WO2020073817A1 - 一种定位服务权限变更方法、装置及系统 - Google Patents

一种定位服务权限变更方法、装置及系统 Download PDF

Info

Publication number
WO2020073817A1
WO2020073817A1 PCT/CN2019/108271 CN2019108271W WO2020073817A1 WO 2020073817 A1 WO2020073817 A1 WO 2020073817A1 CN 2019108271 W CN2019108271 W CN 2019108271W WO 2020073817 A1 WO2020073817 A1 WO 2020073817A1
Authority
WO
WIPO (PCT)
Prior art keywords
location service
target terminal
message
change
changed
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2019/108271
Other languages
English (en)
French (fr)
Inventor
毕晓宇
唐廷芳
全海洋
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Academy of Telecommunications Technology CATT
Original Assignee
China Academy of Telecommunications Technology CATT
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Academy of Telecommunications Technology CATT filed Critical China Academy of Telecommunications Technology CATT
Publication of WO2020073817A1 publication Critical patent/WO2020073817A1/zh
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0891—Revocation or update of secret information, e.g. encryption key update or rekeying
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/02—Services making use of location information

Definitions

  • the invention relates to the technical field of wireless communication, and in particular to a method, device and system for changing the location service authority.
  • LCS Location Services
  • 3GPP Third Generation Partnership Project
  • the positioning methods currently available in the 3GPP standard include Global Positioning System (Global Positioning System, GPS) positioning, satellite-enhanced system positioning, and network-assisted positioning methods, based on the information of the terminal (User Equipment, UE, also known as user equipment). Positioning method, positioning method by sensor, etc.
  • the location information obtained through LCS includes geographic location information, speed, city location, and service quality.
  • the UE may receive auxiliary data broadcast by the network side, and use the auxiliary data to perform positioning calculation on its own. These auxiliary data are usually encrypted by one or more keys.
  • the key distribution process of the above auxiliary data is: Evolved Service Mobile Location Center (Evolved Serving Mobile Location Center, E-SMLC) to Mobility Management Node (Mobility Management Entity, MME) Send a key data message that carries one or more keys.
  • E-SMLC Evolved Serving Mobile Location Center
  • MME Mobility Management Node
  • the key is used to encrypt the auxiliary data broadcast.
  • the validity period, a set of applicable tracking areas, and the type of key can be set for each key.
  • the MME receives and stores the key; the UE sends an attach request or Tracking Area Update (TAU) request to the base station (eNodeB), which includes an instruction to request the key; the base station receives the attach request or TAU request and forwards it to the MME After receiving the attach request or TAU request, the MME returns an attach accept or TAU accept to the base station.
  • the UE receives the attachment acceptance or TAU acceptance, once the validity period of the key has started and the UE is currently in the applicable tracking area, the UE can start using the key to decrypt the broadcast auxiliary data.
  • the validity period of the key has expired, the UE stops using and deletes the key.
  • the MME deletes all information of the key.
  • not all UEs attached to the network have the authority to use the key, and the network needs to recognize the authority of the UE before issuing the key to the UE.
  • the UE may have different rights to sign the LCS service.
  • the UE signing rights may be temporarily changed under certain circumstances. After the rights change, it will directly cause the UE's key to change. If the lack of dynamic management of UE rights results in The UE receives a key that is inconsistent with its own authority or causes the unsigned UE to also receive the key.
  • Embodiments of the present application provide a method, device, and system for distributing a positioning service key, so as to implement updating of a terminal's positioning service authority.
  • a positioning service authority update method including: a positioning server receives a first positioning service authority change message, and the first positioning service authority change message is used to request a change in the positioning service authority of a target terminal; Send a second location service permission change message to the core network element, where the second location service permission change message carries the location service permission information after the target terminal is changed.
  • the method further includes: the positioning server sends a positioning service authority change indication message to the user subscription information server, and the positioning service authority change indication message is used to indicate The user subscription information server determines the location service authority after the target terminal is changed; the location server receives a location service authority change confirmation message sent by the user subscription information server, and the location service authority change confirmation message carries the target terminal Changed location service permission information.
  • the method further includes: the positioning server determining the changed positioning service authority information of the target terminal according to the first positioning service authority change message, and Generate a key corresponding to the changed location service authority of the target terminal.
  • the location server receiving the first location service permission change message includes: the location server receiving the first location service permission change message sent by the target terminal through the application layer; the location server submitting to the core network element Sending a second location service permission change message includes: the location server sending a location service permission change message to the core network element, where the location service permission change message is used to instruct the core network element to save the target terminal The changed positioning service authority information and the key corresponding to the changed positioning service authority of the target terminal.
  • the location server receiving the first location service permission change message includes: the location server receiving the first location service permission change message from the core network element, the first location service permission change message It is sent by the core network element after receiving the attachment request message or tracking area update request message of the target terminal, the attachment request message or tracking area update request message carries indication information of location service authority change, and the location service authority
  • the change instruction information is used to instruct to change the location service right of the target terminal
  • the location server sending a second location service right change message to the core network element includes: the location server sends a second to the core network element A location service permission change message, where the second location service permission change message is used to instruct the core network element to save the location service permission information after the target terminal is changed and the password corresponding to the location service permission after the target terminal is changed key.
  • the location server further includes: the location server verifies the integrity of the first location service permission change message, and if the verification is passed, the user is allowed to perform the location service permission change , The location service authority after the target terminal is changed is determined, and a key corresponding to the location service authority after the target terminal is changed is generated.
  • the first location server permission change message is sent after the core network element determines that a new key needs to be generated for the target terminal; after the location server receives the first location service permission change message, It also includes: the positioning server generating a key corresponding to the changed positioning service authority of the target terminal for the target terminal according to the first positioning service authority change message, and the key is used to decrypt the broadcast network Auxiliary data; the second positioning service permission change message sent by the positioning server to the core network element is used to instruct the core network element to save the changed positioning service permission information of the target terminal and the target The key corresponding to the location service right after the terminal is changed.
  • the positioning server further includes: the location server sends a location service authority change indication message to a business entity, and the location service authority change indication message is used to indicate the service
  • the entity determines the location service right after the target terminal is changed, and generates a key corresponding to the location service right after the target terminal is changed;
  • the location server receives the location service permission change response message sent by the business entity.
  • the location service permission change response message is used to instruct the location server to save the location service permission information after the target terminal is changed and the key corresponding to the location service permission after the target terminal is changed.
  • the location server receiving the first location service permission change message includes: the location server receiving the first location service permission from the user subscription information server that carries the location service permission information after the target terminal is changed Change message, the first location service permission change message is sent by the user subscription server after changing the location service permission of the target terminal according to the location service permission change instruction message from the core network element, the The location service permission change indication message is sent after the core network element receives the attachment request message or tracking area update request message from the target terminal, and the attachment request message or tracking area update request message carries the location service permission change Instruction information, the location service authority change instruction information is used to instruct to change the location service authority of the target terminal.
  • the method further includes: the positioning server sends a first positioning service authority change message to the business entity, and the first positioning service authority change message carries The location service permission information after the target terminal is changed, and the first location service permission change message is used to instruct the business entity to generate a key corresponding to the location service permission after the target terminal is changed; the location server receives A first positioning service authority change response message sent by the business entity, the first positioning service authority change response message is used to instruct the positioning server to save the key corresponding to the changed positioning service authority of the target terminal.
  • the location server receiving the first location service permission change message includes: the location server receiving the first location service permission change message from a business entity, the first location service permission change message is the business entity After receiving a location service permission change instruction message sent by the target terminal through the application layer and sending the location service permission change to the target terminal, the first location service permission change message is used to instruct the location server to save the The location service right after the target terminal is changed, and generates a key corresponding to the location service right after the target terminal is changed; the location server sends a second location service permission change message to the user subscription information server, and the second location The service permission change message carries the location service permission information after the target terminal is changed, and the second location service permission change message is used to instruct the user subscription information server to save the location service permission after the target terminal is changed.
  • the method further includes: the positioning server receives a positioning service authority change confirmation message sent by the user subscription information server, and the positioning service The permission change confirmation message is used to indicate that the user subscription information server has saved the location service permission after the target terminal is changed and the key corresponding to the target location service permission after the target terminal is changed.
  • the core network element includes AMF or MME.
  • the user subscription information server includes UDM or HSS.
  • the changed location service authority information of the target terminal includes: one or more keys corresponding to the changed location service authority of the target terminal, and the one or more keys are used to decrypt the broadcast Network auxiliary data.
  • the changed location service authority information of the target terminal further includes: validity period; tracking area indication information used; key type indication information.
  • the first location service permission change message carries one or more of the following information: change indication information, used to indicate the location service permission change; change reason indication information, used to indicate the location service permission change Reason; change time limit information, used to indicate temporary change or permanent change, the change time limit information indicates that the temporary change also includes the validity period of the temporary change; service type indication information, used to indicate that the target terminal location service authority change application is a temporary application or Apply permanently.
  • the positioning server is LMF, the core network element is AMF or UDM; or the positioning server is E-SMLC, and the core network element is MME or HSS.
  • a method for updating a location service authority including: a core network element receives a location service authority change message from a location server, the location service change message carrying location service authority information after a target terminal is changed; The core network element notifies the target terminal that the location service authority has changed; the core network element receives the first request message sent by the target terminal according to the notification of the core network element, and sends the first request message to the target terminal A response message, the first response message carries the changed location service authority information of the target terminal.
  • the core network element notifying the target terminal that the location service authority has changed includes:
  • the core network element instructs the serving base station of the target terminal to send a system broadcast message, and the system broadcast message carries the identification of the target terminal and positioning service authority change indication information; or, the core network element instructs the The serving base station of the target terminal sends a paging message, the paging message carries the identification of the target terminal and the location service authority change instruction information; wherein, the location service authority change instruction information is used to indicate the location service of the target terminal The permissions have changed.
  • the first request message is an attachment request message
  • the first response message is an attachment acceptance message
  • the first request message is a tracking area update request message
  • the first response message is a tracking area Update acceptance message.
  • the changed location service authority information of the target terminal includes: one or more keys corresponding to the changed location service authority of the target terminal, and the one or more keys are used to decrypt the broadcast Network auxiliary data.
  • the core network element is MME, and the positioning server is E-SMLC; or, the core network element is AMF, and the positioning server is LMF.
  • a location service permission update method which includes: a core network element receives a location service permission change message from a location server, where the location service permission change message carries location service permission information after the target terminal is changed and A key corresponding to the location service permission after the target terminal is changed, and the location service permission change message is used to instruct the core network element to save the location service permission after the target terminal change and the target terminal after the change
  • the key corresponding to the location service authority the core network element sends a location service authority configuration message to the target terminal, and the location service authority configuration message carries the location service authority information after the target terminal is changed.
  • the changed location service authority information of the target terminal includes: one or more keys corresponding to the changed location service authority of the target terminal, and the one or more keys are used to decrypt the broadcast Network auxiliary data.
  • the core network element is AMF
  • the positioning server is LMF
  • a location service permission update method which includes: a core network element receives a first request message from a target terminal; the core network element sends a location service permission change indication message to a user subscription information server, The location service permission change instruction message is used to request to obtain the location service permission information after the target terminal is changed; the core network element receives the location service permission change confirmation message sent by the user subscription information server, and the location service permission change
  • the confirmation message carries the location service right after the target terminal is changed and the key corresponding to the location service right after the target terminal is changed, and the location service permission change confirmation message is used to instruct the core network element to save the The changed location service authority of the target terminal and the key corresponding to the changed location service authority of the target terminal; the core network element sends a first response message to the target terminal, the first response message carries the The key corresponding to the location service right after the target terminal is changed.
  • the location service permission change confirmation message is sent by the user subscription information server according to the received location service permission change instruction message after acquiring the location service permission information after the target terminal has been changed from the business entity.
  • the changed location service authority information of the target terminal includes: one or more keys corresponding to the changed location service authority of the target terminal, and the one or more keys are used to decrypt the broadcast Network auxiliary data.
  • the core network element is AMF, the positioning server is LMF, and the user subscription information server is UDM; or, the core network element is MME, and the positioning server is E-SMLC.
  • the user subscription information server is HSS.
  • a positioning service system including: a positioning server, configured to receive a first positioning service authority change message, where the first positioning service authority change message is used to request to change the positioning service authority of a target terminal; core network Yuan, used to receive a second positioning service authority change message sent by the positioning server, where the second positioning service authority change message carries the changed location service authority information of the target terminal; the positioning server is also used to send The core network element sends a second location service permission change message.
  • the location service system further includes: a user subscription information server, configured to receive a location service permission change instruction message sent by the location server, and the location service permission change instruction message is used to instruct the user subscription information server to determine The location service authority after the target terminal is changed;
  • the user subscription information server is also used to send a positioning service authority change confirmation message to the positioning server, where the positioning service authority change confirmation message carries the changed location service authority information of the target terminal.
  • the location service system further includes: a business entity for receiving the location server permission change instruction message, and the location service permission change instruction message for instructing the business entity to determine the changed location of the target terminal Service authority, and generates a key corresponding to the location service authority after the target terminal is changed; the business entity is also used to send a location service authority change response message to the location server, and the location service authority change response message is used to Instructing the positioning server to save the changed positioning service authority information of the target terminal and the key corresponding to the changed positioning service authority of the target terminal.
  • the positioning server is further configured to: receive a first positioning service authority change message from the user subscription information server that carries the changed positioning service authority information of the target terminal, and the first positioning service authority
  • the change message is sent after the user subscription server changes the position service authority of the target terminal according to the position service authority change instruction message from the core network element, and the position service authority change instruction message is the core
  • the network element sends after receiving the attachment request message or the tracking area update request message from the target terminal, the attachment request message or the tracking area update request message carries positioning service authority change instruction information, and the positioning service authority change instruction
  • the information is used to instruct to change the location service authority of the target terminal.
  • the core network element is further used for: receiving a positioning service authority change message from a positioning server, where the positioning service change message carries the changed positioning service authority information of the target terminal; and notifies the target terminal of positioning The service authority is changed; receive the first request message sent by the target terminal according to the notification of the core network element, and send a first response message to the target terminal, where the first response message carries the target terminal change After the location service permission information.
  • the core network element is further configured to: receive a first request message from a target terminal; send a location service authority change instruction message to a user subscription information server, and the location service authority change instruction message is used to request acquisition The location service permission information after the target terminal is changed; receiving a location service permission change confirmation message sent by the user subscription information server, the location service permission change confirmation message carrying the location service permission and the location A key corresponding to the location service right after the target terminal is changed, and the location service right change confirmation message is used to instruct the core network element to save the location service right after the target terminal change and the target terminal after the change A key corresponding to the location service right of the server; sending a first response message to the target terminal, where the first response message carries the key corresponding to the location service right after the target terminal is changed.
  • the positioning server is LMF, the core network element is AMF or UDM; or the positioning server is E-SMLC, and the core network element is MME or HSS.
  • a positioning server including: a receiving module, configured to receive a first positioning server authority change message, and the first positioning service authority change message is used to request to change a positioning service authority of a target terminal; a sending module is used to Sending a second location service permission change message to the core network element, where the second location service permission change message carries the location service permission information after the target terminal is changed.
  • the sending module is further configured to send a positioning service authority change instruction message to the user subscription information server, and the positioning service authority change instruction message is used to instruct the user subscription information server to determine that the target terminal is changed Location service authority;
  • the receiving module is further configured to receive a location service authority change confirmation message sent by the user subscription information server, and the location service authority change confirmation message carries the location service authority information after the target terminal is changed .
  • the receiving module is further configured to: according to the first location service permission change message, determine the location service permission information after the target terminal is changed, and generate the location service permission corresponding to the target terminal after the change Key.
  • the receiving module is specifically configured to: receive the first location service permission change message sent by the target terminal through the application layer; the sending module is specifically configured to: send the positioning service to the core network element A permission change message, the location service permission change message is used to instruct the core network element to save the location service permission information after the target terminal is changed and the key corresponding to the target location service permission after the target terminal is changed.
  • the receiving module is specifically configured to receive a first location service permission change message from the core network element, where the first location service permission change message is received by the core network element Sent after the attachment request message or tracking area update request message of the target terminal, the attachment request message or tracking area update request message carries positioning service authority change instruction information, and the positioning service authority change instruction information is used to instruct to change the target
  • the positioning service authority of the terminal the sending module is specifically configured to: send a second positioning service authority change message to the core network element, and the second positioning service authority change message is used to instruct the core network element to save The location service authority information after the target terminal is changed and the key corresponding to the location service authority after the target terminal is changed.
  • the receiving module is further configured to verify the integrity of the first location service permission change message, and if the verification is passed, determine the location service permission after the target terminal is changed, and generate the target The key corresponding to the location service right after the terminal is changed.
  • the first location server permission change message is sent after the core network element determines that a new key needs to be generated for the target terminal; the receiving module is further used to: according to the first The location service authority change message generates a key corresponding to the location service authority changed by the target terminal for the target terminal, and the key is used to decrypt the broadcast network auxiliary data; the location server sends the key to the core network
  • the second positioning service authority change message sent by the network element is used to instruct the core network element to save the changed positioning service authority of the target terminal and the key corresponding to the changed positioning service authority of the target terminal.
  • the sending module is further configured to send a positioning service authority change instruction message to a business entity, and the positioning service authority change instruction message is used to instruct the business entity to determine the changed positioning service authority of the target terminal And generate a key corresponding to the changed location service authority of the target terminal;
  • the receiving module is further configured to: receive a location service authority change response message sent by the business entity, and the location service authority change response message It is used to instruct the positioning server to save the changed positioning service authority information of the target terminal and the key corresponding to the changed positioning service authority of the target terminal.
  • the receiving module is specifically configured to: receive a first positioning service authority change message from the user subscription information server that carries the changed positioning service authority information of the target terminal, and the first positioning service authority
  • the change message is sent after the user subscription server changes the position service authority of the target terminal according to the position service authority change instruction message from the core network element, and the position service authority change instruction message is the core
  • the network element sends after receiving the attachment request message or the tracking area update request message from the target terminal, the attachment request message or the tracking area update request message carries positioning service authority change instruction information, and the positioning service authority change instruction
  • the information is used to instruct to change the location service authority of the target terminal.
  • the sending module is further configured to: send a first location service permission change message to the business entity, where the first location service permission change message carries location service permission information after the target terminal is changed, The first location service changed message is used to instruct the business entity to generate a key corresponding to the changed location service right of the target terminal; the receiving module is further configured to: receive the first message sent by the business entity A location service permission change response message, the first location service permission change response message is used to instruct the location service permission to save the key corresponding to the changed location service permission of the target terminal.
  • the receiving module is specifically configured to receive a first location service permission change message from a business entity, where the first location service permission change message is sent by the business entity to the target terminal through the application layer A location service permission change instruction message and sent after the location service permission change is performed on the target terminal, the first location service permission change message is used to instruct the location server to save the target terminal's changed location to the service permission, And generate a key corresponding to the changed location service authority of the target terminal; the sending module is specifically configured to: send a second location service authority change message to the user subscription information server, and the second location service authority change message Carrying the location service permission information after the target terminal is changed, and the second location service permission change message is used to instruct the user subscription information server to save the location service permission after the target terminal is changed.
  • the receiving module is specifically configured to receive a location service authority change confirmation message sent by the user subscription information server, and the location service authority change confirmation message is used to indicate that the user subscription information server has saved the The location service right after the target terminal is changed and the key corresponding to the location service right after the target terminal is changed.
  • the changed location service authority information of the target terminal includes: one or more keys corresponding to the changed location service authority of the target terminal, and the one or more keys are used to decrypt the broadcast Network auxiliary data.
  • the changed location service authority information of the target terminal further includes: validity period; tracking area indication information used; key type indication information.
  • the first location service permission change message carries one or more of the following information: change indication information, used to indicate the location service permission change; change reason indication information, used to indicate the location service permission change Reason; change time limit information, used to indicate temporary change or permanent change, the change time limit information indicates that the temporary change also includes the validity period of the temporary change; service type indication information, used to indicate that the target terminal location service authority change application is a temporary application or Apply permanently.
  • the positioning server is LMF, the core network element is AMF or UDM; or the positioning server is E-SMLC, and the core network element is MME or HSS.
  • a core network element including: a receiving module for receiving a positioning service authority change message from a positioning server, the positioning service change message carrying location service authority information after a target terminal is changed; a notification module Is used to notify the target terminal that the location service authority has changed; a sending module is used to send a first request message to the target terminal according to the received first request message sent by the target terminal according to the notification of the core network element A response message, the first response message carries the changed location service authority information of the target terminal.
  • the notification module is specifically configured to: instruct the serving base station of the target terminal to send a system broadcast message, where the system broadcast message carries the identification of the target terminal and positioning service authority change indication information; or The serving base station of the target terminal sends a paging message, the paging message carries the identification of the target terminal and positioning service authority change instruction information; wherein, the positioning service authority change instruction information is used to indicate the positioning of the target terminal Service permissions have changed.
  • the first request message is an attachment request message
  • the first response message is an attachment acceptance message
  • the first request message is a tracking area update request message
  • the first response message is a tracking area Update acceptance message.
  • the changed location service authority information of the target terminal includes: one or more keys corresponding to the changed location service authority of the target terminal, and the one or more keys are used to decrypt the broadcast Network auxiliary data.
  • the core network element is MME, and the positioning server is E-SMLC; or, the core network element is AMF, and the positioning server is LMF.
  • a core network element including: a receiving module, configured to receive a positioning service authority change message from a positioning server, the positioning service authority change message carrying location service authority information and target location after the target terminal is changed A key corresponding to the location service right after the target terminal is changed, and the location service right change message is used to instruct the core network element to save the location service right after the target terminal is changed and the target terminal is changed enough A key corresponding to the positioning service authority; a sending module, configured to send a positioning service authority configuration message to the target terminal, where the positioning service authority configuration message carries the changed positioning service authority information of the target terminal.
  • the changed location service authority information of the target terminal includes: one or more keys corresponding to the changed location service authority of the target terminal, and the one or more keys are used to decrypt the broadcast Network auxiliary data.
  • the core network element is AMF
  • the positioning server is LMF
  • a core network element including: a receiving module for receiving a first request message from a target terminal; a sending module for sending a positioning service authority change indication message to a user subscription information server, the positioning The service authority change instruction message is used to request to obtain the changed location service authority information of the target terminal; the receiving module is further used to receive a location service authority change confirmation message sent by the user subscription information server, and the location service authority
  • the change confirmation message carries the location service right after the target terminal is changed and the key corresponding to the location service right after the target terminal is changed, and the location service permission change confirmation message is used to instruct the core network element to save the location The location service right after the target terminal is changed and the key corresponding to the location service right after the target terminal is changed;
  • the sending module is further configured to send a first response message to the target terminal, the first response The message carries the key corresponding to the changed location service right of the target terminal.
  • the location service permission change confirmation message is sent by the user subscription information server according to the received location service permission change instruction message after acquiring the location service permission information after the target terminal has been changed from the business entity.
  • the changed location service authority information of the target terminal includes: one or more keys corresponding to the changed location service authority of the target terminal, and the one or more keys are used to decrypt the broadcast Network auxiliary data.
  • the core network element is AMF, the positioning server is LMF, and the user subscription information server is UDM; or, the core network element is MME, and the positioning server is E-SMLC.
  • the user subscription information server is HSS.
  • a communication device including: a processor, a memory, and a transceiver; the transceiver is used to receive or send information under the control of the processor; and the processor is used to read the The computer instructions in the memory execute the method as described in the first aspect.
  • a communication device including: a processor, a memory, and a transceiver; the transceiver is used to receive or send information under the control of the processor; and the processor is used to read all The computer instructions in the memory execute the method described in the second aspect.
  • a communication device including: a processor, a memory, and a transceiver; the transceiver is used to receive or transmit information under the control of the processor; and the processor is used to read the The computer instructions in the memory execute the method described in the third aspect.
  • a communication device including: a processor, a memory, and a transceiver; the transceiver is used to receive or send information under the control of the processor; and the processor is used to read all The computer instructions in the memory execute the method described in the fourth aspect.
  • a fourteenth aspect there is provided a computer-readable storage medium that stores computer-executable instructions for causing the computer to perform the method according to the tenth aspect.
  • a computer-readable storage medium storing computer-executable instructions for causing the computer to perform the method according to the eleventh aspect .
  • a computer-readable storage medium storing computer-executable instructions for causing the computer to perform the method according to the twelfth aspect .
  • a computer-readable storage medium storing computer-executable instructions for causing the computer to perform the method according to the thirteenth aspect .
  • FIG. 1 is a schematic diagram of an architecture of a positioning system to which an embodiment of this application is applicable;
  • FIG. 2 is a schematic diagram of a positioning system architecture in a 4G network provided by an embodiment of this application;
  • FIG. 3 is a schematic diagram of a positioning system architecture in a 5G network provided by an embodiment of the present application.
  • 4 to 7 are schematic diagrams of a process of changing a location service authority provided by an embodiment of the present application.
  • FIG. 8 to FIG. 12 are schematic diagrams of message interactions in a location service authority change process provided by embodiments of the present application.
  • FIG. 13 is a schematic structural diagram of a positioning service system provided by an embodiment of this application.
  • FIG. 14 is a schematic structural diagram of a positioning server provided by an embodiment of this application.
  • 15 to 17 are schematic structural diagrams of core network elements provided by embodiments of the present application.
  • 18 to 21 are schematic structural diagrams of a communication device provided by an embodiment of this application.
  • the term “plurality” refers to two or more, and other quantifiers are similar.
  • FIG. 1 is a schematic diagram of a positioning system architecture applicable to an embodiment of the present application.
  • the figure exemplarily lists network elements in some positioning systems related to the embodiments of the present application.
  • the terminal 101 may use the application layer and positioning
  • the server 105 or the business entity 106 completes the information interaction of the location service permission change of the terminal 101, or carries the location service permission change instruction information and the location server 105 or the business entity 106 to complete the terminal 101 through the attachment request message or the tracking area update request message Information exchange for location service authority changes.
  • the core network element 103 When the core network element 103 receives the request for obtaining a key sent by the base station 102 after changing the location service authority of the terminal 101, it can directly obtain the changed location service authority of the terminal from the user subscription information server 104; or, directly from the location server 105 Obtain the location service right after the terminal is changed, or obtain the location service right after the terminal is changed in the location server 105 through the user subscription information server 104; or, obtain from the business entity 106 through the user subscription information server 104 and / or the location server 105 The location service authority after the terminal is changed.
  • the positioning server 105 can generate a new key according to the changed positioning service authority. The key is used by the terminal to decrypt the broadcast network auxiliary data.
  • the above-mentioned business entity 106 stores the location service permission of the terminal 101 to control the location service permission change of the terminal 101.
  • the business entity 106 sends the changed location to the core network element 103 through the location server 105 and / or the user subscription information server 104 Location service permissions.
  • the business entity 106 is an organization or unit outside the communication system, such as a relevant official agency such as the Geographic Information Surveying and Mapping Bureau, which is not limited in this application.
  • the core network element 103 involved in FIG. 1 may be a mobility management node (Mobility Management Entity, MME) in a 4G network positioning system, or an access and mobility management function (Access and Mobility Management Function) in a 5G network positioning system , AMF);
  • the user subscription information server 104 can be the home subscriber server (Home Subscriber Server, HSS) in the 4G network positioning system, or the same data management (Unified Data Management, UDM) in the 5G network positioning system;
  • positioning The server 105 may be an Evolved Serving Mobile Location Center (E-SMLC) in a 4G network positioning system, or may be a location management function (Location Management Function, LMF) in a 5G network positioning system.
  • E-SMLC Evolved Serving Mobile Location Center
  • LMF Location Management Function
  • FIG. 2 is a schematic diagram of an architecture of a positioning system in a 4G network to which an embodiment of the present application is applied.
  • the figure exemplarily lists some network elements related to the embodiment of the present application.
  • the base station (eNodeB) 204 receives the request message sent by the terminal (UE) 205 to obtain the key through the LTE-Uu.
  • the request message may carry indication information about the change of the location service authority, and the request message Forwarded to the MME 202 to which the UE belongs; MME 202 receives the request message for obtaining the key through S1, and interacts with HSS 201 through S6a to obtain the changed location service authority of the UE, and through SLs and E-SMLC 203 Perform information interaction to obtain the key information corresponding to the changed location service authority.
  • FIG. 3 is a schematic diagram of a positioning system architecture in a 5G network to which the embodiments of the present application are applicable.
  • the figure exemplarily lists some network elements related to the embodiments of the present application.
  • a radio access network (Next Generation Radio Access Networks, NG-RAN) node 304 receives a request message sent by a terminal (UE) 305 to obtain a key, which may be carried in the request message Locate the indication information about the change of service authority, and forward the request message to the AMF 302 to which the UE belongs through N2; or, AMF 302 directly receives the request message sent by the UE to obtain the key through N1.
  • AMF 302 exchanges information with UDM 301 through N8 to obtain the changed location service right of the UE, and uses NLs and LMF 303 to exchange information to obtain key information corresponding to the changed location service right.
  • N1, N2, and NLs in the foregoing embodiments are communication ports used to support information transmission between devices and devices, devices and network elements, and between network elements and network elements in 5G networks. This application The embodiment does not limit this.
  • the interaction between 5G network functions can use a service-based interaction method, that is, the message interaction between network functions is implemented according to the method of service invocation, that is, the service-based interface method can be supported in the location service information interaction .
  • FIG. 4 it is a flowchart of a method for changing a location service authority provided by an embodiment of the present application. As shown in the figure, the process includes:
  • the positioning server receives the first location service permission change message, and the first location service permission change message is used to request to change the location service permission of the target terminal.
  • the positioning server may be an E-SMLC in a 4G network positioning system, or an LMF in a 5G network system.
  • the location server receives the first location service permission change message sent by the target terminal through the application layer, and the first location service permission change message carries one or more of the following information: change indication information, used to indicate that the location service permission occurs Change; change reason indication information, used to indicate the reason for the change of location service authority; change time limit information, used to indicate temporary change or permanent change, and the change time limit information indicates the temporary change also includes the validity period of the temporary change; service type indication information, used Instruct the target terminal to locate the service permission change application as a temporary application or a permanent application.
  • the location service right is the location service right, which can indicate whether it is allowed to obtain a key, which is used to decrypt the broadcast network auxiliary data.
  • the key allowed by the location service authority may include one or more keys, and more specifically, may include one or more keys corresponding to the tracking area.
  • a kind of authority is: the terminal is allowed to obtain the key A in the tracking area A, so as to decrypt the broadcasted network auxiliary data.
  • the key may be a key used in a specific area (such as a tracking area), and is called a key corresponding to the tracking area. There may be one or more keys corresponding to one tracking area, and the keys corresponding to different tracking areas may be different. Different keys can be used to decrypt different types of network auxiliary data.
  • the terminal has contracted a location service, and the permission of the location service is to allow the key used in the area to be obtained in a certain area (tracking area), so that the terminal can obtain the key that can be used in the area, Therefore, the terminal can decrypt the broadcast network auxiliary data, and then use the network auxiliary data to locate.
  • the positioning server sends a location service authority change instruction message to the user subscription information server, and the location service authority change instruction message is used to instruct the user subscription information server to determine the changed location service authority of the target terminal; the location server receives the user
  • the location service permission change confirmation message sent by the contracted information server, the location service permission change confirmation message carries the location service permission information after the target terminal is changed.
  • the user subscription information server may be an HSS in a 4G network positioning system or a UDM in a 5G network system.
  • the positioning server sends a second positioning service permission change message to the core network element.
  • the second positioning service permission change message carries the location service permission information after the target terminal is changed.
  • the core network element may be an MME in a 4G network positioning system or an AMF in a 5G network system;
  • the location service permission information after the target terminal is changed includes: one or more corresponding to the location service permission after the target terminal is changed.
  • One key, one or more keys are used to encrypt the network auxiliary data broadcast to the target terminal;
  • the location service permission information after the target terminal is changed also includes: validity period, used tracking area indication information and key type indication information.
  • the positioning server sends a second positioning service permission change message to the core network element, where the second positioning service permission change message is used to instruct the core network element to save the changed location service permission information of the target terminal and the target terminal after the change The key corresponding to the location service authority.
  • the positioning server receives the first location service permission change message and sends a second location service permission change message to the core network element; wherein, the first location service permission change message determines that the target terminal is changed
  • the location service permission of the second location service permission change message carries the location service permission information after the target terminal is changed; by the above method, the target terminal obtains the corresponding key according to the changed location service permission information.
  • the location service permission change of the terminal is controlled by the location server.
  • the location server can directly determine the location service permission information after the terminal change according to the received first location service permission change message. And generate the key corresponding to the changed location service authority of the target terminal.
  • the target terminal carries the location service permission change indication information through the attach request message or the TAU request message.
  • the positioning server receives the first positioning from the core network element Service permission change message, the first location service permission change message is sent after the core network element receives the target terminal's attachment request message or tracking area update request message, and the attachment request message or tracking area update request message carries location service permission change indication information ,
  • the location service permission change instruction information is used to instruct to change the location service permission of the target terminal;
  • the location server sends a second location service permission change message to the core network element, and the second location service permission change message is used to instruct the core network element to save the target
  • the location service authority information after the terminal is changed and the key corresponding to the location service authority after the target terminal is changed.
  • the second location service change message carries change time limit information, which is used to indicate that the location service permission change is a temporary change or a permanent change, and the validity period in the case of the temporary change.
  • the location server may verify the integrity of the first location service permission change message. If the verification is passed and the user is allowed to perform the location service permission change, the location service permission after the target terminal change is determined, and after the target terminal change is generated, The key corresponding to the location service authority.
  • the location server after receiving the first location service permission change message further includes: A location service authority change message, which generates a key for the target terminal corresponding to the target terminal's changed location service authority.
  • the key is used to encrypt the network auxiliary data broadcast to the target terminal; the second location server sends to the core network element
  • the location service permission change message is used to instruct the core network element to save the location service permission information after the target terminal is changed and the key corresponding to the location service permission after the target terminal is changed.
  • the location service permission change of the target terminal is controlled by the business entity.
  • the location server further includes: the location server sends a location service permission change instruction message to the business entity, positioning The service permission change instruction message is used to instruct the business entity to determine the location service permission after the target terminal is changed, and generate a key corresponding to the location service permission after the target terminal is changed; the location server receives the location service permission change response message sent by the business entity, The location service permission change response is used to instruct the location server to save the location service permission information after the target terminal has been changed and the key corresponding to the location service permission after the target terminal has been changed.
  • the location service authority change of the target terminal is controlled by the user subscription information server.
  • the location server receives the first location service authority change message, including: A first positioning service authority change message carrying the changed location service authority information of the target terminal on the user subscription information server, the first positioning service authority change message is the user subscription server's instruction for changing the location service authority from the core network element The message is sent after the location service permission of the target terminal is changed.
  • the location service permission change indication message is sent after the core network element receives the attachment request message or tracking area update request message from the target terminal.
  • the attachment request message or tracking area update The request message carries location service authority change instruction information, and the location service authority change instruction information is used to instruct to change the location service authority of the target terminal.
  • the location service permission change of the target terminal is controlled by the business entity.
  • the location server further includes: the location server sending the first location to the business entity Service permission change message, the first location service permission change message carries the location service permission information after the target terminal is changed, and the first location service permission change message is used to instruct the business entity to generate a key corresponding to the target terminal's changed location service permission
  • the positioning server receives the first positioning service authority change response message sent by the business entity, and the first positioning service authority change response message is used to instruct the positioning server to save the key corresponding to the changed positioning service authority of the target terminal.
  • the location service permission change of the target terminal is controlled by the business entity, and the target terminal sends the first location service permission change message to the location server through the application layer.
  • the location The server receives the first location service permission change message from the business entity.
  • the first location service permission change message is sent by the business entity after receiving the location service permission change instruction message sent by the target terminal through the application layer and changing the location service permission of the target terminal ,
  • the first positioning service authority change message is used to instruct the positioning server to save the changed positioning service authority of the target terminal and generate a key corresponding to the changed positioning service authority of the target terminal;
  • the positioning server sends the second positioning to the core network element Service permission change message, including the location server sending a second location service permission change message to the user subscription information server, the second location service permission change message carries location service permission information after the target terminal is changed, and the second location service permission change message is used to indicate
  • the user subscription information server saves the location service permission after the target terminal is changed; after the location server sends the second location service permission change message to the core network element, it also includes the location server receiving the confirmation message of the location service permission change sent by the user subscription information server.
  • the service authority change confirmation message is used to indicate that the user subscription information server has saved the location service authority after the target terminal is changed and
  • the positioning service authority change process shown in FIG. 4 takes the positioning server as the execution subject, and based on the same technical concept, uses the core network element as the target terminal's execution subject of the location service authority change, as shown in FIG. 5, which is an embodiment of this application.
  • FIG. 5 is an embodiment of this application.
  • the process includes:
  • the core network element receives a positioning service permission change message from a positioning server, where the positioning service change message carries the location service permission information after the target terminal is changed.
  • the positioning server is E-SMLC; or, if the core network element is the AMF in the 5G network positioning system, the positioning server is LMF.
  • the changed location service authority information of the target terminal includes: one or more keys corresponding to the changed location service authority of the target terminal, and the one or more keys are used to encrypt the network broadcast to the target terminal supplementary data.
  • S502 The core network element notifies the target terminal that the location service authority has changed.
  • the network element of the core network instructs the serving base station of the target terminal to send a system broadcast message
  • the system broadcast message carries the identification of the target terminal and indication information for changing the location service authority
  • the paging message carries the identification of the target terminal and the location service authority change instruction information
  • the location service authority change instruction information is used to indicate the location service authority change of the target terminal.
  • the core network element receives the first request message sent by the target terminal according to the notification of the core network element, and sends a first response message to the target terminal, where the first response message carries the target terminal Changed location service permission information.
  • the first response message is an attachment acceptance message; or, if the first request message is a TAU request message, the first response message is a TAU acceptance message.
  • the core network element is used as the main body of the target terminal location server permission change, as shown in FIG. 6, which is a flowchart of a location service permission change method provided by an embodiment of the present application.
  • the process includes:
  • the core network element receives a location service permission change message from the location server, and the location service permission change message carries the location service permission information after the target terminal is changed and a key corresponding to the location service permission after the target terminal is changed; wherein, the The location service permission change message is used to instruct the core network element to save the location service permission after the target terminal is changed and the key corresponding to the location service permission after the target terminal is changed.
  • the core network element is the AMF in the 5G network positioning system
  • the positioning server is the LMF in the 5G network positioning system.
  • the core network element sends a positioning service permission configuration message to the target terminal, and the positioning service permission configuration message carries the location service permission information after the target terminal is changed.
  • the changed location service authority information of the target terminal includes: one or more keys corresponding to the changed location service authority of the target terminal, and the one or more keys are used to encrypt the network broadcast to the target terminal supplementary data.
  • the network side needs to change the location service authority of the target terminal for some reason, and the core network element may change the target terminal carried in the location service authority change message received from the location server.
  • the location service permission information is allocated to the target terminal, so that the target terminal can obtain the key according to the changed location service permission.
  • the core network element is used as the executor of the target terminal's location service authority change.
  • the business entity controls the target terminal's location service authority change and stores the target terminal's location service authority after the change.
  • FIG. 7 it is a flowchart of a method for changing a location service authority provided by an embodiment of the present application.
  • the process includes:
  • S701 The core network element receives the first request message from the target terminal.
  • the network element of the core network sends a location service permission change instruction message to the user subscription information server.
  • the location service permission change instruction message is used to request to obtain the changed location service permission information of the target terminal.
  • the location service permission information after the target terminal is changed includes: one or more keys corresponding to the location service permission after the target terminal is changed, and the one or more keys are used to decrypt broadcast network assistance data.
  • the core network element receives a location service permission change confirmation message sent by the user subscription information server, where the location service permission change confirmation message carries the location service permission change information after the target terminal change and the target terminal change The key corresponding to the post-location service authority.
  • the location service permission change confirmation message is sent by the user subscription information server after acquiring the location service permission information after the target terminal is changed from the business entity according to the received location service permission change instruction message; the location service permission The change confirmation message is used to instruct the core network element to save the location service right after the target terminal is changed and the key corresponding to the location service right after the target terminal is changed.
  • the core network element sends a first response message to the target terminal, where the first response message carries the key corresponding to the changed location service right of the target terminal.
  • the positioning server is E-SMLC, and the user subscription information server is HSS; or, if the core network element is a 5G network positioning system In AMF, the positioning server is LMF, and the user subscription information server is UDM.
  • the following uses a positioning service system of a 5G network as an example to specifically describe a flow of a method for changing a positioning service authority provided by an embodiment of the present application by means of message interaction.
  • the location service permission information may be pre-configured in UDM or may not be pre-configured in UDM, but the location service permission information sent from LMF includes the changed location service permission information and is stored in UDM.
  • the process includes:
  • the UE needs to change the location service permission, and then sends a location service permission change message to the LMF through the application layer.
  • the location service permission change may be permanent or temporary. If it is a temporary contract permission change, the location service permission change message also includes the validity period.
  • the LMF receives the contract permission change message sent by the UE, and interacts with the UE according to the message.
  • the UDM After receiving the location service permission change instruction information sent by the LMF, the UDM confirms the reason and type of the contracted permission change according to the instruction message, and saves the location service permission changed by the UE.
  • the UDM sends a UE location service permission change confirmation message to the LMF.
  • the LMF After receiving the UE positioning service authority change confirmation message sent by the UDM, the LMF determines a key corresponding to the changed location service authority of the UE according to the changed location service authority of the UE.
  • the LMF may generate a new key; or a UE that has not previously obtained the decryption key may obtain the permission of the decryption key because of the location service permission change.
  • the LMF sends a key data message carrying one or more changed encryption keys to the AMF.
  • the key is used to decrypt the broadcast network auxiliary data. For each changed or new key, it can include the validity period, a set of applicable tracking areas, and the type of encryption key.
  • the LMF sends an instruction message describing that the key corresponding to the changed location service right of the UE has not changed to the AMF.
  • the AMF stores the changed or new key according to the received key data message carrying one or more changed encryption keys, which may include the validity period, a set of applicable tracking areas, and the type of key.
  • the UE sends an attach request message or a TAU request message to the NG-RAN.
  • the attach request message or TAU request message can be sent as part of normal mobility management. You can also specifically send a TAU request message to request and obtain a key.
  • the attachment request message or the TAU request message carries instruction information for requesting the key.
  • the NG-RAN receives the attach request message or TAU request message and forwards it to the AMF.
  • the AMF is the serving AMF of the UE.
  • the AMF receives the attach request message or TAU request message and returns the attach accept message or TAU accept message to the NG-RAN.
  • the AMF carries the indication information of the key corresponding to the changed location service authority of the UE in the attachment acceptance message or TAU acceptance message, and the indication information of the key includes one or more changes applicable to the current tracking area of the UE or The new key, as well as the validity period associated with the key, track the region set and key type.
  • S811 The NG-RAN forwards the received attachment acceptance message or TAU acceptance message to the UE.
  • the UE After S811, after the UE receives the Attach Accept message or TAU Accept message from NG-RAN, once the validity period of the key has started and the UE is currently in the applicable tracking area, the UE can start decrypting the broadcast using the obtained key Network auxiliary data. When entering a tracking area that does not apply to the key, the UE stops using the key. When the validity period of the key has expired, the UE stops using and deletes the key.
  • the location service authority of the UE does not need to be pre-configured in the UDM.
  • the location service authority information sent from the LMF includes the changed location service authority information and the key corresponding to the location service authority is stored in the AMF.
  • the LMF is executed to send the changed location service permission and the possibly changed key or new key to AMF, AMF Save the changed location service authority and the possibly changed key or new key. The remaining steps are the same as the flow shown in FIG. 8.
  • the UE configuration update process can be triggered by the AMF.
  • the AMF is included in the UE configuration update process It carries information about the location service permission change. After receiving this information, the UE can promptly initiate an attachment request message or a TAU request message to obtain the key corresponding to the location service permission change.
  • the MME or eNodeB can send it to the UE through a broadcast message or a paging message.
  • the broadcast message or, the paging message carries the identification information of the UE key change in the location service and the address of the UE whose location service authority is changed.
  • a message authentication code (Message, Authentication, Code, MAC) can be used to ensure the integrity of the message to the terminal used by the network to indicate the change of user authority.
  • the calculation of MAC can use the key obtained during the UE's attach request or TAU request to complete the verification. For example, assume that the MAC value is set to X bytes.
  • the specific verification method is:
  • the key used for integrity protection calculates the part of the message except the MAC.
  • the key for integrity protection may be derived by obtaining the key through initial attachment authentication.
  • the MAC value is calculated through integrity protection and placed in the last X byte of the system message or paging message to the UE.
  • the UE After receiving the system message, the UE uses the integrity protection key consistent with the network side to recalculate the part except the last X bytes of the message for integrity calculation.
  • the key and function used are the same as the network side. The same is used. If the calculated MAC value is the same as the received MAC value, the integrity verification is passed. Otherwise, the integrity verification of the notification message fails, and the UE will discard the received indication message.
  • system messages and paging messages can be pre-defined:
  • the message needs to include the identity of the user with the update authority
  • the message also optionally includes the security algorithm and key identification used for the above-mentioned MAC calculation.
  • the above embodiments take the positioning service system of the 5G network as an example in the execution of S801 to S812.
  • the network elements in the positioning service system of the 4G network have changed, and the LMF in the positioning service system of the 5G network can
  • E-SMLC E-SMLC
  • UDM is changed to HSS
  • AMF is changed to MME
  • NG-RAN is changed to eNodeB, which can realize the key distribution of the positioning service system based on 4G network, which will not be repeated here.
  • FIG. 9 it is a schematic diagram of message interaction in a location service permission change process provided by an embodiment of the present application.
  • the process includes:
  • the LMF sends the UE location service permission change request message to the AMF.
  • the LMF determines the location service right after the change of the UE and its corresponding key according to the reason, and changes the location service right, the reason of the change and the UE after the UE change
  • the information such as the key corresponding to the changed location service permission is carried in the location service permission change request message and sent to the AMF.
  • the AMF saves the UE's changed location service permission and the key corresponding to the UE's changed location service permission; where the key may include the validity period and a set of applicable Tracking area and key type.
  • S903 AMF returns a response message of UE location service authority change to LMF.
  • the AMF sends a configuration update request message to the UE, where the message carries the reason for the UE's location service permission change, the changed location service permission, and the key corresponding to the changed location service permission.
  • the UE may start to decrypt the broadcasted network assistance data using the obtained key.
  • the UE stops using the key.
  • the UE stops using and deletes the key.
  • S905 The UE returns a configuration update response message to the AMF.
  • the UE no longer sends the location service permission change message to the LMF through the application layer, but carries the location service permission change message of the UE in the attach request message or TAU message.
  • FIG. 10 it is a schematic diagram of message interaction in a location service permission change process provided by an embodiment of the present application.
  • the location service authority of the UE and the key corresponding to the location service authority are stored in the LMF.
  • the LMF may send the key corresponding to the location service authority of the UE to the AMF in advance. storage.
  • the process includes:
  • the UE sends an attach request message or a TAU request message to the NG-RAN; the attach request message or the TAU request message carries an instruction message for changing the location service authority of the UE.
  • the instruction message includes the location service authority and change for the UE to apply for the change Reason and type of service.
  • S1002 The NG-RAN forwards the received attachment request message or TAU request message to the AMF to which the UE belongs.
  • the UE positioning service permission change instruction message is sent to the LMF, and the location service permission change request message is sent to the LMF for requesting to change the location service permission of the UE; ,
  • the request message carries an instruction message for the change of UE location service authority.
  • the LMF verifies the indication message of the location service permission change of the UE according to the received location service permission change request message of the location server. If the verification succeeds, the location service permission of the UE is changed and determined according to the location service permission after the UE changes Change the key or generate a new key.
  • the LMF sends a location service permission change confirmation message to the AMF.
  • the message directly carries the indication information of the new key; if the UE's changed location service authority does not generate a new key, the message Carries the indication information of the changed key; the indication information of the key includes one or more changed or new keys applicable to the current tracking area of the UE, and the validity period related to the key, tracking Zone set and key type.
  • the AMF saves the key corresponding to the changed location service right of the UE according to the received location service right confirmation message.
  • the location service permission of the UE is stored in UDM, and the AMF needs to obtain the key after the location service permission change from the LMF through the UDM. That is, after executing S1002, the AMF sends a location service permission change request message to the UDM; UDM verifies the UE's location service permission change instruction message according to the received location service permission change request message, and if the verification is successful, the UE is confirmed after the change Location service authority and send a message to LMF.
  • This message is used to obtain the key corresponding to the changed location service authority, which carries the reason for change, service type and UE identity information; LMF returns to UDM based on the received message Confirmation message; UDM returns the confirmation message of location service authority change to AMF based on the received confirmation message; LAM confirms the corresponding key after the location service authority change according to the message received from UDM, and maps the changed location service authority
  • the indication information of the key is sent to the AMF.
  • the indication information of the key includes one or more changed or new keys applicable to the current tracking area of the UE, and the validity period related to the key, tracking area set and secret Key type. The remaining steps are the same as those shown in FIG.
  • the UE's location service authority and its corresponding key are stored in the LMF, and the LMF may pre-register the UE's location service authority and its corresponding The key is sent to the AMF, and the AMF verifies the indication message that the UE's location service authority is changed. In this case, after executing S1002, the AMF verifies the indication message of the UE's location service authority change.
  • the AMF can directly send the changed key to the UE Or the unchanged key, execute steps S1007 to S1009; if the UE needs to generate a new key after the location service permission is changed, the AMF sends an instruction message to the LMF to change the location service permission.
  • the LMF generates a new key according to the received instruction message of location service authority change, and sends the generated new key to the AMF. The remaining steps are the same as those shown in FIG. 10.
  • the above embodiments take the location service system of the 5G network as an example during the execution of S1001 to S1009.
  • the network elements in the location service system of the 4G network have changed, and the LMF in the location service system of the 5G network
  • UDM is changed to HSS
  • AMF is changed to MME
  • NG-RAN is changed to eNodeB, which can realize the key distribution of the positioning service system based on 4G network, which will not be repeated here.
  • the business entity is responsible for storing and controlling the change of the location service authority of the UE.
  • FIG. 11 it is a schematic diagram of message interaction in a location service permission change process provided by an embodiment of the present application.
  • the UE location service authority is stored and controlled by the business entity
  • the LMF may send the key corresponding to the UE location service authority to the AMF in advance
  • the business entity actively sends the determined indication information of the location service authority change to the UDM .
  • the process includes:
  • the UE needs to change the location service permission, and then sends a location service permission change message to the business entity through the application layer.
  • the location service permission change may be permanent or temporary. If it is a temporary contract permission change, the location service permission change message also includes the validity period.
  • the service entity receives the contract permission change message sent by the UE, and interacts with the UE according to the message.
  • the location service permission change instruction message includes the changed location service permission, the reason for the change, and the service type.
  • S1103 The LMF performs verification according to the received location service permission change instruction message. If the verification is passed, the UE's changed location service permission is saved, and the corresponding key is determined or a new password is generated according to the UE's changed location service permission. key.
  • S1104 LMF sends a permission change instruction message to the UDM location service.
  • the location service authority change instruction message received by the LMF is directly forwarded to UDM; if the changed location service authority generates a new key, Then, the instruction information of the new key is added to the location service authority change instruction message and then sent to the UDM.
  • the UDM saves the changed location service right of the UE and its corresponding key according to the received location service right change instruction message.
  • S1107 The LMF returns a location service permission confirmation instruction message to the business entity and sends it.
  • the AMF sends a request message to the UDM according to the received attachment request message or TAU request message, which is used to obtain a key corresponding to the changed location service right of the UE.
  • the UDM returns a confirmation message to the AMF according to the received request message.
  • the confirmation message includes the indication information of the key corresponding to the location service authority changed by the UE, or the new key generated after the UE location service authority is changed .
  • S1112 The AMF saves the key corresponding to the change of the UE's location service authority according to the received confirmation message.
  • the UE location service permission is stored and controlled by the business entity, and the LMF may send the key corresponding to the UE location service permission to the AMF in advance, by The UE confirms the indication information of the location service permission change to the business entity through the attach request message or the TAU request message. In this case, after executing S1101, directly execute S1108 to S1109.
  • the AMF sends a location service change request message to the UDM according to the received attachment request message or TAU request message; UDM forwards the received location service change request message to the business entity ; The business entity confirms the changed location service authority of the UE according to the received location service change request message, and returns the location service authority change confirmation message to the UDM, which includes the location service authority after the UE is changed; UDM will receive the received location
  • the service permission change confirmation message is forwarded to AMF.
  • the remaining steps are the same as those shown in FIG. 11.
  • the above embodiments take the positioning service system of the 5G network as an example during the execution of S1101 to S1115.
  • the network elements in the positioning service system of the 4G network have changed, and the LMF in the positioning service system of the 5G network can be changed.
  • E-SMLC UDM is changed to HSS
  • AMF is changed to MME
  • NG-RAN is changed to eNodeB, which can realize the key distribution of the positioning service system based on 4G network, which will not be repeated here.
  • the business entity is responsible for storing and controlling the change of the location service permission of the UE.
  • the UE no longer sends the location service permission change message to the business entity through the application layer.
  • the attachment request message or the TAU message carries the location service authority change message of the UE.
  • FIG. 12 it is a schematic diagram of message interaction of a location service change process provided by an embodiment of the present application.
  • the UE location service right is stored and controlled by the business entity, and the LMF may send the key corresponding to the UE location service right to the AMF in advance.
  • the process includes:
  • S1205 The business entity receives the location service permission change request message, and returns a location service permission change confirmation message to the LAM, where the location service permission change confirmation message includes the location service permission after the UE is changed.
  • S1206 LAM verifies the received confirmation message of location service authority change. If the verification is successful, the changed location service authority of the UE is saved, and the corresponding key is determined or a new password is generated according to the changed location service authority of the UE. key.
  • S1207 LAM sends a location service permission change confirmation message to AMF.
  • the location service authority change message received by the LAM is directly forwarded to the AMF; if the changed location service authority generates a new key, then Add the instruction information of the new key to the location service permission change message and send it to the AMF.
  • the location service permission change of the UE is controlled by the business entity, and the UE's location service permission is stored in the UDM.
  • the AMF sends a location service permission change request message to UDM, and the UDM sends the received location service permission change request message to LMF, which is then forwarded by the LMF to the business entity; the business entity receives After the location service permission change request message is returned to the LMF, the location service permission change confirmation message is returned.
  • the LMF sends the received location service permission change confirmation message to UDM, and then the UDM forwards it to the AMF.
  • the updated location service permission is saved in UDM .
  • the remaining steps are the same as the steps shown in FIG. 12 and will not be repeated here.
  • the above embodiments take the positioning service system of the 5G network as an example in the execution of S1201 to S1211.
  • the network elements in the positioning service system of the 4G network have changed, and the LMF in the positioning service system of the 5G network can be changed.
  • E-SMLC UDM is changed to HSS
  • AMF is changed to MME
  • NG-RAN is changed to eNodeB, which can realize the key distribution of the positioning service system based on 4G network, which will not be repeated here.
  • the embodiments of the present application also provide a positioning service system, which can implement the processes shown in FIG. 4 to FIG. 7.
  • FIG. 13 is a schematic structural diagram of a positioning service system provided by an embodiment of the present application.
  • the system may include: a positioning server 1301, a core network element 1302, and a user subscription server 1303.
  • the positioning server 1301 is configured to receive a first positioning service authority change message, where the first positioning service authority change message is used to request to change the positioning service authority of the target terminal.
  • the core network element 1302 is configured to receive a second location service permission change message sent by the location server, where the second location service permission change message carries the location service permission information after the target terminal is changed.
  • the positioning server 1301 is further configured to send a second positioning service authority change message to the core network element.
  • the location service system further includes: a user subscription information server 1303, configured to receive a location service permission change instruction message sent by the location server, and the location service permission change instruction message is used to indicate the user subscription information
  • the server determines the location service authority after the target terminal is changed; the user subscription information server 1303 is also used to send a location service authority change confirmation message to the location server, and the location service authority change confirmation message carries the target terminal change After the location service permission information.
  • the location service system further includes: a business entity 1304, configured to receive the location server permission change instruction message, and the location service permission change instruction message used to instruct the business entity to determine that the target terminal is changed Location service authority, and generates a key corresponding to the location service authority after the target terminal is changed; the business entity 1304 is also used to send a location service authority change response message to the location server, and the location service authority change response The message is used to instruct the positioning server to save the changed positioning service authority information of the target terminal and the key corresponding to the changed positioning service authority of the target terminal.
  • a business entity 1304 configured to receive the location server permission change instruction message, and the location service permission change instruction message used to instruct the business entity to determine that the target terminal is changed Location service authority, and generates a key corresponding to the location service authority after the target terminal is changed
  • the business entity 1304 is also used to send a location service authority change response message to the location server, and the location service authority change response The message is used to instruct the positioning server to save the changed positioning service authority information of the target terminal
  • the positioning server is further configured to receive a first positioning service authority change message from the user subscription information server that carries the changed positioning service authority information of the target terminal, and the first positioning service authority change The message is sent after the user subscription server changes the location service authority of the target terminal according to the location service authority change instruction message from the core network element.
  • the location service authority change instruction message is the core network The network element sends after receiving an attachment request message or a tracking area update request message from the target terminal, the attachment request message or the tracking area update request message carries positioning service authority change indication information, and the positioning service authority change indication information It is used to instruct to change the location service authority of the target terminal.
  • the core network element is further used to receive a location service permission change message from a location server, where the location service change message carries the location service permission information after the target terminal is changed; and the target terminal is notified of the location service The authority is changed; receive the first request message sent by the target terminal according to the notification of the core network element, and send a first response message to the target terminal, where the first response message carries the changed target terminal Location service permission information.
  • the core network element is further configured to receive a first request message from the target terminal; send a positioning service authority change instruction message to a user subscription information server, and the positioning service authority change instruction message is used to request to obtain The location service permission information after the target terminal is changed; receiving a location service permission change confirmation message sent by the user subscription information server, the location service permission change confirmation message carrying the location service permission after the target terminal change and the A key corresponding to the location service right after the target terminal is changed, and the location service right change confirmation message is used to instruct the core network element to save the location service right after the target terminal change and the A key corresponding to the positioning service authority; sending a first response message to the target terminal, where the first response message carries the key corresponding to the changed positioning service authority of the target terminal.
  • the positioning server is LMF, the core network element is AMF or UDM; or the positioning server is E-SMLC, and the core network element is MME or HSS.
  • an embodiment of the present application further provides a positioning server, which can implement the process shown in FIG. 4.
  • the positioning server may include: a receiving module 1401 and a sending module 1402.
  • the receiving module 1401 is configured to receive a first location server permission change message, where the first location service permission change message is used to request to change the location service permission of the target terminal;
  • the sending module 1402 is configured to send a second location service permission change message to the core network element, where the second location service permission change message carries the location service permission information after the target terminal is changed.
  • the sending module is further configured to send a positioning service authority change instruction message to the user subscription information server, and the positioning service authority change instruction message is used to instruct the user subscription information server to determine that the target terminal is changed Location service authority;
  • the receiving module is further configured to receive a location service authority change confirmation message sent by the user subscription information server, and the location service authority change confirmation message carries the location service authority information after the target terminal is changed .
  • the receiving module is further configured to determine the location service permission information after the target terminal is changed according to the first location service permission change message, and generate a corresponding location service permission after the target terminal is changed Key.
  • the receiving module is specifically configured to receive the first location service permission change message sent by the target terminal through the application layer; the sending module is specifically configured to send the location service permission change to the core network element Message, the location service permission change message is used to instruct the core network element to save the location service permission information after the target terminal is changed and the key corresponding to the target location service permission after the target terminal is changed.
  • the receiving module is specifically configured to receive a first location service permission change message from the core network element, where the first location service permission change message is that the core network element receives the target Sent after the terminal's attachment request message or tracking area update request message, the attachment request message or tracking area update request message carries positioning service authority change instruction information, and the positioning service authority change instruction information is used to instruct to change the target terminal Location service authority;
  • the sending module is specifically configured to send a second location service authority change message to the core network element, and the second location service authority change message is used to instruct the core network element to save the The location service authority information after the target terminal is changed and the key corresponding to the location service authority after the target terminal is changed.
  • the receiving module is further configured to verify the integrity of the first location service permission change message, and if the verification is passed, determine the location service permission after the target terminal is changed, and generate the target terminal The key corresponding to the changed location service authority.
  • the first location server permission change message is sent after the core network element determines that a new key needs to be generated for the target terminal; the receiving module is further used to determine the location according to the first The service authority change message generates a key corresponding to the changed location service authority of the target terminal for the target terminal, and the key is used to decrypt the broadcast network auxiliary data; the positioning server sends to the core network element
  • the second location service permission change message is used to instruct the core network element to save the location service permission after the target terminal is changed and the key corresponding to the location service permission after the target terminal is changed.
  • the sending module is further configured to send a positioning service authority change instruction message to a business entity, where the positioning service authority change instruction message is used to instruct the business entity to determine the changed positioning service authority of the target terminal, And generate a key corresponding to the location service permission changed by the target terminal;
  • the receiving module is further configured to receive a location service permission change response message sent by the business entity, and the location service permission change response message is used to Instructing the positioning server to save the changed positioning service authority information of the target terminal and the key corresponding to the changed positioning service authority of the target terminal.
  • the receiving module is specifically configured to receive a first positioning service authority change message from the user subscription information server that carries the changed positioning service authority information of the target terminal, and the first positioning service authority change The message is sent after the user subscription server changes the location service authority of the target terminal according to the location service authority change instruction message from the core network element.
  • the location service authority change instruction message is the core network The network element sends after receiving an attachment request message or a tracking area update request message from the target terminal, the attachment request message or the tracking area update request message carries positioning service authority change indication information, and the positioning service authority change indication information It is used to instruct to change the location service authority of the target terminal.
  • the sending module is further configured to send a first location service permission change indication message to a business entity, where the first location service permission change message carries location service permission information after the target terminal is changed, the The first location service changed message is used to instruct the business entity to generate a key corresponding to the changed location service authority of the target terminal; the receiving module is further configured to receive the first location service sent by the business entity A permission change response message, the first location service permission change response message is used to instruct the location service permission to save the key corresponding to the location service permission changed by the target terminal.
  • the receiving module is specifically configured to receive a first location service permission change message from a business entity, where the first location service permission change message is that the business entity receives the location sent by the target terminal through the application layer A service permission change instruction message and sent after changing the location service permission of the target terminal, the first location service permission change message is used to instruct the positioning server to save the target terminal's changed location to the service permission, and Generating a key corresponding to the location service right after the target terminal has been changed; the sending module is specifically configured to send a second location service right change message to the user subscription information server, and the second location service right change message carries the The location service permission information after the target terminal is changed, and the second location service permission change message is used to instruct the user subscription information server to save the location service permission after the target terminal is changed.
  • the receiving module is specifically configured to receive a location service authority change confirmation message sent by the user subscription information server, and the location service authority change confirmation message is used to indicate that the user subscription information server has saved the target The location service authority after the terminal is changed and the key corresponding to the location service authority after the target terminal is changed.
  • the changed location service authority information of the target terminal includes: one or more keys corresponding to the changed location service authority of the target terminal, and the one or more keys are used to decrypt the broadcast Network auxiliary data.
  • the changed location service authority information of the target terminal further includes: validity period; tracking area indication information used; key type indication information.
  • the first location service permission change message carries one or more of the following information: change indication information, used to indicate the location service permission change; change reason indication information, used to indicate the location service permission change Reason; change time limit information, used to indicate temporary change or permanent change, the change time limit information indicates that the temporary change also includes the validity period of the temporary change; service type indication information, used to indicate that the target terminal location service authority change application is a temporary application or Apply permanently.
  • the positioning server is LMF, the core network element is AMF or UDM; or the positioning server is E-SMLC, and the core network element is MME or HSS.
  • embodiments of the present application also provide a core network element, which can implement the process shown in FIG. 5.
  • the core network element may include: a receiving module 1501, a notification module 1502, and a sending module 1503.
  • the receiving module 1501 is configured to receive a location service permission change message from a location server, where the location service change message carries location service permission information after the target terminal is changed.
  • the sending module 1503 is configured to send a first response message to the target terminal according to the received first request message sent by the target terminal according to the notification of the core network element, where the first response message carries the The location service authority information after the target terminal is changed.
  • the notification module is specifically used to instruct the serving base station of the target terminal to send a system broadcast message, where the system broadcast message carries the identification of the target terminal and indication information of location service authority change; or, instructs the The serving base station of the target terminal sends a paging message, the paging message carries the identification of the target terminal and the location service authority change instruction information; wherein, the location service authority change instruction information is used to indicate the location service of the target terminal The permissions have changed.
  • the first request message is an attachment request message
  • the first response message is an attachment acceptance message
  • the first request message is a tracking area update request message
  • the first response message is a tracking area update Accept the message.
  • the changed location service authority information of the target terminal includes: one or more keys corresponding to the changed location service authority of the target terminal, and the one or more keys are used to decrypt the broadcast Network auxiliary data.
  • the core network element is MME, and the positioning server is E-SMLC; or, the core network element is AMF, and the positioning server is LMF.
  • embodiments of the present application also provide a core network element, which can implement the process shown in FIG. 6.
  • the core network element may include: a receiving module 1601 and a sending module 1602.
  • the receiving module 1601 is configured to receive a positioning service authority change message from a positioning server, where the positioning service authority change message carries location service authority information after the target terminal is changed and a key corresponding to the target terminal service authority after the changed location service right
  • the location service permission change message is used to instruct the core network element to save the location service permission after the target terminal is changed and a key corresponding to the location service permission changed by the target terminal.
  • the sending module 1602 is configured to send a positioning service permission configuration message to the target terminal, where the positioning service permission configuration message carries the changed location service permission information of the target terminal.
  • the changed location service authority information of the target terminal includes: one or more keys corresponding to the changed location service authority of the target terminal, and the one or more keys are used to decrypt the broadcast Network auxiliary data.
  • the core network element is AMF
  • the positioning server is LMF
  • the embodiments of the present application provide a core network element, which can implement the process shown in FIG. 7.
  • the core network element may include: a receiving module 1701 and a sending module 1702.
  • the receiving module 1701 is configured to receive the first request message from the target terminal.
  • the sending module 1702 is configured to send a positioning service authority change instruction message to the user subscription information server, where the positioning service authority change instruction message is used to request to obtain the changed positioning service authority information of the target terminal.
  • the receiving module 1701 is further configured to receive a positioning service authority change confirmation message sent by the user subscription information server, where the positioning service authority change confirmation message carries the changed location service authority change information of the target terminal and the A key corresponding to the location service right after the target terminal is changed, and the location service right change confirmation message is used to instruct the core network element to save the location service right after the target terminal change and the The key corresponding to the location service authority.
  • the sending module 1702 is further configured to send a first response message to the target terminal, where the first response message carries a key corresponding to the changed location service authority information of the target terminal.
  • the location service permission change confirmation message is sent by the user subscription information server according to the received location service permission change instruction message after acquiring the location service permission information after the target terminal has been changed from the business entity.
  • the changed location service authority information of the target terminal includes: one or more keys corresponding to the changed location service authority of the target terminal, and the one or more keys are used to decrypt the broadcast Network auxiliary data.
  • the core network element is AMF, the positioning server is LMF, and the user subscription information server is UDM; or, the core network element is MME, and the positioning server is E-SMLC.
  • the user subscription information server is HSS.
  • an embodiment of the present application also provides a communication device, which can implement the functions implemented in FIG. 14 in the embodiment of the present application.
  • the communication device may include: a processor 1801, a memory 1802, a transceiver 1803, and a bus interface 1804.
  • the processor 1801 is responsible for managing the bus architecture and general processing, and the memory 1802 may store data used by the processor 1801 when performing operations.
  • the transceiver 1803 is used to receive and transmit data under the control of the processor 1801.
  • the bus architecture may include any number of interconnected buses and bridges, specifically, one or more processors represented by the processor 1801 and various circuits of the memory represented by the memory 1802 are linked together.
  • the bus architecture can also link various other circuits such as peripheral devices, voltage regulators and power management circuits, etc., which are well known in the art, and therefore, they will not be further described in this article.
  • the bus interface provides an interface.
  • the processor 1801 is responsible for managing the bus architecture and general processing, and the memory 1802 may store data used by the processor 1801 when performing operations.
  • the process disclosed in the embodiment of the present invention may be applied to the processor 1801 or implemented by the processor 1801.
  • each step of the signal processing flow may be completed by an integrated logic circuit of hardware in the processor 1801 or an instruction in the form of software.
  • the processor 1801 may be a general-purpose processor, a digital signal processor, an application specific integrated circuit, a field programmable gate array or other programmable logic device, a discrete gate or transistor logic device, or a discrete hardware component, which can implement or execute in the embodiments of the present invention
  • the disclosed methods, steps and logic block diagrams may be a microprocessor or any conventional processor.
  • the steps of the method disclosed in conjunction with the embodiments of the present invention may be directly embodied and executed by a hardware processor, or may be executed and completed by a combination of hardware and software modules in the processor.
  • the software module may be located in a mature storage medium in the art, such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, an electrically erasable programmable memory, and a register.
  • the storage medium is located in the memory 1802.
  • the processor 1801 reads the information in the memory 1802 and completes the steps of the signal processing flow in combination with its hardware.
  • the processor 1801 is configured to read computer instructions in the memory 1802 and perform the functions implemented in FIG. 14.
  • an embodiment of the present application further provides a communication device, which can implement the functions implemented in FIG. 15 in the embodiment of the present application.
  • the communication device may include: a processor 1901, a memory 1902, a transceiver 1903, and a bus interface 1904.
  • the processor 1901 is responsible for managing the bus architecture and general processing, and the memory 1902 may store data used by the processor 1901 in performing operations.
  • the transceiver 1903 is used to receive and transmit data under the control of the processor 1901.
  • the bus architecture may include any number of interconnected buses and bridges, specifically one or more processors represented by the processor 1901 and various circuits of the memory represented by the memory 1902 are linked together.
  • the bus architecture can also link various other circuits such as peripheral devices, voltage regulators, and power management circuits, etc., which are well known in the art, and therefore, they will not be further described in this article.
  • the bus interface provides an interface.
  • the processor 1901 is responsible for managing the bus architecture and general processing, and the memory 1902 may store data used by the processor 1901 in performing operations.
  • the process disclosed in the embodiments of the present invention may be applied to the processor 1901 or implemented by the processor 1901.
  • each step of the signal processing flow may be completed by an integrated logic circuit of hardware in the processor 1901 or instructions in the form of software.
  • the processor 1901 may be a general-purpose processor, a digital signal processor, an application specific integrated circuit, a field programmable gate array or other programmable logic device, a discrete gate or transistor logic device, or a discrete hardware component, which can implement or execute the embodiments of the present invention
  • the disclosed methods, steps and logic block diagrams may be a microprocessor or any conventional processor.
  • the steps of the method disclosed in conjunction with the embodiments of the present invention may be directly embodied and executed by a hardware processor, or may be executed and completed by a combination of hardware and software modules in the processor.
  • the software module may be located in a mature storage medium in the art, such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, an electrically erasable programmable memory, and a register.
  • the storage medium is located in the memory 1902, and the processor 1901 reads the information in the memory 1902 and completes the steps of the signal processing flow in combination with its hardware.
  • the processor 1901 is configured to read computer instructions in the memory 1902 and perform the functions implemented in FIG. 15.
  • an embodiment of the present application also provides a communication device, which can implement the functions implemented in FIG. 16 in the embodiment of the present application.
  • the communication device may include: a processor 2001, a memory 2002, a transceiver 2003, and a bus interface 2004.
  • the processor 2001 is responsible for managing the bus architecture and general processing, and the memory 2002 can store data used by the processor 2001 when performing operations.
  • the transceiver 2003 is used to receive and transmit data under the control of the processor 2001.
  • the bus architecture may include any number of interconnected buses and bridges, specifically one or more processors represented by the processor 2001 and various circuits of the memory represented by the memory 2002 are linked together.
  • the bus architecture can also link various other circuits such as peripheral devices, voltage regulators, and power management circuits, etc., which are well known in the art, and therefore, they will not be further described in this article.
  • the bus interface provides an interface.
  • the processor 2001 is responsible for managing the bus architecture and general processing, and the memory 2002 can store data used by the processor 2001 when performing operations.
  • the process disclosed in the embodiment of the present invention may be applied to the processor 2001 or implemented by the processor 2001.
  • each step of the signal processing flow can be completed by an integrated logic circuit of hardware in the processor 2001 or instructions in the form of software.
  • the processor 2001 may be a general-purpose processor, a digital signal processor, an application specific integrated circuit, a field programmable gate array or other programmable logic device, a discrete gate or transistor logic device, and a discrete hardware component, which can implement or execute in the embodiments of the present invention
  • the general-purpose processor may be a microprocessor or any conventional processor.
  • the steps of the method disclosed in conjunction with the embodiments of the present invention may be directly embodied and executed by a hardware processor, or may be executed and completed by a combination of hardware and software modules in the processor.
  • the software module may be located in a mature storage medium in the art, such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, an electrically erasable programmable memory, and a register.
  • the storage medium is located in the memory 2002.
  • the processor 2001 reads the information in the memory 2002 and completes the steps of the signal processing flow in combination with its hardware.
  • the processor 2001 is used to read computer instructions in the memory 2002 and perform the functions implemented in FIG. 16.
  • an embodiment of the present application also provides a communication device, which can implement the functions implemented in FIG. 17 in the embodiment of the present application.
  • the communication device may include: a processor 2101, a memory 2102, a transceiver 2103, and a bus interface 2104.
  • the processor 2101 is responsible for managing the bus architecture and general processing, and the memory 2102 may store data used by the processor 2101 in performing operations.
  • the transceiver 2103 is used to receive and transmit data under the control of the processor 2101.
  • the bus architecture may include any number of interconnected buses and bridges, specifically one or more processors represented by the processor 2101 and various circuits of the memory represented by the memory 2102 are linked together.
  • the bus architecture can also link various other circuits such as peripheral devices, voltage regulators, and power management circuits, etc., which are well known in the art, and therefore, they will not be further described in this article.
  • the bus interface provides an interface.
  • the processor 2101 is responsible for managing the bus architecture and general processing, and the memory 2102 may store data used by the processor 2101 in performing operations.
  • the process disclosed in the embodiment of the present invention may be applied to the processor 2101 or implemented by the processor 2101.
  • each step of the signal processing flow may be completed by an integrated logic circuit of hardware in the processor 2101 or instructions in the form of software.
  • the processor 2101 may be a general-purpose processor, a digital signal processor, an application specific integrated circuit, a field programmable gate array or other programmable logic device, a discrete gate or transistor logic device, or a discrete hardware component, which can implement or execute in the embodiments of the present invention
  • the disclosed methods, steps and logic block diagrams may be a microprocessor or any conventional processor.
  • the steps of the method disclosed in conjunction with the embodiments of the present invention may be directly embodied and executed by a hardware processor, or may be executed and completed by a combination of hardware and software modules in the processor.
  • the software module may be located in a mature storage medium in the art, such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, an electrically erasable programmable memory, and a register.
  • the storage medium is located in the memory 2102.
  • the processor 2101 reads the information in the memory 2102 and completes the steps of the signal processing flow in combination with its hardware.
  • the processor 2101 is configured to read computer instructions in the memory 2102 and perform the functions implemented in FIG. 17.
  • embodiments of the present application also provide a computer-readable storage medium.
  • the computer-readable storage medium stores computer-executable instructions for causing the computer to execute the process performed by the positioning server in FIG. 14.
  • embodiments of the present application also provide a computer-readable storage medium.
  • the computer-readable storage medium stores computer-executable instructions for causing the computer to execute the process performed by the core network element in FIG.
  • embodiments of the present application also provide a computer-readable storage medium.
  • the computer-readable storage medium stores computer-executable instructions, and the computer-executable instructions are used to cause the computer to execute the process performed by the core network element in FIG. 16.
  • embodiments of the present application also provide a computer-readable storage medium.
  • the computer-readable storage medium stores computer-executable instructions, and the computer-executable instructions are used to cause the computer to execute the process performed by the core network element in FIG. 17.
  • These computer program instructions may also be stored in a computer readable memory that can guide a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer readable memory produce an article of manufacture including an instruction device, the instructions The device implements the functions specified in one block or multiple blocks of the flowchart one flow or multiple flows and / or block diagrams.
  • These computer program instructions can also be loaded onto a computer or other programmable data processing device, so that a series of operating steps are performed on the computer or other programmable device to produce computer-implemented processing, which is executed on the computer or other programmable device
  • the instructions provide steps for implementing the functions specified in one block or multiple blocks of the flowchart one flow or multiple flows and / or block diagrams.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Telephonic Communication Services (AREA)

Abstract

本申请公开了一种定位服务权限变更方法、装置及系统，包括：定位服务器接收第一定位服务权限变更消息，所述第一定位服务权限变更消息用于请求变更目标终端的定位服务权限；所述定位服务器向核心网网元发送第二定位服务权限变更消息，所述第二定位服务权限变更消息携带所述目标终端变更后的定位服务权限信息。通过本申请提供的方法可实现终端定位服务权限的更新。

Description

一种定位服务权限变更方法、装置及系统
相关申请的交叉引用
本申请要求在2018年10月10日提交中国专利局、申请号为201811178620.9、申请名称为“一种定位服务权限变更方法、装置及系统”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。
技术领域
本发明涉及无线通信技术领域，尤其涉及一种定位服务权限变更方法、装置及系统。
背景技术
定位服务(Location Services，LCS)技术可以实现位置服务的开发和应用，还可以用于计费、合法监听、紧急呼叫等业务。在第三代合作计划(Third Generation Partnership Project,3GPP)网络中，通过LCS技术可以实现对用户的位置定位。目前在3GPP标准中可用的定位方法有全球定位系统(Global Positioning System,GPS)定位、卫星增强的系统定位、网络辅助的定位方法，基于终端(User Equipment，UE，也称用户设备)的信息的定位方法，通过传感器的定位方法等。
通过LCS获得的位置信息包含地理位置信息、速度、城市位置以及服务质量等。其中对于一些定位方法，UE可接收网络侧广播的辅助数据，并使用所述辅助数据自行进行定位计算，这些辅助数据通常被一个或多个密钥进行加密。
以第四代网络定位系统为例，上述辅助数据的密钥的分发流程为：演进的服务移动位置中心(Evolved Serving Mobile Location Center,E-SMLC)向移动性管理节点(Mobility Management Entity,MME)发送携带一个或多个密钥的密钥数据消息，该密钥用于对广播的辅助数据进行加密，其中对应于每个 密钥可设置有效期、一组适用的跟踪区域和密钥的类型；MME接收并存储密钥；UE向基站(eNodeB)发送附着请求或跟踪区更新(Tracking Area Update,TAU)请求，其中包括请求密钥的指示；基站接收附着请求或TAU请求并将其转发给MME；MME接收附着请求或TAU请求后，向基站返回附着接受或TAU接受。UE接收到附着接受或TAU接受后，一旦密钥的有效期已经开始并且UE当前处于适用的跟踪区域中，UE可以开始使用密钥来解密广播的辅助数据。当进入不适用于密钥的跟踪区域时，UE停止使用密钥。当密钥的有效期已过期时，UE停止使用并删除密钥。当有效期到期时，MME删除密钥的所有信息。
在上述密钥分发过程中，并不是所有附着在网络中的UE都有权限使用密钥，网络需要对UE权限识别后才会将密钥发给UE。UE对LCS服务的签约可以有不同的权限，同时，UE签约权限可能会在某种情况下临时变更，权限变更后，直接将导致UE的密钥发生变化，如果缺少UE权限的动态管理则导致UE收到与自身权限不一致的密钥或者导致未签约的UE也会收到密钥。
由此可见，针对定位服务系统亟需一种UE定位服务权限变更的方案。
发明内容
本申请实施例提供一种定位服务密钥分发方法、装置及系统，用以实现终端定位服务权限的更新。
第一方面，提供一种定位服务权限更新方法，包括：定位服务器接收第一定位服务权限变更消息，所述第一定位服务权限变更消息用于请求变更目标终端的定位服务权限；所述定位服务器向核心网网元发送第二定位服务权限变更消息，所述第二定位服务权限变更消息携带所述目标终端变更后的定位服务权限信息。
可选地，所述定位服务器接收第一定位服务权限变更消息之后，还包括：所述定位服务器向用户签约信息服务器发送定位服务权限变更指示消息，所述定位服务权限变更指示消息用于指示所述用户签约信息服务器确定所述目 标终端变更后的定位服务权限；所述定位服务器接收所述用户签约信息服务器发送的定位服务权限变更确认消息，所述定位服务权限变更确认消息携带所述目标终端变更后的定位服务权限信息。
可选地，所述定位服务器接收第一定位服务权限变更消息之后，还包括：所述定位服务器根据所述第一定位服务权限变更消息，确定所述目标终端变更后的定位服务权限信息，并产生所述目标终端变更后的定位服务权限对应的密钥。
可选地，所述定位服务器接收第一定位服务权限变更消息，包括：所述定位服务器接收所述目标终端通过应用层发送的第一定位服务权限变更消息；所述定位服务器向核心网网元发送第二定位服务权限变更消息，包括：所述定位服务器向所述核心网网元发送定位服务权限变更消息，所述定位服务权限变更消息用于指示所述核心网网元保存所述目标终端变更后的定位服务权限信息以及所述目标终端变更后的定位服务权限对应的密钥。
可选地，所述定位服务器接收第一定位服务权限变更消息，包括：所述定位服务器接收来自于所述核心网网元的第一定位服务权限变更消息，所述第一定位服务权限变更消息是所述核心网网元接收所述目标终端的附着请求消息或跟踪区更新请求消息后发送的，所述附着请求消息或跟踪区更新请求消息携带定位服务权限变更指示信息，所述定位服务权限变更指示信息用于指示变更所述目标终端的定位服务权限；所述定位服务器向核心网网元发送第二定位服务权限变更消息，包括：所述定位服务器向所述核心网网元发送第二定位服务权限变更消息，所述第二定位服务权限变更消息用于指示所述核心网网元保存所述目标终端变更后的定位服务权限信息以及所述目标终端变更后的定位服务权限对应的密钥。
可选地，述定位服务器接收第一定位服务权限变更消息之后，还包括：所述定位服务器验证所述第一定位服务权限变更消息的完整性，若验证通过，且允许用户进行定位服务权限变更，则确定所述目标终端变更后的定位服务权限，并产生与所述目标终端变更后的定位服务权限对应的密钥。
可选地，所述第一定位服务器权限变更消息是所述核心网网元判断需要为所述目标终端生成新的密钥后发送的；所述定位服务器接收第一定位服务权限变更消息之后，还包括：所述定位服务器根据所述第一定位服务权限变更消息，为所述目标终端生成与所述目标终端变更后的定位服务权限对应的密钥，所述密钥用于解密广播的网络辅助数据；所述定位服务器向所述核心网网元发送的所述第二定位服务权限变更消息用于指示所述核心网网元保存所述目标终端变更后的定位服务权限信息以及所述目标终端变更后的定位服务权限对应的密钥。
可选地，所述定位服务器接收第一定位服务权限变更消息之后，还包括：所述定位服务器向业务实体发送定位服务权限变更指示消息，所述定位服务权限变更指示消息用于指示所述业务实体确定所述目标终端变更后的定位服务权限，并产生与所述目标终端变更后的定位服务权限对应的密钥；所述定位服务器接收所述业务实体发送的定位服务权限变更响应消息，所述定位服务权限变更响应消息用于指示所述定位服务器保存所述目标终端变更后的定位服务权限信息以及所述目标终端变更后的定位服务权限对应的密钥。
可选地，所述定位服务器接收第一定位服务权限变更消息，包括：所述定位服务器接收来自于用户签约信息服务器的携带有所述目标终端变更后的定位服务权限信息的第一定位服务权限变更消息，所述第一定位服务权限变更消息是所述用户签约服务器根据来自于所述核心网网元的定位服务权限变更指示消息对所述目标终端的定位服务权限变更后发送的，所述定位服务权限变更指示消息是所述核心网网元接收来自于所述目标终端的附着请求消息或跟踪区更新请求消息后发送的，所述附着请求消息或跟踪区更新请求消息携带定位服务权限变更指示信息，所述定位服务权限变更指示信息用于指示变更所述目标终端的定位服务权限。
可选地，所述定位服务器接收第一定位服务权限变更消息之后，还包括：所述定位服务器向所述业务实体发送第一定位服务权限变更消息，所述第一定位服务权限变更消息携带有所述目标终端变更后的定位服务权限信息，所 述第一定位服务权限变更消息用于指示所述业务实体产生与所述目标终端变更后的定位服务权限对应的密钥；所述定位服务器接收所述业务实体发送的第一定位服务权限变更响应消息，所述第一定位服务权限变更响应消息用于指示所述定位服务器保存所述目标终端变更后的定位服务权限对应的密钥。
可选地，所述定位服务器接收第一定位服务权限变更消息，包括：所述定位服务器接收来自业务实体的第一定位服务权限变更消息，所述第一定位服务权限变更消息是所述业务实体接收所述目标终端通过应用层发送的定位服务权限变更指示消息并对所述目标终端进行定位服务权限变更后发送的，所述第一定位服务权限变更消息用于指示所述定位服务器保存所述目标终端变更后的定位服务权限，并产生与所述目标终端变更后的定位服务权限对应的密钥；所述定位服务器向用户签约信息服务器发送第二定位服务权限变更消息，所述第二定位服务权限变更消息携带所述目标终端变更后的定位服务权限信息，所述第二定位服务权限变更消息用于指示所述用户签约信息服务器保存所述目标终端变更后的定位服务权限。
可选地，所述定位服务器向用户签约信息服务器发送第二定位服务权限变更消息之后，还包括：所述定位服务器接收所述用户签约信息服务器发送的定位服务权限变更确认消息，所述定位服务权限变更确认消息用于指示所述用户签约信息服务器已保存所述目标终端变更后的定位服务权限以及与所述目标终端变更后的定位服务权限对应的密钥。
可选地，所述核心网网元包括AMF或MME。
可选地，所述用户签约信息服务器包括UDM或HSS。
可选地，所述目标终端变更后的定位服务权限信息包括：与所述目标终端变更后的定位服务权限对应的一个或多个密钥，所述一个或多个密钥用于解密广播的网络辅助数据。
可选地，所述目标终端变更后的定位服务权限信息，还包括：有效期；使用的跟踪区指示信息；密钥类型指示信息。
可选地，所述第一定位服务权限变更消息携带以下信息中的一种或多种： 变更指示信息，用于指示定位服务权限发生变更；变更原因指示信息，用于指示定位服务权限变更的原因；变更时限信息，用于指示临时变更或永久变更，所述变更时限信息指示临时变更时还包括临时变更的有效期；服务类型指示信息，用于指示目标终端定位服务权限变更申请为临时申请或永久申请。
可选地，所述定位服务器为LMF，所述核心网网元为AMF或UDM；或者所述定位服务器为E-SMLC，所述核心网网元为MME或HSS。
第二方面，提供一种定位服务权限更新方法，包括：核心网网元接收来自于定位服务器的定位服务权限变更消息，所述定位服务变更消息携带目标终端变更后的定位服务权限信息；所述核心网网元通知所述目标终端定位服务权限发生变更；所述核心网网元接收所述目标终端根据所述核心网网元的通知发送的第一请求消息，并向所述目标终端发送第一响应消息，所述第一响应消息携带所述目标终端变更后的定位服务权限信息。
可选地，所述核心网网元通知所述目标终端定位服务权限发生变更，包括：
所述核心网网元指示所述目标终端的服务基站发送系统广播消息，所述系统广播消息携带所述目标终端的标识以及定位服务权限变更指示信息；或者，所述核心网网元指示所述目标终端的服务基站发送寻呼消息，所述寻呼消息携带所述目标终端的标识以及定位服务权限变更指示信息；其中，所述定位服务权限变更指示信息用于指示所述目标终端的定位服务权限发生变更。
可选地，所述第一请求消息为附着请求消息，所述第一响应消息为附着接受消息；或者，所述第一请求消息为跟踪区更新请求消息，所述第一响应消息为跟踪区更新接受消息。
可选地，所述目标终端变更后的定位服务权限信息包括：与所述目标终端变更后的定位服务权限对应的一个或多个密钥，所述一个或多个密钥用于解密广播的网络辅助数据。
可选地，所述核心网网元为MME，所述定位服务器为E-SMLC；或者，所述核心网网元为AMF，所述定位服务器为LMF。
第三方面，提供一种定位服务权限更新方法，包括：核心网网元接收来自定位服务器的定位服务权限变更消息，所述定位服务权限变更消息携带目标终端变更后的定位服务权限信息以及与所述目标终端变更后的定位服务权限对应的密钥，所述定位服务权限变更消息用于指示所述核心网网元保存所述目标终端变更后的定位服务权限以及与所述目标终端变更后的定位服务权限对应的密钥；所述核心网网元向所述目标终端发送定位服务权限配置消息，所述定位服务权限配置消息携带所述目标终端变更后的定位服务权限信息。
可选地，所述目标终端变更后的定位服务权限信息包括：与所述目标终端变更后的定位服务权限对应的一个或多个密钥，所述一个或多个密钥用于解密广播的网络辅助数据。
可选地，所述核心网网元为AMF，所述定位服务器为LMF。
第四方面，提供一种定位服务权限更新方法，包括：核心网网元接收来自目标终端的第一请求消息；所述核心网网元向用户签约信息服务器发送定位服务权限变更指示消息，所述定位服务权限变更指示消息用于请求获取所述目标终端变更后的定位服务权限信息；所述核心网网元接收所述用户签约信息服务器发送的定位服务权限变更确认消息，所述定位服务权限变更确认消息携带所述目标终端变更后的定位服务权限以及与所述目标终端变更后的定位服务权限对应的密钥，所述定位服务权限变更确认消息用于指示所述核心网网元保存所述目标终端变更后的定位服务权限以及与所述目标终端变更后的定位服务权限对应的密钥；所述核心网网元向所述目标终端发送第一响应消息，所述第一响应消息携带所述目标终端变更后的定位服务权限对应的密钥。
可选地，所述定位服务权限变更确认消息是所述用户签约信息服务器根据接收的所述定位服务权限变更指示消息从业务实体获取到所述目标终端变更后的定位服务权限信息后发送的。
可选地，所述目标终端变更后的定位服务权限信息包括：与所述目标终端变更后的定位服务权限对应的一个或多个密钥，所述一个或多个密钥用于 解密广播的网络辅助数据。
可选地，所述核心网网元为AMF，所述定位服务器为LMF，所述用户签约信息服务器为UDM；或者，所述核心网网元为MME，所述定位服务器为E-SMLC，所述用户签约信息服务器为HSS。
第五方面，提供一种定位服务系统，包括：定位服务器，用于接收第一定位服务权限变更消息，所述第一定位服务权限变更消息用于请求变更目标终端的定位服务权限；核心网网元，用于接收所述定位服务器发送的第二定位服务权限变更消息，所述第二定位服务权限变更消息携带所述目标终端变更后的定位服务权限信息；所述定位服务器还用于向所述核心网网元发送第二定位服务权限变更消息。
可选地，该定位服务系统还包括：用户签约信息服务器，用于接收所述定位服务器发送的定位服务权限变更指示消息，所述定位服务权限变更指示消息用于指示所述用户签约信息服务器确定所述目标终端变更后的定位服务权限；
所述用户签约信息服务器还用于向所述定位服务器发送定位服务权限变更确认消息，所述定位服务权限变更确认消息携带所述目标终端变更后的定位服务权限信息。
可选地，该定位服务系统还包括：业务实体，用于接收所述定位服务器权限变更指示消息，所述定位服务权限变更指示消息用于指示所述业务实体确定所述目标终端变更后的定位服务权限，并产生与所述目标终端变更后的定位服务权限对应的密钥；所述业务实体还用于，向定位服务器发送定位服务权限变更响应消息，所述定位服务权限变更响应消息用于指示所述定位服务器保存所述目标终端变更后的定位服务权限信息以及与所述目标终端变更后的定位服务权限对应的密钥。
可选地，所述定位服务器，还用于：接收来自于用户签约信息服务器的携带有所述目标终端变更后的定位服务权限信息的第一定位服务权限变更消息，所述第一定位服务权限变更消息是所述用户签约服务器根据来自于所述 核心网网元的定位服务权限变更指示消息对所述目标终端的定位服务权限变更后发送的，所述定位服务权限变更指示消息是所述核心网网元接收来自于所述目标终端的附着请求消息或跟踪区更新请求消息后发送的，所述附着请求消息或跟踪区更新请求消息携带定位服务权限变更指示信息，所述定位服务权限变更指示信息用于指示变更所述目标终端的定位服务权限。
可选地，所述核心网网元，还用于：接收来自于定位服务器的定位服务权限变更消息，所述定位服务变更消息携带目标终端变更后的定位服务权限信息；通知所述目标终端定位服务权限发生变更；接收所述目标终端根据所述核心网网元的通知发送的第一请求消息，并向所述目标终端发送第一响应消息，所述第一响应消息携带所述目标终端变更后的定位服务权限信息。
可选地，所述核心网网元，还用于：接收来自目标终端的第一请求消息；向用户签约信息服务器发送定位服务权限变更指示消息，所述定位服务权限变更指示消息用于请求获取所述目标终端变更后的定位服务权限信息；接收所述用户签约信息服务器发送的定位服务权限变更确认消息，所述定位服务权限变更确认消息携带所述目标终端变更后的定位服务权限以及与所述目标终端变更后的定位服务权限对应的密钥，所述定位服务权限变更确认消息用于指示所述核心网网元保存所述目标终端变更后的定位服务权限以及与所述目标终端变更后的定位服务权限对应的密钥；向所述目标终端发送第一响应消息，所述第一响应消息携带所述目标终端变更后的定位服务权限对应的密钥。
可选地，所述定位服务器为LMF，所述核心网网元为AMF或UDM；或者所述定位服务器为E-SMLC，所述核心网网元为MME或HSS。
第六方面，提供一种定位服务器，包括：接收模块，用于接收第一定位服务器权限变更消息，所述第一定位服务权限变更消息用于请求变更目标终端的定位服务权限；发送模块，用于向核心网网元发送第二定位服务权限变更消息，所述第二定位服务权限变更消息携带所述目标终端变更后的定位服务权限信息。
可选地，所述发送模块，进一步用于：向用户签约信息服务器发送定位服务权限变更指示消息，所述定位服务权限变更指示消息用于指示所述用户签约信息服务器确定所述目标终端变更后的定位服务权限；所述接收模块，进一步用于：接收所述用户签约信息服务器发送的定位服务权限变更确认消息，所述定位服务权限变更确认消息携带所述目标终端变更后的定位服务权限信息。
可选地，所述接收模块，进一步用于：根据所述第一定位服务权限变更消息，确定所述目标终端变更后的定位服务权限信息，并产生所述目标终端变更后的定位服务权限对应的密钥。
可选地，所述接收模块，具体用于：接收所述目标终端通过应用层发送的第一定位服务权限变更消息；所述发送模块，具体用于：向所述核心网网元发送定位服务权限变更消息，所述定位服务权限变更消息用于指示所述核心网网元保存所述目标终端变更后的定位服务权限信息以及与所述目标终端变更后的定位服务权限对应的密钥。
可选地，所述接收模块，具体用于：接收来自于所述核心网网元的第一定位服务权限变更消息，所述第一定位服务权限变更消息是所述核心网网元接收所述目标终端的附着请求消息或跟踪区更新请求消息后发送的，所述附着请求消息或跟踪区更新请求消息携带定位服务权限变更指示信息，所述定位服务权限变更指示信息用于指示变更所述目标终端的定位服务权限；所述发送模块，具体用于：向所述核心网网元发送第二定位服务权限变更消息，所述第二定位服务权限变更消息用于指示所述核心网网元保存所述目标终端变更后的定位服务权限信息以及与所述目标终端变更后的定位服务权限对应的密钥。
可选地，所述接收模块，进一步用于：验证所述第一定位服务权限变更消息的完整性，若验证通过，则确定所述目标终端变更后的定位服务权限，并产生与所述目标终端变更后的定位服务权限对应的密钥。
可选地，所述第一定位服务器权限变更消息是所述核心网网元判断需要 为所述目标终端生成新的密钥后发送的；所述接收模块，进一步用于：根据所述第一定位服务权限变更消息，为所述目标终端生成与所述目标终端变更后的定位服务权限对应的密钥，所述密钥用于解密广播的网络辅助数据；所述定位服务器向所述核心网网元发送的所述第二定位服务权限变更消息用于指示所述核心网网元保存所述目标终端变更后的定位服务权限以及与所述目标终端变更后的定位服务权限对应的密钥。
可选地，所述发送模块，进一步用于：向业务实体发送定位服务权限变更指示消息，所述定位服务权限变更指示消息用于指示所述业务实体确定所述目标终端变更后的定位服务权限，并产生与所述目标终端变更后的定位服务权限对应的密钥；所述接收模块，进一步用于：接收所述业务实体发送的定位服务权限变更响应消息，所述定位服务权限变更响应消息用于指示所述定位服务器保存所述目标终端变更后的定位服务权限信息以及所述目标终端变更后的定位服务权限对应的密钥。
可选地，所述接收模块，具体用于：接收来自于用户签约信息服务器的携带有所述目标终端变更后的定位服务权限信息的第一定位服务权限变更消息，所述第一定位服务权限变更消息是所述用户签约服务器根据来自于所述核心网网元的定位服务权限变更指示消息对所述目标终端的定位服务权限变更后发送的，所述定位服务权限变更指示消息是所述核心网网元接收来自于所述目标终端的附着请求消息或跟踪区更新请求消息后发送的，所述附着请求消息或跟踪区更新请求消息携带定位服务权限变更指示信息，所述定位服务权限变更指示信息用于指示变更所述目标终端的定位服务权限。
可选地，所述发送模块，进一步用于：向所述业务实体发送第一定位服务权限变更消息，所述第一定位服务权限变更消息携带有所述目标终端变更后的定位服务权限信息，所述第一定位服务变更过消息用于指示所述业务实体产生与所述目标终端变更后的定位服务权限对应的密钥；所述接收模块，进一步用于：接收所述业务实体发送的第一定位服务权限变更响应消息，所述第一定位服务权限变更响应消息用于指示所述定位服务权限保存所述目标 终端变更后的定位服务权限对应的密钥。
可选地，所述接收模块，具体用于：接收来自业务实体的第一定位服务权限变更消息，所述第一定位服务权限变更消息是所述业务实体接收所述目标终端通过应用层发送的定位服务权限变更指示消息并对所述目标终端进行定位服务权限变更后发送的，所述第一定位服务权限变更消息用于指示所述定位服务器保存所述目标终端变更后的定位给服务权限，并产生与所述目标终端变更过后的定位服务权限对应的密钥；所述发送模块，具体用于：向用户签约信息服务器发送第二定位服务权限变更消息，所述第二定位服务权限变更消息携带所述目标终端变更后的定位服务权限信息，所述第二定位服务权限变更消息用于指示所述用户签约信息服务器保存所述目标终端变更后的定位服务权限。
可选地，所述接收模块，具体用于：接收所述用户签约信息服务器发送的定位服务权限变更确认消息，所述定位服务权限变更确认消息用于指示所述用户签约信息服务器已保存所述目标终端变更后的定位服务权限以及与所述目标终端变更后的定位服务权限对应的密钥。
可选地，所述目标终端变更后的定位服务权限信息包括：与所述目标终端变更后的定位服务权限对应的一个或多个密钥，所述一个或多个密钥用于解密广播的网络辅助数据。
可选地，所述目标终端变更后的定位服务权限信息，还包括：有效期；使用的跟踪区指示信息；密钥类型指示信息。
可选地，所述第一定位服务权限变更消息携带以下信息中的一种或多种：变更指示信息，用于指示定位服务权限发生变更；变更原因指示信息，用于指示定位服务权限变更的原因；变更时限信息，用于指示临时变更或永久变更，所述变更时限信息指示临时变更时还包括临时变更的有效期；服务类型指示信息，用于指示目标终端定位服务权限变更申请为临时申请或永久申请。
可选地，所述定位服务器为LMF，所述核心网网元为AMF或UDM；或者所述定位服务器为E-SMLC，所述核心网网元为MME或HSS。
第七方面，提供一种核心网网元，包括：接收模块，用于接收来自于定位服务器的定位服务权限变更消息，所述定位服务变更消息携带目标终端变更后的定位服务权限信息；通知模块，用于通知所述目标终端定位服务权限发生变更；发送模块，用于根据接收到的所述目标终端根据所述核心网网元的通知发送的第一请求消息，向所述目标终端发送第一响应消息，所述第一响应消息携带所述目标终端变更后的定位服务权限信息。
可选地，所述通知模块，具体用于：指示所述目标终端的服务基站发送系统广播消息，所述系统广播消息携带所述目标终端的标识以及定位服务权限变更指示信息；或者，指示所述目标终端的服务基站发送寻呼消息，所述寻呼消息携带所述目标终端的标识以及定位服务权限变更指示信息；其中，所述定位服务权限变更指示信息用于指示所述目标终端的定位服务权限发生变更。
可选地，所述第一请求消息为附着请求消息，所述第一响应消息为附着接受消息；或者，所述第一请求消息为跟踪区更新请求消息，所述第一响应消息为跟踪区更新接受消息。
可选地，所述目标终端变更后的定位服务权限信息包括：与所述目标终端变更后的定位服务权限对应的一个或多个密钥，所述一个或多个密钥用于解密广播的网络辅助数据。
可选地，所述核心网网元为MME，所述定位服务器为E-SMLC；或者，所述核心网网元为AMF，所述定位服务器为LMF。
第八方面，提供一种核心网网元，包括：接收模块，用于接收来自定位服务器的定位服务权限变更消息，所述定位服务权限变更消息携带目标终端变更后的定位服务权限信息以及与所述目标终端变更后的定位服务权限对应的密钥，所述定位服务权限变更消息用于指示所述核心网网元保存所述目标终端变更后的定位服务权限以及与所述目标终端变更够的定位服务权限对应的密钥；发送模块，用于向所述目标终端发送定位服务权限配置消息，所述定位服务权限配置消息携带所述目标终端变更后的定位服务权限信息。
可选地，所述目标终端变更后的定位服务权限信息包括：与所述目标终端变更后的定位服务权限对应的一个或多个密钥，所述一个或多个密钥用于解密广播的网络辅助数据。
可选地，所述核心网网元为AMF，所述定位服务器为LMF。
第九方面，提供一种核心网网元，包括:接收模块，用于接收来自目标终端的第一请求消息；发送模块，用于向用户签约信息服务器发送定位服务权限变更指示消息，所述定位服务权限变更指示消息用于请求获取所述目标终端变更后的定位服务权限信息；所述接收模块，还用于接收所述用户签约信息服务器发送的定位服务权限变更确认消息，所述定位服务权限变更确认消息携带所述目标终端变更后的定位服务权限以及与所述目标终端变更后的定位服务权限对应的密钥，所述定位服务权限变更确认消息用于指示所述核心网网元保存所述目标终端变更后的定位服务权限以及与所述目标终端变更后的定位服务权限对应的密钥；所述发送模块，还用于向所述目标终端发送第一响应消息，所述第一响应消息携带所述目标终端变更后的定位服务权限对应的密钥。
可选地，所述定位服务权限变更确认消息是所述用户签约信息服务器根据接收的所述定位服务权限变更指示消息从业务实体获取到所述目标终端变更后的定位服务权限信息后发送的。
可选地，所述目标终端变更后的定位服务权限信息包括：与所述目标终端变更后的定位服务权限对应的一个或多个密钥，所述一个或多个密钥用于解密广播的网络辅助数据。
可选地，所述核心网网元为AMF，所述定位服务器为LMF，所述用户签约信息服务器为UDM；或者，所述核心网网元为MME，所述定位服务器为E-SMLC，所述用户签约信息服务器为HSS。
第十方面，提供一种通信装置，包括：处理器、存储器和收发机；所述收发机用于在所述处理器的控制下接收或发送信息；所述处理器，用于读取所述存储器中的计算机指令，执行如第一方面所述的方法。
第十一方面，提供一种通信装置，包括：处理器、存储器和收发机；所述收发机用于在所述处理器的控制下接收或发送信息；所述处理器，用于读取所述存储器中的计算机指令，执行如第二方面所述的方法。
第十二方面，提供一种通信装置，包括：处理器、存储器和收发机；所述收发机用于在所述处理器的控制下接收或发送信息；所述处理器，用于读取所述存储器中的计算机指令，执行如第三方面所述的方法。
第十三方面，提供一种通信装置，包括：处理器、存储器和收发机；所述收发机用于在所述处理器的控制下接收或发送信息；所述处理器，用于读取所述存储器中的计算机指令，执行如第四方面所述的方法。
第十四方面，提供一种计算机可读存储介质，所述计算机可读存储介质存储有计算机可执行指令，所述计算机可执行指令用于使所述计算机执行如第十方面所述的方法。
第十五方面，提供一种计算机可读存储介质，所述计算机可读存储介质存储有计算机可执行指令，所述计算机可执行指令用于使所述计算机执行如第十一方面所述的方法。
第十六方面，提供一种计算机可读存储介质，所述计算机可读存储介质存储有计算机可执行指令，所述计算机可执行指令用于使所述计算机执行如第十二方面所述的方法。
第十七方面，提供一种计算机可读存储介质，所述计算机可读存储介质存储有计算机可执行指令，所述计算机可执行指令用于使所述计算机执行如第十三方面所述的方法。
附图说明
图1为本申请实施例适用的定位系统架构示意图；
图2为本申请实施例提供的4G网络中的定位系统架构示意图；
图3为本申请实施例提供的5G网络中的定位系统架构示意图；
图4～图7为本申请实施例提供的定位服务权限变更流程示意图；
图8～图12别为本申请实施例提供的定位服务权限变更流程的消息交互示意图；
图13为本申请实施例提供的定位服务系统的结构示意图；
图14为本申请实施例提供的定位服务器的结构示意图；
图15～图17分别为本申请实施例提供的核心网网元的结构示意图；
图18～图21为本申请实施例提供的通信装置的结构示意图。
具体实施方式
以下，对本申请实施例中的部分用语进行解释说明，以便于本领域技术人员理解。
(1)本申请实施例中，名词“网络”和“系统”经常交替使用，但本领域的技术人员可以理解其含义。
(2)本申请实施例中术语“多个”是指两个或两个以上，其它量词与之类似。
(3)“和/或”，描述关联对象的关联关系，表示可以存在三种关系，例如，A和/或B，可以表示：单独存在A，同时存在A和B，单独存在B这三种情况。字符“/”一般表示前后关联对象是一种“或”的关系。
(4)“第一”用于区别类似的对象，而不必用于描述特定的顺序或先后次序。
下面结合附图对本申请实施例进行详细描述。
参见图1为本申请实施例适用的定位系统架构示意图，图中示例性地列举了与本申请实施例相关的部分定位系统中的网元，如图所示，终端101可通过应用层与定位服务器105或业务实体106完成终端101的定位服务权限变更的信息交互，或者通过附着请求消息或跟踪区更新请求消息中携带定位服务权限变更的指示信息与定位服务器105或业务实体106完成终端101的定位服务权限变更的信息交互。核心网网元103在通过基站102接收到终端101定位服务权限变更后发送的获取密钥的请求时，可直接从用户签约信息服务器104获取终端变更后的定位服务权限；或者，直接从定位服务器105获取终端变更后的定位服务权限，或通过用户签约信息服务器104定位服务器105中获取终端变更后的定位服务权限；或者，通过用户签约信息服务器104 和/或定位服务器105从业务实体106中获取终端变更后的定位服务权限。定位服务器105可根据变更后的定位服务权限生成新的密钥。所述密钥用于终端解密广播的网络辅助数据。
上述业务实体106中存储有终端101的定位服务权限可对终端101的定位服务权限变更进行控制，业务实体106通过定位服务器105和/或用户签约信息服务器104向核心网网元103发送变更后的定位服务权限。具体地，该业务实体106为通信系统之外的机构或者单位，比如地理信息测绘局等相关官方机构，本申请对此不作限定。
图1中涉及的核心网网元103可以是4G网络定位系统中的移动性管理节点(Mobility Management Entity,MME)，也可以5G网络定位系统中的接入和移动管理功能(Access and Mobility Management Function，AMF)；用户签约信息服务器104可以是4G网络定位系统中的归属签约用户服务器(Home Subscriber Server,HSS)，也可以是5G网络定位系统中的同一数据管理(Unified Data Management，UDM)；定位服务器105可以是4G网络定位系统中的演进的服务移动位置中心(Evolved Serving Mobile Location Center,E-SMLC)，也可以是5G网络定位系统中的位置管理功能(Location Management Function，LMF)。
下面分别列举了4G网络定位系统的架构和5G网络定位系统的架构。
如图2所示为本申请实施例适用的4G网络中的定位系统架构示意图，该图中示例性地列举了与本申请实施例相关的部分网元。如图所示，基站(eNodeB)204通过LTE-Uu接收终端(UE)205发送的用以获取密钥的请求消息，该请求消息中可携带定位服务权限变更的指示信息，并将该请求消息转发给UE所归属的MME 202；MME 202通过S1接收到获取密钥的请求消息后，通过S6a与HSS 201进行信息交互，以获取该UE变更后的定位服务权限，通过SLs与E-SMLC 203进行信息交互获取变更后的定位服务权限对应的密钥信息。
需要说明的是，上述实施例中的LTE-Uu、S1、SLs等英文缩写为4G网 络中用以支持在设备与设备、设备与网元、网元与网元之间信息传输的通信协议，本申请实施例对此不作限定。
如图3所示为本申请实施例适用的5G网络中的定位系统架构示意图。该图中示例性地列举了与本申请实施例相关的部分网元。如图所示，如图所示，无线接入网(Next Generation Radio Access Networks，NG-RAN)节点304接收终端(UE)305发送的用以获取密钥的请求消息，该请求消息中可携带定位服务权限变更的指示信息，并通过N2将该请求消息转发给UE所归属的AMF 302；或者，AMF 302通过N1直接接收UE发送的用以获取密钥的请求消息。AMF 302通过N8与UDM 301进行信息交互，以获取该UE变更后的定位服务权限，通过NLs与LMF 303进行信息交互获取变更后的定位服务权限对应的密钥信息。
需要说明的是，上述实施例中的N1、N2、NLs等英文缩写为5G网络中用以支持在设备与设备、设备与网元、网元与网元之间信息传输的通信端口，本申请实施例对此不作限定。
需要说明的是，5G网络功能之间的交互可以采用基于服务化的交互方式，即网络功能之间的消息交互按照服务调用的方式实现，即在定位服务信息交互中可支持基于服务的接口方式。
如图4所示，为本申请实施例提供的一种定位服务权限变更方法的流程图。如图所示，该流程包括：
S401：定位服务器接收第一定位服务权限变更消息，第一位定位服务权限变更消息用于请求变更目标终端的定位服务权限。
其中，定位服务器可以是4G网络定位系统中的E-SMLC，也可以是5G网络系统中的LMF。
上述定位服务器接收目标终端通过应用层发送的第一定位服务权限变更 消息，该第一定位服务权限变更消息中携带以下信息中的一种或多种：变更指示信息，用于指示定位服务权限发生变更；变更原因指示信息，用于指示定位服务权限变更的原因；变更时限信息，用于指示临时变更或永久变更，变更时限信息指示临时变更时还包括临时变更的有效期；服务类型指示信息，用于指示目标终端定位服务权限变更申请为临时申请或永久申请。
定位服务权限即为定位服务的权限，能够表明是否允许获得密钥，该密钥用于解密广播的网络辅助数据。定位服务权限允许获得的密钥可包括一个或多个密钥，更具体地，可包括一个或多个跟踪区域对应的密钥。比如一种权限为：终端在跟踪区域A被允许获得密钥A，以用于解密广播的网络辅助数据。密钥可以是特定区域(比如跟踪区)内使用的密钥，称为该跟踪区域对应的密钥。一个跟踪区域对应的密钥可以是一个或多个，不同跟踪区域对应的密钥可能不同。不同的密钥可以用于解密不同类型的网络辅助数据。例如：终端签约了某项定位服务，该定位服务的权限是允许在某个区域(跟踪区域)获得在该区域中使用的密钥，这样，终端能够获取可在该区域中使用的密钥，从而使得该终端能够对广播的网络辅助数据进行解密，进而使用该网络辅助数据进行定位。
可选地，在S401之后，定位服务器向用户签约信息服务器发送定位服务权限变更指示消息，定位服务权限变更指示消息用于指示用户签约信息服务器确定目标终端变更后的定位服务权限；定位服务器接收用户签约信息服务器发送的定位服务权限变更确认消息，定位服务权限变更确认消息携带目标终端变更后的定位服务权限信息。其中，用户签约信息服务器可以是4G网络定位系统中的HSS，也可以是5G网络系统中的UDM。
S402：定位服务器向核心网网元发送第二定位服务权限变更消息，第二定位服务权限变更消息携带目标终端变更后的定位服务权限信息。
其中，核心网元可以是4G网络定位系统中的MME，也可以是5G网络系统中的AMF；目标终端变更后的定位服务权限信息包括：与目标终端变更后的定位服务权限对应的一个或多个密钥，一个或多个密钥用于加密向目标 终端广播的网络辅助数据；该目标终端变更后的定位服务权限信息还包括：有效期，使用的跟踪区指示信息和密钥类型指示信息。
可选地，定位服务器向核心网网元发送第二定位服务权限变更消息，第二定位服务权限变更消息用于指示核心网网元保存目标终端变更后的定位服务权限信息以及目标终端变更后的定位服务权限对应的密钥。
在本申请的上述实施例中，定位服务器接收第一定位服务权限变更消息，并向核心网网元发送第二定位服务权限变更消息；其中，第一位定位服务权限变更消息确定目标终端变更后的定位服务权限，第二定位服务权限变更消息携带目标终端变更后的定位服务权限信息；通过上述方法，使得目标终端根据变更后的定位服务权限信息获取对应密钥。
可选地，终端的定位服务权限变更由定位服务器控制，此种情况下，在S401之后，定位服务器根据接收到的第一定位服务权限变更消息，可直接确定终端变更后的定位服务权限信息，并产生目标终端变更后的定位服务权限对应的密钥。
基于图4所示的流程，在一些实施例中，目标终端通过附着请求消息或TAU请求消息携带定位服务权限变更指示信息，此种情况下，定位服务器接收来自于核心网网元的第一定位服务权限变更消息，第一定位服务权限变更消息是核心网网元接收目标终端的附着请求消息或跟踪区更新请求消息后发送的，附着请求消息或跟踪区更新请求消息携带定位服务权限变更指示信息，定位服务权限变更指示信息用于指示变更目标终端的定位服务权限；定位服务器向核心网网元发送第二定位服务权限变更消息，第二定位服务权限变更消息用于指示核心网网元保存目标终端变更后的定位服务权限信息以及与目标终端变更后的定位服务权限对应的密钥。
其中，上述第二定位服务变更消息中携带变更时限信息，用于指示定位服务权限变更为临时变更或永久变更，以及临时变更情况下的有效期。
可选地，定位服务器可验证第一定位服务权限变更消息的完整性，若验证通过，且允许用户进行定位服务权限变更，则确定目标终端变更后的定位 服务权限，并产生与目标终端变更后的定位服务权限对应的密钥。
可选地，若第一定位服务器权限变更消息是核心网网元判断需要为目标终端生成新的密钥后发送的，则定位服务器接收第一定位服务权限变更消息之后还包括：定位服务器根据第一定位服务权限变更消息，为目标终端生成与目标终端变更后的定位服务权限对应的密钥，密钥用于加密向目标终端广播的网络辅助数据；定位服务器向核心网网元发送的第二定位服务权限变更消息用于指示核心网网元保存目标终端变更后的定位服务权限信息以及与目标终端变更后的定位服务权限对应的密钥。
可选地，目标终端的定位服务权限变更由业务实体控制，在此情况下，定位服务器接收第一定位服务权限变更消息之后，还包括：定位服务器向业务实体发送定位服务权限变更指示消息，定位服务权限变更指示消息用于指示业务实体确定目标终端变更后的定位服务权限，并产生与目标终端变更后的定位服务权限对应的密钥；定位服务器接收业务实体发送的定位服务权限变更响应消息，定位服务权限变更响应用于指示定位服务器保存目标终端变更过后的定位服务权限信息以及与目标终端变更后的定位服务权限对应的密钥。
基于图4所示的流程，在一些实施例中，目标终端的定位服务权限变更有用户签约信息服务器控制，此种情况下，定位服务器接收第一定位服务权限变更消息，包括：定位服务器接收来自于用户签约信息服务器的携带有目标终端变更后的定位服务权限信息的第一定位服务权限变更消息，第一定位服务权限变更消息是用户签约服务器根据来自于核心网网元的定位服务权限变更指示消息对目标终端的定位服务权限变更后发送的，定位服务权限变更指示消息是核心网网元接收来自于目标终端的附着请求消息或跟踪区更新请求消息后发送的，附着请求消息或跟踪区更新请求消息携带定位服务权限变更指示信息，定位服务权限变更指示信息用于指示变更目标终端的定位服务权限。
可选地，在上述实施例中目标终端的定位服务权限变更由业务实体控制， 在此情况下，定位服务器接收第一定位服务权限变更消息之后，还包括：定位服务器向业务实体发送第一定位服务权限变更消息，第一定位服务权限变更消息携带有目标终端变更后的定位服务权限信息，第一定位服务权限变更消息用于指示业务实体产生与目标终端变更后的定位服务权限对应的密钥；定位服务器接收业务实体发送的第一定位服务权限变更响应消息，第一定位服务权限变更响应消息用于指示定位服务器保存与目标终端变更后的定位服务权限对应的密钥。
基于图4所示的流程，在一些实施例中，目标终端的定位服务权限变更由业务实体控制，且目标终端通过应用层向定位服务器发送第一定位服务权限变更消息，在此情况下，定位服务器接收来自业务实体的第一定位服务权限变更消息，第一定位服务权限变更消息是业务实体接收目标终端通过应用层发送的定位服务权限变更指示消息并对目标终端进行定位服务权限变更后发送的，第一定位服务权限变更消息用于指示定位服务器保存目标终端变更后的定位服务权限，并产生与目标终端变更后的定位服务权限对应的密钥；定位服务器向核心网网元发送第二定位服务权限变更消息，包括定位服务器向用户签约信息服务器发送第二定位服务权限变更消息，第二定位服务权限变更消息携带目标终端变更后的定位服务权限信息，第二定位服务权限变更消息用于指示用户签约信息服务器保存目标终端变更后的定位服务权限；定位服务器向核心网网元发送第二定位服务权限变更消息之后，还包括定位服务器接收用户签约信息服务器发送的定位服务权限变更确认消息，定位服务权限变更确认消息用于指示用户签约信息服务器已保存目标终端变更后的定位服务权限以及与目标终端变更后的定位服务权限对应的密钥。
图4所示的定位服务权限变更流程以定位服务器为执行主体，基于相同的技术构思，以核心网网元为目标终端定位服务权限变更的执行主体，如图5所示，为本申请实施例提供的一种定位服务权限变更方法的流程图。
如图所示，该流程包括：
S501：核心网网元接收来自于定位服务器的定位服务权限变更消息，所 述定位服务变更消息携带目标终端变更后的定位服务权限信息。
其中，若核心网网元为4G网络定位系统中的MME，则定位服务器为E-SMLC；或者，若核心网网元为5G网络定位系统中的AMF，则定位服务器为LMF。
所述目标终端变更后的定位服务权限信息包括：与所述目标终端变更后的定位服务权限对应的一个或多个密钥，所述一个或多个密钥用于加密向目标终端广播的网络辅助数据。
S502：核心网网元通知目标终端定位服务权限发生变更。
在S502中，核心网网元指示目标终端的服务基站发送系统广播消息，系统广播消息携带目标终端的标识以及定位服务权限变更指示信息；或者，核心网网元指示目标终端的服务基站发送寻呼消息，所述寻呼消息携带目标终端的标识以及定位服务权限变更指示信息；其中，所述定位服务权限变更指示信息用于指示所述目标终端的定位服务权限发生变更。
S503：核心网网元接收所述目标终端根据所述核心网网元的通知发送的第一请求消息，并向所述目标终端发送第一响应消息，所述第一响应消息携带所述目标终端变更后的定位服务权限信息。
其中，若第一请求消息为附着请求消息，则第一响应消息为附着接受消息；或者，若第一请求消息TAU请求消息，则第一响应消息为TAU接受消息。
基于上述相同的技术构思，以核心网网元为目标终端定位服务器权限变更的执行主体，如图6所示，为本申请实施例提供的一种定位服务权限变更方法的流程图。
如图所示，该流程包括：
S601：核心网网元接收来自定位服务器的定位服务权限变更消息，定位服务权限变更消息携带目标终端变更后的定位服务权限信息以及与目标终端变更后的定位服务权限对应的密钥；其中，该定位服务权限变更消息用于指示核心网网元保存目标终端变更后的定位服务权限以及与目标终端变更后的 定位服务权限对应的密钥。
上述核心网网元为5G网络定位系统中的AMF，定位服务器为5G网络定位系统中的LMF。
S602：核心网网元向目标终端发送定位服务权限配置消息，定位服务权限配置消息携带目标终端变更后的定位服务权限信息。
其中，所述目标终端变更后的定位服务权限信息包括：与目标终端变更后的定位服务权限对应的一个或多个密钥，所述一个或多个密钥用于加密向目标终端广播的网络辅助数据。
在本申请的上述实施例中，网络侧由于某种原因需要变更目标终端的定位服务权限，核心网网元可将从定位服务器中接收到的定位服务权限变更消息中携带的目标终端变更后的定位服务权限信息配置给目标终端，使得目标终端可根据变更后的定位服务权限获取密钥。
基于相同的技术构思，以核心网网元为目标终端定位服务权限变更的执行主体，业务实体控制目标终端定位服务权限的变更以及存储变更后目标终端的定位服务权限。如图7所示，为本申请实施例提供的一种定位服务权限变更方法的流程图。
如图所示，该流程包括：
S701：核心网网元接收来自目标终端的第一请求消息。
S702：核心网网元向用户签约信息服务器发送定位服务权限变更指示消息，定位服务权限变更指示消息用于请求获取所述目标终端变更后的定位服务权限信息。
其中，所述目标终端变更后的定位服务权限信息包括：与所述目标终端变更后的定位服务权限对应的一个或多个密钥，所述一个或多个密钥用于解密广播的网络辅助数据。
S703：所述核心网网元接收所述用户签约信息服务器发送的定位服务权限变更确认消息，所述定位服务权限变更确认消息携带所述目标终端变更后的定位服务权限变更信息以及与目标终端变更后的定位服务权限对应的密钥。
其中，定位服务权限变更确认消息是所述用户签约信息服务器根据接收的所述定位服务权限变更指示消息从业务实体获取到所述目标终端变更后的定位服务权限信息后发送的；该定位服务权限变更确认消息用于指示核心网网元保存目标终端变更后的定位服务权限以及与目标终端变更后的定位服务权限对应的密钥。
S704：核心网网元向所述目标终端发送第一响应消息，第一响应消息携带所述目标终端变更后的定位服务权限对应的密钥。
上述实施例中，若核心网网元为4G网络定位系统中的MME，则所述定位服务器为E-SMLC，所述用户签约信息服务器为HSS；或者，若核心网网元为5G网络定位系统中的AMF，则所述定位服务器为LMF，所述用户签约信息服务器为UDM。
下面以5G网络的定位服务系统为例，以消息交互的方式具体描述本申请实施例提供的定位服务权限变更方法的流程。
如图8所示，为本申请实施例提供的一种定位服务权限变更流程的消息交互示意图。在此实施例中，定位服务权限信息可以预先配置在UDM中，也可以不预先配置在UDM中，但从LMF发出的定位服务权限信息包括变更的定位服务权限信息保存在UDM中。
如图所示，该流程包括：
S801：UE与LMF完成定位服务权限变更交互。
具体地，UE由于某种业务需求，需要变更定位服务权限，则通过应用层向LMF发送定位服务权限变更消息。该定位服务权限变更可以是永久性的也可以是临时性的，若为临时性的签约权限变更，则该定位服务权限变更消息中还包括有效期。LMF接收UE发送的签约权限变更消息，并根据该消息与UE进行交互。
S802：LMF完成与UE间的定位服务权限变更交互后，向UDM发送定位服务权限变更指示消息。
S803：UDM接收LMF发送的定位服务权限变更指示信息后，根据该指 示消息确认签约权限变更的原因和类型，并保存UE变更后的定位服务权限。
S804：UDM向LMF发送UE定位服务权限变更确认消息。
S805：LMF接收UDM发送的UE定位服务权限变更确认消息后，根据UE变更后的定位服务权限确定与该UE变更后的定位服务权限对应的密钥。
可选地，对于一些UE，随着定位服务权限变更后，LMF可能会产生新的密钥；或者之前没有获取解密密钥的UE可能会因为定位服务权限变更获得解密密钥的权限。
S806：LMF向AMF发送消息。
可选地，若UE变更后的定位服务权限对应的密钥变化，则LMF向AMF发送携带一个或多个变更的加密密钥的密钥数据消息。其中，密钥用于解密广播的网络辅助数据，对于每个变更的或者新的密钥，可包括有效期、一组适用的跟踪区域和加密秘钥的类型。可选地，若UE变更后的定位服务权限对应的密钥未变，则LMF向AMF发送用于描述该UE变更后的定位服务权限对应的密钥未变的指示消息。
S807：AMF根据接收到的携带一个或多个变更加密密钥的密钥数据消息，存储变更的或者新的密钥，可包括有效期、一组适用的跟踪区域和密钥的类型。
S808：UE向NG-RAN发送附着请求消息或TAU请求消息。附着请求消息或TAU请求消息可以作为正常移动性管理的一部分被发送。还可以专门发送TAU请求消息以请求和获得密钥。附着请求消息或TAU请求消息中携带了用于请求密钥的指示信息。
S809：NG-RAN接收附着请求消息或TAU请求消息并将其转发给AMF。其中，该AMF为该UE的服务AMF。
S810：AMF接收附着请求消息或TAU请求消息并向NG-RAN返回附着接受消息或TAU接受消息。AMF在附着接受消息或TAU接受消息中携带了UE变更后的定位服务权限对应密钥的指示信息，该密钥的指示信息中包括适用于该UE的当前跟踪区域的一个或多个变更的或者新的密钥，以及与密钥相 关的有效期，跟踪区域集和密钥类型。
S811：NG-RAN将接收到的附着接受消息或TAU接受消息转发给UE。
在S811之后，UE接收到来自NG-RAN的附着接受消息或TAU接受消息后，一旦密钥的有效期已经开始并且UE当前处于适用的跟踪区域中，UE可以开始使用获得的密钥来解密广播的网络辅助数据。当进入不适用于密钥的跟踪区域时，UE停止使用密钥。当密钥的有效期已过期时，UE停止使用并删除密钥。
S812：当有效期到期时，AMF将删除密钥的所有信息。
可选地，UE的定位服务权限无需预先配置在UDM中，从LMF发出的定位服务权限信息包括变更的定位服务权限信息以及定位服务权限对应的密钥保存在AMF中。基于图8所示的定位服务权限变更流程的示意图，在执行S801之后无需执行S802～S805，而是执行LMF将变更后的定位服务权限以及可能变更的密钥或新的密钥发送AMF，AMF将接收到的变更后的定位服务权限以及可能变更的密钥或新的密钥进行保存。其余步骤与图8所示的流程相同。
在上述实施例中，为了在UE的定位服务权限变更后可以快速地获取到定位服务权限变更后对应的密钥，可以通过AMF触发UE配置更新(configuration update)流程，AMF在UE配置更新流程中携带了定位服务权限变更的信息，UE收到该信息后可及时发起附着请求消息或TAU请求消息用于获取定位服务权限变更后对应的密钥。
对应4G网络的定位服务系统，为了在UE的定位服务权限变更后可以快速地获取到定位服务权限变更后对应的密钥，MME或eNodeB可以通过广播消息或者寻呼消息发送给UE，该广播消息或寻呼消息中携带定位服务中UE密钥变更的标识信息以及定位服务权限变更的UE的地址。为了保证密钥变更的标识信息的安全性，可通过消息鉴别码(Message Authentication Code，MAC)来保证网络给终端的用于指示用户权限变更的消息的完整性。MAC的计算可 以使用UE的附着请求或TAU请求过程中获得到的密钥来完成验证。例如假设MAC值设定为X字节。具体验证的方法是：
1、用于完整性保护的密钥对消息中除MAC的部分进行计算。完整性保护的密钥可以是通过初始附着认证获得密钥推演得到。通过完整性保护计算MAC值，置于系统消息或者是寻呼消息的最后X字节发给UE。
2、UE在接收到系统消息后，使用与网络侧一致的完整性保护的密钥，重新计算消息中除最后X字节之外的部分进行完整性计算，使用的密钥与函数与网络侧使用的相同，若计算得到的MAC值与接收到的MAC值相同，则完整性验证通过。否则该通知消息的完整性验证未通过，UE将丢弃收到的指示消息。
其中，对于系统消息和寻呼消息的结构可以做预先定义：
1、通过专用字段标识某系统消息或寻呼消息用于定位服务权限变更指示；
2、在消息需要包含更新权限的用户的标识；
3、消息还可选的包含使用的安全算法及密钥标识，用于上述的MAC的计算。
需要说明的是，上述实施例在执行S801～S812中是以5G网络的定位服务系统为例，4G网络的定位服务系统中的网元发生了变化，可将5G网络的定位服务系统中LMF改为E-SMLC，UDM改为HSS，AMF改为MME，NG-RAN改为eNodeB，即可实现基于4G网络的定位服务系统的密钥分发，在此不再赘述。
在5G网络的定位服务系统中，若网络侧由于某种原因需要更改UE的定位服务权限，则可以通过UE配置更新流程完成UE定位服务权限的变更。如图9所示，为本申请实施例提供的一种定位服务权限变更流程的消息交互示意图。
如图所示，该流程包括：
S901：LMF向AMF发送UE定位服务权限变更请求消息。
具体地，网络侧由于某种原因需要变更UE的定位服务权限，LMF根据该原因确定UE变更后的定位服务权限以及其对应的密钥，并将UE变更后的定位服务权限、变更原因以及UE变更后的定位服务权限对应的密钥等信息携带在定位服务权限变更请求消息中发送给AMF。
S902：AMF根据接收到的UE定位服务权限变更请求消息，保存UE变更后的定位服务权限以及与UE变更后的定位服务权限对应的密钥；其中，该密钥可包括有效期、一组适用的跟踪区域和密钥的类型。
S903：AMF向LMF返回UE定位服务权限变更响应消息。
S904：AMF向UE发送配置更新请求消息，该消息中携带了UE定位服务权限变更的原因、变更后的定位服务权限以及变更后的定位服务权限对应的密钥。
在S904之后，一旦密钥的有效期已经开始并且UE当前处于适用的跟踪区域中，UE可以开始使用获得的密钥来解密广播的网络辅助数据。当进入不适用于密钥的跟踪区域时，UE停止使用密钥。当密钥的有效期已过期时，UE停止使用并删除密钥。
S905：UE向AMF返回配置更新响应消息。
S906：当有效期到期时，AMF将删除密钥的所有信息。
在一种情况下，以5G网络的定位服务系统为例，UE不再通过应用层向LMF发送定位服务权限变更消息，而是在附着请求消息或TAU消息中携带UE的定位服务权限变更消息。如图10所示，为本申请实施例提供的一种定位服务权限变更流程的消息交互示意图。在此实施例中，LMF中存储有UE的定位服务权限以及定位服务权限对应的密钥，LMF可预先将UE定位服务权限对应的密钥发送给AMF，AMF接收到该密钥后对其进行存储。
如图所示，该流程包括：
S1001：UE向NG-RAN发送附着请求消息或TAU请求消息；其中，附 着请求消息或TAU请求消息中携带了UE定位服务权限变更的指示消息，该指示消息包括UE申请变更的定位服务权限、变更原因以及服务类型。
S1002：NG-RAN将接收到的附着请求消息或TAU请求消息转发给UE归属的AMF。
S1003：AMF接收到NG-RAN发送的附着请求消息或TAU请求消息中的UE定位服务权限变更的指示消息后，向LMF发送定位服务权限变更请求消息，用于请求变更UE的定位服务权限；其中，该请求消息中携带了UE定位服务权限变更的指示消息。
S1004：LMF根据接收到的定位服务器定位服务权限变更请求消息对UE的定位服务权限变更的指示消息进行验证，若验证成功，则变更UE的定位服务权限，并根据UE变更后的定位服务权限确定变更的密钥或产生新的密钥。
S1005：LMF向AMF发送定位服务权限变更确认消息。
在S1005中，若UE变更后的定位服务权限产生新的密钥，则该消息中直接携带新的密钥的指示信息；若UE变更后的定位服务权限未产生新的密钥，则该消息中携带了变更后的密钥的指示信息；该密钥的指示信息中包括适用于该UE的当前跟踪区域的一个或多个变更的或者新的密钥，以及与密钥相关的有效期，跟踪区域集和密钥类型。
S1006：AMF根据接收到的定位服务权限确认消息，保存UE变更后的定位服务权限对应的密钥。
S1007～S1009与S810～S812所执行的步骤相同，在此不再赘述。
基于图10所示的定位服务权限变更流程的消息交互示意图，在一种情况下，UE的定位服务权限存储在UDM中，AMF需通过UDM进而向LMF获取定位服务权限变更后的密钥。即在执行S1002之后，AMF向UDM发送定位服务权限变更请求消息；UDM根据接收到的定位服务权限变更请求消息对UE的定位服务权限变更的指示消息进行验证，若验证成功，则确认UE变更后的定位服务权限，并向LMF发送消息，该消息用于获取变更后的定位服务权限对应的密钥，携带了变更原因、服务类型以及UE的身份标识信息；LMF 根据接收到的消息向UDM返回确认消息；UDM根据接收到的确认消息向AMF返回定位服务权限变更确认消息；LAM根据从UDM接收到的消息，确认定位服务权限变更后对应的密钥，并将变更后的定位服务权限对应密钥的指示信息发送给AMF，该密钥的指示信息中包括适用于该UE的当前跟踪区域的一个或多个变更的或者新的密钥，以及与密钥相关的有效期，跟踪区域集和密钥类型。其余步骤与图10所示的步骤相同。
基于图10所示的定位服务权限变更流程的消息交互示意图，在一种情况下，UE的定位服务权限及其对应的密钥保存在LMF中，LMF可预先将UE的定位服务权限及其对应的密钥发送给AMF，由AMF验证UE的定位服务权限变更的指示消息。在此情况下，在执行S1002之后，AMF验证UE的定位服务权限变更的指示消息，若UE定位服务权限变更后对应的密钥变更或不变，则AMF可直接向UE发送变更后的密钥或不变的密钥，执行S1007～S1009的步骤；若UE定位服务权限变更后需产生新的密钥，则AMF向LMF发送定位服务权限变更的指示消息。LMF根据接收到的定位服务权限变更的指示消息，产生新的密钥，并将产生的新的密钥发送给AMF，其余步骤与图10所示步骤相同。
需要说明的是，上述实施例在执行S1001～S1009中是以5G网络的定位服务系统为例，4G网络的定位服务系统中的网元发生了变化，可将5G网络的定位服务系统中LMF改为E-SMLC，UDM改为HSS，AMF改为MME，NG-RAN改为eNodeB，即可实现基于4G网络的定位服务系统的密钥分发，在此不再赘述。
在一种情况下，以5G网络的定位服务系统为例，由业务实体负责存储和控制UE的定位服务权限的变更。如图11所示，为本申请实施例提供的一种定位服务权限变更流程的消息交互示意图。在此实施例中，UE定位服务权限由业务实体存储和控制，LMF可预先将UE定位服务权限对应的密钥发送给AMF，由业务实体主动将确定的定位服务权限变更的指示信息发送给UDM。
如图所示，该流程包括：
S1101：UE与业务实体完成定位服务权限变更交互。
具体地，UE由于某种业务需求，需要变更定位服务权限，则通过应用层向业务实体发送定位服务权限变更消息。该定位服务权限变更可以是永久性的也可以是临时性的，若为临时性的签约权限变更，则该定位服务权限变更消息中还包括有效期。业务实体接收UE发送的签约权限变更消息，并根据该消息与UE进行交互。
S1102：业务实体完成与UE间的定位服务权限变更交互后，向LMF发送定位服务权限变更指示消息，该定位服务权限变更指示消息中包括变更后的定位服务权限，变更原因，服务类型等。
S1103：LMF根据接收到的定位服务权限变更指示消息进行验证，若验证通过，则保存UE变更后的定位服务权限，并根据UE变更后的定位服务权限确定其对应的密钥或产生新的密钥。
S1104：LMF向UDM定位服务权限变更指示消息。
在S1104中，若变更后的定位服务权限对应的密钥变更或不变，则直接将LMF接收到的定位服务权限变更指示消息转发给UDM；若变更后的定位服务权限产生新的密钥，则在该定位服务权限变更指示消息中添加新的密钥的指示信息后发送给UDM。
S1105：UDM根据接收到的定位服务权限变更指示消息，保存UE变更后的定位服务权限及其对应的密钥。
S1106：UDM向LMF返回定位服务权限确认指示消息。
S1107：LMF向业务实体返回定位服务权限确认指示消息发送。
S1108～S1109与S808～S809所执行的步骤相同，在此不再赘述。
S1110：AMF根据接收到的附着请求消息或TAU请求消息向UDM发送请求消息，用于获取UE变更后的定位服务权限对应的密钥。
S1111：UDM根据接收到的请求消息向AMF返回确认消息，该确认消息中包括了UE变更后的定位服务权限对应的密钥的指示信息，或UE定位服务权限变更后所产生的新的密钥。
S1112：AMF根据接收的确认消息，保存UE定位服务权限变更后对应的密钥。
S1113～S1115与S810～S812所执行得步骤相同，在此不再赘述。
基于图11所示的定位服务权限变更流程的消息交互示意图，在一种情况下，UE定位服务权限由业务实体存储和控制，LMF可预先将UE定位服务权限对应的密钥发送给AMF，由UE通过附着请求消息或TAU请求消息向业务实体确认定位服务权限变更的指示信息。此种情况下，在执行S1101之后直接执行S1108～S1109，AMF根据接收到的附着请求消息或TAU请求消息向UDM发送定位服务变更请求消息；UDM将接收到的定位服务变更请求消息转发给业务实体；业务实体根据接收到的定位服务变更请求消息确认UE变更后的定位服务权限，并向UDM返回定位服务权限变更确认消息，该消息中包括UE变更过后的定位服务权限；UDM将接收到的定位服务权限变更确认消息转发给AMF。其余步骤与图11所示的步骤相同。
需要说明的是，上述实施例在执行S1101～S1115中是以5G网络的定位服务系统为例，4G网络的定位服务系统中的网元发生了变化，可将5G网络的定位服务系统中LMF改为E-SMLC，UDM改为HSS，AMF改为MME，NG-RAN改为eNodeB，即可实现基于4G网络的定位服务系统的密钥分发，在此不再赘述。
在一种情况下，以5G网络的定位服务系统为例，由业务实体负责存储和控制UE的定位服务权限的变更，UE不再通过应用层向业务实体发送定位服务权限变更消息，而是在附着请求消息或TAU消息中携带UE的定位服务权限变更消息。如图12所示，为本申请实施例提供的一种定位服务变更流程的消息交互示意图。在此实施例中，UE定位服务权限由业务实体存储和控制，LMF可预先将UE定位服务权限对应的密钥发送给AMF。
如图所示，该流程包括：
S1201～S1203与S1001～S1003中所述的步骤相同，在此不再赘述。
S1204：LMA将接收到的定位服务权限变更请求消息转发给业务实体。
S1205：业务实体接收定位服务权限变更请求消息，并向LAM返回定位服务权限变更确认消息，其中，该定位服务权限变更确认消息中包括UE变更后的定位服务权限。
S1206：LAM对接收到的定位服务权限变更确认消息进行验证，若验证通过，则保存UE变更后的定位服务权限，并根据UE变更后的定位服务权限确定其对应的密钥或产生新的密钥。
S1207：LAM向AMF发送定位服务权限变更确认消息。
在S1207中，若变更后的定位服务权限对应的密钥变更或不变，则直接将LAM接收到的定位服务权限变更消息转发给AMF；若变更后的定位服务权限产生新的密钥，则在该定位服务权限变更消息中添加新的密钥的指示信息后发送给AMF。
S1208～S1211与S1006～S1009所执行的步骤相同，在此不再赘述。
基于图12所示的定位服务权限变更流程的消息交互示意图，在一种情况下，UE的定位服务权限变更由业务实体控制，UE的定位服务权限存储在UDM中。此种情况下，在执行S1201～S1202之后，AMF将定位服务权限变更请求消息发送给UDM，UDM将接收到的定位服务权限变更请求消息发送给LMF，进而由LMF转发给业务实体；业务实体接收到定位服务权限变更请求消息后向LMF返回定位服务权限变更确认消息，LMF将接收到的定位服务权限变更确认消息发送给UDM，进而由UDM转发给AMF，更新后的定位服务权限保存在UDM中。其余步骤与图12所示步骤相同，在此不再赘述。
需要说明的是，上述实施例在执行S1201～S1211中是以5G网络的定位服务系统为例，4G网络的定位服务系统中的网元发生了变化，可将5G网络的定位服务系统中LMF改为E-SMLC，UDM改为HSS，AMF改为MME，NG-RAN改为eNodeB，即可实现基于4G网络的定位服务系统的密钥分发，在此不再赘述。
基于相同的技术构思，本申请实施例还提供了一种定位服务系统，该定 位服务系统可实现图4～图7中所示的流程。
参见图13，为本申请实施例提供的定位服务系统的结构示意图，该系统可包括：定位服务器1301，核心网网元1302，进一步地还包括用户签约服务器1303。
定位服务器1301，用于接收第一定位服务权限变更消息，所述第一定位服务权限变更消息用于请求变更目标终端的定位服务权限。
核心网网元1302，用于接收所述定位服务器发送的第二定位服务权限变更消息，所述第二定位服务权限变更消息携带所述目标终端变更后的定位服务权限信息。
所述定位服务器1301还用于向所述核心网网元发送第二定位服务权限变更消息。
可选地，所述定位服务系统还包括：用户签约信息服务器1303，用于接收所述定位服务器发送的定位服务权限变更指示消息，所述定位服务权限变更指示消息用于指示所述用户签约信息服务器确定所述目标终端变更后的定位服务权限；所述用户签约信息服务器1303还用于向所述定位服务器发送定位服务权限变更确认消息，所述定位服务权限变更确认消息携带所述目标终端变更后的定位服务权限信息。
可选地，所述定位服务系统还包括：业务实体1304，用于接收所述定位服务器权限变更指示消息，所述定位服务权限变更指示消息用于指示所述业务实体确定所述目标终端变更后的定位服务权限，并产生与所述目标终端变更后的定位服务权限对应的密钥；所述业务实体1304还用于，向定位服务器发送定位服务权限变更响应消息，所述定位服务权限变更响应消息用于指示所述定位服务器保存所述目标终端变更后的定位服务权限信息以及与所述目标终端变更后的定位服务权限对应的密钥。
可选地，所述定位服务器，还用于接收来自于用户签约信息服务器的携带有所述目标终端变更后的定位服务权限信息的第一定位服务权限变更消息，所述第一定位服务权限变更消息是所述用户签约服务器根据来自于所述核心 网网元的定位服务权限变更指示消息对所述目标终端的定位服务权限变更后发送的，所述定位服务权限变更指示消息是所述核心网网元接收来自于所述目标终端的附着请求消息或跟踪区更新请求消息后发送的，所述附着请求消息或跟踪区更新请求消息携带定位服务权限变更指示信息，所述定位服务权限变更指示信息用于指示变更所述目标终端的定位服务权限。
可选地，所述核心网网元，还用于接收来自于定位服务器的定位服务权限变更消息，所述定位服务变更消息携带目标终端变更后的定位服务权限信息；通知所述目标终端定位服务权限发生变更；接收所述目标终端根据所述核心网网元的通知发送的第一请求消息，并向所述目标终端发送第一响应消息，所述第一响应消息携带所述目标终端变更后的定位服务权限信息。
可选地，所述核心网网元，还用于接收来自目标终端的第一请求消息；向用户签约信息服务器发送定位服务权限变更指示消息，所述定位服务权限变更指示消息用于请求获取所述目标终端变更后的定位服务权限信息；接收所述用户签约信息服务器发送的定位服务权限变更确认消息，所述定位服务权限变更确认消息携带所述目标终端变更后的定位服务权限以及与所述目标终端变更后的定位服务权限对应的密钥，所述定位服务权限变更确认消息用于指示所述核心网网元保存所述目标终端变更后的定位服务权限以及与所述目标终端变更后的定位服务权限对应的密钥；向所述目标终端发送第一响应消息，所述第一响应消息携带所述目标终端变更后的定位服务权限对应的密钥。
可选地，所述定位服务器为LMF，所述核心网网元为AMF或UDM；或者所述定位服务器为E-SMLC，所述核心网网元为MME或HSS。
基于相同的技术构思，本申请实施例还提供了一种定位服务器，该定位服务器可实现图4所示的流程。
参见图14，为本申请实施例提供的定位服务器的结构示意图，该定位服务器可包括：接收模块1401、发送模块1402。
接收模块1401，用于接收第一定位服务器权限变更消息，所述第一定位服务权限变更消息用于请求变更目标终端的定位服务权限；
发送模块1402，用于向核心网网元发送第二定位服务权限变更消息，所述第二定位服务权限变更消息携带所述目标终端变更后的定位服务权限信息。
可选地，所述发送模块，进一步用于：向用户签约信息服务器发送定位服务权限变更指示消息，所述定位服务权限变更指示消息用于指示所述用户签约信息服务器确定所述目标终端变更后的定位服务权限；所述接收模块，进一步用于：接收所述用户签约信息服务器发送的定位服务权限变更确认消息，所述定位服务权限变更确认消息携带所述目标终端变更后的定位服务权限信息。
可选地，所述接收模块，进一步用于根据所述第一定位服务权限变更消息，确定所述目标终端变更后的定位服务权限信息，并产生所述目标终端变更后的定位服务权限对应的密钥。
可选地，所述接收模块，具体用于接收所述目标终端通过应用层发送的第一定位服务权限变更消息；所述发送模块，具体用于向所述核心网网元发送定位服务权限变更消息，所述定位服务权限变更消息用于指示所述核心网网元保存所述目标终端变更后的定位服务权限信息以及与所述目标终端变更后的定位服务权限对应的密钥。
可选地，所述接收模块，具体用于接收来自于所述核心网网元的第一定位服务权限变更消息，所述第一定位服务权限变更消息是所述核心网网元接收所述目标终端的附着请求消息或跟踪区更新请求消息后发送的，所述附着请求消息或跟踪区更新请求消息携带定位服务权限变更指示信息，所述定位服务权限变更指示信息用于指示变更所述目标终端的定位服务权限；所述发送模块，具体用于向所述核心网网元发送第二定位服务权限变更消息，所述第二定位服务权限变更消息用于指示所述核心网网元保存所述目标终端变更后的定位服务权限信息以及与所述目标终端变更后的定位服务权限对应的密钥。
可选地，所述接收模块，进一步用于验证所述第一定位服务权限变更消息的完整性，若验证通过，则确定所述目标终端变更后的定位服务权限，并产生与所述目标终端变更后的定位服务权限对应的密钥。
可选地，所述第一定位服务器权限变更消息是所述核心网网元判断需要为所述目标终端生成新的密钥后发送的；所述接收模块，进一步用于根据所述第一定位服务权限变更消息，为所述目标终端生成与所述目标终端变更后的定位服务权限对应的密钥，所述密钥用于解密广播的网络辅助数据；所述定位服务器向核心网网元发送的所述第二定位服务权限变更消息用于指示所述核心网网元保存所述目标终端变更后的定位服务权限以及与所述目标终端变更后的定位服务权限对应的密钥。
可选地，所述发送模块，进一步用于向业务实体发送定位服务权限变更指示消息，所述定位服务权限变更指示消息用于指示所述业务实体确定所述目标终端变更后的定位服务权限，并产生与所述目标终端变更后的定位服务权限对应的密钥；所述接收模块，进一步用于接收所述业务实体发送的定位服务权限变更响应消息，所述定位服务权限变更响应消息用于指示所述定位服务器保存所述目标终端变更后的定位服务权限信息以及所述目标终端变更后的定位服务权限对应的密钥。
可选地，所述接收模块，具体用于接收来自于用户签约信息服务器的携带有所述目标终端变更后的定位服务权限信息的第一定位服务权限变更消息，所述第一定位服务权限变更消息是所述用户签约服务器根据来自于所述核心网网元的定位服务权限变更指示消息对所述目标终端的定位服务权限变更后发送的，所述定位服务权限变更指示消息是所述核心网网元接收来自于所述目标终端的附着请求消息或跟踪区更新请求消息后发送的，所述附着请求消息或跟踪区更新请求消息携带定位服务权限变更指示信息，所述定位服务权限变更指示信息用于指示变更所述目标终端的定位服务权限。
可选地，所述发送模块，进一步用于向业务实体发送第一定位服务权限变更指示消息，所述第一定位服务权限变更消息携带有所述目标终端变更后 的定位服务权限信息，所述第一定位服务变更过消息用于指示所述业务实体产生与所述目标终端变更后的定位服务权限对应的密钥；所述接收模块，进一步用于接收所述业务实体发送的第一定位服务权限变更响应消息，所述第一定位服务权限变更响应消息用于指示所述定位服务权限保存所述目标终端变更后的定位服务权限对应的密钥。
可选地，所述接收模块，具体用于接收来自业务实体的第一定位服务权限变更消息，所述第一定位服务权限变更消息是所述业务实体接收所述目标终端通过应用层发送的定位服务权限变更指示消息并对所述目标终端进行定位服务权限变更后发送的，所述第一定位服务权限变更消息用于指示所述定位服务器保存所述目标终端变更后的定位给服务权限，并产生与所述目标终端变更过后的定位服务权限对应的密钥；所述发送模块，具体用于向用户签约信息服务器发送第二定位服务权限变更消息，所述第二定位服务权限变更消息携带所述目标终端变更后的定位服务权限信息，所述第二定位服务权限变更消息用于指示所述用户签约信息服务器保存所述目标终端变更后的定位服务权限。
可选地，所述接收模块，具体用于接收所述用户签约信息服务器发送的定位服务权限变更确认消息，所述定位服务权限变更确认消息用于指示所述用户签约信息服务器已保存所述目标终端变更后的定位服务权限以及与所述目标终端变更后的定位服务权限对应的密钥。
可选地，所述目标终端变更后的定位服务权限信息包括：与所述目标终端变更后的定位服务权限对应的一个或多个密钥，所述一个或多个密钥用于解密广播的网络辅助数据。
可选地，所述目标终端变更后的定位服务权限信息，还包括：有效期；使用的跟踪区指示信息；密钥类型指示信息。
可选地，所述第一定位服务权限变更消息携带以下信息中的一种或多种：变更指示信息，用于指示定位服务权限发生变更；变更原因指示信息，用于指示定位服务权限变更的原因；变更时限信息，用于指示临时变更或永久变 更，所述变更时限信息指示临时变更时还包括临时变更的有效期；服务类型指示信息，用于指示目标终端定位服务权限变更申请为临时申请或永久申请。
可选地，所述定位服务器为LMF，所述核心网网元为AMF或UDM；或者所述定位服务器为E-SMLC，所述核心网网元为MME或HSS。
基于相同的技术构思，本申请实施例还提供了一种核心网网元，该核心网网元可实现图5所示的流程。
参见图15，为本申请实施例提供的核心网网元的结构示意图。该核心网网元可包括：接收模块1501、通知模块1502和发送模块1503。
接收模块1501，用于接收来自于定位服务器的定位服务权限变更消息，所述定位服务变更消息携带目标终端变更后的定位服务权限信息。
通知模块1502，用于通知所述目标终端定位服务权限发生变更。
发送模块1503，用于根据接收到的所述目标终端根据所述核心网网元的通知发送的第一请求消息，向所述目标终端发送第一响应消息，所述第一响应消息携带所述目标终端变更后的定位服务权限信息。
可选地，所述通知模块，具体用于指示所述目标终端的服务基站发送系统广播消息，所述系统广播消息携带所述目标终端的标识以及定位服务权限变更指示信息；或者，指示所述目标终端的服务基站发送寻呼消息，所述寻呼消息携带所述目标终端的标识以及定位服务权限变更指示信息；其中，所述定位服务权限变更指示信息用于指示所述目标终端的定位服务权限发生变更。
可选地所述第一请求消息为附着请求消息，所述第一响应消息为附着接受消息；或者，所述第一请求消息为跟踪区更新请求消息，所述第一响应消息为跟踪区更新接受消息。
可选地，所述目标终端变更后的定位服务权限信息包括：与所述目标终端变更后的定位服务权限对应的一个或多个密钥，所述一个或多个密钥用于解密广播的网络辅助数据。
可选地，所述核心网网元为MME，所述定位服务器为E-SMLC；或者，所述核心网网元为AMF，所述定位服务器为LMF。
基于相同的技术构思，本申请实施例还提供了一种核心网网元，该核心网网元可实现图6所示的流程。
参见图16，为本申请实施例提供的核心网网元的结构，该核心网网元可包括：接收模块1601、发送模块1602。
接收模块1601，用于接收来自定位服务器的定位服务权限变更消息，所述定位服务权限变更消息携带目标终端变更后的定位服务权限信息以及与所述目标终端变更后的定位服务权限对应的密钥，所述定位服务权限变更消息用于指示所述核心网网元保存所述目标终端变更后的定位服务权限以及与所述目标终端变更够的定位服务权限对应的密钥。
发送模块1602，用于向所述目标终端发送定位服务权限配置消息，所述定位服务权限配置消息携带所述目标终端变更后的定位服务权限信息。
可选地，所述目标终端变更后的定位服务权限信息包括：与所述目标终端变更后的定位服务权限对应的一个或多个密钥，所述一个或多个密钥用于解密广播的网络辅助数据。
可选地，所述核心网网元为AMF，所述定位服务器为LMF。
基于相同的技术构思，本申请实施例提供了一种核心网网元，该核心网网元可实现图7所示的流程。
参见图17，为本申请实施例提供的核心网网元的结构图，如图所示该核心网网元可包括：接收模块1701、发送模块1702。
接收模块1701，用于接收来自目标终端的第一请求消息。
发送模块1702，用于向用户签约信息服务器发送定位服务权限变更指示消息，所述定位服务权限变更指示消息用于请求获取所述目标终端变更后的定位服务权限信息。
所述接收模块1701，还用于接收所述用户签约信息服务器发送的定位服 务权限变更确认消息，所述定位服务权限变更确认消息携带所述目标终端变更后的定位服务权限变更信息以及与所述目标终端变更后的定位服务权限对应的密钥，所述定位服务权限变更确认消息用于指示所述核心网网元保存所述目标终端变更后的定位服务权限以及与所述目标终端变更后的定位服务权限对应的密钥。
所述发送模块1702，还用于向所述目标终端发送第一响应消息，所述第一响应消息携带所述目标终端变更后的定位服务权限信息对应的密钥。
可选地，所述定位服务权限变更确认消息是所述用户签约信息服务器根据接收的所述定位服务权限变更指示消息从业务实体获取到所述目标终端变更后的定位服务权限信息后发送的。
可选地，所述目标终端变更后的定位服务权限信息包括：与所述目标终端变更后的定位服务权限对应的一个或多个密钥，所述一个或多个密钥用于解密广播的网络辅助数据。
可选地，所述核心网网元为AMF，所述定位服务器为LMF，所述用户签约信息服务器为UDM；或者，所述核心网网元为MME，所述定位服务器为E-SMLC，所述用户签约信息服务器为HSS。
基于相同的技术构思，本申请实施例还提供了一种通信装置，该通信装置可实现本申请实施例中图14实现的功能。
参见图18，为本申请实施例提供的通信装置的结构示意图，如图所示，该通信装置可包括：处理器1801、存储器1802、收发机1803以及总线接口1804。
处理器1801负责管理总线架构和通常的处理，存储器1802可以存储处理器1801在执行操作时所使用的数据。收发机1803用于在处理器1801的控制下接收和发送数据。
总线架构可以包括任意数量的互联的总线和桥，具体由处理器1801代表的一个或多个处理器和存储器1802代表的存储器的各种电路链接在一起。总 线架构还可以将诸如外围设备、稳压器和功率管理电路等之类的各种其他电路链接在一起，这些都是本领域所公知的，因此，本文不再对其进行进一步描述。总线接口提供接口。处理器1801负责管理总线架构和通常的处理，存储器1802可以存储处理器1801在执行操作时所使用的数据。
本发明实施例揭示的流程，可以应用于处理器1801中，或者由处理器1801实现。在实现过程中，信号处理流程的各步骤可以通过处理器1801中的硬件的集成逻辑电路或者软件形式的指令完成。处理器1801可以是通用处理器、数字信号处理器、专用集成电路、现场可编程门阵列或者其他可编程逻辑器件、分立门或者晶体管逻辑器件、分立硬件组件，可以实现或者执行本发明实施例中的公开的各方法、步骤及逻辑框图。通用处理器可以是微处理器或者任何常规的处理器等。结合本发明实施例所公开的方法的步骤可以直接体现为硬件处理器执行完成，或者用处理器中的硬件及软件模块组合执行完成。软件模块可以位于随机存储器，闪存、只读存储器，可编程只读存储器或者电可擦写可编程存储器、寄存器等本领域成熟的存储介质中。该存储介质位于存储器1802，处理器1801读取存储器1802中的信息，结合其硬件完成信号处理流程的步骤。
具体地，处理器1801，用于读取存储器1802中的计算机指令并执行图14所实现的功能。
基于相同的技术构思，本申请实施例还提供了一种通信装置，该通信装置能够实现本申请实施例中图15所实现的功能。
参见图19，为本申请实施例提供的通信装置的结构示意图，如图所示，该通信装置可包括：处理器1901、存储器1902、收发机1903以及总线接口1904。
处理器1901负责管理总线架构和通常的处理，存储器1902可以存储处理器1901在执行操作时所使用的数据。收发机1903用于在处理器1901的控制下接收和发送数据。
总线架构可以包括任意数量的互联的总线和桥，具体由处理器1901代表的一个或多个处理器和存储器1902代表的存储器的各种电路链接在一起。总线架构还可以将诸如外围设备、稳压器和功率管理电路等之类的各种其他电路链接在一起，这些都是本领域所公知的，因此，本文不再对其进行进一步描述。总线接口提供接口。处理器1901负责管理总线架构和通常的处理，存储器1902可以存储处理器1901在执行操作时所使用的数据。
本发明实施例揭示的流程，可以应用于处理器1901中，或者由处理器1901实现。在实现过程中，信号处理流程的各步骤可以通过处理器1901中的硬件的集成逻辑电路或者软件形式的指令完成。处理器1901可以是通用处理器、数字信号处理器、专用集成电路、现场可编程门阵列或者其他可编程逻辑器件、分立门或者晶体管逻辑器件、分立硬件组件，可以实现或者执行本发明实施例中的公开的各方法、步骤及逻辑框图。通用处理器可以是微处理器或者任何常规的处理器等。结合本发明实施例所公开的方法的步骤可以直接体现为硬件处理器执行完成，或者用处理器中的硬件及软件模块组合执行完成。软件模块可以位于随机存储器，闪存、只读存储器，可编程只读存储器或者电可擦写可编程存储器、寄存器等本领域成熟的存储介质中。该存储介质位于存储器1902，处理器1901读取存储器1902中的信息，结合其硬件完成信号处理流程的步骤。
具体地，处理器1901，用于读取存储器1902中的计算机指令并执行图15所实现的功能。
基于相同的技术构思，本申请实施例还提供了一种通信装置，该通信装置能够实现本申请实施例中图16所实现的功能。
参见图20，为本申请实施例提供的通信装置的结构示意图，如图所示，该通信装置可包括：处理器2001、存储器2002、收发机2003以及总线接口2004。
处理器2001负责管理总线架构和通常的处理，存储器2002可以存储处 理器2001在执行操作时所使用的数据。收发机2003用于在处理器2001的控制下接收和发送数据。
总线架构可以包括任意数量的互联的总线和桥，具体由处理器2001代表的一个或多个处理器和存储器2002代表的存储器的各种电路链接在一起。总线架构还可以将诸如外围设备、稳压器和功率管理电路等之类的各种其他电路链接在一起，这些都是本领域所公知的，因此，本文不再对其进行进一步描述。总线接口提供接口。处理器2001负责管理总线架构和通常的处理，存储器2002可以存储处理器2001在执行操作时所使用的数据。
本发明实施例揭示的流程，可以应用于处理器2001中，或者由处理器2001实现。在实现过程中，信号处理流程的各步骤可以通过处理器2001中的硬件的集成逻辑电路或者软件形式的指令完成。处理器2001可以是通用处理器、数字信号处理器、专用集成电路、现场可编程门阵列或者其他可编程逻辑器件、分立门或者晶体管逻辑器件、分立硬件组件，可以实现或者执行本发明实施例中的公开的各方法、步骤及逻辑框图。通用处理器可以是微处理器或者任何常规的处理器等。结合本发明实施例所公开的方法的步骤可以直接体现为硬件处理器执行完成，或者用处理器中的硬件及软件模块组合执行完成。软件模块可以位于随机存储器，闪存、只读存储器，可编程只读存储器或者电可擦写可编程存储器、寄存器等本领域成熟的存储介质中。该存储介质位于存储器2002，处理器2001读取存储器2002中的信息，结合其硬件完成信号处理流程的步骤。
具体地，处理器2001，用于读取存储器2002中的计算机指令并执行图16所实现的功能。
基于相同的技术构思，本申请实施例还提供了一种通信装置，该通信装置能够实现本申请实施例中图17所实现的功能。
参见图21，为本申请实施例提供的通信装置的结构示意图，如图所示，该通信装置可包括：处理器2101、存储器2102、收发机2103以及总线接口 2104。
处理器2101负责管理总线架构和通常的处理，存储器2102可以存储处理器2101在执行操作时所使用的数据。收发机2103用于在处理器2101的控制下接收和发送数据。
总线架构可以包括任意数量的互联的总线和桥，具体由处理器2101代表的一个或多个处理器和存储器2102代表的存储器的各种电路链接在一起。总线架构还可以将诸如外围设备、稳压器和功率管理电路等之类的各种其他电路链接在一起，这些都是本领域所公知的，因此，本文不再对其进行进一步描述。总线接口提供接口。处理器2101负责管理总线架构和通常的处理，存储器2102可以存储处理器2101在执行操作时所使用的数据。
本发明实施例揭示的流程，可以应用于处理器2101中，或者由处理器2101实现。在实现过程中，信号处理流程的各步骤可以通过处理器2101中的硬件的集成逻辑电路或者软件形式的指令完成。处理器2101可以是通用处理器、数字信号处理器、专用集成电路、现场可编程门阵列或者其他可编程逻辑器件、分立门或者晶体管逻辑器件、分立硬件组件，可以实现或者执行本发明实施例中的公开的各方法、步骤及逻辑框图。通用处理器可以是微处理器或者任何常规的处理器等。结合本发明实施例所公开的方法的步骤可以直接体现为硬件处理器执行完成，或者用处理器中的硬件及软件模块组合执行完成。软件模块可以位于随机存储器，闪存、只读存储器，可编程只读存储器或者电可擦写可编程存储器、寄存器等本领域成熟的存储介质中。该存储介质位于存储器2102，处理器2101读取存储器2102中的信息，结合其硬件完成信号处理流程的步骤。
具体地，处理器2101，用于读取存储器2102中的计算机指令并执行图17所实现的功能。
基于相同的技术构思，本申请实施例还提供了一种计算机可读存储介质。所述计算机可读存储介质存储有计算机可执行指令，所述计算机可执行指令 用于使所述计算机执行图14中定位服务器所执行的流程。
基于相同的技术构思，本申请实施例还提供了一种计算机可读存储介质。所述计算机可读存储介质存储有计算机可执行指令，所述计算机可执行指令用于使所述计算机执行图15中核心网网元所执行的流程。
基于相同的技术构思，本申请实施例还提供了一种计算机可读存储介质。所述计算机可读存储介质存储有计算机可执行指令，所述计算机可执行指令用于使所述计算机执行图16中核心网网元所执行的流程。
基于相同的技术构思，本申请实施例还提供了一种计算机可读存储介质。所述计算机可读存储介质存储有计算机可执行指令，所述计算机可执行指令用于使所述计算机执行图17中核心网网元所执行的流程。
本申请是参照根据本申请实施例的方法、设备(系统)、和计算机程序产品的流程图和/或方框图来描述的。应理解可由计算机程序指令实现流程图和/或方框图中的每一流程和/或方框、以及流程图和/或方框图中的流程和/或方框的结合。可提供这些计算机程序指令到通用计算机、专用计算机、嵌入式处理机或其他可编程数据处理设备的处理器以产生一个机器，使得通过计算机或其他可编程数据处理设备的处理器执行的指令产生用于实现在流程图一个流程或多个流程和/或方框图一个方框或多个方框中指定的功能的装置。
这些计算机程序指令也可存储在能引导计算机或其他可编程数据处理设备以特定方式工作的计算机可读存储器中，使得存储在该计算机可读存储器中的指令产生包括指令装置的制造品，该指令装置实现在流程图一个流程或多个流程和/或方框图一个方框或多个方框中指定的功能。
这些计算机程序指令也可装载到计算机或其他可编程数据处理设备上，使得在计算机或其他可编程设备上执行一系列操作步骤以产生计算机实现的处理，从而在计算机或其他可编程设备上执行的指令提供用于实现在流程图一个流程或多个流程和/或方框图一个方框或多个方框中指定的功能的步骤。
尽管已描述了本申请的优选实施例，但本领域内的技术人员一旦得知了 基本创造性概念，则可对这些实施例作出另外的变更和修改。所以，所附权利要求意欲解释为包括优选实施例以及落入本申请范围的所有变更和修改。
显然，本领域的技术人员可以对本申请进行各种改动和变型而不脱离本申请的精神和范围。这样，倘若本申请的这些修改和变型属于本申请权利要求及其等同技术的范围之内，则本申请也意图包含这些改动和变型在内。

Claims (71)

  1. 一种定位服务权限更新方法，其特征在于，包括：
    定位服务器接收第一定位服务权限变更消息，所述第一定位服务权限变更消息用于请求变更目标终端的定位服务权限；
    所述定位服务器向核心网网元发送第二定位服务权限变更消息，所述第二定位服务权限变更消息携带所述目标终端变更后的定位服务权限信息。
  2. 如权利要求1所述的方法，其特征在于，所述定位服务器接收第一定位服务权限变更消息之后，还包括：
    所述定位服务器向用户签约信息服务器发送定位服务权限变更指示消息，所述定位服务权限变更指示消息用于指示所述用户签约信息服务器确定所述目标终端变更后的定位服务权限；
    所述定位服务器接收所述用户签约信息服务器发送的定位服务权限变更确认消息，所述定位服务权限变更确认消息携带所述目标终端变更后的定位服务权限信息。
  3. 如权利要求1所述的方法，其特征在于，所述定位服务器接收第一定位服务权限变更消息之后，还包括：
    所述定位服务器根据所述第一定位服务权限变更消息，确定所述目标终端变更后的定位服务权限信息，并产生所述目标终端变更后的定位服务权限对应的密钥。
  4. 如权利要求2或3所述的方法，其特征在于，所述定位服务器接收第一定位服务权限变更消息，包括：
    所述定位服务器接收所述目标终端通过应用层发送的第一定位服务权限变更消息；
    所述定位服务器向核心网网元发送第二定位服务权限变更消息，包括：
    所述定位服务器向所述核心网网元发送定位服务权限变更消息，所述定位服务权限变更消息用于指示所述核心网网元保存所述目标终端变更后的定 位服务权限信息以及所述目标终端变更后的定位服务权限对应的密钥。
  5. 如权利要求1所述的方法，其特征在于，所述定位服务器接收第一定位服务权限变更消息，包括：
    所述定位服务器接收来自于所述核心网网元的第一定位服务权限变更消息，所述第一定位服务权限变更消息是所述核心网网元接收所述目标终端的附着请求消息或跟踪区更新请求消息后发送的，所述附着请求消息或跟踪区更新请求消息携带定位服务权限变更指示信息，所述定位服务权限变更指示信息用于指示变更所述目标终端的定位服务权限；
    所述定位服务器向核心网网元发送第二定位服务权限变更消息，包括：
    所述定位服务器向所述核心网网元发送第二定位服务权限变更消息，所述第二定位服务权限变更消息用于指示所述核心网网元保存所述目标终端变更后的定位服务权限信息以及所述目标终端变更后的定位服务权限对应的密钥。
  6. 如权利要求5所述的方法，其特征在于，所述定位服务器接收第一定位服务权限变更消息之后，还包括：
    所述定位服务器验证所述第一定位服务权限变更消息的完整性，若验证通过，且允许用户进行定位服务权限变更，则确定所述目标终端变更后的定位服务权限，并产生与所述目标终端变更后的定位服务权限对应的密钥。
  7. 如权利要求5所述的方法，其特征在于，所述第一定位服务器权限变更消息是所述核心网网元判断需要为所述目标终端生成新的密钥后发送的；
    所述定位服务器接收第一定位服务权限变更消息之后，还包括：
    所述定位服务器根据所述第一定位服务权限变更消息，为所述目标终端生成与所述目标终端变更后的定位服务权限对应的密钥，所述密钥用于解密广播的网络辅助数据；
    所述定位服务器向所述核心网网元发送的所述第二定位服务权限变更消息用于指示所述核心网网元保存所述目标终端变更后的定位服务权限信息以及所述目标终端变更后的定位服务权限对应的密钥。
  8. 如权利要求5所述的方法，其特征在于，所述定位服务器接收第一定位服务权限变更消息之后，还包括：
    所述定位服务器向业务实体发送定位服务权限变更指示消息，所述定位服务权限变更指示消息用于指示所述业务实体确定所述目标终端变更后的定位服务权限，并产生与所述目标终端变更后的定位服务权限对应的密钥；
    所述定位服务器接收所述业务实体发送的定位服务权限变更响应消息，所述定位服务权限变更响应消息用于指示所述定位服务器保存所述目标终端变更后的定位服务权限信息以及所述目标终端变更后的定位服务权限对应的密钥。
  9. 如权利要求1所述的方法，其特征在于，所述定位服务器接收第一定位服务权限变更消息，包括：
    所述定位服务器接收来自于用户签约信息服务器的携带有所述目标终端变更后的定位服务权限信息的第一定位服务权限变更消息，所述第一定位服务权限变更消息是所述用户签约服务器根据来自于所述核心网网元的定位服务权限变更指示消息对所述目标终端的定位服务权限变更后发送的，所述定位服务权限变更指示消息是所述核心网网元接收来自于所述目标终端的附着请求消息或跟踪区更新请求消息后发送的，所述附着请求消息或跟踪区更新请求消息携带定位服务权限变更指示信息，所述定位服务权限变更指示信息用于指示变更所述目标终端的定位服务权限。
  10. 如权利要求9所述的方法，其特征在于，所述定位服务器接收第一定位服务权限变更消息之后，还包括：
    所述定位服务器向所述业务实体发送第一定位服务权限变更消息，所述第一定位服务权限变更消息携带有所述目标终端变更后的定位服务权限信息，所述第一定位服务权限变更消息用于指示所述业务实体产生与所述目标终端变更后的定位服务权限对应的密钥；
    所述定位服务器接收所述业务实体发送的第一定位服务权限变更响应消息，所述第一定位服务权限变更响应消息用于指示所述定位服务器保存所述 目标终端变更后的定位服务权限对应的密钥。
  11. 如权利要求1所述的方法，其特征在于，所述定位服务器接收第一定位服务权限变更消息，包括：
    所述定位服务器接收来自业务实体的第一定位服务权限变更消息，所述第一定位服务权限变更消息是所述业务实体接收所述目标终端通过应用层发送的定位服务权限变更指示消息并对所述目标终端进行定位服务权限变更后发送的，所述第一定位服务权限变更消息用于指示所述定位服务器保存所述目标终端变更后的定位服务权限，并产生与所述目标终端变更后的定位服务权限对应的密钥；
    所述定位服务器向用户签约信息服务器发送第二定位服务权限变更消息，所述第二定位服务权限变更消息携带所述目标终端变更后的定位服务权限信息，所述第二定位服务权限变更消息用于指示所述用户签约信息服务器保存所述目标终端变更后的定位服务权限。
  12. 如权利要求11所述的方法，其特征在于，所述定位服务器向用户签约信息服务器发送第二定位服务权限变更消息之后，还包括：
    所述定位服务器接收所述用户签约信息服务器发送的定位服务权限变更确认消息，所述定位服务权限变更确认消息用于指示所述用户签约信息服务器已保存所述目标终端变更后的定位服务权限以及与所述目标终端变更后的定位服务权限对应的密钥。
  13. 如权利要求4、5或7所述的方法，其特征在于，所述核心网网元包括AMF或MME。
  14. 如权利要求2、9或11所述的方法，其特征在于，所述用户签约信息服务器包括UDM或HSS。
  15. 如权利要求1-10中任一项所述的方法，其特征在于，所述目标终端变更后的定位服务权限信息包括：与所述目标终端变更后的定位服务权限对应的一个或多个密钥，所述一个或多个密钥用于解密广播的网络辅助数据。
  16. 如权利要求15所述的方法，其特征在于，所述目标终端变更后的定 位服务权限信息，还包括：
    有效期；
    使用的跟踪区指示信息；
    密钥类型指示信息。
  17. 如权利要求1-12中任一项所述的方法，其特征在于，所述第一定位服务权限变更消息携带以下信息中的一种或多种：
    变更指示信息，用于指示定位服务权限发生变更；
    变更原因指示信息，用于指示定位服务权限变更的原因；
    变更时限信息，用于指示临时变更或永久变更，所述变更时限信息指示临时变更时还包括临时变更的有效期；
    服务类型指示信息，用于指示目标终端定位服务权限变更申请为临时申请或永久申请。
  18. 如权利要求1-12中任一项所述的方法，其特征在于，所述定位服务器为LMF，所述核心网网元为AMF或UDM；或者
    所述定位服务器为E-SMLC，所述核心网网元为MME或HSS。
  19. 一种定位服务权限更新方法，其特征在于，包括：
    核心网网元接收来自于定位服务器的定位服务权限变更消息，所述定位服务变更消息携带目标终端变更后的定位服务权限信息；
    所述核心网网元通知所述目标终端定位服务权限发生变更；
    所述核心网网元接收所述目标终端根据所述核心网网元的通知发送的第一请求消息，并向所述目标终端发送第一响应消息，所述第一响应消息携带所述目标终端变更后的定位服务权限信息。
  20. 如权利要求19所述的方法，其特征在于，所述核心网网元通知所述目标终端定位服务权限发生变更，包括：
    所述核心网网元指示所述目标终端的服务基站发送系统广播消息，所述系统广播消息携带所述目标终端的标识以及定位服务权限变更指示信息；或者，
    所述核心网网元指示所述目标终端的服务基站发送寻呼消息，所述寻呼消息携带所述目标终端的标识以及定位服务权限变更指示信息；
    其中，所述定位服务权限变更指示信息用于指示所述目标终端的定位服务权限发生变更。
  21. 如权利要求19所述的方法，其特征在于，所述第一请求消息为附着请求消息，所述第一响应消息为附着接受消息；或者，
    所述第一请求消息为跟踪区更新请求消息，所述第一响应消息为跟踪区更新接受消息。
  22. 如权利要求19-21中任一项所述的方法，其特征在于，所述目标终端变更后的定位服务权限信息包括：与所述目标终端变更后的定位服务权限对应的一个或多个密钥，所述一个或多个密钥用于解密广播的网络辅助数据。
  23. 如权利要求19-21中任一项所述的方法，其特征在于，所述核心网网元为MME，所述定位服务器为E-SMLC；或者，
    所述核心网网元为AMF，所述定位服务器为LMF。
  24. 一种定位服务权限更新方法，其特征在于，包括：
    核心网网元接收来自定位服务器的定位服务权限变更消息，所述定位服务权限变更消息携带目标终端变更后的定位服务权限信息以及与所述目标终端变更后的定位服务权限对应的密钥，所述定位服务权限变更消息用于指示所述核心网网元保存所述目标终端变更后的定位服务权限以及与所述目标终端变更后的定位服务权限对应的密钥；
    所述核心网网元向所述目标终端发送定位服务权限配置消息，所述定位服务权限配置消息携带所述目标终端变更后的定位服务权限信息。
  25. 如权利要求24所述的方法，其特征在于，所述目标终端变更后的定位服务权限信息包括：与所述目标终端变更后的定位服务权限对应的一个或多个密钥，所述一个或多个密钥用于解密广播的网络辅助数据。
  26. 如权利要求24或25所述的方法，其特征在于，所述核心网网元为AMF，所述定位服务器为LMF。
  27. 一种定位服务权限更新方法，其特征在于，包括：
    核心网网元接收来自目标终端的第一请求消息；
    所述核心网网元向用户签约信息服务器发送定位服务权限变更指示消息，所述定位服务权限变更指示消息用于请求获取所述目标终端变更后的定位服务权限信息；
    所述核心网网元接收所述用户签约信息服务器发送的定位服务权限变更确认消息，所述定位服务权限变更确认消息携带所述目标终端变更后的定位服务权限以及与所述目标终端变更后的定位服务权限对应的密钥，所述定位服务权限变更确认消息用于指示所述核心网网元保存所述目标终端变更后的定位服务权限以及与所述目标终端变更后的定位服务权限对应的密钥；
    所述核心网网元向所述目标终端发送第一响应消息，所述第一响应消息携带所述目标终端变更后的定位服务权限对应的密钥。
  28. 如权利要求27所述的方法，其特征在于，所述定位服务权限变更确认消息是所述用户签约信息服务器根据接收的所述定位服务权限变更指示消息从业务实体获取到所述目标终端变更后的定位服务权限信息后发送的。
  29. 如权利要求27所述的方法，其特征在于，所述目标终端变更后的定位服务权限信息包括：与所述目标终端变更后的定位服务权限对应的一个或多个密钥，所述一个或多个密钥用于解密广播的网络辅助数据。
  30. 如权利要求27-29中任一项所述的方法，其特征在于，所述核心网网元为AMF，所述定位服务器为LMF，所述用户签约信息服务器为UDM；或者，
    所述核心网网元为MME，所述定位服务器为E-SMLC，所述用户签约信息服务器为HSS。
  31. 一种定位服务系统，其特征在于，包括：
    定位服务器，用于接收第一定位服务权限变更消息，所述第一定位服务权限变更消息用于请求变更目标终端的定位服务权限；
    核心网网元，用于接收所述定位服务器发送的第二定位服务权限变更消 息，所述第二定位服务权限变更消息携带所述目标终端变更后的定位服务权限信息；
    所述定位服务器还用于向所述核心网网元发送第二定位服务权限变更消息。
  32. 如权利要求31所述的定位服务系统，其特征在于，还包括：
    用户签约信息服务器，用于接收所述定位服务器发送的定位服务权限变更指示消息，所述定位服务权限变更指示消息用于指示所述用户签约信息服务器确定所述目标终端变更后的定位服务权限；
    所述用户签约信息服务器还用于向所述定位服务器发送定位服务权限变更确认消息，所述定位服务权限变更确认消息携带所述目标终端变更后的定位服务权限信息。
  33. 如权利要求31所述的定位服务系统，其特征在于，还包括：
    业务实体，用于接收所述定位服务器权限变更指示消息，所述定位服务权限变更指示消息用于指示所述业务实体确定所述目标终端变更后的定位服务权限，并产生与所述目标终端变更后的定位服务权限对应的密钥；
    所述业务实体还用于，向定位服务器发送定位服务权限变更响应消息，所述定位服务权限变更响应消息用于指示所述定位服务器保存所述目标终端变更后的定位服务权限信息以及与所述目标终端变更后的定位服务权限对应的密钥。
  34. 如权利要求31所述的定位服务系统，其特征在于，所述定位服务器，还用于：
    接收来自于用户签约信息服务器的携带有所述目标终端变更后的定位服务权限信息的第一定位服务权限变更消息，所述第一定位服务权限变更消息是所述用户签约服务器根据来自于所述核心网网元的定位服务权限变更指示消息对所述目标终端的定位服务权限变更后发送的，所述定位服务权限变更指示消息是所述核心网网元接收来自于所述目标终端的附着请求消息或跟踪区更新请求消息后发送的，所述附着请求消息或跟踪区更新请求消息携带定 位服务权限变更指示信息，所述定位服务权限变更指示信息用于指示变更所述目标终端的定位服务权限。
  35. 如权利要求31所述的定位服务系统，其特征在于，所述核心网网元，还用于：
    接收来自于定位服务器的定位服务权限变更消息，所述定位服务变更消息携带目标终端变更后的定位服务权限信息；
    通知所述目标终端定位服务权限发生变更；
    接收所述目标终端根据所述核心网网元的通知发送的第一请求消息，并向所述目标终端发送第一响应消息，所述第一响应消息携带所述目标终端变更后的定位服务权限信息。
  36. 如权利要求31所述的定位服务系统，其特征在于，所述核心网网元，还用于：
    接收来自目标终端的第一请求消息；
    向用户签约信息服务器发送定位服务权限变更指示消息，所述定位服务权限变更指示消息用于请求获取所述目标终端变更后的定位服务权限信息；
    接收所述用户签约信息服务器发送的定位服务权限变更确认消息，所述定位服务权限变更确认消息携带所述目标终端变更后的定位服务权限以及与所述目标终端变更后的定位服务权限对应的密钥，所述定位服务权限变更确认消息用于指示所述核心网网元保存所述目标终端变更后的定位服务权限以及与所述目标终端变更后的定位服务权限对应的密钥；
    向所述目标终端发送第一响应消息，所述第一响应消息携带所述目标终端变更后的定位服务权限对应的密钥。
  37. 权利要求31-36所述的定位服务系统，其特征在于，所述定位服务器为LMF，所述核心网网元为AMF或UDM；或者
    所述定位服务器为E-SMLC，所述核心网网元为MME或HSS。
  38. 一种通信装置，其特征在于，包括：处理器、存储器和收发机；所述收发机用于在所述处理器的控制下接收或发送信息；所述处理器，用于读 取所述存储器中的计算机指令，执行如下步骤：
    接收第一定位服务权限变更消息，所述第一定位服务权限变更消息用于请求变更目标终端的定位服务权限；
    向核心网网元发送第二定位服务权限变更消息，所述第二定位服务权限变更消息携带所述目标终端变更后的定位服务权限信息。
  39. 如权利要求38所述的通信装置，其特征在于，接收第一定位服务权限变更消息之后，所述处理器，还用于读取所述存储器中的计算机指令，执行如下步骤：
    向用户签约信息服务器发送定位服务权限变更指示消息，所述定位服务权限变更指示消息用于指示所述用户签约信息服务器确定所述目标终端变更后的定位服务权限；
    接收所述用户签约信息服务器发送的定位服务权限变更确认消息，所述定位服务权限变更确认消息携带所述目标终端变更后的定位服务权限信息。
  40. 如权利要求38所述的通信装置，其特征在于，接收第一定位服务权限变更消息之后，所述处理器，还用于读取所述存储器中的计算机指令，执行如下步骤：
    根据所述第一定位服务权限变更消息，确定所述目标终端变更后的定位服务权限信息，并产生所述目标终端变更后的定位服务权限对应的密钥。
  41. 如权利要求39或40所述的通信装置，其特征在于，接收第一定位服务权限变更消息时，所述处理器，还用于读取所述存储器中的计算机指令，执行如下步骤：
    接收所述目标终端通过应用层发送的第一定位服务权限变更消息；
    向核心网网元发送第二定位服务权限变更消息，包括：
    向所述核心网网元发送定位服务权限变更消息，所述定位服务权限变更消息用于指示所述核心网网元保存所述目标终端变更后的定位服务权限信息以及所述目标终端变更后的定位服务权限对应的密钥。
  42. 如权利要求38所述的通信装置，其特征在于，接收第一定位服务权 限变更消息，所述处理器，还用于读取所述存储器中的计算机指令，执行如下步骤：
    接收来自于所述核心网网元的第一定位服务权限变更消息，所述第一定位服务权限变更消息是所述核心网网元接收所述目标终端的附着请求消息或跟踪区更新请求消息后发送的，所述附着请求消息或跟踪区更新请求消息携带定位服务权限变更指示信息，所述定位服务权限变更指示信息用于指示变更所述目标终端的定位服务权限；
    向核心网网元发送第二定位服务权限变更消息，包括：
    向所述核心网网元发送第二定位服务权限变更消息，所述第二定位服务权限变更消息用于指示所述核心网网元保存所述目标终端变更后的定位服务权限信息以及所述目标终端变更后的定位服务权限对应的密钥。
  43. 如权利要求42所述的通信装置，其特征在于，接收第一定位服务权限变更消息之后，所述处理器，还用于读取所述存储器中的计算机指令，执行如下步骤：
    验证所述第一定位服务权限变更消息的完整性，若验证通过，且允许用户进行定位服务权限变更，则确定所述目标终端变更后的定位服务权限，并产生与所述目标终端变更后的定位服务权限对应的密钥。
  44. 如权利要求42所述的通信装置，其特征在于，所述第一定位服务权限变更消息是所述核心网网元判断需要为所述目标终端生成新的密钥后发送的；
    接收第一定位服务权限变更消息之后，所述处理器，还用于读取所述存储器中的计算机指令，执行如下步骤：
    根据所述第一定位服务权限变更消息，为所述目标终端生成与所述目标终端变更后的定位服务权限对应的密钥，所述密钥用于解密广播的网络辅助数据；
    向所述核心网网元发送的所述第二定位服务权限变更消息用于指示所述核心网网元保存所述目标终端变更后的定位服务权限信息以及所述目标终端 变更后的定位服务权限对应的密钥。
  45. 如权利要求42所述的通信装置，其特征在于，接收第一定位服务权限变更消息之后，所述处理器，还用于读取所述存储器中的计算机指令，执行如下步骤：
    向业务实体发送定位服务权限变更指示消息，所述定位服务权限变更指示消息用于指示所述业务实体确定所述目标终端变更后的定位服务权限，并产生与所述目标终端变更后的定位服务权限对应的密钥；
    接收所述业务实体发送的定位服务权限变更响应消息，所述定位服务权限变更响应消息用于指示所述定位服务器保存所述目标终端变更后的定位服务权限信息以及所述目标终端变更后的定位服务权限对应的密钥。
  46. 如权利要求38所述的通信装置，其特征在于，接收第一定位服务权限变更消息时，所述处理器，还用于读取所述存储器中的计算机指令，执行如下步骤：
    接收来自于用户签约信息服务器的携带有所述目标终端变更后的定位服务权限信息的第一定位服务权限变更消息，所述第一定位服务权限变更消息是所述用户签约服务器根据来自于所述核心网网元的定位服务权限变更指示消息对所述目标终端的定位服务权限变更后发送的，所述定位服务权限变更指示消息是所述核心网网元接收来自于所述目标终端的附着请求消息或跟踪区更新请求消息后发送的，所述附着请求消息或跟踪区更新请求消息携带定位服务权限变更指示信息，所述定位服务权限变更指示信息用于指示变更所述目标终端的定位服务权限。
  47. 如权利要求39所述的通信装置，其特征在于，接收第一定位服务权限变更消息之后，所述处理器，还用于读取所述存储器中的计算机指令，执行如下步骤：
    向所述业务实体发送第一定位服务权限变更消息，所述第一定位服务权限变更消息携带有所述目标终端变更后的定位服务权限信息，所述第一定位服务权限变更消息用于指示所述业务实体产生与所述目标终端变更后的定位 服务权限对应的密钥；
    接收所述业务实体发送的第一定位服务权限变更响应消息，所述第一定位服务权限变更响应消息用于指示所述定位服务器保存所述目标终端变更后的定位服务权限对应的密钥。
  48. 如权利要求38所述的通信装置，其特征在于，接收第一定位服务权限变更消息，所述处理器，还用于读取所述存储器中的计算机指令，执行如下步骤：
    接收来自业务实体的第一定位服务权限变更消息，所述第一定位服务权限变更消息是所述业务实体接收所述目标终端通过应用层发送的定位服务权限变更指示消息并对所述目标终端进行定位服务权限变更后发送的，所述第一定位服务权限变更消息用于指示所述定位服务器保存所述目标终端变更后的定位服务权限，并产生与所述目标终端变更后的定位服务权限对应的密钥；
    向用户签约信息服务器发送第二定位服务权限变更消息，所述第二定位服务权限变更消息携带所述目标终端变更后的定位服务权限信息，所述第二定位服务权限变更消息用于指示所述用户签约信息服务器保存所述目标终端变更后的定位服务权限。
  49. 如权利要求48所述的通信装置，其特征在于，向用户签约信息服务器发送第二定位服务权限变更消息之后，所述处理器，还用于读取所述存储器中的计算机指令，执行如下步骤：
    接收所述用户签约信息服务器发送的定位服务权限变更确认消息，所述定位服务权限变更确认消息用于指示所述用户签约信息服务器已保存所述目标终端变更后的定位服务权限以及与所述目标终端变更后的定位服务权限对应的密钥。
  50. 如权利要求41、42或44所述的通信装置，其特征在于，所述核心网网元包括AMF或MME。
  51. 如权利要求39、46或48所述的通信装置，其特征在于，所述用户签约信息服务器包括UDM或HSS。
  52. 如权利要求38-47中任一项所述的通信装置，其特征在于，所述目标终端变更后的定位服务权限信息包括：与所述目标终端变更后的定位服务权限对应的一个或多个密钥，所述一个或多个密钥用于解密广播的网络辅助数据。
  53. 如权利要求52所述的通信装置，其特征在于，所述目标终端变更后的定位服务权限信息，还包括：
    有效期；
    使用的跟踪区指示信息；
    密钥类型指示信息。
  54. 如权利要求38-49中任一项所述的通信装置，其特征在于，所述第一定位服务权限变更消息携带以下信息中的一种或多种：
    变更指示信息，用于指示定位服务权限发生变更；
    变更原因指示信息，用于指示定位服务权限变更的原因；
    变更时限信息，用于指示临时变更或永久变更，所述变更时限信息指示临时变更时还包括临时变更的有效期；
    服务类型指示信息，用于指示目标终端定位服务权限变更申请为临时申请或永久申请。
  55. 如权利要求38-49中任一项所述的通信装置，其特征在于，所述通信装置为LMF，所述核心网网元为AMF或UDM；或者所述通信装置为E-SMLC，所述核心网网元为MME或HSS。
  56. 一种通信装置，其特征在于，包括：处理器、存储器和收发机；所述收发机用于在所述处理器的控制下接收或发送信息；所述处理器，用于读取所述存储器中的计算机指令，执行如下步骤：
    接收来自于定位服务器的定位服务权限变更消息，所述定位服务变更消息携带目标终端变更后的定位服务权限信息；
    通知所述目标终端定位服务权限发生变更；
    接收所述目标终端根据所述核心网网元的通知发送的第一请求消息，并 向所述目标终端发送第一响应消息，所述第一响应消息携带所述目标终端变更后的定位服务权限信息。
  57. 如权利要求56所述的通信装置，其特征在于，通知所述目标终端定位服务权限发生变更时，所述处理器，用于读取所述存储器中的计算机指令，执行如下步骤：
    指示所述目标终端的服务基站发送系统广播消息，所述系统广播消息携带所述目标终端的标识以及定位服务权限变更指示信息；或者，
    指示所述目标终端的服务基站发送寻呼消息，所述寻呼消息携带所述目标终端的标识以及定位服务权限变更指示信息；
    其中，所述定位服务权限变更指示信息用于指示所述目标终端的定位服务权限发生变更。
  58. 如权利要求56所述的通信装置，其特征在于，所述第一请求消息为附着请求消息，所述第一响应消息为附着接受消息；或者，
    所述第一请求消息为跟踪区更新请求消息，所述第一响应消息为跟踪区更新接受消息。
  59. 如权利要求56-58中任一项所述的通信装置，其特征在于，所述目标终端变更后的定位服务权限信息包括：与所述目标终端变更后的定位服务权限对应的一个或多个密钥，所述一个或多个密钥用于解密广播的网络辅助数据。
  60. 如权利要求56-58中任一项所述的通信装置，其特征在于，所述通信装置为MME，所述定位服务器为E-SMLC；或者，
    所述通信装置为AMF，所述定位服务器为LMF。
  61. 一种通信装置，其特征在于，包括：处理器、存储器和收发机；所述收发机用于在所述处理器的控制下接收或发送信息；所述处理器，用于读取所述存储器中的计算机指令，执行如下步骤：
    接收来自定位服务器的定位服务权限变更消息，所述定位服务权限变更消息携带目标终端变更后的定位服务权限信息以及与所述目标终端变更后的 定位服务权限对应的密钥，所述定位服务权限变更消息用于指示所述核心网网元保存所述目标终端变更后的定位服务权限以及与所述目标终端变更后的定位服务权限对应的密钥；
    向所述目标终端发送定位服务权限配置消息，所述定位服务权限配置消息携带所述目标终端变更后的定位服务权限信息。
  62. 如权利要求61所述的通信装置，其特征在于，所述目标终端变更后的定位服务权限信息包括：与所述目标终端变更后的定位服务权限对应的一个或多个密钥，所述一个或多个密钥用于解密广播的网络辅助数据。
  63. 如权利要求61或62所述的通信装置，其特征在于，所述通信装置为AMF，所述定位服务器为LMF。
  64. 一种通信装置，其特征在于，包括：处理器、存储器和收发机；所述收发机用于在所述处理器的控制下接收或发送信息；所述处理器，用于读取所述存储器中的计算机指令，执行如下步骤：
    接收来自目标终端的第一请求消息；
    向用户签约信息服务器发送定位服务权限变更指示消息，所述定位服务权限变更指示消息用于请求获取所述目标终端变更后的定位服务权限信息；
    接收所述用户签约信息服务器发送的定位服务权限变更确认消息，所述定位服务权限变更确认消息携带所述目标终端变更后的定位服务权限以及与所述目标终端变更后的定位服务权限对应的密钥，所述定位服务权限变更确认消息用于指示所述核心网网元保存所述目标终端变更后的定位服务权限以及与所述目标终端变更后的定位服务权限对应的密钥；
    向所述目标终端发送第一响应消息，所述第一响应消息携带所述目标终端变更后的定位服务权限对应的密钥。
  65. 如权利要求64所述的通信装置，其特征在于，所述定位服务权限变更确认消息是所述用户签约信息服务器根据接收的所述定位服务权限变更指示消息从业务实体获取到所述目标终端变更后的定位服务权限信息后发送的。
  66. 如权利要求64所述的通信装置，其特征在于，所述目标终端变更后 的定位服务权限信息包括：与所述目标终端变更后的定位服务权限对应的一个或多个密钥，所述一个或多个密钥用于解密广播的网络辅助数据。
  67. 如权利要求64-66中任一项所述的通信装置，其特征在于，所述通信装置为AMF，所述定位服务器为LMF，所述用户签约信息服务器为UDM；或者，
    所述通信装置为MME，所述定位服务器为E-SMLC，所述用户签约信息服务器为HSS。
  68. 一种计算机可读存储介质，其特征在于，所述计算机可读存储介质存储有计算机可执行指令，所述计算机可执行指令用于使所述计算机执行如权利要求1至18中任一项所述的方法。
  69. 一种计算机可读存储介质，其特征在于，所述计算机可读存储介质存储有计算机可执行指令，所述计算机可执行指令用于使所述计算机执行如权利要求19至23中任一项所述的方法。
  70. 一种计算机可读存储介质，其特征在于，所述计算机可读存储介质存储有计算机可执行指令，所述计算机可执行指令用于使所述计算机执行如权利要求24至26中任一项所述的方法。
  71. 一种计算机可读存储介质，其特征在于，所述计算机可读存储介质存储有计算机可执行指令，所述计算机可执行指令用于使所述计算机执行如权利要求27至30中任一项所述的方法。
PCT/CN2019/108271 2018-10-10 2019-09-26 一种定位服务权限变更方法、装置及系统 Ceased WO2020073817A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201811178620.9 2018-10-10
CN201811178620.9A CN111107483B (zh) 2018-10-10 2018-10-10 一种定位服务权限变更方法、装置及系统

Publications (1)

Publication Number Publication Date
WO2020073817A1 true WO2020073817A1 (zh) 2020-04-16

Family

ID=70164478

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2019/108271 Ceased WO2020073817A1 (zh) 2018-10-10 2019-09-26 一种定位服务权限变更方法、装置及系统

Country Status (2)

Country Link
CN (1) CN111107483B (zh)
WO (1) WO2020073817A1 (zh)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN115604656B (zh) * 2022-09-30 2023-12-01 东土科技(宜昌)有限公司 一种基于场景绑定的标签定位方法、系统、电子设备
WO2024093935A1 (zh) * 2022-11-04 2024-05-10 华为技术有限公司 一种校验隐私配置的方法及相关设备
GB2632811A (en) * 2023-08-21 2025-02-26 Nokia Technologies Oy Apparatus, method, and computer programs relating to event monitoring

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111726800A (zh) * 2019-03-04 2020-09-29 华为技术有限公司 用于保护辅助信息的方法和装置
CN113422757B (zh) * 2021-06-04 2023-04-07 广西电网有限责任公司 一种基于加密应用的文档管理系统

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20130160140A1 (en) * 2011-03-11 2013-06-20 Huawei Technologies Co., Ltd. Machine-to-machine communications privacy protection method and system, machine-to-machine communications service management entity, and related device
CN103297255A (zh) * 2012-02-24 2013-09-11 广州中海达定位技术有限公司 一种gnss位置服务方法及系统
WO2013178153A1 (zh) * 2012-08-13 2013-12-05 中兴通讯股份有限公司 一种网络侧设备、定位服务器、移动终端和定位方法
CN105471641A (zh) * 2015-11-23 2016-04-06 东莞市金铭电子有限公司 一种信息管理方法及相关设备
CN105553963A (zh) * 2015-12-10 2016-05-04 小米科技有限责任公司 定位服务的控制方法和装置

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8982369B2 (en) * 2012-09-25 2015-03-17 Xerox Corporation Methods, systems and processor-readable media for automatically detecting device movement in a managed service environment

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20130160140A1 (en) * 2011-03-11 2013-06-20 Huawei Technologies Co., Ltd. Machine-to-machine communications privacy protection method and system, machine-to-machine communications service management entity, and related device
CN103297255A (zh) * 2012-02-24 2013-09-11 广州中海达定位技术有限公司 一种gnss位置服务方法及系统
WO2013178153A1 (zh) * 2012-08-13 2013-12-05 中兴通讯股份有限公司 一种网络侧设备、定位服务器、移动终端和定位方法
CN105471641A (zh) * 2015-11-23 2016-04-06 东莞市金铭电子有限公司 一种信息管理方法及相关设备
CN105553963A (zh) * 2015-12-10 2016-05-04 小米科技有限责任公司 定位服务的控制方法和装置

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN115604656B (zh) * 2022-09-30 2023-12-01 东土科技(宜昌)有限公司 一种基于场景绑定的标签定位方法、系统、电子设备
WO2024093935A1 (zh) * 2022-11-04 2024-05-10 华为技术有限公司 一种校验隐私配置的方法及相关设备
GB2632811A (en) * 2023-08-21 2025-02-26 Nokia Technologies Oy Apparatus, method, and computer programs relating to event monitoring

Also Published As

Publication number Publication date
CN111107483A (zh) 2020-05-05
CN111107483B (zh) 2021-03-09

Similar Documents

Publication Publication Date Title
CN111107483B (zh) 一种定位服务权限变更方法、装置及系统
EP3668042B1 (en) Registration method and apparatus based on service-oriented architecture
CN108966220B (zh) 一种密钥推演的方法及网络设备
CA3070876C (en) Subscription concealed identifier
EP3627794B1 (en) Discovery method and apparatus based on service-oriented architecture
CN114208111B (zh) 一种通信方法、装置及系统
US9402177B2 (en) Authentication in secure user plane location (SUPL) systems
JP2023513501A (ja) 鍵取得方法および装置
Choudhury et al. Enhancing user identity privacy in LTE
US20100205435A1 (en) Method for implementing location based services, method for broadcasting geographic location information of base station, and device thereof
CN113163402A (zh) 一种通信方法、装置及系统
WO2019214351A1 (zh) 消息处理方法及装置
KR20140068125A (ko) 위치확인 어시스턴스 데이터의 일반 브로드캐스트
EP3934298B1 (en) Method for updating authentication result and communication apparatus
JP2000078667A (ja) 移動通信システムにおいてサ―ビスを管理する方法及び装置
CN111031475B (zh) 采集终端位置信息的方法、终端、位置采集端及存储介质
EP3703317B1 (en) Method and device for accessing local network
CN114301788B (zh) 一种切片管理方法、装置及通信设备
WO2020151581A1 (zh) 生成密钥的方法和装置
EP4294065A1 (en) Application key delivery in a roaming situation
CN111031486B (zh) 一种定位服务密钥分发方法及其装置
WO2010028603A1 (zh) 更新跟踪区时的密钥生成方法及系统
JP7820559B2 (ja) アプリケーション機能のアクティビティの合法的な傍受
EP4369759B1 (en) Data transmission protection method, device and system
CN110881020B (zh) 一种用户签约数据的鉴权方法及数据管理网元

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 19870810

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 19870810

Country of ref document: EP

Kind code of ref document: A1