WO2019042378A1 - 提供用户身份信息的方法、系统及存储介质 - Google Patents

提供用户身份信息的方法、系统及存储介质 Download PDF

Info

Publication number
WO2019042378A1
WO2019042378A1 PCT/CN2018/103353 CN2018103353W WO2019042378A1 WO 2019042378 A1 WO2019042378 A1 WO 2019042378A1 CN 2018103353 W CN2018103353 W CN 2018103353W WO 2019042378 A1 WO2019042378 A1 WO 2019042378A1
Authority
WO
WIPO (PCT)
Prior art keywords
identity information
user identity
address
session
application server
Prior art date
Application number
PCT/CN2018/103353
Other languages
English (en)
French (fr)
Inventor
吴中华
孙闵
叶敏雅
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Publication of WO2019042378A1 publication Critical patent/WO2019042378A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0876—Network architectures or network communication protocols for network security for authentication of entities based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/50—Address allocation
    • H04L61/5007—Internet protocol [IP] addresses
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/14—Session management
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/14—Session management
    • H04L67/141—Setup of application sessions
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/02—Capturing of monitoring data
    • H04L43/028—Capturing of monitoring data by filtering
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/20—Network architectures or network communication protocols for network security for managing network security; network security policies in general

Definitions

  • the present application relates to the field of wireless mobile communications, for example, to a method, system, and computer readable storage medium for providing user identity information.
  • the 5G core network realizes the separation of the control plane and the user plane.
  • the network function (NF) of the control plane basically adopts the service interface.
  • FIG. 1 is a schematic diagram of the 5G architecture in the related art.
  • the control plane NF includes : Access and Mobility Management Function (AMF); Session Management Function (SMF); Unified Data Management (UDM); Authentication Server Function (AUSF) ); Policy Control Function (PCF): Network Slice Selection Function (NSSF); Network Exposure Function (NEF); Network Function Repository Function (NRF) .
  • AMF Access and Mobility Management Function
  • SMF Session Management Function
  • UDM Unified Data Management
  • AUSF Authentication Server Function
  • PCF Policy Control Function
  • NSSF Network Slice Selection Function
  • NEF Network Exposure Function
  • NRF Network Function Repository Function
  • the user plane NF of the 5G core network is mainly the User Plan Function (UPF).
  • the user plane data stream passes through User Equipment (UE), Radio Access Network (R) AN, and UPF to the Application Function (AF) in the Data Network (DN). .
  • UE User Equipment
  • R Radio Access Network
  • AF Application Function
  • DN Data Network
  • the 5G UE itself has only the Subscriber Permanent Identifier (SUPI), such as the International Mobile Subscriber Identification Number obtained from the Subscriber Identity Module (SIM) card. , IMSI); and Persistent Equipment Identifier (PEI), such as International Mobile Equipment Identity (IMEI) obtained from the mobile terminal, user identity information such as mobile station integrated service digital network number (Mobile The Station Integrated Services Digital Network Number (MSISDN) is stored in the UDM.
  • SUPI Subscriber Permanent Identifier
  • SIM Subscriber Identity Module
  • PEI Persistent Equipment Identifier
  • IMEI International Mobile Equipment Identity
  • MSISDN Mobile Station Integrated Services Digital Network Number
  • NEF is responsible for the openness of network capabilities.
  • the 5G core network will be able to store Structured Data for Exposure in the Unified Data Repository (UDR).
  • UDR Unified Data Repository
  • the current structured data is mainly open to the public.
  • User location related data so that the NEF provides the application layer with the ability to query the user's location.
  • NEF, PCF, and UDM are the front ends of the UDR (Front End, FE).
  • Figure 2 is a schematic diagram of the stored data in the related technology UDR.
  • the data stored in the UDR includes: subscription data (Subscription Data): UDM User subscription data used; Policy Data: User policy data used by PCF; Structured Data for Exposure: used by NEF for capability opening; Application Data: It is mainly a packet flow description (PFD) written by a third-party application to the UDR through NEF, a Policy and Charging Enforcement Funcition (PCEF) located in the SMF, and a traffic detection function located in the SMF ( Traffic Detection Function (TDF), or TDF used separately.
  • PFD packet flow description
  • PCEF Policy and Charging Enforcement Funcition
  • TDF Traffic Detection Function
  • the application provider can apply to the operator, and notify the operation and maintenance personnel to modify the Deep Packet Inspection (DPI) after the operator approves the approval.
  • DPI Deep Packet Inspection
  • a rule is to insert MSISDN information in a header field or a Uniform Resource Locator (URL) of the application's Hyper Text Transport Protocol (HTTP) request.
  • URL Uniform Resource Locator
  • HTTP Hyper Text Transport Protocol
  • This method involves manual operations, which takes a long time to process, and modifying the URL of the HTTP request or enhancing the header field through DPI can reduce the packet forwarding efficiency.
  • this approach does not take care of the user's personal willingness to expose MSISDN preferences to third-party applications, which may result in user privacy disclosure.
  • the method for providing user identity information is applied to a 5G core network, including: when receiving a session request sent by a UE, acquiring user identity information, and assigning an Internet Protocol (IP) address to the session request. Corresponding relationship between the IP address and the user identity information is established; after the session is successfully established and the UE accesses the application server according to the IP address, when receiving the request message for obtaining the user identity information sent by the application server And performing the query in the corresponding relationship according to the IP address carried in the request message, to obtain user identity information, and sending the queried user identity information to the application server.
  • IP Internet Protocol
  • the method for providing user identity information in the present application before performing the query in the corresponding relationship according to the IP address carried in the request message, further includes: performing, on the application server The authentication is performed in the corresponding relationship according to the IP address carried in the request message when the identity of the application server meets the preset condition.
  • the Corresponding relationship between the IP address and the user identity information includes: when receiving the session request sent by the UE, acquiring the user identity information, and assigning an IP address to the session request; determining whether to allow the application according to the user subscription information
  • the server provides user identity information; when the user identity information is allowed to be provided to the application server, the correspondence between the IP address and the user identity information is constructed.
  • the method further includes: deleting the request message for ending the session, deleting Correspondence between the IP address and the user identity information.
  • the present application further provides a system for providing user identity information, which is applied to a 5G core network, including: an access and mobility management module, a correspondence relationship building module, a unified data management module, and a network capability opening module; And the mobility management module is configured to: when receiving the session request sent by the UE, acquire user identity information, and send the session request and the user identity information to the correspondence relationship building module; the correspondence relationship building module And configured to receive a session request sent by the access and mobility management module, allocate an IP address for the session request, receive user identity information sent by the access and mobility management module, and construct the IP address and the user.
  • a system for providing user identity information which is applied to a 5G core network, including: an access and mobility management module, a correspondence relationship building module, a unified data management module, and a network capability opening module; And the mobility management module is configured to: when receiving the session request sent by the UE, acquire user identity information, and send the session request and the user identity information to the correspondence relationship building module; the correspondence relationship building module And configured
  • the unified data management module is configured to store a correspondence between the IP address and the user identity information;
  • the network capability opening module is configured to, after the session is successfully established, receive the When the request message of the user identity information sent by the application server is sent, according to the IP carried in the request message Site in said correspondence relationship query and sends the query to the user identity information to the application server.
  • the network capability opening module is further configured to perform identity verification on the application server.
  • the access and mobility management module is configured to: according to the persistent user identifier carried in the session request sent by the UE, in a preset database. Make a query to get user identity information.
  • the correspondence relationship construction module includes a session management unit and a policy control unit, and the session management unit is configured to receive the access and move. a session request sent by the sex management module, assigning an IP address to the session request; receiving user identity information sent by the access and mobility management module, and sending a policy control request to the policy control unit; the policy control unit And, after receiving the policy control request, determining, according to the user subscription information, whether to allow the user identity information to be provided to the application server, and when the user identity information is allowed to be provided to the application server, constructing the IP address and Corresponding relationship of the user identity information or an instruction to construct a correspondence relationship to the session management unit; the session management unit is further configured to: after receiving the instruction for constructing the correspondence relationship, construct the IP address and the location The correspondence between the user identity information.
  • the corresponding relationship construction module is further configured to: when receiving the request message for ending the session, deleting the IP address and the user identity Correspondence of information.
  • the present application also provides a computer readable storage medium having stored thereon a program for providing end user identity information, the program for providing end user identity information being executed by a processor to implement the above A method of providing end user identity information.
  • FIG. 1 is a schematic diagram of a 5G architecture in the related art
  • FIG. 3 is a schematic flowchart of a method for providing user identity information in an embodiment of a method according to the present application
  • FIG. 4 is a schematic structural diagram of providing a user identity information system in an embodiment of an apparatus according to the present application.
  • FIG. 5 is a schematic diagram of a method for providing user identity information according to the present application.
  • Example 6 is a schematic flowchart of a method for providing user identity information in Example 1;
  • FIG. 7 is a schematic flowchart of a method for providing user identity information in Example 2.
  • a third-party application also referred to as an application server
  • the operation mode in some cases involves manual operation, long processing time, and reduced packet forwarding.
  • the present application provides a method, system and computer readable storage medium for providing user identity information, which will be described in detail below with reference to the accompanying drawings. It is understood that the specific embodiments described herein are merely illustrative of the application and are not intended to be limiting.
  • FIG. 3 is a schematic flowchart of a method for providing user identity information according to an embodiment of the present application, as shown in FIG.
  • the method for providing user identity information includes step S301, step S302, and step S303.
  • step S301 when receiving a session request sent by the user equipment (UE), acquiring user identity information, and assigning an IP address to the session request, constructing a correspondence between the IP address and the user identity information.
  • UE user equipment
  • step 301 includes: when receiving a session request sent by the UE, acquiring user identity information, and assigning an IP address to the session request; determining, according to the user subscription information, whether to allow the user to be provided to the application server Identity information; when the user identity information is allowed to be provided to the application server, constructing a correspondence between the IP address and the user identity information.
  • step S302 after the session establishment is successful and the UE accesses the application server according to the IP address, when receiving the request message for obtaining the user identity information sent by the application server, according to the IP carried in the request message The address is queried in the corresponding relationship to obtain user identity information.
  • the method before the querying in the corresponding relationship according to the IP address carried in the request message, the method further includes: performing identity verification on the application server, only when the identity of the application server meets a preset The condition can be queried in the corresponding relationship according to the IP address carried in the request message.
  • the identity information of the application server provider is also carried in the request message, so as to authenticate the application server.
  • step S303 the queried user identity information is sent to the application server.
  • the method further includes: deleting the correspondence between the IP address and the user identity information when receiving the request message for ending the session relationship.
  • the method for providing user identity information provided by the method embodiment of the present application, by constructing a correspondence between the IP address and the user identity information, when receiving the request message of the user identity information sent by the application server, according to the The IP address carried in the request message is queried in the corresponding relationship, and the user identity information is obtained.
  • the maintenance workload of the operator is reduced, the DPI burden is reduced, and the user packet forwarding efficiency is improved.
  • the device embodiment of the present application provides a system for providing user identity information, which is applied to a 5G core network
  • FIG. 4 is a schematic structural diagram of a user identity information system provided in an apparatus embodiment of the present application.
  • the system for providing user identity information in the device embodiment of the present application includes: an access and mobility management module 40, a correspondence relationship building module 42, a unified data management module 44, and a network capability opening module 46.
  • the access and mobility management module 40 is configured to: when receiving a session request sent by the UE, acquire user identity information, and send the session request and the user identity information to the Correspondence relationship building module 42.
  • the access and mobility management module 40 is configured to: query the user identity information according to the persistent user identifier carried in the session request sent by the UE in a preset database.
  • the correspondence construction module 42 is configured to receive a session request sent by the access and mobility management module 40, assign an IP address to the session request, and receive the access and mobility management.
  • the user identity information sent by the module 40 constructs a correspondence between the IP address and the user identity information.
  • the correspondence construction module 42 includes a session management unit and a policy control unit.
  • the session management unit is configured to receive a session request sent by the access and mobility management module 40, allocate an IP address for the session request, and receive user identity information sent by the access and mobility management module 40, And sending a policy control request to the policy control unit.
  • the policy control unit is configured to: after receiving the policy control request, determine, according to the user subscription information, whether to allow the user identity information to be provided to the application server, and when the user identity information is allowed to be provided to the application server, construct Corresponding relationship between the IP address and the user identity information or an instruction to construct a correspondence relationship to the session management unit.
  • the session management unit is further configured to: after receiving the instruction for constructing the correspondence relationship issued by the policy control unit, construct a correspondence between the IP address and the user identity information.
  • the correspondence relationship construction module 42 is further configured to delete the correspondence between the IP address and the user identity information when receiving the request message for ending the session.
  • the unified data management module 44 is configured to store a correspondence between the IP address and user identity information.
  • the network capability opening module 46 is configured to: when the request message of the user identity information sent by the application server is received, after the session is successfully established, according to the IP address carried in the request message, the corresponding The query is made in the relationship, and the queried user identity information is sent to the application server.
  • the network capability opening module 46 is further configured to authenticate the application server.
  • the system for providing user identity information provided by the embodiment of the present application, by constructing the corresponding relationship between the IP address and the user identity information, when receiving the request message of the user identity information sent by the application server, according to the The IP address carried in the request message is queried in the corresponding relationship, and the user identity information is obtained.
  • the maintenance workload of the operator is reduced, the DPI burden is reduced, and the user packet forwarding efficiency is improved.
  • the application is provided by the core network network capability opening module (implemented by NEF in the present application, referred to as NEF hereinafter) to the application server to query the user identity information MSISDN according to the user IP address, so that the application server can access the server according to the user.
  • the IP address used is queried to the network capability opening module for the corresponding MSISDN.
  • FIG. 5 is a schematic diagram of a method for providing user identity information according to the present application. As shown in FIG. 5, the following steps are included.
  • step 1a the session management unit (implemented by SMF in the present application, hereinafter referred to as SMF) is instructed to decide whether to set the user IP address according to the policy control unit (implemented by PCF in the present application, hereinafter referred to as PCF).
  • PCF policy control unit
  • the MSISDN correspondence is written into the UDR unified data management module (implemented by UDR in the present application, hereinafter referred to as UDR for short).
  • step 1b the PCF decides whether to instruct the SMF (or PCF) to write the user IP address and the MSISDN correspondence relationship to the UDR according to the user subscription.
  • step 2 after the PDU session is successfully established, the UE accesses the application server AF according to the allocated user IP address.
  • step 3 the AF provides third-party application provider identity information and user IP address, and requests the NEF to query the MSISDN.
  • step 4 the NEF performs identity authentication and authorization on the query request, and after the authorization is passed, the MSISDN is queried according to the user IP address to the UDR, and the query result is returned to the AF.
  • the present application stores the user IP address and the MSISDN correspondence relationship into the UDR by the SMF or the PCF.
  • the PCF determines whether the SMF or the PCF stores the user IP address and the MSISDN correspondence relationship into the UDR according to the user subscription.
  • the third-party application may send the third-party application provider's identity verification information to the NEF to query the MSISDN request according to the user IP address, and the operator may also pass the NEF or operate.
  • a Business Support System (BSS) or other functional entity provides an identity registration and login interface to third-party application providers for full process automation.
  • the MSISDN package is queried according to the user IP address to provide a service provided by NEF.
  • the application provider can decide whether to invoke the service according to the requirements.
  • NEF can automate the authentication and authorization of third-party applications by querying MSISDN requests based on IP addresses. Compared with the related technologies, the maintenance workload of the operator is reduced, the DPI burden is reduced, and the user packet forwarding efficiency is improved. And this application takes care of whether the user is willing to provide the privacy preferences of the MSISDN to third party applications.
  • FIG. 6 is a schematic flowchart of a method for providing user identity information in Example 1, as shown in FIG. 6, including the following steps. .
  • step 1 the UE requests the SMF to establish a PDU session, and the request message is transited through the AMF.
  • the AMF obtains the corresponding MSISDN according to the SUPI query UDM provided by the UE, and joins the MSISDN in the PDU session establishment request forwarded to the SMF.
  • step 2 the SMF assigns an IP address to the PDU session.
  • step 3 the SMF requests policy control from the PCF.
  • step 4 the PCF queries the user for a contract.
  • step 5 the PCF finds that the user subscription allows the MSISDN to be exposed to the third party application, and instructs the SMF to write the user IP address and the MSISDN correspondence to the UDR in the policy control response to the SMF.
  • step 6 the SMF writes the user IP address and the MSISDN correspondence into the structured database of the UDR according to the indication of the PCF.
  • step 7 the UE accesses the application server AF according to the assigned IP address after the PDU session is successfully established.
  • step 8 when the AF needs to query the MSISDN corresponding to the user's IP address, the AF finds the NEF according to the user's IP address, provides the third-party application provider identity information and the user IP address to the NEF, and requests to query the corresponding MSISDN.
  • step 9 the NEF authenticates and authorizes the query request sent by the AF, and then proceeds to the next step after successful, otherwise returns an authentication or authorization failure result to the AF.
  • step 10 the NEF queries the UDR for the MSISDN corresponding to the user IP address.
  • step 11 the NEF returns the MSISDN query result to the AF.
  • step 12 the user requests to end the PDU session.
  • step 13 the SMF releases the user IP address and deletes the user IP address and MSISDN correspondence in the UDR.
  • FIG. 7 is a schematic flowchart of a method for providing user identity information in Example 2, as shown in FIG. 7, including the following steps:
  • step 1 the UE requests the SMF to establish a PDU session, and the request message is transited by the AMF.
  • the AMF obtains the corresponding MSISDN according to the SUPI query UMD provided by the UE, and then joins the MSISDN in the PDU session establishment request forwarded to the SMF.
  • step 2 the SMF assigns an IP address to the PDU session.
  • step 3 the SMF requests policy control from the PCF.
  • step 4 the PCF queries the user for a contract.
  • step 5 the user IP address and the MSISDN correspondence relationship are written to the UDR on the premise that the user policy signing permission is allowed.
  • step 6 after the PDU session is established, the AF is accessed according to the assigned IP address.
  • step 7 when the AF needs to query the MSISDN corresponding to the user IP address, the AF finds the NEF according to the user IP address, provides the third party application provider identity information and the user IP address to the NEF, and requests to query the corresponding MSISDN.
  • step 8 the NEF authenticates and authorizes the query request sent by the AF, and then proceeds to the next step after successful, otherwise returns an authentication or authorization failure result to the AF.
  • step 9 the NEF queries the UDR for the MSISDN corresponding to the user IP address.
  • step 10 the NEF returns the MSISDN query result to the AF.
  • step 11 the user requests to end the PDU session.
  • step 12 the request ends the policy control.
  • step 13 the SMF releases the user IP address and deletes the user IP address and MSISDN correspondence in the UDR.
  • the PCF may instruct the SMF or the PCF to write the user IP address and the MSISDN correspondence to the structured database of the UDR when the user subscribes, so that the NEF provides the capability of querying the MSISDN according to the IP address.
  • the NEF can authenticate and authorize the AF query request and only open the capabilities to third-party application providers who have purchased the service.
  • the present application also provides a computer readable storage medium having stored thereon a program for providing end user identity information, the program for providing end user identity information being executed by a processor to implement the above A method of providing end user identity information.
  • the computer-readable storage medium provided by the embodiment of the present application, by constructing a correspondence between the IP address and the user identity information, when receiving a request message for obtaining user identity information sent by the application server, according to the request
  • the IP address carried in the message is queried in the corresponding relationship, and the user identity information is obtained.
  • the maintenance workload of the operator is reduced, the DPI burden is reduced, and the packet forwarding efficiency of the user is improved.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computer Security & Cryptography (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Power Engineering (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

本申请提供了一种提供用户身份信息的方法，包括：当接收到UE发送的会话请求时，获取用户身份信息，并为会话请求分配IP地址，构建IP地址与用户身份信息的对应关系；在会话建立成功且UE根据IP地址访问应用服务器之后，当接收到应用服务器发送的获知用户身份信息的请求消息时，根据请求消息中携带的IP地址在对应关系中进行查询，得到用户身份信息；将查询到的用户身份信息发送至应用服务器。

Description

提供用户身份信息的方法、系统及存储介质
本申请要求在2017年08月30日提交中国专利局、申请号为201710762664.5的中国专利申请的优先权，该申请的全部内容通过引用结合在本申请中。
技术领域
本申请涉及无线移动通讯领域，例如涉及一种提供用户身份信息的方法、系统及计算机可读存储介质。
背景技术
5G核心网实现了控制面和用户面分离，控制面网络功能(Network Function，NF)间基本采用服务化接口，图1为相关技术中的5G架构示意图，如图1所示，控制面NF包括：接入和移动性管理功能(Access and Mobility Management Function，AMF)；会话管理功能(Session Management Function，SMF)；统一数据管理(Unified Data Management，UDM)；鉴权服务器功能(Authentication Server Function，AUSF)；策略控制功能(Policy Control function，PCF)：网络切片选择功能(Network Slice Selection Function，NSSF)；网络能力开放功能(Network Exposure Function，NEF)；网络功能库功能(Network Function Repository Function，NRF)。
5G核心网的用户面NF主要是用户面功能(User Plan Function，UPF)。用户面数据流经过用户设备(User Equipment，UE)、无线接入网(Radio Access Network，(R)AN)、UPF传递到数据网络(Data network，DN)中的应用功能(Application Function，AF)。
和2/3/4G类似，5G UE本身只有持久用户标识(Subscriber Permanent Identifier，SUPI)，例如从客户识别模块(Subscriber Identity Module，SIM)卡中获取的国际移动用户识别码(International Mobile Subscriber Identification Number，IMSI)；以及持久设备标识(Permanent Equipment Identifier，PEI)，例如从移动终端中获取的国际移动设备识别码(International Mobile Equipment Identity，IMEI)，用户身份信息如移动台综合业务数字网号码(Mobile Station Integrated Services Digital Network Number，MSISDN)则存放在UDM中，在用 户接入网络时，AMF根据SUPI从UDM获取MSISDN，在转发PDU会话建立请求时传送给SMF，SMF在策略请求中带给PCF。
在5G架构中，NEF负责网络能力开放，5G核心网将能够对外开放的结构化数据(Structured Data for Exposure)存放在统一数据库(Unified Data Repository，UDR)中，当前对外开放的结构化数据主要是用户位置相关数据，以便NEF对应用层提供查询用户位置的能力。NEF、PCF、UDM都是UDR的前端(Front End，FE)，图2为相关技术UDR中的存储数据示意图，如图2所示，UDR中存储的数据包括：签约数据(Subscription Data)：UDM使用的用户签约数据；策略数据(Policy Data)：PCF使用的用户策略数据；用于能力开放的结构化数据(Structured Data for Exposure)：主要被NEF用于能力开放；应用数据(Application Data)：主要是第三方应用通过NEF写入到UDR的报文流描述(Packet Flow Description，PFD)，被位于SMF中的策略执行功能(Policy and Charging Enforcement Funcition，PCEF)以及位于SMF中的流量探测功能(Traffic Detection Function，TDF)，或单独部署的TDF使用。
相关技术中，如果第三方应用希望获知终端用户访问应用服务器时使用的MSISDN，应用提供商可以向运营商申请，运营商审批通过后，通知运维人员修改深度包检测(Deep Packet Inspection，DPI)规则，在该应用的超文本传输协议(Hyper Text Transport Protocol，HTTP)请求的头域或统一资源定位符(Uniform Resource Locator，URL)中插入MSISDN信息。这种方式涉及人工操作，处理时间长，而且通过DPI修改HTTP请求的URL或增强头域会降低报文转发效率。此外，这种方式没有照顾用户个人是否愿意对第三方应用暴露MSISDN的偏好，可能造成用户隐私泄露。
发明内容
以下是对本文详细描述的主题的概述。本概述并非是为了限制权利要求的保护范围。
在相关技术中当第三方应用希望获知终端用户访问应用服务器时使用的用户身份信息时，有些的操作方式涉及人工操作、处理时间长且会降低报文转发效率，本申请提供了一种提供用户身份信息的方法、系统及计算机可读存储介质。
本申请提供的提供用户身份信息的方法，应用于5G核心网，包括：当接收到UE发送的会话请求时，获取用户身份信息，并为所述会话请求分配互联网协议(Internet Protocol，IP)地址，构建所述IP地址与所述用户身份信息的对应关系；在所述会话建立成功且UE根据所述IP地址访问应用服务器之后，当接收到所述应用服务器发送的获知用户身份信息的请求消息时，根据所述请求消息中携带的IP地址在所述对应关系中进行查询，得到用户身份信息；将查询到的用户身份信息发送至所述应用服务器。
在一实施例中，在本申请所述的提供用户身份信息的方法中，在根据所述请求消息中携带的IP地址在所述对应关系中进行查询之前，还包括：对所述应用服务器进行身份验证，当所述应用服务器的身份符合预设的条件时，根据所述请求消息中携带的IP地址在所述对应关系中进行查询。
在一实施例中，在本申请所述的提供用户身份信息的方法中，所述当接收到UE发送的会话请求时，获取用户身份信息，并为所述会话请求分配IP地址，构建所述IP地址与所述用户身份信息的对应关系包括：当接收到UE发送的会话请求时，获取用户身份信息，并为所述会话请求分配IP地址；根据用户签约信息，判断是否允许向所述应用服务器提供用户身份信息；当允许向所述应用服务器提供用户身份信息时，构建所述IP地址与所述用户身份信息的对应关系。
在一实施例中，在本申请所述的提供用户身份信息的方法中，在将查询到的用户身份信息发送至所述应用服务器之后，还包括：当接收到结束会话的请求消息时，删除所述IP地址与所述用户身份信息的对应关系。
本申请还提供了一种提供用户身份信息的系统，应用于5G核心网，包括：接入和移动性管理模块、对应关系构建模块、统一数据管理模块、及网络能力开放模块；所述接入和移动性管理模块，设置为当接收到UE发送的会话请求时，获取用户身份信息，并将所述会话请求和所述用户身份信息发送至所述对应关系构建模块；所述对应关系构建模块，设置为接收所述接入和移动性管理模块发送的会话请求，为所述会话请求分配IP地址；接收所述接入和移动性管理模块发送的用户身份信息，构建所述IP地址与用户身份信息的对应关系；所述统一数据管理模块，设置为存储所述IP地址与用户身份信息的对应关系；所述网络能力开放模块，设置为在所述会话建立成功后，当接收到所述应用服务器发送的获知用户身份信息的请求消息时，根据所述请求消息中携带的IP地址在所 述对应关系中进行查询，并将查询到的用户身份信息发送至所述应用服务器。
在一实施例中，在本申请所述的提供用户身份信息的系统中，所述网络能力开放模块还设置为对所述应用服务器进行身份验证。
在一实施例中，在本申请所述的提供用户身份信息的系统中，所述接入和移动性管理模块设置为：根据UE发送的会话请求中携带的持久用户标识在预设的数据库中进行查询得到用户身份信息。
在一实施例中，在本申请所述的提供用户身份信息的系统中，所述对应关系构建模块包括会话管理单元、策略控制单元；所述会话管理单元，设置为接收所述接入和移动性管理模块发送的会话请求，为所述会话请求分配IP地址；接收所述接入和移动性管理模块发送的用户身份信息，并向所述策略控制单元发送策略控制请求；所述策略控制单元，设置为当接收到所述策略控制请求后，根据用户签约信息，判断是否允许向所述应用服务器提供用户身份信息，当允许向所述应用服务器提供用户身份信息时，构建所述IP地址与所述用户身份信息的对应关系或者向所述会话管理单元发出构建对应关系的指令；所述会话管理单元，还设置为当接收到所述构建对应关系的指令后，构建所述IP地址与所述用户身份信息的对应关系。
在一实施例中，在本申请所述的提供用户身份信息的系统中，所述对应关系构建模块还设置为：当接收到结束会话的请求消息时，删除所述IP地址与所述用户身份信息的对应关系。
本申请还提供了一种计算机可读存储介质，所述计算机可读存储介质上存储有提供终端用户身份信息的程序，所述提供终端用户身份信息的程序被处理器执行时实现如上所述的提供终端用户身份信息的方法。
在阅读并理解了附图和详细描述后，可以明白其他方面。
附图说明
图1为相关技术中的5G架构示意图；
图2为相关技术UDR中的存储数据示意图；
图3为本申请方法实施例中提供用户身份信息方法的流程示意图；
图4为本申请装置实施例中提供用户身份信息系统的结构示意图；
图5为本申请提供用户身份信息方法的示意图；
图6为实例1中提供用户身份信息方法的流程示意图；
图7为实例2中提供用户身份信息方法的流程示意图。
具体实施方式
下面将参照附图更详细地描述本公开的示例性实施例。虽然附图中显示了本公开的示例性实施例，然而应当理解，可以以各种形式实现本公开而不应被这里阐述的实施例所限制。相反，提供这些实施例是为了能够更透彻地理解本公开，并且能够将本公开的范围完整的传达给本领域的技术人员。
相关技术中当第三方应用(也可称为应用服务器)希望获知终端用户访问应用服务器时使用的用户身份信息时，在一些情况下的操作方式涉及人工操作、处理时间长且会降低报文转发效率，本申请提供了一种提供用户身份信息的方法、系统及计算机可读存储介质，以下结合附图对本申请进行详细说明。应当理解，此处所描述的具体实施例仅仅用以解释本申请，并不限定本申请。
本申请实施例提供了一种提供用户身份信息的方法，应用于5G核心网，图3为本申请方法实施例中提供用户身份信息方法的流程示意图，如图3所示，本申请方法实施例的提供用户身份信息的方法，包括步骤S301，步骤S302以及步骤S303。
在步骤S301中，当接收到用户设备(UE)发送的会话请求时，获取用户身份信息，并为所述会话请求分配IP地址，构建所述IP地址与所述用户身份信息的对应关系。
在一实施例中，步骤301包括：当接收到UE发送的会话请求时，获取用户身份信息，并为所述会话请求分配IP地址；根据用户签约信息，判断是否允许向所述应用服务器提供用户身份信息；当允许向所述应用服务器提供用户身份信息时，构建所述IP地址与所述用户身份信息的对应关系。
在步骤S302中，在所述会话建立成功且UE根据所述IP地址访问应用服务器之后，当接收到所述应用服务器发送的获知用户身份信息的请求消息时，根据所述请求消息中携带的IP地址在所述对应关系中进行查询，得到用户身份信息。
在一实施例中，在根据所述请求消息中携带的IP地址在所述对应关系中进行查询之前，还包括：对所述应用服务器进行身份验证，只有当所述应用服务 器的身份符合预设的条件时，才能根据所述请求消息中携带的IP地址在所述对应关系中进行查询。
在一实施例中，在所述请求消息中还携带应用服务器提供商的身份信息，以便于对所述应用服务器进行身份验证。
在步骤S303中，将查询到的用户身份信息发送至所述应用服务器。
在一实施例中，在步骤303将查询到的用户身份信息发送至所述应用服务器之后，还包括：当接收到结束会话的请求消息时，删除所述IP地址与所述用户身份信息的对应关系。
本申请方法实施例提供的提供用户身份信息的方法，通过构建所述IP地址与所述用户身份信息的对应关系，当接收到所述应用服务器发送的获知用户身份信息的请求消息时，根据所述请求消息中携带的IP地址在所述对应关系中进行查询，得到用户身份信息，相对于相关技术，减轻了运营商的维护工作量，减轻了DPI负担，提高了用户报文转发效率。
与本申请的方法实施例相对应，本申请的装置实施例提供了一种提供用户身份信息的系统，应用于5G核心网，图4为本申请装置实施例中提供用户身份信息系统的结构示意图，如图4所示，本申请装置实施例的提供用户身份信息的系统，包括：接入和移动性管理模块40，对应关系构建模块42，统一数据管理模块44，及网络能力开放模块46。
在一实施例中，所述接入和移动性管理模块40，设置为当接收到UE发送的会话请求时，获取用户身份信息，并将所述会话请求和所述用户身份信息发送至所述对应关系构建模块42。
在一实施例中，所述接入和移动性管理模块40设置为：根据UE发送的会话请求中携带的持久用户标识在预设的数据库中进行查询得到用户身份信息。
在一实施例中，所述对应关系构建模块42，设置为接收所述接入和移动性管理模块40发送的会话请求，为所述会话请求分配IP地址；接收所述接入和移动性管理模块40发送的用户身份信息，构建所述IP地址与用户身份信息的对应关系。
在一实施例中，所述对应关系构建模块42包括会话管理单元、策略控制单元。
所述会话管理单元，设置为接收所述接入和移动性管理模块40发送的会话 请求，为所述会话请求分配IP地址；接收所述接入和移动性管理模块40发送的用户身份信息，并向所述策略控制单元发送策略控制请求。
所述策略控制单元，设置为当接收到所述策略控制请求后，根据用户签约信息，判断是否允许向所述应用服务器提供用户身份信息，当允许向所述应用服务器提供用户身份信息时，构建所述IP地址与所述用户身份信息的对应关系或者向所述会话管理单元发出构建对应关系的指令。
所述会话管理单元，还设置为当接收到所述策略控制单元发出的构建对应关系的指令后，构建所述IP地址与所述用户身份信息的对应关系。
在一实施例中，所述对应关系构建模块42还设置为：当接收到结束会话的请求消息时，删除所述IP地址与所述用户身份信息的对应关系。
所述统一数据管理模块44，设置为存储所述IP地址与用户身份信息的对应关系。
所述网络能力开放模块46，设置为在所述会话建立成功后，当接收到所述应用服务器发送的获知用户身份信息的请求消息时，根据所述请求消息中携带的IP地址在所述对应关系中进行查询，并将查询到的用户身份信息发送至所述应用服务器。
在一实施例中，所述网络能力开放模块46还设置为对所述应用服务器进行身份验证。
本申请装置实施例提供的提供用户身份信息的系统，通过构建所述IP地址与所述用户身份信息的对应关系，当接收到所述应用服务器发送的获知用户身份信息的请求消息时，根据所述请求消息中携带的IP地址在所述对应关系中进行查询，得到用户身份信息，相对于相关技术，减轻了运营商的维护工作量，减轻了DPI负担，提高了用户报文转发效率。
下面结合本申请装置实施例对本申请提供用户身份信息的方法进行说明。本申请由核心网网络能力开放模块(在本申请中通过NEF实现，在下面简称为NEF)对应用服务器提供根据用户IP地址查询用户身份信息MSISDN的服务，这样应用服务器可以根据用户访问该服务器时所使用的IP地址，向网络能力开放模块查询对应的MSISDN。图5为本申请提供用户身份信息方法的示意图，如图5所示，包括以下步骤。
在步骤1a中，会话管理单元(在本申请中通过SMF实现，在下面简称为 SMF)根据策略控制单元(在本申请中通过PCF实现，在下面简称为PCF)指示决定是否将用户IP地址与MSISDN对应关系写入UDR统一数据管理模块(在本申请中通过UDR实现，在下面简称为UDR)。
在步骤1b中，PCF根据用户签约决定是否指示SMF(或PCF)将用户IP地址与MSISDN对应关系写入UDR。
在步骤2中，UE在PDU会话建立成功后根据所分配的用户IP地址访问应用服务器AF。
在步骤3中，AF提供第三方应用提供商身份信息和用户IP地址，向NEF请求查询MSISDN。
在步骤4中，NEF对查询请求进行身份认证和授权，授权通过后根据用户IP地址向UDR查询MSISDN，将查询结果返回AF。
为了能使NEF对第三方应用提供根据用户IP地址查询MSISDN的服务，本申请由SMF或PCF将用户IP地址和MSISDN对应关系存入UDR。为了照顾用户个人是否愿意对第三方应用暴露MSISDN的偏好，本申请由PCF根据用户签约中决定SMF或PCF是否将用户IP地址和MSISDN对应关系存入UDR。为了便于NEF对第三方应用的查询请求进行身份认证和授权，第三方应用向NEF发起的根据用户IP地址查询MSISDN请求可以携带第三方应用提供商的身份验证信息，运营商还可以通过NEF或运营支撑系统(Business Support System，BSS)或其它功能实体向第三方应用提供商提供身份注册和登录接口，以实现全流程自动化。
通过本申请，将根据用户IP地址查询MSISDN包装为NEF对外提供的一个服务，应用提供商可以根据需求自行决定是否调用该服务。NEF可以自动化的对第三方应用的根据IP地址查询MSISDN请求进行身份认证和授权。相比相关技术，减轻了运营商维护工作量，减轻了DPI负担，提高了用户报文转发效率。并且本申请照顾了用户个人是否愿意向第三方应用提供MSISDN的隐私偏好。
为了更加详细的说明本申请方法实施例的提供用户身份信息的方法，给出实例1和实例2，图6为实例1中提供用户身份信息方法的流程示意图，如图6所示，包括以下步骤。
在步骤1中，UE向SMF请求建立PDU会话，请求消息经过AMF中转， AMF根据UE提供的SUPI查询UDM获取对应的MSISDN，在转发给SMF的PDU会话建立请求中加入MSISDN。
在步骤2中，SMF为PDU会话分配IP地址。
在步骤3中，SMF向PCF请求策略控制。
在步骤4中，PCF查询用户签约。
在步骤5中，PCF发现用户签约允许向第三方应用暴露MSISDN，则在给SMF的策略控制响应中指示SMF将用户IP地址和MSISDN对应关系写入UDR。
在步骤6中，SMF根据PCF的指示，将用户IP地址和MSISDN对应关系写入UDR的结构化数据库中。
在步骤7中，UE在PDU会话建立成功后根据所分配的IP地址访问应用服务器AF。
在步骤8中，当AF需要查询用户IP地址对应的MSISDN时，AF根据用户IP地址找到NEF，向NEF提供第三方应用提供商身份信息和用户IP地址，请求查询对应的MSISDN。
在步骤9中，NEF对AF发来的查询请求进行身份验证和授权，成功后进入下一步骤，否则向AF返回身份验证或授权失败结果。
在步骤10中，NEF向UDR查询用户IP地址对应的MSISDN。
在步骤11中，NEF将MSISDN查询结果返回给AF。
在步骤12中，用户请求结束PDU会话。
在步骤13中，SMF释放用户IP地址，并删除UDR中用户IP地址和MSISDN对应关系。
图7为实例2中提供用户身份信息方法的流程示意图，如图7所示，包括以下步骤：
在步骤1中，UE向SMF请求建立PDU会话，请求消息经过AMF中转，AMF根据UE提供的SUPI查询UDM获取对应的MSISDN，再转发给SMF的PDU会话建立请求中加入MSISDN。
在步骤2中，SMF为PDU会话分配IP地址。
在步骤3中，SMF向PCF请求策略控制。
在步骤4中，PCF查询用户签约。
在步骤5中，在用户策略签约允许的前提下，将用户IP地址和MSISDN对 应关系写入UDR。
在步骤6中，PDU会话建立后根据所分配的IP地址访问AF。
在步骤7中，当AF需要查询用户IP地址对应的MSISDN时，AF根据用户IP地址找到NEF，向NEF提供第三方应用提供商身份信息和用户IP地址，请求查询对应的MSISDN。
在步骤8中，NEF对AF发来的查询请求进行身份验证和授权，成功后进入下一步骤，否则向AF返回身份验证或授权失败结果。
在步骤9中，NEF向UDR查询用户IP地址对应的MSISDN。
在步骤10中，NEF将MSISDN查询结果返回给AF。
在步骤11中，用户请求结束PDU会话。
在步骤12中，请求结束策略控制。
在步骤13中，SMF释放用户IP地址，并删除UDR中用户IP地址和MSISDN对应关系。
通过上述实例，PCF可以在用户签约允许的情况下，指示SMF或由PCF自己将用户IP地址和MSISDN对应关系写入UDR的结构化数据库，以便NEF对外提供根据IP地址查询MSISDN的能力。NEF可以对AF的查询请求进行身份验证和授权，仅对购买了该服务的第三方应用提供商开放能力。
本申请还提供了一种计算机可读存储介质，所述计算机可读存储介质上存储有提供终端用户身份信息的程序，所述提供终端用户身份信息的程序被处理器执行时实现如上所述的提供终端用户身份信息的方法。
本申请实施例提供的计算机可读存储介质，通过构建所述IP地址与所述用户身份信息的对应关系，当接收到所述应用服务器发送的获知用户身份信息的请求消息时，根据所述请求消息中携带的IP地址在所述对应关系中进行查询，得到用户身份信息，相对于相关技术，减轻了运营商的维护工作量，减轻了DPI负担，提高了用户报文转发效率。

Claims (10)

  1. 一种提供用户身份信息的方法，应用于5G核心网，包括：
    当接收到用户设备UE发送的会话请求时，获取用户身份信息，并为所述会话请求分配互联网协议IP地址，构建所述IP地址与所述用户身份信息的对应关系；
    在所述会话建立成功且所述UE根据所述IP地址访问应用服务器之后，当接收到所述应用服务器发送的获知用户身份信息的请求消息时，根据所述请求消息中携带的IP地址在所述对应关系中进行查询，得到用户身份信息；
    将查询到的用户身份信息发送至所述应用服务器。
  2. 如权利要求1所述的提供用户身份信息的方法，在根据所述请求消息中携带的IP地址在所述对应关系中进行查询之前，还包括：
    对所述应用服务器进行身份验证，当所述应用服务器的身份符合预设的条件时，根据所述请求消息中携带的IP地址在所述对应关系中进行查询。
  3. 如权利要求1所述的提供用户身份信息的方法，其中，所述当接收到UE发送的会话请求时，获取用户身份信息，并为所述会话请求分配IP地址，构建所述IP地址与所述用户身份信息的对应关系包括：
    当接收到UE发送的会话请求时，获取用户身份信息，并为所述会话请求分配IP地址；
    根据用户签约信息，判断是否允许向所述应用服务器提供所述用户身份信息；
    当允许向所述应用服务器提供所述用户身份信息时，构建所述IP地址与所述用户身份信息的对应关系。
  4. 如权利要求1所述的提供用户身份信息的方法，在将查询到的用户身份信息发送至所述应用服务器之后，还包括：
    当接收到结束会话的请求消息时，删除所述IP地址与所述用户身份信息的对应关系。
  5. 一种提供用户身份信息的系统，应用于5G核心网，包括：接入和移动性管理模块、对应关系构建模块、统一数据管理模块、及网络能力开放模块；
    所述接入和移动性管理模块，设置为当接收到用户设备(UE)发送的会话请求时，获取用户身份信息，并将所述会话请求和所述用户身份信息发送至所述对应关系构建模块；
    所述对应关系构建模块，设置为接收所述接入和移动性管理模块发送的会话请求，为所述会话请求分配互联网协议(IP)地址；接收所述接入和移动性管理模块发送的用户身份信息，构建所述IP地址与用户身份信息的对应关系；
    所述统一数据管理模块，设置为存储所述IP地址与用户身份信息的对应关系；
    所述网络能力开放模块，设置为在所述会话建立成功后，当接收到所述应用服务器发送的获知用户身份信息的请求消息时，根据所述请求消息中携带的IP地址在所述对应关系中进行查询，并将查询到的用户身份信息发送至所述应用服务器。
  6. 如权利要求5所述的提供用户身份信息的系统，所述网络能力开放模块还设置为对所述应用服务器进行身份验证。
  7. 如权利要求5所述的提供用户身份信息的系统，其中，所述接入和移动性管理模块设置为：根据UE发送的会话请求中携带的持久用户标识在预设的数据库中进行查询，得到用户身份信息。
  8. 如权利要求7所述的提供用户身份信息的系统，其中，所述对应关系构建模块包括会话管理单元以及策略控制单元；
    所述会话管理单元，设置为接收所述接入和移动性管理模块发送的会话请求，为所述会话请求分配IP地址；接收所述接入和移动性管理模块发送的用户身份信息，并向所述策略控制单元发送策略控制请求；
    所述策略控制单元，设置为当接收到所述策略控制请求后，根据用户签约信息，判断是否允许向所述应用服务器提供用户身份信息，当允许向所述应用服务器提供用户身份信息时，构建所述IP地址与所述用户身份信息的对应关系或者向所述会话管理单元发出构建对应关系的指令；
    所述会话管理单元，还设置为当接收到所述构建对应关系的指令后，构建所述IP地址与所述用户身份信息的对应关系。
  9. 如权利要求5所述的提供用户身份信息的系统，所述对应关系构建模块还设置为：当接收到结束会话的请求消息时，删除所述IP地址与所述用户身份信息的对应关系。
  10. 一种计算机可读存储介质，所述计算机可读存储介质上存储有提供终端用户身份信息的程序，所述提供终端用户身份信息的程序被处理器执行时实现如权利要求1至4中任一项所述的提供终端用户身份信息的方法。
PCT/CN2018/103353 2017-08-30 2018-08-30 提供用户身份信息的方法、系统及存储介质 WO2019042378A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201710762664.5A CN109428866A (zh) 2017-08-30 2017-08-30 提供用户身份信息的方法、系统及计算机可读存储介质
CN201710762664.5 2017-08-30

Publications (1)

Publication Number Publication Date
WO2019042378A1 true WO2019042378A1 (zh) 2019-03-07

Family

ID=65503943

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2018/103353 WO2019042378A1 (zh) 2017-08-30 2018-08-30 提供用户身份信息的方法、系统及存储介质

Country Status (2)

Country Link
CN (1) CN109428866A (zh)
WO (1) WO2019042378A1 (zh)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112272169A (zh) * 2020-10-16 2021-01-26 中国联合网络通信集团有限公司 一种用户身份的确定方法及装置
CN114006884A (zh) * 2021-11-17 2022-02-01 中国电信股份有限公司 网络地址转换场景下的会话控制方法、装置和系统
CN114945016A (zh) * 2021-02-10 2022-08-26 维沃移动通信有限公司 信息处理方法、装置及设备

Families Citing this family (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112019582B (zh) * 2019-05-31 2022-10-14 中国电信股份有限公司 策略下发方法、系统和相关实体
CN112217653B (zh) * 2019-07-11 2023-03-24 中国电信股份有限公司 策略下发方法、装置和系统
CN112995117B (zh) * 2019-12-18 2022-09-16 中国电信股份有限公司 业务请求的处理方法、装置、系统和计算机可读存储介质
CN113259930A (zh) * 2020-02-10 2021-08-13 大唐移动通信设备有限公司 调用的请求、查询、授权处理方法、设备及装置、介质
CN111277470B (zh) * 2020-02-19 2022-07-26 联想(北京)有限公司 一种用户面功能切换方法、装置、系统和存储介质
CN114979079B (zh) * 2021-02-18 2023-07-21 中国移动通信有限公司研究院 信息处理方法、装置、相关设备和存储介质
CN113282859A (zh) * 2021-04-30 2021-08-20 北京仁科互动网络技术有限公司 一种获取访客身份信息的方法、装置、电子设备及存储介质
CN113905019B (zh) * 2021-09-29 2023-12-01 天翼物联科技有限公司 基于终端地址管理的数据传输方法、装置、设备及介质
CN114980064B (zh) * 2022-05-16 2023-10-03 中国电信股份有限公司 信息关联方法、装置、电子设备及存储介质
CN115567445B (zh) * 2022-08-30 2024-06-11 浪潮通信技术有限公司 寻址消息路由的控制方法、装置、设备及存储介质

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101895856A (zh) * 2010-05-10 2010-11-24 中国联合网络通信集团有限公司 用户重定向方法及系统
CN103249023A (zh) * 2012-02-02 2013-08-14 中国移动通信集团公司 一种业务平台获取用户手机号码的方法、系统和业务平台
CN105872991A (zh) * 2015-01-19 2016-08-17 中国移动通信集团公司 一种关联用户的方法、系统及相关装置

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2014063744A1 (en) * 2012-10-26 2014-05-01 Nokia Solutions And Networks Oy Enhanced data access technique for user data from a home subscriber server

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101895856A (zh) * 2010-05-10 2010-11-24 中国联合网络通信集团有限公司 用户重定向方法及系统
CN103249023A (zh) * 2012-02-02 2013-08-14 中国移动通信集团公司 一种业务平台获取用户手机号码的方法、系统和业务平台
CN105872991A (zh) * 2015-01-19 2016-08-17 中国移动通信集团公司 一种关联用户的方法、系统及相关装置

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112272169A (zh) * 2020-10-16 2021-01-26 中国联合网络通信集团有限公司 一种用户身份的确定方法及装置
CN112272169B (zh) * 2020-10-16 2023-06-02 中国联合网络通信集团有限公司 一种用户身份的确定方法及装置
CN114945016A (zh) * 2021-02-10 2022-08-26 维沃移动通信有限公司 信息处理方法、装置及设备
CN114006884A (zh) * 2021-11-17 2022-02-01 中国电信股份有限公司 网络地址转换场景下的会话控制方法、装置和系统
CN114006884B (zh) * 2021-11-17 2024-03-15 中国电信股份有限公司 网络地址转换场景下的会话控制方法、装置和系统

Also Published As

Publication number Publication date
CN109428866A (zh) 2019-03-05

Similar Documents

Publication Publication Date Title
WO2019042378A1 (zh) 提供用户身份信息的方法、系统及存储介质
CN112997454B (zh) 经由移动通信网络连接到家庭局域网
US9301191B2 (en) Quality of service to over the top applications used with VPN
WO2018145654A1 (zh) 实现多接入管理的方法、装置及计算机存储介质
US9113332B2 (en) Method and device for managing authentication of a user
JP5661207B2 (ja) モバイル機器ネットワークアクセスのダイアメータベースの誘導のための方法、システム、およびコンピュータ読取可能媒体
EP1713289A1 (en) A method for establishing security association between the roaming subscriber and the server of the visited network
WO2018232570A1 (zh) 一种注册及会话建立的方法、终端和amf实体
WO2019017835A1 (zh) 网络验证方法、相关设备及系统
US11316934B2 (en) Method for providing a service to a user equipment connected to a first operator network via a second operator network
WO2014183260A1 (zh) 漫游场景下的数据业务处理方法、装置和系统
US20130042316A1 (en) Method and apparatus for redirecting data traffic
US20140160990A1 (en) Mechanisms for Quality of Service to Over the Top Applications for Use in Commercial Wireless Networks
AU2018265334A1 (en) Selection of IP version
US20070042771A1 (en) System and method for providing quality of service in a communication network
WO2013040957A1 (zh) 单点登录的方法、系统和信息处理方法、系统
WO2014005267A1 (zh) 接入移动网络的方法、装置及系统
TWI516151B (zh) 通訊方法與通訊系統
JP7135206B2 (ja) アクセス認証
WO2021109134A1 (zh) Mbms信息的获取、发送方法、终端设备及网元设备
WO2014047923A1 (zh) 接入网络的方法和装置
CN116261137A (zh) 网元安全认证方法、装置、电子设备及存储介质
CN103974230B (zh) 一种位置信息的获取方法及相应装置
WO2021188081A1 (en) Method and system of verifying mobile phone information of users who are connected to the internet with a wired/wireless gateway other than the gsm mobile network with a mobile device in the gsm mobile network area
WO2024060894A1 (zh) 一种通信方法及装置

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 18850724

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC (EPO FORM 1205 DATED 10/09/2020)

122 Ep: pct application non-entry in european phase

Ref document number: 18850724

Country of ref document: EP

Kind code of ref document: A1