WO2023160624A1 - 一种通信方法及装置 - Google Patents

一种通信方法及装置 Download PDF

Info

Publication number
WO2023160624A1
WO2023160624A1 PCT/CN2023/077943 CN2023077943W WO2023160624A1 WO 2023160624 A1 WO2023160624 A1 WO 2023160624A1 CN 2023077943 W CN2023077943 W CN 2023077943W WO 2023160624 A1 WO2023160624 A1 WO 2023160624A1
Authority
WO
WIPO (PCT)
Prior art keywords
network device
information
message
indication
positioning
Prior art date
Application number
PCT/CN2023/077943
Other languages
English (en)
French (fr)
Inventor
贾建鑫
吴问付
宗在峰
周润泽
Original Assignee
华为技术有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 华为技术有限公司 filed Critical 华为技术有限公司
Publication of WO2023160624A1 publication Critical patent/WO2023160624A1/zh

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/02—Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/02—Services making use of location information

Definitions

  • the present application relates to the technical field of communication, and in particular to a communication method and device.
  • 5G fifth-generation mobile communication
  • the positioning data related to the terminal needs to pass through the core network elements of the public network, so there is a risk of exposure of the terminal positioning data. Therefore, the security of the current positioning service process of the terminal device needs to be improved.
  • the present application provides a communication method and device, which are used to improve the security of a positioning service process of a terminal device.
  • the present application provides a communication method.
  • the communication method may be implemented by an access network device or a component in the access network device, such as at least one of a processor, a transceiver, a processing module, or a transceiver module.
  • the method includes: the access network device receives a radio resource control (Radio Resource Control, RRC) message from a terminal device, the radio resource control message includes a first indication, and the The radio resource control message further includes a non-access stratum (Non-Access Stratum, NAS) message, and the first indication is used to indicate that the non-access stratum message includes a location/positioning request (location/positioning Request) and/or a first positioning Information (positioning message): the access network device sends the non-access stratum message to a first network device according to the first indication, and the first network device is a campus network device.
  • RRC Radio Resource Control
  • NAS non-Access Stratum
  • the access network device can forward the positioning request and/or the first positioning information to the first network device according to the first indication, which can avoid exposing the positioning request and/or positioning information related to the positioning service to the public network core network
  • the network element can improve the security of positioning services.
  • the access network device receives a radio resource control message from a terminal device, the radio resource control message includes a first indication, the radio resource control message further includes a positioning request and/or first positioning information, and the first indication It is used to indicate that the positioning request and/or the first positioning information is sent to the first network device in the campus.
  • the access network device sends the positioning request and/or the first network device to the first network device according to the first indication or first positioning information, the first network device is a campus network device. Or,
  • the access network device receives a radio resource control message from a terminal device, the radio resource control message includes a first indication, the radio resource control message further includes a positioning request and/or first positioning information, and the first indication used to indicate that the positioning request and/or the first positioning information is sent to the first network device in the campus; the access network device sends the positioning request and/or the first network device to the first network device according to the first indication or first location information.
  • the radio resource control message includes a first indication
  • the radio resource control message further includes a positioning request and/or first positioning information
  • the first indication used to indicate that the positioning request and/or the first positioning information is sent to the first network device in the campus
  • the access network device sends the positioning request and/or the first network device to the first network device according to the first indication or first location information.
  • the access network device receives a radio resource control message from the terminal device, the radio resource control message includes a first indication, and the radio resource control (Radio Resource Control, RRC) message also includes a non-access stratum (Non-Access Stratum, NAS) message, the first indication is used to indicate that the non-access stratum message includes a positioning request and/or first positioning information; the access network device sends the first indication to the first network device according to the first indication The NAS message.”
  • RRC Radio Resource Control
  • NAS Non-Access Stratum
  • the access network device receives a radio resource control message from the terminal device, the radio resource control message includes a non-access stratum message, and the non-access stratum message includes a first indication, and the first indication is used to indicate the The non-access stratum message includes a location request (location/positioning Request) and/or first positioning information (positioning message); the access network device sends the non-access message to the first network device according to the first indication Layer message, the first network device is a campus network device.”. That is to say, the first indication may be carried in the non-access stratum message.
  • NAS message (NAS message) mentioned in this application can be replaced with “NAS message container (NAS message container)", “NAS protocol data unit (NAS Packet Data Unit, NAS PDU)", “NAS container (NAS container)” ,wait.
  • NAS message container NAS message container
  • NAS protocol data unit NAS Packet Data Unit, NAS PDU
  • NAS container NAS container
  • RRC radio resource control
  • Positioning Request (Positioning Request)" mentioned in this application may be replaced with “Location Request (Location Request)", for example, it may be a Mobile Originated Location Request (MO-LR) message initiated by a terminal.
  • MO-LR Mobile Originated Location Request
  • the "Positioning Message (Positioning Message)" mentioned in this application can be replaced with "Location message/Location information", for example, it can be Long Term Evolution Positioning Protocol message (LPP message), new wireless Positioning Protocol A message (NR Positioning Protocol A, NRPP message), New Radio Positioning message (New Radio Positioning message, NRP message), New Radio Positioning Protocol message (New Radio Positioning Protocol message, NRPP message), New Radio Enhanced Positioning message ( New Radio Advance Positioning Protocol message, NRAPP message), LPP protocol data unit PDU (LPP PDU), positioning protocol PDU (Positioning Protocol PDU, PP PDU), new wireless positioning protocol PDU (New Radio Positioning Protocol PDU, NPP PDU), new Wireless Enhanced Positioning Protocol PDU (New Radio Advance Positioning Protocol PDU, NRAPP PDU), etc.
  • LPP message Long Term Evolution Positioning Protocol message
  • NR Positioning Protocol A NR Positioning Protocol A, NRPP message
  • New Radio Positioning message New Radio
  • the access network device sends the positioning request and/or the first positioning information to the first network device according to the first indication, and the first network device is a campus network device
  • the access network device sends the location request and/or the first location information to the first network device according to the first indication"
  • the first network device may be a network device in the public network, or, in other words, the first network device may be a non-campus network device.
  • the first network device may be a campus network device.
  • the first network device is a campus network device
  • the access network device sends the location request and/or the first location information to the first network device according to the first indication, and the first network device is a campus network device
  • the network device sends the location request and/or the first location information to the campus network device according to the first indication.
  • the "campus network or campus” mentioned in this application can be replaced by any of the following words, without limitation:
  • Non-Public Network NPN
  • Non-Carrier Network Factory Network
  • Vertical Network Edge Network
  • Edge Hosting Environment Edge Computing Edge computing network
  • premises network premises, premises, etc.
  • Public network or non-campus network or non-campus mentioned in this application can be replaced by any of the following words, without limitation:
  • Public network Public network, carrier network, etc.
  • the first indication is used to indicate that the positioning request and/or the first positioning information is sent to the first network device on the campus
  • the first indication may be replaced by the fact that the first indication is used to indicate that the NAS
  • the message includes a positioning request and/or first positioning information.
  • the access network device may further receive the positioning request reply and/or the second positioning information from the first network device.
  • the access network device may also send the positioning request reply and/or the second positioning information to the terminal device.
  • the access network device can receive the positioning request reply and/or the second positioning information from the first network device and forward it to the terminal device, so as to realize the interaction between the terminal device and the network side on positioning information and improve communication reliability. and communication efficiency.
  • the access network device may further send first information to the second network device, where the first information is used to instruct the second network device to provide or select the information of the first network device , or the first information is used to request the information of the first network device; the access network device may also receive the information of the first network device from the second network device.
  • the access network device may request the information of the first network device from the second network device, so as to establish a connection with the first network device, so as to improve communication reliability and communication efficiency.
  • the “information of the first network device” mentioned in this application may refer to any one or more of the following, without limitation:
  • the first network device may include an access function network element, and the access function network element may be an access and mobility management function network element (AMF); or, the first network device may include a location function network element, and the location function network element It may be a location management function network element (LMF); or, the first network device may include a network element that is jointly established by an access function network element and a location function network element, for example, may be a network element that is jointly established by an AMF and an LMF; or, The first network device may include a gateway mobile location center (Gateway Mobile Location Center, GMLC); or, the first network device may include a network element jointly established by LMF and GMLC; or, the first network device may include a position extraction function network element ( Location Retrieval Function, LRF); Or, the first network equipment can comprise the network element that LMF and GMLC and LRF are jointly established; Or, the first network equipment can comprise the network element that LRF and GMLC are jointly established; Or, the first network equipment can be Including a server,
  • the "second network device” mentioned in this application may include an access function network element, and the access function network element may be an access and mobile Management function network element (AMF), public network (Public network) AMF, carrier network AMF, non-campus network AMF, non-campus AMF, etc.
  • AMF access and mobile Management function network element
  • Public network public network
  • AMF public network
  • carrier network AMF carrier network AMF
  • non-campus network AMF non-campus AMF
  • non-campus AMF non-campus AMF
  • the access network device establishes a stream control transmission protocol coupling (SCTP association) with the first network device.
  • SCTP association stream control transmission protocol coupling
  • the access network device can establish an SCTP connection with the first network device after obtaining the information of the first network device, so as to transmit the positioning information of the terminal device later, thereby improving communication reliability and communication efficiency.
  • the "the access network device establishes a Stream Control Transmission Protocol coupling (SCTP association) with the first network device” may be replaced with the following description, and the following descriptions may also be replaced with each other:
  • the access network device establishes a connection with the first network device
  • the access network device establishes an association with the first network device.
  • the access network device establishes a control plane connection with the first network device
  • the access network device establishes a transport network layer association (Transport Network Layer association, TNL association) with the first network device
  • the embodiment of the present application provides a communication method.
  • the communication method may be implemented by a terminal device or a component of the terminal device, such as at least one of a processor, a transceiver, a processing module, or a transceiver module.
  • the method includes: the terminal device sends a radio resource control message to the access network device, the radio resource control message includes a first indication, and the radio resource control message further includes a NAS message, the The first indication is used to indicate that the NAS message includes a positioning request and/or first positioning information.
  • the terminal device sends a radio resource control message to the access network device, the radio resource control message includes a first indication, the radio resource control message also includes a positioning request and/or first positioning information, and the first indication is used for Instructing the positioning request and/or the first positioning information to be sent to the first network device in the park.”
  • the terminal device sends a radio resource control message to the access network device, the radio resource control message includes a first indication, the radio resource control message also includes a positioning request and/or first positioning information, and the first indication is used for Instruct the access network device to send the positioning request and/or the first positioning information to the first network device in the campus.”
  • the terminal device may further receive a positioning request reply and/or second positioning information from the access network device.
  • the terminal device may further receive a second indication, where the second indication is used to instruct sending the first indication.
  • the terminal device may send the first indication according to the second indication, so as to implement the management of the behavior of the terminal device by the network.
  • the second indication may come from the second network device, and the explanation of the second network device is the same as that described in the corresponding explanation of the first aspect of the present application, and will not be repeated here.
  • this application does not limit the terminal device to send the first indication according to the local configuration, that is, for example, the terminal device may not receive the second indication, but can still send the first indication, or, in other words, the terminal device may not need to send the first indication according to The second indication is used to send the first indication, and the terminal device itself may send the first indication.
  • the second indication is used to instruct to send the first indication
  • the second indication can also be replaced with “the second indication can be used to trigger or indicate or configure the sending of the first indication", or, “the second indication can be used for the first Instructions to send", etc.
  • the second indication may be used to indicate that the positioning request and/or the first The positioning information is encrypted; or, the second indication is used to indicate that the positioning request and/or the first positioning information are encrypted in a first encryption manner.
  • the terminal device may not encrypt or encrypt the location request and/or the first location information in a first encryption manner, so that the first network device can accurately parse it.
  • the first encryption manner may be an encryption manner that can be decrypted by the first network device.
  • the second indication is carried in a Non-Access Stratum (NAS) Security Mode Command (Security Mode Command, SMC) or a Registration Accept (Registration Accept) message.
  • NAS Non-Access Stratum
  • SMC Security Mode Command
  • Registration Accept Registration Accept
  • the location request and/or the first location information are carried in a non-access stratum protocol data unit (NAS PDU).
  • NAS PDU non-access stratum protocol data unit
  • NAS PDU can be replaced by "NAS message”, “NAS information”, “NAS container”, “NAS message container”, etc.
  • NAS message container can be replaced by "NAS message”, “NAS information”, “NAS container”, “NAS message container”, etc.
  • NAS message container can be replaced by "NAS message”, “NAS information”, “NAS container”, “NAS message container”, etc.
  • above terms can also be replaced with each other without limitation.
  • the embodiment of the present application provides a communication method.
  • the communication method may be implemented by the second network device or components of the second network device, such as at least one of a processor, a transceiver, a processing module, or a transceiver module.
  • the second network device may include that the second network device may be an AMF or other network elements in the public network of the core network.
  • the method includes: the second network device receives a fourth message from the terminal device; the second network device sends a second indication to the terminal device according to the fourth message; wherein , the second indication is used to instruct the terminal device to send the first indication, and the first indication is used to indicate or indicate or characterize that the NAS message includes the location request and/or the first location information.
  • the second network device can instruct the terminal device to send the first instruction, so as to implement the management of the behavior of the terminal device by the network.
  • the second network device receives the fourth message from the terminal device; the second network device sends a second indication to the terminal device; wherein, the second indication is used to instruct the terminal device to send the first indication, and the The first indication is used to indicate or indicate or characterize that the NAS message includes a positioning request and/or first positioning information.”, or,
  • the second network device receives the fourth message from the terminal device; the second network device sends a second indication to the terminal device; wherein, the second indication is used to instruct the terminal device to send the first indication, and the The first indication is used to indicate or represent or characterize that the positioning request and/or the first positioning information is sent to the first network device in the campus.”
  • the second network device may send the second indication after receiving the fourth message, or send the second indication while receiving the fourth message, which is not specifically limited.
  • the fourth message may be any of the following:
  • the second indication may be used to indicate that the positioning request and/or the first positioning information shall not be encrypted; or, the second indication may be used to indicate that the positioning request and/or the first positioning information shall not be encrypted; /or the first location information is encrypted according to the first encryption method.
  • the second network device may further determine that the terminal device is associated with a positioning service.
  • the second network device may send the second indication to the terminal device after determining that the terminal device is associated with the positioning service, so as to accurately determine the terminal device that needs to send the first indication, and further improve the security of the positioning service.
  • the second network device may determine (determine) that the subscription information of the terminal device includes positioning service information.
  • the positioning service information may include relevant information of the positioning service, for example, whether the terminal device has the parameters of the park service; another example, whether the terminal device signs the parameters of the park business (to business, To B); another example, the terminal device signs Parameters of the park service; another example, the terminal device has the parameters of the park service; and so on.
  • positioning business information can be understood as or replaced with relevant parameters for business customers (to business, to B).
  • the second network device may further send the information of the first network device to the access network device, where the first network device is a campus network device.
  • the second network device may further receive first information from the access network device, where the first information is used to instruct the second network device to provide the information of the first network device , or the first information is used to request information of the first network device.
  • the second network device receives a fifth message from the first network device, where the fifth message is used to extract or obtain information about the terminal device, and the fifth message carries the logo.
  • the second network device sends a reply message of the fifth message to the first network device, and the reply message of the fifth message carries information of the terminal device.
  • the information of the terminal device may be any of the following:
  • Part or all of the context (UE context) of the terminal device part or all of the subscription information of the terminal device, part or all of the registration information of the terminal device, part or all of the configuration information of the terminal device, etc.
  • the identifier of the terminal device may be a permanent subscriber identifier (subscription permanent identifier, SUPI), a subscriber concealed identifier (subscription concealed identifier, SUCI), a general public subscription identifier (generic public subscription identifier, GPSI), a permanent Equipment identifier (permanent equipment identifier, PEI), international mobile subscriber identity (international mobile subscriber identity, IMSI), globally unique temporary identity (globally unique temporary identity, GUTI), etc., are not limited in this application.
  • the identifier of the terminal device may also include an NG application layer protocol (NG application protocol, NGAP) identifier (NGAP UE ID).
  • the NGAP UE ID may include the RAN NGAP UE ID assigned by the access network device (such as the RAN NGAP UE ID assigned by the RAN to the UE after receiving the first message) and/or the AMF NGAP UE ID assigned by the public network AMF.
  • the fifth message may be a request to transfer the context of the terminal device (Namf_Communication_UEContextTransfer), or the fifth message may be a new message or other messages, but its function is to request the transfer of the context of the terminal device; correspondingly,
  • the reply message of the fifth message can be a reply (Namf_Communication_UEContextTransfer response) requesting the context of the terminal device, or the reply of the fifth message can be a new message or other messages, but its function is to transmit the context of the terminal device.
  • the present application further provides a communication device, where the communication device may be an access network device or a component in the access network device.
  • the communication device has a function of implementing the above first aspect or the method in each possible implementation manner of the first aspect.
  • the functions described above may be implemented by hardware, or may be implemented by executing corresponding software on the hardware.
  • the hardware or software includes one or more modules corresponding to the above functions.
  • the structure of the communication device includes a communication module and a processing module, and these modules or units can perform the corresponding functions in the above-mentioned first aspect or in each possible implementation manner of the first aspect.
  • a communication module may include a receiving module and/or a sending module.
  • the structure of the communication device includes a communication interface and a processor, and optionally also includes a memory, and the communication interface is used to send and receive information or data, and to communicate with other devices in the communication network
  • the processor is configured to support the communication device to execute corresponding functions in the above first aspect or in each possible implementation manner of the first aspect.
  • the memory coupled to the processor, holds program instructions and data necessary for the communication device.
  • the present application also provides a communication device, and the communication device may be a terminal device or a terminal device components in .
  • the communication device has a function of implementing the above second aspect or the method in each possible implementation manner of the second aspect.
  • the functions described above may be implemented by hardware, or may be implemented by executing corresponding software on the hardware.
  • the hardware or software includes one or more modules corresponding to the above functions.
  • the structure of the communication device includes a communication module and a processing module, and these modules or units can perform the corresponding functions in the above second aspect or in each possible implementation manner of the second aspect.
  • a communication module may include a receiving module and/or a sending module.
  • the structure of the communication device includes a communication interface and a processor, and optionally also includes a memory, and the communication interface is used to send and receive information or data, and to communicate with other devices in the communication network
  • the processor is configured to support the communication device to execute the corresponding functions in the above second aspect or in each possible implementation manner of the second aspect.
  • the memory coupled to the processor, holds program instructions and data necessary for the communication device.
  • the present application further provides a communication device, where the communication device may be a second network device or a component in the second network device.
  • the communication device has a function of implementing the third aspect or the method in each possible implementation manner of the third aspect.
  • the functions described above may be implemented by hardware, or may be implemented by executing corresponding software on the hardware.
  • the hardware or software includes one or more modules corresponding to the above functions.
  • the structure of the communication device includes a communication module and a processing module, and these modules or units can perform the corresponding functions in the third aspect or each possible implementation example of the third aspect.
  • a communication module may include a receiving module and/or a sending module.
  • the structure of the communication device includes a communication interface and a processor, and optionally also includes a memory, and the communication interface is used to send and receive information or data, and to communicate with other devices in the communication network
  • the processor is configured to support the communication device to perform corresponding functions in the third aspect or each possible implementation example of the third aspect.
  • the memory coupled to the processor, holds program instructions and data necessary for the communication device.
  • the embodiment of the present application provides a communication system, which may include the communication device described in the fourth aspect, the fifth aspect, and the sixth aspect and any possible implementation thereof.
  • the embodiments of the present application provide a computer-readable storage medium, the computer-readable storage medium stores program instructions, and when the program instructions are run on the computer, the computer executes the first aspect to the first aspect of the present application.
  • Exemplary, computer readable storage media may be any available media that can be accessed by a computer.
  • computer readable media may include non-transitory computer readable media, random-access memory (random-access memory, RAM), read-only memory (read-only memory, ROM), electrically erasable Except for electrically programmable read-only memory (electrically EPROM, EEPROM), CD-ROM or other optical disk storage, magnetic disk storage medium or other magnetic storage device, or can be used to carry or store the desired program code in the form of instruction or data structure and can Any other media accessed by a computer.
  • random-access memory random-access memory
  • read-only memory read-only memory
  • ROM read-only memory
  • the embodiment of the present application provides a computer program product, including computer program codes or instructions, when the computer program codes or instructions are run on a computer, so that the above-mentioned first to third aspects or any of them are possible The methods described in the implementations are performed.
  • the present application also provides a chip, including a processor, the processor is coupled to a memory, and is used to read and execute program instructions stored in the memory, so that the chip realizes the first aspect above To the method described in the third aspect or any of its possible implementations.
  • FIG. 1A is a schematic structural diagram of a communication system provided by an embodiment of the present application.
  • FIG. 1B is a schematic structural diagram of another communication system provided by an embodiment of the present application.
  • FIG. 2 is a schematic structural diagram of another communication system provided by an embodiment of the present application.
  • FIG. 3 is a schematic structural diagram of another communication system provided by an embodiment of the present application.
  • FIG. 4A is a schematic flowchart of a communication method provided in an embodiment of the present application.
  • FIG. 4B is a schematic flowchart of another communication method provided by the embodiment of the present application.
  • FIG. 4C is a schematic flowchart of another communication method provided by the embodiment of the present application.
  • FIG. 5 is a schematic flowchart of another communication method provided by the embodiment of the present application.
  • FIG. 6 is a schematic flowchart of another communication method provided by the embodiment of the present application.
  • FIG. 7 is a schematic flowchart of another communication method provided by the embodiment of the present application.
  • FIG. 8 is a schematic structural diagram of a communication device provided by an embodiment of the present application.
  • FIG. 9 is a schematic structural diagram of another communication device provided by an embodiment of the present application.
  • User equipment also called terminal equipment, is a device with a wireless transceiver function, which can be accessed via a (wireless) access network device (radio access network, (R)AN)
  • R radio access network
  • An access device communicates with one or more core network (core network, CN) devices (or may also be referred to as core devices).
  • core network CN
  • User equipment may also be called an access terminal, terminal, subscriber unit, subscriber station, mobile station, mobile station, remote station, remote terminal, mobile device, user terminal, user agent, or user device, among others.
  • User equipment can be deployed (deployed in) on land, including indoor or outdoor, hand-held or vehicle-mounted; it can also be deployed on water (such as ships, etc.); it can also be deployed in the air (such as aircraft, balloons, and satellites, etc.).
  • the user equipment may be a cellular phone, a cordless phone, a session initiation protocol (SIP) phone, a smart phone, a mobile phone, a wireless local loop (WLL) Station, personal digital assistant (PDA), etc.
  • SIP session initiation protocol
  • WLL wireless local loop
  • PDA personal digital assistant
  • the user equipment can also be a handheld device with wireless communication function, a computing device or other devices connected to a wireless modem, a vehicle device, a wearable device, a drone device or a terminal in the Internet of Things, the Internet of Vehicles, the fifth generation Mobile communication (5th-generation, 5G) network and any form of terminal in the future network, relay user equipment or terminal in the future evolved PLMN, etc.
  • the relay user equipment may be, for example, a 5G residential gateway (residential gateway, RG).
  • the user equipment may be a virtual reality (virtual reality, VR) terminal, an augmented reality (augmented reality, AR) terminal, a wireless terminal in industrial control (industrial control), a wireless terminal in self-driving (self driving), telemedicine Wireless in (remote medical) Terminals, wireless terminals in smart grid, wireless terminals in transportation safety, wireless terminals in smart city, wireless terminals in smart home, etc.
  • VR virtual reality
  • AR augmented reality
  • self-driving self driving
  • telemedicine Wireless in (remote medical) Terminals wireless terminals in smart grid, wireless terminals in transportation safety, wireless terminals in smart city, wireless terminals in smart home, etc.
  • the embodiment of the present application does not limit the type or category of the terminal device.
  • the user equipment may also include end-side equipment, such as a local switch (local switch, LSW), and/or customer premise equipment (customer premise equipment, CPE), or the user equipment may access the network through the LSE or the CPE.
  • end-side equipment such as a local switch (local switch, LSW), and/or customer premise equipment (customer premise equipment, CPE), or the user equipment may access the network through the LSE or the CPE.
  • LSW local switch
  • CPE customer premise equipment
  • a user equipment (user equipment, UE) registered on the network may be understood as a user.
  • One of the UEs may correspond to a subscriber identity module (SIM) card, that is, when a terminal device is installed with a SIM card, the terminal device corresponds to a user UE; when a terminal device is installed with multiple SIM cards, the terminal device corresponds to Multiple UEs.
  • SIM subscriber identity module
  • a network device refers to a device that can provide a wireless access function for a terminal.
  • the network device may support at least one wireless communication technology, such as long term evolution (long term evolution, LTE), new radio (new radio, NR), wideband code division multiple access (wideband code division multiple access, WCDMA), etc.
  • the network device may include a core network (CN) device, and the CN device includes, for example, an AMF and the like.
  • CN core network
  • (wireless) access network equipment can be used to provide network access functions for authorized user equipment in a specific area, and can use transmission tunnels of different qualities according to the level of user equipment and service requirements.
  • (R)AN can manage wireless resources, provide access services for user equipment, and then complete the forwarding of control signals and user equipment data between user equipment and the core network.
  • (R)AN can also be understood as a base station in a traditional network.
  • the access network device in the embodiment of the present application may be any communication device with a wireless transceiver function for communicating with the user equipment.
  • the access network equipment includes but not limited to: evolved Node B (evolved Node B, eNB), radio network controller (radio network controller, RNC), Node B (Node B, NB), base station controller (base station controller) , BSC), base transceiver station (base transceiver station, BTS), home base station (home evolved NodeB, HeNB, or home Node B, HNB), baseband unit (baseBand unit, BBU), wireless fidelity (wireless fidelity, WIFI)
  • the access point (access point, AP), wireless relay node, wireless backhaul node, transmission point (transmission point, TP) or transmission and reception point (transmission and reception point, TRP) in the system can also be 5G, For example, NR, gNB in the system, or, transmission point (TRP or TP), one or a group (including multiple antenna panels) antenna
  • a gNB may include a centralized unit (CU) and a DU.
  • the gNB may also include an active antenna unit (AAU).
  • the CU implements some functions of the gNB, and the DU implements some functions of the gNB.
  • the CU is responsible for processing non-real-time protocols and services, and realizing functions of radio resource control (radio resource control, RRC) and packet data convergence protocol (packet data convergence protocol, PDCP) layers.
  • the DU is responsible for processing physical layer protocols and real-time services, and realizes functions of a radio link control (radio link control, RLC) layer, a media access control (media access control, MAC) layer, and a physical (physical, PHY) layer.
  • the AAU implements some physical layer processing functions, radio frequency processing and related functions of active antennas. Since the information of the RRC layer will eventually become the information of the PHY layer, or be transformed from the information of the PHY layer, under this architecture, high-level signaling, such as RRC layer signaling, can also be considered to be sent by the DU , or, sent by DU+AAU.
  • the access network device may be a device including one or more of a CU node, a DU node, and an AAU node.
  • the CU can be divided into access network devices in an access network (radio access network, RAN), and can also be divided into The CU is divided into access network devices in a core network (core network, CN), which is not limited in this application.
  • User plane network element used for packet routing and forwarding and quality of service (QoS) processing of user plane data.
  • QoS quality of service
  • the user plane network element may be a user plane function (user plane function, UPF) network element.
  • UPF user plane function
  • the user plane network element may still be a UPF network element, or may have other names, which are not limited in this application.
  • Data network element used to provide a network for transmitting data.
  • the data network element may be a data network (data network, DN) network element.
  • the data network element may still be a DN network element, or may have other names, which are not limited in this application.
  • Authentication server used to perform security authentication of users.
  • the authentication server may be an authentication server function (authentication server function, AUSF).
  • Mobility management network element mainly used for mobility management and access management.
  • the access management network element may be an access and mobility management function (access and mobility management function, AMF), which mainly performs functions such as mobility management and access authentication/authorization.
  • AMF access and mobility management function
  • PCF policy control function
  • Session management network element mainly used for session management, Internet protocol (internet protocol, IP) address allocation and management of user equipment, selection of manageable user plane functions, endpoints of policy control and charging function interfaces, and downlink data notification, etc. .
  • Internet protocol Internet protocol, IP
  • the session management network element may be a session management function (session management function, SMF) network element, which completes terminal IP address allocation, UPF selection, and charging and QoS policy control.
  • SMF session management function
  • the application network element can be an application function (application function, AF) network element, which represents the application function of a third party or an operator, and is an interface for the 5G network to obtain external application data, mainly used for Transfer the requirements from the application side to the network side.
  • AF application function
  • Unified data management network element responsible for the management of user identification, contract data, authentication data, and user service network element registration management.
  • the unified data management network element may be unified data management (unified data management, UDM).
  • Policy control network element including user subscription data management function, policy control function, billing policy control function, service quality (quality of service, QoS) control, etc., used to guide the unified policy framework of network behavior, as the control plane function network element (such as AMF, SMF network element, etc.) provide policy rule information, etc.
  • control plane function network element such as AMF, SMF network element, etc.
  • the policy control network element may be a PCF.
  • Network function repository function network element provide the storage function and selection function of network function entity information for other core network elements.
  • the network element may be a network function repository function (network function repository function, NRF).
  • the network open network element can be a network open function (network element function, NEF) network element, which is mainly used to expose the services and capabilities of the 3GPP network function to the AF, and also allow the AF Provides information to 3GPP network functions.
  • NEF network element function
  • Network slice selection function network element responsible for selecting network slices for the UE.
  • this application network element can be a network slice selection function (network slice selection function, NSSF) network element.
  • NSSF network slice selection function
  • the above-mentioned network elements or devices can still be used in 5G communication systems
  • the functions of the above-mentioned network element or device may be performed by an independent network element, or jointly performed by several network elements.
  • network elements in the core network can be deployed on the same or different physical devices.
  • the AMF and the SMF may be deployed on the same physical device.
  • the network elements of the 5G core network can be deployed on the same physical device as the network elements of the 4G core network. This embodiment of the present application does not limit it.
  • the application network element may be an application function (application function, AF) network element.
  • the application network element may still be an AF network element, or may have other names, which are not limited in this application.
  • Figure 1A and Figure 1B are schematic diagrams of the fifth generation (5th generation, 5G) network architecture, wherein Figure 1A is a schematic diagram of a 5G network architecture under a non-service architecture, and Figure 1B is a service architecture (service-based architecture, Schematic diagram of 5G network architecture under SBA).
  • service architecture is the basic architecture of the 5G network.
  • Servitization is mainly reflected in the control plane.
  • SBA is to define network functions as several "service” modules that can be flexibly invoked according to the three principles of "self-contained, reusable, and independent management". Based on this, operators can flexibly customize networking according to business needs.
  • FIG. 1B is a schematic diagram of an exemplary service-oriented architecture of a 5G network.
  • core network elements can communicate with other core network elements through service-oriented interfaces.
  • service-oriented interfaces corresponding to AMF are It is called a Namf interface
  • the interface corresponding to the LMF can be called an Nlmf interface.
  • the 5G network architecture shown in FIG. 1A and FIG. 1B may include three parts, namely a terminal, a DN and an operator network.
  • the functions of some of the network elements are briefly introduced and described below.
  • the operator network may include but not limited to one or more of the following network elements: AUSF, PCF, UDM, AF, AMF, SMF network elements, (R)AN) equipment, UPF, and NSSF.
  • network elements or devices other than radio access network devices may be referred to as core network elements or core network devices.
  • the N1 interface is the signaling plane interface between the AMF and the UE, and is used for exchanging signaling messages between the core network and the UE, such as UE registration to the network, UE establishment of a PDU session, and network side configuration of UE policies.
  • the N2 interface is an interface between the AMF and the RAN, and is used to transmit radio bearer control information from the core network to the RAN.
  • the N3 interface is an interface between (R)AN and UPF, and is used to transfer UE service data between RAN and UPF.
  • the N4 interface is the interface between the SMF and the UPF, and is used to transfer information between the control plane and the user plane, including the control plane terminal equipment completing the network access operation according to the contract information with the operator.
  • the N6 interface is an interface between the UPF and the DN, and is used to transfer UE service data between the UPF and the DN.
  • the N5 interface is an interface between the PCF and the AF.
  • the N7 interface is the interface between the PCF and the SMF, and is used to deliver PDU session granularity and service data flow granularity control policies.
  • N8 interface is the interface between AMF and UDM, which is used for AMF to obtain subscription data and authentication data related to access and mobility management from UDM, and for AMF to register UE current mobility management related information with UDM.
  • the N9 interface is the interface between two UPFs.
  • the N9 interface is an interface between an intermediate UPF (intermediate UPF, I-UPF) and a UPF serving as a PDU session anchor (PDU session anchor, PSA).
  • I-UPF intermediate UPF
  • PSA PDU session anchor
  • the N10 interface is the interface between the SMF and the UDM, and is used for the SMF to obtain session management-related subscription data from the UDM, and for the SMF to register UE current session-related information with the UDM.
  • the N11 interface is the interface between the SMF and the AMF, and is used to transfer the PDU session tunnel information between the RAN and the UPF, the control message sent to the UE, the radio resource control information sent to the RAN, etc.
  • N12 interface including the interface between AMF and AUSF.
  • N13 interface including the interface between AUSF and UDM.
  • N22 interface including the interface between NSSF and AMF.
  • the above-mentioned network element or function may be a network element in a hardware device, or a software function running on dedicated hardware, or a virtualization function instantiated on a platform (for example, a cloud platform).
  • a platform for example, a cloud platform.
  • the foregoing network element or function may be implemented by one device, or jointly implemented by multiple devices, or may be a functional module in one device, which is not specifically limited in this embodiment of the present application.
  • the session management network element, user plane network element, and mobility management network element in this application can be the SMF, UPF, and AMF in FIG.
  • the above-mentioned network elements with functions of SMF, UPF, and AMF are not limited in this application.
  • SMF, UPF, and AMF are respectively used as an example of a session management network element, a user plane network element, and a mobility management network element for description.
  • the network architecture used to support location-based services provided by the current technical specification.
  • the architecture can be extended on the basis of the architecture shown in FIG. 1A or FIG. 1B .
  • the gateway mobile location center GMLC
  • the location retrieval function LRF
  • LRF location retrieval function
  • a location service (location service, LCS) client LCS Client
  • LCS Client location service client
  • LCS Client location management function client
  • NL1 is the interface between AMF and LMF.
  • NL7 is the interface between LMF and LMF.
  • N52 is the interface between UDM and NEF.
  • NL2 is the interface between AMF and GMLC.
  • NL5 is the interface between NEF and GMLC.
  • N33 is the interface between the NEF and the AF.
  • N51 is the interface between AMF and NEF.
  • the LMF can be deployed closer to the UE, for example, in the campus where the UE is located (or referred to as the campus network).
  • the park can also be replaced by one or more of the following: operator network, public network, non-public network, non-operator network, factory network, vertical industry network (vertical network) , independent non-public network (standalone non-public network, SNPN), PIN-NPN, public network integrated non-public network (public network integrated non-public network, PNI-NPN), business premises (premises), or edge application Environment (edge hosting environment, EHE).
  • the LMF may be deployed in the campus network to locate UEs in the campus network.
  • the UE can also access the operator's network through NG-RAN, and the positioning message or positioning information between the LMF and the UE (hereinafter referred to as messages related to positioning services) will pass through the public network AMF Transmission will bring about the exposure of positioning messages or positioning information. Therefore, the security of the current UE positioning service needs to be improved.
  • the interface between the public network AMF and the N2 campus agent may be NL1 or N14 (not shown in the figure).
  • the interface between the AMF and the campus LMF may be NL1.
  • NL5 is the interface between NEF and GMLC.
  • N33 is the interface between NEF and positioning applications (such as AF).
  • the positioning message or positioning information of the UE may include a mobile originated location request (MO-LR) message generated by the UE, a mobile terminated location request (MT-LR) message based on the UE, an LTE Compared with the MT-LR message, the MO-LR message is initiated by the UE.
  • MO-LR mobile originated location request
  • MT-LR mobile terminated location request
  • the embodiment of this application provides a communication method.
  • This method can send the location-related message initiated by the UE to the campus AMF (or the campus N2 agent) without the awareness of the public network AMF, thus improving the security of the UE location service.
  • the method may be implemented by at least one of a terminal device (hereinafter, UE is used as an example), an access network device, a first network device, and a second network device.
  • the first network device may be an AMF in the campus, a proxy, or an LMF co-established with the AMF.
  • the second network device may be an AMF or other network elements in the public network of the core network.
  • the communication method provided by the embodiment of the present application may include the following steps:
  • the terminal device sends a radio resource control message to the access network device.
  • the access network device receives the radio resource control message from the terminal device.
  • the radio resource control message includes a first indication
  • the radio resource control message may further include a non-access stratum (non-access stratum, NAS) PDU.
  • the radio resource control message may be an RRC message.
  • the first indication may be used to indicate that the NAS PDU includes a positioning request and/or first positioning information.
  • the first positioning information belongs to positioning information, and for the positioning information, refer to the explanation in this application, which will not be repeated here.
  • S101 may also be replaced by: the radio resource control message includes a first indication and second information, and the second information includes a positioning request and/or positioning information (hereinafter, the positioning information may be referred to as first positioning information).
  • the first indication may be used to indicate that the second information includes a positioning request and/or positioning information.
  • the positioning request may be an MO-LR message.
  • the second information may be carried in the NAS PDU of the radio resource control message.
  • the terminal device when it needs to send a positioning request and/or positioning information, it may send the first indication and the positioning request and/or positioning information. Among them, the terminal device needs to send a positioning request and/or positioning information, which may be because it needs to initiate a positioning service for the terminal device by sending a positioning request, or it needs to send positioning information (that is, the first positioning information) to the network side, for example, the terminal The device has received a request for location information from the network side.
  • the NAS PDU or the second information includes a positioning request and/or the first positioning information
  • the first indication may be used to indicate that the content carried by the NAS PDU or the second information includes the positioning request and/or the first positioning information.
  • Information in other words, in the prior art, the access network equipment cannot recognize or see the contents of the NAS PDU or the second information, the function of the first indication can be understood as telling or instructing the access network equipment, NAS PDU or the second information
  • the content in the information includes a positioning request and/or first positioning information.
  • the first indication may be used to indicate that the NAS PDU or the second information is sent to the first network device of the campus. For example, if the second information includes a location request, the first indication may be used to indicate that the location request is sent to the first network device on the campus; and/or, if the second information includes the first location information, the first indication may indicate The first positioning information is sent to the first network device in the campus.
  • the first indication can also be used to indicate that the above NAS PDU or the second information does not leave the campus, or it can be used to indicate that the above NAS PDU or the second information is forwarded to the first network device, etc.
  • the first indication may be specifically used to indicate that the second information is a positioning request and/or the first positioning
  • the first indication may be specifically used to indicate that the second information is related to the positioning service of the UE.
  • the first indication may be used to indicate that the second information includes a positioning request, specifically, if the second information is carried in the NAS PDU of the first message, and the second information includes a MO-LR message
  • the first indication may be used to indicate the MO-LR message carried or included in the NAS PDU
  • the first indication may indicate that the second information includes the first positioning information, specifically Yes, if the second information is carried in the NAS PDU of the first message, and the second information includes an LPP message (or NR PP message), the first indication may be used to indicate the LPP message (or NR PP message) carried or included in the NAS PDU information).
  • the LPP message in
  • the terminal device does not encrypt the second information, or uses an encryption algorithm different from that used when sending the information to the operator's public network element (such as AMF) , or, adopt the same encryption algorithm as that used when the network element (such as AMF) of the campus network sends information, that is, the network element (such as AMF) of the campus network can perform decryption.
  • the operator's public network element such as AMF
  • the terminal device encrypts the NAS PDU to the AMF of the public network through a certain encryption algorithm (called the second encryption algorithm)
  • the second encryption algorithm Another set of encryption algorithms can be used for encryption, and correspondingly, the first network device can decrypt according to the corresponding decryption algorithm of the other set of encryption algorithms, so that the content of the second information in the NAS PDU can be read.
  • different NAS encryption algorithms can be used on the operator's public network and campus to further improve the security of location services.
  • sending NAS PDU different encryption algorithms are used to further improve security.
  • the terminal device Since the second information does not need to be sent to the public network AMF in S102, the terminal device does not need to encrypt the second information in a manner corresponding to the public network AMF, thereby preventing the first network device from being unable to read the second information normally.
  • S102 The access network device sends a positioning request and/or first positioning information to the first network device according to the first indication.
  • S102 may also be replaced by the access network device sending the second information to the first network device according to the first instruction.
  • S102 may also be replaced by the access network device sending the first indication and the second information to the first network device according to the first indication.
  • the following describes by taking the access network device sending the second information to the first network device according to the first indication as an example.
  • the first network device receives the second information.
  • the first network device is a campus network device, or in other words, the first network device is deployed in the campus, or in other words, the first network device belongs to the campus network device, or in other words, the first network device is located inside the campus.
  • the first network device may be used to provide services for UEs in the campus.
  • the first network device is, for example, an AMF or an AMF proxy (or called a proxy) in the campus.
  • the first network device may be a campus agent or a campus AMF deployed on the campus network.
  • the first network device may also be the LMF in the campus.
  • the first network device may be an N2 proxy or a campus AMF deployed in the campus network.
  • the access network device can perform the following operations: when it is recognized that the RRC message includes the first indication, it can send the NAS PDU in the RRC message to the first The network device does not need to parse the content and content information type contained in the NAS PDU.
  • the first indication may be indicated in the form of binary bits, for example, when the bit position is 1, it means that the NAS PDU or the second message includes the positioning request and/or the first positioning information; when the bit position is 0 , indicating that the NAS PDU or the second information does not include the location request and/or the first location information; or, when the bit position is 0, it means Indicates that the NAS PDU or the second information includes a positioning request and/or the first positioning information.
  • the bit position is 1, it means that the NAS PDU or the second information does not include the positioning request and/or the first positioning information; or, when carrying an indication whether When the bits of the positioning request and/or the first positioning information are included, it indicates that the NAS PDU or the second information includes the positioning request and/or the first positioning information; or, when it does not carry an indication whether to include the positioning request and/or the first positioning information
  • the bit of it means that the NAS PDU or the second information does not include the positioning request and/or the first positioning information; or, the indication may be indicated by carrying other relevant information, for example, carrying one or more information elements (information element, IE) indicates that the NAS PDU or the second information includes the positioning request and/or the first positioning information, and does not carry one or more information elements indicating that the NAS PDU or the second information does not include the positioning request and/or the first positioning information; Alternatively, not carrying one or more information elements indicates that the NAS PDU or the second information includes the positioning request and/or the first positioning information, and
  • the access network device determines the first indication in the message from the terminal device, the access network device determines to send the NAS PDU or the second information in the message to the first network device.
  • the access network device may forward the positioning request and/or the first positioning information to the first network device according to the first indication.
  • the first network device may be a campus network device, so it can avoid sending UE-initiated positioning service-related messages (such as positioning request and positioning information) to the public network core network. Yuan, which can improve the security of positioning services.
  • the positioning request and/or the first positioning information can be carried in the NAS PDU of the RRC message, so this method can be implemented through control plane signaling.
  • the access network device may establish a stream control transmission protocol (stream control transmission protocol, SCTP) coupling (SCTP association) or TNL association with the first network device, or in other words, the access network device has Acquire or store information with the first network device.
  • SCTP stream control transmission protocol
  • the public network AMF can send the AMF (or campus agent) identification or address information through UE granular N2 signaling to the access network device; or, when the AMF and LMF in the campus are co-established, the LMF ID or LMF address and other information are sent to the access network device through UE granular N2 signaling, then the access network device has An SCTP coupling or TNL coupling is established with the campus AMF.
  • the access network device may request the public network AMF for information about the first network device associated with the UE (such as the identifier or address of the first network device, etc.).
  • the access network device can send the first information to the second network device (such as the public network AMF), and the first information can be used to instruct the second network device to provide the first network
  • the information of the device may be used to request information of the first network device.
  • the access network device may use the first information to instruct or request the public network AMF to send the information of the first network device to the access network device through UE granular N2 signaling.
  • the access network device may send a request for the information of the first network device to the AMF of the public network through an N2 message at the UE granularity, and the request may carry the first information.
  • the first information may be specifically used to notify the public network AMF to select at least one of the associated campus AMF, proxy, and LMF for the UE as the first network device.
  • the public network AMF can send UE granular N2 signaling to the access network device according to the first information of the access network device, and the N2 signaling can carry the identity or address of the campus AMF (or the identity or address of the campus agent) ), or, when the AMF and the LMF are co-established, the N2 signaling may carry the LMF identity or address.
  • the N2 signaling may also carry indication information for notifying the first network device that it is an AMF deployed in the campus, a campus proxy, or an LMF co-located with the AMF.
  • the above communication method as shown in FIG. 4A may further include steps shown in S201 and S202 .
  • the access network device receives third information from the first network device.
  • the access network device receives the third information.
  • the third information includes a positioning request reply or second positioning information.
  • the positioning request reply may include a MO-LR response (response) message.
  • the second positioning information may include at least one item of request capabilities (request capabilities) information, request assistance data (request assistance data) information, or request location information (request location information) information.
  • the third information may correspond to the second information.
  • the first positioning information may include Request Capabilities; if the second positioning information includes Provide Assistance Data, the first positioning information includes Request Assistance Data. If the second location information includes Provide Location Information, the first location information may include Request Location Information.
  • the second positioning information belongs to positioning information, and for positioning information, refer to descriptions in this application.
  • S201 and S202 are executed before S101.
  • S201 and S202 may be performed after S102, wherein the third information in S201 and S202 may include a positioning request reply, so that the third information sent by the first network device to the terminal device may is a positioning request reply.
  • S201 and S202 may be performed before S101, wherein the third information may include positioning request information.
  • S202 The access network device sends third information to the terminal device.
  • the terminal device receives the third information.
  • the access network device can forward the second positioning information of the first network device to the UE, and the second positioning information can request the positioning related parameters of the UE.
  • the network device sends first positioning information. Therefore, the positioning information of the UE does not need to pass through the public network core network parameters, which can reduce the transmission delay in the positioning process and improve the positioning accuracy.
  • the communication method provided in the embodiment of the present application may also be implemented by a second network device, and the second network device may be configured to instruct the terminal device to perform S101.
  • the second network device when the second network device instructs the terminal device to perform S101, the above-mentioned second network device may instruct the terminal device not to encrypt the second information.
  • the second network device may instruct the terminal device to encrypt the second information according to the first encryption method, and the terminal device adopts the first encryption as long as it receives the corresponding first instruction.
  • the first encryption method is different from the encryption method used when the access network device sends a message to a public network core network element (such as AMF).
  • the first encryption method corresponds to the first network device.
  • the first encryption method is associated with the campus where the first network device is located. Therefore, when different first network devices do not belong to different campuses, the terminal The device encrypts the second information in different ways, thereby further improving security.
  • S301 may also be executed before S101 shown in FIG. 4A , or steps shown in S301 and S302 may be executed.
  • the terminal device receives a second indication from the second network device, where the second indication may be used to instruct sending the first indication, or the second indication may be used to trigger or indicate or configure sending of the first indication, or, the second The indication may be used for sending the first indication. For example, it is used to instruct the terminal device to send the first indication when it needs to send the positioning request and/or the first positioning information. Therefore, the terminal device can send the first indication according to the second indication. That is to say, if the terminal device receives the second indication, the terminal device sends a radio resource control message to the access network device when it needs to send a positioning request and/or first positioning information, which carries the first indication and carries the positioning request and /or first positioning information.
  • the second indication may be specific information, and when receiving the specific information, the terminal device executes S101. Wherein, the interpretation of the second indication is the same as that of the first indication above, and will not be repeated here.
  • the second network device may be a public network core network element, such as a public network AMF.
  • the second network device may be an access network device corresponding to the public network AMF.
  • the second indication may be used to indicate that the second information in the radio resource control message is unencrypted, and the terminal device does not need to encrypt the second information when sending the second information.
  • the terminal device may default that the first indication needs to be sent when sending the second information, that is, execute S101. It can also be said that "the second indication may be used to instruct sending the first indication" in this application may be replaced with "the second indication is used to indicate that the second information in the radio resource control message is unencrypted".
  • the second indication may be used to indicate that the second information in the radio resource control message is encrypted according to the first encryption method, and the terminal device may encrypt the second information according to the first encryption method.
  • the first encryption method may correspond to the first network device, or the first network device supports decrypting the NAS PDU according to the decryption method corresponding to the first encryption method, Therefore, the first network device can parse the NAS PDU to obtain the second information.
  • the terminal device may default that the first indication needs to be sent when sending the second information, that is, execute S101. It can also be said that "the second indication may be used to instruct sending the first indication" in this application may be replaced with "the second indication is used to indicate that the second information in the radio resource control message is encrypted according to the first encryption method".
  • the first encryption method is different from the encryption method (which may be referred to as the second encryption method) corresponding to the NAS PDU sent to the public network core network element (such as the public network AMF).
  • the network element of the network core network sends NAS PDU, it needs to encrypt the information according to the second encryption method to obtain the NAS PDU.
  • the terminal device since in this application, the NAS PDU carrying the second information does not need to be sent to the public network core network element, the terminal device does not need to encrypt the second information in a manner corresponding to the public network core network element, the NAS PDU for carrying the second information can be generated by not encrypting the second information or encrypting the second information according to a new encryption method, so that the first network device can parse the NAS PDU to obtain the second information.
  • the second network device may instruct the terminal device to send the first indication in an implicit indication manner.
  • S302 may also be executed before S301.
  • the terminal device sends a fourth message to the second network device.
  • the fourth message may be a registration request, and the registration request may be used to request registration to the public core network.
  • the second network device may send the second indication to the terminal device during the registration process of the terminal device.
  • the registration request may be sent to the second network device through the access network device where the terminal device is located.
  • the second network device may send the second indication after determining that the terminal device is associated with the positioning service. For example, After determining that the subscription information of the terminal device includes the location service information, the second network device sends the second indication to the terminal device.
  • the subscription information of the terminal device may come from the UDM.
  • the positioning service information may include relevant parameters for business customers (to business, to B).
  • this application does not rule out that the second network device does not make a judgment and sends the second indication to all terminal devices. Therefore, all terminal devices that request registration from the second network device can send location requests and/or location information. , execute S101.
  • FIG. 4B and FIG. 4C can also be implemented in combination.
  • S201 and S202 can also be executed after S102 shown in FIG. 4C , or S201 and S202 can also be executed before S101 .
  • S201 and S202 are executed before S101, the application does not specifically limit the timing between S201 and S202 and S302 and S301, for example, S201 and S202 can be executed before S302, and S201 and S202 can also be executed after S301 And it is executed before S101.
  • the second network device may send an access The network device sends the second indication, and the access network device sends the SMC to the UE.
  • the access network device may send the SMC before sending a registration accept (registration accept) message to the terminal device.
  • S302 and S301 shown in FIG. 4C may be implemented in the registration process of the terminal device shown in FIG. 5 .
  • S302 can be realized through S401 and S402
  • S301 can be realized through S404 and S405.
  • the second network device is a public network AMF and the terminal device is a UE as an example for illustration.
  • the UE sends an RRC message to the access network device, where the RRC message may carry a fourth message, and the fourth message may be a registration request (registration request) message.
  • the UE may send the RRC message to the NG-RAN through the Uu interface.
  • the access network device receives the RRC message.
  • the access network device sends a fourth message to the public network AMF.
  • the NG-RAN may send the registration request message to the public network AMF through the N2 interface.
  • the public network AMF receives the fourth message.
  • the public network AMF selects an AUSF for the UE, and authenticates the UE through the AUSF.
  • S404 The public network AMF sends an SMC to the access network device, where the SMC carries the second indication.
  • the public network AMF can send the SMC to the NG-RAN through the N2 interface.
  • the access network device can receive the SMC.
  • the access network device sends the SMC to the UE.
  • the NG-RAN may send the SMC to the UE through the Uu interface.
  • the UE receives the SMC and obtains the second indication.
  • S406 The UE sends a non-access stratum security mode complete (NAS security mode complete) message to the access network device, indicating that the SMC is received.
  • NAS security mode complete non-access stratum security mode complete
  • the access network device receives the non-access stratum security mode completion message.
  • the access network device sends the non-access stratum security mode completion message to the public network AMF.
  • the public network AMF receives the non-access stratum security mode completion message.
  • the public network AMF can register the UE according to the relevant registration procedure.
  • the public network AMF may send a registration accept (registration accept) message to the UE.
  • the UE receives the registration acceptance message.
  • the public network AMF can carry the second indication through the SMC during the registration process of the UE, enabling the UE to perform the steps shown in S101 .
  • the public network AMF does not need to identify whether the UE is related to the positioning service, therefore, the processing difficulty of the public network AMF can be reduced, and the processing load can be reduced.
  • the second network device may send a registration acceptance message to the UE, and the registration acceptance message may carry the second indication.
  • S302 and S301 may be implemented in the registration process of the terminal device shown in FIG. 6 .
  • the second network device is a public network AMF and the terminal device is a UE as an example for illustration.
  • S302 can be realized through S401 and S402, and S301 can be realized through S503.
  • the public network AMF acquires subscription information of the UE from the UDM.
  • the AMF may send a subscription information extraction message (Nudm_SDM_Get) to the UDM to extract the subscription information of the UE.
  • Nudm_SDM_Get subscription information extraction message
  • UE registration may be performed according to an existing UE registration procedure. For example, the steps shown in S401 to S403 shown in FIG. 5 may be executed before S501.
  • the public network AMF determines that the subscription information of the UE includes relevant parameters for business customers (to business, to B).
  • the public network AMF carries the second indication in the registration acceptance message corresponding to the UE.
  • the AMF can also skip S501 to S502 and execute S503, that is, it does not need to judge whether the UE is related to the unit service, but always carries the second indication in the registration acceptance message of the UE, or always sends the second indication. Indicated SMC.
  • the public network AMF may carry the second indication through the SMC or the registration acceptance message during the UE registration process, so as to instruct the UE to perform the step shown in S101 .
  • the public network AMF may identify whether the UE is related to the positioning service; or may also send the second indication to all registered UEs, and in this case, S501 to S502 may be skipped.
  • the public network AMF can identify whether the UE is related to the positioning service according to the subscription information of the UE during the UE registration process, so as to determine Whether to send the second indication, so the public network AMF does not need to send the second indication for all UEs, which can reduce signaling overhead. It should be understood that before S404 shown in FIG. 5, it is not excluded that the public network AMF determines that the UE is related to the positioning service. For example, the steps shown in S501 to S502 can be performed before S404, so as to realize the sending of the second indication through S403 and S405. .
  • the terminal device performs S101 without receiving the foregoing second indication.
  • the terminal device may be configured (including pre-configured or configured based on other signaling) to execute S101, or in other words, the terminal device may execute S101 by default.
  • a communication method provided in an embodiment of the present application may include steps as shown in FIG. 7 .
  • S101 in the flow shown in FIG. 4A to FIG. 4C may be implemented by S601 shown in FIG. 7
  • S102 in the flow shown in FIG. 4A to FIG. 4C may be implemented by S602 shown in FIG. 7
  • S201 and S202 in FIG. 4B can be realized by S605 and S606 in FIG. 7 respectively.
  • the communication method may include the following steps:
  • S601 The UE sends a radio resource control message to the access network device (for the convenience of description, this message may be referred to as a first message), the first message includes a first indication, and the first message may also include a positioning request.
  • the location request in the first message is not encrypted or encrypted according to the first encryption method.
  • the access network device may be the NG-RAN deployed in the campus.
  • the UE may send the first message to the NG-RAN through the Uu interface.
  • the first message may be an RRC message.
  • the RRC message may include the first indication and a NAS PDU carrying a positioning request, and the NAS PDU may include or carry an LPP PDU or an NR PP PDU, etc.
  • the access network device receives the first message.
  • S602 The access network device sends a positioning request to the first network device according to the first indication.
  • S602 reference may be made to the foregoing description of S102.
  • the access network device may send the positioning request to the first network device according to the first indication, or determine to send the positioning request to the first network device according to the first indication.
  • the access network device may send an NX message to the first network device, which carries the location request.
  • the NX message may also include at least one of the identifier of the UE and the identifier of the public network AMF that manages the UE.
  • the identifier of the UE may include GUTI or 5G-GUTI) and/or NGAP UE ID of the UE.
  • the first network device receives the positioning request.
  • the access network device may send first information to the second network device (such as a public network AMF), where the first information may be used to instruct the second network device to provide information about the first network device, or, Can be used to request information from the first network device.
  • the access network device may receive the information of the first network device from the second network device, so that the access network device establishes an SCTP connection with the first network device.
  • the information of the first network device is as described above, and will not be repeated here.
  • the first network device sends a location request and the identifier of the UE to the LMF.
  • the identifier of the UE in S103 may be a subscriber permanent identifier (subscription permanent identifier, SUPI) or a generic public subscription identifier (generic public subscription identifier, GPSI) of the UE.
  • the UE's SUPI or GPSI can be obtained from the UE's GUTI or NGAP UE ID.
  • the first network device may be a campus AMF or a campus agent.
  • the park AMF can be jointly established with the park LMF.
  • the first network device may send a location location request (Nlmf_Location_DetermineLocation request) to the campus LMF, which includes the location request and the identifier of the UE.
  • the location location request may also include identification information related to the location location service, which is used to identify the current location location service or location session or location location request.
  • Identification information related to positioning services such as LCS correlation ID (LCS correlation ID), LCS session ID (LCS session ID), enhanced LCS (enhanced LCS, eLCS) session ID (eLCS session ID), eLCS correlation ID (eLCS correlation ID), LCS service ID (LCS service ID), eLCS service ID (eLCS service ID), NR Positioning Protocol A (NRPPa) transaction ID (NRPPa transaction ID), etc.
  • the first network device may send a third message to the second network device, so as to acquire related information of the UE from the second network device.
  • the second network device may be a network element in the operator's public network, such as a public network AMF.
  • the third message may include a UE context fetch (Namf_Communication_UEContextTransfer) message.
  • the third message may carry a UE identifier, such as 5G-GUTI or NGAP UE ID.
  • the second network device may send a response message to the third message to the first network device, where information related to the UE is carried.
  • the LMF sends second positioning information to the first network device.
  • the second positioning information may be used for UE positioning measurement.
  • the second positioning information may be determined according to the positioning request and/or related information of the UE. For the second positioning information, refer to the foregoing description.
  • the second positioning information may be carried in the positioning protocol data unit sent by the LMF.
  • the positioning protocol data unit is, for example, LPP PDU or NR PP PDU or the like.
  • the LMF may send an N1N2 message transfer (Namf_Communication_N1N2MessageTransfer) to the campus AMF or the campus agent, and carry the protocol data unit.
  • N1N2 message transmission may also carry identification information related to the positioning service.
  • the first network device receives the second positioning information from the LMF.
  • S605 The first network device sends second positioning information to the access network device.
  • S605 refer to the aforementioned S201.
  • the first network device may also send identification information related to the positioning service to the access network device.
  • the campus AMF or the campus agent as shown in FIG. 3 may send an NGAP downlink NAS transport (NGAP downlink NAS transport) message to the NG-RAN.
  • the message may carry a positioning protocol data unit.
  • the message may also carry identification information related to the positioning service.
  • the access network device receives the second positioning information from the first network device.
  • S606 The access network device sends second positioning information to the UE.
  • S605 refer to the aforementioned S202.
  • the NG-RAN as shown in FIG. 3 may send a downlink RRC information transfer (RRC downlink information transfer) to the UE, which carries the positioning protocol data unit including the second positioning information or carrying the sum of the second positioning information.
  • RRC downlink information transfer RRC downlink information transfer
  • the UE receives the second positioning information.
  • the UE sends a second message to the access network device, where the second message includes the first indication and the first positioning information.
  • the first indication refer to the description in S102.
  • the first location information in the second message is not encrypted or encrypted according to the first encryption method.
  • the first positioning information corresponds to the second positioning information.
  • the second message in S107 may be an uplink RRC message
  • the first positioning information may be carried in a NAS PDU
  • the NAS PDU may include or carry an LPP message or an NR PP message.
  • the UE may send an uplink RRC message transfer (RRC uplink information transfer) (that is, the second message) to the NG-RAN, and the uplink RRC message transfer may carry the first indication and the NAS PDU.
  • RRC uplink information transfer (RRC uplink information transfer) (that is, the second message)
  • the uplink RRC message transfer may carry the first indication and the NAS PDU.
  • the NAS PDU may include first positioning information.
  • the access network device receives the second message.
  • the access network device sends the first positioning information to the first network device according to the first indication.
  • the access network device may also send identification information related to the positioning service to the first network device, to indicate the positioning service associated with the first positioning information (for example, to indicate which UE the first positioning information corresponds to) positioning service or positioning session or positioning measurement).
  • identification information related to the positioning service to the first network device, to indicate the positioning service associated with the first positioning information (for example, to indicate which UE the first positioning information corresponds to) positioning service or positioning session or positioning measurement).
  • the NG-RAN shown in Figure 3 can send an uplink non-access stratum message transmission (NGAP uplink NAS transport) to the campus AMF or the campus agent, which carries a NAS PDU including the first location information, and the NAS PDU can include or carry LPP message or NR PP message.
  • the uplink non-access stratum message transmission may also include identification information related to the positioning service.
  • the first network device receives the first positioning information from the access network device.
  • S609 The first network device sends the first positioning information to the LMF.
  • the first network device may also send identification information related to the positioning service to the first network device.
  • the campus AMF or the campus agent may send an N1 message notification to the campus LMF, which carries a NAS PDU including the first location information, and the NAS PDU may include or carry an LPP message or an NR PP message.
  • the N1 message notification may also include identification information related to the positioning service.
  • the first network device may also send a positioning request reply to the terminal device through the access network device.
  • a positioning request reply to the terminal device through the access network device.
  • the UE when it initiates a positioning message, it can send the positioning message and the first indication to the access network device, so that the access network device sends positioning related messages (such as positioning request and/or The first positioning information) is sent to the first network device, instead of sending positioning-related messages to core network elements such as AMF in the operator's public network.
  • the first network device can send the positioning message to the LMF in the campus, so that the positioning message and/or positioning information can be forwarded to the network device in the park in the campus, which can avoid positioning events, positioning information, positioning requests, and location information. , positioning measurement results, etc. are exposed to network elements in the operator's public network, thereby improving the security of positioning services.
  • each solution of the communication method provided in the embodiments of the present application is introduced from the perspectives of each functional module or device itself and the interaction between each functional module or device.
  • each functional module or device such as the above-mentioned service control network element, computing control network element, computing network element and access network device, in order to realize the above-mentioned functions, it includes the corresponding hardware structure and/or software for performing each function module.
  • the present application can be implemented in the form of hardware or a combination of hardware and computer software with reference to the units and algorithm steps of each example described in the embodiments disclosed in the present application. Whether a certain function is executed by hardware or computer software drives hardware depends on the specific application and design constraints of the technical solution. Skilled artisans may use different methods to implement the described functions for each specific application, but such implementation should not be regarded as exceeding the scope of the present application.
  • the communication device 800 may include a communication module 801 and a processing module 802 .
  • the communication module 801 is used for the communication device 800 to receive information (message or data) and/or send information (message or data), and the processing module 802 is used to control and manage the actions of the communication device 800 .
  • the processing module 802 may also control the steps performed by the communication module 801 .
  • the communication module 801 may include a receiving module and/or a sending module.
  • the communication apparatus 800 may specifically be the access network device, terminal device or second network device in the foregoing embodiments, or a processor or chip in the access network device, terminal device or second network device, Or a chip system, or a functional module, etc.; or, the communication device 800 may specifically be a service control network element, a computing control network element, a computing network element, or a processor of an access network device in the above-mentioned embodiments, or a chip, Or a chip system, or a functional module, etc.
  • the communication module 801 can be used to receive a radio resource control message from the terminal device, and the radio resource control The message includes a first indication, the radio resource control message also includes a non-access stratum message, and the first indication is used to indicate that the non-access stratum message includes a positioning request and/or first positioning information; the communication module 801 also can be used according to the first finger indicates sending the non-access stratum message to the first network device, where the first network device is a campus network device.
  • the communication module 801 is further configured to receive a positioning request reply and/or second positioning information from the first network device; the communication module 801 is further configured to send the A positioning request reply and/or the second positioning information.
  • the communication module 801 is further configured to send first information to the second network device, where the first information is used to instruct the second network device to provide information about the first network device, or The first information is used to request the information of the first network device; the communication module 801 is also used to receive the information of the first network device from the second network device.
  • the communication module 801 is further configured to establish a flow control transmission protocol coupling with the first network device.
  • the communication module 801 may be used to send a radio resource control message to the access network device, and the radio resource control message includes A first indication, the radio resource control message further includes a non-access stratum message, and the first indication is used to indicate that the non-access stratum message includes a positioning request and/or first positioning information.
  • the communication module 801 is further configured to receive a positioning request reply and/or second positioning information from the access network device.
  • the communication module 801 is further configured to receive a second indication, where the second indication is used to instruct sending the first indication.
  • the second indication is used to indicate not to encrypt the positioning request and/or the first positioning information; or, the second indication is used to indicate to encrypt the positioning request and/or the first positioning information; /or the first location information is encrypted according to the first encryption method.
  • the second indication is carried in a non-access stratum security mode command or a registration acceptance message.
  • the location request and/or the first location information are carried in a non-access stratum protocol data unit.
  • the communication module 801 can be used to receive the fourth message from the terminal device; the communication module 801 can also be used to send a message to the terminal device The device sends a second indication; where the second indication is used to instruct the terminal device to send the first indication, and the first indication is used to indicate that the non-access stratum message includes the location request and/or the first location information.
  • the second indication is used to indicate not to encrypt the positioning request and/or the first positioning information; or, the second indication is used to indicate to encrypt the positioning request and/or the first positioning information; /or the first location information is encrypted according to the first encryption method.
  • the processing module 802 is further configured to determine that the terminal device is associated with a positioning service.
  • the processing module 802 is further configured to determine that the subscription information of the terminal device includes positioning service information.
  • the communication module 801 is further configured to send the information of the first network device to the access network device.
  • the communication module 801 is further configured to receive first information from the access network device, where the first information is used to instruct the second network device to provide information about the first network device , or the first The information is used to request information of the first network device.
  • each functional unit in the embodiment of the present application may be integrated into one processing unit, each unit may exist separately physically, or two or more units may be integrated into one unit.
  • the above-mentioned integrated units can be implemented in the form of hardware or in the form of software functional units.
  • the integrated unit is realized in the form of a software function unit and sold or used as an independent product, it can be stored in a computer-readable storage medium.
  • the technical solution of the present application is essentially or part of the contribution to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium , including several instructions to make a computer device (which may be a personal computer, a server, or a network device, etc.) or a processor (processor) execute all or part of the steps of the methods described in the various embodiments of the present application.
  • the aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (read-only memory, ROM), random access memory (random access memory, RAM), magnetic disk or optical disc and other media that can store program codes. .
  • a communication device 900 may include a communication interface 901 and a processor 902 .
  • the communication device 900 may further include a memory 903 .
  • the processor 902 may be a central processing unit (central processing unit, CPU), a network processor (network processor, NP) or a combination of CPU and NP.
  • the processor 902 may further include a hardware chip.
  • the aforementioned hardware chip may be an application-specific integrated circuit (application-specific integrated circuit, ASIC), a programmable logic device (programmable logic device, PLD) or a combination thereof.
  • the aforementioned PLD may be a complex programmable logic device (complex programmable logic device, CPLD), a field-programmable gate array (field-programmable gate array, FPGA), a general array logic (generic array logic, GAL) or any combination thereof.
  • the communication interface 901 , the processor 902 and the memory 903 are connected to each other.
  • the communication interface 901, the processor 902 and the memory 903 are connected to each other through a bus 904;
  • the bus 904 may be a Peripheral Component Interconnect (PCI) bus or an extended industry standard Structure (Extended Industry Standard Architecture, EISA) bus, etc.
  • PCI Peripheral Component Interconnect
  • EISA Extended Industry Standard Architecture
  • the bus can be divided into address bus, data bus, control bus and so on. For ease of representation, only one thick line is used in FIG. 9 , but it does not mean that there is only one bus or one type of bus.
  • the memory 903 is used to store programs and the like.
  • the program may include program code including computer operation instructions.
  • the memory 903 may include RAM, and may also include non-volatile memory (non-volatile memory), such as one or more disk memories.
  • the processor 902 executes the application program stored in the memory 903 to realize the above functions, thereby realizing the functions of the communication device 900 .
  • the communications apparatus 900 may be the access network device, the terminal device, or the second network device in the foregoing embodiments.
  • the communication interface 901 can realize the 4B, FIG. 4C, and the transceiving operations performed by the access network equipment in the embodiments shown in FIG. 5 to FIG. 7; the processor 902 can implement the operations shown in FIG. 4A, FIG. 4C, other operations performed by the access network device in the embodiments shown in FIG. 5 to FIG. 7 except the transceiving operation.
  • the communication interface 901 can realize the 4B, FIG. 4C, and the transceiving operations performed by the access network equipment in the embodiments shown in FIG. 5 to FIG. 7; the processor 902 can implement the operations shown in FIG. 4A, FIG. 4C, other operations performed by the access network device in the embodiments shown in FIG. 5 to FIG. 7 except the transceiving operation.
  • the communication interface 901 can realize the FIG. 4C, the transceiving operation performed by the terminal device in the embodiment shown in FIG. 5 to FIG. 7; the processor 1202 may implement Other operations performed by terminal equipment other than sending and receiving operations.
  • FIG. 4A , FIG. 4B , FIG. 4C , and FIG. 5 to FIG. 7 and will not be described in detail here.
  • the communication interface 901 can realize the 4B, FIG. 4C, the transceiving operation performed by the second network device in the embodiment shown in FIG. 5 to FIG. 7;
  • the processor 902 can realize the implementation shown in FIG. 4A, FIG. 4B, FIG. 4C, and FIG. 5 to FIG.
  • other operations performed by the second network device other than the transceiving operation For specific related specific descriptions, reference may be made to related descriptions in the above embodiments shown in FIG. 4A , FIG. 4B , FIG. 4C , and FIG. 5 to FIG. 7 , and will not be described in detail here.
  • the embodiments of the present application provide a network structure, and the network structure may include the access network device, the terminal device, or the second network device, etc. involved in the above embodiments.
  • the embodiment of the present application also provides a computer-readable storage medium, the computer-readable storage medium is used to store a computer program, and when the computer program is executed by a computer, the computer can implement the communication method provided by the above method embodiment.
  • the embodiment of the present application also provides a computer program product, the computer program product is used to store a computer program, and when the computer program is executed by a computer, the computer can implement the communication method provided by the above method embodiment.
  • the embodiment of the present application further provides a chip, including a processor, the processor is coupled to a memory, and is configured to call a program in the memory so that the chip implements the communication method provided by the above method embodiment.
  • the embodiment of the present application further provides a chip, the chip is coupled with a memory, and the chip is used to implement the communication method provided in the foregoing method embodiment.
  • the embodiments of the present application may be provided as methods, systems, or computer program products. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.
  • computer-usable storage media including but not limited to disk storage, CD-ROM, optical storage, etc.
  • These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing apparatus to operate in a specific manner, such that the instructions stored in the computer-readable memory produce an article of manufacture comprising instruction means, the instructions
  • the device implements one or more processes in the flowchart and/or one or more blocks in the block diagram The function specified in the box.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

本申请实施例提供一种通信方法及装置。该方法包括：接入网设备接收来自于终端设备的无线资源控制消息，该无线资源控制消息包括第一指示，还包括非接入层消息，所述第一指示用于指示所述非接入层消息包括定位请求和/或第一定位信息。所述接入网设备根据所述第一指示向第一网络设备发送所述非接入层消息，所述第一网络设备是园区网络设备。因此基于该方法，接入网设备可根据第一指示将定位请求和/或第一定位信息转发至第一网络设备，可避免将定位业务有关的定位请求和/或定位信息暴露至公网核心网网元，可提高定位业务安全性。

Description

一种通信方法及装置
相关申请的交叉引用
本申请要求在2022年02月28日提交中华人民共和国知识产权局、申请号为202210188474.8、申请名称为“一种通信方法及装置”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。
技术领域
本申请涉及通信技术领域，尤其涉及一种通信方法及装置。
背景技术
随着智慧化浪潮的兴起，垂直行业对定位的需求日益迫切。目前，3GPP版本(Release)16中，引入了第五代移动通信(5th-generation，5G)基站的定位功能。其应用场景主要分为两大类：广域定位场景和局域定位场景。
针对上述定位场景，出于对隐私数据的保护，业界提出不希望公网感知定位相关信息的需求。
当前针对终端设备的定位服务流程，与终端相关定位数据需经过公网核心网网元，因此存在终端定位数据暴露的风险。因此，当前终端设备的定位服务流程的安全性有待提高。
发明内容
本申请提供一种通信方法及装置，用于提高终端设备的定位服务流程的安全性。
第一方面，本申请提供一种通信方法。该通信方法可由接入网设备或接入网设备中的组件实施，组件例如处理器、收发器、处理模块或收发模块中的至少一种。以执行主体是接入网设备为例，该方法包括：接入网设备接收来自于终端设备的无线资源控制(Radio Resource Control，RRC)消息，所述无线资源控制消息包括第一指示，所述无线资源控制消息还包括非接入层(Non-Access Stratum，NAS)消息，所述第一指示用于指示所述非接入层消息包括定位请求(location/positioning Request)和/或第一定位信息(positioning message)；所述接入网设备根据所述第一指示向第一网络设备发送所述非接入层消息，所述第一网络设备是园区网络设备。
根据该方法，接入网设备可根据第一指示将定位请求和/或第一定位信息转发至第一网络设备，可避免将定位业务有关的定位请求和/或定位信息暴露至公网核心网网元，可提高定位业务安全性。
可选地，上述“该方法还包括：”描述的部分还可以替换为以下任意一种描述：
“接入网设备接收来自于终端设备的无线资源控制消息，所述无线资源控制消息包括第一指示，所述无线资源控制消息还包括定位请求和/或第一定位信息，所述第一指示用于指示所述定位请求和/或第一定位信息是发送至园区内的第一网络设备的。所述接入网设备根据所述第一指示向第一网络设备发送所述定位请求和/或第一定位信息，所述第一网络设备是园区网络设备。”或者，
“接入网设备接收来自于终端设备的无线资源控制消息，所述无线资源控制消息包括第一指示，所述无线资源控制消息还包括定位请求和/或第一定位信息，所述第一指示用于指示所述定位请求和/或所述第一定位信息是发送至园区第一网络设备的；所述接入网设备根据所述第一指示向第一网络设备发送所述定位请求和/或第一定位信息。”或者，
“接入网设备接收来自于终端设备的无线资源控制消息，所述无线资源控制消息包括第一指示，所述无线资源控制(Radio Resource Control，RRC)消息还包括非接入层(Non-Access Stratum，NAS)消息，所述第一指示用于指示所述非接入层消息包括定位请求和/或第一定位信息；所述接入网设备根据所述第一指示向第一网络设备发送所述非接入层消息。”或者，
“接入网设备接收来自于终端设备的无线资源控制消息，所述无线资源控制消息包括非接入层消息，所述非接入层消息包括第一指示，所述第一指示用于指示所述非接入层消息包括定位请求(location/positioning Request)和/或第一定位信息(positioning message)；所述接入网设备根据所述第一指示向第一网络设备发送所述非接入层消息，所述第一网络设备是园区网络设备。”。也就是说，第一指示可以携带在非接入层消息中。
本申请所述“NAS消息(NAS message)”可替换为“NAS消息容器(NAS message container)”、“NAS协议数据单元(NAS Packet Data Unit，NAS PDU)”、“NAS容器(NAS container)”，等。
本申请所述“无线资源控制(RRC)消息”可替换为“无线(Radio)消息”、“无线资源(Radio Resource)消息”等。
本申请所述“定位请求(Positioning Request)”可以替换为“位置请求(Location Request)”，例如，可以是终端发起的位置请求(Mobile Originated Location Request，MO-LR)消息。
本申请所述“定位信息(Positioning Message)”可以替换为“位置信息(Location message/Location information)”，例如，可以是长期演进定位协议信息(Long Term Evolution Positioning Protocol message，LPP message)、新无线定位协议A信息(NR Positioning Protocol A，NRPP message)、新无线定位信息(New Radio Positioning message，NRP message)、新无线定位协议信息(New Radio Positioning Protocol message，NRPP message)、新无线增强定位信息(New Radio Advance Positioning Protocol message，NRAPP message)、LPP协议数据单元PDU(LPP PDU)、定位协议PDU(Positioning Protocol PDU，PP PDU)，新无线定位协议PDU(New Radio Positioning Protocol PDU，NPP PDU)、新无线增强定位协议PDU(New Radio Advance Positioning Protocol PDU，NRAPP PDU)、等。
本申请所述“所述接入网设备根据所述第一指示向第一网络设备发送所述定位请求和/或第一定位信息，所述第一网络设备是园区网络设备”，可替换为“所述接入网设备根据所述第一指示向第一网络设备发送所述定位请求和/或第一定位信息”，也就是说，本申请不限定第一网络设备是园区网络设备。例如，第一网络设备可以是公网中的网络设备，或是，换句话说，第一网络设备可以是非园区的网络设备。本申请中作为一种可选的实施方式，第一网络设备可以是园区网络设备。“第一网络设备是园区网络设备”可替换为，第一网络设备部署在(deployed in)园区中，或替换为，第一网络设备属于/位于(located inside)园区。“所述接入网设备根据所述第一指示向第一网络设备发送所述定位请求和/或第一定位信息，所述第一网络设备是园区网络设备”，还可替换为，接入网设备根据第一指示向园区网络设备发送所述定位请求和/或所述第一定位信息。
本申请所述“园区(campus)网络或者园区”可以替换为以下任意一种词汇，不限定：
非公共网络(Non-Public Network，NPN)、非运营商网络、工厂网络(factory network)、垂直行业网络(vertical network)、边缘网络(Edge network)、边缘托管环境(Edge Hosting Environment)、边缘计算网络(Edge computing network)、营业场所网络(premises network)、营业场所(premises)，等。
本申请所述“公网或者非园区网络或者非园区”可以替换为以下任意一种词汇，不限定：
公共网络(Public network)、运营商网络，等。
此外，本申请“所述第一指示用于指示所述定位请求和/或第一定位信息是发送至园区第一网络设备的”，可替换为，所述第一指示用于指示所述NAS消息包括定位请求和/或第一定位信息。
在一种可能的实现方式中，接入网设备还可接收来自于所述第一网络设备的定位请求回复和/或第二定位信息。接入网设备还可向所述终端设备发送所述定位请求回复和/或所述第二定位信息。
根据该实现方式，接入网设备可接收来自于第一网络设备的定位请求回复和/或第二定位信息并转发至终端设备，实现终端设备与网络侧关于定位信息的交互，提高通信可靠性和通信效率。
在一种可能的实现方式中，接入网设备还可向第二网络设备发送第一信息，所述第一信息用于指示所述第二网络设备提供或选择所述第一网络设备的信息，或者所述第一信息用于请求所述第一网络设备的信息；接入网设备还可接收来自于所述第二网络设备的所述第一网络设备的信息。
根据该实现方式，接入网设备可向第二网络设备请求第一网络设备的信息，以建立与第一网络设备之间的连接，以提高通信可靠性和通信效率。
本申请所述“第一网络设备的信息”可以是指以下任意一种或多种，不限定：
第一网络设备的IP地址、第一网络设备的FQDN、第一网络设备的标识(ID)、第一网络设备的统一资源标识符(URI)、第一网络设备的统一资源定位符(URL)、第一网络设备的网络功能配置信息(Network Function Profile，NF Profile)、第一网络设备的上下文信息、等。
所述第一网络设备可以包括接入功能网元，接入功能网元可以是接入与移动管理功能网元(AMF)；或者，第一网络设备可以包括位置功能网元，位置功能网元可以是位置管理功能网元(LMF)；或者，第一网络设备可以包括接入功能网元与位置功能网元合设的网元，例如，可以是AMF与LMF合设的网元；或者，第一网络设备可以包括网关移动定位中心(Gateway Mobile Location Center，GMLC)；或者，第一网络设备可以包括LMF与GMLC合设的网元；或者，第一网络设备可以包括位置提取功能网元(Location Retrieval Function，LRF)；或者，第一网络设备可以包括LMF与GMLC以及LRF合设的网元；或者，第一网络设备可以包括LRF与GMLC合设的网元；或者，第一网络设备可以包括服务器，例如，园区服务器；或者，第一网络设备可以包括客户端位置服务客户端(Location Service client，LCS client)；或者，第一网络设备可以包括客户端；或者，第一网络设备可以包括会话管理网元，例如，会话管理功能网元SMF；或者，第一网络设备可以包括用户面网元，例如，UPF；或者，第一网络设备可以包括N2代理(N2Proxy)，等，不限定。
本申请所述“第二网络设备”可以包括接入功能网元，接入功能网元可以是接入与移动 管理功能网元(AMF)，公共网络(Public network)AMF、运营商网络AMF，非园区网络AMF，非园区AMF，等。
在一种可能的实现方式中，所述接入网设备与所述第一网络设备建立流控制传输协议耦连(SCTP association)。
采用该实现方式，接入网设备获得第一网络设备的信息后可与第一网络设备建立SCTP耦连，以便后续用于传输终端设备的定位信息，从而提高通信可靠性和通信效率。
可选地，所述“接入网设备与所述第一网络设备建立流控制传输协议耦连(SCTP association)”可以替换为下述描述，以下的描述之间也可以互相替换：
“接入网设备与所述第一网络设备建立连接”；或者，
“接入网设备与所述第一网络设备建立关联”；或者，
“接入网设备与所述第一网络设备建立控制面连接”；或者，
“接入网设备与所述第一网络设备建立传输网络层关联(Transport Network Layer association，TNL association)”
应注意，本申请的“指示(indicate/indication)”还可以替换为“通知(inform)/表示/表征(represent)”
第二方面，本申请实施例提供一种通信方法。该通信方法可由终端设备或终端设备的组件实施，组件例如处理器、收发器、处理模块或收发模块中的至少一种。以执行主体是终端设备为例，该方法包括：终端设备向接入网设备发送无线资源控制消息，所述无线资源控制消息包括第一指示，所述无线资源控制消息还包括NAS消息，所述第一指示用于指示所述NAS消息包括定位请求和/或第一定位信息。
可选地，上述“该方法还包括：”描述的部分还可以替换为以下任意一种描述：
“终端设备向接入网设备发送无线资源控制消息，所述无线资源控制消息包括第一指示，所述无线资源控制消息还包括定位请求和/或第一定位信息，所述第一指示用于指示所述定位请求和/或第一定位信息发送至园区第一网络设备。”
“终端设备向接入网设备发送无线资源控制消息，所述无线资源控制消息包括第一指示，所述无线资源控制消息还包括定位请求和/或第一定位信息，所述第一指示用于指示接入网设备将所述定位请求和/或第一定位信息发送至园区第一网络设备。”
在一种可能的实现方式中，所述终端设备还可接收来自于所述接入网设备的定位请求回复和/或第二定位信息。
在一种可能的实现方式中，所述终端设备还可接收第二指示，所述第二指示用于指示发送所述第一指示。
基于该实现方式，终端设备可根据第二指示发送第一指示，实现网络对于终端设备行为的管理。可选的，第二指示可来自于第二网络设备，第二网络设备的解释同本申请第一方面相应解释所述，此处不再赘述。此外，本申请也不限制终端设备根据本地配置发送第一指示，也即，例如，终端设备可以不接收第二指示，仍可以发送第一指示，或者，换句话说，终端设备可以不需要根据第二指示来发送第一指示，终端设备本身可以发送第一指示。
本申请中，“第二指示用于指示发送所述第一指示”也可替换为“第二指示可用于触发或指示或配置第一指示的发送”，或者，“第二指示可用于第一指示的发送”等。
在一种可能的实现方式中，所述第二指示可用于指示不对所述定位请求和/或所述第一 定位信息进行加密；或者，所述第二指示用于指示对所述定位请求和/或所述第一定位信息按照第一加密方式进行加密。
基于该实现方式，终端设备可不加密或按照第一加密方式加密定位请求和/或所述第一定位信息，使得第一网络设备能够准确解析。
应理解，所述第一加密方式，例如，可以是第一网络设备可以解密的加密方式。
在一种可能的实现方式中，所述第二指示携带在非接入层(NAS)安全模式命令(Security Mode Command，SMC)或者注册接受(Registration Accept)消息中。
在一种可能的实现方式中，所述定位请求和/或所述第一定位信息携带在非接入层协议数据单元(NAS PDU)中。
应理解，所述NAS PDU可以替换为“NAS消息”、“NAS信息”、“NAS容器”、“NAS消息容器”，等，此外上述的名词之间也可以相互替换，不限定。
应注意，第二方面所述的NAS消息、无线资源控制消息、定位请求、定位消息、园区网络或者园区、第一网络设备，等解释与本申请第一方面中相应解释相同，此处不再赘述。
以上第二方面及其任意可能的实现方式的有益效果，可以参见对于第一方面中相应的实现方式的有益效果的说明。
第三方面，本申请实施例提供一种通信方法。该通信方法可由第二网络设备或第二网络设备的组件实施，组件例如处理器、收发器、处理模块或收发模块中的至少一种。第二网络设备可包括第二网络设备可以是核心网公网中的AMF或其他网元。以执行主体是第二网络设备为例，该方法包括：第二网络设备接收终端设备的第四消息；所述第二网络设备根据所述第四消息向所述终端设备发送第二指示；其中，所述第二指示用于指示所述终端设备发送第一指示，所述第一指示用于指示或表示或表征NAS消息包括定位请求和/或第一定位信息。
根据该方法，可由第二网络设备指示终端设备发送第一指示，实现网络对于终端设备行为的管理。
可选地，上述“该方法还包括：”描述的部分还可以替换为以下描述：
“第二网络设备接收终端设备的第四消息；所述第二网络设备向所述终端设备发送第二指示；其中，所述第二指示用于指示所述终端设备发送第一指示，所述第一指示用于指示或表示或表征NAS消息包括定位请求和/或第一定位信息。”，或者，
“第二网络设备接收终端设备的第四消息；所述第二网络设备向所述终端设备发送第二指示；其中，所述第二指示用于指示所述终端设备发送第一指示，所述第一指示用于指示或表示或表征所述定位请求和/或所述第一定位信息是发送至园区第一网络设备的。”
应理解，第二网络设备可以在接收第四消息后，发送该第二指示，或者，接收到第四消息，同时发送第二指示，不具体限定。
应理解，所述第四消息可以是以下任意一种：
注册请求(registration request)、注册完成(registration complete)、去注册接受(deregistration accept)、去注册请求(deregistration request)、服务请求(service request)、服务拒绝(service reject)、服务接受(service accept)、控制面服务请求(control plane service request)、上行非接入层传输(UL NAS transport)、移动发起的定位请求(mobile originated  location request，MO-LR)、鉴权回复(Authentication response)、鉴权失败(Authentication failure)、配置更新完成(configuration update complete)、身份回复(identity response)、通知回复(notification response)、安全模式完成(security mode complete)、安全模式拒绝(security mode reject)、受安全保护的5G非接入层消息(security protected 5GS NAS message)、5G移动管理状态(5G mobility management status，5GMM status)、网络切片特定身份验证完成(network slice-specific authentication complete)、LPP协议数据单元(LTE positioning protocol packet data unit，LPP PDU)、NR协议数据单元(NR positioning protocol packet data unit，NPP PDU/NRPP PDU)、LPP消息(LPP message)、请求能力(request capabilities)、提供能力(provide capabilities)、请求辅助数据(request assistance data)、提供辅助数据(provide assistance data)、请求位置信息(request location information)、提供位置信息(provide location information)、LPP请求或提供位置信息消息(LPP request/provide location information message)、LPP能力传输(LPP capability transfer)、LPP请求或提供辅助数据消息(LPP request/provide assistance data message)、LPP请求或提供能力消息(LPP request/provide capability message)、LPP流程(LPP procedure)、LPP能力传输(LPP capability transfer)、NR消息(NR message)、NR请求或提供位置信息消息(NR request/provide location information message)、NR能力传输(NR capability transfer)、NR请求或提供辅助数据消息(NR request/provide assistance data message)、NR请求或提供能力消息(NR request/provide capability message)、NR流程(NR procedure)、NR能力传输(NR capability transfer)，PDU会话建立请求(PDU session establishment request)、PDU会话修改请求(PDU session modification request)、PDU会话释放请求(PDU session release request)，远程UE上报(remote UE report)、NG建立请求(NG setup request)、传输接收点信息回复(TRP information response)、能力交换(capability exchange)，等。
在一种可能的实现方式中，所述第二指示可用于指示不对所述定位请求和/或所述第一定位信息进行加密；或者，所述第二指示用于指示对所述定位请求和/或所述第一定位信息按照第一加密方式进行加密。
应理解，所述第一加密方式，同上述第二方面中针对该词汇的相应解释，此处不再赘述。
在一种可能的实现方式中，所述第二网络设备还可确定所述终端设备与定位业务相关联。
根据该实现方式，第二网络设备可在确定终端设备与定位业务相关联后向终端设备发送第二指示，以准确确定需要发送第一指示的终端设备，进一步提高定位业务的安全性。
在一种可能的实现方式中，所述第二网络设备可确定(determine)所述终端设备的签约信息包括定位业务信息。
应理解，定位业务信息可以包括定位业务的相关信息，例如，终端设备是否具备园区业务的参数；再例如，终端设备是否签约园区业务(to business，To B)的参数；再例如，终端设备签约园区业务的参数；再例如，终端设备具备园区业务的参数；等。或者，定位业务信息可以理解为或者替换为面向企业客户(to business，to B)的相关参数。
在一种可能的实现方式中，第二网络设备还可向所述接入网设备发送所述第一网络设备的信息，所述第一网络设备是园区网络设备。
应理解，所述第一网络设备的信息、第二网络设备、园区、等的解释与本申请第一方 面中相应解释相同，此处不再赘述。
在一种可能的实现方式中，第二网络设备还可接收来自于所述接入网设备的第一信息，所述第一信息用于指示所述第二网络设备提供第一网络设备的信息，或者所述第一信息用于请求所述第一网络设备的信息。
在一种可能的实现方式中，第二网络设备接收第一网络设备的第五消息，所述第五消息用于提取或获取所述终端设备的信息，所述第五消息携带所述终端设备的标识。所述第二网络设备向所述第一网络设备发送第五消息的回复消息，第五消息的回复消息携带终端设备的信息。
应理解，所述终端设备的信息可以是以下任意一种：
终端设备的上下文(UE context)的部分或全部、终端设备的签约信息的部分或全部、终端设备的注册信息的部分或全部、终端设备的配置信息的部分或全部，等。
应理解，所述终端设备的标识，可以是用户永久标识(subscription permanent identifier，SUPI)、用户隐藏标识符(subscription concealed identifier，SUCI)、一般公共订阅标识符(generic public subscription identifier，GPSI)、永久设备标识(permanent equipment identifier，PEI)、国际移动用户识别码(international mobile subscriber identity，IMSI)、全局唯一的临时标识(globally unique temporary identity，GUTI)，等，本申请不作限定。终端设备的标识还可包括NG应用层协议(NG application protocol，NGAP)标识(NGAP UE ID)。其中，NGAP UE ID可包括接入网设备分配的RAN NGAP UE ID(如收到第一消息后RAN为UE分配的RAN NGAP UE ID)和/或公网AMF分配的AMF NGAP UE ID。
应理解，第五消息可以是请求传输终端设备的上下文(Namf_Communication_UEContextTransfer)，或者，第五消息可以是一条新的消息或者其它消息，但是其功能是用于请求传输终端设备的上下文；相应的，第五消息的回复消息可以是请求终端设备的上下文的回复(Namf_Communication_UEContextTransfer response)，或者，第五消息的回复可以是一条新的消息或者其它消息，但是其功能是用于传输终端设备的上下文。
以上第三方面及其任意可能的实现方式的有益效果，可以参见对于第一方面或第二方面中相应的实现方式的有益效果的说明。
第四方面，本申请还提供了一种通信装置，所述通信装置可以是接入网设备或接入网设备中的组件。该通信装置具有实现上述第一方面或第一方面的各个可能的实现方式中的方法的功能。所述功能可以通过硬件实现，也可以通过硬件执行相应的软件实现。所述硬件或软件包括一个或多个与上述功能相对应的模块。
在一个可能的实现方式中，所述通信装置的结构中包括通信模块和处理模块，这些模块或单元可以执行上述第一方面或第一方面的各个可能的实现方式中的相应功能，具体参见方法示例中的详细描述，此处不做赘述。例如，通信模块可包括接收模块和/或发送模块。
在一个可能的实现方式中，所述通信装置的结构中包括通信接口和处理器，可选的还包括存储器，所述通信接口用于收发信息或数据，以及用于与通信网络中的其他设备进行通信交互，所述处理器被配置为支持所述通信装置执行上述第一方面或第一方面的各个可能的实现方式中的相应的功能。所述存储器与所述处理器耦合，其保存所述通信装置必要的程序指令和数据。
第五方面，本申请还提供了一种通信装置，所述通信装置可以是终端设备或终端设备 中的组件。该通信装置具有实现上述第二方面或第二方面的各个可能的实现方式中的方法的功能。所述功能可以通过硬件实现，也可以通过硬件执行相应的软件实现。所述硬件或软件包括一个或多个与上述功能相对应的模块。
在一个可能的实现方式中，所述通信装置的结构中包括通信模块和处理模块，这些模块或单元可以执行上述第二方面或第二方面的各个可能的实现方式中的相应功能，具体参见方法示例中的详细描述，此处不做赘述。例如，通信模块可包括接收模块和/或发送模块。
在一个可能的实现方式中，所述通信装置的结构中包括通信接口和处理器，可选的还包括存储器，所述通信接口用于收发信息或数据，以及用于与通信网络中的其他设备进行通信交互，所述处理器被配置为支持所述通信装置执行上述第二方面或第二方面的各个可能的实现方式中的相应的功能。所述存储器与所述处理器耦合，其保存所述通信装置必要的程序指令和数据。
第六方面，本申请还提供了一种通信装置，所述通信装置可以是第二网络设备或第二网络设备中的组件。该通信装置具有实现上述第三方面或第三方面的各个可能的实现方式中的方法的功能。所述功能可以通过硬件实现，也可以通过硬件执行相应的软件实现。所述硬件或软件包括一个或多个与上述功能相对应的模块。
在一个可能的实现方式中，所述通信装置的结构中包括通信模块和处理模块，这些模块或单元可以执行上述第三方面或第三方面的各个可能的实现方式示例中的相应功能，具体参见方法示例中的详细描述，此处不做赘述。例如，通信模块可包括接收模块和/或发送模块。
在一个可能的实现方式中，所述通信装置的结构中包括通信接口和处理器，可选的还包括存储器，所述通信接口用于收发信息或数据，以及用于与通信网络中的其他设备进行通信交互，所述处理器被配置为支持所述通信装置执行上述第三方面或第三方面的各个可能的实现方式示例中的相应的功能。所述存储器与所述处理器耦合，其保存所述通信装置必要的程序指令和数据。
第七方面，本申请实施例提供了一种通信系统，可以包括如上述第四方面、第五方面和第六方面及其任意可能的实现方式所述的通信装置。
第八方面，本申请实施例提供的一种计算机可读存储介质，该计算机可读存储介质存储有程序指令，当程序指令在计算机上运行时，使得计算机执行本申请实施例第一方面至第三方面及其任一可能的实现方式中所述的方法。示例性的，计算机可读存储介质可以是计算机能够存取的任何可用介质。以此为例但不限于：计算机可读介质可以包括非瞬态计算机可读介质、随机存取存储器(random-access memory，RAM)、只读存储器(read-only memory，ROM)、电可擦除可编程只读存储器(electrically EPROM，EEPROM)、CD-ROM或其他光盘存储、磁盘存储介质或者其他磁存储设备、或者能够用于携带或存储具有指令或数据结构形式的期望的程序代码并能够由计算机存取的任何其他介质。
第九方面，本申请实施例提供一种计算机程序产品，包括计算机程序代码或指令的，当计算机程序代码或指令在计算机上运行时，使得上述第一方面至第三方面或其中任一可能的实现方式中所述的方法被执行。
第十方面，本申请还提供了一种芯片，包括处理器，所述处理器与存储器耦合，用于读取并执行所述存储器中存储的程序指令，以使所述芯片实现上述第一方面至第三方面或其中任一种可能的实现方式中所述的方法。
上述第二方面至第十方面中的各个方面以及各个方面可能达到的技术效果请参照上述针对第一方面至第三方面及其任一可能的实现方式中所述的方法的有益效果说明，这里不再重复赘述。
附图说明
图1A为本申请实施例提供的一种通信系统的架构示意图；
图1B为本申请实施例提供的另一种通信系统的架构示意图；
图2为本申请实施例提供的另一种通信系统的架构示意图；
图3为本申请实施例提供的另一种通信系统的架构示意图；
图4A为本申请实施例提供的一种通信方法的流程示意图；
图4B为本申请实施例提供的另一种通信方法的流程示意图；
图4C为本申请实施例提供的另一种通信方法的流程示意图；
图5为本申请实施例提供的另一种通信方法的流程示意图；
图6为本申请实施例提供的另一种通信方法的流程示意图；
图7为本申请实施例提供的另一种通信方法的流程示意图；
图8为本申请实施例提供的一种通信装置的结构示意图；
图9为本申请实施例提供的另一种通信装置的结构示意图。
具体实施方式
为了使本申请的目的、技术方案和优点更加清楚，下面将结合附图对本申请作进一步地详细描述。
为了便于理解本申请的技术方案，下面先对本申请所涉及的技术术语进行简单介绍。
以下对本申请实施例的部分用语进行解释说明，以便于本领域技术人员理解。
1)用户设备，也称终端设备，是一种具有无线收发功能的设备，可以经(无线)接入网设备(radio access network，(R)AN)中的接入网设备(或者也可以称为接入设备)与一个或多个核心网(core network，CN)设备(或者也可以称为核心设备)进行通信。
用户设备也可称为接入终端、终端、用户单元、用户站、移动站、移动台、远方站、远程终端、移动设备、用户终端、用户代理或用户装置等。用户设备可以部署(deployed in)在陆地上，包括室内或室外、手持或车载；也可以部署在水面上(如轮船等)；还可以部署在空中(例如飞机、气球和卫星上等)。用户设备可以是蜂窝电话(cellular phone)、无绳电话、会话启动协议(session initiation protocol，SIP)电话、智能电话(smart phone)、手机(mobile phone)、无线本地环路(wireless local loop，WLL)站、个人数字处理(personal digital assistant，PDA)等。或者，用户设备还可以是具有无线通信功能的手持设备、计算设备或连接到无线调制解调器的其它设备、车载设备、可穿戴设备、无人机设备或物联网、车联网中的终端、第五代移动通信(5th-generation，5G)网络以及未来网络中的任意形态的终端、中继用户设备或者未来演进的PLMN中的终端等。其中，中继用户设备例如可以是5G家庭网关(residential gateway，RG)。例如用户设备可以是虚拟现实(virtual reality，VR)终端、增强现实(augmented reality，AR)终端、工业控制(industrial control)中的无线终端、无人驾驶(self driving)中的无线终端、远程医疗(remote medical)中的无线 终端、智能电网(smart grid)中的无线终端、运输安全(transportation safety)中的无线终端、智慧城市(smart city)中的无线终端、智慧家庭(smart home)中的无线终端等。本申请实施例对终端设备的类型或种类等并不限定。
所述用户设备还可以包括端侧设备，如本地交换机(local switch，LSW)，和/或客户端设备(customer premise equipment，CPE)等，或者，用户设备可通过LSE或CPE接入网络。
在本申请实施例中注册入网的用户设备(user equipment，UE)可以理解为用户。其中一个UE可以对应一个用户识别模块(subscriber identity module，SIM)卡，即当终端设备安装有一个SIM卡时，终端设备对应一个用户UE，当终端设备安装有多个SIM卡时，终端设备对应多个用户UE。
本申请中，网络设备，指可以为终端提供无线接入功能的设备。其中，网络设备可以支持至少一种无线通信技术，例如长期演进(long term evolution，LTE)、新无线(new radio，NR)、宽带码分多址(wideband code division multiple access，WCDMA)等。
又如，网络设备可以包括核心网(CN)设备，核心网设备例如包括AMF等。
在本申请中，(无线)接入网设备可用于为特定区域的授权用户设备提供入网功能，并能够根据用户设备的级别，业务的需求等使用不同质量的传输隧道。
(R)AN能够管理无线资源，为用户设备提供接入服务，进而完成控制信号和用户设备数据在用户设备和核心网之间的转发，(R)AN也可以理解为传统网络中的基站。
示例性地，本申请实施例中的接入网设备可以是用于与用户设备通信的任意一种具有无线收发功能的通信设备。该接入网设备包括但不限于：演进型节点B(evolved Node B，eNB)、无线网络控制器(radio network controller，RNC)、节点B(Node B，NB)、基站控制器(base station controller，BSC)、基站收发台(base transceiver station，BTS)、家庭基站(home evolved NodeB，HeNB，或home Node B，HNB)、基带单元(baseBand unit，BBU)，无线保真(wireless fidelity，WIFI)系统中的接入点(access point，AP)、无线中继节点、无线回传节点、传输点(transmission point，TP)或者发送接收点(transmission and reception point，TRP)等，还可以为5G，如，NR，系统中的gNB，或，传输点(TRP或TP)，5G系统中的基站的一个或一组(包括多个天线面板)天线面板，或者，还可以为构成gNB或传输点的网络节点，如基带单元(BBU)，或，分布式单元(distributed unit，DU)等。
在一些部署中，gNB可以包括集中式单元(centralized unit，CU)和DU。gNB还可以包括有源天线单元(active antenna unit，AAU)。CU实现gNB的部分功能，DU实现gNB的部分功能。比如，CU负责处理非实时协议和服务，实现无线资源控制(radio resource control，RRC)，分组数据汇聚层协议(packet data convergence protocol，PDCP)层的功能。DU负责处理物理层协议和实时服务，实现无线链路控制(radio link control，RLC)层、媒体接入控制(media access control，MAC)层和物理(physical，PHY)层的功能。AAU实现部分物理层处理功能、射频处理及有源天线的相关功能。由于RRC层的信息最终会变成PHY层的信息，或者，由PHY层的信息转变而来，因而，在这种架构下，高层信令，如RRC层信令，也可以认为是由DU发送的，或者，由DU+AAU发送的。可以理解的是，接入网设备可以为包括CU节点、DU节点、AAU节点中一项或多项的设备。此外，可以将CU划分为接入网(radio access network，RAN)中的接入网设备，也可以将 CU划分为核心网(core network，CN)中的接入网设备，本申请对此不做限定。
用户面网元：用于分组路由和转发以及用户面数据的服务质量(quality of service，QoS)处理等。
在5G通信系统中，该用户面网元可以是用户面功能(user plane function，UPF)网元。在未来通信系统中，用户面网元仍可以是UPF网元，或者，还可以有其它的名称，本申请不做限定。
数据网络网元：用于提供传输数据的网络。
在5G通信系统中，该数据网络网元可以是数据网络(data network，DN)网元。在未来通信系统中，数据网络网元仍可以是DN网元，或者，还可以有其它的名称，本申请不做限定。
认证服务器：用于执行用户的安全认证。在5G通信系统中，该认证服务器可以是认证服务器功能网元(authentication server function，AUSF)。
移动性管理网元：主要用于移动性管理和接入管理等。在5G通信系统中，该接入管理网元可以是接入和移动性管理功能(access and mobility management function，AMF)，主要进行移动性管理、接入鉴权/授权等功能。此外，还负责在终端与策略控制功能(policy control function，PCF)网元间传递用户策略。
会话管理网元：主要用于会话管理、用户设备的网络互连协议(internet protocol，IP)地址分配和管理、选择可管理用户平面功能、策略控制和收费功能接口的终结点以及下行数据通知等。
在5G通信系统中，该会话管理网元可以是会话管理功能(session management function，SMF)网元，完成终端IP地址分配，UPF选择，及计费与QoS策略控制等。
应用网元：在5G通信系统中，该应用网元可以是应用功能(application function,AF)网元，表示第三方或运营商的应用功能，是5G网络获取外部应用数据的接口，主要用于传递应用侧对网络侧的需求。
统一数据管理网元：负责用户标识、签约数据、鉴权数据的管理、用户的服务网元注册管理。在5G通信系统中，该统一数据管理网元可以是统一数据管理(unified data management，UDM)。
策略控制网元：包括用户签约数据管理功能、策略控制功能、计费策略控制功能、服务质量(quality of service，QoS)控制等，用于指导网络行为的统一策略框架，为控制面功能网元(例如AMF，SMF网元等)提供策略规则信息等。
在5G通信系统中，该策略控制网元可以是PCF。
网络功能存储库功能网元：为其他核心网元提供网络功能实体信息的存储功能和选择功能。在5G通信系统中，该网元可以是网络功能存储库功能网元(network function repository function，NRF)。
网络开放网元：在5G通信系统中，该网络开放网元可以是网络开放功能(network element function,NEF)网元，主要用于向AF暴露3GPP网络功能的业务和能力，同时也可以让AF向3GPP网络功能提供信息。
网络切片选择功能网元：负责为UE选择网络切片，在5G通信系统中，该应用网元可以是网络切片选择功能(network slice selection function，NSSF)网元。
在未来的通信系统，例如6G通信系统中，上述网元或设备仍可以使用其在5G通信系 统中的名称，或者也可以有其它名称，本申请实施例对此不作限定。上述网元或设备的功能可以由一个独立网元完成，也可以由若干个网元共同完成。在实际部署中，核心网中的网元可以部署在相同或者不同的物理设备上。例如作为一种可能的部署，可以将AMF和SMF部署在同一个物理设备上。又例如，5G核心网的网元可以和4G核心网的网元部署在同一物理设备上。本申请实施例对此不作限定。
在5G通信系统中，该应用网元可以是应用功能(application function，AF)网元。在未来通信系统中，应用网元仍可以是AF网元，或者，还可以有其它的名称，本申请不做限定。
如图1A和图1B所示为第五代(5th generation，5G)网络架构示意图，其中，图1A为非服务化架构下的5G网络架构示意图，图1B为服务化架构(service-based architecture，SBA)下的5G网络架构示意图。其中，服务化架构是5G网络的基础架构。服务化主要体现在控制面。SBA的本质是按照“自包含、可重用、独立管理”三原则，将网络功能定义为若干个可被灵活调用的“服务”模块。基于此，运营商可以按照业务需求进行灵活定制组网。网络功能间的交互由服务调用实现，每个网络功能对外呈现通用的服务化接口，可被授权的网络功能或服务调用。如图1B所示为5G网络的一种示例性的服务化架构示意图，该架构中，核心网网元可通过服务化接口与其他核心网网元进行通信，例如，AMF对应的服务化接口被称为Namf接口，LMF对应的接口可称为Nlmf接口。
图1A和图1B所示的5G网络架构中可包括三部分，分别是终端、DN和运营商网络。下面对其中的部分网元的功能进行简单介绍说明。
其中，运营商网络可包括但不限于以下网元中的一个或多个：AUSF、PCF、UDM、AF、AMF、SMF网元、(R)AN)设备、UPF以及NSSF等。上述运营商网络中，除无线接入网设备之外的网元或设备可以称为核心网网元或核心网设备。
此外，图1A所示的部分通信接口包括：
N1接口，为AMF与UE之间的信令面接口，用于核心网与UE之间交换信令消息，如UE注册入网、UE建立PDU会话、网络侧配置UE策略等。
N2接口，为AMF与RAN之间的接口，用于传递核心网至RAN的无线承载控制信息等。
N3接口，为(R)AN与UPF之间的接口，用于在RAN和UPF之间传递UE业务数据。
N4接口，为SMF与UPF之间的接口，用于控制面与用户面之间传递信息，包括控制面终端设备根据与运营商的签约信息完成入网操作。
N6接口，为UPF与DN之间的接口，用于在UPF和DN之间传递UE业务数据。
N5接口，为PCF与AF之间的接口。
N7接口，为PCF与SMF之间的接口，用于下发PDU会话粒度以及业务数据流粒度控制策略。
N8接口，为AMF与UDM间的接口，用于AMF向UDM获取接入与移动性管理相关签约数据与鉴权数据，以及AMF向UDM注册UE当前移动性管理相关信息等。
N9接口，为两个UPF之间的接口。例如图1A所示，该N9接口为中间UPF(intermediate UPF，I-UPF)与作为PDU会话锚点(PDU session anchor，PSA)的UPF之间的接口。
N10接口，为SMF与UDM间的接口，用于SMF向UDM获取会话管理相关签约数据，以及SMF向UDM注册UE当前会话相关信息等。
N11接口，为SMF与AMF之间的接口，用于传递RAN和UPF之间的PDU会话隧道信息、传递发送给UE的控制消息、传递发送给RAN的无线资源控制信息等。
N12接口，包括AMF与AUSF之间的接口。
N13接口，包括AUSF与UDM之间的接口。
N22接口，包括NSSF与AMF之间的接口。
可以理解的是，上述网元或者功能既可以是硬件设备中的网络元件，也可以是在专用硬件上运行软件功能，或者是平台(例如，云平台)上实例化的虚拟化功能。可选的，上述网元或者功能可以由一个设备实现，也可以由多个设备共同实现，还可以是一个设备内的一个功能模块，本申请实施例对此不作具体限定。
本申请中的会话管理网元、用户面网元、移动性管理网元分别可以是图1A中的SMF、UPF、AMF，也可以是未来通信如第六代(6th generation，6G)网络中具有上述SMF、UPF、AMF的功能的网元，本申请对此不限定。在本申请的实施例中，以SMF、UPF、AMF分别作为会话管理网元、用户面网元、移动性管理网元的一个举例进行描述。
当前技术规范提供的用于支撑定位服务的网络架构。该架构可以是在图1A或图1B所示架构的基础上进行扩展。例如在图2所示架构中，网关移动定位中心(gateway mobile location center，GMLC)可负责定位业务的定位请求处理，并为定位业务选择合适的AMF网元。位置提取功能(location retrieval function，LRF)可以与GMLC配置或单独配置，并且负责检索或验证UE的位置信息。位置服务(location service，LCS)客户端(LCS Client)可以通过GMLC与LCS客户端之间的Le接口，向GMLC发送定位请求，以发起针对UE的定位服务。位置管理功能(location management function，LMF)网元主要负责定位业务时进行定位请求管理，定位资源调配以及确定终端设备的位置。
如图2所示，NL1为AMF与LMF之间的接口。NL7为LMF与LMF之间的接口。N52为UDM与NEF之间的接口。NL2为AMF与GMLC之间的接口。NL5为NEF与GMLC之间的接口。N33为NEF与AF之间的接口。N51为AMF与NEF的接口。
一般而言，针对园区定位业务需要，LMF可以部署在更加靠近UE的位置，如部署在UE所在的园区(或称为园区网络)。本申请中，园区也可替换为以下中的一种或多种的组合：运营商网络、公共网络、非公共网络、非运营商网络、工厂网络(factory network)、垂直行业网络(vertical network)、独立非公用网络(standalone non-public network，SNPN)、PIN-NPN、公网集成模式非公用网络(public network integrated non-public network，PNI-NPN)、营业场所(premises)，或者边缘应用的环境(edge hosting environment，EHE)。例如图3所示，LMF可能部署在园区网络，用于对园区网络中的UE进行定位。在图3所示场景下，UE还可通过NG-RAN接入运营商网络，并且LMF与UE之间的定位消息或定位信息(以下可称为与定位业务有关的消息)会经过公网AMF传输，会带来定位消息或定位信息的暴露问题。因此，目前UE定位服务的安全性有待提高。
如图3所示，公网AMF与N2园区代理之间的接口可以是NL1或N14(图中未示出)。AMF与园区LMF之间的接口可以是NL1。NL5为NEF与GMLC之间的接口。N33为NEF与定位应用(如AF)之间的接口。
本申请中，UE的定位消息或定位信息可以包括UE产生的定位请求(mobile originated location request，MO-LR)消息、基于终止于UE的定位请求(mobile terminated location request，MT-LR)消息、LTE定位协议(LTE positioning protocol，LPP)消息、NR定位协议(NR positioning protocol，NR PP)消息、等相较于MT-LR消息，MO-LR消息由UE发起。
所述定位消息或定位信息的解释如上文所述，此处不再赘述。
本申请为了提高UE定位服务的安全性，本申请实施例提供一种通信方法。该方法可将UE发起的与定位有关的消息发给园区AMF(或园区N2代理)而无需公网AMF感知，因此可以提高UE定位服务的安全性。该方法可由终端设备(下文中以UE为例说明)、接入网设备、第一网络设备和第二网络设备中的至少一个实施。其中，第一网络设备可以是园区中的AMF、代理或与AMF合设的LMF。第二网络设备可以是核心网公网中的AMF或其他网元。
如图4A所示，本申请实施例提供的通信方法可包括以下步骤：
S101：终端设备向接入网设备发送无线资源控制消息。
相应的，接入网设备接收来自于终端设备的无线资源控制消息。
其中，所述无线资源控制消息包括第一指示，所述无线资源控制消息还可包括非接入层(non-access stratum，NAS)PDU。该无线资源控制消息可以是RRC消息。该第一指示可用于指示NAS PDU包括定位请求和/或第一定位信息。
其中，第一定位信息属于定位信息，定位信息可参见本申请中的解释，此处不再赘述。
作为一种示例，S101也可以替换为：无线资源控制消息包括第一指示和第二信息，第二信息包括定位请求和/或定位信息(后续可称该定位信息为第一定位信息)。该第一指示可用于指示第二信息包括定位请求和/或定位信息。其中，定位请求可以是MO-LR消息。可选的，第二信息可携带在无线资源控制消息的NAS PDU中。
应理解，当终端设备需要发送定位请求和/或定位信息，则可发送第一指示以及该定位请求和/或定位信息。其中，终端设备需要发送定位请求和/或定位信息，可能是因为需要通过发送定位请求发起对于终端设备的定位业务，或者是需要向网络侧发送定位信息(即第一定位信息)，比如，终端设备接收到了来自于网络侧的对于定位信息的请求。
可选的，S101中，NAS PDU或第二信息包括定位请求和/或第一定位信息，则第一指示可以用于指示NAS PDU或第二信息携带的内容包含定位请求和/或第一定位信息，换句话说，现有技术，接入网设备无法识别或看到NAS PDU或第二信息中的内容，第一指示的作用可以理解为告诉或指示接入网设备，NAS PDU或第二信息中的内容包括定位请求和/或第一定位信息。
或者，
第一指示可用于指示NAS PDU或第二信息是发送至园区的第一网络设备的。例如，如果第二信息包括定位请求，则第一指示可用于指示定位请求是发送至园区的第一网络设备的；和/或，如果第二信息包括第一定位信息，则第一指示可指示第一定位信息是发送至园区的第一网络设备的。
此外，本申请中，第一指示也可用于指示以上NAS PDU或第二信息不出园区，或者，可以用于指示以上NAS PDU或第二信息转发给第一网络设备等。
在一种可能的实现方式中，第一指示具体可用于指示第二信息是定位请求和/或第一定 位信息，或者，第一指示具体可用于指示第二信息与UE的定位业务相关。例如，如果第二信息包括定位请求，则第一指示可用于指示第二信息包括定位请求，具体的，如果第二信息携带在第一消息的NAS PDU中，且第二信息包括MO-LR消息，则第一指示可用于指示该NAS PDU携带或包括的MO-LR消息；和/或，如果第二信息包括第一定位信息，则第一指示可指示第二信息包括第一定位信息，具体的，如果第二信息携带在第一消息的NAS PDU中，且第二信息包括LPP消息(或NR PP消息)，则第一指示可用于指示该NAS PDU携带或包括的LPP消息(或NR PP消息)。应理解，本申请中的LPP消息可包括LPP message或LPP PDU，NR PP消息可包括NRPP message。
在获得S101中的无线资源控制消息时或之后，可选的，终端设备不对该第二信息进行加密，或者，采用与向运营商公网网元(如AMF)发送信息时的不同的加密算法，或者，采用与园区网络的网元(如AMF)发送信息时的相同的加密算法，也即，园区网络的网元(如AMF)可以进行解密。以第二信息携带在RRC消息中的NAS PDU为例，如果终端设备向公网AMF发送NAS PDU时通过某种加密算法(称为第二加密算法)进行加密，则在发送第二信息时，可采用另一套加密算法进行加密，相应的，第一网络设备可根据该另一套加密算法相应的解密算法进行解密，因此能够读取该NAS PDU中的第二信息的内容。同时，当采用另一套加密算法时，可以在运营商公网和园区采用不同的NAS加密算法，进一步提高定位服务安全性，也就是说，当终端设备分别向公网AMF和第一网络设备发送NAS PDU时，采用的加密算法不同，从而进一步提高安全性。由于S102中，第二信息不需要发送至公网AMF，因此终端设备不需要按照公网AMF对应的方式对第二信息进行加密，从而避免第一网络设备无法正常读取第二信息。
S102：接入网设备根据第一指示，向第一网络设备发送定位请求和/或第一定位信息。可选的，S102也可替换为，接入网设备根据第一指示，向第一网络设备发送第二信息。或者，S102也可替换为，接入网设备根据第一指示，向第一网络设备发送第一指示和第二信息。
下面以接入网设备根据第一指示向第一网络设备发送第二信息为例进行描述。
相应的，第一网络设备接收第二信息。
其中，第一网络设备是园区网络设备，或者说，第一网络设备部署在园区中，或者说，第一网络设备属于园区网络设备，或者说，第一网络设备位于(located inside)园区中。
应理解，该第一网络设备可用于为园区中的UE提供服务。第一网络设备，例如是园区中的AMF或AMF代理(或称为代理)。例如，以园区网络为例，第一网络设备可以是部署在园区网络的园区代理或园区AMF。或者，在园区中的AMF与LMF合设的情况下，第一网络设备也可以是园区中的LMF。参考图3所示，第一网络设备可以是部署于园区网络中的N2代理或园区AMF。
以第一指示和第二信息携带在RRC消息中为例，接入网设备可执行下述操作：在识别到RRC消息中包括第一指示时，可以将RRC消息中的NAS PDU发送至第一网络设备，而不需要解析NAS PDU中包含的内容和内容的信息类型。
例如，所述第一指示可以是通过二进制比特位的方式指示，例如，当比特位置为1时，表示NAS PDU或第二消息包括定位请求和/或第一定位信息，当比特位置为0时，表示NAS PDU或第二信息不包括定位请求和/或第一定位信息；或者，当比特位置为0时，表 示NAS PDU或第二信息包括定位请求和/或第一定位信息，当比特位置为1时，表示NAS PDU或第二信息不包括定位请求和/或第一定位信息；或者，当携带指示是否包括定位请求和/或第一定位信息的比特位时，表示NAS PDU或第二信息包括定位请求和/或第一定位信息；或者，当不携带指示是否包括定位请求和/或第一定位信息的比特位时，表示NAS PDU或第二信息不包括定位请求和/或第一定位信息；或者，所述指示可以是通过携带其它相关信息的方式来指示，例如携带一个或多个信元(information element，IE)表示NAS PDU或第二信息包括定位请求和/或第一定位信息，不携带一个或多个信元表示NAS PDU或第二信息不包括定位请求和/或第一定位信息；或者，不携带一个或多个信元表示NAS PDU或第二信息包括定位请求和/或第一定位信息，携带一个或多个信元表示NAS PDU或第二信息不包括定位请求和/或第一定位信息。
当接入网设备确定来自于终端设备的消息中的第一指示，则接入网设备确定将该消息中的NAS PDU或第二信息发送至第一网络设备。
基于以上或本申请所述流程，接入网设备可根据第一指示将定位请求和/或第一定位信息转发至第一网络设备。本申请中作为一种可选的实施方式，第一网络设备可以是园区网络设备，因此能够避免将UE发起的与定位业务有关的消息(如定位请求和定位信息)发送至公网核心网网元，可提高定位业务安全性。
其中，定位请求和/或第一定位信息可携带在RRC消息的NAS PDU中，因此该方法可通过控制面信令实现。
可选的在S102之前，接入网设备可以与第一网络设备之间建立流控制传输协议(stream control transmissio protocol，SCTP)耦连(SCTP association)或者TNL association，或者说，接入网设备已获取或者存储与该第一网络设备的信息。以第一网络设备是园区AMF(或园区代理)为例，UE在该接入网设备注册时，公网AMF可通过UE粒度的N2信令将AMF(或园区代理)的标识或地址等信息发送给接入网设备；或者，在当园区内的AMF与LMF合设时，通过UE粒度的N2信令将LMF ID或LMF的地址等信息发送给接入网设备，则接入网设备已经与园区AMF建立了SCTP耦连或TNL耦连。
此外可选的，如果接入网设备在接收到S101中的无线资源控制消息之前，尚未与第一网络设备之间建立SCTP耦连，如接入网设备在接收到该无线资源控制消息后，确定未查询到该第一网络设备的标识，则接入网设备可向公网AMF请求该UE关联的第一网络设备的信息(如第一网络设备的标识或地址等)。示例性的，如果接入网设备发现该UE处于连接管理(connection management，CM)连接(connected)态，且该UE没有关联的园区的AMF、代理和LMF(如接入网设备未存储UE关联的园区的AMF ID、代理ID和LMF ID)，则接入网设备可向第二网络设备(如公网AMF)发送第一信息，该第一信息可用于指示第二网络设备提供第一网络设备的信息，或者，可用于请求第一网络设备的信息。示例性的，接入网设备可通过第一信息，指示或请求公网AMF通过UE粒度的N2信令将第一网络设备的信息发送至接入网设备。例如，接入网设备可通过UE粒度的N2消息向公网AMF发送第一网络设备的信息的请求，该请求中可携带第一信息。第一信息具体可用于通知公网AMF为UE选择关联的园区的AMF、代理和LMF中的至少一项，作为第一网络设备。
相应的，公网AMF可根据接入网设备的第一信息，向接入网设备发送UE粒度的N2信令，N2信令中可携带园区AMF的标识或地址(或园区代理的标识或地址)，或者，当AMF与LMF合设时，N2信令中可携带LMF的标识或地址。此外，除携带第一网络设备的信息外，该N2信令中还可携带指示信息，用于通知该第一网络设备为部署在园区AMF、园区代理或与AMF合设的LMF。
如图4B所示，可选的，以上如图4A所示的通信方法还可包括S201和S202所示步骤。
S201：接入网设备接收来自于第一网络设备的第三信息。
相应的，接入网设备接收第三信息。
本申请中，该第三信息包括定位请求回复或第二定位信息。
其中，定位请求回复可以包括MO-LR响应(response)消息。
另外，第二定位信息可包括能力请求(request capabilities)信息、辅助数据请求(request assistance data)信息，或者位置信息请求(request location information)信息中的至少一项。
可选的，第三信息可对应于第二信息。
例如，如果第二定位信息包括Provide Capabilities，则第一定位信息可包括Request Capabilities；如果第二定位信息包括Provide Assistance Data，则第一定位信息包括Request Assistance Data。如果第二定位信息包括Provide Location Information，则第一定位信息可包括Request Location Information。
应理解，第二定位信息属于定位信息，定位信息可参见本申请中的说明。
应理解，图4B中S201和S202在S102之后执行只是一种可能的示例，不排除S201和S202在S101之前执行。例如，如果第二信息为定位请求，则S201和S202可以在S102之后执行，其中，S201和S202中的第三信息可包括定位请求回复，从而由第一网络设备向终端设备发送第三信息可以是定位请求回复。又如，如果第二信息为第一定位信息，则S201和S202可以在S101之前执行，其中，第三信息可包括定位请求信息。
S202：接入网设备向终端设备发送第三信息。
相应的，终端设备接收第三信息。
基于图4B所示流程，接入网设备可将第一网络设备的第二定位信息转发至UE，第二定位信息可请求UE的定位相关参数，相应的，UE通过接入网设备向第一网络设备发送第一定位信息。因此，UE的定位信息不需要经过公网核心网参数，能够降低定位过程中的传输时延从而提高定位精度。
在一种可能的示例中，本申请实施例提供的通信方法还可由第二网络设备实施，第二网络设备可用于指示终端设备执行S101。
可选的，在由通过第二网络设备指示终端设备执行S101时，以上所述第二网络设备可指示终端设备不对第二信息加密。或者，第二网络设备可指示终端设备对第二信息是按照第一加密方式加密，终端设备只要收到相应的第一指示即采用该第一加密。可选的，第一加密方式与接入网设备向公网核心网网元(如AMF)发送消息时的加密方式不同。进一步可选的，第一加密方式是与第一网络设备对应的，比如，第一加密方式与第一网络设备所在园区关联，因此当不同的第一网络设备不属于不同的园区中时，终端设备对第二信息的加密方式不同，从而进一步提高安全性。
如图4C所示，在图4A所示的S101之前还可执行S301，或执行S301和S302所示步骤。
S301：终端设备接收来自于第二网络设备的第二指示，该第二指示可用于指示发送第一指示，或者，第二指示可用于触发或指示或配置第一指示的发送，或者，第二指示可用于第一指示的发送。例如，用于指示终端设备在需要发送定位请求和/或第一定位信息时，发送第一指示。从而终端设备可根据第二指示发送第一指示。也就是说，如果终端设备接收到第二指示，终端设备在需要发送定位请求和/或第一定位信息时，向接入网设备发送无线资源控制消息，其中携带第一指示以及携带定位请求和/或第一定位信息。例如，第二指示可以是特定信息，当收到该特定信息时，终端设备执行S101。其中，第二指示的解释同上文第一指示的解释相同，此处不再赘述。
其中，第二网络设备可以是公网核心网网元，如公网AMF。或者，第二网络设备可以是公网AMF对应的接入网设备。
在一种可能的实现方式中，第二指示可用于指示无线资源控制消息中的第二信息是未加密的，则终端设备在发送第二信息时，不需要对第二信息进行加密。以第二信息携带在无线资源控制消息中的NAS PDU中为例，终端设备在根据第二信息获得该NAS PDU时，不需要对第二信息进行加密。此时，终端设备可默认在发送第二信息时还需要发送第一指示，即执行S101。也可以说，本申请中的“第二指示可用于指示发送第一指示”可替换为，“第二指示用于指示无线资源控制消息中的第二信息是未加密的”。
在另一种可能的实现方式中，第二指示可用于指示无线资源控制消息中的第二信息是按照第一加密方式加密的，则终端设备可按照第一加密方式对第二信息加密。以第二信息携带在无线资源控制消息中的NAS PDU中为例，第一加密方式可对应于第一网络设备，或者，第一网络设备支持根据第一加密方式对应的解密方式解密NAS PDU，因此第一网络设备可解析该NAS PDU从而获得第二信息。此时，终端设备可默认在发送第二信息时还需要发送第一指示，即执行S101。也可以说，本申请中的“第二指示可用于指示发送第一指示”可替换为，“第二指示用于指示无线资源控制消息中的第二信息是按照第一加密方式加密的”。
可选的，该第一加密方式与发送至公网核心网网元(如公网AMF)的NAS PDU对应的加密方式(可称为第二加密方式)不同，其中，如果终端设备需要向公网核心网网元发送NAS PDU，则需要按照第二加密方式对信息加密以获得该NAS PDU。
在该方式中，由于在本申请中，携带第二信息的NAS PDU不需要发送至公网核心网网元，因此终端设备不需要按照公网核心网网元对应的方式进行加密第二信息，如可以通过不加密第二信息或按照新的加密方式加密第二信息的方式生成用于携带第二信息的NAS PDU，使得第一网络设备得以解析该NAS PDU而获得第二信息。此外，该实现方式中，第二网络设备可通过隐式指示的方式，指示终端设备发送第一指示。
可选的，如果第二网络设备是公网AMF，则在S301之前还可执行S302。
S302：终端设备向第二网络设备发送第四消息。第四消息可以是注册请求，注册请求可用于请求注册至公网核心网。
因此第二网络设备可在终端设备的注册过程中，向终端设备发送第二指示。其中，注册请求可通过终端设备所在的接入网设备发送至第二网络设备。
可选的，第二网络设备可以在确定终端设备与定位业务相关联后发送第二指示。例如， 第二网络设备在确定终端设备的签约信息包括定位业务信息后，向终端设备发送第二指示。其中，终端设备的签约信息可来自于UDM。定位业务信息可包括面向企业客户(to business，to B)的相关参数。
此外，本申请也不排除第二网络设备不做判断，向所有的终端设备均发送第二指示，因此，所有向第二网络设备请求注册的终端设备均可在发送定位请求和/或定位信息时执行S101。
可选的，以上图4B与图4C还可结合实施，例如对于图4B的介绍，在图4C所示的S102之后还可执行S201和S202，或者，在S101之前还可执行S201和S202。其中，如果S201和S202在S101之前执行，则本申请对于S201和S202与S302和S301之间的时序不做具体限定，例如，S201和S202可以在S302之前执行，S201和S202也可以在S301之后且在S101之前执行。
在一种可能的实现方式中，如果第二网络设备是公网AMF，则第二网络设备可在UE注册过程中，通过非接入层安全模式命令(NAS security mode command，SMC)向接入网设备发送第二指示，由接入网设备将SMC发送至UE。其中，该接入网设备可以在向终端设备发送注册接受(registration accept)消息之前，发送该SMC。
下面结合图5至图7所示流程，对S302和S301的实施方式进行说明。
示例性的，当通过SMC携带第二指示时，图4C所示的S302和S301可在图5所示的终端设备的注册过程中实现。如图5所示，该S302可通过S401和S402实现，S301可通过S404和S405实现。其中在图5中，以第二网络设备是公网AMF且终端设备是UE为例进行说明。
S401：UE向接入网设备发送RRC消息，该RRC消息中可携带第四消息，第四消息可以是注册请求(registration request)消息。
例如在图5所示场景中，UE可通过Uu接口向NG-RAN发送该RRC消息。
相应的，接入网设备接收该RRC消息。
S402：接入网设备向公网AMF发送第四消息。
例如在图5所示场景中，NG-RAN可通过N2接口向公网AMF发送该注册请求消息。
相应的，公网AMF接收该第四消息。
S403：公网AMF为UE选择AUSF，并通过AUSF对UE进行鉴权认证。
S404：公网AMF向接入网设备发送SMC，该SMC中携带第二指示。
例如在图5所示场景中，公网AMF可通过N2接口向NG-RAN发送该SMC。
相应的，接入网设备可接收该SMC。
S405：接入网设备向UE发送该SMC。
例如在图5所示场景中，NG-RAN可通过Uu接口向UE发送该SMC。
相应的，UE接收该SMC，获得第二指示。
S406：UE向接入网设备发送非接入层安全模式完成(NAS security mode complete)消息，表示接收到该SMC。
相应的，接入网设备接收该非接入层安全模式完成消息。
S407：接入网设备向公网AMF发送该非接入层安全模式完成消息。
相应的，公网AMF接收该非接入层安全模式完成消息。公网AMF可按照相关注册流程进行UE的注册。
S408：如果UE注册成功，则公网AMF可向UE发送注册接受(registration accept)消息。
相应地的，UE接收注册接受消息。
采用图5所示方法，公网AMF可以在UE的注册过程中通过SMC携带第二指示，使能UE执行S101所示步骤。其中，可选的，公网AMF不需要识别UE是否与定位业务相关，因此，可以降低公网AMF的处理难度，降低处理负荷。
在另一种可能的实现方式中，如果第二网络设备是公网AMF，第二网络设备可向UE发送注册接受消息，该注册接受消息中可携带第二指示。
示例性的，当通过注册接受消息携带第二指示时，S302和S301可在图6所示的终端设备的注册过程中实现。图6中，以第二网络设备是公网AMF且终端设备是UE为例进行说明。
如图6所示，该S302可通过S401和S402实现，S301可通过S503实现。
S501：公网AMF在注册过程中，从UDM获取UE的签约信息。
可选的，AMF可以向UDM发送签约信息提取消息(Nudm_SDM_Get)，以提取UE的签约信息。
其中，在S501之前，可按照现有UE注册流程执行UE的注册。例如，在S501之前可执行图5所示S401至S403所示步骤。
S502：公网AMF确定UE的签约信息中包括面向企业客户(to business，to B)的相关参数。
S503：公网AMF在UE对应的注册接受消息中携带第二指示。
可选的，AMF也可以跳过S501至S502并执行S503，也就是不需要判断UE是否与单位业务相关，而总是在UE的注册接受消息中携带第二指示，或总是发送携带第二指示的SMC。
采用图6所示方法，公网AMF可以在UE的注册过程中通过SMC或注册接受消息携带第二指示，以指示UE执行S101所示步骤。其中，公网AMF可以识别UE是否与定位业务相关；或者也可以对全部注册UE均发送第二指示，此时可跳过S501至S502。
此外，图6所示流程与图5所示流程的另一个区别在于，图6所示流程中，公网AMF可以在UE注册过程中根据UE的签约信息识别UE是否与定位业务相关，从而决定是否发送第二指示，因此公网AMF不需要针对全部UE发送第二指示，可降低信令开销。应理解，也不排除在图5所示S404之前，由公网AMF确定UE与定位业务相关，例如，在S404之前可执行S501至S502所示步骤，从而通过S403和S405实现第二指示的发送。
应理解，本申请不排除终端设备在未接收到上述第二指示的情况下执行S101。例如，终端设备可被配置(包括预配置或基于其他信令被配置)为执行S101，或者说，终端设备可默认执行S101。
本申请实施例提供的一种通信方法可包括如图7所示的步骤。
应理解，图4A至图4C所示流程中的S101可由图7所示的S601实现，图4A至图4C所示流程中的S102可由图7所示的S602实现。图4B中的S201和S202，可分别由图7中的S605和S606实现。
如图7所示，该通信方法可包括以下步骤：
S601：UE向接入网设备发送无线资源控制消息(后续为方便说明，可将该消息为第一消息)，所述第一消息包括第一指示，并且，第一消息还可包括定位请求。可选的，第一消息中的定位请求未加密或按照第一加密方式加密。S601可参照前述对于S101的说明。
以图3为例，接入网设备可以是部署在园区中的NG-RAN。在一种可能的实现方式中，以图3所示场景为例，UE可通过Uu接口向NG-RAN发送第一消息。第一消息可以是RRC消息。例如，该RRC消息中可包括第一指示和携带有定位请求的NAS PDU，NAS PDU可以包括或携带LPP PDU或NR PP PDU等。
相应地，接入网设备接收该第一消息。
S602：接入网设备根据第一指示将定位请求发送至第一网络设备。S602可参照前述对于S102的说明。
其中，当接入网设备收到携带第一指示的第一消息后，可根据第一指示将定位请求发送至第一网络设备，或根据第一指示确定将定位请求发送至第一网络设备。
可选的，接入网设备可向第一网络设备发送NX消息，其中携带该定位请求。该NX消息中还可包括UE的标识和管理UE的公网AMF的标识中的至少一项。其中，UE的标识可包括GUTI或5G-GUTI)和/或UE的NGAP UE ID。
相应地，第一网络设备接收定位请求。
可选的，在S602之前，接入网设备可向第二网络设备(如公网AMF)发送第一信息，该第一信息可用于指示第二网络设备提供第一网络设备的信息，或者，可用于请求第一网络设备的信息。相应的，接入网设备可接收来自于第二网络设备的该第一网络设备的信息，从而接入网设备与第一网络设备建立SCTP耦连。第一网络设备的信息如上文所述，此处不再赘述。
S603：第一网络设备向LMF发送定位请求和UE的标识。
其中，S103中UE的标识可以是UE的用户永久标识符(subscription permanent identifier，SUPI)或通用公共用户标识(generic public subscription identifier，GPSI)。UE的SUPI或GPSI可根据UE的GUTI或NGAP UE ID获得。
其中，第一网络设备可以是园区AMF、园区代理。其中，园区AMF可与园区LMF合设。
在S603的一种可能的实现方式中，第一网络设备可向园区LMF发送位置定位请求(Nlmf_Location_DetermineLocation request)，其中包括定位请求和UE的标识。位置定位请求中还可包括定位业务相关的标识信息，用于标识本次定位业务或定位会话或位置定位请求。定位业务相关的标识信息例如LCS关联标识(LCS correlation ID)、LCS会话标识(LCS session ID)、增强LCS(enhanced LCS，eLCS)会话标识(eLCS session ID)、eLCS关联标识(eLCS correlation ID)、LCS业务标识(LCS service ID)、eLCS业务标识(eLCS service ID)、NR定位协议A(NRPPa)事务标识(NRPPa transaction ID)等。
可选的，在S603的执行之前，第一网络设备可向第二网络设备发送第三消息，用于从第二网络设备获取UE的相关信息。其中，第二网络设备可以是运营商公网中的网元，如公网AMF。第三消息可包括UE上下文提取(Namf_Communication_UEContextTransfer)消息。该第三消息中可携带UE标识，如5G-GUTI或者NGAP UE ID。第二网络设备可向第一网络设备发送第三消息的响应消息，其中携带UE相关的信息。
S604：LMF向第一网络设备发送第二定位信息。第二定位信息可以用于进行UE的定位测量。该第二定位信息可根据定位请求和/或UE的相关信息确定。第二定位信息可参见前述说明。
其中，第二定位信息可携带于LMF发送的定位协议数据单元中。可选的，该定位协议数据单元例如是LPP PDU或NR PP PDU等。
可选的，如图3所示，LMF可向园区AMF或园区代理发送N1N2消息传输(Namf_Communication_N1N2MessageTransfer)，并携带该协议数据单元。可选的，N1N2消息传输还可携带定位业务相关的标识信息。
相应的，第一网络设备接收来自于LMF的第二定位信息。
S605：第一网络设备向接入网设备发送第二定位信息。S605可参照前述S201。
可选的，第一网络设备还可向接入网设备发送定位业务相关的标识信息。
示例性的，如图3所示的园区AMF或园区代理可向NG-RAN发送NGAP下行非接入层传输(NGAP downlink NAS transport)消息。该消息中可携带定位协议数据单元。可选的，该消息中还可携带定位业务相关的标识信息。
相应的，接入网设备接收来自于第一网络设备的第二定位信息。
S606：接入网设备向UE发送第二定位信息。S605可参照前述S202。
示例性的，如图3所示的NG-RAN可向UE发送下行RRC信息传输(RRC downlink information transfer)，其中携带包括第二定位信息或携带第二定位信息和的定位协议数据单元。
相应的，UE接收定第二定位信息。
S607：UE向接入网设备发送第二消息，所述第二消息包括第一指示和第一定位信息。第一指示可参见S102中的说明。可选的，第二消息中的第一定位信息未加密或按照第一加密方式加密。第一定位信息与第二定位信息相对应，具体可参见前述说明，这里不再展开。
S607的实施方式可参见S101的说明。例如，S107中的第二消息可以是上行RRC消息，第一定位信息可携带在NAS PDU中，该NAS PDU的可以包括或携带LPP消息或NR PP消息。
例如图3所示，UE可向NG-RAN发送上行RRC消息传输(RRC uplink information transfer)(即第二消息)，上行RRC消息传输中可携带第一指示和NAS PDU。该NAS PDU可包括第一定位信息。
相应的，接入网设备接收第二消息。
S608：接入网设备根据第一指示向第一网络设备发送第一定位信息。
可选的，接入网设备还可向第一网络设备发送定位业务相关的标识信息，以指示该第一定位信息关联的定位服务(例如，指示该第一定位信息是对应于哪个UE的哪次定位业务或定位会话或定位测量)。
例如，图3所示的NG-RAN可向园区AMF或园区代理发送上行非接入层消息传输(NGAP uplink NAS transport)，其中携带包括第一定位信息的NAS PDU，NAS PDU可以包括或携带LPP消息或NR PP消息。可选的，该上行非接入层消息传输种还可包含定位业务相关的标识信息。
相应的，第一网络设备接收来自于接入网设备的第一定位信息。
S609：第一网络设备向LMF发送第一定位信息。
可选的，第一网络设备还可向第一网络设备发送定位业务相关的标识信息。
仍以图3为例，园区AMF或园区代理可向园区LMF发送N1消息通知，其中携带包括第一定位信息的NAS PDU，NAS PDU可以包括或携带LPP消息或NR PP消息。可选的，该N1消息通知中还可包含定位业务相关的标识信息。
应理解，在S609之后，第一网络设备还可通过接入网设备向终端设备发送定位请求回复。第一网络设备向终端设备发送定位请求回复的过程可参照S201、S202以及S604至S606中的介绍，这里不再赘述。
采用图7所示流程，当UE发起定位消息时，可向接入网设备发送定位消息和第一指示，使得接入网设备根据该第一指示，将定位相关消息(如定位请求和/或第一定位信息)发送至第一网络设备，而不会将定位相关消息发送至运营商公网中的AMF等核心网网元。此后，第一网络设备可将定位消息发送至园区中的LMF，从而在园区中实现将定位消息和/或定位信息转发给园区的网络设备，能够避免定位事件、定位信息、定位请求、位置信息、定位测量结果等被暴露给运营商公网中的网元，从而提高定位服务安全性。
应理解，本申请各个实施例中的相同描述的步骤之间可以相互引用，各个相同的技术术语和概念之间也可以相互引用。
上述本申请提供的实施例中，分别从各个功能模块或设备本身、以及从各个功能模块或设备之间交互的角度对本申请实施例提供的通信方法的各方案进行了介绍。可以理解的是，各个功能模块或设备，例如上述业务控制网元、计算控制网元、计算网元和接入网设备为了实现上述功能，其包含了执行各个功能相应的硬件结构和/或软件模块。本领域技术人员应该很容易意识到，结合本申请中所公开的实施例描述的各示例的单元及算法步骤，本申请能够以硬件或硬件和计算机软件的结合形式来实现。某个功能究竟以硬件还是计算机软件驱动硬件的方式来执行，取决于技术方案的特定应用和设计约束条件。专业技术人员可以对每个特定的应用来使用不同方法来实现所描述的功能，但是这种实现不应认为超出本申请的范围。
示例性的，当上述功能模块或者设备通过软件模块来实现相应的功能时，本申请实施例提供的一种通信装置可以如图8所示。参阅图8所示，该通信装置800可以包括通信模块801和处理模块802。其中，所述通信模块801用于所述通信装置800接收信息(消息或数据)和/或发送信息(消息或数据)，所述处理模块802用于对所述通信装置800的动作进行控制管理。所述处理模块802还可以控制所述通信模块801执行的步骤。例如，通信模块801可包括接收模块和/或发送模块。
可选的，该通信装置800具体可以是上述实施例中的接入网设备、终端设备或第二网络设备，或接入网设备、终端设备或第二网络设备中的处理器，或者芯片，或者芯片系统，或者是一个功能模块等；或者，该通信装置800具体可以是上述实施例中的业务控制网元、计算控制网元、计算网元或接入网设备的处理器，或者芯片，或者芯片系统，或者是一个功能模块等。
在一个实施例中，所述通信装置800用于实现上述所述的实施例中接入网设备的功能时，通信模块801可用于接收来自于终端设备的无线资源控制消息，所述无线资源控制消息包括第一指示，所述无线资源控制消息还包括非接入层消息，所述第一指示用于指示所述非接入层消息包括定位请求和/或第一定位信息；通信模块801还可用于根据所述第一指 示向第一网络设备发送所述非接入层消息，所述第一网络设备是园区网络设备。
在一种可能的实现方式中，通信模块801还可用于接收来自于所述第一网络设备的定位请求回复和/或第二定位信息；通信模块801还可用于向所述终端设备发送所述定位请求回复和/或所述第二定位信息。
在一种可能的实现方式中，通信模块801还可用于向第二网络设备发送第一信息，所述第一信息用于指示所述第二网络设备提供所述第一网络设备的信息，或者所述第一信息用于请求所述第一网络设备的信息；通信模块801还可用于接收来自于所述第二网络设备的所述第一网络设备的信息。
在一种可能的实现方式中，通信模块801还可用于与所述第一网络设备建立流控制传输协议耦连。
在一个实施例中，所述通信装置800用于实现上述所述的实施例中终端设备的功能时，通信模块801可用于向接入网设备发送无线资源控制消息，所述无线资源控制消息包括第一指示，所述无线资源控制消息还包括非接入层消息，所述第一指示用于指示所述非接入层消息包括定位请求和/或第一定位信息。
在一种可能的实现方式中，通信模块801还可用于接收来自于所述接入网设备的定位请求回复和/或第二定位信息。
在一种可能的实现方式中，通信模块801还可用于接收第二指示，所述第二指示用于指示发送所述第一指示。
在一种可能的实现方式中，所述第二指示用于指示不对所述定位请求和/或所述第一定位信息进行加密；或者，所述第二指示用于指示对所述定位请求和/或所述第一定位信息按照第一加密方式进行加密。
在一种可能的实现方式中，所述第二指示携带在非接入层安全模式命令或者注册接受消息中。
在一种可能的实现方式中，所述定位请求和/或所述第一定位信息携带在非接入层协议数据单元中。
在一个实施例中，所述通信装置800用于实现上述所述的实施例中终端设备的功能时，通信模块801可用于接收终端设备的第四消息；通信模块801还可用于向所述终端设备发送第二指示；其中，所述第二指示用于指示所述终端设备发送第一指示，所述第一指示用于指示非接入层消息包括定位请求和/或第一定位信息。
在一种可能的实现方式中，所述第二指示用于指示不对所述定位请求和/或所述第一定位信息进行加密；或者，所述第二指示用于指示对所述定位请求和/或所述第一定位信息按照第一加密方式进行加密。
在一种可能的实现方式中，处理模块802还可用于确定所述终端设备与定位业务相关联。
在一种可能的实现方式中，处理模块802还可用于确定所述终端设备的签约信息包括定位业务信息。
在一种可能的实现方式中，通信模块801还可用于向所述接入网设备发送所述第一网络设备的信息。
在一种可能的实现方式中，通信模块801还可用于接收来自于所述接入网设备的第一信息，所述第一信息用于指示所述第二网络设备提供第一网络设备的信息，或者所述第一 信息用于请求所述第一网络设备的信息。
需要说明的是，本申请实施例中对通信装置的上述模块的划分是示意性的，仅仅为一种逻辑功能划分，实际实现时可以有另外的划分方式。在本申请的实施例中的各功能单元可以集成在一个处理单元中，也可以是各个单元单独物理存在，也可以两个或两个以上单元集成在一个单元中。上述集成的单元既可以采用硬件的形式实现，也可以采用软件功能单元的形式实现。
所述集成的单元如果以软件功能单元的形式实现并作为独立的产品销售或使用时，可以存储在一个计算机可读取存储介质中。基于这样的理解，本申请的技术方案本质上或者说对现有技术做出贡献的部分或者该技术方案的全部或部分可以以软件产品的形式体现出来，该计算机软件产品存储在一个存储介质中，包括若干指令用以使得一台计算机设备(可以是个人计算机，服务器，或者网络设备等)或处理器(processor)执行本申请各个实施例所述方法的全部或部分步骤。而前述的存储介质包括：U盘、移动硬盘、只读存储器(read-only memory，ROM)、随机存取存储器(random access memory，RAM)、磁碟或者光盘等各种可以存储程序代码的介质。
示例性的，当上述功能模块或者设备通过硬件来实现相应的功能时，本申请实施例提供的一种通信装置可以如图9所示。参阅图9所示，通信装置900可以包括通信接口901和处理器902。可选的，所述通信装置900中还可以包括存储器903。
具体地，所述处理器902可以是中央处理器(central processing unit，CPU)，网络处理器(network processor，NP)或者CPU和NP的组合。所述处理器902还可以进一步包括硬件芯片。上述硬件芯片可以是专用集成电路(application-specific integrated circuit，ASIC)，可编程逻辑器件(programmable logic device，PLD)或其组合。上述PLD可以是复杂可编程逻辑器件(complex programmable logic device，CPLD)，现场可编程逻辑门阵列(field-programmable gate array，FPGA)，通用阵列逻辑(generic array logic，GAL)或其任意组合。
其中，所述通信接口901、所述处理器902和所述存储器903之间相互连接。可选的，所述通信接口901、所述处理器902和所述存储器903通过总线904相互连接；所述总线904可以是外设部件互连标准(Peripheral Component Interconnect，PCI)总线或扩展工业标准结构(Extended Industry Standard Architecture，EISA)总线等。所述总线可以分为地址总线、数据总线、控制总线等。为便于表示，图9中仅用一条粗线表示，但并不表示仅有一根总线或一种类型的总线。
在一种可选的实施方式中，所述存储器903，用于存放程序等。具体地，程序可以包括程序代码，该程序代码包括计算机操作指令。所述存储器903可能包括RAM，也可能还包括非易失性存储器(non-volatile memory)，例如一个或多个磁盘存储器。所述处理器902执行所述存储器903所存放的应用程序，实现上述功能，从而实现通信装置900的功能。
可选的，该通信装置900可以是上述实施例中的接入网设备、终端设备或第二网络设备。
在一个实施例中，所述通信装置900在实现图4A、图4B、图4C、图5至图7所示的实施例中接入网设备的功能时，通信接口901可以实现图4A、图4B、图4C、图5至图7所示的实施例中的由接入网设备执行的收发操作；处理器902可以实现图4A、图4B、图 4C、图5至图7所示的实施例中由接入网设备执行的除收发操作以外的其他操作。具体的相关具体描述可以参见上述图4A、图4B、图4C、图5至图7所示的实施例中的相关描述，此处不再详细介绍。
在一个实施例中，所述通信装置900在实现图4A、图4B、图4C、图5至图7所示的实施例中终端设备的功能时，通信接口901可以实现图4A、图4B、图4C、图5至图7所示的实施例中的由终端设备执行的收发操作；处理器1202可以实现图4A、图4B、图4C、图5至图7所示的实施例中由中终端设备执行的除收发操作以外的其他操作。具体的相关具体描述可以参见上述图4A、图4B、图4C、图5至图7所示的实施例中的相关描述，此处不再详细介绍。
在一个实施例中，所述通信装置900在实现图4A、图4B、图4C、图5至图7所示的实施例中第二网络设备的功能时，通信接口901可以实现图4A、图4B、图4C、图5至图7所示的实施例中的由第二网络设备执行的收发操作；处理器902可以实现图4A、图4B、图4C、图5至图7所示的实施例中由第二网络设备执行的除收发操作以外的其他操作。具体的相关具体描述可以参见上述图4A、图4B、图4C、图5至图7所示的实施例中的相关描述，此处不再详细介绍。
基于以上实施例，本申请实施例提供了一种网络结构，该网络结构可以包括上述实施例涉及的接入网设备、终端设备或第二网络设备等。
本申请实施例还提供一种计算机可读存储介质，所述计算机可读存储介质用于存储计算机程序，该计算机程序被计算机执行时，所述计算机可以实现上述方法实施例提供的通信方法。
本申请实施例还提供一种计算机程序产品，所述计算机程序产品用于存储计算机程序，该计算机程序被计算机执行时，所述计算机可以实现上述方法实施例提供的通信方法。
本申请实施例还提供一种芯片，包括处理器，所述处理器与存储器耦合，用于调用所述存储器中的程序使得所述芯片实现上述方法实施例提供的通信方法。
本申请实施例还提供一种芯片，所述芯片与存储器耦合，所述芯片用于实现上述方法实施例提供的通信方法。
本领域内的技术人员应明白，本申请的实施例可提供为方法、系统、或计算机程序产品。因此，本申请可采用完全硬件实施例、完全软件实施例、或结合软件和硬件方面的实施例的形式。而且，本申请可采用在一个或多个其中包含有计算机可用程序代码的计算机可用存储介质(包括但不限于磁盘存储器、CD-ROM、光学存储器等)上实施的计算机程序产品的形式。
本申请是参照根据本申请的方法、设备(系统)、和计算机程序产品的流程图和/或方框图来描述的。应理解可由计算机程序指令实现流程图和/或方框图中的每一流程和/或方框、以及流程图和/或方框图中的流程和/或方框的结合。可提供这些计算机程序指令到通用计算机、专用计算机、嵌入式处理机或其他可编程数据处理设备的处理器以产生一个机器，使得通过计算机或其他可编程数据处理设备的处理器执行的指令产生用于实现在流程图一个流程或多个流程和/或方框图一个方框或多个方框中指定的功能的装置。
这些计算机程序指令也可存储在能引导计算机或其他可编程数据处理设备以特定方式工作的计算机可读存储器中，使得存储在该计算机可读存储器中的指令产生包括指令装置的制造品，该指令装置实现在流程图一个流程或多个流程和/或方框图一个方框或多个 方框中指定的功能。
这些计算机程序指令也可装载到计算机或其他可编程数据处理设备上，使得在计算机或其他可编程设备上执行一系列操作步骤以产生计算机实现的处理，从而在计算机或其他可编程设备上执行的指令提供用于实现在流程图一个流程或多个流程和/或方框图一个方框或多个方框中指定的功能的步骤。
显然，本领域的技术人员可以对本申请进行各种改动和变型而不脱离本申请的范围。这样，倘若本申请的这些修改和变型属于本申请权利要求及其等同技术的范围之内，则本申请也意图包含这些改动和变型在内。

Claims (40)

  1. 一种通信方法，其特征在于，包括：
    接入网设备接收来自于终端设备的无线资源控制消息，所述无线资源控制消息包括第一指示，所述无线资源控制消息还包括非接入层消息，所述第一指示用于指示所述非接入层消息包括定位请求和/或第一定位信息；
    所述接入网设备根据所述第一指示向第一网络设备发送所述非接入层消息，所述第一网络设备是园区网络设备。
  2. 如权利要求1所述的方法，其特征在于，所述方法还包括：
    所述接入网设备接收来自于所述第一网络设备的定位请求回复和/或第二定位信息；
    所述接入网设备向所述终端设备发送所述定位请求回复和/或所述第二定位信息。
  3. 如权利要求1所述的方法，其特征在于，所述方法还包括：
    所述接入网设备向第二网络设备发送第一信息，所述第一信息用于指示所述第二网络设备提供所述第一网络设备的信息，或者所述第一信息用于请求所述第一网络设备的信息；
    所述接入网设备接收来自于所述第二网络设备的所述第一网络设备的信息。
  4. 如权利要求1-3中任一所述的方法，其特征在于，所述方法还包括：
    所述接入网设备与所述第一网络设备建立流控制传输协议耦连。
  5. 一种通信方法，其特征在于，包括：
    终端设备向接入网设备发送无线资源控制消息，所述无线资源控制消息包括第一指示，所述无线资源控制消息还包括非接入层消息，所述第一指示用于指示所述非接入层消息包括定位请求和/或第一定位信息；
    所述终端设备接收来自于所述接入网设备的定位请求回复和/或第二定位信息。
  6. 如权利要求5所述的方法，其特征在于，所述方法还包括：
    所述终端设备接收第二指示，所述第二指示用于指示发送所述第一指示。
  7. 如权利要求5或6所述的方法，其特征在于，
    所述第二指示用于指示不对所述定位请求和/或所述第一定位信息进行加密；或者，所述第二指示用于指示对所述定位请求和/或所述第一定位信息按照第一加密方式进行加密。
  8. 如权利要求5-7中任一所述的方法，其特征在于，
    所述第二指示携带在非接入层安全模式命令或者注册接受消息中。
  9. 如权利要求5-8中任一所述的方法，其特征在于，所述定位请求和/或所述第一定位信息携带在非接入层协议数据单元中。
  10. 一种通信方法，其特征在于，包括：
    第二网络设备接收终端设备的第四消息；
    所述第二网络设备根据所述第四消息向所述终端设备发送第二指示；
    其中，所述第二指示用于指示所述终端设备发送第一指示，所述第一指示用于指示非接入层消息包括定位请求和/或第一定位信息。
  11. 如权利要求10所述的方法，其特征在于，所述第二指示用于指示不对所述定位请求和/或所述第一定位信息进行加密；或者，所述第二指示用于指示对所述定位请求和/或所述第一定位信息按照第一加密方式进行加密。
  12. 如权利要求10或11所述的方法，其特征在于，所述方法还包括：
    所述第二网络设备确定所述终端设备与定位业务相关联。
  13. 如权利要求10或11所述的方法，其特征在于，所述方法还包括：
    所述第二网络设备确定所述终端设备的签约信息包括定位业务信息。
  14. 如权利要求10-13中任一所述的方法，其特征在于，所述方法还包括：
    所述第二网络设备向所述接入网设备发送所述第一网络设备的信息。
  15. 如权利要求14所述的方法，其特征在于，所述方法还包括：
    所述第二网络设备接收来自于所述接入网设备的第一信息，所述第一信息用于指示所述第二网络设备提供第一网络设备的信息，或者所述第一信息用于请求所述第一网络设备的信息。
  16. 如权利要求10-15中任一所述的方法，其特征在于，所述方法还包括：
    所述第二网络设备接收来自于第一网络设备的第五消息，所述第五消息用于提取或获取所述终端设备的信息，所述第五消息携带所述终端设备的标识；
    所述第二网络设备向所述第一网络设备发送第五消息的回复消息，第五消息的回复消息携带终端设备的信息。
  17. 一种通信装置，其特征在于，包括通信模块和处理模块：
    通信模块，用于接收来自于终端设备的无线资源控制消息，所述无线资源控制消息包括第一指示，所述无线资源控制消息还包括非接入层消息，所述第一指示用于指示所述非接入层消息包括定位请求和/或第一定位信息；
    所述通信模块还用于，根据所述第一指示向第一网络设备发送所述非接入层消息，所述第一网络设备是园区网络设备。
  18. 如权利要求17所述的装置，其特征在于，所述通信模块还用于：
    接收来自于所述第一网络设备的定位请求回复和/或第二定位信息；
    向所述终端设备发送所述定位请求回复和/或所述第二定位信息。
  19. 如权利要求17或18所述的装置，其特征在于，所述通信模块还用于：
    向第二网络设备发送第一信息，所述第一信息用于指示所述第二网络设备提供所述第一网络设备的信息，或者所述第一信息用于请求所述第一网络设备的信息；
    接收来自于所述第二网络设备的所述第一网络设备的信息。
  20. 如权利要求17-19中任一所述的装置，其特征在于，所述通信模块还用于：
    与所述第一网络设备建立流控制传输协议耦连。
  21. 一种通信装置，其特征在于，包括通信模块和处理模块：
    所述通信模块，用于向接入网设备发送无线资源控制消息，所述无线资源控制消息包括第一指示，所述无线资源控制消息还包括非接入层消息，所述第一指示用于指示所述非接入层消息包括定位请求和/或第一定位信息；
    所述通信模块，还用于接收来自于所述接入网设备的定位请求回复和/或第二定位信息。
  22. 如权利要求21所述的装置，其特征在于，所述通信模块还用于：
    接收第二指示，所述第二指示用于指示发送所述第一指示。
  23. 如权利要求21或22所述的装置，其特征在于，
    所述第二指示用于指示不对所述定位请求和/或所述第一定位信息进行加密；或者，所述第二指示用于指示对所述定位请求和/或所述第一定位信息按照第一加密方式进行加密。
  24. 如权利要求21-23中任一所述的装置，其特征在于，
    所述第二指示携带在非接入层安全模式命令或者注册接受消息中。
  25. 如权利要求21-24中任一所述的装置，其特征在于，所述定位请求和/或所述第一定位信息携带在非接入层协议数据单元中。
  26. 一种通信装置，其特征在于，包括通信模块和处理模块：
    所述通信模块，用于接收终端设备的第四消息；
    所述通信模块，还用于向所述终端设备发送第二指示；
    其中，所述第二指示用于指示所述终端设备发送第一指示，所述第一指示用于指示非接入层消息包括定位请求和/或第一定位信息。
  27. 如权利要求26所述的装置，其特征在于，所述第二指示用于指示不对所述定位请求和/或所述第一定位信息进行加密；或者，所述第二指示用于指示对所述定位请求和/或所述第一定位信息按照第一加密方式进行加密。
  28. 如权利要求26或27所述的装置，其特征在于，所述处理模块还用于：
    确定所述终端设备与定位业务相关联。
  29. 如权利要求26或27所述的装置，其特征在于，所述处理模块还用于：
    确定所述终端设备的签约信息包括定位业务信息。
  30. 如权利要求26-29中任一所述的装置，其特征在于，所述通信模块还用于：
    向所述接入网设备发送所述第一网络设备的信息。
  31. 如权利要求30所述的装置，其特征在于，所述通信模块还用于：
    接收来自于所述接入网设备的第一信息，所述第一信息用于指示提供第一网络设备的信息，或者所述第一信息用于请求所述第一网络设备的信息。
  32. 如权利要求26-31中任一所述的装置，其特征在于，所述通信模块还用于：
    接收来自于第一网络设备的第五消息，所述第五消息用于提取或获取所述终端设备的信息，所述第五消息携带所述终端设备的标识；
    向所述第一网络设备发送第五消息的回复消息，第五消息的回复消息携带终端设备的信息。
  33. 一种通信装置，其特征在于，包括处理器，所述处理器用于读取存储器中存储的机械程序或指令，以实现如权利要求1-16中任一项所述的方法。
  34. 如权利要求33所述的装置，其特征在于，还包括：
    所述存储器和/或收发器，所述收发器用于所述通信装置进行通信。
  35. 一种计算机可读存储介质，其特征在于，所述计算机可读存储介质上存储有计算机程序，当所述计算机程序在计算机上运行时，使得所述计算机执行如权利要求1-16中任一项所述的方法。
  36. 一种计算机程序产品，其特征在于，所述计算机程序产品包括用于执行如权利要求1-16中任一项所述的方法的指令。
  37. 一种芯片，其特征在于，包括处理器，所述处理器用于读取存储器中存储的机械程序或指令，以实现如权利要求1-16中任一项所述的方法。
  38. 一种通信系统，其特征在于，包括接入网设备和终端设备，所述接入网设备用于执行图权利要求1-4中任一项所述的方法，所述终端设备用于执行如权利要求5-9中任一所述的方法。
  39. 如权利要求38所述的系统，其特征在于，还包括第二网络设备，所述第二网络设备用于执行如权利要求10-16中任一所述的方法。
  40. 一种通信装置，其特征在于，用于执行如权利要求1-4中任一项所述的方法，或用于执行如权利要求5-9中任一所述的方法，或用于执行如权利要求10-16中任一所述的方法。
PCT/CN2023/077943 2022-02-28 2023-02-23 一种通信方法及装置 WO2023160624A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN202210188474.8A CN116709168A (zh) 2022-02-28 2022-02-28 一种通信方法及装置
CN202210188474.8 2022-02-28

Publications (1)

Publication Number Publication Date
WO2023160624A1 true WO2023160624A1 (zh) 2023-08-31

Family

ID=87764853

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2023/077943 WO2023160624A1 (zh) 2022-02-28 2023-02-23 一种通信方法及装置

Country Status (2)

Country Link
CN (1) CN116709168A (zh)
WO (1) WO2023160624A1 (zh)

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110831074A (zh) * 2018-08-10 2020-02-21 电信科学技术研究院有限公司 一种直连通信的方法、amf、接入网功能实体及计算机存储介质
US20200068547A1 (en) * 2017-05-05 2020-02-27 Huawei Technologies Co., Ltd. Data transmission method, terminal device, and access network device
US20200187154A1 (en) * 2017-08-15 2020-06-11 Huawei Technologies Co., Ltd. Communications Method And Apparatus
CN113132908A (zh) * 2019-12-31 2021-07-16 华为技术有限公司 一种业务管理方法及装置

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20200068547A1 (en) * 2017-05-05 2020-02-27 Huawei Technologies Co., Ltd. Data transmission method, terminal device, and access network device
US20200187154A1 (en) * 2017-08-15 2020-06-11 Huawei Technologies Co., Ltd. Communications Method And Apparatus
CN110831074A (zh) * 2018-08-10 2020-02-21 电信科学技术研究院有限公司 一种直连通信的方法、amf、接入网功能实体及计算机存储介质
CN113132908A (zh) * 2019-12-31 2021-07-16 华为技术有限公司 一种业务管理方法及装置

Also Published As

Publication number Publication date
CN116709168A (zh) 2023-09-05

Similar Documents

Publication Publication Date Title
CN108605383B (zh) 无线通信系统中执行用于基于网络切片的nr的小区规范过程的方法和装置
CN108702810B (zh) 用于第一无线电接入网络节点的方法和装置
KR102601585B1 (ko) Nas 메시지의 보안 보호를 위한 시스템 및 방법
US20210112406A1 (en) Communication method and communications apparatus
US11871223B2 (en) Authentication method and apparatus and device
US11729599B2 (en) Communication system
CN113748697A (zh) 用于提供非接入层(nas)消息保护的方法和系统
WO2021063298A1 (zh) 实现外部认证的方法、通信装置及通信系统
US20230362636A1 (en) Key identifier generation method and related apparatus
US20220086145A1 (en) Secondary Authentication Method And Apparatus
WO2021047454A1 (zh) 位置信息获取、位置服务配置方法和通信设备
WO2018049689A1 (zh) 密钥协商方法及装置
US20220272533A1 (en) Identity authentication method and communications apparatus
WO2023160624A1 (zh) 一种通信方法及装置
CN114422320A (zh) 一种终端的管控方法、装置及系统
WO2023160626A1 (zh) 一种通信方法及装置
WO2023179397A1 (zh) 一种授权方法及装置
WO2022100197A1 (zh) 获取边缘服务的方法和装置
WO2023045741A1 (zh) 定位方法及装置、可读存储介质
CN114208240B (zh) 数据传输方法、装置及系统
WO2023213191A1 (zh) 安全保护方法及通信装置
WO2023160390A1 (zh) 通信方法与装置
WO2022155915A1 (zh) 网络互通的方法及装置
WO2023213209A1 (zh) 密钥管理方法及通信装置
WO2023072271A1 (zh) 管理安全上下文的方法和装置

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 23759246

Country of ref document: EP

Kind code of ref document: A1