WO2022237733A1 - Group paging method and apparatus - Google Patents

Abstract

The present application provides a group paging method and apparatus. The group paging method comprises: a terminal device sends a group paging message to a network device, the group paging message comprising a first group identifier; and the terminal device sends a service request message to the network device. Further, the terminal device receives second indication information from the network device, and the terminal device determines, according to the second indication information, whether there is an abnormality; and when the terminal device determines that there is an abnormality, the terminal device does not respond to a paging message carrying an identifier of the first multicast session. The group paging method in embodiments of the present application can identify illegal group paging, so as to solve the problem of resource waste caused by an attacker by means of the illegal group paging.

Description

Method and device for group paging

This application claims the priority of the Chinese patent application with the application number 202110506732.8 and the application name "Group Paging Method and Device" submitted to the China Patent Office on May 10, 2021, the entire contents of which are incorporated by reference in this application .

technical field

The present application relates to the communication field, and more specifically, relates to a group paging method and device.

Background technique

When the UE is in an idle state, the network side can trigger the UE to initiate a service request and establish a multicast session through group paging. Wherein, the group paging message carries the multicast session identifier. However, when the multicast session ID of a multicast session is leaked, an attacker can use the multicast session ID to attack. For example, when the multicast session identifier remains unchanged, a large number of UEs can be attracted to request services through group paging messages, resulting in the consumption of UE resources and the occupation of base station resources. In severe cases, it can cause denial of service attacks on UEs and base stations.

Therefore, it is desirable to provide a technology that can improve the security of the group paging process.

Contents of the invention

The group paging method and device of the embodiments of the present application can improve the security of the group paging process.

In a first aspect, a method for group paging is provided, the method includes: a terminal device receives a group paging message, where the group paging message includes a first group identifier; the terminal device sends a service request message to a network device; The terminal device receives second indication information from the network device; the terminal device determines that an abnormality exists according to the second indication information.

Exemplarily, the first group identifier is used to identify the first group. After the terminal device receives the group paging message carrying the first group identifier, if the terminal device belongs to the first group, the terminal device sends the network device Send a service request message. The service request message may be used to request to join the first group, or to request to receive the content of the first group. Optionally, the service request message carries first indication information, where the first indication information is used to indicate that the terminal device has received the paging message carrying the first group identifier.

It should be understood that the message that the terminal device sends the first indication information to the network device is protected by confidentiality and integrity, and an attacker cannot tamper with it, so the accuracy of the message can be guaranteed. Similarly, the second indication information sent by the network device to the terminal device is also protected with confidentiality and integrity.

The first indication information reflects the reason why the UE initiates the service request message and/or the received paging message, which helps the network device to judge whether there is an abnormality, so that the network device can handle the abnormality in time, and improve the efficiency of group paging. process security.

Optionally, the second indication information is used to indicate at least one of the following: the network device has not used the first group identifier to trigger group paging; the list of group identifiers activated by the network device, in the list There is no identifier of the first group; the terminal device is abnormal; the terminal device does not respond to the group paging message carrying the identifier of the first multicast session; the first group has not been activated.

It should be understood that, in a certain possible implementation scenario, the first group may be, for example, a multicast group, and the first group identifier may be, for example, a multicast session identifier (MBS session ID) corresponding to the multicast group, The group activation process can be regarded as a multicast session activation process. The description here is only for illustration and does not have any limiting effect.

With reference to the first aspect, in some implementation manners of the first aspect, the method further includes: when the terminal device determines that there is an abnormality, the terminal device does not respond to the paging message carrying the first group identifier.

It should be understood that the abnormality here may be that the terminal device is attacked by a fake base station. That is, the group paging message received by the terminal device may be forged by a fake base station. Alternatively, the abnormality here may be that the terminal device requests to join the first group, but the first group has not been activated.

Or, in another possible implementation solution, the terminal device sends first indication information to the network device, where the first indication information is used to indicate that the terminal device has received a paging message carrying the first group identifier; the terminal device Receive second indication information from the network device, where the second indication information is used to indicate at least one of the following: the network device has not used the first group identifier to trigger group paging; the group activated by the network device The first group identifier is not included in the list; the terminal device is abnormal; the terminal device does not respond to the group paging message carrying the first group identifier; the first group has not been activated; the The terminal device determines not to respond to the paging message carrying the first group identifier according to the second indication information, or the terminal device determines only to respond to a common paging message according to the second indication information. That is, in this implementation manner, after receiving the second indication information, the terminal device directly determines not to respond to the group paging message carrying the first group identifier, without determining that there is an abnormal action.

It should be understood that the terminal device determines that there is an abnormality here, and it can also be expressed as the terminal device determines that it is attacked by an attacker, or the terminal device determines that there is an attacker, or the terminal device determines that the received paging message carrying the first group identifier is forged wait. This application is not limited.

With reference to the first aspect, in some implementation manners of the first aspect, when the terminal device is abnormal, the terminal device does not respond to the paging message carrying the first group identifier, including: the terminal device is in The first time period does not respond to the paging message carrying the first group identifier.

With reference to the first aspect, in some implementations of the first aspect, the method further includes: the terminal device determines the first time period according to preconfigured information; or, the terminal device receives the first time period from the network device Information.

The first period of time may be, for example, a potential session activation time. Through the method provided by the embodiment of this application, in the case of an abnormality, the terminal device can be prevented from responding to the paging message carrying the first group identifier for a period of time, which can avoid the attacker's attack and reduce the number of terminal devices. The time when the multicast service is affected by the attacker's attack.

With reference to the first aspect, in some implementation manners of the first aspect, the first group identifier is a temporary mobile group identifier.

With reference to the first aspect, in some implementation manners of the first aspect, before the terminal device sends the first indication information to the network device, the method further includes: the terminal device receives a group paging message, and the group paging message includes The first group identifier.

After the terminal device receives the group paging message carrying the first group identifier, if it belongs to the group corresponding to the first group identifier, the terminal device sends a service request message to the network device. With reference to the first aspect, in some implementation manners of the first aspect, the first indication information is carried in a service request message.

Therefore, the group paging method provided by the embodiment of the present application determines whether the terminal device is abnormal (or determines whether the terminal device is affected by attack), in the case of an abnormal situation, the terminal device does not respond, or does not respond to the group paging message carrying the corresponding group ID for a period of time, so as to avoid the problem of resource waste caused by attackers frequently launching illegal group paging, At the same time, the security of the group paging process is improved.

In a second aspect, a group paging method is provided. The method includes: a network device receiving a service request message from a terminal device; and the network device judging whether the terminal device is abnormal.

Optionally, the service request message includes first indication information, and the first indication information is used to indicate that the terminal device has received a paging message carrying the first group identifier; the network device determines whether the terminal device is abnormal, including the The network device judges whether the terminal device is abnormal according to the first indication information.

With reference to the second aspect, in some implementation manners of the second aspect, the method further includes: when the terminal device is abnormal, the network device sends second indication information to the terminal device, and the second indication information uses In order to indicate that the terminal device is abnormal.

With reference to the second aspect, in some implementations of the second aspect, when the terminal device is abnormal, the method further includes: the network device updating the context of the terminal device, where the context indicates that the network device needs to activate the For the first group, perform ordinary paging on the terminal equipment.

It should be noted that the normal paging here means that the network device performs one-to-one paging of the terminal device by using the identifier of the terminal device.

With reference to the second aspect, in some implementations of the second aspect, when the terminal device is abnormal, the method further includes: the network device receives a first request message, and the first request message includes the first group Group identifier, the first request message is used to request activation of the first group; the network device determines to perform general paging on the terminal device according to the context of the terminal device; the network device sends a paging message to the terminal device , the paging message includes the identifier of the terminal device, and the terminal device belongs to the group corresponding to the first group identifier.

With reference to the second aspect, in some implementation manners of the second aspect, the network device judges whether the terminal device is abnormal according to the first indication information, including: when the network device has not triggered an event carrying the first group identifier When paging a message, the network device determines that the terminal device is abnormal; or, when the identifier carried in the paging message sent by the network device to the terminal device is different from the first group identifier, the network device determines that the terminal device The device is abnormal.

With reference to the second aspect, in some implementations of the second aspect, the second indication information is used to indicate at least one of the following: the network device has not used the first group identifier to trigger group paging; the network A list of group identifiers activated by the device; the terminal device does not respond to a group paging message carrying the first group identifier; the first group has not been activated yet.

With reference to the second aspect, in some implementations of the second aspect, when the terminal device is abnormal, the method further includes: the network device sends information of a first time period to the terminal device, and the first time period The segment information is used to indicate that the terminal device does not respond to the group paging message carrying the first group identifier within the first time period.

With reference to the second aspect, in some implementation manners of the second aspect, the first indication information is carried in a service request message.

With reference to the second aspect, in some implementation manners of the second aspect, the first group identifier is a temporary mobile group identifier.

With reference to the second aspect, in some implementation manners of the second aspect, the identifier of the terminal device includes a globally unique temporary user equipment identifier (GUTI) of the terminal device.

In a third aspect, a device for group paging is provided, which includes: a transceiver module, configured to send first indication information to a network device, where the first indication information is used to indicate that the terminal device receives The identified paging message; the transceiving module is further configured to receive second indication information from the network device; and the processing module is configured to determine that there is an abnormality according to the second indication information.

With reference to the third aspect, in some implementations of the third aspect, the processing module is further configured to: not respond to the paging message carrying the first group identifier when it is determined that there is an abnormality.

With reference to the third aspect, in some implementations of the third aspect, the second indication information is used to indicate at least one of the following: the network device has not used the first group identifier to trigger group paging; the network A list of group IDs activated by the device, and the first group ID does not exist in the list; the terminal device is abnormal; the terminal device does not respond to the group paging message carrying the first group ID; the first group also inactivated.

With reference to the third aspect, in some implementation manners of the third aspect, the processing module is specifically configured to: the terminal device does not respond to the paging message carrying the first group identifier within a first period of time.

With reference to the third aspect, the processing module is further configured to: determine the first time period according to preconfigured information; or, the transceiving module is further configured to receive information of the first time period from the network device.

With reference to the third aspect, in some implementation manners of the third aspect, the first group identifier is a temporary mobile group identifier.

With reference to the third aspect, in some implementation manners of the third aspect, the transceiving module is further configured to: receive a group paging message, where the group paging message includes the first group identifier.

With reference to the third aspect, in some implementation manners of the third aspect, the first indication information is carried in a service request message.

In a fourth aspect, a method for group paging is provided, the method comprising: a terminal device receives a group paging message, where the group paging message includes a first group identifier; the terminal device sends a service request message to a network device; the The end device determines whether an anomaly exists.

With reference to the fourth aspect, in some implementation manners of the fourth aspect, the method further includes: the terminal device receiving second indication information from the network device; and the terminal device determining that an abnormality exists according to the second indication information.

With reference to the fourth aspect, in some implementations of the fourth aspect, the second indication information is used to indicate at least one of the following: the network device has not used the first group identifier to trigger group paging; the network A list of group IDs activated by the device, and the first group ID does not exist in the list; the terminal device is abnormal; the terminal device does not respond to the group paging message carrying the first group ID; the first group also inactivated.

With reference to the fourth aspect, in some implementation manners of the fourth aspect, the method further includes: when the terminal device determines that there is an abnormality, the terminal device does not respond to the paging message carrying the first group identifier.

With reference to the fourth aspect, in some implementation manners of the fourth aspect, when the terminal device is abnormal, the terminal device does not respond to the paging message carrying the first group identifier, including: the terminal device is in The first time period does not respond to the paging message carrying the first group identifier.

With reference to the fourth aspect, in some implementations of the fourth aspect, the method further includes: the terminal device determines the first time period according to preconfigured information; or, the terminal device receives the first time period from the network device Information.

Therefore, the group paging method provided by the embodiment of the present application determines whether the terminal device is abnormal (or determines whether the terminal device is affected by attack), in the case of an abnormal situation, the terminal device does not respond, or does not respond to the group paging message carrying the corresponding group ID for a period of time, so as to avoid the problem of resource waste caused by attackers frequently launching illegal group paging, At the same time, the security of the group paging process is improved.

According to a fifth aspect, a group paging device is provided, the device includes: a transceiver module, configured to receive first indication information from a terminal device, where the first indication information is used to indicate that the terminal device receives a group paging message carrying the first group A paging message with a group identifier; a processing module, configured to judge whether the terminal device is abnormal according to the first indication information.

With reference to the fifth aspect, in some implementations of the fifth aspect, when the terminal device is abnormal, the transceiver module is further configured to send second indication information to the terminal device, where the second indication information is used to indicate There is an exception in this terminal device.

With reference to the fifth aspect, in some implementations of the fifth aspect, when the terminal device is abnormal, the processing module is further configured to update the context of the terminal device, and the context indicates that the network device needs to activate the first When in a group, perform ordinary paging for the terminal device.

With reference to the fifth aspect, in some implementation manners of the fifth aspect, when the terminal device is abnormal, the transceiver module is further configured to receive a first request message, where the first request message includes the first group identifier , the first request message is used to request activation of the first group; the processing module is also used to determine to perform normal paging on the terminal device according to the context of the terminal device; the transceiver module is also used to send the terminal device Sending a paging message, where the paging message includes the identifier of the terminal device, and the terminal device belongs to the group corresponding to the first group identifier.

With reference to the fifth aspect, in some implementation manners of the fifth aspect, the processing module is specifically configured to: determine that the terminal device is abnormal when the processing module has not triggered the paging message carrying the first group identifier; Or, when the identifier carried in the paging message sent by the transceiver module to the terminal device is different from the first group identifier, the processing module determines that the terminal device is abnormal.

With reference to the fifth aspect, in some implementations of the fifth aspect, the second indication information is used to indicate at least one of the following: the network device has not used the first group identifier to trigger group paging; the network A list of group identifiers activated by the device; the terminal device does not respond to a group paging message carrying the first group identifier; the first group has not been activated yet.

With reference to the fifth aspect, in some implementation manners of the fifth aspect, when the terminal device is abnormal, the transceiver module is further configured to send information of a first time period to the terminal device, and the information of the first time period The information is used to indicate that the terminal device does not respond to the group paging message carrying the first group identifier within the first time period.

With reference to the fifth aspect, in some implementation manners of the fifth aspect, the first indication information is carried in a service request message.

With reference to the fifth aspect, in some implementation manners of the fifth aspect, the first group identifier is a temporary mobile group identifier.

With reference to the fifth aspect, in some implementation manners of the fifth aspect, the identifier of the terminal device includes a globally unique temporary user equipment identifier (GUTI) of the terminal device.

In a sixth aspect, there is provided a group paging device, which includes: a processor configured to execute a computer program stored in a memory, so that the communication device performs any one of the possibilities in the first aspect to the second aspect way of realization.

In a seventh aspect, a computer-readable storage medium is provided, and a computer program is stored on the computer-readable storage medium, and when the computer program is run on a computer, the computer is made to perform any one of the first to second aspects. One possible implementation.

In an eighth aspect, a computer program product is provided, the computer program product includes computer program instructions, and when the computer program instructions are run on a computer, the computer executes any one of the possible implementation manners in the first aspect to the second aspect .

A ninth aspect provides a chip system, which includes: a processor, configured to call and run a computer program from a memory, so that a communication device installed with the chip system executes any of the first to second aspects. One possible implementation.

Description of drawings

FIG. 1 is a schematic diagram of a network architecture applicable to the method provided by the embodiment of the present application.

Fig. 2 is a flow chart of a multicast service.

Fig. 3 is a schematic flowchart of a group paging method provided by an embodiment of the present application.

Fig. 4 is a schematic flowchart of a group paging method provided by another embodiment of the present application.

Fig. 5 is a schematic flowchart of a method for group paging provided by another embodiment of the present application.

Fig. 6 is a schematic flowchart of a method for group paging provided by another embodiment of the present application.

Fig. 7 is a schematic flowchart of a method for group paging provided by another embodiment of the present application.

Fig. 8 is a schematic block diagram of a communication device provided by an embodiment of the present application.

Fig. 9 is a schematic block diagram of a communication device provided by another embodiment of the present application.

Fig. 10 is a schematic block diagram of a communication device provided by another embodiment of the present application.

Fig. 11 is a schematic block diagram of a communication device provided by another embodiment of the present application.

Detailed ways

The technical solution in this application will be described below with reference to the accompanying drawings.

The technical solution provided by this application can be applied to various communication systems, such as: long term evolution (long term evolution, LTE) system, LTE frequency division duplex (frequency division duplex, FDD) system, LTE time division duplex (time division duplex, TDD), universal mobile telecommunication system (UMTS), worldwide interconnection microwave access (worldwide interoperability for microwave access, WiMAX) communication system, fifth generation (5th generation, 5G) system or new wireless (new radio, NR) and so on.

In different network systems, the names of NEs may be different. The following describes this application by taking the naming of network elements in a 5G network as an example.

FIG. 1 and FIG. 2 are schematic diagrams of a network architecture applicable to the method provided by the embodiment of the present application. Among them, Figure 1 is a schematic diagram of a 5G network architecture based on a service interface, and Figure 2 is a diagram of a 5G network architecture based on a point-to-point interface. Firstly, the main network elements involved in the 5G network system will be briefly described in combination with the schematic diagrams of the 5G network architecture shown in FIG. 1 and FIG. 2 .

1. User equipment (UE): It can include various handheld devices with wireless communication functions, vehicle-mounted devices, wearable devices, computing devices or other processing devices connected to wireless modems, as well as various forms of terminals, mobile Station (mobile station, MS), terminal (terminal), soft terminal and so on. For example, water meters, electricity meters, sensors, etc.

2. Wireless access network (radio access network, RAN) network element: hereinafter referred to as RAN, corresponding to access network equipment.

It is used to provide network access functions for authorized user equipment in a specific area, and can use transmission tunnels of different qualities according to the level of user equipment and service requirements.

RAN network elements can manage wireless resources, provide access services for user equipment, and then complete the forwarding of control signals and user equipment data between user equipment and the core network. RAN network elements can also be understood as base stations in traditional networks. For example, RAN can be NB, eNB, gNB, ng-eNB, or any other access network equipment.

3. User plane function (UPF): used for packet routing and forwarding and quality of service (QoS) processing of user plane data.

In a 5G communication system, the user plane network element may be a user plane function (user plane function, UPF) network element. In the future communication system, the user plane network element may still be a UPF network element, or may have other names, which are not limited in this application.

4. Multicast/broadcast-user plane function (MB-UPF)

MB-UPF is mainly responsible for sending multicast broadcast streams to RAN (or UPF), which can perform packet filtering and distribution of multicast broadcast streams, and realize QoS enhancement and counting/reporting of multicast broadcast services. In this application, MB-UPF and UPF are not strictly distinguished, and (MB-)UPF is used to represent MB-UPF or UPF.

5. Data network (data network, DN): used to provide a network for transmitting data.

In a 5G communication system, the data network element may be a data network element. In the future communication system, the data network element may still be a DN network element, or may have other names, which are not limited in this application.

6. Access and mobility management network elements

Access and mobility management network elements are mainly used for mobility management and access management, etc., and can be used to implement other functions in MME functions except session management, such as lawful interception and access authorization/authentication.

In a 5G communication system, the access and mobility management network element may be an access and mobility management function (access and mobility management function, AMF). In the future communication system, the access and mobility management device may still be an AMF, or may have other names, which are not limited in this application.

7. Session management function (session management function, SMF): mainly used for session management, user equipment network interconnection protocol (internet protocol, IP) address allocation and management, selection of manageable user plane functions, policy control and charging function interface endpoints and downlink data notifications, etc.

In a 5G communication system, the session management network element may be a session management function network element. In the future communication system, the session management network element may still be an SMF network element, or may have other names, which are not limited in this application.

8. Multicast/broadcast-session management function (MB-SMF)

MB-SMF is mainly responsible for multicast broadcast session management and control of multicast broadcast transmission. According to the policy rules of multicast broadcast services provided by PCF or locally configured, MB-UPF and RAN are configured accordingly to complete the transmission of multicast broadcast streams. . In this application, MB-SMF and SMF are not strictly distinguished, and (MB-)SMF is used to represent MB-SMF or SMF.

9. Policy control function (PCF): A unified policy framework for guiding network behavior, providing policy rule information for control plane functional network elements (such as AMF, SMF, etc.).

In the 4G communication system, the policy control network element may be a policy and charging rules function (policy and charging rules function, PCRF) network element. In a 5G communication system, the policy control network element may be a policy control function PCF network element. In the future communication system, the policy control network element may still be a PCF network element, or may have other names, which are not limited in this application.

10. Application function (Application function, AF): It is used for data routing influenced by applications, wireless access network open function network elements, and interaction with policy frameworks for policy control, etc.

In a 5G communication system, the application network element may be an application function network element. In the future communication system, the application network element may still be an AF network element, or may have other names, which are not limited in this application.

11. Unified data management (UDM): used to process UE identification, access authentication, registration and mobility management.

In a 5G communication system, the data management network element may be a unified data management network element; in a 4G communication system, the data management network element may be a home subscriber server (HSS) network element. In future communication systems, The unified data management may still be a UDM network element, or may have other names, which are not limited in this application.

12. Unified data repository (UDR): It mainly includes the following functions: the access function of contract data, policy data, application data and other types of data.

13. Authentication server function (AUSF): used for authentication services, generating keys to realize two-way authentication of user equipment, and supporting a unified authentication framework.

In a 5G communication system, the authentication server may be an authentication server functional network element. In the future communication system, the authentication server functional network element may still be an AUSF network element, or may have other names, which are not limited in this application.

14. Multicast/Broadcast Service Function (MBSF): Support the service layer function of multicast/broadcast business, interact with AF and (MB)-SMF to complete MBS session operation and transmission, control MBSTF network elements, etc. .

15. Multicast/Broadcast Service Transport Function (MBSTF): The media anchor of multicast/broadcast service data, supporting the processing and distribution of multicast/broadcast service data wandering.

It can be understood that the above-mentioned network element or function may be a network element in a hardware device, or a software function running on dedicated hardware, or a virtualization function instantiated on a platform (for example, a cloud platform). For the convenience of description, in the follow-up of this application, the network device is the access and mobility management network element AMF, and the base station is the radio access network RAN as an example for description.

It should be understood that the above-mentioned network architecture applied to the embodiment of the present application is only an example, and the network architecture applicable to the embodiment of the present application is not limited thereto. Any network architecture that can realize the functions of the above-mentioned network elements is applicable to this application. Application example.

For example, in some network architectures, network functional network element entities such as AMF, SMF network element, PCF network element, BSF network element, and UDM network element are all called network function (network function, NF) network elements; or, in another In some network architectures, a collection of network elements such as AMF, SMF, PCF, BSF, and UDM can be called control plane functional network elements.

In order to easily understand the embodiments of the present application, some concepts or terms involved in the present application are briefly described first.

1. Multicast

One-to-one group communication mode in the network, that is, terminals that join the same group can receive all data in this group. The terminal can request the network side to join or exit a certain group, and the core network and the base station selectively transmit data, that is, only transmit the data in the group to those terminals that join the group. In this way, data can be transmitted to multiple terminals in need (joining the group) at one time, and other communications of other terminals that do not need (not joining the group) can be guaranteed not to be affected.

A multicast group is a set of receivers identified by a multicast session ID. Multicast session ID (MBS Session ID), which is used to identify a multicast session between AF and 5G network, AF and UE, which can be temporary mobile group identity (TMGI) or MBS multicast Session IP address.

A terminal becomes a member of a multicast group by joining a multicast group, so as to receive multicast data sent to the multicast group. Members in a multicast group are dynamic, and a terminal can join or leave a multicast group at any time.

2. Protocol data unit (protocol data unit, PDU) session (PDU session)

The 5G core network (5G corenet, 5GC) supports PDU connection services. The PDU connection service may refer to a service of exchanging PDU data packets between the terminal device and the DN. The PDU connection service is realized by the establishment of the PDU session initiated by the terminal device. After a PDU session is established, a data transmission channel between the terminal device and the DN is established. In other words, PDU sessions are at UE level. Each end device can establish one or more PDU sessions. The terminal device can access the DN through the PDU session established between the terminal device and the DN.

As mentioned earlier, the SMF primary user is responsible for session management in mobile networks. The PDU session can be established, modified or released between the terminal device and the SMF through NAS session management (session management, SM) signaling.

In this embodiment of the application, the terminal device can establish multiple PDU sessions or multiple PDU connection services, for example, the terminal device can establish two or more PDU sessions, and there is no limitation on the multiple PDU sessions. For example, DN identifiers (data network name, DNN) of these PDU sessions may be different or the same. As another example, different PDU sessions may be served by the same SMF or by different SMFs. As another example, the establishment of these PDU sessions can be initiated simultaneously or successively. In order to facilitate the understanding of the group paging method provided by the embodiment of the present application, the process 200 of the multicast service is briefly introduced below in conjunction with FIG. 2:

S201, a multicast session preconfiguration process.

Exemplarily, the AF configures the multicast session to the network side, for example, the AF obtains a multicast session identifier (MBS Session ID) corresponding to the multicast session, which is used to identify the multicast session between the AF and the 5G network, and between the AF and the UE, The identifier may be a temporary mobile group identity (TMGI) or an MBS multicast session IP address. For a period of time, the MBS Session ID remains unchanged. The service provider can send a message to the UE through the upper layer (such as the application layer, etc.) to inform the UE to start providing the multicast service, and the message includes at least the MBS Session ID.

S202. The UE sends a request message to join the multicast session to the AMF. The request message to join the multicast session includes an MBS Session ID, and the MBS Session ID is used to identify the multicast group that the UE wants to join.

S203. The AMF invokes the PDU session update session management context (Nsmf_PDU session_updateSMcontext) service to send a request for the UE to join the multicast session to the (MB)-SMF.

In a possible situation, when the MBS session identified by the MBS Session ID has not been activated in the core network, that is, when the UE requests to join the multicast group earlier than the MBS session activation time, for example, the SMF has not responded to the request of the AF After allocating resources to establish an MBS session, the SMF sends an indication message to the UE, indicating that the MBS session has not been activated.

In another possible situation, when the SMF has established an MBS session according to the request of the AF (the session here can be understood as a data transmission channel between the AF and the core network), the core network establishes the UE and the core network according to the request of the UE. session (the session here can be understood as a data transmission channel between the UE and the core network), for example:

S204, the (MB-)SMF sends service configuration information to the AMF by invoking the N1N2 message transmission service, and the service configuration information includes multicast data-specific quality of service rules (quality of service rule, QoS rule) and the like.

S205. The AMF sends the service configuration information to the RAN through an N2 session modification request (N2 session modification request) message.

S206, an RRC reconfiguration process.

Exemplarily, after receiving the service configuration information, the RAN sends an RRC reconfiguration message to the UE to establish a bearer between the UE and the base station. S207, the RAN sends an N2 session modification response message to the AMF.

S208, the AMF sends a response message to the (MB-)SMF.

S209, the UE enters an idle state (idle mode).

Exemplarily, in the following possible scenarios, the UE will enter the idle state:

a) The MBS session is deactivated at the core network side, for example: when the AF does not send multicast session data within a period of time, the AF may request the core network to deactivate the corresponding MBS session. Another example: when the (MB-)UPF detects that no multicast session data is sent within a period of time, the (MB-)UPF may request the (MB-)SMF in the core network to deactivate the corresponding MBS session. The core network can deactivate the MBS session according to the request of the AF or (MB-)UPF. If the UE has no other services at this time, the UE enters an idle state.

b) When the UE requests to join the multicast group, the MBS session has not been activated in the core network, that is, the time when the UE requests to join the multicast group is earlier than the start time of the multicast session, and the UE may enter the idle state according to the instructions of the core network.

c) When no multicast session data is sent within a period of time, the connection between the RAN and the UE is released, and the UE enters an idle state. At this time, the MBS session on the core network side is in an active state.

S210, the AF sends an MBS session activation request message to the (MB-)SMF.

Exemplarily, when the AF needs to send multicast session data, the AF may request the (MB-)SMF in the core network to activate the corresponding MBS session.

Or, as another possible implementation manner, at S210, the (MB-)UPF may also send an MBS session activation request message to the (MB-)SMF. Exemplarily, when the (MB-)UPF detects that the multicast session data needs to be sent, the (MB-)UPF may request the (MB-)SMF in the core network to activate the corresponding MBS session.

S211, the (MB-)SMF sends a request message to the AMF by invoking the N1N2 message transmission service to request activation of the MBS multicast session, and the request message carries the MBS Session ID. It can be understood that requesting to activate the multicast session means activating the members in the multicast group to establish or restore the transmission bearer of the multicast session.

S212, when the UE that is a member of the MBS session group is in an idle state or an inactive state, the AMF sends a paging request message to the RAN.

Exemplarily, after receiving the request message for requesting activation of the MBS session, the AMF determines the UE that needs to be paged according to the MBS Session ID. It should be understood that the UEs that need to be paged here may be all members of the MBS conversation group, and may also be UEs in an idle state or an inactive state in the MBS group. It should also be understood that a UE in a connected state will not respond to a paging message.

When the UE is in an idle state or an inactive state, the AMF sends a paging request message to the RAN. In the case where the RAN supports the MBS service, the paging request message carries the MBS Session ID, and the paging message can be a group paging message, that is, a one-to-many paging message; in the case that the RAN does not support the MBS service, The paging request message carries the UE ID, and the paging message is a normal paging message, that is, a 1-to-1 paging message, and the UE ID is a UE granular user identifier, such as a temporary identifier of the UE. Optionally carry MBS Session ID. There is no limit here.

In another possible situation, the UE is in connected mode, and the AMF sends a non-access stratum notification (NAS notification) message to the UE, which is used to indicate the activation of the UE multicast session, and the message carries the MBS Session ID. Alternatively, the AMF may directly request the UE to join the MBS session without sending the NAS notification message, or request to activate the MBS session and skip steps S212-S214. Whether to send NAS notification message is not limited here.

S213, the RAN sends a paging message to the UE.

Exemplarily, the RAN performs paging according to the cell corresponding to the tracking area where the UE is located.

When the RAN supports the MBS service, the RAN initiates group paging to the UE, and the message carries the MBS Session ID.

When the RAN does not support the MBS service, the RAN initiates a normal paging to the UE, and the message carries the UE ID. Optionally, the message also carries the MBS Session ID to instruct the UE to activate the corresponding multicast session. The MBS Session ID may not be sent in the message. After the UE responds to the paging message, the AMF directly executes the session establishment process for the UE. There is no limit here. It should be understood that normal paging refers to paging for paging a single UE. That is, common paging is a one-to-one paging process. Group paging is a one-to-many process, that is, multiple UEs may respond to a group paging message.

S214, the UE sends a service request message to the AMF

Exemplarily, the UE receives a paging message from the RAN. When the paging message carries the MBS session ID, and the UE judges that the UE belongs to the multicast group corresponding to the MBS session ID, the UE sends a service request message to the AMF; when the paging message carries the UE ID, the UE judges that the UE ID matches itself , the UE sends a service request message to the AMF.

In method 200, UE1, UE2, and UE3 are members of the multicast group corresponding to the MBS session ID, UE3 is in the connected state, and both UE1 and UE2 are in the idle state. When the RAN sends a group paging message carrying the MBS session ID, both UE1 and UE2 will respond and send a service request message.

S215. The AMF sends a service request to the (MB-)SMF through a PDU session update SM context request message (Nsmf PDU session update SMcontext Request).

S216, the network side and the UE complete the process of establishing a multicast session. The specific manner is not limited in this application.

However, an attacker can use a group paging forgery attack to cause problems such as consumption of UE resources and occupation of base station resources. In view of this, the present application provides a group paging method in order to solve the problem that resources are occupied without reason due to attackers forging paging messages.

FIG. 3 is a schematic flowchart of a method 300 provided by an embodiment of the present application. As can be seen from FIG. 3, the method 300 includes:

S310: The terminal device sends a service request message to the network device, and the message may optionally carry first indication information.

Exemplarily, before S310, the terminal device receives a group paging message, where the group paging message carries the first group identifier. It should be understood that the first group identifier may identify the first group at the terminal side and the network side, and the identifier may be, for example, a temporary mobile group identity (TMGI).

Further, the terminal device sends first indication information to the network device, where the first indication information is used to indicate that the terminal device has received the paging message carrying the first group identifier.

The first indication information may be carried in the service request message sent by the terminal device to the network device, or in other messages, which is not limited in this application. The network device may be an access and mobility management network element (such as AMF), or a session management network element (such as SMF), or a multicast/broadcast service function network element (such as MBSF).

It should be understood that, in a certain possible implementation scenario, the first group may be, for example, a multicast group, and the first group identifier may be, for example, a multicast session identifier (MBS session ID) corresponding to the multicast group, The group activation process can be regarded as a multicast session activation process. The description here is only for illustration and does not have any limiting effect.

S320, the network device judges whether there is an abnormality in the terminal device. Exemplarily, the network device may determine whether the terminal device is abnormal according to the first indication information. Exemplarily, when the network device has not triggered the paging message carrying the first group identifier, the network device determines that there is an abnormality in the terminal device; or, when the paging message sent by the network device to the terminal device When the identifier carried in the ID is different from the first group identifier, the network device determines that the terminal device is abnormal.

It should be understood that the abnormality here may be that the terminal device is attacked by a fake base station. That is, the group paging message received by the terminal device may be forged by a fake base station, and at this time the network device will determine that the terminal device is abnormal. Alternatively, the abnormality here may be that the terminal device requests to join the first group, but the first group has not been activated.

S330. The network device sends second indication information to the terminal device.

Exemplarily, when the terminal device is abnormal, the network device sends second indication information to the terminal device, the second indication information is used to indicate that the terminal device is abnormal, or the second indication information is used for the terminal device The device determines that there is an anomaly.

Specifically, the second indication information may indicate at least one of the following:

The network device has not used the first group identifier to trigger group paging;

A list of group identities activated by the network device;

The terminal device does not respond to the group paging message carrying the first group identifier;

This first group is not yet active.

S340. The terminal device determines whether there is an abnormality according to the second indication information.

Exemplarily, the terminal device receives the second indication information sent by the network device, and determines whether there is an abnormality according to the second indication information. For example: when the second indication information indicates that the network device has not used the first group identifier to trigger group paging, or the network side has not sent a paging request message carrying the first group identifier, and the terminal device receives the message carrying the first group identifier A group paging message with a group ID, or when the terminal device sends a service request according to the first group ID in the group paging message, the terminal device determines that there is an abnormality; another example: when the second indication information indicates that the network device is activated If the first group identifier is not in the list of group identifiers, and the first group identifier is not in the list, the terminal device determines that an exception exists. For another example: when the second indication information indicates that there is an abnormality in the UE or there is an attacker, the terminal device determines that there is an abnormality. For another example: when the second indication information indicates that the first group has not been activated, the terminal device determines that there is an abnormality, and the first group is the group identified by the first group identifier. For another example: when the second indication information indicates that the terminal device does not respond to the group paging message carrying the first group identifier, the terminal device determines that there is an abnormality.

S350. The terminal device does not respond to the paging message carrying the first group identifier.

Exemplarily, when the terminal device determines that there is an abnormality, the terminal device does not respond to the paging message carrying the first group identifier, or the terminal device does not respond to the paging message carrying the first group identifier within a first time period. Optionally, the terminal device may determine the first time period according to preconfigured information, or may determine the first time period according to an instruction of the network device. For example, the network device sends the first timer while sending the second indication information to the terminal device, and after the terminal device receives the second indication information (or the terminal device determines that there is an abnormality according to the second indication information), the terminal device The timer is started, and before the timer expires, the terminal device does not respond to the paging message carrying the first group identifier, wherein the counting time of the timer is recorded as the first time period.

Optionally, when the network device determines that the terminal device is abnormal, the network device determines that the terminal device needs to be paging normally, or in other words, when the terminal device needs to be paged, it needs to use the normal paging paging. It should be noted that the normal paging here means that the network device performs one-to-one paging of the terminal device by using the identifier of the terminal device. Exemplarily:

After the network device determines that the terminal device is abnormal, it updates the context of the terminal device, and when the context of the terminal device indicates that the terminal device needs to activate the first group, it performs ordinary paging on the terminal device. For example: the network device receives a first request message, the first request message includes a first group identifier, and the first request message is used to request activation of the first group; further, the network device sends a request to the terminal device A paging message, where the paging message includes the identifier of the terminal device, where the terminal device belongs to a group corresponding to the first group identifier. The identifier of the terminal device is, for example, the GUTI of the terminal device.

Therefore, the group paging method provided by the embodiment of the present application determines whether the terminal device is abnormal (or determines whether the terminal device is affected by attack), in the case of an abnormal situation, the terminal device does not respond, or does not respond to the group paging message carrying the corresponding group ID for a period of time, so as to avoid the problem of resource waste caused by attackers frequently launching illegal group paging, At the same time, the security of the group paging process is improved.

FIG. 4 is a schematic flowchart of a method 400 provided by an embodiment of the present application. As can be seen from FIG. 4, the method 400 includes:

S410, the terminal device receives a group paging message.

Exemplarily, the group paging message carries the identifier of the first multicast session.

S420, the terminal device sends a service request message to the network device.

Exemplarily, when the terminal device is a member of the multicast group corresponding to the first multicast session, the terminal device sends a service request message to the network device. The service request message carries the identifier of the first multicast session.

S430, the network device sends an indication that the first multicast session is not activated to the terminal device.

Exemplarily, after the network device receives the service request message, if the first multicast session is inactive, the network device sends an inactive indication (inactive indication) of the first multicast session to the terminal device.

S440, the terminal device does not respond to the paging message carrying the first group identifier.

Exemplarily, after receiving the indication that the first multicast session is not activated, the terminal device does not respond to the paging message carrying the identifier of the first multicast session. That is, after the terminal device sends a service request message to the network device according to the group paging message, and receives the first multicast session inactivation indication sent by the network device, the terminal device does not respond to the paging message carrying the identifier of the first multicast session. call message.

Specifically, after the terminal device sends a service request message to the network device according to the group paging message, and receives the first multicast session inactivation indication sent by the network device, the terminal device determines that there is an abnormality, or that the terminal device determines that the network The device has never sent a paging message carrying the identifier of the first multicast session, or the terminal device has determined that it has been attacked by an attacker, or the terminal device has determined that the received group paging message carrying the identifier of the first multicast session is forged , the terminal device no longer responds to the paging message carrying the identifier of the first multicast session. It should be understood that the terminal device may not take an action to determine that there is an abnormality, which is not limited in this application.

It should be noted that the terminal device does not respond to the paging message carrying the identifier of the first multicast session here may also mean that the terminal device does not respond to the paging message carrying the identifier of the first multicast session within a certain period of time, for example, in Not responding to the paging message carrying the identifier of the first multicast session within a first time period after receiving the first multicast session inactivation indication, the first time period may be pre-configured or indicated by other network elements Yes, this application is not limited.

In another case, the terminal device receives the group paging message carrying the first group identifier within the second time period, and the terminal device may respond to the group paging message after the second time period ends. That is, the terminal device does not respond to the group of paging messages within the second time period, and then responds after the second time period ends. It should be understood that the second time period may be preconfigured, or may be indicated by other network elements. The second time period may be the same as or different from the first time period.

Therefore, in the group paging method provided by the embodiment of the present application, after the terminal device sends a service request message to the network device according to the group paging message, and receives the multicast session inactivation indication sent by the network device, the terminal device does not Respond (or not respond within a certain period of time) to the paging message carrying the identifier of the multicast session, thereby avoiding the problem of waste of resources caused by attackers using the identifier of the multicast session for multiple attacks, while improving the group paging process security.

FIG. 5 is a schematic flowchart of a method 500 provided by an embodiment of the present application. As can be seen from FIG. 5, the method 500 includes:

S510. The terminal device receives third indication information from the network device.

Exemplarily, the third indication information indicates that the terminal device does not respond to the group paging message carrying the first multicast session identifier, or the third information indicates that the terminal device only responds to a common paging message.

Optionally, the third indication information also includes information of the first time period, or the network device sends the third indication information and the information of the first time period to the terminal device, and at this time the third indication information indicates that the terminal device No response to the group paging message carrying the identifier of the first multicast session for a period of time, or the third information indicates that the terminal device only responds to the general paging message during the first period of time.

It should be noted that the network device may send the third indication information to the terminal device when it finds that the terminal device is attacked by an attacker (such as a fake base station), or it may determine that the terminal device may be abnormal, or determine that the terminal device may be abnormal. When there is a risk of being attacked, the third indication information is sent to the terminal device, or when there is a certain security requirement for the paging process, the network device sends the third indication information to the terminal device. This application is not limited to this.

The network equipment here can be, for example, an access and mobility management network element (such as AMF), a session management network element (such as SMF), or a multicast/broadcast service function network element (such as MBSF). This application Not limited.

S520. The terminal device stores third indication information.

Exemplarily, after receiving the third indication information sent by the network device, the terminal device saves the third indication information. Alternatively, after receiving the third indication information and the information of the first time period sent by the network device, the terminal device saves the third indication information and the first time period. It should be understood that the information of the first time period may be a timer, and the timing time of the timer is recorded as the first time period.

In one case, according to the third indication information, the terminal device may respond to a common paging message. For example, in case 1:

S530. The terminal device receives a normal paging message sent by the network device, where the normal paging message carries the GUTI.

When the GUTI is the same as the locally stored GUTI of the terminal device, then at S540, the terminal device sends a service request message to the network device.

In another situation, according to the third indication information, the terminal device does not respond to the group paging message carrying the first multicast session. For example, in case 2:

S550. The terminal device receives a group paging message, where the group paging message carries the identifier of the first multicast session.

The terminal does not respond to the group of paging messages according to the third indication information.

If the terminal device locally stores the information of the first time period, and the receiving time of the group of paging messages is within the first time period, the terminal device does not respond to the group of paging messages.

Therefore, in the group paging method provided by the embodiment of the present application, the terminal device determines not to respond to the group paging message carrying the identifier of the first multicast session according to the instruction of the network device, which can prevent attackers from using the identifier of the first multicast session attack to improve the security of the paging process.

FIG. 6 is a schematic flowchart of a method 600 provided by an embodiment of the present application. As can be seen from FIG. 6, the method 300 includes:

S601. The UE sends a request message to join a multicast session to the AMF.

S602. The AMF invokes the PDU session update session management context (Nsmf_PDU session_updateSMcontext) service to send a request for the UE to join the multicast session to the (MB)-SMF, and the request message carries the MBS Session ID.

It should be understood that S601-S602 are similar to S202-S203 in the method 200, and the present application will not repeat the description here.

S603. The network side completes the MBS session establishment process.

It should be understood that the MBS session establishment process is similar to S204-S208 in the method 200, and the present application will not repeat the description here.

S604, the MBS session is deactivated.

Exemplarily, when the AF does not send multicast session data within a period of time, the AF may request the core network to deactivate the corresponding MBS session. Another example: when the (MB-)UPF detects that no multicast session data is sent within a period of time, the (MB-)UPF may request the (MB-)SMF in the core network to deactivate the corresponding MBS session. The core network can deactivate the MBS session according to the request of the AF or (MB-)UPF. It should be understood that this application does not limit the specific scenario where the MBS session is deactivated.

It should be understood that if the UE has no other data services except the multicast service, the UE enters the idle state.

S605, the UE receives a paging (paging) message from the RAN, and the paging message carries the multicast session identifier MBS session ID#1.

It should be understood that the UE may receive the paging message from an attacker.

S606, the UE sends a service request message to the AMF.

Exemplarily, after a UE in an idle state or an inactive state receives a paging message, the UE judges whether it belongs to the multicast group corresponding to the MBS session ID#1 carried in the paging message, and if so, the UE sends a service request to the AMF message, the service request message carries paging information (paging info), and the paging information is used to indicate that the service request message is triggered by the paging message. Optionally, the service request message also includes MBS session ID#1, or the paging information includes MBS session ID#1.

The paging information reflects the reason why the UE initiates the service request message and/or the received paging message, which helps the AMF to judge whether there is an abnormal situation, so that the network side can handle the abnormal situation in time and improve the group paging process security.

It should be noted that the service request message sent by the UE to the AMF is protected by confidentiality and integrity security, so an attacker cannot tamper with the paging information.

S607, the AMF determines whether there is an abnormality in the UE.

Exemplarily, the AMF receives the service request message, and if the service request message carries paging information, the AMF determines whether the UE is abnormal according to the paging information.

When the paging information indicates that the service request message sent by the UE is triggered by a group paging message, the AMF judges whether the group paging has been triggered. When the AMF has not triggered the group paging within a specific time, the AMF determines that there is an abnormality in the UE. The abnormality here is, for example, that the UE is attacked by a fake base station.

When the service request message carries MBS session ID#1, AMF determines that the service request message is triggered by the group paging message carrying MBS session ID#1, and AMF judges whether the group paging message has been triggered by using MBS session ID#1 In other words, AMF judges whether a group paging message carrying MBS session ID#1 has been sent. When the AMF has not triggered the group paging carrying the MBS session ID#1, the AMF determines that there is an abnormality in the UE.

S608. The AMF sends a session establishment request to the (MB-)SMF, and the session request message carries MBS session ID#1.

When the session on the (MB-)SMF is not activated, S609, the (MB-)SMF indicates to the AMF that the MBS session is not activated through the N1N2 message transmission service.

It should be understood that S607 may be performed after S606, or may be performed after S609, which is not limited in this application.

S610, AMF updates UE context.

Exemplarily, when the AMF determines that the UE is abnormal at S610, the AMF determines to perform normal paging on the UE, that is, the AMF no longer uses the MBS session ID#1 to perform group paging on the UE. The AMF updates the UE context, and the UE context indicates that when the AMF needs to activate the MBS session, it performs normal paging for the UE. The normal paging here refers to that the AMF carries the UE ID (UE ID) in the paging message to page a single UE. The UE ID here can be, for example, a globally unique temporary UE identity (GUTI) .

The AMF can also send the UE context to the (MB-)SMF/UDM, and the (MB-)SMF/UDM receives and stores the UE context accordingly.

Further, the AMF sends indication information to the UE to indicate that there is an abnormality. specifically:

S611. The AMF sends the first indication information to the RAN through the N2 session request message.

S612. The RAN sends the first indication information to the UE during the RRC reconfiguration process.

The first indication information may indicate any one or more of the following:

The network side has not used MBS session ID#1 to trigger group paging, or the network side has not sent a paging request message carrying MBS session ID;

The list of MBS session IDs activated on the network side, that is, the list carried in the group paging message;

There is an abnormality in the UE, or there is an attacker (pseudo base station);

The UE does not respond to the group paging message carrying MBS session ID#1;

The MBS session has not been activated yet, and the MBS session is the session identified by MBS session ID#1 (at this time, the first indication information may be session inactivation indication information (inactive indication)).

S613, the UE determines that there is an abnormality.

Exemplarily, the UE receives first indication information from the AMF, and determines that there is an abnormality according to the first indication information.

When the first indication information indicates that the network side has not used the MBS session ID#1 to trigger group paging, or the network side has not sent a paging request message carrying the MBS session ID, and the UE receives the message carrying the MBS session ID#1 When the group paging message, or the UE sends a service request according to the MBS session ID#1 in the group paging message, the UE determines that there is an abnormality;

When the first indication information indicates a list of MBS session IDs activated on the network side, and MBS session ID#1 is not in the list, the UE determines that there is an abnormality.

When the first indication information indicates that there is an abnormality in the UE or there is an attacker, the UE determines that there is an abnormality.

When the first indication information indicates that the MBS session has not been activated, the UE determines that there is an abnormality, and the MBS session is the session identified by MBS session ID#1.

When the first indication information indicates that the UE does not respond to the group paging message carrying the MBS session ID#1, the UE determines that there is an abnormality.

It should be understood that here the UE determines that there is an abnormality, or it can be said that the UE determines that there is an attacker, or that the UE determines that the received group paging message carrying MBS session ID#1 is a forged message.

When the UE determines that there is an abnormality, the UE does not respond to the group paging message carrying the MBS session ID#1.

It should be understood that the UE may determine not to respond to the group paging message carrying the MBS session ID#1 after determining that there is an abnormality according to the first indication information. Or the UE may not determine that there is an abnormal operation. When the UE receives the first indication information and the first indication information indicates any of the above, the UE does not respond to the group paging message carrying MBS session ID#1. For example, when the first indication information indicates that the network side has not used MBS session ID#1 to trigger group paging, the UE does not respond to the group paging message carrying MBS session ID#1; When not activated, the UE does not respond to the group paging message carrying MBS session ID#1. Other situations are similar and will not be described again.

In the above solution, both the AMF and the UE have determined that the UE is abnormal, so when the AMF needs to page the UE in the idle state or the inactive state through the MBS session ID#1, the normal paging is adopted. Exemplarily:

S614, the AF sends an MBS session activation request message to the (MB-)SMF, the MBS session activation request message carries MBS session ID#1, and the MBS session activation request message is used to request activation of the MBS session corresponding to the MBS session ID#1.

Exemplarily, after a period of time, when the AF needs to send multicast session data, the AF may request the (MB-)SMF in the core network to deactivate the corresponding MBS session.

As another possible implementation manner, the (MB-)UPF may also send the MBS session activation request message to the (MB-)SMF. For example, when the (MB-)UPF detects that multicast session data needs to be sent, the (MB-)UPF may request the (MB-)SMF in the core network to deactivate the corresponding MBS session.

Correspondingly, after the (MB-)SMF receives the MBS session activation request message sent by the AF or the UPF, the network side initiates the MBS session activation.

S615, the (MB-)SMF sends a request message to the AMF by invoking the N1N2 message transmission service to request activation of the MBS multicast session, and the request message carries MBS session ID#1.

Further, when the AMF determines to activate the session identified by the MBS session ID#1 according to the context of the UE or according to the indication information sent by the (MB-)SMF, it needs to perform normal paging on the UE in the idle state or the inactive state .

S616-S617, the AMF initiates a general paging to the UE through the RAN, and the message carries the GUTI corresponding to the UE.

Therefore, the group paging method provided in the embodiment of the present application can identify anomalies when an attacker forges an identity to page a UE. For example, when the multicast session identifier MBS session ID remains unchanged within a specific life cycle, since the group paging message is a broadcast message without security protection, an attacker can obtain or forge the MBS session ID, and In the life cycle of the MBS session ID, the attack is carried out. That is, after the core network assigns the MBS session ID to the AF, in a specific life cycle, the MBS session ID can be used multiple times when the multicast session is activated, so the attacker can use the MBS session ID to multicast the corresponding The members of the multicast group perform paging, which causes the resources of the terminal and the network to be occupied.

For example, the attacker obtains the MBS session ID of a multicast service by listening to group paging messages or guessing, which is recorded as ID1. An attacker can launch a man-in-the-middle attack and use ID1 to send a fake group paging message to the UE. If the UE is in the idle state and belongs to the multicast group corresponding to ID1, the UE will establish a connection with the pseudo base station. After accessing the pseudo base station, the UE will access the real base station and the core network through the pseudo base station. Alternatively, the attacker may not initiate a man-in-the-middle attack, and the attacker uses ID1 to send a forged group paging message to the UE. If the UE is in the idle state and the UE belongs to the multicast group corresponding to ID1, the UE is directly triggered to access the real base station and core network. Then the UE sends a service request message to the AMF through the base station. If the multicast session corresponding to ID1 on the core network side is not activated at this time, the AMF sends an indication message to the UE to indicate that the MBS session is not activated. If the UE has no other user plane services that need to be performed, the UE returns to the idle state. If the attacker continues to send group paging messages carrying ID1, the UE will continue to transition between the idle state and the connected state, and base station and core network resources will also be occupied.

Since the group paging message is a one-to-many message, that is, an attacker sends a single group paging message, which can attract a large number of UEs to request services. Taking method 200 as an example, when the base station sends a group paging message carrying an MBS session ID, both UE1 and UE2 will respond and send a service request message. It can be seen that the attacker can use group paging to carry out forgery attacks, resulting in the consumption of UE resources and the occupation of base station resources. In severe cases, it can lead to denial of service attacks on UEs and base stations. For example, when the service capability of the real base station is 100 users, and the attacker sends a single group paging message to attract 20 UEs to access the network, 20% of the resources of the base station will be occupied. For another example, the group paging message sent by the attacker can carry 15 MBS session IDs. Assume that each MBS session ID corresponds to 20 UEs responding to the paging, that is, sending a service request message, causing 300 users to occupy base station resources. As a result, a denial of service attack occurs on the base station and cannot provide services to other users. If the attacker keeps sending group paging messages, the impact of the attack is persistent.

Therefore, in the group paging method provided by the embodiment of the present application, when the attacker forges the identity to page the UE, it can identify the abnormality and make the UE not respond to the group paging carrying the relevant identifier, thereby avoiding Resource waste caused by illegal paging.

FIG. 7 is a schematic flowchart of a method 700 provided by an embodiment of the present application. As can be seen from FIG. 7, the method 700 includes:

S701. The UE sends a request message to join a multicast session to the AMF.

S702. The AMF invokes the PDU session update session management context (Nsmf_PDU session_updateSMcontext) service to send a request for the UE to join the multicast session to the (MB)-SMF, and the request message carries the MBS Session ID.

S703. The network side completes the MBS session establishment process.

S704, the MBS session is deactivated.

It should be understood that S701-S704 are similar to S601-S604 in the method 600, and for the sake of brevity, the present application will not repeat the description.

S705. The UE receives a paging (paging) message from the RAN, and the paging message carries the multicast session identifier MBS session ID#1.

It should be understood that the paging message may be sent by a fake base station deployed by an attacker.

S706, the UE sends a service request message to the AMF.

Exemplarily, after a UE in an idle state or an inactive state receives a paging message, the UE judges whether it belongs to the multicast group corresponding to the MBS session ID#1 carried in the paging message, and if so, the UE sends a service request to the AMF message, the service request message carries paging information (paging info), and the paging information is used to indicate that the service request message is triggered by the paging message. Optionally, the service request message also includes MBS session ID#1, or the paging information includes MBS session ID#1.

It should be noted that when the UE is in the idle state, the service request message sent by the UE to the AMF is protected by confidentiality and integrity security, so an attacker cannot tamper with the paging information.

S707, the AMF determines whether there is an abnormality in the UE.

Exemplarily, the AMF receives the service request message, and if the service request message carries paging information, the AMF determines whether the UE is abnormal according to the paging information.

The AMF determines, according to the paging information, that the service request message is triggered by the paging message, and then the AMF judges whether the group paging has been triggered. When the AMF has not triggered the group paging, the AMF determines that the UE is abnormal. The abnormality here is, for example, that the UE is attacked by a fake base station.

When the service request message carries MBS session ID#1, after the AMF determines that the service request message is triggered by the paging message according to the paging information, the AMF judges whether the group paging has been triggered by using the MBS session ID#1, or Said that the AMF has judged whether the paging request message carrying the MBS session ID#1 has been sent. When the AMF triggers the group paging through the MBS session ID, the AMF determines that there is an abnormality in the UE.

S708. The AMF sends a session establishment request to the (MB-)SMF, and the session request message carries MBS session ID#1.

When the session is not active on the (MB-)SMF, the (MB-)SMF determines the potential session activation time. Exemplarily:

S709, the (MB-)SMF acquires the session activation time #1 through the AF. For example:

The (MB-)SMF sends a request message to the AF to request the potential session activation time; the AF returns the potential session activation time #1 (for example, marked as timer1).

In another possible implementation manner, the (MB-)SMF determines the session activation time #1 according to pre-configuration information.

S710, the (MB-)SMF sends the session activation time #2 (for example, timer2) to the AMF through N1N2 message transmission, where timer2 is less than or equal to timer1. The message also carries session inactivation indication information (inactive indication), where the inactive indication is used to indicate that the session is inactive.

It should be understood that S707 may be performed after S706 or after S710, which is not limited in this application.

Further, the AMF sends indication information to the UE to indicate that there is an abnormality, and optionally, the session activation time #2 may also be sent. specifically:

S711, the AMF sends the first indication information and the session activation time #2 to the RAN through the N2 session request message.

S712, the RAN sends the first indication information and the session activation time #2 to the UE during the RRC reconfiguration process.

The first indication information may indicate any one or more of the following:

The network side has not used MBS session ID#1 to trigger group paging, or the network side has not sent a paging request message carrying MBS session ID;

The list of MBS session IDs activated on the network side, that is, the list carried in the group paging message;

There is an abnormality in the UE, or there is an attacker (pseudo base station);

The MBS session has not been activated yet, and the MBS session is the session identified by MBS session ID#1 (at this time, the first indication information may be session inactivation indication information (inactive indication)).

S713, the UE determines that there is an abnormality.

Exemplarily, the UE receives first indication information from the AMF, and determines that there is an abnormality according to the first indication information.

When the first indication information indicates that the network side has not used the MBS session ID#1 to trigger group paging, or the network side has not sent a paging request message carrying the MBS session ID, and the UE receives the message carrying the MBS session ID#1 When the group paging message, or the UE sends a service request according to the MBS session ID#1 in the group paging message, the UE determines that there is an abnormality;

When the first indication information indicates a list of MBS session IDs activated on the network side, and MBS session ID#1 is not in the list, the UE determines that there is an abnormality.

When the first indication information indicates that there is an abnormality in the UE or there is an attacker, the UE determines that there is an abnormality.

When the first indication information indicates that the MBS session has not been activated, the UE determines that there is an abnormality, and the MBS session is the session identified by MBS session ID#1.

When the UE receives timer2 from the RAN, and the UE determines that there is an abnormality, the UE can handle the abnormality as follows: the UE starts the timer timer2, and before the timer2 expires, the UE does not respond to the group paging message carrying the MBS session ID#1; Or it can be said that within the session activation time #2, the UE does not respond to the group paging message carrying the MBS session ID #1. It should be understood that after timer2 expires, the UE may respond to the group paging message carrying the MBS session ID#1.

Or, in another possible implementation, when the UE determines that there is an abnormality, the session activation time #3 (for example, timer3) is determined according to the local pre-configuration, and timer3 is started. Before timer3 expires, the UE does not respond to carry The group paging message of MBS session ID#1; or it can be said that within the session activation time #3, the UE does not respond to the group paging message carrying MBS session ID#1. It should be understood that after timer3 expires, the UE may respond to the group paging message carrying the MBS session ID#1. In this implementation manner, the session activation time #2 may not be sent to the UE. If the UE receives session activation time #2 from the RAN and locally preconfigures session activation time #3, before the UE determines that there is an abnormality, the UE starts timer2 and timer3 at the same time, and before timer2 and timer3 both expire, the UE Do not respond to the group paging message carrying MBS session ID#1; or it can be said that within session activation time #2 and session activation time #3, the UE does not respond to the group paging message carrying MBS session ID#1.

If the UE listens to the group paging message carrying MBS session ID#1 in timer2 (or timer3), the UE can initiate a service request message after timer2/timer3 expires, or ignore the message carried in timer2 (or timer3). The group paging message of MBS session ID#1 is not limited here.

Therefore, in the group paging method provided by the embodiment of the present application, when the attacker forges the identity to page the UE, it can identify the abnormality and make the UE not respond to the group paging carrying the relevant identifier for a period of time, thereby avoiding the Resource waste caused by attacker's illegal paging.

Above, the method provided by the embodiment of the present application is described in detail with reference to FIG. 2 to FIG. 7 . Hereinafter, the communication device provided by the embodiment of the present application will be described in detail with reference to FIG. 8 to FIG. 11 .

FIG. 8 is a schematic block diagram of a communication device 10 provided by an embodiment of the present application. As shown in the figure, the communication device 10 may include a transceiver module 11 and a processing module 12 .

In a possible design, the communications apparatus 10 may correspond to the terminal device or UE in the above method embodiments.

Exemplarily, the communication device 10 may correspond to the terminal device or UE in the method 200 to the method 700 according to the embodiment of the present application, and the communication device 10 may include a method for executing the method 200 in FIG. 2 and the method in FIG. 3 300, the method 400 in FIG. 4, the method 500 in FIG. 5, the method 600 in FIG. 6, and the method 700 in FIG. 7 are modules of the method performed by the terminal device or UE. Moreover, each unit in the communication device 10 and the above-mentioned other operations and/or functions are for realizing the corresponding processes of the method 200 to the method 700 respectively.

The transceiver module 11 in the communication device 10 performs receiving and sending operations performed by the terminal equipment or UE in the above method embodiments, and the processing module 12 performs operations other than the receiving and sending operations.

In another possible design, the communication device 10 may correspond to the network equipment in the above method embodiments, such as an access and mobility management network element (or AMF).

Exemplarily, the communication device 10 may correspond to the network device in the method 200 to the method 700 according to the embodiment of the present application, and the communication device 10 may include a method for executing the method 200 in FIG. 2 , the method 300 in FIG. 3 , Modules of the methods executed by the network device (or the AMF) in the method 400 in FIG. 4 , the method 500 in FIG. 5 , the method 600 in FIG. 6 , and the method 700 in FIG. 7 . Moreover, each unit in the communication device 10 and the above-mentioned other operations and/or functions are for realizing the corresponding processes of the method 200 to the method 700 respectively.

The transceiver module 11 in the communication device 10 performs the receiving and sending operations performed by the network equipment or the AMF in the above method embodiments, and the processing module 12 performs operations other than the receiving and sending operations.

According to the foregoing method, FIG. 9 is a schematic diagram of a communication device 20 provided in an embodiment of the present application. As shown in FIG. 9, the device 20 may be a terminal device or a network device, and the network device may be, for example, a session management network element. It may also be a mobility management network element.

The device 20 may include a processor 21 (ie, an example of a processing module) and a memory 22 . The memory 22 is used to store instructions, and the processor 21 is used to execute the instructions stored in the memory 22, so that the apparatus 20 implements the terminal device or UE or network device or mobile management network element in the methods corresponding to FIGS. 2 to 7 or steps performed by AMF.

Further, the device 20 may further include an input port 23 (ie, an example of a transceiver module) and an output port 24 (ie, another example of a transceiver module). Further, the processor 21 , the memory 22 , the input port 23 and the output port 24 can communicate with each other through internal connection paths, and transmit control and/or data signals. The memory 22 is used to store a computer program, and the processor 21 can be used to call and run the computer program from the memory 22, to control the input port 23 to receive signals, and to control the output port 24 to send signals, so as to complete the network device in the above method step. The memory 22 can be integrated in the processor 21 or can be set separately from the processor 21 .

Optionally, if the communication device 20 is a communication device, the input port 23 is a receiver, and the output port 24 is a transmitter. Wherein, the receiver and the transmitter may be the same or different physical entities. When they are the same physical entity, they can be collectively referred to as transceivers.

Optionally, if the communication device 20 is a chip or a circuit, the input port 23 is an input interface, and the output port 24 is an output interface.

As an implementation, the functions of the input port 23 and the output port 24 may be realized by a transceiver circuit or a dedicated chip for transceiver. The processor 21 may be realized by a dedicated processing chip, a processing circuit, a processor or a general-purpose chip.

As another implementation manner, it may be considered to use a general-purpose computer to implement the communication device provided in the embodiment of the present application. The program codes to realize the functions of the processor 21 , the input port 23 and the output port 24 are stored in the memory 22 , and the general processor realizes the functions of the processor 21 , the input port 23 and the output port 24 by executing the codes in the memory 22 .

For the concepts, explanations, detailed descriptions and other steps involved in the device 20 related to the technical solutions provided by the embodiments of the present application, please refer to the foregoing methods or descriptions of these contents in other embodiments, and details are not repeated here.

FIG. 10 is a schematic structural diagram of a terminal device 30 provided in the present application. For ease of illustration, FIG. 10 only shows the main components of the communication device. As shown in FIG. 10 , the terminal device 30 includes a processor, a memory, a control circuit, an antenna, and an input and output device.

The processor is mainly used to process the communication protocol and communication data, and to control the entire terminal device, execute the software program, and process the data of the software program. described action. The memory is mainly used for storing software programs and data, such as storing the codebook described in the above embodiments. The control circuit is mainly used for conversion of baseband signal and radio frequency signal and processing of radio frequency signal. The control circuit and the antenna can also be called a transceiver, which is mainly used to send and receive radio frequency signals in the form of electromagnetic waves. Input and output devices, such as touch screens, display screens, and keyboards, are mainly used to receive data input by users and output data to users.

When the communication device is turned on, the processor can read the software program in the storage unit, interpret and execute the instructions of the software program, and process the data of the software program. When data needs to be sent wirelessly, the processor performs baseband processing on the data to be sent, and then outputs the baseband signal to the radio frequency circuit. When data is sent to the terminal device, the radio frequency circuit receives the radio frequency signal through the antenna, converts the radio frequency signal into a baseband signal, and outputs the baseband signal to the processor, and the processor converts the baseband signal into data and processes the data.

Those skilled in the art can understand that, for ease of illustration, FIG. 10 only shows a memory and a processor. In an actual terminal device, there may be multiple processors and memories. A storage may also be called a storage medium or a storage device, etc., which is not limited in this embodiment of the present application.

As an optional implementation, the processor may include a baseband processor and a central processing unit, the baseband processor is mainly used to process communication protocols and communication data, and the central processor is mainly used to control the entire terminal device, execute A software program that processes data for a software program. The processor in FIG. 10 integrates the functions of the baseband processor and the central processing unit. Those skilled in the art can understand that the baseband processor and the central processing unit may also be independent processors, interconnected through technologies such as a bus. Those skilled in the art can understand that a terminal device may include multiple baseband processors to adapt to different network standards, a terminal device may include multiple central processors to enhance its processing capability, and various components of the terminal device may be connected through various buses. The baseband processor may also be expressed as a baseband processing circuit or a baseband processing chip. The central processing unit may also be expressed as a central processing circuit or a central processing chip. The function of processing the communication protocol and communication data can be built in the processor, or can be stored in the storage unit in the form of a software program, and the processor executes the software program to realize the baseband processing function.

As shown in FIG. 10 , the terminal device 30 includes a transceiver unit 31 and a processing unit 32 . The transceiver unit may also be referred to as a transceiver, a transceiver, a transceiver device, and the like. Optionally, the device in the transceiver unit 31 for realizing the receiving function can be regarded as a receiving unit, and the device in the transceiver unit 31 for realizing the sending function can be regarded as a sending unit, that is, the transceiver unit 31 includes a receiving unit and a sending unit. Exemplarily, the receiving unit may also be called a receiver, receiver, receiving circuit, etc., and the sending unit may be called a transmitter, transmitter, or transmitting circuit, etc.

The terminal device shown in FIG. 10 may perform the actions performed by the terminal device or UE in the foregoing method 200 to method 700, and detailed description thereof is omitted here to avoid redundant description.

FIG. 11 shows a schematic structural diagram of a simplified network device 40 . Network equipment includes 41 parts and 42 parts. Part 41 is mainly used for the transmission and reception of radio frequency signals and the conversion between radio frequency signals and baseband signals; part 42 is mainly used for baseband processing and control of network equipment. Part 41 can generally be called a transceiver module, a transceiver, a transceiver circuit, or a transceiver, etc. The part 42 is generally the control center of the network device, which can be generally referred to as a processing module, and is used to control the network device to perform the processing operations on the network device side in the foregoing method embodiments.

The transceiver module in Part 41, which may also be called a transceiver or transceiver, etc., includes an antenna and a radio frequency circuit, wherein the radio frequency circuit is mainly used for radio frequency processing. For example, the device used to realize the receiving function in Part 41 can be regarded as a receiving module, and the device used to realize the sending function can be regarded as a sending module, that is, Part 41 includes a receiving module and a sending module. The receiving module may also be called a receiver, receiver, or receiving circuit, etc., and the sending module may be called a transmitter, transmitter, or transmitting circuit, etc.

Section 42 may include one or more single boards, and each single board may include one or more processors and one or more memories. The processor is used to read and execute programs in the memory to implement baseband processing functions and control network devices. If there are multiple single boards, each single board can be interconnected to enhance the processing capability. As an optional implementation, it is also possible that multiple single boards share one or more processors, or that multiple single boards share one or more memories, or that multiple single boards share one or more processors at the same time. device.

For example, in an implementation manner, the network device shown in FIG. 11 may be any network device shown in FIG. 2 to FIG. 7 , such as a mobility management network element, an AMF, and the like.

The transceiver module of part 41 is used to execute method 200 in FIG. 2 , method 300 in FIG. 3 , method 400 in FIG. 4 , method 500 in FIG. 5 , method 600 in FIG. 6 , and method 700 in FIG. 7 Steps related to sending and receiving of any network device; part 42 is used to execute the method 200 in FIG. 2, the method 300 in FIG. 3, the method 400 in FIG. 4, the method 500 in FIG. 5, the method 600 in FIG. Steps related to the processing of any network device in method 700 in 7.

It should be understood that FIG. 11 is only an example rather than a limitation, and the foregoing network device including a transceiver module and a processing module may not depend on the structure shown in FIG. 11 .

When the device 40 is a chip, the chip includes a transceiver module and a processing module. Wherein, the transceiver module may be an input-output circuit or a communication interface; the processing module is a processor or a microprocessor or an integrated circuit integrated on the chip.

The embodiment of the present application further provides a computer-readable storage medium, on which computer instructions for implementing the method executed by the first network device in the above method embodiment are stored.

For example, when the computer program is executed by a computer, the computer can implement the method performed by the network device in the foregoing method embodiments.

The embodiments of the present application also provide a computer program product including instructions, which, when executed by a computer, enable the computer to implement the method executed by the first device or the method executed by the second device in the above method embodiments.

An embodiment of the present application further provides a communication system, where the communication system includes the network device in the foregoing embodiments.

For explanations and beneficial effects of relevant content in any of the devices provided above, reference may be made to the corresponding method embodiments provided above, and details are not repeated here.

In the embodiment of the present application, the network device may include a hardware layer, an operating system layer running on the hardware layer, and an application layer running on the operating system layer. Wherein, the hardware layer may include hardware such as a central processing unit (central processing unit, CPU), a memory management unit (memory management unit, MMU), and memory (also called main memory). The operating system of the operating system layer can be any one or more computer operating systems that realize business processing through processes, for example, Linux operating system, Unix operating system, Android operating system, iOS operating system, or windows operating system. The application layer may include applications such as browsers, address books, word processing software, and instant messaging software.

The embodiment of the present application does not specifically limit the specific structure of the execution subject of the method provided in the embodiment of the present application, as long as the program that records the code of the method provided in the embodiment of the present application can be executed according to the method provided in the embodiment of the present application Just communicate. For example, the execution subject of the method provided by the embodiment of the present application may be a network device, or a functional module in the network device that can call a program and execute the program.

Various aspects or features of the present application can be implemented as a method, apparatus, or article of manufacture using standard programming and/or engineering techniques. The term "article of manufacture" as used herein may encompass a computer program accessible from any computer readable device, carrier or media. For example, computer-readable media may include, but are not limited to, magnetic storage devices (such as hard disks, floppy disks, or tapes, etc.), optical disks (such as compact discs (compact disc, CD), digital versatile discs (digital versatile disc, DVD), etc. ), smart cards and flash memory devices (for example, erasable programmable read-only memory (EPROM), card, stick or key drive, etc.).

Various storage media described herein can represent one or more devices and/or other machine-readable media for storing information. The term "machine-readable medium" may include, but is not limited to, wireless channels and various other media capable of storing, containing and/or carrying instructions and/or data.

It should be understood that the processor mentioned in the embodiment of the present application may be a central processing unit (central processing unit, CPU), and may also be other general processors, digital signal processors (digital signal processor, DSP), application specific integrated circuits ( application specific integrated circuit (ASIC), off-the-shelf programmable gate array (field programmable gate array, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor, or the processor may be any conventional processor, or the like.

It should also be understood that the memory mentioned in the embodiments of the present application may be a volatile memory or a nonvolatile memory, or may include both volatile and nonvolatile memories. Among them, the non-volatile memory can be read-only memory (read-only memory, ROM), programmable read-only memory (programmable ROM, PROM), erasable programmable read-only memory (erasable PROM, EPROM), electrically programmable Erases programmable read-only memory (electrically EPROM, EEPROM) or flash memory. The volatile memory may be random access memory (RAM). For example, RAM can be used as an external cache. As an example and not limitation, RAM may include the following forms: static random access memory (static RAM, SRAM), dynamic random access memory (dynamic RAM, DRAM), synchronous dynamic random access memory (synchronous DRAM, SDRAM) , double data rate synchronous dynamic random access memory (double data rate SDRAM, DDR SDRAM), enhanced synchronous dynamic random access memory (enhanced SDRAM, ESDRAM), synchronous connection dynamic random access memory (synchlink DRAM, SLDRAM) and Direct memory bus random access memory (direct rambus RAM, DR RAM).

It should be noted that when the processor is a general-purpose processor, DSP, ASIC, FPGA or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components, the memory (storage module) may be integrated in the processor.

It should also be noted that the memories described herein are intended to include, but are not limited to, these and any other suitable types of memories.

Those skilled in the art can appreciate that the units and steps of each example described in conjunction with the embodiments disclosed herein can be implemented by electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are executed by hardware or software depends on the specific application and design constraints of the technical solution. Professionals may use different methods to implement the described functions for each specific application, but such implementation should not be regarded as exceeding the protection scope of the present application.

Those skilled in the art can clearly understand that for the convenience and brevity of description, the specific working process of the above-described devices and units can refer to the corresponding process in the foregoing method embodiments, which will not be repeated here.

In the several embodiments provided in this application, it should be understood that the disclosed devices and methods may be implemented in other ways. For example, the device embodiments described above are only illustrative. For example, the division of the units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components can be combined or May be integrated into another system, or some features may be ignored, or not implemented. In addition, the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces, and the indirect coupling or communication connection of devices or units may be in electrical, mechanical or other forms.

The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place, or may be distributed to multiple network units. Part or all of the units can be selected according to actual needs to implement the solutions provided in this application.

In addition, each functional unit in each embodiment of the present application may be integrated into one unit, each unit may exist separately physically, or two or more units may be integrated into one unit.

In the above embodiments, all or part of them may be implemented by software, hardware, firmware or any combination thereof. When implemented using software, it may be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on the computer, the processes or functions according to the embodiments of the present application will be generated in whole or in part. The computer can be a general purpose computer, a special purpose computer, a computer network, or other programmable devices. For example, the computer may be a personal computer, a server, or a network device. The computer instructions may be stored in or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer instructions may be transmitted from a website, computer, server or data center Transmission to another website site, computer, server, or data center by wired (eg, coaxial cable, fiber optic, digital subscriber line (DSL)) or wireless (eg, infrared, wireless, microwave, etc.). The computer-readable storage medium may be any available medium that can be accessed by a computer, or a data storage device such as a server or a data center integrated with one or more available media. The available medium may be a magnetic medium, (for example, a floppy disk, a hard disk, a magnetic tape), an optical medium (for example, DVD), or a semiconductor medium (for example, a solid state disk (SSD)). For example, the aforementioned available The medium may include but not limited to: U disk, mobile hard disk, read-only memory (read-only memory, ROM), random access memory (random access memory, RAM), magnetic disk or optical disk and other media that can store program codes .

The above is only a specific embodiment of the application, but the scope of protection of the application is not limited thereto. Any person familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed in the application. All should be covered within the scope of protection of this application. Therefore, the protection scope of the present application shall be based on the protection scope of the claims and the specification.

Claims (25)

1. A method for group paging, comprising:

   The terminal device receives a group paging message, where the group paging message includes a first group identifier;

   The terminal device sends a service request message to the network device;

   receiving, by the terminal device, second indication information from the network device;

   The terminal device determines that there is an abnormality according to the second indication information.
2. The method according to claim 1, further comprising:

   The terminal device sends first indication information to the network device, where the first indication information is used to indicate that the terminal device has received the paging message carrying the first group identifier.
3. The method according to claim 1 or 2, characterized in that the method further comprises:

   If the terminal device determines that there is an abnormality, the terminal device does not respond to the paging message carrying the first group identifier.
4. The method according to claim 1 or 2, wherein the second indication information is used to indicate at least one of the following:

   The network device has not used the first group identifier to trigger group paging;

   A list of group identifiers activated by the network device, without the first group identifier in the list;

   There is an abnormality in the terminal device;

   The terminal device does not respond to the group paging message carrying the first group identifier;

   The first group has not been activated.
5. The method according to claim 3, wherein when the terminal device is abnormal, the terminal device does not respond to the paging message carrying the first group identifier, comprising:

   The terminal device does not respond to the paging message carrying the first group identifier within a first period of time.
6. The method according to claim 5, wherein the method further comprises:

   The terminal device determines the first time period according to pre-configuration information; or

   The terminal device receives the information of the first time period from the network device.
7. The method according to any one of claims 1 to 6, wherein the first group identifier is a temporary mobile group identifier.
8. The method according to any one of claims 1 to 7, wherein the first indication information is carried in a service request message.
9. A method for group paging, comprising:

   The network device receives a service request message from the terminal device;

   The network device judges whether the terminal device is abnormal.
10. The method according to claim 9, characterized in that the method further comprises:

    The network device receives first indication information from the terminal device, where the first indication information is used to indicate that the terminal device has received the paging message carrying the first group identifier.
11. The method according to claim 10, characterized in that the method further comprises:

    If the terminal device is abnormal, the network device sends second indication information to the terminal device, where the second indication information is used to indicate that the terminal device is abnormal.
12. The method according to claim 10 or 11, wherein when the terminal device is abnormal, the method further comprises:

    The network device updates the context of the terminal device, and the context of the terminal device indicates that when the network device needs to activate the first group, perform ordinary paging on the terminal device.
13. The method according to claim 12, wherein when the terminal device is abnormal, the method further comprises:

    The network device receives a first request message, where the first request message includes the first group identifier, and the first request message is used to request activation of the first group;

    The network device determines to perform normal paging on the terminal device according to the context of the terminal device;

    The network device sends a paging message to the terminal device, where the paging message includes an identifier of the terminal device, and the terminal device belongs to a group corresponding to the first group identifier.
14. The method according to any one of claims 9 to 13, wherein the network device judging whether the terminal device is abnormal includes:

    The network device judges that the terminal device is abnormal according to the first indication information.
15. The method according to claim 14, wherein the network device judges whether the terminal device is abnormal according to the first indication information, comprising:

    When the network device has not triggered the paging message carrying the first group identifier, the network device determines that the terminal device is abnormal; or

    When the identifier carried in the paging message sent by the network device to the terminal device is different from the first group identifier, the network device determines that the terminal device is abnormal.
16. The method according to any one of claims 9 to 15, wherein the second indication information is used to indicate at least one of the following:

    The network device has not used the first group identifier to trigger group paging;

    a list of group identities activated by the network device;

    The terminal device does not respond to the group paging message carrying the first group identifier;

    The first group has not been activated.
17. The method according to any one of claims 9 to 16, wherein when the terminal device is abnormal, the method further comprises:

    The network device sends information of a first time period to the terminal device, where the information of the first time period is used to indicate that the terminal device does not respond to the message carrying the first group identifier within the first time period. Group paging message.
18. The method according to any one of claims 9 to 17, wherein the first indication information is carried in a service request message.
19. The method according to any one of claims 9 to 18, wherein the first group identifier is a temporary mobile group identifier.
20. The method according to any one of claims 12 to 19, wherein the identifier of the terminal equipment includes a Globally Unique Temporary User Equipment Identifier (GUTI) of the terminal equipment.
21. A device for group paging, characterized by comprising a module for executing each step of the method according to any one of claims 1 to 8 or any one of claims 9 to 20.
22. A device for group paging, characterized in that it includes at least one processor, the at least one processor is coupled with at least one memory, and the at least one processor is used to execute computer programs or instructions stored in the at least one memory , so that the communication device executes the method according to any one of claims 1 to 8 or any one of claims 9 to 20.
23. A computer-readable storage medium, characterized in that a computer program is stored on the computer-readable storage medium, and when the computer program is run on a computer, the computer executes any one of claims 1 to 8. item or the method of any one of claims 9 to 20.
24. A computer program product, characterized in that the computer program product includes computer program code, and when the computer program code is run on a computer, any one of claims 1 to 8 or claims 9 to 20 Any one of the methods described is carried out.
25. A system-on-a-chip, characterized in that it includes: a processor, configured to call and run a computer program from a memory, so that a communication device installed with the system-on-a-chip executes any one of claims 1 to 8 or any one of claims 9 to 8. The method of any one of 20.

Images