KR102340000B1 - Method of Processing an Authentication Request From a Mobile Terminal - Google Patents

Abstract

Provided is a method of processing an authentication request from a terminal. The method comprises the steps of: receiving a first authentication request message from a terminal equipped with a 4G (4^th generation) universal subscriber identity module (USIM) through a 5G (5^th generation) base station in a core access and mobility management device; transmitting a second authentication request message to an authentication server device in response to receiving the first authentication request message from the core access and mobility management device; transmitting a first standalone (SA) connection blocking message to the core access and mobility management device in response to receiving the second authentication request message from the authentication server device; and transmitting a second SA connection blocking message to the terminal through the 5G base station in response to receiving the first SA connection blocking message by the core access and mobility management device. The present invention can ensure the mobility of the USIM.

Description

Method of Processing an Authentication Request From a Mobile Terminal

The present invention relates to mobile communication technology.

In recent years, 5G (5th Generation) communication technology, which is a 5G technology standard for a cellular communication network, has become a hot topic in the communication industry. With 2019 as the first year, many telecommunication companies in many countries are deploying and commercializing 5G communication systems. The 5G communication system provides communication services by dividing the service area into small geographic areas called 'cells' like its predecessor, the 4G communication system. to the Internet and telephone networks. The advantage of the 5G network is that it provides a high download speed of up to 10 gigabits per second (gigabits per second) because the bandwidth is wider than that of the 4G network. Based on this increased download speed, 5G networks are designed to connect anyone and anything, people, machines, things and devices together. 5G communication networks are also expected to create many applications in the Internet of Things (IoT) and Machine to Machine (M2M) areas.

An object of the present invention is to provide an authentication request processing method that can ensure the mobility of a Universal Subscriber Identity Module (USIM).

The problems to be solved by the present invention are not limited to the problems mentioned above, and other problems not mentioned will be clearly understood by those skilled in the art from the following description.

In one aspect, a method for processing an authentication request from a terminal is provided. The method includes the steps of receiving a first authentication request message from a terminal equipped with a 4G (4th Generation) Universal Subscriber Identity Module (USIM) through a 5G (5th Generation) base station in the core access and mobility management apparatus, the core access and forwarding a second authentication request message to an authentication server device in response to receiving the first authentication request message from the mobility management device, wherein the core in response to receiving the second authentication request message from the authentication server device transmitting a first SA (Standalone) connection blocking message to an access and mobility management device, and in response to receiving the first SA connection blocking message from the core access and mobility management device to the terminal through the 5G base station It may include transmitting a second SA connection blocking message.

In an embodiment, the core access and mobility management device is an AMF (Core Access and Mobility Management Function) defined in 3GPP.

In one embodiment, the authentication server device is an Authentication Server Function (AUSF) defined in 3GPP.

In an embodiment, the first SA access blocking message is a message informing that the terminal is a terminal that is not allowed to access a 5G network.

In an embodiment, the first SA access blocking message is a message inducing or instructing the terminal to retry access to the 4G network.

In an embodiment, the second SA access blocking message is a message indicating that the terminal is a terminal that is not permitted to access the 5G network.

In an embodiment, the second SA access blocking message is a message that induces or instructs the terminal to retry access to the 4G network.

In one embodiment, in response to receiving the first SA connection blocking message from the core access and mobility management apparatus, transmitting the second SA connection blocking message to the terminal through the 5G base station comprises: the core access and and sending the second SA access blocking message to the terminal through the 5G base station in the mobility management device to cause the terminal to retry access to the 4G network.

In one embodiment, the terminal is a 5G SA terminal.

In another aspect, a method for processing an authentication request from a terminal in an authentication server device is provided. The method includes receiving an authentication request message from a terminal equipped with a 4G USIM through a 5G base station and a core access and mobility management device, and in response to receiving the authentication request message, to the core access and mobility management device The step of transmitting the SA access blocking message - the SA access blocking message is a message indicating that the terminal is a terminal that is not allowed to access the 5G network - may include.

In one embodiment, the authentication server device is an AUSF defined in 3GPP.

In one embodiment, the core access and mobility management device is an AMF defined in 3GPP.

In one embodiment, transmitting an SA connection blocking message to the core access and mobility management device in response to receiving the authentication request message - The SA connection blocking message indicates that the terminal is not permitted to access the 5G network The message indicating that the terminal is a terminal includes the step of causing the terminal to retry access to the 4G network by sending the SA connection blocking message to the terminal through the core access and mobility management device and the 5G base station. do.

In one embodiment, the terminal is a 5G SA terminal.

In another aspect, a method for processing an authentication request from a terminal is provided. The method includes the steps of transmitting a second authentication request message to a core access and mobility management device in response to receiving a first authentication request message from a terminal equipped with a 4G USIM in a 5G base station, in the core access and mobility management device forwarding a third authentication request message to an authentication server device in response to receiving the second authentication request message; the core access and mobility management device in response to receiving the third authentication request message at the authentication server device forwarding the first SA connection blocking message to , and in response to receiving the first SA connection blocking message in the core access and mobility management device, forwarding the second SA connection blocking message to the terminal through the 5G base station may include the step of

In an embodiment, the first SA access blocking message is an error code message indicating that the terminal is a terminal that is not permitted to access the 5G network.

In an embodiment, the first SA access blocking message is an error code message that induces or instructs the terminal to retry access to the 4G network.

In an embodiment, the second SA access blocking message is an error code message indicating that the terminal is a terminal that is not permitted to access the 5G network.

In an embodiment, the second SA access blocking message is an error code message that induces or instructs the terminal to retry access to the 4G network.

In one embodiment, in response to receiving the first SA connection blocking message from the core access and mobility management apparatus, transmitting the second SA connection blocking message to the terminal through the 5G base station comprises: the core access and and sending the second SA access blocking message to the terminal through the 5G base station in the mobility management device to cause the terminal to retry access to the 4G network.

According to the embodiments of the present invention, there is a technical effect of providing an authentication request processing method that can ensure the mobility of the USIM.

1 is a diagram for explaining embodiments of a scenario in which a terminal accesses a 4th generation (4G) network and a scenario in which a terminal accesses a 5th generation (5G) network.
2 is a diagram illustrating an embodiment of a flowchart for explaining a method of processing an authentication request from a terminal.

Advantages and features of the present invention and a method of achieving them will become apparent with reference to the embodiments described below in detail in conjunction with the accompanying drawings. However, the present invention is not limited to the embodiments disclosed below, but will be implemented in a variety of different forms, and these embodiments merely allow the disclosure of the present invention to be complete and those of ordinary skill in the art to which the present invention pertains. It is provided to fully inform the person of the scope of the invention, and the present invention is only defined by the scope of the claims.

The terms used herein are used only to describe specific embodiments and are not intended to limit the present invention. For example, a component expressed in a singular should be understood as a concept including a plurality of components unless the context clearly means only the singular. In addition, in the specification of the present invention, terms such as 'include' or 'have' are only intended to designate that the features, numbers, steps, operations, components, parts, or combinations thereof described in the specification exist, and such The use of the term does not exclude the presence or addition of one or more other features or numbers, steps, operations, components, parts, or combinations thereof. In addition, in the embodiments described in this specification, a 'module' or 'unit' may mean a functional part that performs at least one function or operation.

In addition, unless otherwise defined, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs. Terms such as those defined in a commonly used dictionary should be interpreted as having a meaning consistent with the meaning in the context of the related art, and unless explicitly defined in the specification of the present invention, it should be interpreted in an ideal or excessively formal meaning. doesn't happen

Hereinafter, embodiments of the present invention will be described in more detail with reference to the accompanying drawings. However, in the following description, if there is a risk of unnecessarily obscuring the gist of the present invention, detailed descriptions of well-known functions or configurations will be omitted.

1 is a diagram for describing embodiments of a scenario in which a terminal accesses a 4th generation (4G) network and a scenario in which a terminal accesses a 5th generation (5G) network. It should be recognized that the 4G network and the 5G network shown in FIG. 1 have a simplified configuration for explaining a network access scenario by a terminal, and thus may include more components than the illustrated components.

A user possessing a 4G (LTE) terminal indicated by reference number 111 in FIG. 1 may access a 4G network using the 4G terminal 111 as is known and receive communication services such as voice and data. The 4G terminal 111 needs to be authenticated by the network before accessing the network, and for this purpose, a Universal Subscriber Identity Module (USIM) is installed. This USIM may be a 4G USIM for 4G. The 4G terminal 111 equipped with a 4G USIM transmits an authentication request message to the eNB 114, which is a 4G base station, to receive authentication from the network. The authentication request message transmitted from the 4G terminal 111 to the eNB 114 includes an authentication key generated by the 4G terminal 111 based on information stored in the USIM. Upon receiving the authentication request message from the 4G terminal 111, the eNB 114 transmits an authentication request message including an authentication key to the Mobility Management Entity (MME) 116 in response thereto. The MME 116 is a 4G network that performs signaling and control functions to support access to the network connection of the terminal, allocation of network resources, tracking, paging, roaming, handover, etc. It is a network entity. Upon receiving the authentication request message, the MME 116 transmits the authentication request message again to a Home Subscriber Server (HSS) 118 including a database storing subscriber authentication information. The HSS 118 functions to store and manage subscriber authentication information, which is USIM information of each opened terminal. Upon receiving the authentication message, the HSS 118 searches its own database to retrieve subscriber authentication data for the 4G terminal 111, generates an authentication key based on the retrieved data, and sends an authentication response message including the generated authentication key to the MME. Send it down to (116). Upon receiving the authentication response message from the HSS 118, the MME 116 compares the authentication key received from the 4G terminal 111 through the eNB 114 with the authentication key included in the authentication response message from the HSS 118. If matching is successful, an authentication response message notifying that authentication is successful is transmitted to the 4G terminal 111 through the eNB 114 . The 4G terminal 111, which has confirmed that authentication has been successful by receiving the authentication response message, proceeds with a subsequent network access procedure to receive communication services such as voice and data.

A user may purchase and use a new 5G standalone (SA) terminal for reasons such as a desire to receive more advanced communication services while using the 4G terminal 111, aging of the terminal, and the like. In this case, the user may want to take out the USIM that was installed in the 4G terminal and install it in the newly purchased 5G SA terminal. 5G SA terminals include portable terminals such as desktop or laptop PCs, tablet PCs, notebooks, and notepads that support various RAT (Radio Access Technology) such as NR (New Radio) and LTE/LTE-A; It may include various types of handheld-based wireless communication devices such as smart phones and non-portable devices such as in-vehicle devices, but it should be recognized that the types of 5G SA terminals are not limited thereto. Referring to FIG. 1 , a 5G terminal 112 equipped with a 4G USIM attempts an authentication request to access a 5G network. Specifically, the 5G terminal 112 transmits an authentication request message including an authentication key to the 5G base station gNB 124 . Upon receiving the authentication request message, the gNB 124 transfers the authentication request message back to the Core Access and Mobility Management Function (AMF) 126 . The AMF 126 performs authentication for the terminal in collaboration with AUSF (Authentication Server Function, 128) and UDM (User Data Management, not shown), which will be described later, when a 5G terminal accesses the 5G network for the first time, and performs terminal unit access and Provides functions for mobility management. Upon receiving the authentication request message, the AMF 126 transmits the authentication request message to the AUSF 128 again. The AUSF 128 performs terminal authentication in cooperation with a UDM that stores subscriber profile information such as subscriber authentication information and additional service information, and policy data such as whether incoming and outgoing voice, text, and data are possible. Upon receiving the authentication request message, the AUSF 128 confirms that the 4G USIM subscriber information is not on the 5G network side (ie, UDM) (since the USIM installed in the terminal 112 is not a 5G USIM), in this case authentication fails After processing and sending an error response message indicating that subscriber information does not exist on the 5G network side to the 5G terminal 112, the 5G terminal 112 does not attempt to access the 4G network and takes no action. to a state of out of service. According to the disclosed technology, even when the AUSF 128 confirms that the USIM subscriber information of the terminal making the authentication request does not exist on the 5G network side, an error response notifying the 5G terminal 112 that the subscriber information does not exist on the 5G network side Without sending down the message, an error response message (error code) is sent down to induce or instruct the 5G terminal 112 to retry access to the 4G network. In this way, the 5G terminal 112 can receive communication services such as data, voice, text, etc. through the 4G network by retrying access to the 4G network. Accordingly, the disclosed technology can ensure USIM mobility between terminals.

2 is a diagram illustrating an embodiment of a flowchart for explaining a method of processing an authentication request from a terminal.

As shown in FIG. 2 , the authentication request processing method starts with receiving a first authentication request message from the terminal 112 equipped with a 4G USIM in the gNB 124 ( S205 ). In step S210 , the gNB 124 transmits the second authentication request message to the AMF 126 in response to receiving the first authentication request message. In step S215 , in response to receiving the second authentication request message from the AMF 126 , a third authentication request message is transmitted to the AUSF 128 . In step S220, the AUSF 128 confirms that there is no USIM subscriber information of the terminal 112 making an authentication request in response to receiving the third authentication request message on the 5G network side. In an embodiment, the AUSF 128 confirms that the USIM subscriber information of the terminal 112 does not exist on the 5G network side by collaborating with the UDM that stores and manages subscriber authentication information. In step S225 , the AUSF 128 transmits the first SA (Standalone) access blocking message to the AMF 126 in response to confirming that the USIM subscriber information of the terminal 112 is not present on the 5G network side. In one embodiment, the first SA access blocking message is an error code message indicating that the terminal 112 is a terminal that is not allowed to access the 5G network. In one embodiment, the first SA access blocking message is an error code message that induces or instructs the terminal 112 to retry access to the 4G network. In step S230 , in response to receiving the first SA connection blocking message from the AMF 126 , the second SA connection blocking message is transmitted to the terminal 112 through the gNB 124 . In an embodiment, the second SA access blocking message is an error code message indicating that the terminal 112 is a terminal that is not permitted to access the 5G network. In an embodiment, the second SA access blocking message is an error code message that induces or instructs the terminal 112 to retry access to the 4G network. In one embodiment, the AMF 126 has a mapping table for message (error code) mapping, and using this mapping table, the first SA connection blocking message (error code) received from the AUSF 128 is used. code) may be mapped to the second SA access blocking message (error code). Upon receiving the second access blocking message, the terminal 112 attempts to access the 4G network again, since the HSS 118 in the 4G network stores a profile such as subscriber authentication information for the terminal 112 . The terminal 112 is able to use communication services such as voice, data, and text through the 4G network by successful authentication. According to the disclosed technology, even if the user takes out the 4G USIM used in the 4G terminal and attaches it to the 5G SA terminal, even if the user tries to access the 5G network, the user can access the 4G network again and use all communication services in the same way without falling into a service unavailable state. do. Accordingly, according to the disclosed technology, USIM mobility between terminals is guaranteed.

In the above description, the meaning of the description that a component is connected to or coupled to another component does not only mean that the component is directly connected or coupled to the other component, but also means that one or more other components are interposed therebetween. It should be understood to include the meaning that may be connected or coupled via an element. In addition, terms for describing the relationship between the elements (eg, 'between', 'between', etc.) should also be interpreted with similar meanings.

In the embodiments disclosed herein, the arrangement of the illustrated components may vary depending on the environment or requirements in which the invention is implemented. For example, some components may be omitted or some components may be integrated and implemented as one. Also, the arrangement order and connection of some components may be changed.

In the above, various embodiments of the present invention have been shown and described, but the present invention is not limited to the specific embodiments described above, and the above-described embodiments depart from the gist of the present invention as claimed in the appended claims. Without this, various modifications may be made by those of ordinary skill in the art to which the present invention pertains, and these modified embodiments should not be understood separately from the technical spirit or scope of the present invention. Accordingly, the technical scope of the present invention should be defined only by the appended claims.

111, 112: terminal
114: eNB
116: MME
118: HSS
124: gNB
126: AMF
128: AUSF

Claims (20)

As a method of processing an authentication request from a terminal,
Receiving a first authentication request message from a terminal equipped with a 4G (4th Generation) Universal Subscriber Identity Module (USIM) through a 5G (5th Generation) base station in the core access and mobility management device;
transmitting a second authentication request message to an authentication server device in response to receiving the first authentication request message from the core access and mobility management device;
forwarding a first SA (Standalone) connection blocking message to the core access and mobility management device in response to receiving the second authentication request message from the authentication server device, and
transmitting a second SA connection blocking message to the terminal through the 5G base station in response to receiving the first SA connection blocking message from the core access and mobility management device;
In response to receiving the first SA connection blocking message from the core access and mobility management device, the step of transmitting the second SA connection blocking message to the terminal through the 5G base station may include, in the core access and mobility management device, the second SA connection blocking message and sending the second SA access blocking message to the terminal through a 5G base station to cause the terminal to retry access to the 4G network.
According to claim 1,
The core access and mobility management device is an AMF (Core Access and Mobility Management Function) defined in 3GPP, an authentication request processing method.
The method of claim 1,
The authentication server device is an Authentication Server Function (AUSF) defined in 3GPP, the authentication request processing method.
According to claim 1,
The first SA access blocking message is a message informing that the terminal is a terminal that is not allowed to access the 5G network, the authentication request processing method.
The method of claim 1,
The first SA access blocking message is a message that induces or instructs the terminal to retry access to the 4G network.
According to claim 1,
The second SA access blocking message is a message indicating that the terminal is a terminal that is not allowed to access the 5G network, the authentication request processing method.
According to claim 1,
The second SA access blocking message is a message that induces or instructs the terminal to retry access to the 4G network.
delete The method of claim 1,
The terminal is a 5G SA terminal, the authentication request processing method.
A method of processing an authentication request from a terminal in an authentication server device, comprising:
Receiving an authentication request message from a terminal equipped with a 4G USIM through a 5G base station and a core access and mobility management device, and
Transmitting an SA connection blocking message to the core access and mobility management device in response to receiving the authentication request message - The SA connection blocking message is a message informing that the terminal is a terminal that is not allowed to access the 5G network - including;
Transmitting an SA connection blocking message to the core access and mobility management device in response to receiving the authentication request message - The SA connection blocking message is a message informing that the terminal is a terminal that is not allowed to access the 5G network -, including the step of causing the terminal to retry access to the 4G network by sending the SA connection blocking message to the terminal through the core access and mobility management device and the 5G base station. Way.
11. The method of claim 10,
The authentication server device is an AUSF defined in 3GPP, the authentication request processing method.
11. The method of claim 10,
The core access and mobility management device is an AMF defined in 3GPP, an authentication request processing method.
delete 11. The method of claim 10,
The terminal is a 5G SA terminal, the authentication request processing method.
As a method of processing an authentication request from a terminal,
transmitting the second authentication request message to the core access and mobility management device in response to receiving the first authentication request message from the terminal equipped with the 4G USIM in the 5G base station;
transmitting a third authentication request message to an authentication server device in response to receiving the second authentication request message from the core access and mobility management device;
transmitting a first SA connection blocking message to the core access and mobility management device in response to receiving the third authentication request message from the authentication server device; and
transmitting a second SA connection blocking message to the terminal through the 5G base station in response to receiving the first SA connection blocking message from the core access and mobility management device;
In response to receiving the first SA connection blocking message from the core access and mobility management device, the step of transmitting the second SA connection blocking message to the terminal through the 5G base station may include, in the core access and mobility management device, the second SA connection blocking message and sending the second SA access blocking message to the terminal through a 5G base station to cause the terminal to retry access to the 4G network.
16. The method of claim 15,
The first SA access blocking message is an error code message indicating that the terminal is a terminal that is not permitted to access the 5G network, the authentication request processing method.
16. The method of claim 15,
The first SA access blocking message is an error code message that induces or instructs the terminal to retry access to the 4G network.
16. The method of claim 15,
The second SA access blocking message is an error code message indicating that the terminal is a terminal that is not permitted to access the 5G network, the authentication request processing method.
16. The method of claim 15,
The second SA access blocking message is an error code message that induces or instructs the terminal to retry access to the 4G network.
delete

Images