WO2019223557A1 - 网络接入方法、相关装置及系统 - Google Patents

网络接入方法、相关装置及系统 Download PDF

Info

Publication number
WO2019223557A1
WO2019223557A1 PCT/CN2019/086411 CN2019086411W WO2019223557A1 WO 2019223557 A1 WO2019223557 A1 WO 2019223557A1 CN 2019086411 W CN2019086411 W CN 2019086411W WO 2019223557 A1 WO2019223557 A1 WO 2019223557A1
Authority
WO
WIPO (PCT)
Prior art keywords
access
home gateway
user equipment
identification information
network element
Prior art date
Application number
PCT/CN2019/086411
Other languages
English (en)
French (fr)
Inventor
于游洋
Original Assignee
华为技术有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from CN201810672363.8A external-priority patent/CN110519826B/zh
Application filed by 华为技术有限公司 filed Critical 华为技术有限公司
Priority to EP19808381.8A priority Critical patent/EP3817423B1/en
Publication of WO2019223557A1 publication Critical patent/WO2019223557A1/zh
Priority to US17/100,457 priority patent/US11399331B2/en

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication

Definitions

  • the present application relates to the field of wireless communication technologies, and in particular, to a network access method, related devices, and systems.
  • the universal functional design and forward-compatible "access network-core network” interface enables the universal 5G core network (the 5th generation core (5GC)) to work with different access networks.
  • 5GC In addition to supporting radio access network (RAN), 5GC also needs to support fixed network / wired network access, such as 5G residential gateway (5G residential gateway, 5G RG) / customer terminal equipment (CPE) ) Access the 5GC through a wired 5G access network (wireline 5G access network, W-5GAN).
  • 5G residential gateway 5G residential gateway, 5G RG
  • CPE customer terminal equipment
  • a 5GC capable user equipment can access 5GC through a 5G home gateway.
  • the 5GC-capable user equipment is a remote device
  • the 5G home gateway is a relay device.
  • a technical solution is urgently needed to support this access method.
  • the embodiments of the present application provide a network access method, a related device, and a system, which can enable a user equipment (UE) to access the 5GC through a home gateway, so that the 5GC supports more access methods, and improves the integration of the fixed network and the mobile network.
  • UE user equipment
  • the present application provides a network access method applied to a unified data management network element side.
  • the method may include: the unified data management network element receives a request message sent by an access and mobility management function network element, the The request message includes identification information of the user equipment and identification information of the home gateway to which the user equipment is connected.
  • the unified data management network element determines the subscription data of the home gateway according to the identification information of the home gateway, and determines the classification type of the user equipment according to the subscription data of the home gateway and the identification information of the user equipment.
  • the unified data management network element sends the subscription type indication information to the access and mobility management function network element.
  • the type of contract includes the subscribers or non-subscribers of the home gateway.
  • the classification type of the user equipment includes a subscription type.
  • the subscription types include subscribers or non-subscribers of the home gateway.
  • the subscription data of the home gateway may include identification information of user equipment of a subscriber of the home gateway.
  • the unified data management network element determining the subscription type of the user equipment according to the subscription data of the home gateway and the identification information of the user equipment may specifically include: if the identification information of the user equipment belongs to the The identification information of the user equipment of the subscribed user of the home gateway, the unified data management network element determines that the user equipment is a subscribed user of the home gateway.
  • the subscription data may further include indication information of an access type of the home gateway, and the access type indicates whether the home gateway allows non-subscribed users to access .
  • the unified data management network element may determine whether the user equipment is allowed to access the access network device in the following ways:
  • the unified data management network element determines that the user equipment is allowed to access the home gateway. Because, regardless of whether the home gateway is an open type (allowing non-subscribed users to access) or a private type (non-subscribed users are not allowed to access), the contracted users can access.
  • the unified data management network element determines that the user equipment is allowed to access the home gateway.
  • the unified data management network element determines that the user equipment is not allowed to access the home gateway.
  • the subscription data may include a mapping table, and the mapping table includes identification information of multiple UEs and indication information of respective corresponding subscription types of the identification information of the multiple UEs, where the identification information of the multiple UEs may be It includes identification information of the UE of the contracted user, and may also include identification information of the UE of the non-subscribed user. In this way, according to the identification information of the specific UE, a subscription type corresponding to the specific UE can be found from this mapping table.
  • the method described in the first aspect may further include: the unified data management network element sending access instruction information to the access and mobility management function network element.
  • the access instruction information may indicate whether the user equipment is allowed to access the home gateway.
  • the access instruction information may be a security key, so that the W-5GAN can determine that the UE's authentication is successful based on the received security key, and thus determine that the UE is allowed to access.
  • the access instruction information may be an EAP-Success message, so that the 5G-RG can determine that the UE's authentication is successful based on receiving the EAP-success message, and therefore it is determined that the UE is allowed to access.
  • the method described in the first aspect may further include: a unified data management network element sending the subscription data to the access and mobility management function network element, such access
  • the mobility management function network element may also determine the subscription type of the UE and whether the UE is allowed to access the home gateway according to the subscription data.
  • the subscription data of the home gateway stored on the unified data management network element is updated.
  • the access type of the home gateway is changed from an open type to a private type, or the list of contracted users is updated.
  • the unified data management network element may re-determine the subscription type of the user equipment based on the updated subscription data of the home gateway, and re-determine whether the user equipment is allowed to access the home gateway.
  • the unified data management network element may also send the updated subscription data of the home gateway to the access and mobility management network element, and the access and mobility management network element may re-establish the subscription data based on the updated home gateway contract data. Determine the subscription type of the user equipment and whether the user equipment is allowed to access the home gateway.
  • the unified data management network element may send an access update message to the access and mobility management network element according to the identification information of the access and mobility management network element.
  • the access update message is implemented as follows:
  • the access update message may include an access rejection indication.
  • the access update message may include indication information of the updated subscription type of the user equipment to notify the access and mobility management network The meta-adjusts the access model of the user equipment and the service management strategy of the user equipment.
  • the access update message may include at least one of an updated access type of the home gateway and an updated subscription list, and the access and mobility management network element is based on the updated access type of the home gateway And / or the updated subscription user list determines the subscription type of the user equipment and whether the user equipment is allowed to access the home gateway.
  • the access and mobility management network element may send a notification message to the user equipment.
  • the notification message may be used to notify the user equipment of the changed subscription type of the user equipment.
  • the notification message may carry a reselection instruction, which is used to notify the user equipment to reselect the home gateway for access.
  • the UDM can distinguish different access models of the UE to facilitate subsequent different service control, such as different QoS control.
  • the network side can prioritize access for contracted users and restrict access for non-subscribed users.
  • the differentiated service management policies (such as the host policy and the guest policy) performed by the 5GC on the UE, this application is not limited, and can be determined according to the application scenarios supported by 5G or NR.
  • the present application provides a network access method applied to a unified data management network element side.
  • the method may include: the data management network element receives a request message sent by an access and mobility management function network element, the request The message includes identification information of the home gateway to which the user equipment is connected.
  • the data management network element determines the subscription data of the home gateway according to the identification information of the home gateway, and sends the subscription data to the access and mobility management function network element, where the subscription data is used for the mobility
  • the management function network element determines a subscription type of the user equipment.
  • the subscription type includes a contracted user or a non-subscribed user of the home gateway.
  • the present application provides a network access method, which is applied to the access and mobility management function network element side.
  • the method may include: the access and mobility management function network element sends a request to a unified data management network element Message, the request message includes identification information of the user equipment and identification information of the home gateway to which the user equipment is connected.
  • the access and mobility management function network element receives the indication information of the classification type of the user equipment sent by the unified data management network element, and determines whether the user equipment is allowed to access the home gateway and / or the service of the user equipment according to the classification type of the user equipment. Management strategy.
  • the classification type of the user equipment includes a subscription type.
  • the access and mobility management function network element determines whether the user equipment is allowed to access the home gateway according to a subscription type of the user equipment, and may specifically Including: if the subscription type of the user equipment is a subscription user of the home gateway, the access and mobility management function network element determines that the user equipment is allowed to access the home gateway. Because, regardless of whether the home gateway is an open type (allowing non-subscribed users to access) or a private type (non-subscribed users are not allowed to access), the contracted users can access.
  • the access and mobility management function network element determining the service management policy of the user equipment according to a subscription type of the user equipment may specifically include: if the If the subscription type is a non-subscribed user, the access and mobility management function network element determines that the service management policy of the user equipment is a service management policy corresponding to a non-subscribed user; or, if the subscription type is a subscribed user, then The access and mobility management function network element determines that the service management policy of the user equipment is a service management policy corresponding to the subscriber.
  • the method described in the third aspect may further include: the access and mobility management function network element receiving access instruction information sent by the unified data management network element, And / or indication information of a service management policy of the user equipment, and the access instruction information indicates whether the user equipment is allowed to access the home gateway.
  • the method described in the third aspect may further include: the access and mobility management function network element receiving the home gateway sent by the unified data management network element Subscription data, and determining whether the user equipment is allowed to access the home gateway according to the subscription data of the home gateway and identification information of the user equipment.
  • the subscription data of the home gateway may include identification information of user equipment of a subscriber of the home gateway.
  • the subscription data of the home gateway may further include indication information of an access type of the home gateway, and the access type indicates whether the home gateway allows non-subscription User access.
  • the access and mobility management function network element may determine whether the user equipment is allowed to access the access network device in the following ways:
  • the access and mobility management function network element determines that the user equipment is allowed to access the user equipment.
  • Home gateway Because, regardless of whether the home gateway is an open type (allowing non-subscribed users to access) or a private type (non-subscribed users are not allowed to access), the contracted users can access.
  • the access and mobility management function network element determines that the user equipment is allowed to access the home gateway.
  • the access and mobility management function network element determines that the user equipment is not allowed to access the home gateway.
  • the subscription data may include a mapping table, and the mapping table includes identification information of multiple UEs and indication information of respective corresponding subscription types of the identification information of the multiple UEs, where the identification information of the multiple UEs may be It includes identification information of the UE of the contracted user, and may also include identification information of the UE of the non-subscribed user. In this way, according to the identification information of the specific UE, a subscription type corresponding to the specific UE can be found from this mapping table.
  • the method described in the third aspect may further include: the access and mobility management function network element sending access instruction information to an access network device or the home gateway And / or indication information of a service management policy of the user equipment, and the access instruction information indicates whether the user equipment is allowed to access the home gateway.
  • the identification information of the home gateway carried in the request message sent by the access and mobility management function network element is permanent identification information.
  • the method described in the third aspect may further include: the access and mobility management function network element may obtain temporary identification information of the home gateway, and obtain permanent identification information from the context of the home gateway according to the temporary identification information.
  • the access and mobility management function network element may obtain the temporary identification information from a NAS signaling sent by the user equipment. That is, the temporary identification information of the home gateway obtained by the access and mobility management function network element is sent by the user equipment.
  • the access and mobility management function network element may obtain the temporary identification information from a signaling sent by an access network device accessed by the home gateway. That is, the temporary identification information of the home gateway obtained by the access and mobility management function network element is sent by the access network device.
  • the temporary identification information included in the signaling sent by the access network device is sent by the home gateway to the access network device; or, the access network device is based on the IP address or the IP address of the user equipment.
  • the line identifier or VLAN identifier connected to the fixed network gateway or the access point identifier of the user equipment is identified.
  • the AMF can distinguish different access models of the UE to facilitate subsequent different service control, such as different QoS control.
  • the network side can prioritize access for contracted users and restrict access for non-subscribed users.
  • the differentiated service management policies (such as the host policy and the guest policy) performed by the 5GC on the UE, this application is not limited, and can be determined according to the application scenarios supported by 5G or NR.
  • the present application provides a network access method, which is applied to an access and mobility management function network element side, and the method may include: the access and mobility management function network element receives a request sent by an access network device Message, the request message includes identification information of the home gateway.
  • the access and mobility management function network element obtains the subscription data of the home gateway according to the identification information of the home gateway, and determines the classification of the user equipment according to the subscription data of the home gateway and the identification information of the user equipment. Type and / or service management policy of the user equipment.
  • the classification type of the user equipment includes a subscription type.
  • the method described in the fourth aspect may further include: the access and mobility management function network element sending the access network device or the home gateway to the Indication information of a subscription type of the user equipment, and / or indication information of a service management policy of the user equipment.
  • the access and mobility management function network element obtaining the subscription data of the home gateway according to the identification information of the home gateway may specifically include: the access And the mobility management function network element receives the subscription data of the home gateway sent by the unified data management network element according to the identification information of the home gateway.
  • the access and mobility management function network element obtaining the subscription data of the home gateway according to the identification information of the home gateway may specifically include: the access And the mobility management function network element obtains the subscription data of the home gateway from the context of the home gateway according to the identification information of the home gateway.
  • the subscription data of the home gateway may include identification information of user equipment of a subscriber of the home gateway.
  • the access and mobility management function network element determining the subscription type of the user equipment according to the subscription data of the home gateway may specifically include: if the identification information of the user equipment belongs to the subscription of the home gateway Identification information of the user equipment of the user, the access and mobility management function network element determines that the user equipment is a contracted user of the home gateway.
  • the subscription data of the home gateway may further include indication information of an access type of the home gateway, and the access type indicates whether the home gateway allows non-subscription User access.
  • the access and mobility management function network element may determine whether the user equipment is allowed to access the access network device in the following ways:
  • the access and mobility management function network element determines that the user equipment is allowed to access the user equipment.
  • Home gateway Because, regardless of whether the home gateway is an open type (allowing non-subscribed users to access) or a private type (non-subscribed users are not allowed to access), the contracted users can access.
  • the access and mobility management function network element determines that the user equipment is allowed to access the home gateway.
  • the access and mobility management function network element determines that the user equipment is not allowed to access the home gateway.
  • the subscription data may include a mapping table, and the mapping table includes identification information of multiple UEs and indication information of respective corresponding subscription types of the identification information of the multiple UEs, where the identification information of the multiple UEs may be It includes identification information of the UE of the contracted user, and may also include identification information of the UE of the non-subscribed user. In this way, according to the identification information of the specific UE, a subscription type corresponding to the specific UE can be found from this mapping table.
  • the method described in the fourth aspect may further include: the access and mobility management function network element sending an access to the access network device or the home gateway Indication information, and / or indication information of a service management policy of the user equipment.
  • the access instruction information indicates whether the user equipment is allowed to access the home gateway.
  • the identification information of the home gateway included in the request message sent by the access network device is temporary identification information.
  • the method described in the fourth aspect may further include: the access and mobility management function network element obtaining temporary identification information of the home gateway, and determining the contract from the context of the home gateway according to the temporary identification information data.
  • the access and mobility management function network element may obtain the temporary identification information from a NAS signaling sent by the user equipment. That is, the temporary identification information of the home gateway obtained by the access and mobility management function network element is sent by the user equipment.
  • the access and mobility management function network element may obtain the temporary identification information from a signaling sent by an access network device accessed by the home gateway. That is, the temporary identification information of the home gateway obtained by the access and mobility management function network element is sent by the access network device.
  • the temporary identification information included in the signaling sent by the access network device is sent by the home gateway to the access network device; or, the access network device is based on the IP address or the IP address of the user equipment.
  • the line identifier or VLAN identifier connected to the fixed network gateway or the access point identifier of the user equipment is identified.
  • the present application provides a network access method, which is applied to an access network device side, and the method may include: the access network device obtains temporary identification information of a home gateway to which the user device is connected, and sends the access and mobile
  • the sexual management function network element sends a message, the message includes: the temporary identification information of the home gateway and the identification information of the user equipment; the identification information of the user equipment comes from the user equipment.
  • the acquiring, by the access network device, the temporary identification information of the home gateway to which the user equipment is connected may specifically include that the access network device receives all the information sent by the user equipment.
  • the access network device may obtain the temporary identification information from a NAS signaling sent by the user equipment. That is, the temporary identification information of the home gateway obtained by the access network device is sent by the user equipment.
  • the access network device may obtain the temporary identification information from a signaling sent by the home gateway. That is, the temporary identification information of the home gateway obtained by the access network device is sent by the access network device.
  • the temporary identification information may also be the identification of the access network device based on the IP address of the user equipment or the line identification or VLAN identification connected to the fixed network gateway or the access point identification of the user equipment.
  • the present application provides a network access method applied to a user equipment side.
  • the method may include: the user equipment obtains temporary identification information of a home gateway to which the user equipment is connected, and the user equipment sends an access network to the access network
  • the device sends a request message, the request message includes: temporary identification information of the home gateway and identification information of the user equipment.
  • the obtaining, by the user equipment, the temporary identification information of the home gateway to which the user equipment is connected may specifically include that the user equipment receives the home sent by the home gateway. Gateway's temporary identification information.
  • the user equipment can obtain the temporary identification information of the home gateway through an access network query protocol (ANQP) query.
  • ANQP access network query protocol
  • the user equipment may receive an ANQP message or an EAP message sent by the home gateway, and these messages contain temporary identification information of the home gateway.
  • the user equipment may obtain the temporary identification information of the home gateway through an EAP message.
  • the home gateway carries a temporary identity of the home gateway in an EAP message sent to the user equipment.
  • the EAP message may be an EAP-Request / Identity message or an EAP-request / 5G-start message.
  • the present application provides a network access method, which is applied to an access network device side.
  • the method may include: the access network device receives a request message, and the request message includes identification information of a packet data unit PDU session.
  • the access network device sends a response message to a terminal device, where the response message includes an address of the access network device corresponding to the PDU session; the address of the access network device corresponding to the PDU session is used as the terminal The destination address of the user plane data packet of the PDU session sent by the device.
  • the method may further include: storing, by the access network device, identification information of the PDU session and address information of the access network device corresponding to the PDU session. Correspondence.
  • the method may further include: the access network device receiving identification information of the terminal device; and the access network device according to the identification information of the terminal device is The terminal device allocates an address; the access network device sends the address of the terminal device to the terminal device; the address of the terminal device is used as a user plane data packet of the PDU session sent by the terminal device source address.
  • the method may further include: the access network device receiving a user plane data packet of the PDU session sent by the terminal device, in the user plane data packet
  • the included destination address is an address of the access network device corresponding to the PDU session; the access network device identifies the PDU session based on the address information of the access network device corresponding to the PDU session.
  • the present application provides a network access method, which is applied to an access network device side.
  • the method may include: the access network device allocates a user plane address corresponding to the terminal device of the access network device;
  • the network access device sends a user plane address of the access network device to the terminal device, and the user plane address is used as a destination address of a user plane data packet of a PDU session sent by the terminal device.
  • the method may further include: the access network device receiving identification information of the terminal device; and the access network device according to the identification information of the terminal device is The terminal device allocates an address;
  • the access network device sends an address of the terminal device to the terminal device, and the address of the terminal device is used as a source address of a user plane data packet of a PDU session sent by the terminal device.
  • the method may further include: the access network device receiving the user plane data packet sent by the terminal device, and a destination address in the user plane data packet Is the user plane address of the access network device, the user plane data packet further includes identification information of the PDU session; the access network device identifies the PDU session based on the identification information of the PDU session.
  • the present application provides a network access method applied to a terminal device side.
  • the method may include: a user equipment receiving a user plane address of the access network device sent by an access network device; the access The network device sends a user plane data packet of a PDU session to the access network device, and the destination address included in the user plane data packet is the user plane address of the access network device.
  • the method may further include: the user equipment sends identification information of the user equipment to the access network device; and the user equipment receives the access network The address of the user equipment allocated and sent by the device; the source address included in the user plane data packet is the address of the user device.
  • the present application provides a network access method, which is applied to a terminal device side.
  • the method may include: a user equipment receiving an address of the access network device sent by an access network device; and the access network device Sending a user plane data packet of the PDU session to the access network device, the destination address included in the user plane data packet is the address of the access network device, and the user plane data packet further includes the PDU Identification information for the session.
  • the method may further include: the user equipment sends identification information of the user equipment to the access network device; and the user equipment receives the access network The address of the user equipment allocated and sent by the device; the source address included in the user plane data packet is the address of the user device.
  • this application provides a method for sending a service management policy, which is applied to a policy control network element side.
  • the method may include: the policy control network element receives an access and mobility management function network element or a session management network element A first message sent, the first message including information indicating a device type of a user equipment, the policy control network element sending a second message to a session management network element, the second message including the policy control network element based on The service management policy of the user equipment determined by the device type indication information of the user equipment.
  • the service management policy includes a QoS policy and / or a local resource access policy of a home gateway.
  • the service management policy includes: a local resource access policy of a home gateway; the method may further include: the policy controlling a network element to the access and movement The sexual management function network element sends the local resource access policy.
  • the present application provides a network access, which is applied to a home gateway side, and the method may include: the home gateway receives identification information of the user equipment and the user equipment sent by the access and mobility management function network element The home gateway obtains the local resource access policy of the home gateway; the home gateway controls the user according to the device type indication information of the user equipment and the local resource access policy The device accesses local resources.
  • the acquiring, by the home gateway, a local resource access policy of the home gateway may specifically include: the home gateway receiving the access and mobility management function network Element or the local resource access policy of the home gateway sent by the session management network element.
  • the acquiring, by the home gateway, a local resource access policy of the home gateway may specifically include: the home gateway configuring the local resource access policy.
  • the local resource access policy includes address information of a device connected to the home gateway.
  • the method may further include: the home gateway receiving a request message sent by the user equipment, the request message including identification information of the user equipment; the The home gateway controlling the user equipment to access local resources according to the device type indication information of the user equipment and the local resource access policy includes: the home gateway according to the user equipment identification information and the user equipment The device type indication information determines the device type of the user equipment; the home gateway controls the user equipment to access local resources according to the device type of the user equipment and the local resource access policy.
  • this application provides a core network device, including multiple functional units, for correspondingly implementing the first or second aspect or the third or fourth aspect or the eleventh possible implementation manner. Any of the provided methods.
  • the core network device may be implemented as a unified data management network element in the first aspect or the second aspect or the third aspect or the fourth aspect or the eleventh aspect. Access and mobility management network element.
  • the present application provides an access network device, including a plurality of functional units, configured to correspondingly implement any one of the fifth aspect or the seventh aspect or the eighth aspect of the possible implementation manner. method.
  • the present application provides a user equipment, including multiple functional units, for correspondingly executing the method provided in any one of the possible implementation manners of the sixth aspect.
  • the present application provides a terminal device, including multiple functional units, for correspondingly executing the method provided in any one of the possible implementation manners of the ninth aspect or the tenth aspect.
  • this application provides a core network device for performing the network access method described in any one of the first aspect, the second aspect, or the third aspect or the fourth possible implementation manner.
  • the core network device may be implemented as a unified data management network element in the first aspect or the second aspect or the third aspect or the fourth aspect or the eleventh aspect. Access and mobility management network element.
  • the core network device may include a memory, a processor coupled to the memory, and a transceiver, where the transceiver is configured to communicate with other communication devices (such as an access network device).
  • the memory is configured to store implementation code of the network access method described in any one of the first aspect, the second aspect, or the third aspect or the fourth possible implementation manner
  • the processor is configured to execute the program code stored in the memory, That is, the method provided in any one of the possible implementation manners of the first aspect, the second aspect, the third aspect, or the fourth aspect, or the eleventh aspect is performed.
  • this application provides an access network device for performing the network access method described in any one of the possible implementation manners of the fifth aspect.
  • the application server may include a memory, a processor coupled to the memory, and a transceiver, where the transceiver is configured to communicate with other communication devices (such as a core network device and a home gateway).
  • the memory is configured to store the implementation code of the network access method described in any one of the fifth aspect or the seventh aspect or the eighth possible implementation manner
  • the processor is configured to execute the program code stored in the memory, that is, execute the fifth Aspect, or the method provided in any one of the possible aspects of the seventh aspect or the eighth aspect.
  • the present application provides user equipment for performing the network access method described in any one of the possible implementation manners in the sixth aspect.
  • the user equipment may include a memory and a processor and a transceiver coupled to the memory, where the transceiver is used to communicate with other communication devices (such as a home gateway).
  • the memory is configured to store the implementation code of the network access method described in any one of the possible implementation manners of the sixth aspect
  • the processor is configured to execute the program code stored in the memory, that is, execute any of the possible implementation manners in the sixth aspect.
  • the present application provides a terminal device for performing the network access method described in any one of the possible implementation manners in the sixth aspect.
  • the terminal may include a memory and a processor and a transceiver coupled to the memory, where the transceiver is used to communicate with other communication devices (such as a home gateway).
  • the memory is configured to store implementation code of the network access method described in any one of the ninth aspect or the tenth possible implementation manner
  • the processor is configured to execute the program code stored in the memory, that is, execute the ninth aspect or the tenth aspect.
  • the method provided in any of the possible implementations of the aspect.
  • this application provides a communication system.
  • the communication system includes: user equipment, a home gateway, an access network device, and a core network device.
  • the core network device may be the thirteenth aspect or the tenth aspect. Core network equipment described in the seven aspects.
  • the access network device may be the access network device described in the fourteenth aspect or the eighteenth aspect.
  • the user equipment may be the user equipment described in the fifteenth aspect or the nineteenth aspect.
  • the home gateway may be the terminal device described in the sixteenth aspect or the twentieth aspect.
  • the present application provides a computer-readable storage medium having instructions stored on the readable storage medium.
  • the computer-readable storage medium When the computer-readable storage medium is run on a computer, the computer can execute any one of the first to twelfth aspects.
  • Item describes the network access method.
  • the present application provides a computer program product containing instructions that, when run on a computer, causes the computer to execute the network access method described in any one of the first aspect to the twelfth aspect.
  • 1A-1C are schematic architecture diagrams of a wireless communication system involved in this application.
  • FIG. 2 is a schematic flowchart of a network access method provided by the present application.
  • FIG. 3 is a schematic flowchart of another network access method provided by the present application.
  • FIG. 5 is a schematic flowchart of still another network access method provided by the present application.
  • FIG. 6 is a schematic structural diagram of a user equipment according to an embodiment of the present application.
  • FIG. 7 is a schematic architecture diagram of a home gateway according to an embodiment of the present application.
  • FIG. 8 is a schematic structural diagram of an access network device according to an embodiment of the present application.
  • FIG. 9 is a schematic architecture diagram of a core network device according to an embodiment of the present application.
  • FIG. 10 is a functional block diagram of a communication system and related communication devices provided by the present application.
  • FIG. 11 is a schematic flowchart of a method for obtaining identification information of a home gateway provided by a network side provided in this application;
  • FIG. 12 is a schematic flowchart of still another network access method provided by this application.
  • FIG. 13 is a schematic flowchart of a method for issuing a service management policy by a network side provided in this application.
  • FIG. 1A-1C illustrate a system architecture of a communication system involved in the present application.
  • FIG. 1A illustrates a non-roaming system architecture
  • FIG. 1B illustrates a local breakout roaming system architecture
  • FIG. 1C illustrates a home routed roaming system architecture.
  • the system architecture shown in Figures 1A-1C not only supports the wireless access technologies (such as LTE, 5G RAN, next generation (NG), etc.) defined by the 3GPP standard group to access the core network (CN), In addition, it supports non-3GPP (non-3GPP) access technology to access the core network through non-3GPP conversion function (non-3GPP interworking function, N3IWF) or next generation access gateway (next generation packet data gateway, ngPDG).
  • the system architecture also supports fixed network / wired network access, such as 5G Home Gateway (5GRG) / CPE access to the core network through a wired 5G access network (W-5GAN).
  • 5G Home Gateway 5G Home Gateway
  • W-5GAN wired 5G access network
  • 5G home gateway is connected to the 5GC through a wired 5G access network
  • a 5GC capable user equipment 5GC capable UE
  • the 5GC-capable user equipment is a remote device
  • the 5G home gateway is a relay device.
  • the system architecture shown in FIGS. 1A-1C may also be a new radio (NR) system, a machine-to-machine (M2M) system, etc., which will evolve in the future.
  • the system architecture may include 5GC capable user equipment, 5G RG, NG RAN equipment, W-5G AN equipment, and core network equipment. among them:
  • 5GC Capable User Equipment It is a user equipment (UE) that has the ability to access the 5G core network (5GC) defined by 3GPP.
  • 5GC-capable user equipment can access the core network through NGRAN and 5G RG.
  • the 5GC-capable user equipment may be a handheld terminal, a subscriber unit, a cellular phone, a smartphone, a machine type communication (MTC) terminal device, or the like.
  • Wireless data card personal digital assistant (PDA) computer, tablet computer, wireless modem (modem), handheld device (laptopcomputer), cordless phone (cordlessphone) or wireless local loop (wireless local loop (WLL)), or other devices that can access the network.
  • the system architecture can also support terminal equipment with only wireless access capability defined by 3gpp to access the core network, and also support terminal equipment (such as tablet computers) with only access capability defined by non-3gpp. Access to the core network.
  • 5G RG It is a home gateway that can access 5GC through W-5G AN. In this application, 5G RG can also support 5GC capable user equipment to access 5GC through 5G RG.
  • the home gateway is the core of the entire home network. It mainly implements Internet access and the connection of heterogeneous subnets within the home, as well as remote control and management functions.
  • NGRAN device It is a RAN device that is mainly responsible for radio resource management, quality of service (QoS) management, data compression, and encryption functions on the air interface side.
  • the system architecture can also support other 3GPP-defined radio access network equipment, such as 5GRAN equipment.
  • the RAN device may include: a macro base station, a micro base station (also referred to as a small station), a relay station, and the like. In systems using different wireless access technologies, the names of devices with base station functions may be different.
  • gNB 5th generation
  • LTE Long Term Evolution
  • eNB evolved NodeB
  • 3G third generation
  • W-5G AN equipment It is an AN equipment.
  • the AN device may be a non-3GPP-defined access network device.
  • AN equipment allows terminal equipment and 3GPP core networks to be interconnected using non-3GPP technologies.
  • non-3GPP technologies such as: wireless fidelity (Wi-Fi), worldwide interoperability for microwave access (WiMAX) ), Code division multiple access (code division multiple access, CDMA) networks, etc.
  • Wi-Fi wireless fidelity
  • WiMAX worldwide interoperability for microwave access
  • CDMA Code division multiple access
  • the system architecture can also support other non-3GPP-defined access network equipment, such as Wi-Fi routers.
  • Core network equipment can include UPF, AMF, UDM, SMF, PCF, AUSF, etc. as shown in Figures 1A-1C.
  • These core network devices constitute 5GC, which can support 3gpp access network and non-3gpp access network. among them:
  • UPF network element responsible for forwarding and receiving data packets.
  • the UPF network element can receive user data from the data network and transmit it to the terminal device through the access network device; the UPF network element can also receive user data from the terminal device through the access network device and forward it to the data network.
  • Transmission resources and scheduling functions in the UPF network element that provide services to terminal equipment are managed and controlled by the SMF network element.
  • UPF network elements can buffer data packets.
  • Access and mobility management (AMF) network element belongs to the core network element and is mainly responsible for the signaling processing part, such as: access control, mobility management, attachment and detachment, and gateway selection, etc.
  • AMF Access and mobility management
  • a control plane storage resource is provided for the session to store a session identifier, an SMF network element identifier associated with the session identifier, and the like.
  • Unified data management is composed of two parts, one is called the front end of application (FE), and the other is called user data warehouse (UDR).
  • FE can access subscriber information stored in UDR, and supports authentication credit processing, user identification processing, access authorization, subscription management, short message management, etc.
  • UDR is a subscription data storage server that provides subscription data storage services.
  • Session management function (SMF) network element responsible for user plane network element selection, user plane network element redirection, Internet protocol (IP) address allocation, establishment, modification, and release of data transmission channels, and QoS control .
  • SMF network elements can buffer data packets.
  • PCF Policy control function
  • Authentication server function (AUSF) network element mainly provides authentication and authentication functions.
  • system architecture also includes a data network (DN), which is a network consisting of application functions that provides application data servers to terminal equipment.
  • DN data network
  • UDSF unstructured data storage network function
  • SDSF structured data storage network function
  • NFSF function NF storage function
  • FIGS. 1A-1C The system architecture shown in FIGS. 1A-1C is only for more clearly illustrating the technical solution of the present application, and does not constitute a limitation on the present application. Those of ordinary skill in the art may know that with the evolution of the network architecture and the emergence of new service scenarios, The technical solutions provided in this application are also applicable to similar technical problems.
  • This application provides a network access method, which can enable a user equipment (UE) to access the 5GC through a home gateway, so that the 5GC supports more access methods, and improves the convergence of the fixed network and the mobile network.
  • UE user equipment
  • the UE may be a 5GC capable UE in the system architecture shown in FIG. 1A-1C
  • the home gateway may be a 5G RG in the system architecture shown in FIG. 1A-1C.
  • the main inventive principle of this application may include: determining the following two issues based on the 5G RG contract data: 1) determining whether the home gateway allows UE access. 2) When 5G RG allows UE access, judge the UE's access model (including subscription user access, non-subscriber access). Subscriber access is for family members to access 5GC through 5G RG, and non-subscriber access is for non-family members (such as guest users or strangers) to access 5GC through 5G RG.
  • 5G RG contract data can indicate which 5G RG contract users are.
  • 5G RG contract data can indicate which users 5G RG allows access.
  • the 5G RG contract data may include the following information:
  • the identification information of the user equipment in the subscription user list indicates that the user equipment is a subscription user, that is, a family member.
  • the identification information of the user equipment may be at least one of a permanent identification information of the UE or an international ISDN / PSTN number (Mobile Subscriber International ISDN / PSTN number, MSISDN) of the UE's mobile subscription user.
  • ISDN is the abbreviation for Integrated Service Digital Network
  • PSTN is the abbreviation for Public Switched Telephone Network.
  • the access type of 5G RG may include an open type, a closed type / private type. Closed type / private type means that 5G RG only allows access by contracted users, and does not allow access by non-subscribed users.
  • the open type means that 5G RG not only allows subscribers to access, but also allows non-subscribers to access.
  • the subscription user list can be used by the network side to determine the subscription type (subscriber user or non-subscriber user) of the UE, so as to determine the access model of the UE, that is, whether the subscription user accesses or non-subscriber user access.
  • the access type of 5G RG can be used by the network side to determine whether the UE is allowed to access 5G RG. If the access type of 5G RG is an open type, it means that the UE is allowed to access 5G RG. If the access type of 5G RG is a closed type / private type, it is also necessary to determine whether the UE is allowed to access 5G RG in conjunction with the subscription user list. If the identification information of the UE belongs to the subscription user list, the UE is allowed to access 5G RG; otherwise, the UE is not allowed to access 5G RG.
  • the network side may determine that the UE is allowed to access the 5G RG. That is, the subscribers are allowed to access 5G RG, regardless of whether the access type of the 5G RG is open or closed / private.
  • the indication information of the contract type may be terminal device classification information, and the terminal device classification information is terminal device classification list information or terminal device classification instruction information.
  • the terminal device classification list information includes at least one terminal device identifier, and the terminal devices belong to the same terminal device classification.
  • the terminal device classification list is a contracted terminal device list or a non-subscribed terminal device list.
  • the indication information of the terminal device classification may be an identification of the terminal device classification.
  • the terminal device classification instruction information is the contracted terminal device instruction information or the non-subscribed terminal device instruction information.
  • the core network device judgment can determine whether the terminal device is allowed to access or perform policy control based on the classification of the terminal device (such as Qos policy control or home gateway local policy control). Specifically, if the identification information of the terminal device belongs to the contracted terminal device classification list, the remote device is allowed to access; if the identification information of the terminal device does not belong to the contracted terminal device classification list, the remote device is not allowed to access.
  • 5GC can perform different host policies or guest policies on the UE, such as different QoS control, permission to use specific resources (such as printers), or be allowed to access the Internet.
  • the host policy is provided to the UEs of the subscribers belonging to the 5G RG, for example, user equipment of family members.
  • the guest policy is provided to UEs that are not subscribers of the 5G RG, for example, the user equipment of the guest.
  • the network side distinguishes different access models of the UE to facilitate subsequent different service control, such as different QoS control. Especially when network resources are limited, the network side can prioritize access for contracted users and restrict access for non-subscribed users.
  • the differentiated service management policies (such as the host policy and the guest policy) performed by the 5GC on the UE, this application is not limited, and can be determined according to the application scenarios supported by 5G or NR.
  • UDM registered by the UE and UDM network elements registered by 5G and RG will involve UDM registered by the UE and UDM network elements registered by 5G and RG.
  • the two may be the same UDM network element or different UDM network elements.
  • the UDM network elements registered by the UE and 5G RG are different UDM network elements.
  • the UDM network elements registered by the UE and the 5G RG may be the same UDM network element or different UDM network elements.
  • the AMF network element serving the UE and the AMF network element serving the 5G RG involved in the subsequent embodiments may be the same AMF network element or different AMF network elements.
  • the simplified UDM network element is referred to as UDM
  • the simplified AMF network element is referred to as AMF.
  • the UDM registered by 5G RG is called UDM1
  • the UDM registered by UE is called UDM2.
  • the AMF serving 5G RG is called AMF1
  • the AMF serving UE is called AMF2.
  • the UDM is responsible for determining the UE's access model (including subscription user access, non-subscriber user access), and determining whether the home gateway allows UE access.
  • the network access method provided in Embodiment 1 may include:
  • Phase 1 The UE initiates an access request. This can include:
  • the UE establishes a connection with the 5G RG, such as establishing a connection through a WLAN interface.
  • 5G RG or W-5G AN equipment accessed by 5G RG can assign an IP address to the UE.
  • 5G RG could be registered to 5GC, and the core network element that 5G RG registered was AMF1.
  • AMF1 the core network element that 5G RG registered was AMF1.
  • 5G RG registration to 5GC please refer to the registration process defined by the 3gpp standard protocol, which is not described here.
  • the UE establishes a connection with the W-5G AN device.
  • This application does not limit the manner in which the UE establishes a connection with the W-5G AN device.
  • the UE may establish a connection with a W-5G AN device through an IKEv2 message.
  • the UE sends an IKE secure connection initial (IKE_SA_INIT) message to the W-5G AN device, and then the W-5G AN device sends an IKE_SA_INIT reply message. Then, the UE sends an authentication request (IKE_AUTH request) message to the W-5G AN device.
  • IKE stands for Internet Key Exchange (Internet Key Exchange) protocol.
  • the UE can exchange Extensible Authentication Protocol (EAP) messages with 5G-RG and W-5GAN to establish a connection between W-5G and AN devices.
  • the EAP message may include an EAP-request / response message, an EAP-request / identity message, or an EAP-response / identity message, or an EAP-Request / 5G start message, or an EAP-Response / 5G-NAS message, and the like.
  • the UE sends the EAP message to the W-5GAN, which carries an AN-parameter and a non-access stratum (NAS) message.
  • the NAS message is a registration request message, a mobile registration update request message, a periodic location update request message, or a service request message.
  • the UE may send a request message to the W-5G AN device based on the connection established between the UE and the W-5G AN device.
  • the request message may be a NAS message. This request message can be carried in the EAP message and sent to W-5GAN, see S103-105 for details.
  • the request message may include identification information of the UE for requesting access to a core network (5GC).
  • W-5G AN equipment can forward the NAS message to AMF2. For details, refer to S109.
  • the second stage the network obtains the 5G RG identification information and 5G RG contract data. This can include:
  • the 5G RG sends the 5G RG temporary identification information to the W-5G AN device.
  • the 5G RG temporary identification information can be used to index the 5G RG context on the core network side.
  • the 5G RG temporary identification may include a globally unique temporary identifier (GUTI), that is, a temporary identification allocated by the network side (5GC) for 5G RG.
  • GUI globally unique temporary identifier
  • 5G RG sends 5G RG temporary identification information this application does not limit this.
  • 5G RG sends Point-to-Point Ethernet (PPPoE) based on Ethernet, or other control plane messages, which can carry temporary identification information of 5G RG.
  • the message may also carry the IP address of the UE.
  • the request message sent by the UE to the W-5G AN device in S106 may also carry temporary identification information of 5G RG, and the temporary identification information of 5G RG may be obtained by the UE.
  • the UE can obtain the temporary identification information of the 5G RG through an Access Network Query Protocol (ANQP) query.
  • ANQP Access Network Query Protocol
  • the UE may receive an ANQP message or an EAP message sent by the 5G RG, and these messages contain a 5G RG temporary identity.
  • the UE may obtain temporary identification information of 5G-RG through an EAP message.
  • the 5G-RG carries a 5G-RG temporary identity in an EAP message sent to the UE.
  • the EAP message may be an EAP-Request / Identity message or an EAP-request / 5G-start message.
  • the W-5G AN device can select AMF2 for the UE.
  • the W-5G AN device may select AMF2 based on slice selection information or UE identification information or AMF identification information.
  • the message sent by the UE to the W-5GAN contains the slice information requested by the UE.
  • Different AMFs on the network side are responsible for different slices, so W-5GAN can select the AMF2 that is responsible for the slice based on the slice information.
  • the UE sends the identification information of the UE to the W-5GAN, and the identification information of the UE includes an AMF identification, and the W-5GAN selects AMF2 corresponding to the AMF identification.
  • the UE directly sends the identification information of the AMF to the W-5GAN, and the W-5GAN selects the AMF2 corresponding to the AMF identification.
  • the W-5G AN device may send a request message to the AMF2.
  • the request message may include UE identification information and 5G RG temporary identification information, which is used by the UE to request access to the core network.
  • the request message may be an N2 message, and N2 is a reference point between the W-5G AN device and the AMF.
  • the W-5G AN device can carry the NAS message (refer to S106) sent by the UE in the N2 message, so that the W-5G AN device can forward the NAS message to AMF2 for the UE to request access from AMF2 Core Network.
  • AMF2 obtains 5G RG permanent identification information based on 5G RG temporary identification information.
  • 5G RG's permanent identification information is used to subsequently obtain 5G RG's contract data.
  • AMF2 can first obtain 5G RG temporary identification information in the following ways:
  • Method 1 AMF2 obtains 5G RG temporary identification information from the NAS signaling sent by the UE.
  • the UE obtains 5G RG temporary identification information (refer to S102), and then carries the 5G RG temporary identification information through a NAS message (forwarded by a W-5G AN device) and sends it to AMF2.
  • Method 2 AMF2 obtains 5G RG temporary identification information from W-5G AN equipment.
  • the temporary identification information may be sent by 5G RG to W-5G AN equipment.
  • S107 For details, refer to S107.
  • the AMF2 can obtain the permanent identification information of the 5G RG from the context of the 5G RG based on the temporary identification information.
  • the context of 5G RG is stored on AMF1.
  • AMF2 can find the AMF1 serving 5G RG based on the 5G RG temporary identification information, and send a request to AMF1 Message.
  • the request message may further include a SUPI request indication, which indicates that the 5G RG permanent identity information is requested.
  • AMF1 can find the context of 5G RG based on the temporary identification information of 5G RG, obtain the permanent identification information of 5G RG from the context, and send the permanent identification information to AMF2.
  • the request message carries a 5G RG temporary identification letter.
  • the request message may also carry an instruction for requesting permanent identification information.
  • the permanent identification information may be a subscriber permanent identifier (SUPI).
  • AMF1 and AMF2 are the same AMF, the interaction process shown in S110-S111 is no longer needed, and AMF can directly obtain 5G from the locally stored 5G RG based on the 5G RG temporary identification information. RG's permanent identification information.
  • AMF2 can complete UE authentication based on the authentication authentication process. Specifically, the AMF2 finds out the UDM2 responsible for storing the subscription data of the UE based on the identification information of the UE. Then, UDM2 and AUSF complete the UE's authentication and authentication process based on the authentication vector in the UE's subscription data.
  • the authentication and authentication process can specifically refer to the related protocols in the 3gpp standard, which is not described here again.
  • AMF2 finds out UDM1 responsible for storing 5G RG contract data based on the 5G RG permanent identification information, and sends a request message to UDM1.
  • the request message may include UE identification information and 5G RG permanent identification information.
  • the request message may also carry an access request indication, indicating that the UE represented by the identification information of the UE requests that the 5G RG represented by the 5G RG SUPI be used to access the core network.
  • the request message can also carry the identification information of AMF2, so that UDM1 can store the identification information of AMF2, which can be used to notify AMF2 to update the subscription type of the UE when the subsequent 5G RG contract data is updated.
  • UDM1 receives the request message sent by AMF2.
  • the core network determines the access model of the UE based on the 5G RG contract data. This can include:
  • the UDM1 may determine the 5G RG contract data based on the permanent identification information of the 5G RG. UDM1 can then determine the subscription type of the UE based on the 5G RG subscription data. UDM1 can also determine whether the UE is allowed to access 5G RG based on the 5G RG contract data.
  • 5G RG contract data can include the following information:
  • List of subscribers identification information of the user equipment of the subscribers of the 5G RG.
  • the identification information of the user equipment in the subscription user list indicates that the user equipment is a subscription user, that is, a family member.
  • the access type of 5G RG may include an open type, a closed type / private type. Closed type / private type means that 5G RG only allows access by contracted users, and does not allow access by non-subscribed users.
  • the open type means that 5G RG not only allows subscribers to access, but also allows non-subscribers to access. In other words, the access type can be used to indicate whether 5G RG allows non-subscribed users to access.
  • UDM1 may determine the access model of the UE based on the access model of the subscription user list. If the identification information of the UE belongs to the identification information of the user equipment of the subscription user in the subscription user list, the UDM1 may determine that the UE is a subscription user of the 5G RG.
  • UDM1 can determine whether the UE is allowed to access 5G RG in the following ways:
  • the UDM1 may determine that the UE is allowed to access the 5G RG, regardless of whether the access type of the 5G RG is open The type is also a closed type / private type.
  • UDM1 may determine that the UE is allowed to access 5G RG.
  • UDM1 may determine that the UE is not allowed to access 5G RG.
  • the subscription data may include a mapping table, and the mapping table includes identification information of multiple UEs and indication information of respective corresponding subscription types of the identification information of the multiple UEs, where the identification information of the multiple UEs may be It includes identification information of the UE of the contracted user, and may also include identification information of the UE of the non-subscribed user.
  • UDM1 can find out the subscription type corresponding to the specific UE from this mapping table according to the identification information of the specific UE.
  • UDM1 may send a response message to AMF2.
  • the response message includes indication information that may include a subscription type of the UE.
  • AMF2 can receive the response message sent by UDM1, and determine the UE's service management policy (such as QoS control) according to the subscription type of the UE. In this way, the network side can distinguish different access models of the UE, so as to facilitate subsequent different service control.
  • AMF2 may also determine that the UE is allowed to access 5G RG.
  • the response message may further include access instruction information, which indicates whether the UE is allowed to access 5G RG.
  • the access indication information is an access refusal indication; when the UE is allowed to access, the access indication information is an access permission indication.
  • AMF2 may store the subscription type of the UE in the context of the UE.
  • UDM1 may also send the subscription data of 5G RG to AMF2, and AMF2 determines the subscription type of the UE, and whether the UE is allowed to access 5G RG. Specifically, AMF2 determines the UE's subscription type and whether the UE is allowed to access 5G.
  • RG and UDM1 can be the same. For details, refer to S114-S115, and details are not described here.
  • UDM1 may also send the list of contracted users to AMF2 after determining that the UE is allowed to access 5G RG, so that AMF2 can determine the UEs that access 5G RG according to the list of contracted users.
  • AMF2 completes the UE's access process based on the existing registration process or mobile registration update process or periodic registration update process, such as allowing access process or rejecting access process.
  • the existing registration process the mobile registration update process, or the periodic registration update process, please refer to the relevant protocol in the 3gpp standard for details, which will not be repeated here.
  • the AMF2 may send access instruction information to a W-5G AN device or a 5G RG, and the access instruction information is used to indicate whether the UE is allowed to access the 5G RG.
  • the indication information may be a security key, so that the W-5GAN can determine that the UE's authentication is successful based on the received security key, and thus determine that the UE is allowed to access.
  • the indication information may be an EAP-Success message, so that the 5G-RG can determine that the UE's authentication is successful based on receiving the EAP-Success message, and therefore it is determined that the UE is allowed access.
  • the AMF2 may also send indication information of the UE's subscription type and / or indication information of the UE's service management policy (such as QoS control, or local resource access authority, etc.) to the W-5G AN device or 5G RG or UE.
  • the above access indication information, or UE's subscription type indication information, and / or the UE's service management policy are sent from the AMF2 to the W-5GAN through the N2 interface message, or via NAS (Non-Access-Stratum)
  • the message is sent by AMF2 to 5G-RG or UE.
  • the W-5G AN device may send the 5G RG or UE access indication information, UE Indication information of a subscription type and / or indication information of a service management policy of the UE.
  • the indication information may be a security key, so that the W-5GAN may determine that the authentication and authentication of the UE is successful based on the received security key, and thus determine that the UE is allowed to access.
  • the indication information may be an EAP-Success message, so that the 5G-RG or the UE can determine that the UE's authentication is successful based on the receipt of the EAP-success message, so it is determined that the UE is allowed to access.
  • the indication information may be a NAS success message, so that the UE may determine that the UE is allowed to access based on the NAS success message.
  • the access indication information, or the UE's subscription type indication information, and / or the UE's service management policy are sent by the W-5GAN to the 5G-RG or the UE through an access-side message.
  • the access-side message is, for example, a PPPoE message or an EAP message or other fixed-network access-side message.
  • the 5G RG may send the UE the access indication information and the UE's subscription type indication information. And / or indication information of a service management policy of the UE.
  • the indication information may be an EAP-Success message, so that the UE can determine that the authentication and authentication of the UE is successful based on receiving the EAP-success message, so it is determined that the UE is allowed to access.
  • the indication information may be a NAS success message, so that the UE may determine that the UE is allowed to access based on the NAS success message.
  • the access indication information, or the UE's subscription type indication information, and / or the UE's service management policy are sent by the 5G-RG to the UE through an air interface side message.
  • the air interface side message is, for example, a PC5 interface message, an EAP message, a WLAN interface message, or a Bluetooth interface message.
  • the fourth stage: 5G RG contract data is updated. This can include:
  • the 5G RG contract data stored on UDM1 is updated.
  • the access type of 5G RG has changed from an open type to a private type, or the list of contracted users is updated.
  • UDM1 may re-determine the subscription type of the UE based on the updated 5G RG contract data, and re-determine whether the UE is allowed to access the 5G RG.
  • UDM1 can also send the updated 5G RG contract data to AMF2, and AMF2 re-determines the UE's subscription type and whether the UE is allowed to access 5G RG based on the updated 5G RG contract data.
  • UDM1 may send an access update message to AMF2 according to the identification information of AMF2.
  • the access update message is implemented as follows:
  • the access update message may include an access rejection indication.
  • the access update message may include indication information of the UE's updated subscription type to inform AMF2 to adjust the UE's access model, and UE's service management strategy.
  • the access update message may include at least one of the updated 5G RG access type and the updated subscriber list, and AMF2 is based on the updated 5G RG access type and / or the updated subscription
  • the user list determines the subscription type of the UE and whether the UE is allowed to access 5G RG.
  • the AMF2 sends a notification message to the UE.
  • the notification message may be used to notify the UE of the changed subscription type.
  • the notification message may carry a reselection instruction, which is used to notify the UE to reselect the 5G RG for access.
  • the UE may release the connection with the source 5G RG and select another 5G RG to access the 5GC.
  • the UDM can distinguish different access models of the UE based on the 5G RG subscription data to facilitate subsequent different service control, such as different QoS control.
  • the network side can prioritize access for contracted users and restrict access for non-subscribed users.
  • 5GC can support more access methods, and improve the convergence of fixed and mobile networks.
  • the main difference between the second embodiment and the first embodiment lies in that the manner in which the AMF2 obtains the identification information of the 5G RG is different.
  • the network access method provided in the second embodiment may include:
  • Phase 1 The UE initiates an access request.
  • the UE establishes a connection with the 5G RG, such as establishing a connection through a WLAN interface.
  • 5G RG or W-5G AN equipment accessed by 5G RG can assign an IP address to the UE.
  • 5G RG could be registered to 5GC, and the core network element that 5G RG registered was AMF1.
  • AMF1 the core network element that 5G RG registered was AMF1.
  • 5G RG registration to 5GC please refer to the registration process defined by the 3gpp standard protocol, which is not described here.
  • the UE establishes a connection with the W-5G AN device.
  • S103-S105 the UE establishes a connection with the W-5G AN device.
  • the UE may send a request message to the W-5G AN device based on the connection established between the UE and the W-5G AN device.
  • the request message may include identification information of the UE for requesting access to a core network (5GC).
  • the request message may be a NAS message.
  • the W-5G AN device can forward the NAS message to AMF1. For details, refer to S207.
  • the second stage the network obtains the 5G RG identification information and 5G RG contract data. This can include:
  • W-5G AN equipment recognizes 5G RG, obtains 5G RG line ID (line ID), 5G RG GUTI or N2 interface 5G RG temporary identification information and other temporary identification information.
  • W-5GAN determines the 5G RG context, obtains the 5G RG connected AMF1 from the 5G RG context, and sends a request message to AMF1.
  • the request message may include identification information of the UE and temporary identification information of the 5G RG.
  • the above-mentioned 5G RG temporary identification information includes at least one of a 5G RG line ID, or a 5G RGGUTI, or an N2 interface 5G RG temporary identification.
  • the request message may be an N2 message, and N2 is a reference point between the W-5G AN device and the AMF.
  • the W-5G AN device can carry the NAS message (refer to S205) sent by the UE in the N2 message, so that the W-5G AN device can forward the NAS message to AMF2 for the UE to request access from AMF2 Core Network.
  • AMF1 receives the request message sent by the W-5G AN device, and indexes it into the 5G RG context based on the 5G RG temporary identification information, and obtains the 5G RG permanent identification information from the 5G RG context.
  • the W-5GAN identification scheme for 5G RG includes but is not limited to the following:
  • W-5GAN identifies 5G RG based on the UE's local IP address, that is, which 5G RG is allocated by the IP address space to which the IP address belongs, thereby determining 5G RG.
  • the IP address of the UE is assigned by the W-5G AN device based on the DHCP process.
  • the W-5G AN device can obtain the line ID of the 5G RG connection from the DHCP message, that is, the line ID.
  • W-5G AN equipment can identify 5G RG based on the correspondence between line ID and 5G RG.
  • the W-5G AN device can also identify the 5G RG based on the 5G RG's Virtual Local Area Network (VLAN) identifier or the UE's current access point identifier.
  • VLAN Virtual Local Area Network
  • AMF1 may select AMF2 for the UE. Specifically, AMF1 may select AMF2 based on slice selection information or UE identification information.
  • the AMF1 sends a notification message to the AMF2, and the notification message may include identification information of the UE and permanent identification information of the 5G RG.
  • the notification message may be an N1 notification message (N1 messageNotify), and N1 is a reference point between the UE and the AMF.
  • AMF1 may carry the NAS message (refer to S205) sent by the UE in the N1 notification message.
  • the AMF2 can receive the notification message sent by the AMF2 and obtain the permanent identification information of the 5G RG carried in the notification message.
  • AMF1 is responsible for determining the UE's access model (including subscription user access, non-subscriber user access), and determining whether the home gateway allows UE access. Different from the first embodiment and the second embodiment, the embodiment does not need AMF2 to interact with UDM1 to determine 5G RG contract data.
  • the network access method provided in the third embodiment may include:
  • S301-S306 The UE initiates an access request.
  • AMF2 obtains 5G RG temporary identification information. It is the same as S107-S109 in the first embodiment, and is not repeated here.
  • AMF2 can find AMF1 based on the 5G RG temporary identification information, and send a request message to AMF1.
  • the request message may include identification information of the UE and temporary identification information of the 5G RG.
  • the request message may further include an access request indication, indicating that the UE represented by the identification information of the UE requests that the 5G RG represented by the temporary identification information of the 5G RG access the core network.
  • AMF1 can find the context of 5G RG based on the temporary identification information of 5G RG.
  • the context of this 5G RG includes the 5G RG contract data obtained from UDM 1.
  • AMF1 can determine the subscription type of the UE and whether the UE is allowed to access the 5G RG based on the 5G RG's subscription data.
  • AMF1 determines the subscription type of the UE and whether the UE is allowed to access the 5G RG based on the 5G RG contract data.
  • the implementation of the AMF1 is the same as that adopted by the UDM in the first embodiment, and will not be repeated here.
  • AMF1 can send a response message to AMF2.
  • the response message includes indication information that may include a subscription type of the UE.
  • AMF2 may receive the response message sent by AMF1, and determine a service management policy (such as QoS control) of the UE according to the subscription type of the UE. In this way, the network side can distinguish different access models of the UE, so as to facilitate subsequent different service control.
  • AMF2 may also determine that the UE is allowed to access 5G RG.
  • the response message may further include access instruction information, which indicates whether the UE is allowed to access 5G RG.
  • the access indication information is an access refusal indication; when the UE is allowed to access, the access indication information is an access permission indication.
  • AMF2 may store the subscription type of the UE in the context of the UE.
  • AMF1 can store the identification information of AMF2, which can be used to notify AMF2 to update the UE's subscription type under the condition that subsequent 5G RG contract data is updated.
  • AMF1 can also store the identification information of the UE, which can be used to determine whether the subscription data of the UE has changed. If the subscription type of the UE changes from a contracted user to a non-subscribed user, the UE needs to be notified in a targeted manner.
  • AMF2 can complete UE authentication based on the authentication authentication process.
  • AMF2 completes the UE's access process based on the existing registration process or mobile registration update process or periodic registration update process, such as allowing access process or rejecting access process.
  • the existing registration process the mobile registration update process, or the periodic registration update process, please refer to the relevant protocol in the 3gpp standard for details, which will not be repeated here.
  • the AMF2 may send access instruction information to a W-5G AN device or a 5G RG, and the access instruction information may be used to indicate whether the UE is allowed to access the 5G RG, as in the foregoing S117-S118.
  • AMF2 may also send the UE's subscription type indication information and / or the UE's service management policy (such as QoS control, or local resource access rights, etc.) to the W-5G AN device or 5G RG or UE.
  • the access indication information, or the UE's subscription type indication information, and / or the UE's service management policy are sent from the AMF2 to the W-5GAN through an N2 interface message, or via a NAS (Non-Access-Stratum) message Sent by AMF2 to 5G-RG or UE.
  • NAS Non-Access-Stratum
  • the W-5G AN device may send the 5G RG or UE access indication information, UE Indication information of a subscription type and / or indication information of a service management policy of the UE.
  • the access indication information, or the UE's subscription type indication information, and / or the UE's service management policy are sent by the W-5GAN to the 5G-RG or the UE through an access-side message.
  • the above access side message is a PPPoE message or an EAP (Extensible Authentication Protocol) message or other fixed network access side messages.
  • the 5G RG may send the UE the access indication information and the UE's subscription type indication information. And / or indication information of a service management policy of the UE.
  • the access indication information, or the UE's subscription type indication information, and / or the UE's service management policy are sent by the 5G-RG to the UE through an air interface side message.
  • the above air interface side message is a PC5 interface message, an EAP message, a WLAN interface message, or a Bluetooth interface message.
  • the 5G RG contract data stored on UDM1 is updated.
  • the access type of 5G RG has changed from an open type to a private type, or the list of contracted users is updated.
  • UDM1 sends a subscription data update message to AMF1, and the subscription data update message may carry the updated subscription data of 5G RG.
  • AMF1 receives the subscription data update message sent by UDM1, and determines the subscription type of the UE and whether the UE is allowed to access 5G RG based on the updated subscription data of 5G RG. Then, AMF1 may send an access update message to AMF2 according to the identification information of AMF2.
  • the access update message reference may be specifically made to the access update message mentioned in the first embodiment, and details are not described herein again.
  • the AMF2 sends a notification message to the UE.
  • the notification message may be used to notify the AMF2 of the changed subscription type of the UE.
  • the notification message may carry a reselection instruction, which is used to notify the UE to reselect the 5G RG for access.
  • the UE may release the connection with the source 5G RG and select another 5G RG to access the 5GC.
  • the AMF can distinguish different access models of the UE based on the subscription data of the 5G RG to facilitate subsequent different service control, such as different QoS control.
  • the network side can prioritize access for contracted users and restrict access for non-subscribed users.
  • 5GC can support more access methods, and improve the convergence of fixed and mobile networks.
  • AMF2 may also obtain the 5G RG temporary identification information in the manner described in the second embodiment.
  • this application also provides another network access method.
  • whether the UE can access the 5GC using the current access point and the subscription type of the UE can be determined based on the subscription data of the UE.
  • the method may include:
  • Phase 1 The UE initiates an access request. This can include:
  • the UE establishes a connection with the 5G RG, such as establishing a connection through a WLAN interface.
  • 5G RG or W-5G AN equipment accessed by 5G RG can assign an IP address to the UE.
  • 5G RG could be registered to 5GC, and the core network element that 5G RG registered was AMF1.
  • AMF1 the core network element that 5G RG registered was AMF1.
  • 5G RG registration to 5GC please refer to the registration process defined by the 3gpp standard protocol, which is not described here.
  • S403-S405 the UE establishes a connection with the W-5G AN device.
  • S103-S105 the UE establishes a connection with the W-5G AN device.
  • the UE may send a request message to the W-5G AN device based on the connection established between the UE and the W-5G AN device.
  • the request message may include identification information of the UE for requesting access to a core network (5GC).
  • the request message may be a NAS message.
  • the W-5G AN device can forward the NAS message to AMF2. For details, refer to S409.
  • the second stage the network obtains the identification information and subscription data of the UE's current access point. This can include:
  • the 5G RG sends identification information of the current access point of the UE to the W-5G AN device.
  • the current access point of the UE is the 5G RG to which the UE is currently connected.
  • the identification information of the UE's current access point can be used to index the subscription data to the UE at the core network side.
  • the access point identifier may include a service set identifier (SSID), a uniform extended service set identifier (HESSID), and the like.
  • SSID service set identifier
  • HESSID uniform extended service set identifier
  • 5G RG sends a PPPoE message, or other control plane message, which can carry the identification information of the UE's current access point.
  • the message may also carry the IP address of the UE.
  • the request message sent by the UE to the W-5G AN device in S406 may also carry identification information of the current access point of the UE, and the identification information of the current access point may be obtained by the UE.
  • the UE can obtain the identification information of the current access point through an ANQP query.
  • the UE may receive an ANQP message or an EAP message sent by the 5G RG, and these messages contain identification information of the current access point.
  • the W-5G AN device may select AMF2 for the UE. Specifically, the W-5G AN device may select AMF2 based on slice selection information or UE identification information.
  • the W-5G AN device may send a request message to the AMF2.
  • the request message may include identification information of the UE and identification information of the current access point of the UE, and is used by the UE to request access to the core network.
  • the request message may be an N2 message, and N2 is a reference point between the W-5G AN device and the AMF.
  • the W-5G AN device can carry the NAS message (refer to S406) sent by the UE in the N2 message, so that the W-5G AN device can forward the NAS message to AMF2 for the UE to request access from AMF2 Core Network.
  • AMF2 sends a request message to UDM2, and the request message may include identification information of the UE and identification information of the current access point of the UE.
  • the core network determines the access model of the UE based on the subscription data of the UE. This can include:
  • UDM2 receives the request message sent by AMF2.
  • UDM2 may obtain the subscription data of the UE based on the identification information of the current access point included in the request message.
  • UDM2 can determine the subscription type of the UE from the subscription data of the UE.
  • UDM2 can also determine whether the UE is allowed to access the current access point based on the subscription data of the UE.
  • the subscription data of the UE may be used to indicate which access points the UE is a subscription user of.
  • the subscription data of the UE may include the following information:
  • List of contracted access points contains identification information of at least one access point, indicating that the UE is a contracted user of the at least one access point. If the identification information of the current access point of the UE belongs to the identification information of the at least one access point, it indicates that the UE is a contracted user of the current access point. It should be understood that if the UE is a contracted user of the current access point, the UE is allowed to access the current access point.
  • Non-subscribed access point list contains identification information of at least one access point, indicating that the UE is a non-subscribed user of the at least one access point. If the identification information of the current access point of the UE belongs to the identification information of the at least one access point, it indicates that the UE is a non-subscribed user of the current access point.
  • the access point list (a list of contracted access points or a list of non-subscribed access points) contains an identification of an access point to which the UE can access.
  • the white list only records identification information of an access point to which the UE can access.
  • UDM2 may complete the UE's authentication and authentication process based on the authentication vector in the UE's subscription data. Regarding the authentication and authentication process, you can specifically refer to the relevant protocols in the 3gpp standard, which will not be repeated here.
  • UDM2 may send a response message to AMF2.
  • the response message includes indication information that may include a subscription type of the UE.
  • AMF2 can receive the response message sent by UDM2 and determine the UE's service management policy (such as QoS control) according to the subscription type of the UE. In this way, the network side can distinguish different access models of the UE, so as to facilitate subsequent different service control.
  • UDM2 may also determine that the UE is allowed to access 5G RG.
  • the response message may further include access instruction information, which indicates whether the UE is allowed to access the current access point.
  • the access indication information is an access refusal indication; when the UE is allowed to access, the access indication information is an access permission indication.
  • UDM2 may store the subscription type of the UE in the context of the UE.
  • UDM2 may also send the above-mentioned contracted access point list and / or the above-mentioned non-subscribed access point list to AMF2, and AMF2 determines the UE's subscription type and whether the UE is allowed to access the current Access Point.
  • AMF2 determines the UE's subscription type and whether the UE is allowed to access the current Access Point.
  • the implementation manner of the AMF2 determining the UE's subscription type and whether the UE is allowed to access the current access point may be the same as that adopted by the UDM2, and details are not described herein again.
  • AMF2 completes the UE's access process based on the existing registration process or mobile registration update process or periodic registration update process, such as allowing access process or rejecting access process.
  • the existing registration process the mobile registration update process, or the periodic registration update process, please refer to the relevant protocol in the 3gpp standard for details, which will not be repeated here.
  • the AMF2 may send the UE's subscription type indication information and / or the UE's service management policy (such as QoS control) to the W-5G AN device or the 5G RG.
  • the AMF2 may also send an access instruction to the W-5G AN device or the 5G RG, and the access instruction is used to indicate whether the UE is allowed to access the current access point.
  • the fourth stage the subscription data of the UE is updated. This can include:
  • the subscription data of the UE stored on the UDM2 is updated. For example, the list of contracted access points and / or the list of non-subscribed access points is updated.
  • UDM2 may re-determine the subscription type of the UE based on the updated subscription data of the UE, and re-determine whether the UE is allowed to access the current access point.
  • UDM2 may also send the subscription data of the updated UE to AMF2, and AMF2 re-determines the subscription type of the UE and whether the UE is allowed to access the current access point based on the updated subscription data of the UE.
  • the UDM2 may send an access update message to the AMF2 according to the identification information of the AMF2.
  • the access update message is implemented as follows:
  • the access update message may include the UE's updated subscription type indication information to notify the AMF2 Adjust the access model of the UE and the service management strategy of the UE.
  • the access update message may include an access rejection indication.
  • the AMF2 sends a notification message to the UE.
  • the notification message may be used to notify the UE of the changed subscription type.
  • the notification message may carry a reselection instruction, which is used to notify the UE to reselect the access point for access.
  • the UE may release the connection with the current access point and select another access point to access the 5GC.
  • the core network can distinguish different access models of the UE based on the subscription data of the UE to facilitate subsequent different service control, such as different QoS control.
  • the network side can prioritize access for contracted users and restrict access for non-subscribed users. In this way, 5GC can support more access methods, and improve the convergence of fixed and mobile networks.
  • the network side can also obtain 5G RG identification information in the following ways:
  • the UE sends a NAS message to the core network, and the NAS message contains 5G -RG identification information.
  • the 5G-RG identification information may be sent by the 5G-RG to the UE, or may be sent by the 5G-RG to the UE via a W-5G AN device.
  • the above 5G RG identification information (that is, 5G RG ID) includes, for example, 5G RG 5G-GUTI, or 5G RG SUCI (encrypted identification contracted by Subscription Identifier), or 5G-RG N2 interface identification.
  • the specific process of obtaining 5G RG identification information on the network side may include:
  • the UE establishes a layer 2 (L2) connection with the 5G-RG.
  • L2 layer 2
  • the 5G-RG sends an EAP request or an Identity request to the UE.
  • the optional EAP request or Identity request can contain 5G RG identification information, such as 5G-RG ID.
  • the UE After receiving the EAP request message or the Identity request message sent by the 5G-RG, the UE returns an EAP response message / Identity message to the 5G-RG.
  • the 5G-RG sends an authentication, authorization, and accounting (AAA) message, such as an authentication request message, to the W-5G AN.
  • AAA authentication, authorization, and accounting
  • the AAA message may carry the EAP message to the W-5GAN.
  • the AAA message may also carry a 5G-RG ID.
  • the W-5G AN sends an EAP Request / 5G-Start message.
  • the EAP Request / 5G-Start message may contain a 5G-RG ID.
  • the 5G-RG ID may be received in S504, such as 5G RG 5G-GUTI, or 5G RG SUCI (Encrypted Identity Signed by Subscription Identifier).
  • the 5G-RG ID may also be another 5G-RG ID, such as a 5G-RG N2 interface ID.
  • 5G-RG forwards the EAP Request / 5G-Start message to the UE.
  • the 5G-RG can parse the EAP Request / 5G-Start message. If the 5G-RG ID is not included in the EAP Request / 5G-Start message, the 5G-RG can request the 5G-Start message in the EAP Add 5G-RG ID.
  • the UE receives the EAP-Req / 5G-Sart message, obtains the 5G-RG ID from the message, and sends a NAS message.
  • the NAS message carries the 5G-RG ID.
  • the above 5G-RG ID is used by the AMF to find 5G RG context information, thereby obtaining a 5G RG permanent identity (that is, 5G RG SUPI).
  • the NAS message may also carry a Host UE indication.
  • the Host UE instructs the UE to request to access the core network as a host UE (that is, as a subscribed user).
  • the core network can trigger the determination process of the UE access model based on the Host UE indication.
  • the 5G-RG ID may be used as the host UE indication, that is, the 5G-RG ID may indicate that the UE requests access to the core network as the host UE.
  • the AMF determines that the UE requests to access the core network as the host UE based on the Host UE indication or based on the 5G-RG ID information contained in the NAS message.
  • the network side determines whether the UE is a host UE based on the solution of the foregoing embodiment. If the UE requests access as a host, but the UE is not a host UE, the AMF rejects the UE's access request.
  • 5G-RG ID can also be used to indicate that the UE accesses the core network through 5G RG.
  • the AMF determines that the UE accesses the core network through the 5G RG based on the 5G-RG ID information contained in the NAS message.
  • the AMF determines the device type of the UE, that is, determines whether the UE is a contracted user equipment or a non-subscribed user equipment.
  • AMF finds 5G RG context based on 5G RG ID. If the context information of the 5G RG is not stored on the AMF, the AMF selects another AMF (target AMF) that stores the 5G RG context based on the 5G RG ID. Specifically, the AMF sends a request message to the target AMF, and the above request message includes a 5G RG ID and a permanent identification request indication (such as SUPI requested). The target AMF looks for the 5G RG context based on the 5G RG ID and responds with a 5G RG permanent identity to the AMF.
  • target AMF looks for the 5G RG context based on the 5G RG ID and responds with a 5G RG permanent identity to the AMF.
  • the process performed by the AMF may also be performed by the SMF, that is, the AMF in the foregoing first to third embodiments may be replaced with the SMF.
  • the AMF may also notify the SMF of the Host UE indication.
  • the AMF2 may send the Host UE or Guest UE indication to the PCF or SMF, and the PCF may issue a QoS policy based on the Host UE or Guest UE indication.
  • AMF2 sends the Host UE or Guest UE indication to the SMF
  • the SMF reports the Host UE or Guest UE indication to the PCF
  • the PCF issues different QoS policies based on the Host / Guest UE indication. For example, for the host UE, the PCF assigns high priority parameters in the QoS policy, such as setting the QoS parameters to not allow resources to be preempted, or to preempt other user resources.
  • the PCF assigns low priority parameters in the QoS policy, such as setting the QoS parameter to allow resources to be preempted, or not preempt other user resources.
  • AMF2 can find the UDM that stores the 5G RG contract data based on the SUCI. And send a request message to UDM.
  • the above message contains 5G RG SUCI and UE identity.
  • UDM searches for 5G RG contract data based on 5G RG and SUCI, and judges the device type of the UE based on the above contract data, as in the previous embodiment.
  • the UDM sends a reply message to the AMF2.
  • the UDM also contains the AMF1 identifier attached to the 5G RG, which is the AMF1 identifier of the 5G RG service.
  • AMF2 stores 5G RG ID and AMF1 identification.
  • the terminal device Before the network side performs the determination process of the UE access model, the terminal device (UE or 5G RG) also needs to register with the network and obtain the access network side parameters related to the PDU session.
  • the following uses 5G RG as an example to describe related technical solutions (the UE involves the same process, and will not be described in detail). As shown in Figure 12, it specifically includes:
  • 5G-RG is registered to AMF1.
  • AMF1 provides services for 5G-RG.
  • the W-5G AN After the W-5G AN learns that the 5G-RG authentication is successful (for example, the W-5GAN obtains an authentication success indication from the N2 interface, which can be a security key Key), the W-5GAN can allocate a NAS corresponding to the 5G-RG. IP address information. W-5GAN can also assign user plane addresses corresponding to 5G RG, such as user plane IP addresses. Then, the W-5G AN can send a message (such as an EAP message) to the 5G-RG pair, and the message can carry the NAS IP address information corresponding to the 5G-RG. Optionally, the message may further include user plane address information corresponding to 5G RG.
  • a message such as an EAP message
  • the IP address information of the NAS corresponding to the 5G-RG is used to carry subsequent NAS messages sent by the 5G-RG.
  • the user plane address information corresponding to 5G-RG is used to carry subsequent user plane data packets sent by 5G-RG.
  • 5G-RG encapsulates a user plane data packet, an IP header is added, and the destination address in the newly added IP header is set to the user plane IP address corresponding to the 5G-RG.
  • the W-5GAN can allocate a UE IP address for 5G RG.
  • This message (such as an EAP message) can also carry an IP address assigned to the UE for 5G RG.
  • the 5G-RG sends a request message to the W-5G AN.
  • the request message may be a DHCP discover message or a DHCP request message, etc., and is used to request the W-5G AN to allocate a UE IP address to the 5G-RG.
  • the request message may carry UE identification information, such as a UE's Network Access Identity (NAI), or a UE MAC address, or a UE IP address (can be obtained from S602).
  • NAI Network Access Identity
  • the request message may carry a NAS IP address corresponding to 5G-RG and / or a user plane IP address corresponding to 5G-RG.
  • the request message may also carry at least one of a NAS indication or a user plane indication.
  • the NAS indication is used to indicate that the address carried in the message is a NAS IP address
  • the user plane is used to indicate that the address carried in the message is User plane IP address.
  • the W-5GAN allocates a UE IP address to the 5G RG based on the identification information of the 5G RG.
  • the W-5GAN can obtain the 5G RG identification information from the DHCP message header sent in S603, and find the UE context based on the 5G RG identification information.
  • the UE context contains the 5G RG authentication success information.
  • W-5GAN assigns UE IP addresses to 5G RGs with successful authentication. If the UE IP address has been assigned to 5G RG in S602, W-5GAN can assign the same or different UE IP address in the current step.
  • the W-5GAN sends a response message (EAP message or DHCP ACK message) to the 5G RG, and the response message carries the UE IP address allocated by the W-5GAN to the 5G RG.
  • EAP message or DHCP ACK message a response message
  • the 5G-RG initiates a NAS message, such as a PDU session establishment request message.
  • a NAS message such as a PDU session establishment request message.
  • the UE-5 IP address allocated by W-5GAN for 5G RG is used as the source address for encapsulating the NAS message
  • the NAS IP address allocated by W-5GAN corresponding to 5G RG is used as the destination address for encapsulating the NAS message.
  • W-5GAN can identify the NAS message carried by the IP data packet according to the NAS IP address in the IP header, and forward the NAS message to the AMF through the N2 interface. Then, the AMF can process the NAS message and complete the 5G-RG PDU session establishment process based on the existing process. In this process, the AMF sends the PDU session identification information (such as the PDU session ID) to the W-5GAN through the N2 interface, so that the W-5GAN can obtain the PDU session ID of the PDU session.
  • PDU session identification information such as the PDU session ID
  • the 5G-RG After the 5G-RG receives a PDU session establishment acceptance message (PDU session establishment acceptance), the 5G-RG initiates a request message to the W-5GAN.
  • the request message may be a DHCP request message (DHCP request) or a DHCP information message (DHCP information).
  • the request message may carry identification information of the PDU session (such as a PDU session ID). This request message is used to request the W-5GAN to allocate the W-5GAN IP address corresponding to the PDU session.
  • the W-5GAN may allocate a W-5GAN IP address corresponding to the PDU session based on the PDU session ID in the request message, and store the W-5GAN IP address and the PDU session. ID correspondence.
  • the W-5GAN IP address corresponding to the PDU session is the address information of the W-5GAN corresponding PDU session.
  • the W-5GAN IP address corresponding to the PDU session can be used as the identification information of the PDU session, and can be used by the user plane to establish the correspondence between the session resources allocated by the W-5GAN for the PDU session and the PDU session.
  • the W-5GAN sends a response message (such as a DHCP ACK message) to the 5G-RG.
  • the response message may carry the address information of the W-5GAN corresponding PDU session.
  • the response message may also carry a PDU session ID corresponding to the W-5GAN IP address.
  • the address information of the W-5GAN corresponding PDU session is used as the target IP address of the 5G-RG sending the user plane data packet of the PDU session.
  • 5G RG sends user plane data packets.
  • the specific implementation is described in detail in the subsequent content.
  • the destination address required by the terminal device (5G RG or UE) to send user plane data packets can include two implementation forms: 1. The user plane address information of the corresponding terminal device (obtained through S602); 2. W-5GAN corresponds to the address information of the PDU session (obtained through S607-S608). Among them, the address information of the W-5GAN corresponding to the PDU session is a more granular address, which can directly indicate to which PDU session the user plane data packet is sent.
  • Method 1 A Generic Routing Encapsulation (GRE) header is encapsulated outside the user plane data packet, and an IP header is encapsulated outside the GRE header.
  • the GRE header can carry identification information (QoS flow ID, QFI) / reflective QoS indication (RQI) of the QoS flow.
  • QFI identification information
  • RQI reflective QoS indication
  • the source address in the IP header is the UE IP address
  • the destination address in the IP header is the address information of the PDU session corresponding to W-5GAN.
  • W-5GAN After W-5GAN receives the user plane data packet of the PDU session sent by 5G RG, W-5GAN can identify the PDU session based on the address information of the W-5GAN corresponding PDU session, and after removing the GRE header and IP header, use The tunnel corresponding to the identified PDU session sends user plane data packets of the PDU session.
  • the address information of the W-5GAN corresponding PDU session mentioned in the first method is obtained through S607-S608.
  • Method 2 The user plane data packet is encapsulated with a GRE header, and the GRE header is encapsulated with an IP header.
  • the GRE header may carry identification information (QoS flow ID, QFI) / (reflective QoS indication, RQI) of the QoS flow.
  • the GRE header carries the PDU session ID.
  • the source address in the IP header is the UE IP address, and the destination address in the IP header is the user plane address information.
  • W-5GAN After W-5GAN receives the user plane data packet sent by 5G RG, W-5GAN can identify the PDU session based on the PDU session ID, and after removing the GRE header and IP header, use the tunnel corresponding to the PDU session ID to send the PDU User plane packets for the session.
  • the user plane address information mentioned in the second method is obtained through S602.
  • the core network After the network side executes the UE access model determination process, the core network also needs to issue service management policies for the UE, such as QoS policies or local resource control policies, etc., which will detail how the network side is implemented based on Host UE / Guest UE. Different QoS control and local service control. The related technical solution is described below with reference to FIG. 13.
  • AMF2 may send a first message to the PCF, such as a policy association establishment / modification message.
  • the first message may include indication information of a device classification of the UE. It is not limited to Host UE / Guest UE instruction information, the device classification instruction information may also include device type indication information, and this application does not limit the manner in which the device classification is based.
  • the first message may be used to request the PCF to deliver a service management policy for the UE.
  • the service management policy may include at least one of a QoS policy and a local resource control policy.
  • the AMF2 may also send the indication information of the device classification of the UE to the SMF, and the SMF sends the first message carrying the indication information of the device classification to the PCF.
  • the PCF sends a second message to the AMF2 or the SMF, and the second message may include a service management policy for the UE determined by the PCF based on the device classification of the UE. That is to say, after receiving the first message sent by the AMF or SMF, the PCF can send a second message to the SMF or AMF.
  • AMF2 completes the registration of the UE.
  • W-5GAN assigns NAS IP address and optional user plane IP address.
  • S602 in the embodiment of FIG. 12.
  • the AMF2 sends the device classification indication information of the UE (such as Host UE / Guest UE indication information) and UE identification information to the AMF1.
  • the identification information of the UE may be at least one of a UE MAC address, a UE 5G GUTI, or a UE SUPI, or other identification information.
  • AMF2 may send the identification information of the UE to AMF1.
  • AMF1 can determine the classification of the UE, such as whether the UE is a Host UE or a Guest UE.
  • AMF1 can issue a service management policy for the UE, such as QoS, to the 5G-RG based on the UE's device classification instruction information (such as Host UE / Guest UE instruction information). Policies or local resource control policies.
  • AMF1 may issue a service management policy for the UE by sending a UE configuration update message (UE configuration update) or a NAS notification message.
  • the UE configuration update message or the NAS notification message may carry identification information of the UE and indication information of the device classification of the UE.
  • the local resource control policy may include a local device list, such as a local device MAC address list or a local device IP address list.
  • the local device can only allow Host UE access.
  • the local device can be a device such as a local printer.
  • the 5G-RG may correspondingly store identification information of the UE and indication information of the device classification of the UE (such as Host / Guest UE indication information).
  • the 5G-RG may also store the identification information of the UE and the service policy issued by the network side.
  • 5G-RG may control UE access according to a local resource control policy.
  • the specific process may include: 5G-RG may receive identification information of the UE sent by the AMF and indication information of the device classification of the UE, and then obtain The local resource access policy, and finally, the UE is controlled to access the local resource according to the UE classification information and the local resource access policy.
  • the 5G-RG may receive the local resource access policy of the 5G RG sent by the AMF or the SMF.
  • the 5G-RG may configure a local resource control policy.
  • the local resource control policy may include a local device MAC address list, or a local device IP address list, etc., where the local device may only allow Host UE access.
  • the local device can be a device such as a local printer.
  • the UE initiates a local service, that is, the UE initiates a request to 5G-RG, and the request carries identification information.
  • 5G-RG can identify the UE based on the identification information, and determine the classification of the UE (such as whether the UE is a host or not) based on the stored identification information of the UE and indication information of the device classification of the UE (such as Host / UE). ).
  • the 5G-RG can also reply the MAC address or IP address of the local device to the UE.
  • S710 The UE initiates a PDU session to the core network, and allocates a corresponding PDU session ID. After the PDU session is successfully established, the UE may send a request message to the W-5GAN to request the W-5GAN IP address corresponding to the PDU session allocated by the W-5GAN. For details, refer to S607-S609 in the embodiment of FIG. To repeat.
  • FIG. 6 illustrates a terminal 200 provided by some embodiments of the present application.
  • the terminal 200 may include: an input / output module (including an audio input / output module 218, a key input module 216, a display 220, etc.), a user interface 202, one or more terminal processors 204, a transmitter 208, and a receiver.
  • FIG. 6 uses the connection through a bus as an example. among them:
  • the communication interface 201 may be used for the terminal 200 to communicate with other communication devices, such as a base station.
  • the base station may be the network device 400 shown in FIG. 6.
  • the communication interface 201 refers to an interface between the terminal processor 204 and a transceiving system (consisting of a transmitter 208 and a receiver 210), such as the X1 interface in LTE.
  • the communication interface 201 may include: a Global System for Mobile Communication (GSM) (2G) communication interface, a Wideband Code Division Multiple Access (WCDMA) (3G) communication interface, and One or more of Long Term Evolution (LTE) (4G) communication interfaces, etc., may also be communication interfaces of 4.5G, 5G or future new air interfaces.
  • the terminal 200 may also be configured with a wired communication interface 201, such as a Local Access Network (Local Access Network, LAN) interface.
  • a wired communication interface 201 such as a Local Access Network (Local Access Network, LAN) interface.
  • the antenna 214 may be used to convert electromagnetic energy in a transmission line into electromagnetic waves in free space, or convert electromagnetic waves in a free space into electromagnetic energy in a transmission line.
  • the coupler 212 is configured to divide the mobile communication signal received by the antenna 214 into multiple channels and distribute the signals to multiple receivers 210.
  • the transmitter 208 may be configured to perform transmission processing on a signal output by the terminal processor 204, such as modulating the signal in a licensed frequency band or modulating a signal in an unlicensed frequency band.
  • the receiver 210 may be configured to perform receiving processing on a mobile communication signal received by the antenna 214. For example, the receiver 210 may demodulate a received signal that has been modulated on an unlicensed frequency band, and may also demodulate a received signal that is modulated on a licensed frequency band.
  • the transmitter 208 and the receiver 210 may be considered as a wireless modem.
  • the number of the transmitters 208 and the receivers 210 may be one or more.
  • the terminal 200 may further include other communication components, such as a GPS module, a Bluetooth module, a Wireless Fidelity (Wi-Fi) module, and the like.
  • the terminal 200 is not limited to the wireless communication signals described above, and the terminal 200 may also support other wireless communication signals, such as satellite signals, short-wave signals, and the like.
  • the terminal 200 may also be configured with a wired network interface (such as a LAN interface) to support wired communication.
  • the input / output module may be used to implement interaction between the terminal 200 and a user / external environment, and may mainly include an audio input / output module 218, a key input module 216, a display 220, and the like. In specific implementation, the input / output module may further include a camera, a touch screen, a sensor, and the like. The input and output modules communicate with the terminal processor 204 through the user interface 202.
  • the memory 206 is coupled to the terminal processor 204 and is configured to store various software programs and / or multiple sets of instructions.
  • the memory 206 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more disk storage devices, flash memory devices, or other non-volatile solid-state storage devices.
  • the memory 206 may store an operating system (hereinafter referred to as a system), such as an embedded operating system such as ANDROID, IOS, WINDOWS, or LINUX.
  • the memory 206 may also store a network communication program, which may be used to communicate with one or more additional devices, one or more terminal devices, and one or more network devices.
  • the memory 206 can also store a user interface program.
  • the user interface program can realistically display the content image of the application program through a graphical operation interface, and receive user control operations on the application program through input controls such as menus, dialog boxes, and buttons. .
  • the memory 206 may be configured to store a program for implementing a signal transmission method provided by one or more embodiments of the present application on the terminal 200 side.
  • a signal transmission method provided by one or more embodiments of this application, please refer to the subsequent embodiments.
  • the terminal processor 204 may be used to read and execute computer-readable instructions. Specifically, the terminal processor 204 may be used to call a program stored in the memory 206, such as an implementation program of the signal transmission method provided by one or more embodiments of the present application on the terminal 200 side, and execute instructions included in the program.
  • the terminal 200 may be the terminal 103 in the wireless communication system 100 shown in FIG. 2 and may be implemented as a mobile device, a mobile station, a mobile unit, a wireless unit, a remote unit, and a user agent. , Mobile clients, and more.
  • the terminal 200 shown in FIG. 6 is only an implementation manner of the present application. In actual applications, the terminal 200 may further include more or fewer components, which is not limited herein.
  • FIG. 7 illustrates a home gateway 300 provided by some embodiments of the present application.
  • the home gateway 300 may include one or more processors 301, a memory 302, a wired home network interface 303, a wireless home network 305, and an Ethernet module 306. These components may be connected through the bus 304 or in other manners, and FIG. 7 takes the connection through the bus as an example. among them:
  • the Ethernet module 306 realizes a physical connection between the home gateway and an external network, and a user can remotely access and control the home internal network through the Internet.
  • the connection between the home gateway and the Internet can be realized by wired or mobile wireless communication.
  • Both the wireless home network interface 303 and the wired home network interface 305 belong to the networking mode of the home internal network. Among them, the twisted pair, telephone line, and power line are the most typical wired methods.
  • the wireless method is represented by IrDA, Bluetooth, IEEE802.11, Zigbee, UWB, etc. Wireless connectivity is the ideal way to implement a home network, avoiding rewiring inside the home.
  • the memory 302 is coupled to the processor 301 and is configured to store various software programs and / or multiple sets of instructions.
  • the memory 302 may include FLASH and SDRAM chips, and the FLASH chip may be used to store an embedded operating system in a home gateway, a Common Gateway Interface (CGI) gateway application, a home network server, and support for various services required File system.
  • the memory 302 may store an operating system, such as an embedded operating system such as uCOS, VxWorks, and RTLinux.
  • the memory 302 may also store a network communication program, which can be used to communicate with one or more additional devices, one or more terminal devices, and one or more network devices.
  • the memory 302 may be used to store the network access method provided by one or more embodiments of the present application, and the technical solution provided by the embodiment of FIG. 11-13 of the present application on the home gateway 300 side.
  • Implementation procedures Regarding the network access method provided by one or more embodiments of the present application, and the implementation of the technical solution provided by the embodiments of FIG. 11-13 of the present application, please refer to the related embodiments.
  • the processor 301 may be used to read and execute computer-readable instructions. Specifically, the processor 301 may be used to call a program stored in the memory 302, for example, a network access method provided by one or more embodiments of the present application, and the technical solution provided by the embodiment of Figs.
  • the gateway 300 implements the program and executes the instructions contained in the program.
  • the home gateway 300 may be 5G RG in the communication system architecture shown in FIGS. 1A-1C.
  • the home gateway 300 shown in FIG. 7 is only an implementation manner of the embodiment of the present application. In practical applications, the home gateway 300 may further include more or fewer components, which is not limited herein.
  • FIG. 8 illustrates an access network device 400 provided by some embodiments of the present application.
  • the access network device 400 may include one or more processors 401, a memory 403, and a communication interface 405. These components may be connected through the bus 404 or in other manners, and FIG. 8 takes the connection through the bus as an example. among them:
  • the communication interface 405 can be used for the access network device 400 to communicate with other communication devices, such as a home gateway and a core network device.
  • the home gateway may be the application server 300 shown in FIG. 7, and the core network device may be the core network device 500 shown in FIG. 9.
  • the communication interface 405 may include a wired communication interface, such as a wide area network (WAN) interface, a local area access network (LAN) interface, and the like.
  • WAN wide area network
  • LAN local area access network
  • the communication interface 405 may further include a wireless communication interface, such as a wireless local area network (WLAN) interface.
  • WLAN wireless local area network
  • the memory 403 is coupled to the processor 401 and is configured to store various software programs and / or multiple sets of instructions.
  • the memory 403 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more disk storage devices, flash memory devices, or other non-volatile solid-state storage devices.
  • the memory 403 may store an operating system (hereinafter referred to as a system), for example, embedded operating systems such as uCOS, VxWorks, and RTLinux.
  • the memory 403 may also store a network communication program, which may be used to communicate with one or more additional devices, one or more terminal devices, and one or more network devices.
  • the memory 403 may be configured to store the network access method provided by one or more embodiments of the present application, and the technical solution provided by the embodiment of FIG. 11-13 of the present application is stored in the access network device 400.
  • Implementation procedures Regarding the network access method provided by one or more embodiments of the present application, and the implementation of the technical solution provided by the embodiments of FIG. 11-13 of the present application, please refer to the related embodiments.
  • the processor 401 may be used to read and execute computer-readable instructions. Specifically, the processor 401 may be used to call a program stored in the memory 405, such as a network access method provided by one or more embodiments of the present application, and a technical solution provided by the embodiment of FIG. 11-13 of the present application An implementation program on the network access device 400 side, and executes the instructions contained in the program.
  • the access network device 400 may be a W-5G AN in the system architecture shown in FIGS. 1A-1C.
  • the access network device 400 shown in FIG. 8 is only an implementation manner of the embodiment of the present application. In practical applications, the access network device 400 may further include more or fewer components, which is not limited herein.
  • FIG. 9 illustrates a core network device 500 provided by some embodiments of the present application.
  • the core network device 500 may include: one or more processors 501, a memory 503, and a communication interface 505. These components may be connected through the bus 504 or in other manners, and FIG. 9 takes the connection through the bus as an example. among them:
  • the communication interface 505 may be used for the core network device 500 to communicate with other communication devices, such as an access network device.
  • the access network device may be the access network device 400 shown in FIG. 8.
  • the communication interface 505 may include a wired communication interface, such as a wide area network (WAN) interface, a local area access network (LAN) interface, and the like.
  • WAN wide area network
  • LAN local area access network
  • the communication interface 505 may further include a wireless communication interface, such as a wireless local area network (WLAN) interface, and the like.
  • WLAN wireless local area network
  • the memory 503 is coupled to the processor 501 and is configured to store various software programs and / or multiple sets of instructions.
  • the memory 503 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more disk storage devices, flash memory devices, or other non-volatile solid-state storage devices.
  • the memory 503 may store an operating system (hereinafter referred to as a system), such as an embedded operating system such as uCOS, VxWorks, and RTLinux.
  • the memory 503 may also store a network communication program, which may be used to communicate with one or more additional devices, one or more terminal devices, and one or more network devices.
  • the memory 503 may be used to store the network access method provided by one or more embodiments of the present application, and the technical solution provided by the embodiment of FIG. 11-13 of the present application is on the core network device 500 side.
  • Implementation procedures Regarding the network access method provided by one or more embodiments of the present application, and the implementation of the technical solution provided by the embodiments of FIG. 11-13 of the present application, please refer to the related embodiments.
  • the processor 501 may be used to read and execute computer-readable instructions. Specifically, the processor 501 may be used to call a program stored in the memory 505, for example, a network access method provided by one or more embodiments of the present application, and a technical solution provided by the embodiment of FIGS. 11-13 of the present application is at the core.
  • the network device 500 implements the program and executes the instructions contained in the program.
  • the core network device 500 may be a core network device in the system architecture shown in FIGS. 1A-1C and may be implemented as an AMF network element, a UDM network element, and the like.
  • the core network device 500 shown in FIG. 9 is only an implementation manner of the embodiment of the present application. In actual applications, the core network device 500 may further include more or fewer components, which is not limited herein.
  • FIG. 10 illustrates a communication system and a communication device provided by the present application.
  • the communication system 10 may include the following communication devices: a user equipment 60, a home gateway 70, an access network device 80, an access and mobility management network element 90, and a unified data management network element 100.
  • the communication system 10 and the communication device therein may be used to implement a network access method described in the embodiments corresponding to FIG. 2 to FIG. 4 respectively. Expand the description below.
  • each communication device can be used to implement a network access method described in the embodiments corresponding to FIG. 2 to FIG. 3, the specific implementation of each communication device can be as follows:
  • the user equipment 60 may include a processing unit 61 and a communication unit 63. among them:
  • the processing unit 61 may be configured to generate information to be sent by the user equipment 60 and analyze information received by the user equipment 60;
  • the communication unit 63 may be configured to obtain temporary identification information of the home gateway 70 connected to the user equipment 60;
  • the communication unit 63 may be further configured to send a request message to the access network device 80 to request access to the core network.
  • the request message may include: temporary identification information of the home gateway 70, and identification information of the user equipment 60.
  • the communication unit 63 may be configured to receive the temporary identification information of the home gateway 70 sent by the home gateway 70. Specifically, after establishing a connection with the home gateway 70, the communication unit 63 may obtain the temporary identification information of the home gateway 70 through an access network query protocol (ANQP). Specifically, the communication unit 63 may receive an ANQP message or an EAP message sent by the home gateway 70, and these messages include the temporary identity of the home gateway 70. Alternatively, the communication unit 63 may obtain the temporary identification information of the 5G-RG through an EAP message. Specifically, the 5G-RG carries a 5G-RG temporary identity in an EAP message sent to the UE. The EAP message may be an EAP-Request / Identity message or an EAP-request / 5G-start message.
  • ANQP access network query protocol
  • the communication unit 63 may receive an ANQP message or an EAP message sent by the home gateway 70, and these messages include the temporary identity of the home gateway 70.
  • the communication unit 63 may obtain
  • the home gateway 70 may include a processing unit 71 and a communication unit 73. among them:
  • the processing unit 71 may be configured to generate information to be sent by the home gateway 70 and analyze information received by the home gateway 70;
  • the communication unit 73 may be configured to send the temporary identification information of the home gateway 70 to the access network device 80.
  • the temporary identification information of the home gateway 70 may be used to index the context of the home gateway 70 on the core network side.
  • the temporary identification of the home gateway 70 may include a GUTI.
  • the communication unit 73 may send a PPPoE message or other control plane message, and the message may carry the temporary identification information of the home gateway 70.
  • the message may also carry the IP address of the UE.
  • the access network device 80 may include a processing unit 81 and a communication unit 83. among them:
  • the processing unit 81 may be configured to generate information to be sent by the access network device 80 and analyze information received by the access network device 80;
  • the communication unit 83 may be configured to obtain temporary identification information of the home gateway 70 connected to the user equipment 60;
  • the communication unit 83 may be further configured to send a message to the access and mobility management function network element 90, and the message includes: temporary identification information of the home gateway 70 and identification information of the user equipment 60.
  • the identification information of the user equipment 60 comes from the user equipment 60.
  • the communication unit 83 may be specifically configured to receive the temporary identification information sent by the user equipment 60, or receive the temporary identification information sent by the home gateway 70.
  • the processing unit 81 may be specifically configured to be based on the IP address of the user equipment 60 or the line identification or VLAN identification of the fixed network gateway connection or the connection of the user equipment 60.
  • the identification information of the entry point identifies the temporary identification information.
  • the access and mobility management network element 90 may include a processing unit 91 and a communication unit 93. among them:
  • the communication unit 93 may be configured to send a request message to the unified data management network element 100, where the request message includes identification information of the user equipment 60 and identification information of the home gateway 70 to which the user equipment 60 is connected;
  • the communication unit 93 may be further configured to receive indication information of the subscription type of the user equipment 60 sent by the unified data management network element 100;
  • the processing unit 91 may be configured to determine whether the user equipment 60 is allowed to access the home gateway 70 and / or the service management policy of the user equipment 60 according to the subscription type of the user equipment 60.
  • the processing unit 91 may be specifically configured to determine that the user equipment 60 is allowed to access the home gateway 70 if the subscription type of the user equipment 60 is a subscription user of the home gateway 70.
  • the processing unit 91 may be specifically configured to determine that the service management policy of the user equipment 60 is a service management policy corresponding to the non-subscribed user if the subscription type is a non-subscribed user; or, if the contract type is a subscription The user determines that the service management policy of the user equipment 60 is a service management policy corresponding to the contracted user.
  • the communication unit 93 may be further configured to receive the access instruction information sent by the unified data management network element 100, and / or the service management policy instruction information of the user equipment 60, and the access instruction information indicates the user equipment. Whether 60 is allowed to access the home gateway 70. In this way, the access and mobility management network element 90 can notify the UE whether it is accessible and what the subscription type is.
  • the communication unit 93 may be further configured to receive the subscription data of the home gateway 70 sent by the unified data management network element 100, and the processing unit 91 may be further configured to use the subscription data of the home gateway 70 and the identity of the user equipment 60.
  • the information determines whether the user equipment 60 is allowed to access the home gateway 70.
  • the manner in which the access and mobility management network element 90 determines the subscription type of the user equipment 60 and whether the user equipment 60 is allowed to access the home gateway 70 is the same as
  • the communication unit 93 may be further configured to send access instruction information to the access network device 80 or the home gateway 70, and / or instruction information of a service management policy of the user equipment 60, and the access instruction information indicates Whether the user equipment 60 is allowed to access the home gateway 70.
  • the identification information of the home gateway 70 carried in the request message sent by the communication unit 93 to the unified data management network element 100 is permanent identification information.
  • the communication unit 93 may be specifically configured to obtain temporary identification information of the home gateway 70, and obtain permanent identification information from the context of the home gateway 70 according to the temporary identification information.
  • the specific implementation of the communication unit 93 may include, but is not limited to: the communication unit 93 may be specifically configured to obtain the temporary identification information from the NAS signaling sent by the user equipment 60; or, the communication unit 93 may Specifically, it is used to obtain temporary identification information from the signaling sent by the access network device 80 accessed by the home gateway 70.
  • the temporary identification information included in the signaling sent by the access network device 80 is sent by the home gateway 70 to the access network device 80; or, the temporary identification information included in the signaling sent by the access network device 80 is to access the network.
  • the device 80 is identified based on the IP address of the user equipment 60 or the line identification or VLAN identification of the fixed network gateway connection, or the access point identification of the user equipment 60.
  • each functional unit of the access and mobility management network element 90 reference may be made to the method embodiments respectively corresponding to FIG. 2-3, and details are not described herein again.
  • the unified data management network element 100 may include a processing unit 101 and a communication unit 103. among them:
  • the communication unit 103 may be configured to receive a request message sent by the access and mobility management function network element 90, where the request message includes identification information of the user equipment 60 and identification information of the home gateway 70 to which the user equipment 60 is connected;
  • the processing unit 101 may be configured to determine subscription data of the home gateway 70 according to the identification information of the home gateway 70;
  • the processing unit 101 may be further configured to determine a subscription type of the user equipment 60 according to the subscription data of the home gateway 70 and the identification information of the user equipment 60;
  • the communication unit 103 may be further configured to send subscription type indication information to the access and mobility management function network element; the subscription type includes a subscriber or a non-subscriber of the home gateway 70.
  • the subscription data of the home gateway 70 may include identification information of the user equipment 60 of the subscriber of the home gateway 70.
  • the processing unit 101 may be specifically configured to determine that the user equipment 60 is a subscription user of the home gateway 70 if the identification information of the user equipment 60 belongs to the identification information of the user equipment 60 of the contracted user of the home gateway 70.
  • the subscription data of the home gateway 70 may include an access type of the home gateway 70, and the access type indicates whether the home gateway 70 allows non-subscribed users to access.
  • the processing unit 101 may also be used to determine whether the user equipment 60 is allowed to access the home gateway 70.
  • the details can be as follows:
  • the processing unit 101 may be specifically configured to determine that the user equipment 60 is allowed to access the home gateway 70 if the identification information of the user equipment 60 belongs to the identification information of the user equipment 60 of the contracted user of the home gateway 70.
  • the processing unit 101 may be specifically configured to determine that the user equipment 60 is allowed to access the home gateway 70 if the identification information of the user equipment 60 belongs to the identification information of the user equipment 60 of the contracted user of the home gateway 70.
  • the processing unit 101 may be specifically used if the identification information of the user equipment 60 does not belong to the identification information of the user equipment 60 of the subscribed user of the home gateway 70, but the access type of the home gateway 70 indicates that the home gateway 70 allows non-subscribed users to access, then It is determined that the user equipment 60 is allowed to access the home gateway 70.
  • the processing unit 101 may be specifically used if the identification information of the user equipment 60 does not belong to the identification information of the user equipment 60 of the contracted user of the home gateway 70, and the access type of the home gateway 70 indicates that the home gateway 70 does not allow non-subscribed users to access, It is determined that the user equipment 60 is not allowed to access the home gateway 70.
  • the communication unit 103 may be further configured to send access instruction information; the access instruction information indicates the user equipment 60 Whether access to the home gateway 70 is permitted.
  • the communication unit 103 may be further configured to send subscription data to an access and mobility management function network element.
  • the access and mobility management function network element can also determine the subscription type of the UE and whether the UE is allowed to access the home gateway 70 according to the subscription data of the home gateway 70.
  • the specific implementation of the user equipment 60, the home gateway 70, and the access network device 80 can refer to the foregoing content.
  • the subscription type of the UE and whether the UE is allowed to access the home gateway 70 are determined by the access and mobility management network element 90.
  • the specific implementation of the access and mobility management network element 90 may be as follows:
  • the access and mobility management network element 90 may include a processing unit 91 and a communication unit 93. among them:
  • the communication unit 93 may be configured to receive a request message sent by the access network device 80 (W-5G AN), and the request message includes identification information of the home gateway 70 and identification information of the user equipment 60;
  • the communication unit 93 may be further configured to obtain subscription data of the home gateway 70 according to the identification information of the home gateway 70;
  • the processing unit 91 may be configured to determine a subscription type of the user equipment 60 and / or a service management policy of the user equipment 60 according to the subscription data of the home gateway 70 and the identification information of the user equipment 60;
  • the communication unit 93 may be further configured to send the subscription type indication information and / or the service management policy indication information of the user equipment 60 to the access network device 80 or the home gateway 70; the subscription type includes a subscribed user or a non-subscribed user of the home gateway 70.
  • the communication unit 93 may be specifically configured to receive the subscription data of the home gateway 70 sent by the unified data management network element 100 according to the identification information of the home gateway 70.
  • the processing unit 91 in order to obtain subscription data of the home gateway 70, under the condition that the home gateway 70 includes the contract data of the home gateway 70 in the context of the home gateway 70, the processing unit 91 may be specifically configured to identify the home gateway 70 according to the identity of the home gateway 70. The information obtains the subscription data of the home gateway 70 from the context of the home gateway 70.
  • the subscription data of the home gateway 70 may include identification information of the user equipment 60 of the subscriber of the home gateway 70.
  • the processing unit 91 may be specifically configured to determine that the user equipment 60 is a subscription user of the home gateway 70 if the identification information of the user equipment 60 belongs to the identification information of the user equipment 60 of the subscription user of the home gateway 70 .
  • the subscription data further includes an access type of the home gateway 70, and the access type indicates whether the home gateway 70 allows non-subscribed users to access.
  • the processing unit 91 may be specifically configured to identify the user equipment 60 if the identification information of the user equipment 60 belongs to the user equipment 60 of the subscriber of the home gateway 70 Information, it is determined that the user equipment 60 is allowed to access the home gateway 70.
  • the processing unit 91 may be specifically configured to: Identification information, but if the access type of the home gateway 70 indicates that the home gateway 70 allows non-subscribed users to access, it is determined that the user equipment 60 is allowed to access the home gateway 70.
  • the processing unit 91 may be specifically configured to, if the identification information of the user equipment 60 does not belong to the user equipment 60 of the subscriber of the home gateway 70 Identification information, and the access type of the home gateway 70 indicates that the home gateway 70 does not allow non-subscribed users to access, it is determined that the user equipment 60 is not allowed to access the home gateway 70.
  • the communication unit 93 may be further configured to send access instruction information to the access network device 80 or the home gateway 70, and / or instruction information of a service management policy of the user equipment 60; the access instruction information indicates Whether the user equipment 60 is allowed to access the home gateway 70.
  • the identification information of the home gateway 70 carried in the request message sent by the access network device 80 is temporary identification information.
  • the communication unit 93 may also be configured to obtain temporary identification information of the home gateway 70, and determine subscription data from the context of the home gateway 70 according to the temporary identification information.
  • the communication unit 93 may be specifically used for the access and mobility management function network element to receive the temporary identification information sent by the user equipment 60; or, the access network device 80 receiving the access of the home gateway 70 The temporary identification information sent.
  • the temporary identification information sent by the access network device 80 may be sent by the home gateway 70 to the access network device 80, or may be the access network device 80 based on the IP address of the user device 60 or the line identifier connected to the fixed network gateway or The VLAN identification or the home gateway 70 access point identification is identified.
  • each communication device can be as follows:
  • the access network device 80 may include a processing unit 81 and a communication unit 83. among them:
  • the communication unit 83 may be configured to receive a request message, where the request message includes identification information of a packet data unit PDU session.
  • the communication unit 83 may be further configured to send a response message to the terminal device, where the response message includes address information of the access network device corresponding to the PDU session.
  • the address information of the access network device corresponding to the PDU session is used as a target address of a user plane data packet of the PDU session sent by the home gateway 70.
  • the processing unit 81 may be configured to store a correspondence between the identification information of the PDU session and the address information of the access network device.
  • the communication unit 83 may be further configured to receive the identification information of the home gateway 70.
  • the processing unit 81 may be configured to allocate an address to the home gateway 70 according to the identification information of the home gateway 70.
  • the communication unit 83 may be further configured to send the address of the home gateway 70 to the home gateway 70; the address of the home gateway 70 is used as the source address of the user plane data packet of the PDU session sent by the home gateway 70.
  • the communication unit 83 may be further configured to receive a user plane data packet of the PDU session sent by the home gateway 70.
  • the destination address included in the user plane data packet is a corresponding PDU of the access network device. Address information for the session.
  • the processing unit 81 may be further configured to identify the PDU session based on the address information of the access network device corresponding to the PDU session.
  • the processing unit 81 may be configured to allocate user plane address information of the home network 70 corresponding to the access network device.
  • the communication unit 83 may be further configured to send a message to the home gateway 70, where the message includes the user plane address information; the user plane address information is used for the purpose of a user plane data packet of a PDU session sent by the home gateway 70 address.
  • the communication unit 83 may be further configured to receive the identification information of the home gateway 70.
  • the processing unit 81 may be further configured to allocate an address to the home gateway 70 according to the identification information of the home gateway 70.
  • the communication unit 83 may be further configured to send the address of the home gateway 70 to the home gateway 70; the address of the home gateway 70 is used as the source address of the user plane data packet of the PDU session sent by the home gateway 70.
  • the communication unit 83 may be further configured to receive the user plane data packet sent by the home gateway 70.
  • the destination address in the user plane data packet is address information of the user plane of the access network device. ;
  • the user plane data packet further includes identification information of the PDU session.
  • the processing unit 81 may be further configured to identify the PDU session based on the identification information of the PDU session.
  • the communication unit 83 may be further configured to send the user plane data packet by using the identified tunnel corresponding to the PDU session.
  • the home gateway 70 may include a processing unit 71 and a communication unit 73. Among them (the user equipment 60 can be similarly implemented, and is not described in detail):
  • the communication unit 73 may be configured to send a request message to the access network device 80, where the request message includes identification information of a packet data unit PDU session.
  • the communication unit 73 may be further configured to receive a response message sent by the access network device 80, where the response message includes address information of the access network device corresponding to the PDU session.
  • the address information of the access network device corresponding to the PDU session is used as a target address of a user plane data packet of the PDU session sent by the home gateway 70.
  • the communication unit 73 may be further configured to send the identification information of the home gateway 70.
  • the communication unit 73 may be further configured to receive an address of the home gateway 70; the address of the home gateway 70 is used as a source address of a user plane data packet of the PDU session sent by the home gateway 70.
  • the communication unit 73 may be further configured to send a user plane data packet of the PDU session, and the destination address included in the user plane data packet is address information of the corresponding PDU session of the access network device.
  • the processing unit 71 may be further configured to identify the PDU session based on the address information of the access network device corresponding to the PDU session.
  • the communication unit 73 may be further configured to receive a message sent by the home gateway 70, where the message includes the user plane address information; the user plane address information is used as a PDU sent by the home gateway 70 The destination address of the user plane packet for the session.
  • the communication unit 73 may be further configured to send the identification information of the home gateway 70.
  • the communication unit 73 may be further configured to receive an address of the home gateway 70; the address of the home gateway 70 is used as a source address of a user plane data packet of a PDU session sent by the home gateway 70.
  • the communication unit 73 may be further configured to send the user plane data packet, and a destination address in the user plane data packet is address information of a user plane of the access network device; the user plane data packet The identification information of the PDU session is also included.
  • the communication system 10 may further include a policy control network element 200 (not shown) and a session management network element 300 (not shown)
  • a policy control network element 200 not shown
  • a session management network element 300 not shown
  • the policy control network element 200 may include a processing unit 201 and a communication unit 203. among them:
  • the communication unit 203 may be configured to receive a first message sent by the access and mobility management function network element or the session management network element 300, where the first message includes indication information of a device type of the user equipment;
  • the communication unit 203 may be further configured to send a second message to the session management network element 300, where the second message includes a service management policy of the user equipment determined by the policy control network element based on the device type indication information of the user equipment .
  • the service management policy includes a QoS policy and / or a local resource access policy of a home gateway.
  • the communication unit 203 may be further configured to send the local resource access policy to the access and mobility management function network element.
  • the session management network element 300 may include a processing unit 301 and a communication unit 303. among them:
  • the communication unit 303 may be further configured to receive identification information of the user equipment and indication information of a device type of the user equipment sent by the access and mobility management function network element, and obtain a local resource access policy of the home gateway.
  • the processing unit 301 may be configured to control the user equipment to access local resources according to the device type indication information of the user equipment and the local resource access policy.
  • the communication unit 303 may be specifically configured to receive a local resource access policy of the home gateway sent by the access and mobility management function network element or the session management network element.
  • the processing unit 301 may be configured to configure the local resource access policy.
  • the local resource access policy includes address information of a device connected to the home gateway.
  • the communication unit 303 may be further configured to receive a request message sent by the user equipment, where the request message includes identification information of the user equipment.
  • the processing unit 301 may be specifically configured to determine the device type of the user equipment according to the identification information of the user equipment and the device type indication information of the user equipment, and connect the device type of the user equipment to the local resource.
  • the access policy controls the user equipment to access local resources.
  • the 5GC can distinguish different access models of user equipment based on the subscription data of the home gateway to facilitate subsequent different service control, such as different QoS control. .
  • the network side can prioritize access for contracted users and restrict access for non-subscribed users. In this way, 5GC can support more access methods, and improve the convergence of fixed and mobile networks.
  • the communication system 10 and the communication device therein may also be used to implement another network access method described in the embodiment of FIG. 5.
  • the communication system 10 and the communication device therein can be used to implement the network access method described in the embodiment of FIG. 5, the specific implementation of each communication device can refer to the embodiment of FIG. 5, and details are not described herein again.
  • the communication system 10 shown in FIG. 10 may be implemented as the system architecture shown in FIGS. 1A-1C.
  • the home gateway 70 may be 5G RG in the system architecture shown in FIGS. 1A-1C
  • the user equipment 60 may be a UE connected to the 5G RG
  • the access network device 80 may be in the system architecture shown in FIGS. 1A-1C.
  • the access and mobility management network element 90 may be AMF
  • the unified data management network element 100 may be UDM.
  • the access and mobility management network element 90 may include an AMF serving a user equipment and an AMF serving a home gateway.
  • the two AMFs may be the same AMF or different AMFs.
  • the unified data management network element 100 may include a UDM registered by a user equipment and a UDM registered by a home gateway.
  • the two UDMs may be the same UDM or different UDMs.
  • 5GC can support more access methods and improve the convergence of fixed and mobile networks.
  • the processes may be completed by a computer program instructing related hardware.
  • the program may be stored in a computer-readable storage medium. It may include the processes of the method embodiments described above.
  • the foregoing storage media include: ROM or random storage memory RAM, magnetic disks, or optical discs, which can store various program code media.

Abstract

本申请实施例公开了一种网络接入方法，方法可包括：数据管理网元接收接入和移动性管理功能网元发送的请求消息，请求消息包括用户设备的标识信息和用户设备连接的家庭网关的标识信息；数据管理网元根据家庭网关的标识信息确定家庭网关的签约数据；数据管理网元根据家庭网关的签约数据和用户设备的标识信息确定用户设备的签约类型；数据管理网元向接入和移动性管理功能网元发送签约类型的指示信息；签约类型包括家庭网关的签约用户或非签约用户。该方案可实现UE通过家庭网关接入5GC，使得5GC支持更多接入方式，提升固网和移动网络的融合度。

Description

网络接入方法、相关装置及系统
本申请要求了2018年5月22日提交的、申请号为201810497274.4、发明名称为“网络接入方法、相关装置及系统”的中国申请的优先权，以及2018年6月26日提交的、申请号为201810672363.8、发明名称为“网络接入方法、相关装置及系统”的中国申请的优先权,其全部内容通过引用结合在本申请中。
技术领域
本申请涉及无线通信技术领域，尤其涉及网络接入方法、相关装置及系统。
背景技术
通用化的功能设计和前向兼容的“接入网络——核心网”接口使得通用化的5G核心网络(the 5th generation core，5GC)能够与不同的接入网络一起工作。除了支持无线接入网(radio access network，RAN)外，5GC还需支持固定网络/有线网络的接入，如5G家庭网关(5G residential gateway，5G RG)/客户终端设备(customer premise equipment，CPE)通过有线5G接入网络(wireline 5G access network，W-5GAN)接入5GC。
在家庭网关通过有线5G接入网络接入到5GC的场景下，5GC能力用户设备(5GC capable UE)可以通过5G家庭网关接入5GC。此时，5GC能力用户设备为远端设备，5G家庭网关为中继设备。为了实现远端设备通过中继设备接入5GC，目前亟待一种技术方案来支持这种接入方式。
发明内容
本申请实施例提供了网络接入方法、相关装置及系统，可实现用户设备(UE)通过家庭网关接入5GC，使得5GC支持更多接入方式，提升固网和移动网络的融合度。
第一方面，本申请提供了一种网络接入方法，应用于统一数据管理网元侧，该方法可包括：统一数据管理网元接收接入和移动性管理功能网元发送的请求消息，该请求消息包括用户设备的标识信息和用户设备连接的家庭网关的标识信息。统一数据管理网元根据家庭网关的标识信息确定家庭网关的签约数据，并根据家庭网关的签约数据和用户设备的标识信息确定用户设备的分类类型。然后，统一数据管理网元向接入和移动性管理功能网元发送签约类型的指示信息。其中，签约类型包括家庭网关的签约用户或非签约用户。
在第一方面的一些实施例中，用户设备的分类类型包括签约类型。签约类型包括家庭网关的签约用户或非签约用户。
结合第一方面，在一些可选的实施例中，所述家庭网关的签约数据可包括所述家庭网关的签约用户的用户设备的标识信息。此时，所述统一数据管理网元根据所述家庭网关的签约数据和所述用户设备的标识信息确定所述用户设备的签约类型，可具体包括：如果所述用户设备的标识信息属于所述家庭网关的签约用户的用户设备的标识信息，则 所述统一数据管理网元确定所述用户设备为所述家庭网关的签约用户。
结合第一方面，在一些可选的实施例中，所述签约数据还可包括所述家庭网关的接入类型的指示信息，所述接入类型指示所述家庭网关是否允许非签约用户接入。
结合第一方面，在一些可选的实施例中，所述统一数据管理网元可以通过下述几种方式确定用户设备是否被允许接入接入网设备：
可选的，如果所述用户设备的标识信息属于所述家庭网关的签约用户的用户设备的标识信息，则所述统一数据管理网元确定所述用户设备被允许接入所述家庭网关。因为，不论家庭网关是开放类型(允许非签约用户接入)还是私有类型(不允许非签约用户接入)，签约用户都能接入。
可选的，如果所述用户设备的标识信息不属于所述家庭网关的签约用户的用户设备的标识信息，但所述家庭网关的接入类型指示所述家庭网关允许非签约用户接入，则所述统一数据管理网元确定所述用户设备被允许接入所述家庭网关。
可选的，如果所述用户设备的标识信息不属于所述家庭网关的签约用户的用户设备的标识信息，且所述家庭网关的接入类型指示所述家庭网关不允许非签约用户接入，则所述统一数据管理网元确定所述用户设备不被允许接入所述家庭网关。
不限于签约用户列表和家庭网关的接入类型的指示信息，家庭网关的签约数据的内容还可以实现成其他形式，只要能够指示家庭网关的的签约用户有哪些，家庭网关的允许哪些用户接入即可。例如，该签约数据可包括一个映射表，该映射表中有多个UE的标识信息以及这多个UE的标识信息各自的对应的签约类型的指示信息，其中，这多个UE的标识信息可包括签约用户的UE的标识信息，还可包括非签约用户的UE的标识信息。这样，可以根据特定UE的标识信息从这个映射表中查找出该特定UE对应的签约类型。
结合第一方面，在一些可选的实施例中，第一方面描述的方法还可以包括：所述统一数据管理网元向所述接入和移动性管理功能网元发送接入指示信息。该接入指示信息可指示所述用户设备是否被允许接入所述家庭网关。
具体的，该接入指示信息可以为安全秘钥(key)，这样W-5GAN可以基于收到安全Key确定UE的鉴权认证成功，因此确定UE被允许接入。或者，该接入指示信息可以为EAP-Success消息，这样5G-RG基于收到EAP-success消息可以判断UE的鉴权认证成功，因此确定UE被允许接入。
结合第一方面，在一些可选的实施例中，第一方面描述的方法还可以包括：统一数据管理网元向所述接入和移动性管理功能网元发送所述签约数据，这样接入和移动性管理功能网元也可以根据所述签约数据确定UE的签约类型，以及UE是否被允许接入家庭网关。
结合第一方面或第二方面，在一些可选实施例中，统一数据管理网元上存储的家庭网关的签约数据发生更新。例如，家庭网关的接入类型由开放类型变成了私有类型，或者签约用户列表发生更新。
可选的，统一数据管理网元可以基于更新后的家庭网关的签约数据重新确定用户设备的签约类型，以及重新确定用户设备是否被允许接入家庭网关。可选的，统一数据管 理网元还可以将更新后的家庭网关的签约数据发送给接入和移动性管理网元，由接入和移动性管理网元基于更新后的家庭网关的签约数据重新确定用户设备的签约类型以及用户设备是否被允许接入家庭网关。
在家庭网关的签约数据发生更新的条件下，统一数据管理网元可以根据接入和移动性管理网元的标识信息向接入和移动性管理网元发送接入更新消息。
具体的，该接入更新消息实现如下：
1)如果家庭网关的接入类型由开放类型变为私有类型，且用户设备的签约类型为非签约用户，则该接入更新消息可包括拒绝接入指示。
2)如果更新后的家庭网关的签约用户列表表明用户设备的签约发生改变，则该接入更新消息可包括用户设备的更新后的签约类型的指示信息，用以通知接入和移动性管理网元调整用户设备的接入模型，以及用户设备的业务管理策略。
3)该接入更新消息可包括更新后的家庭网关的接入类型和更新后的签约用户列表中的至少一项，由接入和移动性管理网元基于更新后的家庭网关的接入类型和/或更新后的签约用户列表确定用户设备的签约类型，以及用户设备是否被允许接入家庭网关。
在接收到该接入更新消息之后，接入和移动性管理网元可以向用户设备发送通知消息。该通知消息可用于将用户设备的变化后的签约类型通知给用户设备。在用户设备不能再使用家庭网关接入核心网的条件下，该通知消息可携带重选指示，该重选指示用于通知用户设备重新选择家庭网关进行接入。
实施第一方面或第一方面的各种可能的实现方式描述的方法，UDM可区分UE的不同接入模型以便于后续进行不同的业务控制，例如不同的QoS控制。尤其当网络资源受限时，网络侧可优先保证签约用户的接入，限制非签约用户接入。关于5GC对UE执行的差异化的业务管理策略(如主机策略和访客策略)，本申请不作限制，具体可根据5G或NR支持的应用场景来确定。
第二方面，本申请提供了一种网络接入方法，应用于统一数据管理网元侧，该方法可包括：数据管理网元接收接入和移动性管理功能网元发送的请求消息，该请求消息包括用户设备连接的家庭网关的标识信息。数据管理网元根据所述家庭网关的标识信息确定所述家庭网关的签约数据，并向所述接入和移动性管理功能网元发送所述签约数据，所述签约数据用于所述移动性管理功能网元确定所述用户设备的签约类型。其中，所述签约类型包括所述家庭网关的签约用户或非签约用户。
第三方面，本申请提供了一种网络接入方法，应用于接入和移动性管理功能网元侧，该方法可包括：接入和移动性管理功能网元向统一数据管理网元发送请求消息，该请求消息包括用户设备的标识信息和用户设备连接的家庭网关的标识信息。接入和移动性管理功能网元接收统一数据管理网元发送的用户设备的分类类型的指示信息，并根据用户设备分类类型确定用户设备是否被允许接入家庭网关，和/或用户设备的业务管理策略。
在第三面的一些实施例中，用户设备的分类类型包括签约类型。
结合第三方面，在一些可选的实施例中，所述接入和移动性管理功能网元根据所述用户设备的签约类型确定所述用户设备是否被允许接入所述家庭网关，可具体包括：如果所述用户设备的签约类型是所述家庭网关的签约用户，则所述接入和移动性管理功能 网元确定所述用户设备被允许接入所述家庭网关。因为，不论家庭网关是开放类型(允许非签约用户接入)还是私有类型(不允许非签约用户接入)，签约用户都能接入。
结合第三方面，在一些可选的实施例中，所述接入和移动性管理功能网元根据所述用户设备的签约类型确定所述用户设备的业务管理策略，可具体包括：如果所述签约类型为非签约用户，则所述接入和移动性管理功能网元确定所述用户设备的业务管理策略为非签约用户对应的业务管理策略；或者，如果所述签约类型为签约用户，则所述接入和移动性管理功能网元确定所述用户设备的业务管理策略为签约用户对应的业务管理策略。
结合第三方面，在一些可选的实施例中，第三方面描述的方法还可以包括：所述接入和移动性管理功能网元接收所述统一数据管理网元发送的接入指示信息，和/或所述用户设备的业务管理策略的指示信息，所述接入指示信息指示所述用户设备是否被允许接入所述家庭网关。
结合第三方面，在一些可选的实施例中，第三方面描述的方法还可以包括：所述接入和移动性管理功能网元接收所述统一数据管理网元发送的所述家庭网关的签约数据，并根据所述家庭网关的签约数据和所述用户设备的标识信息确定所述用户设备是否被允许接入所述家庭网关。
结合第三方面，在一些可选的实施例中，所述家庭网关的签约数据可包括所述家庭网关的签约用户的用户设备的标识信息。
结合第三方面，在一些可选的实施例中，所述家庭网关的签约数据还可包括所述家庭网关的接入类型的指示信息，所述接入类型指示所述家庭网关是否允许非签约用户接入。
结合第三方面，在一些可选的实施例中，所述接入和移动性管理功能网元可以通过下述几种方式确定用户设备是否被允许接入接入网设备：
可选的，如果所述用户设备的标识信息属于所述家庭网关的签约用户的用户设备的标识信息，则所述接入和移动性管理功能网元确定所述用户设备被允许接入所述家庭网关。因为，不论家庭网关是开放类型(允许非签约用户接入)还是私有类型(不允许非签约用户接入)，签约用户都能接入。
可选的，如果所述用户设备的标识信息不属于所述家庭网关的签约用户的用户设备的标识信息，但所述家庭网关的接入类型指示所述家庭网关允许非签约用户接入，则所述接入和移动性管理功能网元确定所述用户设备被允许接入所述家庭网关。
可选的，如果所述用户设备的标识信息不属于所述家庭网关的签约用户的用户设备的标识信息，且所述家庭网关的接入类型指示所述家庭网关不允许非签约用户接入，则所述接入和移动性管理功能网元确定所述用户设备不被允许接入所述家庭网关。
不限于签约用户列表和家庭网关的接入类型的指示信息，家庭网关的签约数据的内容还可以实现成其他形式，只要能够指示家庭网关的的签约用户有哪些，家庭网关的允许哪些用户接入即可。例如，该签约数据可包括一个映射表，该映射表中有多个UE的标识信息以及这多个UE的标识信息各自的对应的签约类型的指示信息，其中，这多个UE的标识信息可包括签约用户的UE的标识信息，还可包括非签约用户的UE的标识信 息。这样，可以根据特定UE的标识信息从这个映射表中查找出该特定UE对应的签约类型。
结合第三方面，在一些可选的实施例中，第三方面描述的方法还可以包括：所述接入和移动性管理功能网元向接入网设备或所述家庭网关发送接入指示信息，和/或所述用户设备的业务管理策略的指示信息，所述接入指示信息指示所述用户设备是否被允许接入所述家庭网关。
结合第三方面，在一些可选的实施例中，接入和移动性管理功能网元发送的请求消息中携带的家庭网关的标识信息为永久标识信息。第三方面描述的方法还可以包括：接入和移动性管理功能网元可以获取所述家庭网关的临时标识信息，并根据该临时标识信息从家庭网关的上下文中获取永久标识信息。
可选的，所述接入和移动性管理功能网元可以从所述用户设备发送的NAS信令中获取所述临时标识信息。即接入和移动性管理功能网元获取到的所述家庭网关的临时标识信息是所述用户设备发送的。
可选的，所述接入和移动性管理功能网元可以从所述家庭网关接入的接入网设备发送的信令中获取所述临时标识信息。即接入和移动性管理功能网元获取到的所述家庭网关的临时标识信息是所述接入网设备发送的。其中，接入网设备发送的信令中包括的所述临时标识信息是所述家庭网关发送给所述接入网设备的；或者，是接入网设备基于所述用户设备的IP地址或所述固网网关连接的线路标识或VLAN标识或所述用户设备的接入点标识识别出。
实施第三方面或第三方面的各种可能的实现方式描述的方法，AMF可区分UE的不同接入模型以便于后续进行不同的业务控制，例如不同的QoS控制。尤其当网络资源受限时，网络侧可优先保证签约用户的接入，限制非签约用户接入。关于5GC对UE执行的差异化的业务管理策略(如主机策略和访客策略)，本申请不作限制，具体可根据5G或NR支持的应用场景来确定。
第四方面，本申请提供了一种网络接入方法，应用于接入和移动性管理功能网元侧，该方法可包括：接入和移动性管理功能网元接收接入网设备发送的请求消息，所述请求消息包括家庭网关的标识信息。所述接入和移动性管理功能网元根据所述家庭网关的标识信息获取所述家庭网关的签约数据，并根据所述家庭网关的签约数据和用户设备的标识信息确定所述用户设备的分类类型和/或所述用户设备的业务管理策略。
在第四方面的一些实施例中，用户设备的分类类型包括签约类型。
结合第四方面，在一些可选的实施例中，第四方面描述的方法还可以包括：所述接入和移动性管理功能网元向所述接入网设备或所述家庭网关发送所述用户设备的签约类型的指示信息，和/或所述用户设备的业务管理策略的指示信息。
结合第四方面，在一些可选的实施例中，所述接入和移动性管理功能网元根据所述家庭网关的标识信息获取所述家庭网关的签约数据，可具体包括：所述接入和移动性管理功能网元根据所述家庭网关的标识信息接收统一数据管理网元发送的所述家庭网关的签约数据。
结合第四方面，在一些可选的实施例中，所述接入和移动性管理功能网元根据所述 家庭网关的标识信息获取所述家庭网关的签约数据，可具体包括：所述接入和移动性管理功能网元根据所述家庭网关的标识信息从所述家庭网关的上下文中获取所述家庭网关的签约数据。
结合第四方面，在一些可选的实施例中，所述家庭网关的签约数据可包括所述家庭网关的签约用户的用户设备的标识信息。此时，所述接入和移动性管理功能网元根据所述家庭网关的签约数据确定所述用户设备的签约类型，可具体包括：如果所述用户设备的标识信息属于所述家庭网关的签约用户的用户设备的标识信息，则所述接入和移动性管理功能网元确定所述用户设备为所述家庭网关的签约用户。
结合第四方面，在一些可选的实施例中，所述家庭网关的签约数据还可包括所述家庭网关的接入类型的指示信息，所述接入类型指示所述家庭网关是否允许非签约用户接入。
结合第四方面，在一些可选的实施例中，所述接入和移动性管理功能网元可以通过下述几种方式确定用户设备是否被允许接入接入网设备：
可选的，如果所述用户设备的标识信息属于所述家庭网关的签约用户的用户设备的标识信息，则所述接入和移动性管理功能网元确定所述用户设备被允许接入所述家庭网关。因为，不论家庭网关是开放类型(允许非签约用户接入)还是私有类型(不允许非签约用户接入)，签约用户都能接入。
可选的，如果所述用户设备的标识信息不属于所述家庭网关的签约用户的用户设备的标识信息，但所述家庭网关的接入类型指示所述家庭网关允许非签约用户接入，则所述接入和移动性管理功能网元确定所述用户设备被允许接入所述家庭网关。
可选的，如果所述用户设备的标识信息不属于所述家庭网关的签约用户的用户设备的标识信息，且所述家庭网关的接入类型指示所述家庭网关不允许非签约用户接入，则所述接入和移动性管理功能网元确定所述用户设备不被允许接入所述家庭网关。
不限于签约用户列表和家庭网关的接入类型的指示信息，家庭网关的签约数据的内容还可以实现成其他形式，只要能够指示家庭网关的的签约用户有哪些，家庭网关的允许哪些用户接入即可。例如，该签约数据可包括一个映射表，该映射表中有多个UE的标识信息以及这多个UE的标识信息各自的对应的签约类型的指示信息，其中，这多个UE的标识信息可包括签约用户的UE的标识信息，还可包括非签约用户的UE的标识信息。这样，可以根据特定UE的标识信息从这个映射表中查找出该特定UE对应的签约类型。
结合第四方面，在一些可选的实施例中，第四方面描述的方法还可以包括：所述接入和移动性管理功能网元向所述接入网设备或所述家庭网关发送接入指示信息，和/或所述用户设备的业务管理策略的指示信息。所述接入指示信息指示所述用户设备是否被允许接入所述家庭网关。
结合第四方面，在一些可选的实施例中，接入网设备发送的请求消息中包括的所述家庭网关的标识信息为临时标识信息。第四方面描述的方法还可以包括：所述接入和移动性管理功能网元获取所述家庭网关的临时标识信息，并根据所述临时标识信息从所述家庭网关的上下文中确定所述签约数据。
可选的，所述接入和移动性管理功能网元可以从所述用户设备发送的NAS信令中获取所述临时标识信息。即接入和移动性管理功能网元获取到的所述家庭网关的临时标识信息是所述用户设备发送的。
可选的，所述接入和移动性管理功能网元可以从所述家庭网关接入的接入网设备发送的信令中获取所述临时标识信息。即接入和移动性管理功能网元获取到的所述家庭网关的临时标识信息是所述接入网设备发送的。其中，接入网设备发送的信令中包括的所述临时标识信息是所述家庭网关发送给所述接入网设备的；或者，是接入网设备基于所述用户设备的IP地址或所述固网网关连接的线路标识或VLAN标识或所述用户设备的接入点标识识别出。
第五方面，本申请提供了一种网络接入方法，应用于接入网设备侧，该方法可包括：接入网设备获取用户设备连接的家庭网关的临时标识信息，并向接入和移动性管理功能网元发送消息，该消息包括：所述家庭网关的临时标识信息、所述用户设备的标识信息；所述用户设备的标识信息来自所述用户设备。
结合第五方面，在一些可选的实施例中，所述接入网设备获取用户设备连接的家庭网关的临时标识信息，可具体包括：所述接入网设备接收所述用户设备发送的所述临时标识信息；或，所述接入网设备接收所述家庭网关发送的所述临时标识信息。
可选的，所述接入网设备可以从所述用户设备发送的NAS信令中获取所述临时标识信息。即所述接入网设备获取到的所述家庭网关的临时标识信息是所述用户设备发送的。可选的，所述接入网设备可以从所述家庭网关发送的信令中获取所述临时标识信息。即所述接入网设备获取到的所述家庭网关的临时标识信息是所述接入网设备发送的。
可选的，所述临时标识信息还可以是所述接入网设备基于所述用户设备的IP地址或所述固网网关连接的线路标识或VLAN标识或所述用户设备的接入点标识识别出的。
第六方面，本申请提供了一种网络接入方法，应用于用户设备侧，该方法可包括：用户设备获取所述用户设备连接的家庭网关的临时标识信息，所述用户设备向接入网设备发送请求消息，所述请求消息包括：所述家庭网关的临时标识信息和所述用户设备的标识信息。
结合第六方面，在一些可选的实施例中，所述用户设备获取所述用户设备连接的家庭网关的临时标识信息，可具体包括：所述用户设备接收所述家庭网关发送的所述家庭网关的临时标识信息。
具体的，在与家庭网关建立连接之后，用户设备可以通过接入网查询协议(ANQP)查询获取家庭网关的临时标识信息。具体的，用户设备可接收到家庭网关发送的ANQP消息或EAP消息，这些消息中含有家庭网关的临时标识信息。或者，用户设备可以通过EAP消息获取家庭网关的临时标识信息。具体的，家庭网关在发送给用户设备的EAP消息中携带家庭网关的临时标识。该EAP消息可以为EAP-Request/Identity消息或EAP-request/5G-start消息。
第七方面，本申请提供了一种网络接入方法，应用于接入网设备侧，该方法可包括：接入网设备接收请求消息，所述请求消息包括分组数据单元PDU会话的标识信息。所述接入网设备向终端设备发送响应消息，所述响应消息包括所述接入网设备对应所述PDU 会话的地址；所述接入网设备对应所述PDU会话的地址用作所述终端设备发送的所述PDU会话的用户面数据包的目标地址。
结合第七方面，在一些可选的实施例中，该方法还可包括：所述接入网设备存储所述PDU会话的标识信息与所述接入网设备对应所述PDU会话的地址信息的对应关系。
结合第七方面，在一些可选的实施例中，该方法还可包括：所述接入网设备接收所述终端设备的标识信息；所述接入网设备根据所述终端设备的标识信息为所述终端设备分配地址；所述接入网设备向所述终端设备发送所述终端设备的地址；所述终端设备的地址用作所述终端设备发送的所述PDU会话的用户面数据包的源地址。
结合第七方面，在一些可选的实施例中，该方法还可包括：所述接入网设备接收所述终端设备发送的所述PDU会话的用户面数据包，所述用户面数据包中包括的目的地址为所述接入网设备对应所述PDU会话的地址；所述接入网设备基于所述接入网设备对应所述PDU会话的地址信息识别所述PDU会话。
第八方面，本申请提供了一种网络接入方法，应用于接入网设备侧，该方法可包括：接入网设备分配所述接入网设备对应终端设备的用户面地址；所述接入网设备向所述终端设备发送所述接入网设备的用户面地址，所述用户面地址用作所述终端设备发送的PDU会话的用户面数据包的目的地址。
结合第八方面，在一些可选的实施例中，该方法还可包括：所述接入网设备接收所述终端设备的标识信息；所述接入网设备根据所述终端设备的标识信息为所述终端设备分配地址；
所述接入网设备向所述终端设备发送所述终端设备的地址，所述终端设备的地址用作所述终端设备发送的PDU会话的用户面数据包的源地址。
结合第八方面，在一些可选的实施例中，该方法还可包括：所述接入网设备接收所述终端设备发送的所述用户面数据包，所述用户面数据包中的目的地址为所述接入网设备的用户面的地址，所述用户面数据包还包括所述PDU会话的标识信息；所述接入网设备基于所述PDU会话的标识信息识别所述PDU会话。
第九方面，本申请提供了一种网络接入方法，应用于终端设备侧，该方法可包括：用户设备接收接入网设备发送的所述接入网设备的用户面地址；所述接入网设备向所述接入网设备发送PDU会话的用户面数据包，所述用户面数据包中包括的目的地址为所述接入网设备的用户面地址。
结合第九方面，在一些可选的实施例中，该方法还可包括：所述用户设备向所述接入网设备发送所述用户设备的标识信息；所述用户设备接收所述接入网设备分配并发送的所述用户设备的地址；所述用户面数据包中包括的源地址为所述用户设备的地址。
第十方面，本申请提供了一种网络接入方法，应用于终端设备侧，该方法可包括：用户设备接收接入网设备发送的所述接入网设备的地址；所述接入网设备向所述接入网设备发送所述PDU会话的用户面数据包，所述用户面数据包中包括的目的地址为所述接入网设备的地址，所述用户面数据包还包括所述PDU会话的标识信息。
结合第十方面，在一些可选的实施例中，该方法还可包括：所述用户设备向所述接入网设备发送所述用户设备的标识信息；所述用户设备接收所述接入网设备分配并发送 的所述用户设备的地址；所述用户面数据包中包括的源地址为所述用户设备的地址。
第十一方面，本申请提供了一种业务管理策略的发送方法，应用于策略控制网元侧，该方法可包括：策略控制网元接收接入和移动性管理功能网元或者会话管理网元发送的第一消息，所述第一消息包括用户设备的设备类型的指示信息；所述策略控制网元向会话管理网元发送第二消息，所述第二消息包括所述策略控制网元基于所述用户设备的设备类型的指示信息确定的所述用户设备的业务管理策略。
结合第十一方面，在一些可选的实施例中，所述业务管理策略包括：QoS策略和/或家庭网关的本地资源接入策略。
结合第十一方面，在一些可选的实施例中，所述业务管理策略包括：家庭网关的本地资源接入策略；该方法还可包括：所述策略控制网元向所述接入和移动性管理功能网元发送所述本地资源接入策略。
第十二方面，本申请提供了一种网络接入，应用于家庭网关侧，该方法可包括：家庭网关接收接入和移动性管理功能网元发送的用户设备的标识信息和所述用户设备的设备类型的指示信息；所述家庭网关获取所述家庭网关的本地资源接入策略；所述家庭网关根据所述用户设备的设备类型的指示信息和所述本地资源接入策略控制所述用户设备接入本地资源。
结合第十二方面，在一些可选的实施例中，所述家庭网关获取所述家庭网关的本地资源接入策略，可具体包括：所述家庭网关接收所述接入和移动性管理功能网元或者会话管理网元发送的所述家庭网关的本地资源接入策略。
结合第十二方面，在一些可选的实施例中，所述家庭网关获取所述家庭网关的本地资源接入策略，可具体包括：所述家庭网关配置所述本地资源接入策略。
结合第十二方面，在一些可选的实施例中，所述本地资源接入策略包括与所述家庭网关连接的设备的地址信息。
结合第十二方面，在一些可选的实施例中，该方法还可包括：所述家庭网关接收所述用户设备发送的请求消息，所述请求消息包括所述用户设备的标识信息；所述家庭网关根据所述用户设备的设备类型的指示信息和所述本地资源接入策略控制所述用户设备接入本地资源，包括：所述家庭网关根据所述用户设备的标识信息和所述用户设备的设备类型的指示信息确定所述用户设备的设备类型；所述家庭网关根据所述用户设备的设备类型和所述本地资源接入策略控制所述用户设备接入本地资源。
第十三方面，本申请提供了一种核心网设备，包括多个功能单元，用于相应的执行第一方面或第二方面或第三方面或第四方面或第十一方面可能的实施方式中的任意一种所提供的方法。该核心网设备可实施为第一方面或第二方面或第三方面或第四方面或第十一方面中的统一数据管理网元。接入和移动性管理网元。
第十四方面，本申请提供了一种接入网设备，包括多个功能单元，用于相应的执行第五方面或第七方面或第八方面可能的实施方式中的任意一种所提供的方法。
第十五方面，本申请提供了一种用户设备，包括多个功能单元，用于相应的执行第六方面可能的实施方式中的任意一种所提供的方法。
第十六方面，本申请提供了一种终端设备，包括多个功能单元，用于相应的执行第 九方面或第十方面可能的实施方式中的任意一种所提供的方法。
第十七方面，本申请提供了一种核心网设备，用于执行第一方面或第二方面或第三方面或第四方面可能的实施方式中的任意一种所描述的网络接入方法。该核心网设备可实施为第一方面或第二方面或第三方面或第四方面或第十一方面中的统一数据管理网元。接入和移动性管理网元。该核心网设备可包括：存储器以及与存储器耦合的处理器、收发器，其中：收发器用于与其他通信设备(如接入网设备)通信。存储器用于存储第一方面或第二方面或第三方面或第四方面可能的实施方式中的任意一种所描述的网络接入方法的实现代码，处理器用于执行存储器中存储的程序代码，即执行第一方面或第二方面或第三方面或第四方面或第十一方面可能的实施方式中的任意一种所提供的方法。
第十八方面，本申请提供了一种接入网设备，用于执行第五方面可能的实施方式中的任意一种所描述的网络接入方法。应用服务器可包括：存储器以及与存储器耦合的处理器、收发器，其中：收发器用于与其他通信设备(如核心网设备、家庭网关)通信。存储器用于存储第五方面或第七方面或第八方面可能的实施方式中的任意一种所描述的网络接入方法的实现代码，处理器用于执行存储器中存储的程序代码，即执行第五方面或第七方面或第八方面可能的实施方式中的任意一种所提供的方法。
第十九方面，本申请提供了一种用户设备，用于执行第六方面可能的实施方式中的任意一种所描述的网络接入方法。应用户设备可包括：存储器以及与存储器耦合的处理器、收发器，其中：收发器用于与其他通信设备(如家庭网关)通信。存储器用于存储第六方面可能的实施方式中的任意一种所描述的网络接入方法的实现代码，处理器用于执行存储器中存储的程序代码，即执行第六方面可能的实施方式中的任意一种所提供的方法。
第二十方面，本申请提供了一种终端设备，用于执行第六方面可能的实施方式中的任意一种所描述的网络接入方法。终端可包括：存储器以及与存储器耦合的处理器、收发器，其中：收发器用于与其他通信设备(如家庭网关)通信。存储器用于存储第九方面或第十方面可能的实施方式中的任意一种所描述的网络接入方法的实现代码，处理器用于执行存储器中存储的程序代码，即执行第九方面或第十方面可能的实施方式中的任意一种所提供的方法。
第二十一方面，本申请提供了一种通信系统，通信系统包括：用户设备、家庭网关、接入网设备和核心网网设备，其中：该核心网设备可以是第十三方面或第十七方面中描述的核心网设备。该接入网设备可以是第十四方面或第十八方面中描述的接入网设备。该用户设备可以是第十五方面或第十九方面中描述的用户设备。家庭网关可以是第十六方面或第二十方面中描述的用终端设备。
第二十二面，本申请提供了一种计算机可读存储介质，可读存储介质上存储有指令，当其在计算机上运行时，使得计算机执行上述第一方面至第十二方面中任一项描述的网络接入方法。
第二十三方面，本申请提供了一种包含指令的计算机程序产品，当其在计算机上运行时，使得计算机执行上述第一方面至第十二方面中任一项描述的网络接入方法。
附图说明
为了更清楚地说明本申请实施例中的技术方案，下面将对本申请实施例或背景技术中所需要使用的附图进行说明。
图1A-1C是本申请涉及的无线通信系统的架构示意图；
图2是本申请提供的一种网络接入方法的流程示意图；
图3是本申请提供的又一种网络接入方法的流程示意图；
图4是本申请提供的再一种网络接入方法的流程示意图；
图5是本申请提供的再一种网络接入方法的流程示意图；
图6是本申请的一个实施例提供的用户设备的架构示意图；
图7是本申请的一个实施例提供的家庭网关的架构示意图；
图8是本申请的一个实施例提供的接入网设备的架构示意图；
图9是本申请的一个实施例提供的核心网设备的架构示意图；
图10是本申请的提供的一种通信系统，相关通信装置的功能框图；
图11是本申请提供的一种网络侧获取家庭网关的标识信息的方法的流程示意图；
图12是本申请提供的再一种网络接入方法的流程示意图；
图13是本申请提供的一种网络侧下发业务管理策略的方法的流程示意图。
具体实施方式
本申请的实施方式部分使用的术语仅用于对本申请的具体实施例进行解释，而非旨在限定本申请。
图1A-1C示出了本申请涉及的通信系统的系统架构。其中，图1A示出了非漫游系统架构，图1B示出了一种拜访地路由(local breakout)漫游系统架构，图1C示出了一种归属域地路由(home routed)漫游系统架构。图1A-1C示出的系统架构不但支持3GPP标准组定义的无线接入技术(如LTE、5G RAN、下一代RAN(next generation，NG RAN)等)接入核心网(core network，CN)，而且支持非3GPP(non-3GPP)接入技术通过non-3GPP转换功能(non-3GPP interworking function，N3IWF)或下一代接入网关(next generation packet data gateway，ngPDG)接入核心网。如图1A-1C所示，该系统架构还支持固定网络/有线网络的接入，如5G家庭网关(5G RG)/CPE通过有线5G接入网络(W-5GAN)接入核心网。在5G家庭网关通过有线5G接入网络接入到5GC的场景下，5GC能力用户设备(5GC capable UE)可以通过5G家庭网关接入5GC。此时，5GC能力用户设备为远端设备，5G家庭网关为中继设备。
不限于5G通信系统，图1A-1C示出的系统架构还可以是未来演进的新空口(new radio，NR)系统，机器与机器通信(machine to machine，M2M)系统等。如图图1A-1C所示，该系统架构可包括5GC能力用户设备、5G RG、NG RAN设备、W-5G AN设备和核心网设备。其中：
5GC能力用户设备(5G capable UE)：是一种用户设备(userequipment，UE)，具备接入3gpp定义的5G核心网(5GC)的能力。5GC能力用户设备可以通过NG RAN接入 核心网，也可以通过5G RG接入核心网。5GC能力用户设备可以为手持终端、用户单元(subscriberunit)、蜂窝电话(cellularphone)、智能电话(smartphone)、机器类型通信(machine type communication，MTC)终端设备等。无线数据卡、个人数字助理(personal digital assistant，PDA)电脑、平板型电脑、无线调制解调器(modem)、手持设备(handheld)、膝上型电脑(laptopcomputer)、无绳电话(cordlessphone)或者无线本地环路(wireless local loop，WLL)台、或是其他可以接入网络的设备。除了5GC能力用户设备，该系统架构还可以支持仅具有3gpp定义的无线接入能力的终端设备接入核心网，还可以支持仅具有non-3gpp定义的接入能力的终端设备(如平板电脑)接入核心网。
5G RG：是一种家庭网关，可以通过W-5G AN接入到5GC。本申请中，5G RG还可支持5GC能力用户设备通过5G RG接入5GC。家庭网关是整个家庭网络的核心，它主要实现Internet接入和家庭内部异构子网的连接，以及远程控制与管理等功能。
NG RAN设备：是一种RAN设备，主要负责空口侧的无线资源管理、服务质量(quality of service，QoS)管理、数据压缩和加密等功能。除了NG RAN设备，该系统架构还可以支持其他3GPP定义的无线接入网设备，如5G RAN设备等。RAN设备可以包括：宏基站，微基站(也称为小站)，中继站等。在采用不同的无线接入技术的系统中，具备基站功能的设备的名称可能会有所不同，例如，在第五代(5th generation，5G)系统中，称为gNB；在LTE系统中，称为演进的节点B(evolved NodeB，eNB或者eNodeB)；在第三代(3rd generation，3G)系统中，称为节点B(Node B)等。
W-5G AN设备：是一种有AN设备。AN设备可以是non-3GPP定义的接入网设备。AN设备允许终端设备和3GPP核心网之间采用非3GPP技术互连互通，其中，非3GPP技术例如：无线保真(wirelessfidelity，Wi-Fi)、全球微波互联接入(worldwide interoperability for microwave access，WiMAX)、码分多址(code division multiple access，CDMA)网络等。除了W-5G AN设备，该系统架构还可以支持其他non-3GPP定义的接入网设备，如Wi-Fi路由器。
核心网设备可如图1A-1C所示包括UPF、AMF、UDM、SMF、PCF、AUSF等。这些核心网设备构成5GC，能够支持3gpp接入网和non-3gpp接入网。其中：
用户面功能(user plane function，UPF)网元：负责数据包的转发和接收。UPF网元可以从数据网络接收用户数据，通过接入网设备传输给终端设备；UPF网元还可以通过接入网设备从终端设备接收用户数据，转发到数据网络。UPF网元中为终端设备提供服务的传输资源和调度功能由SMF网元管理控制的。UPF网元可以缓存数据包。
接入和移动性管理功能(access and mobility management function，AMF)网元：属于核心网网元，主要负责信令处理部分，例如：接入控制、移动性管理、附着与去附着以及网关选择等功能。AMF网元为终端设备中的会话提供服务的情况下，会为该会话提供控制面的存储资源，以存储会话标识、与会话标识关联的SMF网元标识等。
统一数据管理(unified data management，UDM)网元：统一的数据管理，由两部分构成，一部分叫应用前段(FE)，另一部分叫用户数据仓库(UDR)。FE可以访问存储在UDR中的订阅用户信息，并支持鉴权信用处理、用户标识处理、访问授权、订阅管理、 短消息管理等。UDR是一个用户订阅数据存储服务器，提供订阅数据存储服务。
会话管理功能(sess ion management function，SMF)网元：负责用户面网元选择，用户面网元重定向，因特网协议(internetprotocol，IP)地址分配，数据传输通道的建立、修改和释放以及QoS控制。SMF网元可以缓存数据包。
策略控制功能(policy control function，PCF)网元：主要支持提供统一的策略框架来控制网络行为，提供策略规则给控制层设备以及终端设备提供策略信息，同时负责获取与策略决策相关的用户签约信息。
鉴权服务器功能(authentication server function，AUSF)网元：主要提供认证和鉴权功能。
另外，该系统架构还包括数据网络(data network，DN)，DN为由应用功能组成的向终端设备提供应用数据服务器的网络。
为了简化附图，核心网中的非结构化数据存储网络功能(unstructured data storage network function，UDSF)、结构化数据存储网络功能(structured data storage network function，SDSF)和NF存储功能(NF repository function，NRF)未示出。
图1A-1C示出的系统架构中的各个成员(如5G capable UE、5G RG、W-5G AN等)的命名在未来通信标准中可能发生变化，这不影响本申请提供的技术方案的适用性。
图1A-1C示出的系统架构仅仅是为了更加清楚的说明本申请的技术方案，并不构成对本申请的限定，本领域普通技术人员可知，随着网络架构的演变和新业务场景的出现，本申请提供的技术方案对于类似的技术问题，同样适用。
本申请提供一种网络接入方法，可实现用户设备(UE)通过家庭网关接入5GC，使得5GC支持更多接入方式，提升固网和移动网络的融合度。
在UE通过家庭网关接入核心网的场景中，UE可以为图1A-1C所示的系统架构中的5GC capable UE，家庭网关可以为图1A-1C所示的系统架构中的5G RG。
本申请的主要发明原理可包括：基于5G RG的签约数据来确定以下两个问题：1)判断家庭网关是否允许UE接入。2)当5G RG允许UE接入时，判断UE的接入模型(包括签约用户接入、非签约用户接入)。签约用户接入为家庭成员通过5G RG接入5GC，非签约用户接入为非家庭成员(如访客用户或陌生人)通过5G RG接入5GC。
本申请中，5G RG的签约数据可指示5G RG的签约用户有哪些。5G RG的签约数据可指示5G RG允许哪些用户接入。
具体的，5G RG的签约数据可包括以下信息：
1)签约用户列表：即5G RG的签约用户的用户设备的标识信息。签约用户列表中的用户设备的标识信息表示该用户设备为签约用户，即家庭成员。用户设备的标识信息可以为UE的永久标识信息或UE的移动签约用户的国际ISDN/PSTN号码(Mobile Subscriber International ISDN/PSTN number，MSISDN)中的至少一个。这里，ISDN是综合业务数字网(Integrated Service Digital Network)的简称，PSTN是公共交换电话网络(Public Switched Telephone Network)的简称。
2)5G RG的接入类型的指示信息。5G RG的接入类型可包括开放(open)类型，封 闭类型/私有(private)类型。封闭类型/私有类型表示5G RG只允许签约用户接入，不允许非签约用户接入。开放类型表示5G RG不但允许签约用户接入，还允许非签约用户接入。
其中，签约用户列表可用于网络侧确定UE的签约类型(签约用户或者非签约用户)，从而确定UE的接入模型，即是签约用户接入还是非签约用户接入。
其中，5G RG的接入类型可用于网络侧确定UE是否被允许接入5G RG。如果5G RG的接入类型为开放类型，则表示UE被允许接入5G RG。如果5G RG的接入类型为封闭类型/私有类型，则还需要结合签约用户列表确定UE是否被允许接入5G RG。如果UE的标识信息属于签约用户列表，该UE被允许接入5G RG，否则，该UE不被允许接入5G RG。
应理解的，如果连接到5G RG的UE的标识信息属于签约用户列表，则网络侧可以确定该UE被允许接入5G RG。即签约用户被允许接入5G RG，不论该5G RG的接入类型为开放类型还是封闭类型/私有类型。
不限于1)和2)，5G RG的签约数据的内容还可以实现成其他形式，具体可参考后续实施例，这里先不赘述。
本申请中，签约类型的指示信息可以为终端设备分类信息，上述终端设备分类信息为终端设备分类列表信息，或终端设备分类的指示信息。具体来说，终端设备分类列表信息包含至少一个终端设备标识，上述终端设备属于相同的终端设备分类。例如，上述终端设备分类列表为签约的终端设备列表或非签约的终端设备列表。终端设备分类的指示信息可以为终端设备分类的标识。如终端设备分类的指示信息为签约的终端设备指示信息或非签约的终端设备指示信息。这样，核心网设备判断便可以基于终端设备的分类判断出该终端设备是否被允许接入或者进行策略控制(例如Qos策略控制或者家庭网关本地策略控制)。具体的，若终端设备的标识信息属于签约的终端设备分类列表，则允许远端设备接入；若终端设备的标识信息不属于签约的终端设备分类列表，则不允许远端设备接入。
本申请中，5GC能够对UE执行不同的主机策略(Host policy)或访客策略(Guest policy)，例如不同的QoS控制，使用特定资源(如打印机)的许可，或者被允许接入互联网(Internet)。主机策略被提供给属于5G RG的签约用户的UE，例如，家庭成员的用户设备。访客策略被提供给不属于5G RG的签约用户的UE，例如，访客的用户设备。
可以理解的，网络侧区分UE的不同接入模型以便于后续进行不同的业务控制，例如不同的QoS控制。尤其当网络资源受限时，网络侧可优先保证签约用户的接入，限制非签约用户接入。关于5GC对UE执行的差异化的业务管理策略(如主机策略和访客策略)，本申请不作限制，具体可根据5G或NR支持的应用场景来确定。
下面通过实施例来详细说明本申请提供的网络接入方法。后续实施例将涉及UE注册的UDM、5G RG注册的UDM网元，二者可以是同一个UDM网元，也可以是不同的UDM网元。在UE、5G RG分别属于不同网络运营商的情况下，UE、5G RG所注册的UDM网元 是不同的UDM网元。在UE、5G RG都属于同一个网络运营商的情况下，UE、5G RG所注册的UDM网元可以是同一个UDM网元或者不同的UDM网元。同样的，后续实施例将涉及的服务于UE的AMF网元、服务于5G RG的AMF网元可以是同一个AMF网元，也可以是不同的AMF网元。后续内容中，将UDM网元简化称为UDM，将AMF网元简化称为AMF。
为了区别，后续实施例中将5G RG注册的UDM称为UDM1，将UE注册的UDM称为UDM2,。类似的，将服务于5G RG的AMF称为AMF1，将服务于UE的AMF称为AMF2。
(一)实施例一
本实施例中，由UDM负责确定UE的接入模型(包括签约用户接入、非签约用户接入)，以及确定家庭网关是否允许UE接入。如图2所示，实施例一提供的网络接入方法可包括：
(1)第一阶段：UE发起接入请求。具体可包括：
S101，UE与5G RG建立连接，如通过WLAN接口建立连接。可选的，5G RG或者5G RG接入的W-5G AN设备可以为UE分配IP地址。
在S101之前，5G RG可以注册到5GC，5G RG注册的核心网网元为AMF1。关于5G RG注册到5GC的流程，具体可参考3gpp标准协议定义的注册流程，这里不赘述。
S103-S105，UE与W-5G AN设备建立连接。
本申请不限制UE与W-5G AN设备建立连接的方式。
例如，UE可以通过IKEv2消息建立与W-5G AN设备之间的连接。如S103-S105所示，UE发送IKE安全连接初始(IKE_SA_INIT)消息给W-5G AN设备，然后W-5G AN设备发送IKE_SA_INIT回复消息。然后，UE发送鉴权请求(IKE_AUTH request)消息给W-5G AN设备。这里，IKE表示因特网秘钥交换(Internet Key Exchange)协议。
又例如，在UE与5G-RG建立连接后，UE可以与5G-RG、W-5GAN之间交互扩展认证协议(Extensible Authentication Protocol，EAP)消息，用以建立W-5G AN设备之间的连接。该EAP消息可包括EAP-request/response消息,EAP-request/identity消息，或EAP-response/identity消息，或EAP-Request/5G start消息，或EAP-Response/5G-NAS消息等。UE发送该EAP消息给W-5GAN，其中携带AN参数(AN-parameter)、及非接入层(Non-access stratum，NAS)消息。该NAS消息为注册请求消息或移动注册更新请求消息或周期性位置更新请求消息或服务请求消息等。
S106，UE可以基于UE与W-5G AN设备建立的连接，向W-5G AN设备发送请求消息。该请求消息可以是NAS消息。该请求消息可以携带在EAP消息中发送给W-5GAN，详见S103-105。该请求消息可包括UE的标识信息，用于请求接入核心网(5GC)。W-5G AN设备可以转发该NAS消息到AMF2，具体可以参考S109。
(2)第二阶段：网络侧获取5G RG的标识信息和5G RG的签约数据。具体可包括：
S107，5G RG向W-5G AN设备发送5G RG的临时标识信息。
5G RG的临时标识信息可用来在核心网侧索引到5G RG的上下文。5G RG的临时标识可以包括全球唯一临时标识(globally unique temporary identifier,GUTI)，即网络侧(5GC)为5G RG分配的临时标识。关于5G RG如何发送5G RG的临时标识信息，本申请对此不作限制。例如，5G RG发送基于以太网的点对点消息(Point-to-Point over  Ethernet，PPPoE)，或其他控制面消息，该消息可以携带5G RG的临时标识信息。可选的，该消息还可携带UE的IP地址。
可选的，S106中UE向W-5G AN设备发送的请求消息中还可携带5G RG的临时标识信息，该5G RG的临时标识信息可由UE获取到。如S102所示，在与5G RG建立连接之后，UE可以通过接入网查询协议(Access Network Query Protocol，ANQP)查询获取5G RG的临时标识信息。具体的，UE可接收到5G RG发送的ANQP消息或EAP消息，这些消息中含有5G RG的临时标识。或者，UE可以通过EAP消息获取5G-RG的临时标识信息。具体的，5G-RG在发送给UE的EAP消息中携带5G-RG的临时标识。该EAP消息可以为EAP-Request/Identity消息或EAP-request/5G-start消息。
S108，W-5G AN设备可以为UE选择AMF2。具体的，W-5G AN设备可以基于切片选择信息或者UE的标识信息或者AMF的标识信息选择AMF2。基于切片选择信息时，UE发送给W-5GAN的消息中含有UE请求的切片信息。网络侧不同的AMF负责不同的切片，因此W-5GAN可以基于切片信息选择到负责该切片的AMF2。或者，UE发送UE的标识信息给W-5GAN，上述UE的标识信息中含有AMF的标识，W-5GAN选择该AMF标识对应的AMF2。或者，UE直接发送AMF的标识信息给W-5GAN，W-5GAN选择该AMF标识对应的AMF2.
S109，W-5G AN设备可以向AMF2发送请求消息，该请求消息可以包括UE的标识信息、5G RG的临时标识信息，用于UE请求接入核心网。该请求消息可以是N2消息，N2是W-5G AN设备与AMF之间的参考点。可选的，W-5G AN设备可以将UE发送的NAS消息(可参考S106)携带在该N2消息中，这样W-5G AN设备可以转发该NAS消息到AMF2，用于UE向AMF2请求接入核心网。
S110-S111，AMF2基于5G RG的临时标识信息获取5G RG的永久标识信息。5G RG的永久标识信息用于后续获取5G RG的签约数据。
综合前述步骤可以看出，AMF2可以通过如下方式先获取5G RG的临时标识信息：
方式1，AMF2从UE发送的NAS信令中获取5G RG的临时标识信息。
具体的，UE获取5G RG的临时标识信息(可参考S102)，然后通过NAS消息(经W-5G AN设备转发)携带5G RG的临时标识信息并发送到AMF2。
方式2，AMF2从W-5G AN设备获取5G RG的临时标识信息。该临时标识信息可以是5G RG发送给W-5G AN设备的，具体可参考S107。
在获得5G RG的临时标识信息之后，AMF2可以基于该临时标识信息从5G RG的上下文(context)中获取5G RG的永久标识信息。
在AMF1和AMF2不是同一个AMF的情况下，如S110-S111所示，5G RG的上下文存储于AMF1上，AMF2可以基于5G RG的临时标识信息查找到服务5G RG的AMF1，并向AMF1发送请求消息。可选的，该请求消息还可以包括SUPI请求指示，表示请求获得5G RG的永久标识信息。相应的，AMF1可以基于5G RG的临时标识信息查找5G RG的上下文，并从上下文中获取5G RG的永久标识信息，并将该永久标识信息发送给AMF2。该请求消息中携带有5G RG的临时标识信。可选的，该请求消息中还可以携带请求永久标识信息的指示。永久标识信息可以是签约用户永久标识(subscriber permanent identifier，SUPI)。
应理解的，在AMF1和AMF2是同一个AMF的情况下，S110-S111所示的交互过程不再需要，AMF可以基于5G RG的临时标识信息直接从本地存储的5G RG的上下文中获取到5G RG的永久标识信息。
S112，AMF2可以基于鉴权认证流程完成UE的鉴权认证。具体的，AMF2基于UE的标识信息查找出负责存储UE的签约数据的UDM2。然后，UDM2与AUSF基于UE的签约数据中的鉴权向量完成UE的鉴权认证流程。该鉴权认证流程可具体参考3gpp标准中的相关协议，这里不再赘述。
S113，AMF2基于5G RG的永久标识信息查找出负责存储5G RG的签约数据的UDM1，并向UDM1发送请求消息，该请求消息可包括UE的标识信息以及5G RG的永久标识信息。可选的，该请求消息还可携带接入请求指示，表示该UE的标识信息所表征的UE请求使用该5G RG SUPI所表征的5G RG接入核心网。可选的，该请求消息中还可携带AMF2的标识信息，这样UDM1可以存储AMF2的标识信息，可用于在后续5G RG的签约数据发生更新的条件下通知AMF2更新UE的签约类型。相应的，UDM1接收到AMF2发送的该请求消息。
(3)第三阶段：核心网基于5G RG的签约数据确定UE的接入模型。具体可包括：
S114-S115，在接收到AMF2发送的请求消息之后，UDM1可以基于5G RG的永久标识信息确定5G RG的签约数据。然后，UDM1可以基于5G RG的签约数据确定UE的签约类型。UDM1还可以基于5G RG的签约数据确定UE是否被允许接入5G RG。
5G RG的签约数据可包括以下信息：
1)签约用户列表：5G RG的签约用户的用户设备的标识信息。签约用户列表中的用户设备的标识信息表示该用户设备为签约用户，即家庭成员。
2)5G RG的接入类型的指示信息。5G RG的接入类型可包括开放(open)类型，封闭类型/私有(pr ivate)类型。封闭类型/私有类型表示5G RG只允许签约用户接入，不允许非签约用户接入。开放类型表示5G RG不但允许签约用户接入，还允许非签约用户接入。也即是说，接入类型可用于指示5G RG是否允许非签约用户接入。
具体的，UDM1可以基于签约用户列表的接入模型确定UE的接入模型。如果UE的标识信息属于签约用户列表中的签约用户的用户设备的标识信息，则UDM1可以确定该UE为5G RG的签约用户。
具体的，UDM1可以通过以下方式确定UE是否被允许接入5G RG：
1)如果UE的标识信息属于上述签约用户列表(即5G RG的签约用户的用户设备的标识信息)，则UDM1可确定该UE被允许接入5G RG，不论该5G RG的接入类型为开放类型还是封闭类型/私有类型。
2)如果UE的标识信息属于上述签约用户列表(即5G RG的签约用户的用户设备的标识信息)，但5G RG的接入类型指示5G RG允许非签约用户接入(即接入类型为开放类型)，则UDM1可确定该UE被允许接入5G RG。
3)如果UE的标识信息不属于上述签约用户列表(即5G RG的签约用户的用户设备的标识信息)，且5G RG的接入类型指示5G RG不允许非签约用户接入(即接入类型为私有类型)，则UDM1可确定该UE不被允许接入5G RG。
不限于上述签约用户列表和5G RG的接入类型的指示信息，5G RG的签约数据的内容还可以实现成其他形式，只要能够指示5G RG的签约用户有哪些，5G RG允许哪些用户接入即可。例如，该签约数据可包括一个映射表，该映射表中有多个UE的标识信息以及这多个UE的标识信息各自的对应的签约类型的指示信息，其中，这多个UE的标识信息可包括签约用户的UE的标识信息，还可包括非签约用户的UE的标识信息。这样，UDM1可以根据特定UE的标识信息从这个映射表中查找出该特定UE对应的签约类型。
S116，UDM1可以向AMF2发送响应消息。该响应消息含可包括UE的签约类型的指示信息。相应的，AMF2可以接收到UDM1发送的该响应消息，并根据UE的签约类型确定该UE的业务管理策略(如QoS控制)。这样可实现网络侧区分UE的不同接入模型以便于后续进行不同的业务控制。
可选的，在UE为签约用户的条件下，AMF2还可以确定该UE被允许接入5G RG。
具体的，该响应消息还可包括接入指示信息，该接入指示信息指示UE是否被允许接入5G RG。当不允许UE接入时，该接入指示信息为拒绝接入指示；当允许UE接入时，该接入指示信息为允许接入指示。可选的，对于允许接入的UE，AMF2可以将该UE的签约类型存储在该UE的上下文中。
在一些可选的实施例中，UDM1还可以将5G RG的签约数据发送给AMF2，由AMF2来确定UE的签约类型，以及UE是否被允许接入5G RG。具体的，AMF2确定UE的签约类型以及UE是否被允许接入5G RG的实现方式和UDM1采用的方式可以相同，具体可参考S114-S115，这里不再赘述。
在一些可选的实施例中，UDM1还可以在确定出UE被允许接入5G RG之后，将签约用户列表发送给AMF2，这样AMF2便可以根据该签约用户列表确定出接入5G RG的UE的接入模型，从而采用相应的业务管理策略，如QoS控制。
S117-S118，AMF2基于现有注册流程或移动注册更新流程或周期性注册更新流程完成UE的接入过程，如允许接入流程或拒绝接入流程。关于该现有注册流程或移动注册更新流程或周期性注册更新流程，可具体参考3gpp标准中的相关协议，这里不再赘述。
可选的，AMF2可以向W-5G AN设备或者5G RG发送接入指示信息，该接入指示信息用于指示UE是否被允许接入5G RG。具体的，该指示信息可以为安全秘钥(key)，这样W-5GAN可以基于收到安全Key确定UE的鉴权认证成功，因此确定UE被允许接入。或者，该指示信息可以为EAP-Success消息，这样5G-RG基于收到EAP-success消息可以判断UE的鉴权认证成功，因此确定UE被允许接入。可选的，AMF2还可以向W-5G AN设备或者5G RG或UE发送UE的签约类型的指示信息和/或UE的业务管理策略(如QoS控制，或本地资源访问权限等)的指示信息。具体的，上述接入指示信息、或/和UE的签约类型的指示信息和/或UE的业务管理策略通过N2接口消息由AMF2发送给W-5GAN，或者，通过NAS(Non-Access-Stratum)消息由AMF2发送给5G-RG或UE。
可选的，在接收到接入指示信息、UE的签约类型的指示信息和/或UE的业务管理策略的指示信息之后，W-5G AN设备可以向5G RG或者UE发送接入指示信息、UE的签约类型的指示信息和/或UE的业务管理策略的指示信息。具体的，该指示信息可以为安全秘钥(key)，这样W-5GAN可以基于收到安全Key确定UE的鉴权认证成功，因此确定 UE被允许接入。或者，该指示信息可以为EAP-Success消息，这样5G-RG或UE基于收到EAP-success消息可以判断UE的鉴权认证成功，因此确定UE被允许接入。或者，该指示信息可以为NAS成功消息，这样UE基于NAS成功消息可确定UE被允许接入。具体的,接入指示信息、或/和UE的签约类型的指示信息和/或UE的业务管理策略由W-5GAN通过接入侧消息发给5G-RG或UE。该接入侧消息如PPPoE消息或EAP消息或其他固网接入侧消息。
可选的，在接收到接入指示信息、UE的签约类型的指示信息和/或UE的业务管理策略的指示信息之后，5G RG可以向UE发送接入指示信息、UE的签约类型的指示信息和/或UE的业务管理策略的指示信息。具体的，该指示信息可以为EAP-Success消息，这样UE基于收到EAP-success消息可以判断UE的鉴权认证成功，因此确定UE被允许接入。或者，该指示信息可以为NAS成功消息，这样UE基于NAS成功消息可确定UE被允许接入。具体的，接入指示信息、或/和UE的签约类型的指示信息和/或UE的业务管理策略由5G-RG通过空口侧消息发给UE。该空口侧消息如PC5接口消息或EAP消息或WLAN接口消息或蓝牙接口消息等。
(4)第四阶段：5G RG的签约数据发生更新。具体可包括：
S119，UDM1上存储的5G RG的签约数据发生更新。例如，5G RG的接入类型由开放类型变成了私有类型，或者签约用户列表发生更新。
可选的，UDM1可以基于更新后的5G RG的签约数据重新确定UE的签约类型，以及重新确定UE是否被允许接入5G RG。
可选的，UDM1还可以将更新后的5G RG的签约数据发送给AMF2，由AMF2基于更新后的5G RG的签约数据重新确定UE的签约类型以及UE是否被允许接入5G RG。
S120，在5G RG的签约数据发生更新的条件下，UDM1可以根据AMF2的标识信息向AMF2发送接入更新消息。
具体的，该接入更新消息实现如下：
1)如果5G RG的接入类型由开放类型变为私有类型，且UE的签约类型为非签约用户，则该接入更新消息可包括拒绝接入指示。
2)如果更新后的5G RG的签约用户列表表明UE的签约发生改变，则该接入更新消息可包括UE的更新后的签约类型的指示信息，用以通知AMF2调整UE的接入模型，以及UE的业务管理策略。
3)该接入更新消息可包括更新后的5G RG的接入类型和更新后的签约用户列表中的至少一项，由AMF2基于更新后的5G RG的接入类型和/或更新后的签约用户列表确定UE的签约类型，以及UE是否被允许接入5G RG。
S121，AMF2向UE发送通知消息。该通知消息可用于将UE的变化后的签约类型通知给UE。在UE不能再使用5G RG接入核心网的条件下，该通知消息可携带重选指示，该重选指示用于通知UE重新选择5G RG进行接入。
S122，可选的，如果接收到AMF2发送的重选指示，则UE可释放与源5G RG的连接，并选择其他5G RG接入5GC。
通过图2所示的实施例一，UDM可以基于5G RG的签约数据区分UE的不同接入模 型以便于后续进行不同的业务控制，例如不同的QoS控制。尤其当网络资源受限时，网络侧可优先保证签约用户的接入，限制非签约用户接入。这样可实现5GC对更多接入方式的支持，提升了固网和移动网络的融合度。
(二)实施例二
实施例二与实施例一的主要区别在于，AMF2获取5G RG的标识信息的方式不同。
如图3所示，实施例二提供的网络接入方法可包括：
(1)第一阶段：UE发起接入请求。
S201，UE与5G RG建立连接，如通过WLAN接口建立连接。可选的，5G RG或者5G RG接入的W-5G AN设备可以为UE分配IP地址。
在S201之前，5G RG可以注册到5GC，5G RG注册的核心网网元为AMF1。关于5G RG注册到5GC的流程，具体可参考3gpp标准协议定义的注册流程，这里不赘述。
S202-S104，UE与W-5G AN设备建立连接。具体可参考实施例一中的S103-S105，这里不再赘述。
S205，UE可以基于UE与W-5G AN设备建立的连接，向W-5G AN设备发送请求消息。该请求消息可包括UE的标识信息，用于请求接入核心网(5GC)。该请求消息可以是NAS消息。W-5G AN设备可以转发该NAS消息到AMF1，具体可以参考S207。
(2)第二阶段：网络侧获取5G RG的标识信息和5G RG的签约数据。具体可包括：
S206-S207，W-5G AN设备识别5G RG，获得5G RG的线路标识(line ID)、或5G RG GUTI或N2接口5G RG临时标识等临时标识信息。此外，W-5GAN确定5G RG上下文，从5G RG上下文中获取5G RG连接的AMF1，并向AMF1发送请求消息。该请求消息可以包括UE的标识信息、5G RG的临时标识信息。上述5G RG的临时标识信息包括5G RG的线路标识(line ID)、或5G RG GUTI、或N2接口5G RG临时标识中的至少一个。该请求消息可以是N2消息，N2是W-5G AN设备与AMF之间的参考点。可选的，W-5G AN设备可以将UE发送的NAS消息(可参考S205)携带在该N2消息中，这样W-5G AN设备可以转发该NAS消息到AMF2，用于UE向AMF2请求接入核心网。
相应的，AMF1接收到W-5G AN设备发送的该请求消息，并基于5G RG的临时标识信息索引到5G RG上下文，并从5G RG的上下文中获取5G RG的永久标识信息。
具体的，W-5GAN识别5G RG的方案包括但不限于如下几种：
1)W-5GAN基于UE的local IP地址识别5G RG，即识别上述IP地址所属的IP地址空间由哪个5G RG分配，从而确定5G RG。
2)UE的IP地址由W-5G AN设备基于DHCP流程分配。在该IP地址分配过程中，W-5G AN设备可以从DHCP消息中获得5G RG连接的线路标识，即line ID。W-5G AN设备可以基于line ID与5G RG对应关系识别5G RG。
可选的，W-5G AN设备还可以基于5G RG的虚拟局域网(Virtual Local Area Network，VLAN)标识或UE当前的接入点标识识别出5G RG。
S208，AMF1可以为UE选择AMF2。具体的，AMF1可以基于切片选择信息或者UE的标识信息选择AMF2。
S209，AMF1向AMF2发送通知消息，该通知消息可以包括UE的标识信息、5G RG的永久标识信息。该通知消息可以是N1通知消息(N1messageNotify)，N1是UE与AMF之间的参考点。可选的，AMF1可以将UE发送的NAS消息(可参考S205)携带在该N1通知消息中。
相应的，AMF2可以接收到AMF2发送的该通知消息，并获得其中携带的5G RG的永久标识信息。
后续流程(S210-S220)与实施例一中的S112-S122相同，这里不再赘述。
(三)实施例三
本实施例中，由AMF1负责确定UE的接入模型(包括签约用户接入、非签约用户接入)，以及确定家庭网关是否允许UE接入。与实施例一、实施例二不同的是，实施例无需AMF2与UDM1交互来确定5G RG的签约数据。
如图4所示，实施例三提供的网络接入方法可包括：
S301-S306：UE发起接入请求。
具体可参考实施例一中的第一阶段，这里不再赘述。
S307-S309，AMF2获取5G RG的临时标识信息。与实施例一中的S107-S109相同，这里不再赘述。
S310，AMF2可以基于5G RG的临时标识信息查找到AMF1，并向AMF1发送请求消息。该请求消息可包括UE的标识信息和5G RG的临时标识信息。可选的，该请求消息还可以包括接入请求指示，表示该UE的标识信息所表征的UE请求使用该5G RG的临时标识信息所表征的5G RG接入核心网。
S311-S313，AMF1可以基于5G RG的临时标识信息查找5G RG的上下文。该5G RG的上下文中包含从UDM 1获取的5G RG的签约数据。然后，AMF1可以基于5G RG的签约数据确定UE的签约类型以及UE是否被允许接入5G RG。具体的，AMF1基于5G RG的签约数据确定UE的签约类型以及UE是否被允许接入5G RG的实现方式与实施例一中UDM采用的方式相同，这里不再赘述。
在确定出UE的签约类型以及UE是否被允许接入5G RG之后，AMF1可以向AMF2发送响应消息。该响应消息含可包括UE的签约类型的指示信息。相应的，AMF2可以接收到AMF1发送的该响应消息，并根据UE的签约类型确定该UE的业务管理策略(如QoS控制)。这样可实现网络侧区分UE的不同接入模型以便于后续进行不同的业务控制。
可选的，在UE为签约用户的条件下，AMF2还可以确定该UE被允许接入5G RG。
具体的，该响应消息还可包括接入指示信息，该接入指示信息指示UE是否被允许接入5G RG。当不允许UE接入时，该接入指示信息为拒绝接入指示；当允许UE接入时，该接入指示信息为允许接入指示。可选的，对于允许接入的UE，AMF2可以将该UE的签约类型存储在该UE的上下文中。
S314，可选的，如AMF 1可以存储AMF2的标识信息，可用于在后续5G RG的签约数据发生更新的条件下通知AMF2更新UE的签约类型。AMF1还可以存储UE的标识信息，可用于判断该UE的签约数据是否发生改变。如果该UE的签约类型从签约用户变为非签 约用户，则需要有针对性的通知该UE。
S315，AMF2可以基于鉴权认证流程完成UE的鉴权认证。关于鉴权认证流程，可具体参考3gpp相关协议，这里不再赘述。
S316-S317，AMF2基于现有注册流程或移动注册更新流程或周期性注册更新流程完成UE的接入过程，如允许接入流程或拒绝接入流程。关于该现有注册流程或移动注册更新流程或周期性注册更新流程，可具体参考3gpp标准中的相关协议，这里不再赘述。
可选的，AMF2可以向W-5G AN设备或者5G RG发送接入指示信息，该接入指示信息可用于指示UE是否被允许接入5G RG，如前述S117-S118。可选的，AMF2还可以向W-5G AN设备或者5G RG或UE发送UE的签约类型的指示信息和/或UE的业务管理策略(如QoS控制，或本地资源访问权限等)。具体的，接入指示信息、或/和UE的签约类型的指示信息和/或UE的业务管理策略通过N2接口消息由AMF2发送给W-5GAN，或者，通过NAS(Non-Access-Stratum)消息由AMF2发送给5G-RG或UE。
可选的，在接收到接入指示信息、UE的签约类型的指示信息和/或UE的业务管理策略的指示信息之后，W-5G AN设备可以向5G RG或者UE发送接入指示信息、UE的签约类型的指示信息和/或UE的业务管理策略的指示信息。具体的,接入指示信息、或/和UE的签约类型的指示信息和/或UE的业务管理策略由W-5GAN通过接入侧消息发给5G-RG或UE。上述接入侧消息如PPPoE消息或EAP(Extensible Authentication Protocol)消息或其他固网接入侧消息。
可选的，在接收到接入指示信息、UE的签约类型的指示信息和/或UE的业务管理策略的指示信息之后，5G RG可以向UE发送接入指示信息、UE的签约类型的指示信息和/或UE的业务管理策略的指示信息。具体的，接入指示信息、或/和UE的签约类型的指示信息和/或UE的业务管理策略由5G-RG通过空口侧消息发给UE。上述空口侧消息如PC5接口消息或EAP消息或WLAN接口消息或蓝牙接口消息等。
S318，UDM1上存储的5G RG的签约数据发生更新。例如，5G RG的接入类型由开放类型变成了私有类型，或者签约用户列表发生更新。
S319，UDM1向AMF1发送签约数据更新消息，该签约数据更新消息可携带5G RG的更新后的签约数据。
S320-S321，相应的，AMF1接收到UDM1发送的该签约数据更新消息，基于5G RG的更新后的签约数据确定UE的签约类型以及UE是否被允许接入5G RG。然后，AMF1可以根据AMF2的标识信息向AMF2发送接入更新消息。该接入更新消息实现可具体参考实施例一中提及的接入更新消息，这里不再赘述。
S322，AMF2向UE发送通知消息。该通知消息可用于将UE的变化后的签约类型通知给AMF2。在UE不能再使用5G RG接入核心网的条件下，该通知消息可携带重选指示，该重选指示用于通知UE重新选择5G RG进行接入。
S323，可选的，如果接收到AMF2发送的重选指示，UE可释放与源5G RG的连接，并选择其他5G RG接入5GC。
通过图4所示的实施例一，AMF可以基于5G RG的签约数据区分UE的不同接入模型以便于后续进行不同的业务控制，例如不同的QoS控制。尤其当网络资源受限时，网 络侧可优先保证签约用户的接入，限制非签约用户接入。这样可实现5GC对更多接入方式的支持，提升了固网和移动网络的融合度。
不限于图4所示，在实施例三中，AMF2还可以采用实施例二中描述的方式来获取5G RG的临时标识信息。
另外，本申请还提供了另一种网络接入方法。在该方法中，可以基于UE的签约数据来确定UE是否可以使用当前接入点接入5GC，以及UE的签约类型。如图5所示，该方法可包括：
(1)第一阶段：UE发起接入请求。具体可包括：
S401，UE与5G RG建立连接，如通过WLAN接口建立连接。可选的，5G RG或者5G RG接入的W-5G AN设备可以为UE分配IP地址。
在S401之前，5G RG可以注册到5GC，5G RG注册的核心网网元为AMF1。关于5G RG注册到5GC的流程，具体可参考3gpp标准协议定义的注册流程，这里不赘述。
S403-S405，UE与W-5G AN设备建立连接。具体可参考实施例一中的S103-S105，这里不再赘述。
S406，UE可以基于UE与W-5G AN设备建立的连接，向W-5G AN设备发送请求消息。该请求消息可包括UE的标识信息，用于请求接入核心网(5GC)。该请求消息可以是NAS消息。W-5G AN设备可以转发该NAS消息到AMF2，具体可以参考S409。
(2)第二阶段：网络侧获取UE的当前接入点的标识信息和签约数据。具体可包括：
S407，5G RG向W-5G AN设备发送UE的当前接入点的标识信息。UE的当前接入点为UE当前连接到的5G RG。UE的当前接入点的标识信息可用来在核心网侧索引到UE的签约数据。接入点标识可以包括服务集标识(service set identifier，SSID)，统一扩展服务集标识(homogeneous extended service set，HESSID)等。关于如何获取UE的当前接入点的标识，本申请不作限制。例如，5G RG发送PPPoE消息，或其他控制面消息，该消息可以携带UE的当前接入点的标识信息。可选的，该消息还可携带UE的IP地址。
可选的，S406中UE向W-5G AN设备发送的请求消息中还可携带UE的当前接入点的标识信息，该当前接入点的标识信息可由UE获取到。如S402所示，在与5G RG建立连接之后，UE可以通过过ANQP查询获取该当前接入点的标识信息。具体的，UE可接收到5G RG发送的ANQP消息或EAP消息，这些消息中含有当前接入点的标识信息。
S408，W-5G AN设备可以为UE选择AMF2。具体的，W-5G AN设备可以基于切片选择信息或者UE的标识信息选择AMF2。
S409，W-5G AN设备可以向AMF2发送请求消息，该请求消息可以包括UE的标识信息、UE的当前接入点的标识信息，用于UE请求接入核心网。该请求消息可以是N2消息，N2是W-5G AN设备与AMF之间的参考点。可选的，W-5G AN设备可以将UE发送的NAS消息(可参考S406)携带在该N2消息中，这样W-5G AN设备可以转发该NAS消息到AMF2，用于UE向AMF2请求接入核心网。
S410，AMF2向UDM2发送请求消息，该请求消息可包括UE的标识信息、UE的当前接入点的标识信息。
(3)第三阶段：核心网基于UE的签约数据确定UE的接入模型。具体可包括：
S411，相应的，UDM2接收到AMF2发送的该请求消息。UDM2可以基于该请求消息中包含的当前接入点的标识信息获取到UE的签约数据。UDM2可以UE的签约数据确定UE的签约类型。UDM2还可以基于UE的签约数据确定UE是否被允许接入当前接入点。
本申请中，UE的签约数据可用于指示UE为哪些接入点的签约用户。
具体的，UE的签约数据可包括以下信息：
1)签约接入点列表：包含至少一个接入点的标识信息，表示UE为这至少一个接入点的签约用户。如果UE的当前接入点的标识信息属于这至少一个接入点的标识信息，则表明UE为当前接入点的签约用户。应理解的，如果UE为当前接入点的签约用户，则UE被允许接入当前接入点。
2)非签约接入点列表：包含至少一个接入点的标识信息，表示UE为这至少一个接入点的非签约用户。如果UE的当前接入点的标识信息属于这至少一个接入点的标识信息，则表明UE为当前接入点的非签约用户。
本申请中，如果UE的当前接入点的标识信息不属于上述任一列表，则表明UE不被允许连接到当前接入点。接入点列表(签约接入点列表或非签约接入点列表)包含UE可以接入的接入点的标识。当UE只被允许在少数几个接入点接入时，可以采用白名单方式缩短列表长度，节省参数存储空间。这里，白名单仅记录有UE能够接入的接入点的标识信息。
S412，UDM2可以基于UE的签约数据中的鉴权向量完成UE的鉴权认证流程。关于鉴权认证流程，可具体参考3gpp标准中的相关协议，这里不再赘述。
S413，UDM2可以向AMF2发送响应消息。该响应消息含可包括UE的签约类型的指示信息。相应的，AMF2可以接收到UDM2发送的该响应消息，并根据UE的签约类型确定该UE的业务管理策略(如QoS控制)。这样可实现网络侧区分UE的不同接入模型以便于后续进行不同的业务控制。
可选的，在UE为签约用户的条件下，UDM2还可以确定该UE被允许接入5G RG。
具体的，该响应消息还可包括接入指示信息，该接入指示信息指示UE是否被允许接入当前接入点。当不允许UE接入时，该接入指示信息为拒绝接入指示；当允许UE接入时，该接入指示信息为允许接入指示。可选的，对于允许接入的UE，UDM2可以将该UE的签约类型存储在该UE的上下文中。
在一些可选的实施例中，UDM2还可以将上述签约接入点列表和/或上述非签约接入点列表发送给AMF2，由AMF2来确定UE的签约类型，以及UE是否被允许接入当前接入点。具体的，AMF2确定UE的签约类型以及UE是否被允许接入当前接入点的实现方式和UDM2采用的方式可以相同，这里不再赘述。
S414-S415，AMF2基于现有注册流程或移动注册更新流程或周期性注册更新流程完成UE的接入过程，如允许接入流程或拒绝接入流程。关于该现有注册流程或移动注册更新流程或周期性注册更新流程，可具体参考3gpp标准中的相关协议，这里不再赘述。
可选的，AMF2可以向W-5G AN设备或者5G RG发送UE的签约类型的指示信息和/或UE的业务管理策略(如QoS控制)。可选的，AMF2还可以向W-5G AN设备或者5G RG发送接入指示，该接入指示用于指示UE是否被允许接入当前接入点。
(4)第四阶段：UE的签约数据发生更新。具体可包括：
S416，UDM2上存储的UE的签约数据发生更新。例如，签约接入点列表和/或非签约接入点列表发生更新。
可选的，UDM2可以基于更新后的UE的签约数据重新确定UE的签约类型，以及重新确定UE是否被允许接入当前接入点。
可选的，UDM2还可以将更新后的UE的签约数据发送给AMF2，由AMF2基于更新后的UE的签约数据重新确定UE的签约类型以及UE是否被允许接入当前接入点。
S417，在UE的签约数据发生更新的条件下，UDM2可以根据AMF2的标识信息向AMF2发送接入更新消息。
具体的，该接入更新消息实现如下：
1)如果更新后的签约接入点列表和/或非签约接入点列表表明UE的签约发生改变，则该接入更新消息可包括UE的更新后的签约类型的指示信息，用以通知AMF2调整UE的接入模型，以及UE的业务管理策略。
2)如果当前接入点的标识信息不属于更新后的签约接入点列表和非签约接入点列表中任一项，则该接入更新消息可包括拒绝接入指示。
S418，AMF2向UE发送通知消息。该通知消息可用于将UE的变化后的签约类型通知给UE。在UE不能再使用当前接入点接入核心网的条件下，该通知消息可携带重选指示，该重选指示用于通知UE重新选择接入点进行接入。
S419，可选的，如果接收到AMF2发送的重选指示，则UE可释放与当前接入点的连接，并选择其他接入点接入5GC。
通过图5所示的实施例四，核心网可以基于UE的签约数据区分UE的不同接入模型以便于后续进行不同的业务控制，例如不同的QoS控制。尤其当网络资源受限时，网络侧可优先保证签约用户的接入，限制非签约用户接入。这样可实现5GC对更多接入方式的支持，提升了固网和移动网络的融合度。
在前述基于5G RG的签约数据来确定家庭网关是否允许UE接入的方案中，网络侧还可以通过下述方式获取5G RG的标识信息：UE向核心网发送NAS消息，该NAS消息中包含5G-RG标识信息。该5G-RG的标识信息可以是5G-RG发送给UE的，也可以是5G-RG经由W-5G AN设备发送给UE的。上述5G RG的标识信息(即5G RG ID)包括如5G RG 5G-GUTI，或5G RG SUCI(Subscription Concealed Identifier签约的加密的标识)，或5G-RG N2接口标识等。
如图11所示，网络侧获取5G RG的标识信息的具体流程可包括：
S501，UE与5G-RG建立层2(layer 2，L2)连接。
S502，5G-RG向UE发送EAP请求或者Identity请求。可选的EAP请求或者Identity请求可以包含5G RG的标识信息，如5G-RG ID。
S503，在接收到5G-RG发送的EAP请求消息或者Identity请求消息后，UE回复EAP响应消息/Identity消息给5G-RG。
S504，5G-RG向W-5G AN发送鉴权、授权和记账(Authentication、Authorization、Accounting，AAA)消息，如鉴权请求消息。该AAA消息可以携带EAP消息给W-5GAN。可选的，AAA消息还可以携带5G-RG ID。
S505，W-5G AN发送EAP请求/5G-Start消息。该EAP请求/5G-Start消息可以包含5G-RG ID。该5G-RG ID可以是在S504中接收到的，如5G RG 5G-GUTI，或5G RG SUCI(Subscription Concealed Identifier签约的加密的标识)。该5G-RG ID也可以是其他5G-RG标识，如5G-RG N2接口标识。
S506-S507，5G-RG转发EAP请求/5G-Start消息给UE。可选的，如S506所示，5G-RG可以解析EAP请求/5G-Start消息，如果EAP请求/5G-Start消息中没有5G-RG ID，则5G-RG可以在EAP请求/5G-Start消息中添加5G-RG ID。
S508，UE收到EAP-Req/5G-Sart消息,从消息中获取5G-RG ID，并发送NAS消息，NAS消息中携带有5G-RG ID。上述5G-RG ID用于AMF查找5G RG上下文信息，从而获取5G RG永久标识(即5G RG SUPI)。
可选的，NAS消息还可以携带Host UE指示。该Host UE指示该UE请求以host UE身份(即签约用户身份)接入核心网。这样，核心网可以基于Host UE指示触发UE接入模型的确定流程，具体可参考前述实施例一至三。可选的，5G-RG ID可以作为Host UE指示，即5G-RG ID指示该UE请求以host UE身份接入核心网。AMF基于Host UE指示或基于上述NAS消息中含有5G-RG ID信息判断UE请求以host UE身份接入核心网。网络侧基于前文实施例方案判断UE是否为host UE。如果UE请求以host身份接入，但上述UE不是Host UE，则AMF拒绝UE的接入请求。此外，5G-RG ID也可以用来表示UE通过5G RG接入核心网。AMF基于上述NAS消息中含有5G-RG ID信息判断UE通过5G RG接入核心网。当UE通过5G RG接入核心网时，AMF判断UE的设备类型，即判断UE为签约的用户设备或非签约的用户设备。
AMF基于5G RG ID查找5G RG上下文。如果AMF上没有存储上述5G RG的上下文信息，则AMF基于5G RG ID选择存储5G RG上下文的另一AMF(目标AMF)。具体的，AMF发送请求消息给目标AMF，上述请求消息中含有5G RG ID与永久标识请求指示(如SUPI requested)。目标AMF基于5G RG ID查找5G RG上下文，并回复5G RG永久标识给AMF。
在前述实施例一至三中，AMF所执行的流程也可以让SMF来执行，即前述实施例一至三中的AMF可以替换成SMF。或者，AMF也可以将Host UE指示通知给SMF，具体的：AMF2可以将Host UE或Guest UE指示发送给PCF或者SMF，PCF基于Host UE或Guest UE指示下发QoS策略。如果AMF2将Host UE或Guest UE指示发送给SMF，则由SMF将Host UE或Guest UE指示上报PCF，PCF基于Host/Guest UE指示下发不同的QoS策略。例如，对于Host UE，PCF在QoS策略中分配高优先级参数，如QoS参数设置为资源不允许被抢占，或可以抢占其他用户资源等。对于Guest UE，PCF在QoS策略中分配低优先级参 数，如QoS参数设置为资源允许被抢占，或不可以抢占其他用户资源等。
此外，当5G RG ID为SUCI时，AMF2可以基于SUCI查找存储5G RG签约数据的UDM。并发送请求消息给UDM。上述消息中含有5G RG SUCI与UE标识。UDM基于5G RG SUCI查找5G RG签约数据，并基于上述签约数据判断UE的设备类型，同前文实施例。UDM发送回复消息给AMF2，上述回复消息中除含有前文实施例中描述的参数之外，还含有5G RG附着的AMF1标识，即为5G RG服务的AMF1标识。AMF2存储5G RG ID与AMF1标识。
在网络侧执行UE接入模型的确定流程之前，终端设备(UE或者5G RG)还需要注册到网络，并获取PDU会话相关的接入网侧参数。下面以5G RG为例，描述相关技术方案(UE涉及同样的流程，不赘述)。如图12所示，具体包括：
S601，5G-RG注册到AMF1。AMF1为5G-RG提供服务。
S602，W-5G AN在获知5G-RG鉴权成功(如W-5GAN从N2接口获取鉴权成功指示，该指示可以为安全秘钥Key)后，W-5GAN可以分配对应5G-RG的NAS IP地址信息。W-5GAN还可以分配对应5G RG的用户面地址，如用户面IP地址(user plane IP address)。然后，W-5G AN可以向5G-RG对发送消息(如EAP消息)，该消息中可以携带对应5G-RG的NAS IP地址信息。可选的，该消息还可以包括对应5G RG的用户面地址信息。
其中，对应5G-RG的NAS IP地址信息用于承载后续的5G-RG发送的NAS消息。对应5G-RG的用户面地址信息用于承载后续5G-RG发送的用户面数据包。在5G-RG封装用户面数据包时，增加IP头，并将上述新增IP头中的目的地址设置为5G-RG对应的用户面IP地址。
可选的，W-5GAN可以为5G RG分配UE IP地址。该消息(如EAP消息)还可以携带为5G RG分配UE IP地址。
S603，5G-RG向W-5G AN发送请求消息，该请求消息可以为DHCP discover消息或DHCP request消息等，用于请求W-5G AN为5G-RG分配UE IP地址。该请求消息可以携带UE标识信息，如UE的网络接入标识(Network Access Identity，NAI)，或UE MAC地址，或UE IP地址(可以从S602中获取)。
可选的，该请求消息可以携带5G-RG对应的NAS IP地址和/或5G-RG对应的用户面IP地址。可选的，该请求消息还可以携带NAS指示或用户面指示中的至少一个，NAS指示用于指示该消息中携带的地址是NAS IP地址，用户面指用于指示该消息中携带的地址是用户面IP地址。
S604，W-5GAN基于5G RG的标识信息为5G RG分配UE IP地址。
具体的，W-5GAN可以从S603中发送的DHCP消息头中获取5G RG的标识信息，并基于5G RG的标识信息查找UE上下文，UE上下文中包含5G RG鉴权成功的指示信息。W-5GAN为鉴权成功的5G RG分配UE IP地址。如果在S602中已经为5G RG分配了UE IP地址，则W-5GAN可以在当前步骤中分配相同的或不同的UE IP地址。
S605，W-5GAN向5G RG发送响应消息(EAP消息或DHCP ACK消息)，该响应消息携带有W-5GAN为5G RG分配的UE IP地址。
S606，5G-RG发起NAS消息，如PDU会话建立请求消息。将W-5GAN为5G RG分配的UE IP地址作为封装该NAS消息的源地址，将W-5GAN分配的对应5G RG的NAS IP地址作为封装该NAS消息的目的地址。
这样，W-5GAN便可以根据IP头中的NAS IP地址识别IP数据包携带的为NAS消息，并将该NAS消息通过N2接口转发给AMF。然后，AMF可以处理该NAS消息，基于现有流程完成5G-RG的PDU会话建立流程。在该流程中，AMF通过N2接口向W-5GAN发送PDU会话的标识信息(如PDU会话ID)，这样W-5GAN便可获取到PDU会话的PDU会话ID。
S607，在5G-RG接收到PDU会话建立接受消息(PDU session establishment Accept)后，5G-RG向W-5GAN发起请求消息，该请求消息可以为DHCP请求消息(DHCP request)或DHCP信息消息(DHCP information)。该请求消息中可以携带PDU会话的标识信息(如PDU会话ID)。该请求消息用于请求W-5GAN分配PDU会话对应的W-5GAN IP地址。
S608，在收到5G-RG发送的请求消息之后，W-5GAN可以基于该请求消息中的PDU会话ID分配PDU会话对应的W-5GAN IP地址，并存储该W-5GAN IP地址与该PDU会话ID对应关系。该PDU会话对应的W-5GAN IP地址即W-5GAN对应PDU会话的地址信息。
可选的，PDU会话对应的W-5GAN IP地址可以作为PDU会话的标识信息，可以用于用户面建立W-5GAN为该PDU会话分配的会话资源与该PDU会话的对应关系。
S609，W-5GAN向5G-RG发送响应消息(如DHCP ACK消息)，该响应消息中可以携带W-5GAN对应PDU会话的地址信息。可选的，该响应消息中还可以携带该W-5GAN IP地址对应的PDU会话ID。
其中，W-5GAN对应PDU会话的地址信息用作5G-RG发送该PDU会话的用户面数据包的目标IP地址。
S610，5G RG发送用户面数据包。具体实现在后续内容中详细介绍。
综合上述步骤可以看出，终端设备(5G RG或者UE)发送用户面数据包所需要的目的地址可以包括两种实现形式：1.对应终端设备的用户面地址信息(通过S602获得)；2.W-5GAN对应PDU会话的地址信息(通过S607-S608获得)。其中，W-5GAN对应PDU会话的地址信息是一种更细粒度的地址，能够直接指示出用户面数据包是发向哪一个PDU会话的。
下面介绍基于目的地址的这两种实现形式，分别描述5G-RG发送用户面数据包的方式。
1)方式一：用户面数据包外封装有通用路由封装(Generic Routing Encapsulation，GRE)头，GRE头外封装有IP头。GRE头中可以携带QoS流的标识信息(QoS flow ID，QFI)/反射QoS指示(reflective QoS indication，RQI)。其中，IP头中的源地址为UE IP地址，IP头中的目的地址为W-5GAN对应PDU会话的地址信息。
在W-5GAN接收到5G RG发送的PDU会话的用户面数据包之后，W-5GAN可以基于该W-5GAN对应PDU会话的地址信息识别出PDU会话，并在去掉GRE头与IP头后，利用识别出的PDU会话对应的隧道发送该PDU会话的用户面数据包。
此方式一中所提及的W-5GAN对应PDU会话的地址信息是通过S607-S608获得的。
2)方式二：用户面数据包外封装有GRE头，GRE头外封装有IP头。GRE头中可以 携带QoS流的标识信息(QoS flow ID，QFI)/(reflective QoS indication，RQI)。其中，GRE头中携带PDU会话ID。IP头中的源地址为UE IP地址，IP头中的目的地址为用户面地址信息。
在W-5GAN接收到5G RG发送的用户面数据包之后，W-5GAN可以基于该PDU会话ID识别出PDU会话，并在去掉GRE头与IP头后，利用PDU会话ID对应的隧道发送该PDU会话的用户面数据包。
此方式二中所提及的用户面地址信息是通过S602获得的。
在网络侧执行UE接入模型的确定流程之后，核心网还需要下发针对UE的业务管理策略，如QoS策略或本地资源控制策略等，将细化了网络侧如何基于Host UE/Guest UE实现不同的QoS控制与本地业务控制等。下面结合图13，描述相关技术方案。
S701,在通过图12所示实施例将5G RG注册到AMF2，并且AMF2基于前述实施例一至三确定出UE的接入模型之后，AMF2可以向PCF发送第一消息，例如策略关联建立/修改消息(policy association setup\modify)。第一消息可以包括UE的设备分类的指示信息。不限于Host UE/Guest UE指示信息，该设备分类的指示信息还可以包括设备类型的指示信息，本申请不限制设备分类所基于的方式。第一消息可用于请求PCF下发针对UE的业务管理策略，业务管理策略可包括QoS策略、本地资源控制策略中的至少一个。
可选的，AMF2还可以将UE的设备分类的指示信息发送给SMF，由SMF来向PCF发送携带该设备分类的指示信息的第一消息。
S702,PCF向AMF2或SMF发送第二消息，第二消息可包括PCF基于UE的设备分类确定的针对UE的业务管理策略。也即是说，在接收到AMF或者SMF发送的第一消息后，PCF可以向SMF或AMF发送第二消息。
S703-S707，AMF2完成UE的注册路程。对于鉴权成功的UE，W-5GAN分配NAS IP地址，及可选的用户面IP地址。具体可参考图12实施例中的S602。
S708，AMF2将UE的设备分类的指示信息(如Host UE/Guest UE指示信息)与UE的标识信息发送给AMF1。其中，UE的标识信息可以为UE MAC地址，或UE 5G GUTI，或UE SUPI，或其他标识信息中的至少一个。
可选的，AMF2可以将UE的标识信息发送给AMF1。AMF1可以判断出UE的分类，如UE为Host UE或Guest UE。
S709，基于S701-S702从PCF获取到的业务控制策略，AMF1可以基于UE的设备分类的指示信息(如Host UE/Guest UE指示信息)向5G-RG下发针对UE的业务管理策略，如QoS策略或本地资源控制策略等。具体的，AMF1可以通过发送UE配置更新消息(UE configuration update)或NAS通知消息等下发针对UE的业务管理策略。UE配置更新消息或NAS通知消息中可以携带UE的标识信息，及UE的设备分类的指示信息。
可选的，本地资源控制策略可包括本地设备列表，如本地设备MAC地址列表，或本地设备IP地址列表等。本地设备可以只允许Host UE接入。本地设备可以是本地打印机等设备。
相应的，在接收到AMF1发送的UE配置更新消息或NAS通知消息后，5G-RG可以对应存储UE的标识信息与UE的设备分类的指示信息(如Host UE/Guest UE指示信息)。可选的，5G-RG还可以对应存储UE的标识信息与网络侧下发的业务策略。
在一些可选实施例中，5G-RG可以依据本地资源控制策略控制UE接入，具体流程可包括：5G-RG可接收AMF发送的UE的标识信息和UE的设备分类的指示信息，然后获取本地资源接入策略，最后根据UE的设备分类的指示信息和本地资源接入策略控制UE接入本地资源。
可选的，5G-RG可以接收AMF或者SMF发送的5G RG的本地资源接入策略。
可选的，如果AMF没有发送针对UE的本地资源控制策略，则5G-RG可以配置本地资源控制策略。该本地资源控制策略可包括本地设备MAC地址列表，或本地设备IP地址列表等，其中，本地设备可以只允许Host UE接入。本地设备可以是本地打印机等设备。
后续，UE发起本地业务，即UE发起请求到5G-RG，请求中携带有的标识信息。5G-RG可以基于的标识信息识别出UE，并基于存储的UE的标识信息与UE的设备分类的指示信息(如Host UE/Guest UE指示信息)判断出UE的分类(如UE是否为Host UE)。可选的，如果UE是host UE，则可以建立UE与本地设备之间的连接。可选的，5G-RG也可以回复本地设备MAC地址，或IP地址给UE。
S710，UE发起到核心网的PDU会话，分配相应的PDU会话ID。在PDU会话建立成功后，UE可发送请求消息给W-5GAN，以请求获取W-5GAN分配的PDU会话对应的W-5GAN IP地址，具体可参考图12实施例中S607-S609，这里不再赘述。
参考图6，图6示出了本申请的一些实施例提供的终端200。如图6所示，终端200可包括：输入输出模块(包括音频输入输出模块218、按键输入模块216以及显示器220等)、用户接口202、一个或多个终端处理器204、发射器208、接收器210、耦合器212、天线214以及存储器206。这些部件可通过总线或者其他方式连接，图6以通过总线连接为例。其中：
通信接口201可用于终端200与其他通信设备，例如基站，进行通信。具体的，所述基站可以是图6所示的网络设备400。通信接口201是指终端处理器204与收发系统(由发射器208和接收器210构成)之间的接口，例如LTE中的X1接口。具体实现中，通信接口201可包括：全球移动通信系统(Global System for Mobile Communication，GSM)(2G)通信接口、宽带码分多址(Wideband Code Division Multiple Access，WCDMA)(3G)通信接口，以及长期演进(Long Term Evolution，LTE)(4G)通信接口等等中的一种或几种，也可以是4.5G、5G或者未来新空口的通信接口。不限于无线通信接口，终端200还可以配置有有线的通信接口201，例如局域接入网(Local Access Network，LAN)接口。
天线214可用于将传输线中的电磁能转换成自由空间中的电磁波，或者将自由空间中的电磁波转换成传输线中的电磁能。耦合器212用于将天线214接收到的移动通信信号分成多路，分配给多个的接收器210。
发射器208可用于对终端处理器204输出的信号进行发射处理，例如将该信号调制在授权频段的信号，或者调制在非授权频段的信号。接收器210可用于对天线214接收的移动通信信号进行接收处理。例如，接收器210可以解调已被调制在非授权频段上的接收信号，也可以解调调制在授权频段上的接收信号。在本申请的一些实施例中，发射器208和接收器210可看作一个无线调制解调器。在终端200中，发射器208和接收器210的数量均可以是一个或者多个。
除了图6所示的发射器208和接收器210，终端200还可包括其他通信部件，例如GPS模块、蓝牙(Bluetooth)模块、无线高保真(Wireless Fidelity，Wi-Fi)模块等。不限于上述表述的无线通信信号，终端200还可以支持其他无线通信信号，例如卫星信号、短波信号等等。不限于无线通信，终端200还可以配置有有线网络接口(如LAN接口)来支持有线通信。
所述输入输出模块可用于实现终端200和用户/外部环境之间的交互，可主要包括音频输入输出模块218、按键输入模块216以及显示器220等。具体实现中，所述输入输出模块还可包括：摄像头、触摸屏以及传感器等等。其中，所述输入输出模块均通过用户接口202与终端处理器204进行通信。
存储器206与终端处理器204耦合，用于存储各种软件程序和/或多组指令。具体实现中，存储器206可包括高速随机存取的存储器，并且也可包括非易失性存储器，例如一个或多个磁盘存储设备、闪存设备或其他非易失性固态存储设备。存储器206可以存储操作系统(下述简称系统)，例如ANDROID，IOS，WINDOWS，或者LINUX等嵌入式操作系统。存储器206还可以存储网络通信程序，该网络通信程序可用于与一个或多个附加设备，一个或多个终端设备，一个或多个网络设备进行通信。存储器206还可以存储用户接口程序，该用户接口程序可以通过图形化的操作界面将应用程序的内容形象逼真的显示出来，并通过菜单、对话框以及按键等输入控件接收用户对应用程序的控制操作。
在本申请的一些实施例中，存储器206可用于存储本申请的一个或多个实施例提供的信号传输方法在终端200侧的实现程序。关于本申请的一个或多个实施例提供的信号传输方法的实现，请参考后续实施例。
终端处理器204可用于读取和执行计算机可读指令。具体的，终端处理器204可用于调用存储于存储器206中的程序，例如本申请的一个或多个实施例提供的信号传输方法在终端200侧的实现程序，并执行该程序包含的指令。
可以理解的，终端200可以是图2示出的无线通信系统100中的终端103，可实施为移动设备，移动台(mobile station)，移动单元(mobile unit)，无线单元，远程单元，用户代理，移动客户端等等。
需要说明的，图6所示的终端200仅仅是本申请的一种实现方式，实际应用中，终端200还可以包括更多或更少的部件，这里不作限制。
参考图7，图7示出了本申请的一些实施例提供的家庭网关300。如图7所示，家庭网关300可包括：一个或多个处理器301、存储器302、有线家庭网络接口303、无 线家庭网络305和以太网模块306。这些部件可通过总线304或者其他方式连接，图7以通过总线连接为例。其中：
以太网模块306实现家庭网关与外部网络的物理连接，用户可通过互联网(Internet)对家庭内部网络进行远程访问和控制。家庭网关与Internet的连接可采用有线的方式，也可采用基于移动无线通讯的方法实现。
无线家庭网络接口303和有线家庭网络接口305都属于家庭内部网络的组网方式。其中，有线方式有双绞线、电话线、电力线等最为典型。无线方式以IrDA、Bluetooth、IEEE802.11、Zigbee、UWB等为代表。而无线连接是实现家庭网络最理想的方式，可以避免在家庭内部重新布线。
存储器302与处理器301耦合，用于存储各种软件程序和/或多组指令。具体的，存储器302可包括FLASH和SDRAM芯片，FLASH芯片可用于存储家庭网关中的嵌入式操作系统、公共网关接口(Common Gateway Interface，CGI)网关应用程序、家庭网络服务器以及支持各种服务所需要的文件系统。存储器302可以存储操作系统，例如uCOS、VxWorks、RTLinux等嵌入式操作系统。存储器302还可以存储网络通信程序，该网络通信程序可用于与一个或多个附加设备，一个或多个终端设备，一个或多个网络设备进行通信。
在本申请的一些实施例中，存储器302可用于存储本申请的一个或多个实施例提供的网络接入方法，以及本申请的图11-13实施例提供的技术方案在家庭网关300侧的实现程序。关于本申请的一个或多个实施例提供的网络接入方法，以及本申请的图11-13实施例提供的技术方案的实现，请参考相关实施例。
处理器301可用于读取和执行计算机可读指令。具体的，处理器301可用于调用存储于存储器302中的程序，例如本申请的一个或多个实施例提供的网络接入方法，以及本申请的图11-13实施例提供的技术方案在家庭网关300侧的实现程序，并执行该程序包含的指令。
可以理解的，家庭网关300可以是图1A-1C示出的通系统架构中的5G RG。图7所示的家庭网关300仅仅是本申请实施例的一种实现方式，实际应用中，家庭网关300还可以包括更多或更少的部件，这里不作限制。
参考图8，图8示出了本申请的一些实施例提供的接入网设备400。如图8所示，接入网设备400可包括：一个或多个处理器401、存储器403、通信接口405。这些部件可通过总线404或者其他方式连接，图8以通过总线连接为例。其中：
通信接口405可用于接入网设备400与其他通信设备，例如家庭网关、核心网设备，进行通信。具体的，该家庭网关可以是图7所示的应用服务器300，该核心网设备可以是图9所示的核心网设备500。具体的，通信接口405可以包括有线通信接口，例如广域网(WAN)接口、局域接入网(LAN)接口等。不限于有线通信接口，在一些可能的实施例中，通信接口405还可包括无线通信接口，如无线局域网(WLAN)接口等。
存储器403与处理器401耦合，用于存储各种软件程序和/或多组指令。具体的，存储器403可包括高速随机存取的存储器，并且也可包括非易失性存储器，例如一个或 多个磁盘存储设备、闪存设备或其他非易失性固态存储设备。存储器403可以存储操作系统(下述简称系统)，例如uCOS、VxWorks、RTLinux等嵌入式操作系统。存储器403还可以存储网络通信程序，该网络通信程序可用于与一个或多个附加设备，一个或多个终端设备，一个或多个网络设备进行通信。
在本申请的一些实施例中，存储器403可用于存储本申请的一个或多个实施例提供的网络接入方法，以及本申请的图11-13实施例提供的技术方案在接入网设备400侧的实现程序。关于本申请的一个或多个实施例提供的网络接入方法，以及本申请的图11-13实施例提供的技术方案的实现，请参考相关实施例。
处理器401可用于读取和执行计算机可读指令。具体的，处理器401可用于调用存储于存储器405中的程序，例如本申请的一个或多个实施例提供的网络接入方法，以及本申请的图11-13实施例提供的技术方案在接入网设备400侧的实现程序，并执行该程序包含的指令。
可以理解的，接入网设备400可以是图1A-1C示出的系统架构中的W-5G AN。图8所示的接入网设备400仅仅是本申请实施例的一种实现方式，实际应用中，接入网设备400还可以包括更多或更少的部件，这里不作限制。
参考图9，图9示出了本申请的一些实施例提供的核心网设备500。如图9所示，核心网设备500可包括：一个或多个处理器501、存储器503、通信接口505。这些部件可通过总线504或者其他方式连接，图9以通过总线连接为例。其中：
通信接口505可用于核心网设备500与其他通信设备，例如接入网设备，进行通信。具体的，该接入网设备可以是图8所示的接入网设备400。具体的，通信接口505可以包括有线通信接口，例如广域网(WAN)接口、局域接入网(LAN)接口等。不限于有线通信接口，在一些可能的实施例中，通信接口505还可包括无线通信接口，如无线局域网(WLAN)接口等。
存储器503与处理器501耦合，用于存储各种软件程序和/或多组指令。具体的，存储器503可包括高速随机存取的存储器，并且也可包括非易失性存储器，例如一个或多个磁盘存储设备、闪存设备或其他非易失性固态存储设备。存储器503可以存储操作系统(下述简称系统)，例如uCOS、VxWorks、RTLinux等嵌入式操作系统。存储器503还可以存储网络通信程序，该网络通信程序可用于与一个或多个附加设备，一个或多个终端设备，一个或多个网络设备进行通信。
在本申请的一些实施例中，存储器503可用于存储本申请的一个或多个实施例提供的网络接入方法，以及本申请的图11-13实施例提供的技术方案在核心网设备500侧的实现程序。关于本申请的一个或多个实施例提供的网络接入方法，以及本申请的图11-13实施例提供的技术方案的实现，请参考相关实施例。
处理器501可用于读取和执行计算机可读指令。具体的，处理器501可用于调用存储于存储器505中的程序，例如本申请的一个或多个实施例提供的网络接入方法，以及本申请的图11-13实施例提供的技术方案在核心网设备500侧的实现程序，并执行该程序包含的指令。
可以理解的，核心网设备500可以是图1A-1C示出的系统架构中的核心网设备，可实施为AMF网元、UDM网元等等。图9所示的核心网设备500仅仅是本申请实施例的一种实现方式，实际应用中，核心网设备500还可以包括更多或更少的部件，这里不作限制。
参考图10，图10示出了本申请提供一种通信系统及通信装置。通信系统10可包括如下通信装置：用户设备60、家庭网关70、接入网设备80、接入和移动性管理网元90和统一数据管理网元100。通信系统10以及其中的通信装置可以用来实施图2-图4分别对应的实施例描述的一种网络接入方法。下面展开描述。
当通信系统10以及其中的通信装置可以用来实施图2-图3分别对应的实施例描述的一种网络接入方法时，各个通信装置的具体实现可以如下：
如图10所示，用户设备60可包括：处理单元61和通信单元63。其中：
处理单元61可用于生成用户设备60待发送的信息以及解析用户设备60接收到的信息；
通信单元63可用于获取用户设备60连接的家庭网关70的临时标识信息；
通信单元63还可用于向接入网设备80发送请求消息，用于请求接入核心网。请求消息可包括：家庭网关70的临时标识信息、用户设备60的标识信息。
在一些可选的实施例中，通信单元63可用于接收家庭网关70发送的家庭网关70的临时标识信息。具体的，在与家庭网关70建立连接之后，通信单元63可以通过过接入网查询协议ANQP)查询获取家庭网关70的临时标识信息。具体的，通信单元63可接收到家庭网关70发送的ANQP消息或EAP消息，这些消息中含有家庭网关70的临时标识。或者，通信单元63可以通过EAP消息获取5G-RG的临时标识信息。具体的，5G-RG在发送给UE的EAP消息中携带5G-RG的临时标识。该EAP消息可以为EAP-Request/Identity消息或EAP-request/5G-start消息。
可以理解的，关于用户设备60的各个功能单元的具体实现可参考图2-3分别对应的方法实施例，这里不再赘述。
如图10所示，家庭网关70可包括：处理单元71和通信单元73。其中：
处理单元71可用于生成，家庭网关70待发送的信息以及解析家庭网关70接收到的信息；
通信单元73可用于向接入网设备80发送家庭网关70的临时标识信息。
具体的，家庭网关70的临时标识信息可用来在核心网侧索引到家庭网关70的上下文。家庭网关70的临时标识可以包括GUTI。关于通信单元73如何发送家庭网关70的临时标识信息，本申请对此不作限制。例如，通信单元73可发送PPPoE消息，或其他控制面消息，该消息可以携带家庭网关70的临时标识信息。可选的，该消息还可携带UE的IP地址。
可以理解的，关于家庭网关70的各个功能单元的具体实现可参考图2-3分别对应的方法实施例，这里不再赘述。
如图10所示，接入网设备80可包括：处理单元81和通信单元83。其中：
处理单元81可用于生成接入网设备80待发送的信息以及解析接入网设备80接收到的信息；
通信单元83可用于获取用户设备60连接的家庭网关70的临时标识信息；
通信单元83还可用于向接入和移动性管理功能网元90发送消息，消息包括：家庭网关70的临时标识信息、用户设备60的标识信息。用户设备60的标识信息来自用户设备60。
在一些可选的实施例中，为了获取家庭网关70的临时标识信息，通信单元83可具体用于接收用户设备60发送的临时标识信息，或，接收家庭网关70发送的临时标识信息。
在一些可选的实施例中，为了获取家庭网关70的临时标识信息，处理单元81可具体用于基于用户设备60的IP地址或固网网关连接的线路标识或VLAN标识或用户设备60的接入点的标识信息识别出临时标识信息。
可以理解的，关于接入网设备80的各个功能单元的具体实现可参考图2-3分别对应的方法实施例，这里不再赘述。
如图10所示，接入和移动性管理网元90可包括：处理单元91和通信单元93。其中：
通信单元93可用于向统一数据管理网元100发送请求消息，请求消息包括用户设备60的标识信息和用户设备60连接的家庭网关70的标识信息；
通信单元93还可用于接收统一数据管理网元100发送的用户设备60的签约类型的指示信息；
处理单元91可用于根据用户设备60的签约类型确定用户设备60是否被允许接入家庭网关70，和/或用户设备60的业务管理策略。
在一些可选的实施例中，处理单元91可具体用于如果用户设备60的签约类型是家庭网关70的签约用户，则确定用户设备60被允许接入家庭网关70。
在一些可选的实施例中，处理单元91可具体用于如果签约类型为非签约用户，则确定用户设备60的业务管理策略为非签约用户对应的业务管理策略；或者，如果签约类型为签约用户，则确定用户设备60的业务管理策略为签约用户对应的业务管理策略。
在一些可选的实施例中，通信单元93还可用于接收统一数据管理网元100发送的接入指示信息，和/或用户设备60的业务管理策略的指示信息，接入指示信息指示用户设备60是否被允许接入家庭网关70。这样，接入和移动性管理网元90可通知UE是否可以接入，以及签约类型是什么。
在一些可选的实施例中，通信单元93还可用于接收统一数据管理网元100发送的家庭网关70的签约数据，处理单元91还可用于根据家庭网关70的签约数据和用户设备60的标识信息确定用户设备60是否被允许接入家庭网关70。这里，接入和移动性管理网元90确定用户设备60的签约类型以及用户设备60是否被允许接入家庭网关70的方式与
在一些可选的实施例中，通信单元93还可用于向接入网设备80或家庭网关70发送接入指示信息，和/或用户设备60的业务管理策略的指示信息，接入指示信息指示用 户设备60是否被允许接入家庭网关70。
本申请中，通信单元93向统一数据管理网元100发送的请求消息中携带的家庭网关70的标识信息为永久标识信息。
通信单元93可具体用于获取家庭网关70的临时标识信息，并根据临时标识信息从家庭网关70的上下文中获取永久标识信息。
为了获取家庭网关70的临时标识信息，通信单元93的具体实现可包括但不限于：通信单元93可具体用于从用户设备60发送的NAS信令中获取临时标识信息；或，通信单元93可具体用于从家庭网关70接入的接入网设备80发送的信令中获取临时标识信息。其中，接入网设备80发送的信令中包括的临时标识信息是家庭网关70发送给接入网设备80的；或者，接入网设备80发送的信令中包括的临时标识信息接入网设备80基于用户设备60的IP地址或固网网关连接的线路标识或VLAN标识或用户设备60的接入点标识识别出。
可以理解的，关于接入和移动性管理网元90的各个功能单元的具体实现可参考图2-3分别对应的方法实施例，这里不再赘述。
如图10所示，统一数据管理网元100可包括：处理单元101和通信单元103。其中：
通信单元103可用于接收接入和移动性管理功能网元90发送的请求消息，请求消息包括用户设备60的标识信息和用户设备60连接的家庭网关70的标识信息；
处理单元101可用于根据家庭网关70的标识信息确定家庭网关70的签约数据；
处理单元101还可用于根据家庭网关70的签约数据和用户设备60的标识信息确定用户设备60的签约类型；
通信单元103还可用于向接入和移动性管理功能网元发送签约类型的指示信息；签约类型包括家庭网关70的签约用户或非签约用户。
在一些可选的实施例中，家庭网关70的签约数据可包括家庭网关70的签约用户的用户设备60的标识信息。此时，处理单元101可具体用于如果用户设备60的标识信息属于家庭网关70的签约用户的用户设备60的标识信息，则确定用户设备60为家庭网关70的签约用户。
进一步的，家庭网关70的签约数据可包括家庭网关70的接入类型，接入类型指示家庭网关70是否允许非签约用户接入。
处理单元101还可用于确定用户设备60是否被允许接入家庭网关70。具体可如下：
处理单元101可具体用于如果用户设备60的标识信息属于家庭网关70的签约用户的用户设备60的标识信息，则确定用户设备60被允许接入家庭网关70。
处理单元101可具体用于如果用户设备60的标识信息属于家庭网关70的签约用户的用户设备60的标识信息，则确定用户设备60被允许接入家庭网关70。
处理单元101可具体用于如果用户设备60的标识信息不属于家庭网关70的签约用户的用户设备60的标识信息，但家庭网关70的接入类型指示家庭网关70允许非签约用户接入，则确定用户设备60被允许接入家庭网关70。
处理单元101可具体用于如果用户设备60的标识信息不属于家庭网关70的签约用 户的用户设备60的标识信息，且家庭网关70的接入类型指示家庭网关70不允许非签约用户接入，则确定用户设备60不被允许接入家庭网关70。
在一些可选的实施例中，在处理单元101确定出用户设备60是否被允许接入家庭网关70的条件下，通信单元103还可用于发送接入指示信息；接入指示信息指示用户设备60是否被允许接入家庭网关70。
在一些可选的实施例中，通信单元103还可用于向接入和移动性管理功能网元发送签约数据。这样，接入和移动性管理功能网元也可以依据家庭网关70的签约数据来判断UE的签约类型，以及UE是否被允许接入家庭网关70。
可以理解的，关于统一数据管理网元100的各个功能单元的具体实现可参考图2-3分别对应的方法实施例，这里不再赘述。
当通信系统10以及其中的通信装置可以用来实施图4实施例描述的一种网络接入方法时，用户设备60、家庭网关70和接入网设备80的具体实现可参考上述内容。UE的签约类型以及UE是否被允许接入家庭网关70由接入和移动性管理网元90来确定。接入和移动性管理网元90的具体实现可以如下：
接入和移动性管理网元90可包括：处理单元91和通信单元93。其中：
通信单元93可用于接收接入网设备80(W-5G AN)发送的请求消息，请求消息包括家庭网关70的标识信息、用户设备60的标识信息；
通信单元93还可用于根据家庭网关70的标识信息获取家庭网关70的签约数据；
处理单元91可用于根据家庭网关70的签约数据和用户设备60的标识信息确定用户设备60的签约类型和/或用户设备60的业务管理策略；
通信单元93还可用于向接入网设备80或家庭网关70发送签约类型的指示信息和/或用户设备60的业务管理策略的指示信息；签约类型包括家庭网关70的签约用户或非签约用户。
在一些可选的实施例中，为获取获取家庭网关70的签约数据，通信单元93可具体用于根据家庭网关70的标识信息接收统一数据管理网元100发送的家庭网关70的签约数据。
在一些可选的实施例中，为获取获取家庭网关70的签约数据，在家庭网关70的上下文中包含家庭网关70的签约数据的条件下，处理单元91可具体用于根据家庭网关70的标识信息从家庭网关70的上下文中获取家庭网关70的签约数据。
在一些可选的实施例中，家庭网关70的签约数据可包括家庭网关70的签约用户的用户设备60的标识信息。为确定用户设备60的签约类型，处理单元91可具体用于如果用户设备60的标识信息属于家庭网关70的签约用户的用户设备60的标识信息，则确定用户设备60为家庭网关70的签约用户。
在一些可选的实施例中，签约数据还包括家庭网关70的接入类型，接入类型指示家庭网关70是否允许非签约用户接入。
在一些可选的实施例中，为确定用户设备60是否被允许接入家庭网关70，处理单元91可具体用于如果用户设备60的标识信息属于家庭网关70的签约用户的用户设备60的标识信息，则确定用户设备60被允许接入家庭网关70。
在一些可选的实施例中，为确定用户设备60是否被允许接入家庭网关70，处理单元91可具体用于如果用户设备60的标识信息不属于家庭网关70的签约用户的用户设备60的标识信息，但家庭网关70的接入类型指示家庭网关70允许非签约用户接入，则确定用户设备60被允许接入家庭网关70。
在一些可选的实施例中，为确定用户设备60是否被允许接入家庭网关70，处理单元91可具体用于如果用户设备60的标识信息不属于家庭网关70的签约用户的用户设备60的标识信息，且家庭网关70的接入类型指示家庭网关70不允许非签约用户接入，则确定用户设备60不被允许接入家庭网关70。
在一些可选的实施例中，通信单元93还可用于向接入网设备80或家庭网关70发送接入指示信息，和/或用户设备60的业务管理策略的指示信息；接入指示信息指示用户设备60是否被允许接入家庭网关70。
本申请中，接入网设备80(W-5G AN)发送的请求消息中携带的家庭网关70的标识信息为临时标识信息。通信单元93还可用于获取家庭网关70的临时标识信息，并根据临时标识信息从家庭网关70的上下文中确定签约数据。
为获取家庭网关70的临时标识信息，通信单元93可具体用于接入和移动性管理功能网元接收用户设备60发送的临时标识信息；或，接收家庭网关70接入的接入网设备80发送的临时标识信息。其中，接入网设备80发送的临时标识信息可以是家庭网关70发送给接入网设备80的，或者，是接入网设备80基于用户设备60的IP地址或固网网关连接的线路标识或VLAN标识或家庭网关70接入点标识识别出。
可以理解的，关于接入和移动性管理网元90的各个功能单元的具体实现可参考图4方法实施例，这里不再赘述。
当通信系统10以及其中的通信装置可以用来实施图12实施例描述的技术方案时，各个通信装置的具体实现可以如下：
如图10所示，接入网设备80可包括：处理单元81和通信单元83。其中：
通信单元83可用于接收请求消息，该请求消息包括分组数据单元PDU会话的标识信息。
通信单元83还可用于向终端设备发送响应消息，所述响应消息包括所述接入网设备对应所述PDU会话的地址信息。所述接入网设备对应所述PDU会话的地址信息用作所述家庭网关70发送的所述PDU会话的用户面数据包的目标地址。
在一些实施例中，处理单元81可用于存储所述PDU会话的标识信息与所述接入网设备的地址信息的对应关系。
在一些实施例中，通信单元83还可用于接收家庭网关70的标识信息。处理单元81可用于根据家庭网关70的标识信息为所述家庭网关70分配地址。通信单元83还可用于向所述家庭网关70发送所述家庭网关70的地址；所述家庭网关70的地址用作所述家庭网关70发送的所述PDU会话的用户面数据包的源地址。
在一些实施例中，通信单元83还可用于接收所述家庭网关70发送的所述PDU会话的用户面数据包，所述用户面数据包中包括的目的地址为所述接入网设备对应PDU会话 的地址信息。处理单元81还可用于基于所述接入网设备对应PDU会话的地址信息识别所述PDU会话。
在另一种方案中，处理单元81可用于分配所述接入网设备对应家庭网关70的用户面地址信息。通信单元83还可用于向所述家庭网关70发送消息，所述消息包括所述用户面地址信息；所述用户面地址信息用作所述家庭网关70发送的PDU会话的用户面数据包的目的地址。
在一些实施例中，通信单元83还可用于接收家庭网关70的标识信息。处理单元81还可用于根据家庭网关70的标识信息为所述家庭网关70分配地址。通信单元83还可用于向所述家庭网关70发送所述家庭网关70的地址；所述家庭网关70的地址用作所述家庭网关70发送的PDU会话的用户面数据包的源地址。
在一些实施例中，通信单元83还可用于接收所述家庭网关70发送的所述用户面数据包，所述用户面数据包中的目的地址为所述接入网设备的用户面的地址信息；所述用户面数据包还包括所述PDU会话的标识信息。处理单元81还可用于基于所述PDU会话的标识信息识别所述PDU会话。通信单元83还可用于利用识别出的所述PDU会话对应的隧道发送所述用户面数据包。
如图10所示，家庭网关70可包括：处理单元71和通信单元73。其中(用户设备60可类似实现，不赘述)：
通信单元73可用于向接入网设备80发送请求消息，该请求消息包括分组数据单元PDU会话的标识信息。
通信单元73还可用于接收接入网设备80发送的响应消息，所述响应消息包括所述接入网设备对应所述PDU会话的地址信息。所述接入网设备对应所述PDU会话的地址信息用作所述家庭网关70发送的所述PDU会话的用户面数据包的目标地址。
在一些实施例中，通信单元73还可用于发送家庭网关70的标识信息。通信单元73还可用于接收所述家庭网关70的地址；所述家庭网关70的地址用作所述家庭网关70发送的所述PDU会话的用户面数据包的源地址。
在一些实施例中，通信单元73还可用于发送所述PDU会话的用户面数据包，所述用户面数据包中包括的目的地址为所述接入网设备对应PDU会话的地址信息。处理单元71还可用于基于所述接入网设备对应PDU会话的地址信息识别所述PDU会话。
在另一种方案中，通信单元73还可用于接收所述家庭网关70发送的消息，所述消息包括所述用户面地址信息；所述用户面地址信息用作所述家庭网关70发送的PDU会话的用户面数据包的目的地址。
在一些实施例中，通信单元73还可用于发送家庭网关70的标识信息。通信单元73还可用于接收所述家庭网关70的地址；所述家庭网关70的地址用作所述家庭网关70发送的PDU会话的用户面数据包的源地址。
在一些实施例中，通信单元73还可用于发送所述用户面数据包，所述用户面数据包中的目的地址为所述接入网设备的用户面的地址信息；所述用户面数据包还包括所述PDU会话的标识信息。
当通信系统10以及其中的通信装置可以用来实施图13实施例描述的技术方案时，通信系统10还可以包括策略控制网元200(未示出)、会话管理网元300(未示出)，各个通信装置的具体实现可以如下：
如图10所示，策略控制网元200可包括：处理单元201和通信单元203。其中：
通信单元203可用于接收接入和移动性管理功能网元或者会话管理网元300发送的第一消息，所述第一消息包括用户设备的设备类型的指示信息；
通信单元203还可用于向会话管理网元300发送第二消息，所述第二消息包括所述策略控制网元基于所述用户设备的设备类型的指示信息确定的所述用户设备的业务管理策略。
其中，所述业务管理策略包括：QoS策略和/或家庭网关的本地资源接入策略。
在一些实施例中，通信单元203还可用于向所述接入和移动性管理功能网元发送所述本地资源接入策略。
如图10所示，会话管理网元300可包括：处理单元301和通信单元303。其中：
通信单元303还可用于接收接入和移动性管理功能网元发送的用户设备的标识信息和所述用户设备的设备类型的指示信息，并获取所述家庭网关的本地资源接入策略。
处理单元301可用于根据所述用户设备的设备类型的指示信息和所述本地资源接入策略控制所述用户设备接入本地资源。
在一些实施例中，通信单元303可具体用于接收所述接入和移动性管理功能网元或者会话管理网元发送的所述家庭网关的本地资源接入策略。
在一些实施例中，处理单元301可用于配置所述本地资源接入策略。
在一些实施例中，所述本地资源接入策略包括与所述家庭网关连接的设备的地址信息。
在一些实施例中，通信单元303还可用于接收所述用户设备发送的请求消息，所述请求消息包括所述用户设备的标识信息。处理单元301可具体用于根据所述用户设备的标识信息和所述用户设备的设备类型的指示信息确定所述用户设备的设备类型，并根据所述用户设备的设备类型和所述本地资源接入策略控制所述用户设备接入本地资源。
可以看出，通过实施图10所示的通信系统10以及其中的通信装置，5GC可以基于家庭网关的签约数据区分用户设备的不同接入模型以便于后续进行不同的业务控制，例如不同的QoS控制。尤其当网络资源受限时，网络侧可优先保证签约用户的接入，限制非签约用户接入。这样可实现5GC对更多接入方式的支持，提升了固网和移动网络的融合度。
另外，通信系统10以及其中的通信装置也可以用来实施图5实施例描述的另一种网络接入方法。当通信系统10以及其中的通信装置可以用来实施图5实施例描述的一种网络接入方法时，各个通信装置的具体实现可以参考图5实施例，这里不再赘述。
应理解的，图10所示的通信系统10可以实施成图1A-1C所示的系统架构。其中，家庭网关70可以是图1A-1C所示的系统架构中的5G RG，用户设备60可以是连接到5G RG的UE，接入网设备80可以是图1A-1C所示的系统架构中的W-5G AN，接入和移动性管理网元90可以是AMF，统一数据管理网元100可以是UDM。其中，接入和移动性管理 网元90可包括服务于用户设备AMF和服务于家庭网关AMF，这两个AMF可以是同一个AMF，也可以是不同的AMF。同样的，统一数据管理网元100可包括用户设备注册的UDM和家庭网关注册的UDM，这两个UDM可以是同一个UDM，也可以是不同的UDM。
综上，实施本申请提供的技术方案，可实现5GC对更多接入方式的支持，提升了固网和移动网络的融合度。
本领域普通技术人员可以理解实现上述实施例方法中的全部或部分流程，该流程可以由计算机程序来指令相关的硬件完成，该程序可存储于计算机可读取存储介质中，该程序在执行时，可包括如上述各方法实施例的流程。而前述的存储介质包括：ROM或随机存储记忆体RAM、磁碟或者光盘等各种可存储程序代码的介质。

Claims (53)

  1. 一种网络接入方法，其特征在于，包括：
    统一数据管理网元接收接入和移动性管理功能网元发送的请求消息，所述请求消息包括用户设备的标识信息和所述用户设备连接的家庭网关的标识信息；
    所述统一数据管理网元根据所述家庭网关的标识信息确定所述家庭网关的签约数据；
    所述统一数据管理网元根据所述家庭网关的签约数据和所述用户设备的标识信息确定所述用户设备的签约类型；所述签约类型包括所述家庭网关的签约用户或非签约用户；
    所述统一数据管理网元向所述接入和移动性管理功能网元发送所述签约类型的指示信息。
  2. 如权利要求1所述的方法，其特征在于，所述家庭网关的签约数据包括所述家庭网关的签约用户的用户设备的标识信息；
    所述统一数据管理网元根据所述家庭网关的签约数据和所述用户设备的标识信息确定所述用户设备的签约类型，具体包括：
    如果所述用户设备的标识信息属于所述家庭网关的签约用户的用户设备的标识信息，则所述统一数据管理网元确定所述用户设备为所述家庭网关的签约用户。
  3. 如权利要求2所述的方法，其特征在于，所述签约数据还包括所述家庭网关的接入类型的指示信息，所述接入类型的指示信息指示所述家庭网关是否允许非签约用户接入。
  4. 如权利要求2或3所述的方法，其特征在于，还包括：
    如果所述用户设备的标识信息属于所述家庭网关的签约用户的用户设备的标识信息，则所述统一数据管理网元确定所述用户设备被允许接入所述家庭网关。
  5. 如权利要求3所述的方法，其特征在于，还包括：如果所述用户设备的标识信息不属于所述家庭网关的签约用户的用户设备的标识信息，但所述家庭网关的接入类型指示所述家庭网关允许非签约用户接入，则所述统一数据管理网元确定所述用户设备被允许接入所述家庭网关。
  6. 如权利要求3或5所述的方法，其特征在于，还包括：如果所述用户设备的标识信息不属于所述家庭网关的签约用户的用户设备的标识信息，且所述家庭网关的接入类型指示所述家庭网关不允许非签约用户接入，则所述统一数据管理网元确定所述用户设备不被允许接入所述家庭网关。
  7. 如权利要求4-6中任一项所述的方法，其特征在于，还包括：所述统一数据管理网元向所述接入和移动性管理功能网元发送接入指示信息；所述接入指示信息指示所述用户设备是否被允许接入所述家庭网关。
  8. 如权利要求1-7中任一项所述的方法，其特征在于，所述方法还包括：所述统一数据管理网元向所述接入和移动性管理功能网元发送所述签约数据。
  9. 一种网络接入方法，其特征在于，包括：
    接入和移动性管理功能网元向统一数据管理网元发送请求消息，所述请求消息包括用户设备的标识信息和所述用户设备连接的家庭网关的标识信息；
    所述接入和移动性管理功能网元接收所述统一数据管理网元发送的所述用户设备的签约类型的指示信息；
    所述接入和移动性管理功能网元根据所述用户设备的签约类型确定所述用户设备是否被允许接入所述家庭网关，和/或所述用户设备的业务管理策略。
  10. 如权利要求9所述的方法，其特征在于，所述接入和移动性管理功能网元根据所述用户设备的签约类型确定所述用户设备是否被允许接入所述家庭网关，具体包括：
    如果所述用户设备的签约类型是所述家庭网关的签约用户，则所述接入和移动性管理功能网元确定所述用户设备被允许接入所述家庭网关。
  11. 如权利要求9或10所述的方法，其特征在于，所述接入和移动性管理功能网元根据所述用户设备的签约类型确定所述用户设备的业务管理策略，具体包括：
    如果所述签约类型为非签约用户，则所述接入和移动性管理功能网元确定所述用户设备的业务管理策略为非签约用户对应的业务管理策略；或者，
    如果所述签约类型为签约用户，则所述接入和移动性管理功能网元确定所述用户设备的业务管理策略为签约用户对应的业务管理策略。
  12. 如权利要求9-11中任一项所述的方法，其特征在于，还包括：所述接入和移动性管理功能网元接收所述统一数据管理网元发送的接入指示信息，和/或所述用户设备的业务管理策略的指示信息，所述接入指示信息指示所述用户设备是否被允许接入所述家庭网关。
  13. 如权利要求9-12中任一项所述的方法，其特征在于，还包括：所述接入和移动性管理功能网元接收所述统一数据管理网元发送的所述家庭网关的签约数据，并根据所述家庭网关的签约数据和所述用户设备的标识信息确定所述用户设备是否被允许接入所述家庭网关。
  14. 如权利要求9-13中任一项所述的方法，其特征在于，还包括：所述接入和移动性管理功能网元向接入网设备或所述家庭网关发送接入指示信息，和/或所述用户设备的业务管理策略的指示信息，所述接入指示信息指示所述用户设备是否被允许接入所述家庭网关。
  15. 如权利要求9-14中任一项所述的方法，其特征在于，所述家庭网关的标识信息为永久标识信息；
    所述方法还包括：所述接入和移动性管理功能网元获取所述家庭网关的临时标识信息，并根据所述临时标识信息从所述家庭网关的上下文中获取所述永久标识信息。
  16. 如权利要求15所述的方法，其特征在于，所述接入和移动性管理功能网元获取所述家庭网关的临时标识信息，具体包括：
    所述接入和移动性管理功能网元从所述用户设备发送的NAS信令中获取所述临时标识信息；或，
    所述接入和移动性管理功能网元从所述家庭网关接入的接入网设备发送的信令中获取所述临时标识信息。
  17. 如权利要求16所述的方法，其特征在于，所述接入网设备发送的信令中包含的所述临时标识信息是所述家庭网关发送给所述接入网设备的；或者，所述接入网设备发送的信令中包含的所述临时标识信息是所述接入网设备基于所述用户设备的IP地址或所述固网网关连接的线路标识或VLAN标识或所述用户设备的接入点标识识别出的。
  18. 一种网络接入方法，其特征在于，包括：
    接入和移动性管理功能网元接收接入网设备发送的请求消息，所述请求消息包括家庭网关的标识信息；
    所述接入和移动性管理功能网元根据所述家庭网关的标识信息获取所述家庭网关的签约数据；
    所述接入和移动性管理功能网元根据所述家庭网关的签约数据和用户设备的标识信息确定所述用户设备的签约类型和/或所述用户设备的业务管理策略。
  19. 如权利要求18所述的方法，其特征在于，所述接入和移动性管理功能网元根据所述家庭网关的标识信息获取所述家庭网关的签约数据，具体包括：
    所述接入和移动性管理功能网元根据所述家庭网关的标识信息接收统一数据管理网元发送的所述家庭网关的签约数据。
  20. 如权利要求18所述的方法，其特征在于，所述接入和移动性管理功能网元根据所述家庭网关的标识信息获取所述家庭网关的签约数据，具体包括：
    所述接入和移动性管理功能网元根据所述家庭网关的标识信息从所述家庭网关的上下文中获取所述家庭网关的签约数据。
  21. 如权利要求18-20中任一项所述的方法，其特征在于，所述家庭网关的签约数据包括所述家庭网关的签约用户的用户设备的标识信息；
    所述接入和移动性管理功能网元根据所述家庭网关的签约数据确定所述用户设备的签约类型，具体包括：
    如果所述用户设备的标识信息属于所述家庭网关的签约用户的用户设备的标识信息，则所述接入和移动性管理功能网元确定所述用户设备为所述家庭网关的签约用户。
  22. 如权利要求21所述的方法，其特征在于，所述签约数据还包括所述家庭网关的接入类型，所述接入类型指示所述家庭网关是否允许非签约用户接入。
  23. 如权利要求18-22中任一项所述的方法，其特征在于，还包括：所述接入和移动性管理功能网元向所述接入网设备或所述家庭网关发送接入指示信息，和/或所述用户设备的业务管理策略的指示信息；所述接入指示信息指示所述用户设备是否被允许接入所述家庭网关。
  24. 如权利要求18-23中任一项所述的方法，其特征在于，所述家庭网关的标识信息为临时标识信息；所述方法还包括：所述接入和移动性管理功能网元获取所述家庭网关的临时标识信息。
  25. 如权利要求24所述的方法，其特征在于，所述接入和移动性管理功能网元获取所述家庭网关的临时标识信息，具体包括：
    所述接入和移动性管理功能网元从所述用户设备发送的NAS信令中获取所述临时标识信息；或，
    所述接入和移动性管理功能网元从所述家庭网关接入的接入网设备发送的信令中获取所述临时标识信息。
  26. 如权利要求25所述的方法，其特征在于，所述接入网设备发送的信令中包含的所述临时标识信息是所述家庭网关发送给所述接入网设备的；或者，所述接入网设备发送的信令中包含的所述临时标识信息是所述接入网设备基于所述用户设备的IP地址或所述固网网关连接的线路标识或VLAN标识或所述用户设备的接入点标识识别出的。
  27. 一种核心网设备，其特征在于，包括：
    通信单元，用于接收接入和移动性管理功能网元发送的请求消息，所述请求消息包括用户设备的标识信息和所述用户设备连接的家庭网关的标识信息；
    处理单元，用于根据所述家庭网关的标识信息确定所述家庭网关的签约数据；
    所述处理单元，还用于根据所述家庭网关的签约数据和所述用户设备的标识信息确定所述用户设备的签约类型；所述签约类型包括所述家庭网关的签约用户或非签约用户；
    所述通信单元，还用于向所述接入和移动性管理功能网元发送所述签约类型的指示信息。
  28. 如权利要求27所述的核心网设备，其特征在于，所述家庭网关的签约数据包括所述家庭网关的签约用户的用户设备的标识信息；
    所述处理单元，具体用于如果所述用户设备的标识信息属于所述家庭网关的签约用户的用户设备的标识信息，则所述统一数据管理网元确定所述用户设备为所述家庭网关的签约用户。
  29. 如权利要求28所述的核心网设备，其特征在于，所述签约数据还包括所述家庭网关的接入类型的指示信息，所述接入类型的指示信息指示所述家庭网关是否允许非签约用户接入。
  30. 如权利要求28或29所述的核心网设备，其特征在于，所述处理单元，还用于如果所述用户设备的标识信息属于所述家庭网关的签约用户的用户设备的标识信息，则确定所述用户设备被允许接入所述家庭网关。
  31. 如权利要求29所述的核心网设备，其特征在于，所述处理单元，还用于如果所述用户设备的标识信息不属于所述家庭网关的签约用户的用户设备的标识信息，但所述家庭网关的接入类型指示所述家庭网关允许非签约用户接入，则所述统一数据管理网元确定所述用户设备被允许接入所述家庭网关。
  32. 如权利要求29或31所述的核心网设备，其特征在于，所述处理单元，还用于如果所述用户设备的标识信息不属于所述家庭网关的签约用户的用户设备的标识信息，且所述家庭网关的接入类型指示所述家庭网关不允许非签约用户接入，则确定所述用户设备不被允许接入所述家庭网关。
  33. 如权利要求30-32中任一项所述的核心网设备，其特征在于，所述通信单元，还用于向所述接入和移动性管理功能网元发送接入指示信息；所述接入指示信息指示所述用户设备是否被允许接入所述家庭网关。
  34. 如权利要求27-33中任一项所述的核心网设备，其特征在于，所述通信单元，还用于向所述接入和移动性管理功能网元发送所述签约数据。
  35. 一种核心网设备，其特征在于，包括：
    通信单元，用于向统一数据管理网元发送请求消息，所述请求消息包括用户设备的标识信息和所述用户设备连接的家庭网关的标识信息；
    所述通信单元，还用于接收所述统一数据管理网元发送的所述用户设备的签约类型的指示信息；
    处理单元，用于根据所述用户设备的签约类型确定所述用户设备是否被允许接入所述家庭网关，和/或所述用户设备的业务管理策略。
  36. 如权利要求35所述的核心网设备，其特征在于，所述处理单元，具体用于如果所述用户设备的签约类型是所述家庭网关的签约用户，则确定所述用户设备被允许接入所述家庭网关。
  37. 如权利要求35或36所述的核心网设备，其特征在于，所述处理单元，具体用于如果所述签约类型为非签约用户，则所述接入和移动性管理功能网元确定所述用户设备的业务管理策略为非签约用户对应的业务管理策略；或者，如果所述签约类型为签约用户，则所述接入和移动性管理功能网元确定所述用户设备的业务管理策略为签约用户对应的业务管理策略。
  38. 如权利要求35-37中任一项所述的核心网设备，其特征在于，所述通信单元，还用于接收所述统一数据管理网元发送的接入指示信息，和/或所述用户设备的业务管理策略的指示信息，所述接入指示信息指示所述用户设备是否被允许接入所述家庭网关。
  39. 如权利要求35-38中任一项所述的核心网设备，其特征在于，所述通信单元，还用于接收所述统一数据管理网元发送的所述家庭网关的签约数据；所述处理单元，还用于根据所述家庭网关的签约数据和所述用户设备的标识信息确定所述用户设备是否被允许接入所述家庭网关。
  40. 如权利要求35-39中任一项所述的核心网设备，其特征在于，所述通信单元，还用于向接入网设备或所述家庭网关发送接入指示信息，和/或所述用户设备的业务管理策略的指示信息，所述接入指示信息指示所述用户设备是否被允许接入所述家庭网关。
  41. 如权利要求35-40中任一项所述的核心网设备，其特征在于，所述家庭网关的标识信息为永久标识信息；所述通信单元，还用于获取所述家庭网关的临时标识信息，并根据所述临时标识信息从所述家庭网关的上下文中获取所述永久标识信息。
  42. 如权利要求41所述的核心网设备，其特征在于，所述通信单元，具体用于从所述用户设备发送的NAS信令中获取所述临时标识信息；或，从所述家庭网关接入的接入网设备发送的信令中获取所述临时标识信息。
  43. 如权利要求42所述的核心网设备，其特征在于，所述接入网设备发送的信令中包含的所述临时标识信息是所述家庭网关发送给所述接入网设备的；或者，所述接入网设备发送的信令中包含的所述临时标识信息是所述接入网设备基于所述用户设备的IP地址或所述固网网关连接的线路标识或VLAN标识或所述用户设备的接入点标识识别出的。
  44. 一种核心网设备，其特征在于，包括：
    通信单元，用于接收接入网设备发送的请求消息，所述请求消息包括家庭网关的标 识信息；
    处理单元，用于根据所述家庭网关的标识信息获取所述家庭网关的签约数据；
    所述处理单元，还用于根据所述家庭网关的签约数据和用户设备的标识信息确定所述用户设备的签约类型和/或所述用户设备的业务管理策略。
  45. 如权利要求44所述的核心网设备，其特征在于，所述通信单元，具体用于根据所述家庭网关的标识信息接收统一数据管理网元发送的所述家庭网关的签约数据。
  46. 如权利要求44所述的核心网设备，其特征在于，所述处理单元，具体用于根据所述家庭网关的标识信息从所述家庭网关的上下文中获取所述家庭网关的签约数据。
  47. 如权利要求44-46中任一项所述的核心网设备，其特征在于，所述家庭网关的签约数据包括所述家庭网关的签约用户的用户设备的标识信息；所述处理单元，具体用于如果所述用户设备的标识信息属于所述家庭网关的签约用户的用户设备的标识信息，则所述接入和移动性管理功能网元确定所述用户设备为所述家庭网关的签约用户。
  48. 如权利要求47所述的核心网设备，其特征在于，所述签约数据还包括所述家庭网关的接入类型，所述接入类型指示所述家庭网关是否允许非签约用户接入。
  49. 如权利要求44-48中任一项所述的核心网设备，其特征在于，所述通信单元，还用于向所述接入网设备或所述家庭网关发送接入指示信息，和/或所述用户设备的业务管理策略的指示信息；所述接入指示信息指示所述用户设备是否被允许接入所述家庭网关。
  50. 如权利要求44-49中任一项所述的核心网设备，其特征在于，所述家庭网关的标识信息为临时标识信息；所述通信单元，还用于获取所述家庭网关的临时标识信息。
  51. 如权利要求50所述的核心网设备，其特征在于，所述通信单元具体用于从所述用户设备发送的NAS信令中获取所述临时标识信息；或，从所述家庭网关接入的接入网设备发送的信令中获取所述临时标识信息。
  52. 如权利要求51所述的核心网设备，其特征在于，所述接入网设备发送的信令中包含的所述临时标识信息是所述家庭网关发送给所述接入网设备的；或者，所述接入网设备发送的信令中包含的所述临时标识信息是所述接入网设备基于所述用户设备的IP地址或所述固网网关连接的线路标识或VLAN标识或所述用户设备的接入点标识识别出的。
  53. 一种通信系统，其特征在于，包括：第一核心网设备和第二核心网设备，其中：
    所述第一核心网设备为权利要求27-34中任一项所述的核心网设备；
    所述第二核心网设备为权利要求35-52中任一项所述的核心网设备。
PCT/CN2019/086411 2018-05-22 2019-05-10 网络接入方法、相关装置及系统 WO2019223557A1 (zh)

Priority Applications (2)

Application Number Priority Date Filing Date Title
EP19808381.8A EP3817423B1 (en) 2018-05-22 2019-05-10 Network access method, related device, and system
US17/100,457 US11399331B2 (en) 2018-05-22 2020-11-20 Network access method, related apparatus, and system

Applications Claiming Priority (4)

Application Number Priority Date Filing Date Title
CN201810497274 2018-05-22
CN201810497274.4 2018-05-22
CN201810672363.8 2018-06-26
CN201810672363.8A CN110519826B (zh) 2018-05-22 2018-06-26 网络接入方法、相关装置及系统

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US17/100,457 Continuation US11399331B2 (en) 2018-05-22 2020-11-20 Network access method, related apparatus, and system

Publications (1)

Publication Number Publication Date
WO2019223557A1 true WO2019223557A1 (zh) 2019-11-28

Family

ID=68616200

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2019/086411 WO2019223557A1 (zh) 2018-05-22 2019-05-10 网络接入方法、相关装置及系统

Country Status (1)

Country Link
WO (1) WO2019223557A1 (zh)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2022008089A1 (en) * 2020-07-08 2022-01-13 Telefonaktiebolaget Lm Ericsson (Publ) User equipment tethering policy
WO2024012708A1 (en) * 2022-07-12 2024-01-18 Telefonaktiebolaget Lm Ericsson (Publ) Detection of traffic from a relayed device in a communications network

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2011134320A1 (zh) * 2010-04-27 2011-11-03 中兴通讯股份有限公司 授权请求方法、系统及装置
CN102740401A (zh) * 2011-02-10 2012-10-17 中兴通讯股份有限公司 一种通过可信任的固网接入移动核心网络的方法和系统
CN103024738A (zh) * 2011-09-26 2013-04-03 中兴通讯股份有限公司 一种有缝的业务分流控制的实现方法和系统
CN103813409A (zh) * 2012-11-08 2014-05-21 中兴通讯股份有限公司 固网移动融合的策略控制方法、装置及系统
CN105188041A (zh) * 2015-09-25 2015-12-23 中国联合网络通信集团有限公司 基于固定电话的呼叫转移方法及家庭网关
CN105704762A (zh) * 2014-11-26 2016-06-22 电信科学技术研究院 一种移动通信方法、设备及系统

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2011134320A1 (zh) * 2010-04-27 2011-11-03 中兴通讯股份有限公司 授权请求方法、系统及装置
CN102740401A (zh) * 2011-02-10 2012-10-17 中兴通讯股份有限公司 一种通过可信任的固网接入移动核心网络的方法和系统
CN103024738A (zh) * 2011-09-26 2013-04-03 中兴通讯股份有限公司 一种有缝的业务分流控制的实现方法和系统
CN103813409A (zh) * 2012-11-08 2014-05-21 中兴通讯股份有限公司 固网移动融合的策略控制方法、装置及系统
CN105704762A (zh) * 2014-11-26 2016-06-22 电信科学技术研究院 一种移动通信方法、设备及系统
CN105188041A (zh) * 2015-09-25 2015-12-23 中国联合网络通信集团有限公司 基于固定电话的呼叫转移方法及家庭网关

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP3817423A4 *

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2022008089A1 (en) * 2020-07-08 2022-01-13 Telefonaktiebolaget Lm Ericsson (Publ) User equipment tethering policy
WO2024012708A1 (en) * 2022-07-12 2024-01-18 Telefonaktiebolaget Lm Ericsson (Publ) Detection of traffic from a relayed device in a communications network

Similar Documents

Publication Publication Date Title
EP3817423B1 (en) Network access method, related device, and system
US10841302B2 (en) Method and apparatus for authenticating UE between heterogeneous networks in wireless communication system
US11844142B2 (en) Communications method and apparatus
EP4117340A1 (en) Business processing method, device and system for proximity service
CN110495214B (zh) 用于处理pdu会话建立过程的方法和amf节点
US9497176B2 (en) Communication system, user equipment and communication node
US20230319556A1 (en) Key obtaining method and communication apparatus
US20230029714A1 (en) Authorization method, policy control function device, and access and mobility management function device
EP4181588A1 (en) Method for terminal to access public and private networks and communication apparatus
EP3834448A1 (en) Delegated data connection
WO2023279776A1 (zh) 多模终端接入控制方法、装置、电子设备及存储介质
US20230189192A1 (en) Access to Second Network by Wireless Device
WO2022199451A1 (zh) 会话切换的方法和装置
WO2019223557A1 (zh) 网络接入方法、相关装置及系统
US20240107417A1 (en) Communication method and apparatus
US20200214052A1 (en) Providing group of devices with cellular access
EP4142329A1 (en) Authentication authorization method and apparatus
WO2023185880A1 (zh) 一种接入网设备的确定方法
WO2023280093A1 (zh) 执行在线签约的方法和装置
EP4262247A1 (en) Communication method and apparatus
KR20220152950A (ko) 네트워크 슬라이스 승인 제어(nsac) 발견 및 로밍 향상들
WO2023116556A1 (zh) 会话切换的方法和装置
JP7473001B2 (ja) コアネットワークノード、端末、及びこれらの方法
WO2023040728A1 (zh) 一种网元的选择方法、通信装置及通信系统
WO2023216932A1 (zh) 通信方法和装置

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 19808381

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

ENP Entry into the national phase

Ref document number: 2019808381

Country of ref document: EP

Effective date: 20201201