resource request;

the method for sending the second inter-network subscription signaling to the different network specifically comprises the following steps:

and sending the second inter-network subscription signaling to the heterogeneous network SEPP network element so that the heterogeneous network acquires the third subscription ID.

5. Method according to any of claims 1-4, characterized in that topology hiding is performed on the home network lNRF network element real address to obtain the home network lNRF network element hidden address, comprising in particular:

and performing topology hiding on the real address of the home network lNRF network element in the full-limit domain name FQDN format or the Internet protocol IP address format to obtain the home network lNRF network element hiding address in the FQDN format.

6. An inter-network subscription signaling topology restoration method is characterized by being applied to a Security Edge Protection Proxy (SEPP) network element of a home network, and comprising the following steps:

receiving fourth inter-network subscription signaling from the different network;

acquiring a local network registration function (lNRF) network element hidden address from fourth inter-network subscription signaling;

performing topology restoration on the hidden address of the home network lNRF network element to obtain the real address of the home network lNRF network element;

replacing the home network lNRF network element hidden address in the fourth inter-network subscription signaling with the home network lNRF network element real address to obtain a fifth inter-network subscription signaling;

and sending the fifth inter-network subscription signaling in the home network.

7. The method according to claim 6, wherein receiving fourth inter-network subscription signaling from the foreign network, in particular comprises:

and receiving fourth inter-network subscription signaling from the heterogeneous network SEPP network element, wherein the fourth inter-network subscription signaling comprises a third subscription identification ID, the third subscription ID comprises a first subscription ID and a second routing label, the first subscription ID is used for indicating the local network subscription resource which is allowed to be accessed by the heterogeneous network by the local network lNRF network element, and the second routing label comprises the hidden address of the local network lNRF network element.

8. The method according to claim 7, wherein:

The method for acquiring the hidden address of the home network lNRF network element from the fourth inter-network subscription signaling specifically comprises the following steps:

acquiring a third subscription ID from fourth inter-network subscription signaling, acquiring a second routing tag from the third subscription ID, and acquiring a hidden address of a local network lNRF network element from the second routing tag;

replacing the home network lNRF network element hidden address in the fourth inter-network subscription signaling with the home network lNRF network element real address to obtain a fifth inter-network subscription signaling, which specifically comprises:

replacing the home network lNRF network element hidden address in the second routing label with the home network lNRF network element real address to obtain a first routing label, replacing the second routing label of the third subscription ID with the first routing label to obtain a second subscription ID, and replacing the third subscription ID in the fourth inter-network subscription signaling with the second subscription ID to obtain a fifth inter-network subscription signaling.

9. The method of claim 8, wherein the home network is a home public land mobile network, HPLMN, the foreign network is a visited VPLMN, and the fourth and fifth inter-network subscription signaling further comprises updating or unsubscribing from a home network resource request;

the method for sending the fifth inter-network subscription signaling in the home network specifically comprises the following steps:

and transmitting the fifth inter-network subscription signaling to the home network boundary iNRF network element, so that the home network iNRF network element transmits the update or unsubscribe home network resource request in the fifth inter-network subscription signaling to the home network lNRF network element according to the home network lNRF network element real address.

10. Method according to any of claims 6-9, characterized in that topology restoration is performed on the home network lNRF network element hidden address to obtain the home network lNRF network element real address, comprising in particular:

and performing topology restoration on the home network lNRF network element hidden address in the FQDN format to obtain the home network lNRF network element real address in the fully defined domain name FQDN format or the Internet protocol IP address format.

11. An inter-network subscription signaling topology hiding apparatus, comprising:

a first receiving module, configured to receive a first inter-network subscription signaling from a home network;

the first acquisition module is connected with the first receiving module and is used for acquiring the real address of the home network registration function (lNRF) network element from the first inter-network subscription signaling;

the topology hiding module is connected with the first acquisition module and is used for performing topology hiding on the real address of the home network lNRF network element so as to obtain a hidden address of the home network lNRF network element;

the first replacing module is connected with the topology hiding module and is used for replacing the real address of the home network lNRF network element in the first inter-network subscription signaling by using the hidden address of the home network lNRF network element so as to obtain a second inter-network subscription signaling;

and the first sending module is connected with the first replacing module and used for sending the second inter-network subscription signaling to the different network.

12. An inter-network subscription signaling topology restoration device, comprising:

the second receiving module is used for receiving fourth inter-network subscription signaling from the different network;

the second acquisition module is connected with the second receiving module and is used for acquiring a local network registration function (lNRF) network element hidden address from the fourth inter-network subscription signaling;

the topology restoration module is connected with the second acquisition module and is used for performing topology restoration on the hidden address of the home network lNRF network element so as to obtain the real address of the home network lNRF network element;

the second replacing module is connected with the topology restoring module and is used for replacing the home network lNRF network element hidden address in the fourth inter-network subscription signaling by using the home network lNRF network element real address so as to obtain a fifth inter-network subscription signaling;

and the second sending module is connected with the second replacing module and is used for sending the fifth inter-network subscription signaling in the home network.

13. A computer readable storage medium, having stored thereon a computer program which, when executed by a processor, implements an inter-network subscription signaling topology hiding method according to any one of claims 1-5 and/or an inter-network subscription signaling topology restoration method according to any one of claims 6-10.