WO2019140629A1

WO2019140629A1 - Access control method, device, and computer storage medium

Info

Publication number: WO2019140629A1
Application number: PCT/CN2018/073390
Authority: WO
Inventors: 刘建华
Original assignee: Oppo广东移动通信有限公司
Priority date: 2018-01-19
Filing date: 2018-01-19
Publication date: 2019-07-25
Also published as: CN112020121A; CN110100481B; CN110100481A; CN112020121B

Abstract

Embodiments of the present invention provide an access control method, a device, and a computer storage medium. The method may comprise: a user equipment (UE) and a network side device establish a mapping relationship between a short slice identifier (SSI) and network slice selection assistance information (NSSAI), wherein the SSI and NSSAI having the mapping relationship both indicate a same network slice, and the length of the SSI is shorter than that of the NSSAI; the UE carries, on the basis of the mapping relationship, the SSI of a target network slice into uplink signaling; the UE sends the uplink signaling carrying the SSI of the target network slice, wherein the uplink signaling is used for the network side device to perform access control on the target network slice on the basis of the SSI. The present invention not only reduces the signaling resource consumption and avoids the waste of signaling resources between a UE and a network side, but also reduces the delay for the access control on a network slice.

Description

Method, device and computer storage medium for access control

Technical field

Embodiments of the present invention relate to the field of wireless communications technologies, and in particular, to a method, device, and computer storage medium for access control.

Background technique

In the Long Term Evolution (LTE) system, an Access Control Barring (ACB) mechanism is introduced to avoid network overload. With the development of communication technology, the research of the fifth generation mobile communication technology (5G, 5th Generation) has also begun. 5G wireless access is called New Radio, referred to as NR. In the 5G NR, the concept of a network slice is introduced, and different slices have corresponding slice instances (instance on the radio access network (RAN, Radio) Access Network) side and the core network (CN, Core Network) side. ), because of the isolation characteristics between different slice instances.

At present, the terminal needs to enter the connected state and attach the attached to obtain the network slice information. The network side can only perform access control on the network slice based on the behavior of the terminal acquiring the network slice information. Therefore, when the terminal is in the process of transition from the idle state to the connected state, if the target network slice is overloaded, the network side can only perform the target network slice carried in the message sent by the connected terminal after the terminal enters the connected state. The identifier performs access control on the target network slice, and releases the release terminal. Therefore, the signaling resource consumption between the terminal and the network side is increased, and signaling resource waste is generated between the terminal and the network side, and the delay of the access control is also increased.

Summary of the invention

The embodiments of the present invention are to provide a method, a device, and a computer storage medium for access control, which can reduce signaling resource consumption, avoid waste of signaling resources between the terminal and the network, and reduce the delay of access control.

The technical solution of the embodiment of the present invention can be implemented as follows:

In a first aspect, an embodiment of the present invention provides a method for access control, where the method includes:

The user equipment UE and the network side device establish a mapping relationship between the short slice identifier SSI and the network slice selection assistance information (NSSAI), wherein the SSI and the NSSAI having the mapping relationship all indicate the same network slice; The length of the SSI is shorter than the NSSAI;

When the UE is in a non-connected state, the UE carries the SSI of the target network slice in the uplink signaling based on the mapping relationship;

The UE sends the uplink signaling that carries the SSI of the target network slice, where the uplink signaling is used by the network side device to perform access control for the target network slice based on the SSI.

In a second aspect, an embodiment of the present invention provides a method for access control, where the method includes:

And the network side device and the UE establish a mapping relationship between the short slice identifier SSI and the network slice selection assistance information NSSAI; wherein the SSI and the NSSAI having the mapping relationship both indicate the same network slice; and the length of the SSI is shorter than the NSSAI ;

Receiving, by the network side device, the uplink signaling that is sent by the UE and carrying the SSI;

The network side device performs access control according to the set access control policy for the network slice indicated by the SSI carried in the uplink signaling.

In a third aspect, an embodiment of the present invention provides a user equipment (UE), including: a first establishing part, a carrying part, and a sending part;

The first establishing part is configured to establish, by the network side device, a mapping relationship between the short slice identifier SSI and the network slice selection assistance information NSSAI; wherein the SSI and the NSSAI having the mapping relationship both indicate the same network slice; The length of the SSI is shorter than the NSSAI;

The bearer is configured to carry the SSI of the target network slice in the uplink signaling according to the mapping relationship;

The sending part is configured to send the uplink signaling that carries the SSI of the target network slice, where the uplink signaling is used by the network side device to connect to the target network slice based on the SSI Into control.

In a fourth aspect, an embodiment of the present invention provides a network device, including a second establishing part, a receiving part, and an access control part;

The second establishing part is configured to establish, by the UE, a mapping relationship between the short slice identifier SSI and the network slice selection assistance information NSSAI; wherein the SSI and the NSSAI having the mapping relationship both indicate the same network slice; and the SSI The length is shorter than the NSSAI;

The receiving part is configured to receive uplink signaling that is sent by the UE and carries an SSI;

The access control part is configured to perform access control according to the set access control policy for the network slice indicated by the SSI carried in the uplink signaling.

In a fifth aspect, an embodiment of the present invention provides a user equipment, including: a first network interface, a first memory, and a first processor; wherein the first network interface is used between the other network elements Receiving and transmitting signals during the process of transmitting and receiving information;

The first memory is configured to store a computer program capable of running on the first processor;

The first processor is configured to perform the steps of the method of the first aspect when the computer program is run.

In a sixth aspect, an embodiment of the present invention provides a network device, including a second network interface, a second memory, and a second processor;

The second network interface is configured to receive and send signals during the process of transmitting and receiving information with other external network elements;

The second memory is configured to store a computer program capable of running on the second processor;

The second processor is configured to perform the steps of the method of the second aspect when the computer program is run.

According to a seventh aspect, an embodiment of the present invention provides a computer storage medium, where the computer storage medium stores an information transmission program, where the information transmission program is executed by at least one processor to implement the first aspect or the second aspect. The steps of the method.

The embodiment of the present invention provides a method, a device, and a computer storage medium for access control. The UE establishes a short slice identifier SSI with a network side device, such as an access device (such as a gNB) or a core network device (such as an AMF). After the network slice selects the mapping relationship between the auxiliary information NSSAI, when the UE is in the idle IDLE state or the inactive INACTIVE state, the short-length SSI can be carried in the uplink signaling applicable to the non-connected state (such as the third message MSG3). The medium is sent to the network side device, so that the network side device can perform access control for the network slice using the received SSI. Compared with the current related technologies, when the network slice is overloaded, the network side device does not need to wait until after receiving the MSG5, and can perform ACB for the network slice according to the Network Slice Selection Assistance Information (NSSAI) carried by the MSG5. Ability to perform ACB for network slices in advance. Not only the signaling resource consumption is reduced, the signaling resource waste between the UE and the network side is avoided, and the delay for access control of the network slice is also reduced.

DRAWINGS

FIG. 1 is a schematic diagram of a network architecture according to an embodiment of the present invention;

2 is a schematic flowchart of a method for access control according to an embodiment of the present invention;

FIG. 3 is a schematic flowchart of another method for access control according to an embodiment of the present disclosure;

FIG. 4 is a schematic flowchart of a specific process of access control according to an embodiment of the present disclosure;

FIG. 5 is a schematic structural diagram of a user equipment according to an embodiment of the present disclosure;

FIG. 6 is a schematic structural diagram of a specific hardware of a user equipment according to an embodiment of the present disclosure;

FIG. 7 is a schematic structural diagram of a network device according to an embodiment of the present disclosure;

FIG. 8 is a schematic structural diagram of a specific hardware of a network device according to an embodiment of the present disclosure.

Detailed ways

The embodiments of the present invention are described in detail below with reference to the accompanying drawings.

At present, the concept of network slice slice is proposed in the related technology of 5G system; in essence, the physical network of the operator is logically divided into multiple virtual networks, and each virtual network is divided according to different service requirements, for example, It is divided according to service demand information such as delay, bandwidth, priority, security, and reliability, so that it can flexibly respond to different network application scenarios. Therefore, different network slices (ie, virtual networks) are isolated from each other such that a network slice error or failure does not affect normal communication of other network slices.

Based on the foregoing description of the network slice, it can be known that the network slice type can include an access network slice Access Network slice, a core network slice Core Network slice, and a data network and a service slice Data Network and Service slice. Therefore, the access control AC is performed for the network slice, and the network side devices involved include a 5G system radio access network device, such as a gNB; and may also include a 5G system core network device, such as core access and mobility management (AMF). , Core Access and Moblity Management Function). Therefore, the technical solution of the embodiment of the present invention can be applied to the network architecture scenario shown in FIG. 1 in a typical manner, in which the terminal can access the radio access network RAN and access the 5G core through the N2 interface. Network; can also directly connect to the 5G core network through the N1 interface. It should be noted that N1 is the NAS signaling interface of the UE and the AMF, and N2 is the interface between the gNB and the AMF. In addition, in the scenario shown in FIG. 1, the radio access network RAN device may include a gNB; the 5G core network device may include an AMF; and the user equipment (UE, User Equipment) may include a cellular phone, a smart phone, and a session initiation protocol (SIP). a phone, laptop, personal digital assistant (PDA), satellite radio, global positioning system, multimedia device, video device, digital audio player (eg, MP3 player), camera, game console, tablet, or Any other device with similar functionality. At the same time, the user equipment may also be referred to by those skilled in the art as a terminal, a mobile station, a subscriber station, a mobile unit, a subscriber unit, a wireless unit, a remote unit, a mobile device, a wireless device, a wireless communication device, a remote device, a mobile subscriber. Station, access terminal, mobile terminal, wireless terminal, remote terminal, handset, user agent, mobile client, client, or some other suitable terminology.

Based on the network architecture shown in Figure 1, the current related network slicing mechanism is mainly for the network side and the non-access stratum (NAS, Non-Access Stratum) of the UE, but the access layer (AS, Access Stratum) of the UE is Network slicing is almost transparent. For example, NR system information including MIB (Master Information Block), Remaining Minimum System Information (RMSI), and other system information does not carry network slices. information. Based on this, the UE in the idle IDLE state cannot learn the network slice service provided by the network side by reading the system information. If the UE desires to obtain the network slice related service, it needs to enter the connection state and attach to obtain the network slice information from the network side entity such as AMF. Moreover, in the current Rel-15 version of the 3rd Generation Partnership Project (3GPP), the physical random access channel (PARCH, Physical Random Access CHannel) and the network slice do not support direct Therefore, the UE cannot perform ACB for different network slices based on the PRACH in the process of performing radio resource control (RRC) signaling interaction through the PRACH.

For the description of the above-mentioned related network slicing mechanism, it can be known that the UE for the IDLE state cannot perform ACB in combination with the information of the network slice slice. The reason is:

Firstly, it is difficult to establish the correspondence between the slice information and the PARCH resource. The RACH resource itself is very limited, and the supported slice is likely to be many. Therefore, the PARCH of different slices cannot be based on different random access channel (RACH, Random Access CHannel) parameters. ACB.

Secondly, the existing Network Slice Selection Assistance Information (NSSAI) for identifying network slices is long, including service and slice type (SST) information and service and slice differentiation (SSD). , Service and Slice Differentiator), the total length of both SST and SSD reaches 32 bits, and each UE can currently support 8 network slices in parallel. Therefore, the total length of the network slice identification information NSSAI can be up to 32×. 8 = 256 bytes, far exceeding the 48-bit limit set for the third type of message MSG3 on the Common Control Channel (CCCH) channel. Therefore, ACB cannot be implemented for network slices based on MSG3. This may result in the following situation: if a network slice has been overloaded, the network slice information cannot be carried in the MSG3 sent by the UE, such as an RRC Connection Req message or an RRC Connection Resume message. Therefore, the network side is not able to reject the request according to the overloaded network slice, but continues to reply to the fourth type message MSG4, such as an RRC Connection Establishment message; the UE continues to send the fifth type message after receiving the MSG4. MSG5 carries the network slice identifier in MSG5. Until then, the network side can perform ACB according to the network slice identifier. After the network slice is overloaded, the network side can release the RRC connection of the terminal. In this process, the MSG4 and the subsequent MSG5 that the UE interacts with the network side can be considered to increase the consumption of signaling resources, resulting in unnecessary waste of signaling resources.

In order to enable the access control to be performed on the network slice before the MSG5 message is sent, the method of the access control is provided in the embodiment of the present invention. The method may be applied to the UE. Referring to FIG. 2, the method may include:

S201: The mapping between the short slice identifier (SSI) and the network slice selection assistance information NSSAI is established by the UE and the network side device. The short slice identifier SSI and the network slice selection assistance information NSSAI with the mapping relationship are both indicated. The same network slice; and the length of the SSI is shorter than the NSSAI;

S202: The UE carries the SSI of the target network slice in the uplink signaling according to the mapping relationship.

S203: The UE sends uplink signaling that carries the SSI of the target network slice, where the uplink signaling is used by the network side device to perform access control for the target network slice based on the SSI.

Based on the technical solution shown in FIG. 2, the UE establishes a mapping relationship between the short slice identifier SSI and the network slice selection auxiliary information NSSAI with a network side device, such as an access device (such as a gNB) or a core network device (such as an AMF). Then, when the UE is in the idle IDLE state or the inactive INACTIVE state, the short-length SSI can be sent to the network side device in the uplink signaling (such as the third message MSG3), so that the network side device can use the received The SSI performs access control for the network slice. Compared with the current related technologies, when the network slice is overloaded, the network side device can perform ACB for the network slice according to the NSSAI carried by the MSG5 without waiting for the MSG5 to receive the ACB. Not only the signaling resource consumption is reduced, the signaling resource waste between the UE and the network side is avoided, and the delay for access control of the network slice is also reduced.

For the technical solution shown in FIG. 2, in a specific implementation process, the network side device may include a radio access network device, such as a gNB, and may also include a core network device, such as an AMF; therefore, the uplink signaling may include an RRC. Signaling or NAS signaling. Specifically, when the UE is in the idle IDLE state or the inactive INACTIVE state, the access control is performed by the gNB. Therefore, the uplink signaling may specifically be RRC signaling, including the MSG3 or the fifth message MSG5 or other RRC message. When access control is performed by the AMF, the uplink signaling may specifically be NAS signaling.

In a possible implementation manner of the solution shown in FIG. 2, the mapping relationship between the short slice identifier SSI and the network slice selection assistance information NSSAI of the UE and the network side device, which is described in step S201, may be included. :

The UE sends a registration request to the network side device, where the registration request includes network slice information to be registered;

The UE receives a registration response message returned by the network side device for the network slice information to be registered in the registration request, where the registration response message includes a mapping relationship between the NSSAI and the SSI of the network slice to be registered.

Through the above-mentioned preferred implementation manner, the network side device may establish a correspondence between the NSSAI and the SSI according to the network slice information that the terminal desires to register, and return the corresponding relationship to the UE. The mapping between the same SSI and the NSSAI is established on the UE side and the network side, so that when the UE indicates the target network slice through the SSI, the network side device can learn the target network slice by using the uplink signaling that carries the SSI. And perform access control according to the load condition of the target network slice.

In addition, after the UE learns the mapping relationship between the short slice identifier SSI and the NSSAI, the target network slice indicated by the SSI may also be determined based on the SSI of the target network slice by determining whether to send the uplink signaling that carries the SSI. Perform access control.

For example, after the UE generates the MSG3 carrying the SSI of the target network slice, the UE may perform access control on the target network slice by using the SSI of the target network slice to determine whether to send the uplink signaling. For example, the UE may be based on the priority of the SSI, and then decide whether to send the MSG3 carrying the SSI according to the probability, and the probability is related to the corresponding access type.

Based on the same inventive concept of the technical solution shown in FIG. 2, referring to FIG. 3, a method for access control according to an embodiment of the present invention is shown, which can be applied to a network side device. It can be understood that the network side device may include a radio access network device, such as a gNB, and may also include a core network device, such as an AMF. The method may include:

S301: The mapping between the short slice identifier (SSI) and the network slice selection assistance information NSSAI is set up by the network side device and the UE, where the short slice identifier SSI and the network slice selection assistance information NSSAI are both indicated. The same network slice; and the length of the SSI is shorter than the NSSAI;

S302: The network side device receives the uplink signaling that is sent by the UE and carries the SSI.

S303: The network side device performs access control according to the set access control policy for the network slice indicated by the SSI carried in the uplink signaling.

Based on the technical solution shown in FIG. 3, after establishing a mapping relationship between the short slice identifier SSI and the network slice selection assistance information NSSAI, the network side device performs the network slice using the received uplink signaling carrying the SSI. Access control. Compared with the current related technologies, when the network slice is overloaded, the network side device can perform ACB for the network slice according to the NSSAI carried by the MSG5 without waiting for the MSG5 to receive the ACB. Not only the signaling resource consumption is reduced, the signaling resource waste between the UE and the network side is avoided, and the delay for access control of the network slice is also reduced.

The network side device may include a radio access network device, such as a gNB, and may also include a core network device, such as an AMF. Therefore, the uplink signaling may include RRC signaling or NAS signaling. Specifically, when the UE is in the idle IDLE state or the inactive INACTIVE state, the access control is performed by the gNB. Therefore, the uplink signaling may specifically be RRC signaling, including the MSG3 or the fifth message MSG5 or other RRC message. When the access control is performed by the AMF, the uplink signaling may specifically be NAS signaling.

In a possible implementation manner of the solution shown in FIG. 3, the mapping relationship between the SSI and the network slice selection assistance information NSSAI is determined by the network side device and the UE in the step S301, which may include:

Receiving, by the network side device, a registration request sent by the UE, where the registration request includes network slice information to be registered;

And generating, by the network side device, a mapping relationship between the NSSAI and the SSI of the network slice to be registered for the network slice information to be registered in the registration request;

The network side device sends a registration response message to the UE, where the registration response message includes a mapping relationship between the NSSAI and the SSI of the network slice to be registered.

Through the above-mentioned preferred implementation manner, the network side device may establish a correspondence between the NSSAI and the SSI according to the network slice information that the terminal desires to register, and return the corresponding relationship to the UE. The mapping relationship between the same SSI and the NSSAI is established on the UE side and the network side, so that the network-side device can obtain the target network through the uplink signaling carrying the SSI when the subsequent UE indicates the target network slice through the SSI. Slice and perform access control based on the load of the target network slice.

In a possible implementation manner of the solution shown in FIG. 3, preferably, the network side device performs access control according to the set access control policy for the network slice indicated by the SSI carried in the uplink signaling. ,include:

The network side device performs access control on the network slice indicated by the SSI according to the load condition of the network slice indicated by the SSI;

Alternatively, the network side device performs access control on the network slice indicated by the SSI by determining whether to receive the uplink signaling according to the priority of the SSI.

Specifically, after the network side device learns the indicated network slice according to the SSI, the network side device may control whether the UE can access according to the load of the network slice. In detail, the network side device may set a load threshold for indicating an overload load for a load condition; release a release of the UE corresponding to a load of the network slice exceeding the load threshold; and the load corresponding to the network slice does not exceed the load A threshold that allows the UE to access the network slice.

Based on the same inventive concept of the technical solutions shown in FIG. 2 and FIG. 3, reference is made to FIG. 4, which shows a specific process of access control according to an embodiment of the present invention, which may be applied to the network shown in FIG. For the architecture, it can be understood that, for the radio access network RAN device and the 5G core network device in the architecture shown in FIG. 1, the network solution is replaced by the network side device in the technical solution shown in FIG. 4, and the process may include:

S401: The network side device establishes a mapping relationship between the SSI and the NSSAI.

S402: The network side device notifies the mapping relationship between the SSI and the NSSAI applied in the access layer AS or the non-access stratum NAS of the UE.

S403: The UE carries the SSI of the target network slice in the uplink signaling according to the mapping relationship.

S404: The UE generates uplink signaling with an SSI of the target network slice.

S405: The UE performs access control on the network slice indicated by the SSI by determining, according to whether to send the uplink signaling of the SSI carrying the target network slice, based on the SSI of the target network slice.

S406: The UE determines to send, to the network side device, uplink signaling that carries the SSI of the target network slice.

S407: The network side device performs access control according to the load condition for the network slice indicated by the SSI carried in the uplink signaling.

Specifically, the network side device performs access control on the network slice indicated by the SSI according to the load condition of the network slice indicated by the SSI;

For the technical solution shown in FIG. 4, it can be known that the uplink signaling may include RRC signaling or NAS signaling. For example, the network side device is a gNB, and the uplink signaling may specifically include the MSG3. Therefore, the network side device can perform ACB for the network slice according to the NSSAI carried by the MSG5 after receiving the MSG5, and can perform ACB for the network slice in advance. Not only the signaling resource consumption is reduced, the signaling resource waste between the UE and the network side is avoided, and the delay for access control of the network slice is also reduced.

Based on the foregoing technical solution, referring to FIG. 5, a composition of a user equipment UE50 according to an embodiment of the present invention is provided, including: a first establishing part 501, a carrying part 502, and a sending part 503;

The first establishing part 501 is configured to establish, by the network side device, a mapping relationship between the short slice identifier SSI and the network slice selection assistance information NSSAI; wherein the SSI and the NSSAI having the mapping relationship both indicate the same network slice; The length of the SSI is shorter than the NSSAI;

The bearer part 502 is configured to carry the SSI of the target network slice in the uplink signaling according to the mapping relationship;

The sending part 503 is configured to send the uplink signaling that carries the SSI of the target network slice, where the uplink signaling is used by the network side device to perform the target network slice based on the SSI. Access control.

In the above solution, the uplink signaling may include radio resource control RRC signaling or non-access stratum NAS signaling.

In the above solution, when the UE is in an idle IDLE state or an inactive INACTIVE state, the RRC signaling includes a third message MSG3 or a fifth message MSG5 or other RRC message.

In the above solution, the first establishing part 501 is configured to:

Sending a registration request to the network side device, where the registration request includes network slice information to be registered;

Receiving, by the network side device, a registration response message returned by the network slice information to be registered in the registration request, where the registration response message includes a mapping relationship between the NSSAI and the SSI of the network slice to be registered. .

In the above solution, the UE further includes a control part configured to perform access control on the network slice indicated by the SSI by determining whether to send the uplink signaling that carries the SSI based on the SSI of the target network slice.

It can be understood that in this embodiment, the “part” may be a partial circuit, a partial processor, a partial program or software, etc., of course, may be a unit, a module, or a non-modular.

In addition, each component in this embodiment may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above integrated unit can be implemented in the form of hardware or in the form of a software function module.

The integrated unit may be stored in a computer readable storage medium if it is implemented in the form of a software function module and is not sold or used as a stand-alone product. Based on such understanding, the technical solution of the embodiment is essentially Said that the part contributing to the prior art or all or part of the technical solution can be embodied in the form of a software product stored in a storage medium, comprising a plurality of instructions for making a computer device (may It is a personal computer, a server, or a network device, etc. or a processor that performs all or part of the steps of the method described in this embodiment. The foregoing storage medium includes: a U disk, a mobile hard disk, a read only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk, and the like, which can store program codes.

Accordingly, the present embodiment provides a computer storage medium storing an information transfer program that implements the steps of the method described above with respect to FIG. 2 when executed by at least one processor.

Based on the user equipment UE50 and the computer storage medium, refer to FIG. 6, which shows a specific hardware structure of the user equipment UE50 according to an embodiment of the present invention, which may include: a first network interface 601, a first memory 602, and a first Processor 603; the various components are coupled together by a bus system 604. It will be appreciated that bus system 604 is used to implement connection communication between these components. Bus system 604 includes, in addition to the data bus, a power bus, a control bus, and a status signal bus. However, for clarity of description, various buses are labeled as bus system 604 in FIG. The first network interface 601 is configured to receive and send signals during the process of transmitting and receiving information with other external network elements.

a first memory 602, configured to store a computer program capable of running on the first processor 603;

The first processor 603 is configured to: when the computer program is executed, perform:

The UE and the network side device establish a mapping relationship between the short slice identifier (SSI) and the network slice selection assistance information NSSAI. The short slice identifier SSI with the mapping relationship and the network slice selection assistance information NSSAI all indicate the same. a network slice; and the length of the SSI is shorter than the NSSAI;

The UE carries the SSI of the target network slice in the uplink signaling according to the mapping relationship;

The UE sends the uplink signaling of the SSI carrying the target network slice, where the uplink signaling is used by the network side device to perform access control for the target network slice based on the SSI.

It is to be understood that the first memory 602 in the embodiments of the present invention may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memory. The non-volatile memory may be a read-only memory (ROM), a programmable read only memory (PROM), an erasable programmable read only memory (Erasable PROM, EPROM), or an electric Erase programmable read only memory (EEPROM) or flash memory. The volatile memory can be a Random Access Memory (RAM) that acts as an external cache. By way of example and not limitation, many forms of RAM are available, such as static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (Synchronous DRAM). SDRAM), Double Data Rate Synchronous Dynamic Random Access Memory (DDRSDRAM), Enhanced Synchronous Dynamic Random Access Memory (ESDRAM), Synchronous Connection Dynamic Random Access Memory (SDRAM) And direct memory bus random access memory (DRRAM). The first memory 602 of the systems and methods described herein is intended to comprise, without being limited to, these and any other suitable types of memory.

The first processor 603 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the foregoing method may be completed by an integrated logic circuit of hardware in the first processor 603 or an instruction in a form of software. The first processor 603 may be a general-purpose processor, a digital signal processor (DSP), an application specific integrated circuit (ASIC), or a field programmable gate array (FPGA). Or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The methods, steps, and logical block diagrams disclosed in the embodiments of the present invention may be implemented or carried out. The general purpose processor may be a microprocessor or the processor or any conventional processor or the like. The steps of the method disclosed in the embodiments of the present invention may be directly implemented by the hardware decoding processor, or may be performed by a combination of hardware and software modules in the decoding processor. The software module can be located in a conventional storage medium such as random access memory, flash memory, read only memory, programmable read only memory or electrically erasable programmable memory, registers, and the like. The storage medium is located in the first memory 602, and the first processor 603 reads the information in the first memory 602, and completes the steps of the foregoing method in combination with the hardware thereof.

It will be appreciated that the embodiments described herein can be implemented in hardware, software, firmware, middleware, microcode, or a combination thereof. For hardware implementation, the processing unit can be implemented in one or more Application Specific Integrated Circuits (ASICs), Digital Signal Processing (DSP), Digital Signal Processing Equipment (DSP Device, DSPD), programmable Programmable Logic Device (PLD), Field-Programmable Gate Array (FPGA), general purpose processor, controller, microcontroller, microprocessor, other for performing the functions described herein In an electronic unit or a combination thereof.

For a software implementation, the techniques described herein can be implemented by modules (eg, procedures, functions, and so on) that perform the functions described herein. The software code can be stored in memory and executed by the processor. The memory can be implemented in the processor or external to the processor.

Specifically, when the first processor 603 in the user equipment UE50 is configured to run the computer program, the method steps described in the foregoing technical solution shown in FIG. 2 are performed, and details are not described herein.

Based on the foregoing technical solution, referring to FIG. 7, which shows a composition of a network device 70 according to an embodiment of the present invention, including a second establishing portion 701, a receiving portion 702, and an access control portion 703;

The second establishing part 701 is configured to establish, by the UE, a mapping relationship between the short slice identifier SSI and the network slice selection assistance information NSSAI; wherein the SSI and the NSSAI having the mapping relationship both indicate the same network slice; and the SSI The length is shorter than the NSSAI;

The receiving part 702 is configured to receive uplink signaling that is sent by the UE and carries an SSI;

The access control part 703 is configured to perform access control according to the set access control policy for the network slice indicated by the SSI carried in the uplink signaling.

In the above solution, the uplink signaling may include RRC signaling or NAS signaling.

In the above solution, the second establishing part 701 is configured to:

Receiving a registration request sent by the UE, where the registration request includes network slice information to be registered;

Generating a mapping relationship between the NSSAI and the SSI of the network slice to be registered for the network slice information to be registered in the registration request;

Sending a registration response message to the UE; wherein the registration response message includes a mapping relationship between the NSSAI and the SSI of the network slice to be registered.

In the above solution, the access control part 703 is configured to:

Performing access control on the network slice indicated by the SSI based on a load condition of the network slice indicated by the SSI;

Or, based on the priority of the SSI, perform access control on a network slice indicated by the SSI by determining whether to receive the uplink signaling. .

In the above solution, the access control part 703 is configured to:

After obtaining the indicated network slice according to the SSI, acquiring a load condition of the network slice;

Releasing access of the UE corresponding to a load of the network slice exceeding a set load threshold;

The load corresponding to the network slice does not exceed the load threshold, allowing the UE to access the network slice.

In addition, the embodiment provides a computer storage medium, which stores an information transmission program, and the information transmission program is executed by at least one processor to implement the steps of the method described in the second embodiment. For a detailed description of the computer storage medium, refer to the description in the third embodiment, and details are not described herein again.

Based on the network device 70 and the computer storage medium, refer to FIG. 8 , which shows a specific hardware structure of a network device 70 according to an embodiment of the present invention, which may include: a second network interface 801, a second memory 802, and a second Processor 803; the various components are coupled together by a bus system 804. As can be appreciated, bus system 804 is used to implement connection communication between these components. Bus system 804 includes, in addition to the data bus, a power bus, a control bus, and a status signal bus. However, for clarity of description, various buses are labeled as bus system 804 in FIG. among them,

The second network interface 801 is configured to receive and send signals during the process of transmitting and receiving information with other external network elements.

a second memory 802, configured to store a computer program capable of running on the second processor 803;

The second processor 803 is configured to: when the computer program is executed, perform:

It is to be understood that the components in the specific hardware structure of the network device 70 in this embodiment are similar to the corresponding parts in FIG. 6, and are not described herein.

Specifically, the second processor 803 in the network device 70 is further configured to perform the method steps described in the foregoing technical solution shown in FIG. 3 when the computer program is executed, and details are not described herein.

The above is only the preferred embodiment of the present invention and is not intended to limit the scope of the present invention.

Industrial applicability

In the embodiment of the present invention, after establishing a mapping relationship between the short slice identifier SSI and the network slice selection auxiliary information NSSAI, the UE establishes a mapping relationship between the short slice identifier SSI and the network slice selection auxiliary information NSSAI, such as an access device (such as a gNB) or a core network device (such as an AMF). When the UE is in the idle IDLE state or the inactive INACTIVE state, the short-length SSI can be sent to the network side device in the uplink signaling (such as the third message MSG3) to which the non-connected state is applicable, so that the network side device can be used. The received SSI performs access control for the network slice. Compared with the current related technologies, when the network slice is overloaded, the network side device can perform ACB for the network slice according to the NSSAI carried by the MSG5 without waiting for the MSG5 to receive the ACB. Not only the signaling resource consumption is reduced, the signaling resource waste between the UE and the network side is avoided, and the delay for access control of the network slice is also reduced.

Claims

A method of access control, the method comprising:

The user equipment UE and the network side device establish a mapping relationship between the short slice identifier SSI and the network slice selection assistance information NSSAI; wherein the SSI and the NSSAI having the mapping relationship both indicate the same network slice; and the length of the SSI is shorter than NSSAI;

The UE carries the SSI of the target network slice in the uplink signaling according to the mapping relationship;

The UE sends the uplink signaling that carries the SSI of the target network slice, where the uplink signaling is used by the network side device to perform access control for the target network slice based on the SSI.
The method of claim 1, wherein the uplink signaling may comprise radio resource control RRC signaling or non-access stratum NAS signaling.
The method of claim 2, wherein the RRC signaling comprises a third message MSG3 or a fifth message MSG5 or other RRC message if the UE is in an idle IDLE state or an inactive INACTIVE state.
The method according to claim 1, wherein the mapping between the short slice identifier SSI and the network slice selection assistance information NSSAI is established by the UE and the network side device, including:

Sending, by the UE, a registration request to the network side device, where the registration request includes network slice information to be registered;

Receiving, by the network side device, a registration response message returned by the network side device for the network slice information to be registered in the registration request, where the registration response message includes the NSSAI and the SSI of the network slice to be registered Mapping relationship.
The method of any of claims 1 to 4, wherein the method further comprises:

The UE performs access control on the target network slice by determining whether to send the uplink signaling carrying the SSI based on an SSI of a target network slice.
A method of access control, the method comprising:

And the network side device and the UE establish a mapping relationship between the short slice identifier SSI and the network slice selection assistance information NSSAI; wherein the SSI and the NSSAI having the mapping relationship both indicate the same network slice; and the length of the SSI is shorter than the NSSAI ;

Receiving, by the network side device, the uplink signaling that is sent by the UE and carrying the SSI;

The network side device performs access control according to the set access control policy for the network slice indicated by the SSI carried in the uplink signaling.
The method of claim 6, wherein the uplink signaling can include RRC signaling or NAS signaling.
The method of claim 6, wherein the network side device establishes a mapping relationship between the SSI and the NSSAI with the UE, including:

Receiving, by the network side device, a registration request sent by the UE, where the registration request includes network slice information to be registered;

And generating, by the network side device, a mapping relationship between the NSSAI and the SSI of the network slice to be registered, for the network slice information to be registered in the registration request;

The network side device sends a registration response message to the UE, where the registration response message includes a mapping relationship between the NSSAI and the SSI of the network slice to be registered.
The method according to claim 6, wherein the network side device performs access control according to the set access control policy for the network slice indicated by the SSI carried in the uplink signaling, including:

The network side device performs access control on the network slice indicated by the SSI according to the load condition of the network slice indicated by the SSI;

Alternatively, the network side device performs access control on the network slice indicated by the SSI by determining whether to receive the uplink signaling according to the priority of the SSI.
The method according to claim 9, wherein the network side device performs access control on the network slice indicated by the SSI according to the load condition of the network slice indicated by the SSI, including:

After the network side device learns the indicated network slice according to the SSI, the network side device acquires a load condition of the network slice.

Releasing access of the UE corresponding to a load of the network slice exceeding a set load threshold;

The load corresponding to the network slice does not exceed the load threshold, allowing the UE to access the network slice.
A user equipment UE includes: a first establishing part, a carrying part, and a sending part; wherein

The first establishing part is configured to establish, by the network side device, a mapping relationship between the short slice identifier SSI and the network slice selection assistance information NSSAI; wherein the SSI and the NSSAI having the mapping relationship both indicate the same network slice; The length of the SSI is shorter than the NSSAI;

The bearer is configured to carry the SSI of the target network slice in the uplink signaling according to the mapping relationship;

The sending part is configured to send the uplink signaling that carries the SSI of the target network slice, where the uplink signaling is used by the network side device to connect to the target network slice based on the SSI Into control.
The UE according to claim 10, wherein the first establishing part is configured to:

Sending a registration request to the network side device, where the registration request includes network slice information to be registered;

Receiving, by the network side device, a registration response message returned by the network slice information to be registered in the registration request, where the registration response message includes a mapping relationship between the NSSAI and the SSI of the network slice to be registered. .
The UE according to claim 10, wherein the UE further comprises a control portion configured to perform, for the network slice indicated by the SSI, by determining whether to send the uplink signaling that carries the SSI based on the SSI of the target network slice. Access control.
A network device includes a second establishing part, a receiving part, and an access control part; wherein

The second establishing part is configured to establish, by the UE, a mapping relationship between the short slice identifier SSI and the network slice selection assistance information NSSAI; wherein the SSI and the NSSAI having the mapping relationship both indicate the same network slice; and the SSI The length is shorter than the NSSAI;

The receiving part is configured to receive uplink signaling that is sent by the UE and carries an SSI;

The access control part is configured to perform access control according to the set access control policy for the network slice indicated by the SSI carried in the uplink signaling.
The network device according to claim 14, wherein the second establishing portion is configured to:

Receiving a registration request sent by the UE, where the registration request includes network slice information to be registered;

Generating a mapping relationship between the NSSAI and the SSI of the network slice to be registered for the network slice information to be registered in the registration request;

And sending a registration response message to the UE, where the registration response message includes a mapping relationship between the NSSAI and the SSI of the network slice to be registered.
The network device according to claim 14, wherein the access control portion is configured to:

Performing access control on the network slice indicated by the SSI based on a load condition of the network slice indicated by the SSI;

Or, based on the priority of the SSI, perform access control on a network slice indicated by the SSI by determining whether to receive the uplink signaling.
The network device according to claim 16, wherein the access control portion is configured to:

After obtaining the indicated network slice according to the SSI, acquiring a load condition of the network slice;

Releasing the access of the UE corresponding to a load of the network slice exceeding a set load threshold;

The load corresponding to the network slice does not exceed the load threshold, allowing the UE to access the network slice.
A user equipment, comprising: a first network interface, a first memory and a first processor; wherein the first network interface is configured to receive and transmit signals during transmission and reception of information with other external network elements send;

The first memory is configured to store a computer program capable of running on the first processor;

The first processor is configured to perform the steps of the method of any one of claims 1 to 5 when the computer program is run.
A network device includes a second network interface, a second memory, and a second processor;

The second network interface is configured to receive and send signals during the process of transmitting and receiving information with other external network elements;

The second memory is configured to store a computer program capable of running on the second processor;

The second processor is configured to perform the steps of the method of any one of claims 6 to 10 when the computer program is run.
A computer storage medium storing an information transmission program, the information transmission program being executed by at least one processor to implement any one of claims 1 to 5 or any one of claims 6 to 10 The steps of the method.