Network slice allocation method, device, and system

Patent metadata

Field	Value
Publication number	US-10880747-B2
Application number	US-201916730780-A
Country	US
Kind code	B2
Filing date	Dec 30, 2019
Priority date	Jun 29, 2017
Publication date	Dec 29, 2020
Grant date	Dec 29, 2020

Abstract

This application provides a network slice allocation method, device, and system, including a terminal device, a first core network device, a second core network device, and a third core network device. The terminal device encrypts NSSAI and an ID of the terminal device to obtain encrypted information, and sends a slice access request message to the first core network device. The first core network device sends the encrypted information to the second core network device. The second core network device decrypts the encrypted information to obtain the NSSAI and the ID of the terminal device, generates an authentication vector, and sends the NSSAI and the authentication vector to the first core network device.

First claim

What is claimed is:

1. A network slice allocation system, comprising:
an access network device;
a second core network device; and
a terminal device,
wherein:
the access network device is further configured to receive a slice access request message from the terminal device, wherein the slice access request message comprises a second pseudo identity; determine the second core network device corresponding to the second pseudo identity, and send the slice access request message to the second core network device;
the second core network device is configured to send a security mode command to the terminal device, receive a security mode complete command sent by the terminal device, receive a second network slice selection assistance information (NSSAI) sent by the terminal device based on the security mode command, and allocate a network slice to the terminal device based on the slice access request message and the second NSSAI, and
wherein in response to the terminal device being in a visited network, at least one piece of first NSSAI comprising at least one piece of NSSAI in the visited network, and the second NSSAI comprising NSSAI in a home network of the terminal device, the terminal device is further configured to:
obtain at least one second mapping relationship, wherein each second mapping relationship comprises a correspondence between one piece of first NSSAI and one piece of third NSSAI, and the third NSSAI comprises NSSAI in the home network of the terminal device; and
determine a fourth NSSAI based on the second NSSAI and the at least one second mapping relationship, and determine the second pseudo identity based on the fourth NSSAI and the at least one first mapping relationship, wherein the fourth NSSAI comprises one of the at least one piece of first NSSAI.

2. The system according to claim 1 , wherein a priority of a first core network device is higher than a first preset threshold or a priority of each piece of first NSSAI being higher than a second preset threshold.

3. The system according to claim 1 , wherein the access network device is configured to broadcast the at least one first mapping relationship including a mapping relationship between a first pseudo identity and at least one piece of first NSSAI, and the first pseudo identity comprises a pseudo identity of a first core network device.

4. The system according to claim 3 , wherein the at least one first mapping relationship is carried in a system information block (SIB).

5. The system according to claim 4 , wherein the terminal device is configured to determine the second pseudo identity based on the second NSSAI and the at least one first mapping relationship, and send a slice access request message to the access network device.

6. A network slice allocation method, comprising:
receiving, by an access network device, a slice access request message sent by a terminal device, wherein the slice access request message comprises a second pseudo identity determined by the terminal device based on second network slice selection assistance information (NSSAI) and at least one first mapping relationship;
determining, by the access network device, a second core network device corresponding to the second pseudo identity; and
sending, by the access network device, the slice access request message to the second core network device,
wherein in response to the terminal device being in a visited network, at least one piece of first NSSAI comprising at least one piece of NSSAI in the visited network, and the second NSSAI comprising NSSAI in a home network of the terminal device, the method further comprises:
obtaining, by the terminal device, at least one second mapping relationship, wherein each second mapping relationship comprises a correspondence between one piece of first NSSAI and one piece of third NSSAI, and the third NSSAI comprises NSSAI in the home network of the terminal device; and
determining, by the terminal device, fourth NSSAI based on the second NSSAI and the at least one second mapping relationship; and
determining, by the terminal device, the second pseudo identity based on the fourth NSSAI and the at least one first mapping relationship, wherein the fourth NSSAI comprises one of the at least one piece of first NSSAI.

7. The network slice allocation method according to claim 6 , further comprising:
broadcasting, by the access network device, the at least one first mapping relationship, wherein each first mapping relationship comprises a mapping relationship between a first pseudo identity of a first core network device and at least one piece of first NSSAI.

8. The network slice allocation method according to claim 7 , further comprising: wherein the at least one first mapping relationship is carried in a system information block (SIB).

9. A network slice allocation method, comprising:
receiving, by a terminal device, at least one first mapping relationship, wherein each first mapping relationship is a mapping relationship between a first pseudo identity of a first core network device and at least one piece of first network slice selection assistance information (NSSAI);
determining, by the terminal device, a second pseudo identity of a second core network device based on second NSSAI and the at least one first mapping relationship;
sending, by the terminal device, a slice access request message to an access network device, wherein the slice access request message comprises the second pseudo identity;
receiving, by the terminal device, a security mode command sent by the second core network device;
sending, by the terminal device, a security mode complete command to the second core network device; and
sending, by the terminal device, the second NSSAI to the second core network device based on the security mode command,
wherein in response to the terminal device being in a visited network, the at least one piece of first NSSAI comprising at least one piece of NSSAI in the visited network, and the second NSSAI comprising NSSAI in a home network of the terminal device, and before the determining the second pseudo identity based on second NSSAI and the at least one first mapping relationship, the method further comprises:
obtaining, by the terminal device, at least one second mapping relationship, wherein each second mapping relationship is a correspondence between one piece of first NSSAI and one piece of third NSSAI, and the third NSSAI is NSSAI in the home network of the terminal device, and

wherein the determining the second pseudo identity based on second NSSAI and the at least one first mapping relationship comprises:
determining, by the terminal device, a fourth NSSAI based on the second NSSAI and the at least one second mapping relationship, wherein the fourth NSSAI comprises one of the at least one piece of first NSSAI; and
determining, by the terminal device, the second pseudo identity based on the fourth NSSAI and the at least one first mapping relationship.

10. The network slice allocation method according to claim 9 , wherein a priority of a first core network device is higher than a first preset threshold or a priority of each piece of first NSSAI is higher than a second preset threshold.

11. The network slice allocation method according to claim 9 , wherein the access network device broadcasts the at least one first mapping relationship including a mapping relationship between a first pseudo identity and at least one piece of first NSSAI, and the first pseudo identity comprises a pseudo identity of a first core network device.

12. The network slice allocation method according to claim 11 , wherein the at least one first mapping relationship is carried in a system i

Assignees

• Huawei Int Pte Ltd

Inventors

• Hu Hao
• Lei Zhongding
• Li Lichun

Classifications

• H04L63/0414 Primary

  during transmission, i.e. party's identity is protected against eavesdropping, e.g. by using temporary identifiers, but is known to the other party or parties involved in the communication · CPC title

• H04W72/04

  Wireless resource allocation · CPC title

• H04W12/75

  Temporary identity · CPC title

• H04L9/30

  Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy · CPC title

• H04W48/18

  Selecting a network or a communication service · CPC title