CN113596830A - Communication method, communication apparatus, electronic device, storage medium, and program product - Google Patents

Abstract

The present application provides a communication method, apparatus, electronic device, storage medium and program product. The method includes: a device management network element receives an authentication and authentication request from a terminal; the authentication and authentication request is used to request authentication and authentication of a target service of the terminal, and the authentication and authentication request includes: an identifier of the terminal and an identifier of the target service; The identification of the service and the identification of the terminal are used to authenticate whether the terminal has the right to use the target service; if the authentication result indicates that the terminal has the right to use the target service, a list of candidate BSF network elements for the bootstrapping service function is sent to the terminal, and the candidate BSF network elements The list includes information of at least one candidate BSF network element; each candidate BSF network element supports target service authentication for the terminal; the information of the candidate BSF network element includes: the identifier of the candidate BSF network element. The present application improves the efficiency of the BSF network element feeding back the secret key to the terminal.

Description

Communication method, apparatus, electronic device, storage medium and program product

technical field

The present application relates to communication engineering technology, and in particular, to a communication method, apparatus, electronic device, storage medium and program product.

Background technique

Before a target service is performed, such as Voice over Long-Term Evolution (Voice over Long-Term Evolution, VoLTE) service, or 5th Generation Mobile Communication Technology message (5G message) service, the terminal needs to obtain and The secret key required by the target service server for data transmission. After obtaining the above-mentioned secret key, the terminal can use the secret key to encrypt the data of the target service transmitted between the terminal and the target service server, so as to perform the target service. Specifically, the terminal may obtain the above-mentioned secret key from a Home Subscriber Server (HSS) through a bootstrapping server function (BSF) in the communication network where the terminal is located.

At present, a communication network includes a BSF network element, and the BSF network element is used to provide all terminals in the communication network with keys corresponding to all services of each terminal. However, the existing communication method has the problem that the efficiency of the BSF network element feeding back the secret key to the terminal is low.

SUMMARY OF THE INVENTION

The present application provides a communication method, apparatus, electronic device, storage medium and program product to overcome the problem of low efficiency in feeding back a secret key to a terminal by a BSF network element.

In a first aspect, the present application provides a communication method, the method is applied to a device management network element, and the method includes:

Receive an authentication and authentication request from the terminal; the authentication and authentication request is used to request authentication and authentication of the target service of the terminal, and the authentication and authentication request includes: the identifier of the terminal and the identifier of the target service ;

According to the identifier of the target service and the identifier of the terminal, verify whether the terminal has the right to use the target service;

If the authentication result indicates that the terminal has the right to use the target service, send a list of candidate BSF network elements to the terminal, where the candidate BSF network element list includes information of at least one candidate BSF network element each of the candidate BSF network elements supports the target service authentication of the terminal; the information of the candidate BSF network elements includes: the identifier of the candidate BSF network elements.

Optionally, the sending a list of candidate bootstrapping service function BSF network elements to the terminal includes:

According to the identifier of the target service, the identifiers of multiple initial BSF network elements corresponding to the target service are obtained from the BSF network element list, and the load information of the multiple initial BSF network elements; the BSF network element The list includes the mapping relationship between services and BSF network elements;

determining candidate BSF network elements from the plurality of initial BSF network elements according to the load information of the plurality of initial BSF network elements;

generating the candidate BSF network element list according to the determined candidate BSF network elements;

sending the candidate BSF network element list to the terminal.

Optionally, the loads of the candidate BSF network elements are all less than the first preset load threshold.

Optionally, the information of the candidate BSF network element further includes: load information of the candidate BSF network element.

Optionally, authenticating whether the terminal has the right to use the target service according to the identifier of the target service and the identifier of the terminal includes:

Send an authentication request to the service support system, where the authentication request is used to request authentication of the target service of the terminal; the authentication request includes: the identifier of the terminal and the identifier of the target service;

The authentication result returned by the service support system is received; the authentication result is used to represent whether the terminal has the right to use the target service.

Optionally, after the sending the list of candidate BSF network elements to the terminal, the method further includes:

receiving fault indication information from the terminal; the fault indication information is used to indicate that the terminal fails to establish a connection with the first BSF network element; the first BSF network element is any one of the candidate BSF network elements, The fault indication information includes the identifier of the first BSF network element;

determining whether the first BSF network element is faulty;

If it is determined that the first BSF network element is faulty, send the information of the second BSF network element to the terminal, and delete the identifier of the first BSF network element from the BSF network element list; the second BSF network element The BSF network element is any one except the first BSF network element in the BSF network element list.

Optionally, the determining whether the first BSF network element is faulty includes:

Judging whether the first BSF network element in the BSF network element list has a preset label, where the preset label is used to represent whether the first BSF network element is faulty;

If the first BSF network element has the preset label, it is determined that the first BSF network element is faulty; or,

If the first BSF network element does not have the preset label, a fault detection result of the first BSF network element is acquired, and according to the fault detection result, it is determined whether the first BSF network element is faulty.

Optionally, the acquiring the fault detection result of the first BSF network element includes:

determining the fault detection result of the first BSF network element according to the communication connection state with the first BSF network element;

and / or,

Obtain a fault detection result of the BSF management network element for the first BSF network element.

Optionally, after determining whether the first BSF network element is faulty according to the fault detection result, the method further includes:

If it is determined that the first BSF network element is not faulty, adding the preset label to the first BSF network element in the BSF network element list;

Detecting whether the first BSF network element is faulty within a preset time period;

If it is detected that the first BSF network element is fault-free within the preset time period, the preset label of the first BSF network element is deleted from the BSF network element list;

Alternatively, if it is detected that the first BSF network element is faulty within the preset time period, the identifier of the first BSF network element is deleted from the BSF network element list.

Optionally, the method further includes:

The BSF network element list is updated according to the service and load information corresponding to each BSF network element in the network.

Optionally, the updating of the BSF network element list according to the service and load information corresponding to each BSF network element in the network includes:

If there is a newly added BSF network element in the network, the service corresponding to the newly added BSF network element is determined according to the service and load information corresponding to each BSF network element in the network, and is listed in the BSF network element list. Add the newly added BSF network element in .

Optionally, the determining the service corresponding to the newly added BSF network element includes:

For any service in all services corresponding to all BSF network elements in the BSF network element list, obtain the load of each BSF network element corresponding to the service for the service;

According to the load of each BSF network element corresponding to the service for the service, obtain the average load of each BSF network element corresponding to the service for the service;

The service with the largest average load is used as the service corresponding to the newly added BSF network element.

Optionally, the updating of the BSF network element list according to the service and load information corresponding to each BSF network element in the network includes:

For any BSF network element in the BSF network element list, if the load of the BSF network element is less than or equal to the second preset load threshold, the service with the largest average load is used as the second service corresponding to the BSF network element .

Optionally, the updating of the BSF network element list according to the service and load information corresponding to each BSF network element in the network includes:

Delete a failed BSF network element in the BSF network element list; the failed BSF network element refers to a BSF network element that cannot establish a connection with the device management network element.

In a second aspect, the present application provides a communication method, the method is applied to a terminal, and the method includes:

Send an authentication and authentication request to the device management network element; the authentication and authentication request is used to request authentication and authentication of the target service of the terminal, and the authentication and authentication request includes: the identification of the terminal and the target service 's identification;

Receive a list of candidate bootstrapping service function BSF network elements returned by the device management network element, where the candidate BSF network element list includes information about at least one candidate BSF network element; each candidate BSF network element supports target service authentication; the information of the candidate BSF network element includes: the identifier of the candidate BSF network element;

sending an authentication request to the target BSF network element according to the identifier of the target BSF network element, where the target BSF network element is any one of the candidate BSF network elements;

Receive the secret key returned by the target BSF network element after the terminal is authenticated; the secret key is used to encrypt the data of the target service transmitted between the terminal and the target service server.

Optionally, the information of the candidate BSF network element further includes: load information of the candidate BSF network element;

Before sending the authentication request to the target BSF network element according to the identifier of the target BSF network element, the method further includes:

According to the load information of the candidate BSF network elements, the target BSF network element is determined.

Optionally, after receiving the candidate BSF network element list returned by the device management network element, the method further includes:

Send fault indication information to the device management network element; the fault indication information is used to indicate that the terminal fails to establish a connection with the first BSF network element; the first BSF network element is any one in the candidate BSF network element list. One, the fault indication information includes the identifier of the first BSF network element.

In a third aspect, the present application provides a communication apparatus, the apparatus is applied to a device management network element, and the apparatus includes:

The receiving module is used to receive an authentication and authentication request from the terminal; the authentication and authentication request is used to request authentication and authentication of the target service of the terminal, and the authentication and authentication request includes: the identification of the terminal and the the identification of the target business;

a processing module, configured to authenticate whether the terminal has the right to use the target service according to the identity of the target service and the identity of the terminal;

A sending module, configured to send a list of candidate bootstrapping service function BSF network elements to the terminal when the authentication result indicates that the terminal has the right to use the target service, where the candidate BSF network element list includes at least one candidate Information of the BSF network element; each candidate BSF network element supports target service authentication for the terminal; the information of the candidate BSF network element includes: the identifier of the candidate BSF network element.

In a fourth aspect, the present application provides a communication device, the device is applied to a terminal, and the device includes:

a first sending module, configured to send an authentication and authentication request to a device management network element; the authentication and authentication request is used to request authentication and authentication of the target service of the terminal, and the authentication and authentication request includes: the terminal and the identity of the target business;

a first receiving module, configured to receive a list of candidate bootstrapping service function BSF network elements returned by the device management network element, where the candidate BSF network element list includes information about at least one candidate BSF network element; each candidate BSF network element Each element supports the authentication of the target service of the terminal; the information of the candidate BSF network element includes: the identifier of the candidate BSF network element;

A second sending module, configured to send an authentication request to the target BSF network element according to the identifier of the target BSF network element, where the target BSF network element is any one of the candidate BSF network element list;

The second receiving module is configured to receive the secret key returned by the target BSF network element after the terminal is authenticated; the secret key is used to encrypt the data of the target service transmitted between the terminal and the target service server.

In a fifth aspect, the present application provides a communication system, including: the device management network element according to any one of the first aspect, the terminal according to any one of the second aspect, and at least two BSF network elements.

In a sixth aspect, the present application provides an electronic device, comprising: at least one processor, a memory, a receiver, and a transmitter;

Both the receiver and the transmitter are coupled to the processor; the processor controls a receiving action of the receiver, and the processor controls a sending action of the transmitter;

the memory stores computer-executable instructions;

The at least one processor executes computer-executable instructions stored in the memory to cause the electronic device to perform the method of any one of the first aspect or the second aspect.

In a seventh aspect, the present application provides a computer-readable storage medium, where computer-executable instructions are stored on the computer-readable storage medium, and when the computer-executable instructions are executed by a processor, any one of the first aspect or the second aspect is implemented. one of the methods described.

In an eighth aspect, the present application provides a computer program product, including a computer program, which implements the method described in any one of the first aspect or the second aspect when the computer program is executed by a processor.

The communication method, device, electronic device, storage medium and program product provided by this application send an authentication and authentication request including the identifier of the target service to the device management network element through the terminal, and then verify whether the terminal has the right to use the target service. After passing, the device management network element can send the list of candidate BSF network elements to the terminal. Wherein, the candidate BSF network elements in the candidate BSF network element list all support the target service authentication of the terminal. Then, the terminal may send an authentication request to the target BSF network element based on the identifier of the target BSF network element in the candidate BSF network element list. Through the above method, a corresponding key can be provided for each target service of all terminals in the communication network through a plurality of BSF network elements. That is to say, a BSF network element may only provide some terminals with the secret key of the service for which the BSF network element supports authentication. Compared with the prior art that one BSF network element needs to provide all terminals with keys corresponding to all services, the communication method provided by the present application reduces the load of the BSF network element, and improves the ability of the BSF network element to feed back the keys to the terminals. efficiency, thereby improving the efficiency of the terminal to perform the target service.

Description of drawings

In order to illustrate the technical solutions in the present application or the prior art more clearly, the following will briefly introduce the accompanying drawings that need to be used in the description of the embodiments or the prior art. Obviously, the drawings in the following description are the For some embodiments of the application, for those of ordinary skill in the art, other drawings can also be obtained based on these drawings without any creative effort.

1 is a schematic diagram of a network architecture of an existing communication system;

2 is a schematic diagram of a network architecture of a communication system provided by the application;

3 is a schematic flowchart of a communication method provided by the present application;

4 is a schematic flowchart of another communication method provided by the present application;

FIG. 5 is a schematic structural diagram of a communication device 300 provided by the present application;

FIG. 6 is a schematic structural diagram of a communication device 400 provided by the present application;

FIG. 7 is a schematic structural diagram of an electronic device provided by the present application.

Specific embodiments of the present application have been shown by the above-mentioned drawings, and will be described in more detail hereinafter. These drawings and written descriptions are not intended to limit the scope of the concepts of the present application in any way, but to illustrate the concepts of the present application to those skilled in the art by referring to specific embodiments.

Detailed ways

In order to make the purpose, technical solutions and advantages of the present application clearer, the technical solutions in the present application will be described clearly and completely below with reference to the accompanying drawings in the present application. Obviously, the described embodiments are part of the embodiments of the present application. , not all examples. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present application.

FIG. 1 is a schematic diagram of a network architecture of an existing communication system. As shown in FIG. 1 , the network architecture of the communication system includes: user equipment (User Equipment, UE), a BSF network element, an HSS, and a service server. Wherein, the UE is equivalent to the terminal involved in this application. The terminal is connected with the BSF network element in a wireless manner, and the terminal is connected with the service server in a wireless manner. The BSF network element is connected to the HSS in a wireless or wired manner. Terminals can be fixed-position or movable. FIG. 1 is only a schematic diagram, and the communication system may also include other network devices, such as wireless relay devices and wireless backhaul devices, etc., which are not shown in FIG. 1 . In the communication system, the number of BSF network elements is one, and the present application does not limit the number of terminals, service servers and HSSs included in the communication system.

The above-mentioned terminal may also be referred to as an access terminal, a subscriber unit, a subscriber station, a mobile station, a mobile station, a remote station, a remote terminal, a mobile device, a user terminal, a terminal, a wireless communication device, a user agent or a user equipment. The terminal device may also be a cellular phone, a cordless phone, a session initiation protocol (SIP) phone, a wireless local loop (WLL) station, a personal digital assistant (PDA), a wireless communication Functional handheld devices, computing devices or other processing devices connected to wireless modems, transportation devices such as vehicles/ships/airplanes, in-vehicle devices, wearable devices, terminal devices in future 5G networks or future evolved public land mobile communication networks ( Terminal equipment in public land mobile network, PLMN), etc.

The above-mentioned services may be, for example, services in various communication systems. Exemplarily, the above-mentioned communication system may be, for example, a long term evolution (long term evolution, LTE) system, an LTE frequency division duplex (frequency division duplex, FDD) system, an LTE time division duplex (time division duplex, TDD), a universal mobile communication system. (universal mobile telecommunication system, UMTS), worldwide interoperability for microwave access (WiMAX) communication system, future fifth generation (5th generation, 5G) system or new radio (new radio, NR) system, car to other Equipment (Vehicle-to-X V2X), where V2X can include vehicle to network (V2N), vehicle to-Vehicle (V2V), vehicle to infrastructure (V2I), vehicle Vehicle topedestrian (V2P), etc., Long Term Evolution-Vehicle (LTE-V), Internet of Vehicles, Machine Type Communication (MTC), Internet of Things (IoT) , Long Term Evolution-Machine (LTE-M), Machine to Machine (M2M), non-terrestrial communication (non-terrestrial network, NTN) system, NTN system can also be called satellite communication system, or other communication systems evolved in the future, etc.

Based on the above communication system, the terminal can obtain the secret key required for data transmission with the service server from the BSF network element. Specifically, the terminal may use the Internet Protocol (Internet Protocol, IP) address of the BSF network element to establish a connection with the BSF network element, and may send an authentication request to the BSF network element. After passing the authentication of the terminal, the BSF network element can obtain the secret key required by the terminal to perform the above service from the HSS, and send the secret key to the terminal. Correspondingly, the terminal may receive the secret key sent by the above-mentioned BSF network element, and use the secret key to perform data transmission with the above-mentioned service server.

At present, the communication network provided by the above communication system includes a BSF network element, and the BSF network element is used to provide all terminals in the communication network with keys corresponding to all services of each terminal. However, the existing communication method has the problem that the efficiency of the BSF network element feeding back the secret key to the terminal is low.

After analysis and research, the inventor found that the reason for the low efficiency of the BSF network element feeding back the secret key to the terminal is that only one BSF network element provides the secret key corresponding to all the services of each terminal for all the terminals in the communication network, which is easy to cause this problem. The load of the BSF network element in the communication network is often large, which leads to low efficiency of the BSF network element feeding back the secret key to the terminal.

Therefore, the present application proposes a communication method based on a plurality of BSF network elements to provide all terminals in a communication network with a key corresponding to a target service. Compared with the prior art that one BSF network element needs to provide all terminals with keys corresponding to all services, the communication method provided by the present application reduces the load of a single BSF network element, and improves the feedback of the BSF network element to the terminal. The efficiency of the terminal further improves the efficiency of the target service.

In order to facilitate the understanding of the present application, the following describes and introduces the network architecture involved in the present application. FIG. 2 is a schematic diagram of a network architecture of a communication system provided by the present application. As shown in FIG. 2 , the communication network includes a terminal, a Device Management (DM) network element, an HSS, and at least two BSF network elements (only one BSF network element is exemplarily shown in FIG. 2 ).

The device management network element is used for allocating the BSF network element in the communication network to the terminal according to the service to be performed by the terminal. After receiving the information of the candidate BSF network element sent by the device management network element, the terminal can connect with the BSF according to the information of the candidate BSF network element to obtain the secret key required for data transmission with the target service server from the BSF.

It should be understood that FIG. 2 only exemplarily shows the devices related to the present application in the above communication system, and the present application does not limit whether the communication system further includes other devices.

Based on the communication network provided by the communication system as shown in FIG. 2 , the communication method of the present application will be described in detail below with reference to specific embodiments. The following specific embodiments may be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments. It should be understood that the following description takes the execution subject of the above communication method as the terminal and the device management network element as an example. During specific implementation, the execution body of the following method executed by the terminal may also be, for example, a chip with a processing function in the terminal. For example, the execution body of the method performed by the device management network element may also be a chip with a processing function in the device management network element.

FIG. 3 is a schematic flowchart of a communication method provided by the present application. As shown in Figure 3, the method includes the following steps:

S101. The terminal sends an authentication and authentication request to a device management network element.

The above authentication and authentication request is used to request authentication and authentication of the target service of the terminal. Specifically, the authentication request includes the identifier of the terminal and the identifier of the target service. The above-mentioned authentication and authentication refers to authentication of whether the terminal has the right to use the target service.

Exemplarily, the identifier of the terminal may be, for example, a unique identification code of the terminal. Or, taking the terminal having the right to use the target service as an example, the identifier of the terminal may also be, for example, the user name and password used by the terminal when activating the target service. Exemplarily, the identifier of the above target service may be pre-stored in the terminal. Different target businesses have different identifications. For example, the terminal may store a mapping relationship between multiple services and service identifiers. The terminal may determine the identifier of the target service corresponding to the target service according to the service triggered by the user (ie, the target service) and the mapping relationship between the service and the service identifier.

Correspondingly, the device management network element may receive the above authentication request from the terminal.

S102: The device management network element authenticates whether the terminal has the right to use the target service according to the identifier of the target service and the identifier of the terminal.

As a possible implementation manner, after receiving the above authentication and authentication request, the device management network element may, for example, send an authentication request for requesting authentication of the target service of the terminal to a business support system (BSS) , and then receive the authentication result returned by the BSS. The above authentication request may include the identifier of the terminal and the identifier of the target service. It should be understood that this application does not limit how the BSS verifies whether the terminal has the right to use the target service.

Exemplarily, the BSS may store the identifiers of all terminals that have the right to use the target service. In this implementation manner, the BSS can first determine the target service corresponding to the terminal according to the identifier of the target task. Then, whether there is an identifier that is the same as the identifier of the terminal in the identifiers of all terminals that have the right to use the target service. If it exists, it means that the terminal has the use authority of the target task, and the BSS may send the authentication result indicating that the terminal has the use authority of the target service to the device management network element. If it does not exist, it means that the terminal does not have the right to use the target task, and the BSS may send an authentication result to the device management network element indicating that the terminal does not have the right to use the target service.

As another possible implementation manner, the device management network element may, for example, also obtain the identifiers of all terminals that have the right to use the target service from the BSS. Then, the device management network element can verify whether the terminal has the right to use the target service according to the identifiers of all the terminals with the target service use authority and the terminal's identifier, so as to obtain the verification result.

When the authentication result indicates that the terminal has the right to use the target service, the device management network element executes step S103. When the authentication result indicates that the terminal does not have the right to use the target service, optionally, the device management network element may perform step S106.

S103: The device management network element sends a list of candidate BSF network elements to the terminal.

The above candidate BSF network element list includes information of at least one candidate BSF network element. The information of the candidate BSF network element includes the identifier of the candidate BSF network element. Wherein, each candidate BSF network element supports the authentication of the target service of the terminal. Exemplarily, the identifier of the candidate BSF network element may be the hostname of the candidate BSF network element, or the IP address of the candidate BSF network element, or the like.

As a possible implementation manner, the device management network element may first determine, according to the identifier of the target service, from the BSF network element list, multiple initial BSF network elements that support the authentication of the target service for the terminal. Then, according to the load information of these initial BSF network elements, a list of candidate BSF network elements is determined. Compared with the prior art that a BSF network element needs to provide the terminal with keys corresponding to all services, the initial BSF network element in this implementation can only provide the terminal with the key corresponding to the target service, reducing the number of BSFs. The load of the network element improves the efficiency of the BSF network element feeding back the secret key to the terminal. In addition, in this implementation manner, according to the load information of the initial BSF network element, the initial BSF network element with less load can be used as the candidate BSF network element, which further improves the efficiency of the BSF network element feeding back the secret key to the terminal.

During specific implementation, the device management network element may first obtain the identifiers of multiple initial BSF network elements corresponding to the target service from the BSF network element list based on the identifier of the target service, and the load information of the multiple initial BSF network elements . Wherein, the identifiers of each BSF network element in the above-mentioned BSF network element list may be pre-stored in the device management network element by the user. The device management network element may update the load information of each BSF network element in the BSF network element list according to a preset frequency. Exemplarily, the device management network element may, for example, obtain load information corresponding to each BSF network element from each BSF network element.

The above-mentioned BSF network element list includes the mapping relationship between services and BSF network elements. The device management network element may determine a plurality of initial BSF network elements corresponding to the target service from the BSF network element list according to the identifier of the target service and the mapping relationship between the above service and the BSF network element.

Exemplarily, the mapping relationship between the above-mentioned services and BSF network elements may be as shown in Table 1 below:

Table 1

business BSF network element Business 1 BSF network element 1 Business 1 BSF network element 2 Business 1 BSF network element 3 Business 2 BSF network element 4 Business 2 BSF network element 5

As shown in Table 1, assuming that the target service is service 1, the multiple initial BSF network elements corresponding to the target service are BSF network element 1, BSF network element 2, and BSF network element 3, respectively.

After determining the multiple initial BSF network elements corresponding to the target service, the device management network element may obtain the identifiers of the multiple initial BSF network elements and the load information of the multiple initial BSF network elements from the BSF network element list.

Then, the device management network element may determine candidate BSF network elements from the plurality of initial BSF network elements according to the load information of the plurality of initial BSF network elements. Optionally, the device management network element may, for example, use the initial BSF network element whose load information is less than the first preset load threshold as the candidate BSF network element. The first preset load threshold may be, for example, pre-stored in the device management network element by the user. Alternatively, the device management network element may also use the BSF network element with the smallest load information among the above-mentioned multiple initial BSF network elements as the candidate BSF network element.

After the candidate BSF network element is determined, the device management network element may generate a candidate BSF network element list according to the determined candidate BSF network element. Specifically, the device management network element may add the identifier of each candidate BSF network element to the candidate BSF network element list. Then, the device management network element may send the list of candidate BSF network elements to the terminal.

As another possible implementation manner, the information of the candidate BSF network elements may further include load information of the candidate BSF network elements, so that the terminal can determine the target BSF network element according to the load information of each candidate BSF network element.

Correspondingly, the terminal may receive the candidate BSF network element list returned by the device management network element.

S104. The terminal sends an authentication request to the target BSF network element according to the identifier of the target BSF network element.

Wherein, the above-mentioned target BSF network element is any one in the candidate BSF network element list. The above authentication request refers to a General Bootstrapping Architecture (General Bootstrapping Architecture, GBA) authentication request.

If the list of candidate BSF network elements only includes the identifier of one candidate BSF network element, the terminal may use the candidate BSF network element as the target BSF network element. If the candidate BSF network element list includes identifiers of multiple candidate BSF network elements, optionally, the terminal may determine the target BSF network element according to the load information of the candidate BSF network elements. Specifically, the terminal may use the candidate BSF network element with the smallest load as the target BSF network element.

If the identifier of the target BSF network element is the host name of the target BSF network element, optionally, after obtaining the identifier of the target BSF network element, the terminal may send the identifier of the target BSF network element to the Domain Name System (DNS) ) to obtain the IP address of the target BSF network element from DNS. Then the terminal can send an authentication request to the target BSF network element by using the IP address of the target BSF network element.

If the identifier of the target BSF network element is the IP address of the target BSF network element, the terminal may directly use the IP address of the target BSF network element to send an authentication request to the target BSF network element.

S105, the terminal receives the secret key returned by the target BSF network element after the terminal authentication is passed.

The secret key is used to encrypt the data of the target service transmitted between the terminal and the target service server.

It should be understood that this application does not limit how the target BSF network element authenticates the terminal. As mentioned above, after receiving the authentication request sent by the terminal, the target BSF network element can obtain the above-mentioned secret key from the HSS network element, and then send the secret key to the terminal.

S106: The device management network element sends, to the terminal, indication information for indicating that the terminal does not have the right to use the target service.

Correspondingly, the terminal may receive the indication information indicating that the terminal does not have the right to use the target service. Then, the terminal may output the indication information to remind the user that the use authority of the target service has not been activated for the time being. Exemplarily, the terminal may, for example, output the above-mentioned indication information to the display device of the terminal.

In this embodiment, the terminal sends an authentication request including the identifier of the target service to the device management network element, and after the authentication of whether the terminal has the right to use the target service is passed, the device management network element may send the candidate BSF to the terminal NE list. Wherein, the candidate BSF network elements in the candidate BSF network element list all support the target service authentication of the terminal. Then, the terminal may send an authentication request to the target BSF network element based on the identifier of the target BSF network element in the candidate BSF network element list. Through the above method, a corresponding key can be provided for each target service of all terminals in the communication network through a plurality of BSF network elements. That is to say, a BSF network element may only provide some terminals with the secret key of the service for which the BSF network element supports authentication. Compared with the prior art that one BSF network element needs to provide all terminals with keys corresponding to all services, the communication method provided by the present application reduces the load of the BSF network element, and improves the ability of the BSF network element to feed back the keys to the terminals. efficiency, thereby improving the efficiency of the terminal to perform the target service.

As a possible implementation manner, after receiving the list of candidate BSF network elements returned by the device management network element, the terminal may also determine whether the first BSF network element is faulty, so as to ensure that the terminal is successfully connected to the BSF network element, thereby ensuring that the terminal is successfully connected to the BSF network element. The efficiency with which the terminal obtains the above-mentioned secret key. The above-mentioned first BSF network element may be any BSF network element in the candidate BSF network element list. The above failure refers to the failure of the terminal to establish a connection with the first BSF network element.

If the terminal determines that the first BSF network element is faulty, the terminal may send fault indication information to the equipment management network element to indicate that the terminal fails to establish a connection with the first BSF network element, so as to notify the equipment management network element of the first BSF network element. The network element may be faulty. Wherein, the above-mentioned fault indication information includes the identifier of the first BSF network element. If the terminal determines that the first BSF network element is not faulty, optionally, the terminal may send an authentication request to the first BSF network element according to the identifier of the first BSF.

Correspondingly, the device management network element may receive the above-mentioned fault indication information from the terminal. FIG. 4 is a schematic flowchart of another communication method provided by the present application. As shown in Figure 4, the method includes the following steps:

S201. The device management network element receives the fault indication information from the terminal.

S202. The device management network element determines whether the first BSF network element is faulty.

As a first possible implementation manner, the device management network element may first determine whether the first BSF network element in the BSF network element list has a preset label used to indicate that the first BSF network element is faulty. If the preset label exists in the first BSF network element, the device management network element determines that the first BSF network element is faulty, so as to improve the efficiency of judging whether the first BSF network element is faulty. If the preset label does not exist on the first BSF network element, the device management network element can obtain the fault detection result of the first BSF network element, and determine whether the first BSF network element is faulty according to the fault detection result, so as to determine whether the first BSF network element is faulty. The accuracy of determining whether the first BSF network element is faulty is improved.

It should be understood that the present application does not limit the form of the above preset labels. Exemplarily, the above-mentioned preset labels may be numbers or letters, for example.

The following describes in detail how the device management network element obtains the fault detection result of the first BSF network element:

Optionally, the device management network element may determine the fault detection result of the first BSF network element according to the communication connection state with the first BSF network element. In this implementation manner, if the time it takes for the device management network element to establish a connection with the first BSF network element is greater than the preset time threshold, it means that the device management network element fails to establish a connection with the first BSF network element, and the device management network element can It is determined that the fault detection result is that the first BSF network element is faulty. If the time it takes for the device management network element to establish a connection with the first BSF network element is less than or equal to the preset time threshold, it means that the device management network element successfully establishes a connection with the first BSF network element, and the device management network element can determine the fault detection result. There is no fault in the first BSF network element.

Alternatively, the device management network element may also acquire the fault detection result of the BSF management network element for the first BSF network element. In this implementation manner, the device management network element may send the failure detection request of the first BSF network element to the BSF management network element. Then, the fault detection result of the BSF management network element for the first BSF network element is acquired.

Still alternatively, the device management network element may also determine the fault of the first BSF network element according to the communication connection state with the first BSF network element and the fault detection result of the BSF management network element for the first BSF network element. Fault detection results. In this implementation manner, if the time taken by the device management network element to establish the connection with the first BSF network element is greater than the preset time threshold, or, the fault detection result of the BSF management network element for the first BSF network element represents the first BSF network element. If the BSF network element is faulty, the device management network element may determine that the fault detection result of the first BSF network element is that the first BSF network element is faulty. If the time taken by the device management network element to establish the connection with the first BSF network element is less than or equal to the preset time threshold, and the fault detection result of the BSF management network element for the first BSF network element indicates that the first BSF network element does not exist If there is a fault, the device management network element may determine that the fault detection result of the first BSF network element is that the first BSF network element is not faulty.

As a second possible implementation manner, the device management network element may, for example, directly acquire the fault detection result of the first BSF network element, and determine whether the first BSF network element is faulty according to the fault detection result. In this implementation manner, for the manner in which the device management network element obtains the above fault detection result, for example, reference may be made to the method described in the above embodiment, and details are not described herein again.

If it is determined that the first BSF network element is faulty, step S203 is performed. If it is determined that the first BSF network element is not faulty, optionally, the device management network element may perform step S204.

S203. The device management network element sends the information of the second BSF network element to the terminal, and deletes the identifier of the first BSF network element from the BSF network element list.

Wherein, the above-mentioned second BSF network element is any BSF network element except the first BSF network element in the BSF network element list. By immediately sending the information of the second BSF network element to the terminal after it is determined that the first BSF network element is faulty, the efficiency of the terminal in acquiring the target BSF network element is ensured. By deleting the identifier of the first BSF network element from the BSF network element list, the device management network element no longer takes the first BSF network element as a candidate BSF network element, ensuring that the device management network element subsequently determines the candidate corresponding to the service The accuracy of the BSF network element ensures the efficiency of each terminal in carrying out the target service.

S204. The device management network element adds a preset label to the first BSF network element in the BSF network element list.

After performing this step S204, the device management network element may perform the following step S205 to perform further fault detection on the BSF network element with the preset label.

S205. The device management network element further detects whether the first BSF network element has a fault within a preset time period.

The above preset duration may be pre-stored in the device management network element by the user.

It should be understood that this application does not limit how the device management network element detects whether the first BSF network element is faulty within a preset time period. During specific implementation, for example, the method for obtaining the fault detection result of the first BSF network element can be obtained by referring to the device management network element described in the foregoing embodiments, and details are not described herein again.

If it is detected that the first BSF network element is fault-free within the preset time period, it indicates that the failure of connecting the terminal with the first BSF network element may be the terminal failure, and the device management network element may perform step S206. If it is detected that the first BSF network element is faulty within the preset time period, the device management network element may perform step S207.

S206, the device management network element deletes the preset label of the first BSF network element from the BSF network element list.

Optionally, after determining that the first BSF network element is not faulty, the device management network element may further send the information of the first BSF network element to the terminal again. By sending the information of the first BSF network element to the terminal, the time for the device management network element to re-confirm the new BSF network element is saved, and the efficiency of the terminal acquiring and performing the target service is improved.

S207. The device management network element deletes the identifier of the first BSF network element from the BSF network element list.

By deleting the identifier of the first BSF network element from the BSF network element list, the device management network element no longer takes the first BSF network element as a candidate BSF network element, ensuring that the device management network element subsequently determines the candidate corresponding to the service The accuracy of the BSF network element ensures the efficiency of each terminal in carrying out the target service.

Optionally, if it is detected that the first BSF network element is faulty within a preset time period, the equipment management network element may also send fault alarm information including the identifier of the first BSF network element to the BSF management network element.

As a possible implementation manner, the device management network element may also update the above-mentioned BSF network element list according to the service and load information corresponding to each BSF network element in the network, so as to improve the accuracy of the device management network element in determining the candidate BSF network element list properties, thereby further improving the efficiency of the terminal performing the target service according to the candidate BSF network element list. Regarding how the device management network element updates the above-mentioned BSF network element list according to the service and load information corresponding to each BSF network element in the network, several possible implementation manners are provided in the present application as follows.

In a first possible implementation manner, the device management network element may determine whether a newly added BSF network element exists in the network. Exemplarily, the device management network element may, for example, obtain the result of whether a newly added BSF network element exists in the network from the BSF management network element.

If there is a newly added BSF network element in the network, the device management network element can determine the service corresponding to the newly added BSF network element according to the service and load information corresponding to each BSF network element in the network, and display it in the BSF network element list. The newly added BSF network element is added in . Specifically, the identification information of the newly added BSF network element may be added to the BSF network element list. Regarding how to determine the service corresponding to the newly added BSF network element, the following are two possible implementations provided by this application:

Optionally, for any service among all services corresponding to all BSF network elements in the BSF network element list, the device management network element may acquire the load of each BSF network element corresponding to the service for the service. Then, according to the load of each BSF network element corresponding to the service for the service, the average load of each BSF network element corresponding to the service for the service is obtained. Finally, the service with the largest average load is used as the service corresponding to the newly added BSF network element, so as to improve the efficiency of determining the candidate BSF network element list for the service with the largest average load.

Exemplarily, taking the service 1 in the foregoing Table 1 as an example, the BSF network elements corresponding to the service 1 are the BSF network element 1, the BSF network element 2, and the BSF network element 3. For example, the load of the above network elements can be as shown in Table 2 below:

Table 2

BSF network element load BSF network element 1 40% BSF network element 2 50% BSF network element 3 60%

According to the load of each BSF network element corresponding to this service 1 shown in Table 2, it can be determined that the average load of each BSF network element corresponding to this service 1 for this service 1 is (40%+50%+60%)/3 =50%. Assume that there are still service 2 and service 3 in the BSF network element list, and the average load of service 2 is 30%, and the average load of service 3 is 33%. That is to say, the service with the largest average load in the BSF network element list is service 1, so the device management network element can take this service 1 as the service corresponding to the newly added BSF network element.

Alternatively, the device management network element may, for example, also use the service corresponding to the BSF network element with the largest load among the BSF network elements as the service corresponding to the newly added BSF network element.

In a second possible implementation manner, for any BSF network element in the BSF network element list, if the load of the BSF network element is less than or equal to the second preset load threshold, it means that the remaining computing resources of the BSF network element are relatively low. It can also undertake more computation and maintain high computational efficiency. Then, the device management network element can also set the second service for the BSF network element, so that the BSF network element can authenticate the second service of the terminal, thereby improving the efficiency of the terminal executing the second service.

During specific implementation, the device management network element may use the service with the largest average load as the second service corresponding to the BSF network element. Alternatively, the device management network element may also use the service with the largest occupied load corresponding to the BSF network element whose load is greater than or equal to the third preset load threshold as the second service corresponding to the BSF network element. Wherein, the second preset load threshold is smaller than the third preset load threshold. The second preset load threshold and the third preset load threshold may be pre-stored in the device management network element by the user.

In a third possible implementation manner, the device management network element may also periodically detect whether there is a failed BSF network element in the BSF network element list. The failed BSF network element refers to a BSF network element that cannot establish a connection with the device management network element. For the failed BSF network element, the equipment management network element can delete the failed BSF network element from the BSF network element list, so as to improve the accuracy of the device management network element in determining the candidate BSF network element list, thereby improving the efficiency of the terminal to perform the target service.

Based on the foregoing embodiments, the technical solution of the present application is exemplarily described below by taking three BSF network elements deployed in the network as an example. Exemplarily, each BSF network element supports the authenticated service, the load information corresponding to each service, the time (delay) required to connect to each BSF network element, and whether each BSF network element has a preset label, such as As shown in Table 3 below:

table 3

Taking the target service as a VoLTE service (for example, the setting of the VoLTE supplementary service by the terminal) as an example, the terminal first sends an authentication and authentication request to the device management network element. The authentication request includes the identity of the VoLTE service. The device management network element obtains, from the BSS system, an authentication result for authenticating whether the terminal has the right to use the VoLTE service according to the identity of the VoLTE service.

After the device management network element determines that the terminal has the right to use the VoLTE service, a list of candidate BSF network elements corresponding to the VoLTE service may be determined. As shown in Table 3, BSF network element 1, BSF network element 2, and BSF network element 3 all support the authentication VoLTE service. The BSF network element corresponding to the VoLTE service with the smallest load is the BSF network element 3 . Then the BSF network element 3 can be used as the target BSF network element corresponding to the VoLTE service.

Taking the target service as the 5G Message service (for example, the sending of files in the 5G message) as an example, the terminal first sends an authentication and authentication request to the device management network element. The authentication request includes the identifier of the 5G Message service. According to the identifier of the 5G Message service, the device management network element obtains from the BSS system an authentication result for authenticating whether the terminal has the right to use the 5G Message service.

After the device management network element determines that the terminal has the right to use the 5G Message service, a list of candidate BSF network elements corresponding to the 5G Message service can be determined. As shown in Table 3, BSF network element 2 and BSF network element 3 support the authentication 5G Message service. Among them, the BSF network element corresponding to the 5G message service with the smallest load is BSF network element 2. Then the BSF network element 2 can be used as the target BSF network element corresponding to the 5G Message service.

Further, still taking the target service as the VoLTE service as an example, assuming that the aforementioned preset time threshold is 1 ms, the BSF network element 3 is faulty, and the BSF network element 1 and the BSF network element 2 are not faulty. That is to say, the connection between the terminal and the BSF network element 3 fails. Then, the terminal can send the fault indication information including the identifier of the BSF network element 3 to the equipment management network element.

After receiving the indication information for indicating that the BSF network element 3 is faulty, the equipment management network element can determine whether the BSF network element 3 has a preset label. As shown in Table 3, the BSF network element 3 does not have a preset label. Then, the device management network element can determine whether the BSF network element 3 is faulty according to the first detection result of the communication connection with the BSF network element 3 . If it is determined that the BSF network element 3 is faulty according to the first detection result, the equipment management network element sends the information of the BSF network element 1 or the BSF network element 2 to the terminal. If the BSF network element 3 is not faulty, the device management network element may add a preset label to the BSF network element 3 .

Then, the BSF network element 3 further detects whether the BSF network element 3 is faulty within 10 minutes. If it is detected that the BSF network element 3 has no fault within 10 minutes, the device management network element can delete the preset label of the BSF network element 3 from the BSF network element list. If the BSF network element 3 is detected to be faulty within 10 minutes, the device management network element may delete the BSF network element 3 from the BSF network element list, and send a fault alarm including the identification of the BSF network element 3 to the BSF management network element information.

FIG. 5 is a schematic structural diagram of a communication apparatus 300 provided by the present application. The apparatus 300 is applied to equipment management network elements. As shown in FIG. 5 , the apparatus includes: a receiving module 301 , a processing module 302 , and a sending module 303 .

The receiving module 301 is configured to receive an authentication and authentication request from a terminal. Wherein, the authentication and authentication request is used for requesting to perform authentication and authentication on the target service of the terminal, and the authentication and authentication request includes: the identifier of the terminal and the identifier of the target service.

The processing module 302 is configured to authenticate whether the terminal has the right to use the target service according to the identifier of the target service and the identifier of the terminal.

The sending module 303 is configured to send a list of candidate bootstrapping service function BSF network elements to the terminal when the authentication result indicates that the terminal has the right to use the target service. Wherein, the candidate BSF network element list includes information of at least one candidate BSF network element; each candidate BSF network element supports target service authentication for the terminal; the candidate BSF network element information includes: Describe the identifier of the candidate BSF network element.

Optionally, the sending module 303 is specifically configured to, according to the identifier of the target service, acquire the identifiers of multiple initial BSF network elements corresponding to the target service from the BSF network element list, and: load information of the BSF network elements; according to the load information of the multiple initial BSF network elements, determine candidate BSF network elements from the multiple initial BSF network elements; generate the candidate BSF network elements according to the determined candidate BSF network elements network element list; sending the candidate BSF network element list to the terminal. Wherein, the BSF network element list includes a mapping relationship between services and BSF network elements.

Optionally, the loads of the candidate BSF network elements are all less than the first preset load threshold.

Optionally, the information of the candidate BSF network element further includes: load information of the candidate BSF network element.

Optionally, the processing module 302 is specifically configured to send an authentication request to the service support system; receive an authentication result returned by the service support system; and the authentication result is used to represent whether the terminal has the right to use the target service. Wherein, the authentication request is used to request to authenticate the target service of the terminal; the authentication request includes: the identifier of the terminal and the identifier of the target service;

Optionally, the receiving module 301 is further configured to receive fault indication information from the terminal after sending the candidate BSF network element list to the terminal. In this implementation manner, the processing module 302 is further configured to determine whether the first BSF network element is faulty. The sending module 303 is further configured to send the information of the second BSF network element to the terminal when it is determined that the first BSF network element is faulty, and delete the first BSF network element from the BSF network element list 's identification. The fault indication information is used to indicate that the terminal fails to establish a connection with the first BSF network element; the first BSF network element is any one of the candidate BSF network elements, and the fault indication information includes the The identifier of the first BSF network element; the second BSF network element is any one except the first BSF network element in the BSF network element list.

Optionally, the processing module 302 is specifically configured to determine whether the first BSF network element in the BSF network element list has a preset label, and the preset label is used to represent whether the first BSF network element is faulty; When the first BSF network element has the preset label, determine that the first BSF network element is faulty; or, when the first BSF network element does not have the preset label, obtain the first BSF network element The fault detection result of the BSF network element, and according to the fault detection result, it is determined whether the first BSF network element is faulty.

Optionally, the processing module 302 is specifically configured to determine the fault detection result of the first BSF network element according to the communication connection state with the first BSF network element; Describe the fault detection result of the first BSF network element.

Optionally, the processing module 302 is further configured to, after determining whether the first BSF network element has a fault according to the fault detection result, when determining that the first BSF network element does not have a fault, Add the preset label to the first BSF network element in the BSF network element list; detect whether the first BSF network element is faulty within a preset time period; detect the first BSF network element within the preset time period When the network element is not faulty, delete the preset label of the first BSF network element from the BSF network element list; or, when detecting that the first BSF network element is faulty within the preset time period, Delete the identifier of the first BSF network element from the BSF network element list.

Optionally, the apparatus 300 may further include an update module 304, configured to update the BSF network element list according to the service and load information corresponding to each BSF network element in the network.

Optionally, the updating module 304 is specifically configured to, when a newly added BSF network element exists in the network, determine the corresponding service and load information of each BSF network element in the network according to the corresponding service and load information of the newly added BSF network element. and add the newly added BSF network element in the BSF network element list.

Optionally, the updating module 304 is specifically configured to, for any service in all services corresponding to all the BSF network elements in the BSF network element list, obtain the information of each BSF network element corresponding to the service for the service. load; according to the load of each BSF network element corresponding to the service for the service, obtain the average load of each BSF network element corresponding to the service for the service; take the service with the largest average load as the new Services corresponding to the added BSF network elements.

Optionally, the updating module 304 is specifically configured to, for any BSF network element in the BSF network element list, if the load of the BSF network element is less than or equal to the second preset load threshold, then update the service with the largest average load. , as the second service corresponding to the BSF network element.

Optionally, the updating module 304 is specifically configured to delete the failed BSF network element in the BSF network element list. Wherein, the failed BSF network element refers to a BSF network element that cannot establish a connection with the device management network element.

The communication apparatus 300 provided in this embodiment is configured to execute the foregoing embodiment of the communication method executed by the device management network element, and the implementation principle and technical effect thereof are similar, which will not be repeated here.

FIG. 6 is a schematic structural diagram of a communication apparatus 400 provided by the present application. The device is applied to a terminal. As shown in FIG. 6 , the apparatus includes: a first sending module 401 , a first receiving module 402 , a second sending module 403 , and a second receiving module 404 . in,

The first sending module 401 is configured to send an authentication and authentication request to a device management network element. Wherein, the authentication and authentication request is used for requesting to perform authentication and authentication on the target service of the terminal, and the authentication and authentication request includes: the identifier of the terminal and the identifier of the target service.

The first receiving module 402 is configured to receive a list of candidate bootstrapping service function BSF network elements returned by the device management network element. Wherein, the candidate BSF network element list includes information of at least one candidate BSF network element; each candidate BSF network element supports target service authentication for the terminal; the candidate BSF network element information includes: Describe the identifier of the candidate BSF network element.

The second sending module 403 is configured to send an authentication request to the target BSF network element according to the identifier of the target BSF network element. Wherein, the target BSF network element is any one in the candidate BSF network element list.

The second receiving module 404 is configured to receive the secret key returned by the target BSF network element after the terminal is authenticated. Wherein, the secret key is used to encrypt the data of the target service transmitted between the terminal and the target service server.

Optionally, the information of the candidate BSF network element further includes: load information of the candidate BSF network element. In this implementation manner, the communication apparatus 400 may further include a processing module 405 for, before the authentication request is sent to the target BSF network element according to the identifier of the target BSF network element, according to the load information of the candidate BSF network element , and determine the target BSF network element.

Optionally, the second sending module 403 is further configured to send fault indication information to the device management network element after receiving the candidate BSF network element list returned by the device management network element. The fault indication information is used to indicate that the terminal fails to establish a connection with the first BSF network element; the first BSF network element is any one of the candidate BSF network elements, and the fault indication information includes the The identifier of the first BSF network element.

The communication apparatus 400 provided in this embodiment is configured to execute the foregoing embodiment of the communication method executed by the terminal, and the implementation principle and technical effect thereof are similar, which will not be repeated here.

FIG. 7 is a schematic structural diagram of an electronic device provided by the present application. The electronic device may be, for example, the above-mentioned device management network element or terminal. As shown in FIG. 7 , the electronic device 500 may include: a receiver 5011 , a transmitter 5012 , at least one processor 501 and a memory 502 .

Both the receiver 5011 and the transmitter 5012 described above are coupled to the processor 501 . The processor 501 controls the receiving action of the receiver 5011 , and controls the sending action of the transmitter 5012 .

The memory 502 is used to store programs. Specifically, the program may include program code, and the program code includes computer operation instructions.

The memory 502 may include high-speed RAM memory, and may also include non-volatile memory, such as at least one disk memory.

The processor 501 is configured to execute the computer-executed instructions stored in the memory 502 to implement the communication method described in the foregoing method embodiments. The processor 501 may be a central processing unit (Central Processing Unit, referred to as CPU), or a specific integrated circuit (Application Specific Integrated Circuit, referred to as ASIC), or is configured to implement one or more of the embodiments of the present application. multiple integrated circuits.

Optionally, the electronic device 500 may further include a communication interface 503 . In terms of specific implementation, if the communication interface 503 , the memory 502 and the processor 501 are implemented independently, the communication interface 503 , the memory 502 and the processor 501 can be connected to each other through a bus and communicate with each other. The bus may be an Industry Standard Architecture (referred to as ISA) bus, a Peripheral Component (referred to as PCI) bus, or an Extended Industry Standard Architecture (referred to as EISA) bus or the like. Buses can be divided into address bus, data bus, control bus, etc., but it does not mean that there is only one bus or one type of bus.

Optionally, in terms of specific implementation, if the communication interface 503 , the memory 502 and the processor 501 are integrated on one chip, the communication interface 503 , the memory 502 and the processor 501 can communicate through an internal interface.

The application also provides a computer-readable storage medium, the computer-readable storage medium may include: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory) Various media that can store program codes, such as a magnetic disk, a magnetic disk, or an optical disk, specifically, the computer-readable storage medium stores program instructions, and the program instructions are used for the methods in the foregoing embodiments.

The present application also provides a program product including execution instructions stored in a readable storage medium. At least one processor of the electronic device can read the execution instruction from the readable storage medium, and the execution of the execution instruction by the at least one processor causes the electronic device to implement the communication methods provided by the various embodiments described above.

Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, but not to limit them; although the present application has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: The technical solutions described in the foregoing embodiments can still be modified, or some or all of the technical features thereof can be equivalently replaced; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the technical solutions of the embodiments of the present application. scope.

Claims (23)

1. A communication method, wherein the method is applied to a device management network element, the method comprising: Receive an authentication and authentication request from the terminal; the authentication and authentication request is used to request authentication and authentication of the target service of the terminal, and the authentication and authentication request includes: the identifier of the terminal and the identifier of the target service ; According to the identifier of the target service and the identifier of the terminal, verify whether the terminal has the right to use the target service; If the authentication result indicates that the terminal has the right to use the target service, send a list of candidate BSF network elements to the terminal, where the candidate BSF network element list includes information of at least one candidate BSF network element each of the candidate BSF network elements supports the target service authentication of the terminal; the information of the candidate BSF network elements includes: the identifier of the candidate BSF network elements. 2. The method according to claim 1, wherein the sending a list of candidate bootstrapping service function BSF network elements to the terminal comprises: According to the identifier of the target service, the identifiers of multiple initial BSF network elements corresponding to the target service are obtained from the BSF network element list, and the load information of the multiple initial BSF network elements; the BSF network element The list includes the mapping relationship between services and BSF network elements; determining candidate BSF network elements from the plurality of initial BSF network elements according to the load information of the plurality of initial BSF network elements; generating the candidate BSF network element list according to the determined candidate BSF network elements; sending the candidate BSF network element list to the terminal. 3 . The method according to claim 2 , wherein the loads of the candidate BSF network elements are all smaller than the first preset load threshold. 4 . The method according to any one of claims 1-3, wherein the information of the candidate BSF network element further comprises: load information of the candidate BSF network element. 5. The method according to any one of claims 1-3, characterized in that, according to the identifier of the target service and the identifier of the terminal, performing a check on whether the terminal has the right to use the target service or not. Certification, including: Send an authentication request to the service support system, where the authentication request is used to request authentication of the target service of the terminal; the authentication request includes: the identifier of the terminal and the identifier of the target service; The authentication result returned by the service support system is received; the authentication result is used to represent whether the terminal has the right to use the target service. 6. The method according to any one of claims 1-3, wherein after the sending the list of candidate BSF network elements to the terminal, the method further comprises: receiving fault indication information from the terminal; the fault indication information is used to indicate that the terminal fails to establish a connection with the first BSF network element; the first BSF network element is any one of the candidate BSF network elements, The fault indication information includes the identifier of the first BSF network element; determining whether the first BSF network element is faulty; If it is determined that the first BSF network element is faulty, send the information of the second BSF network element to the terminal, and delete the identifier of the first BSF network element from the BSF network element list; the second BSF network element The BSF network element is any one except the first BSF network element in the BSF network element list. 7. The method according to claim 6, wherein the determining whether the first BSF network element is faulty comprises: Judging whether the first BSF network element in the BSF network element list has a preset label, where the preset label is used to represent whether the first BSF network element is faulty; If the first BSF network element has the preset label, it is determined that the first BSF network element is faulty; or, If the first BSF network element does not have the preset label, a fault detection result of the first BSF network element is acquired, and according to the fault detection result, it is determined whether the first BSF network element is faulty. 8. The method according to claim 7, wherein the acquiring the fault detection result of the first BSF network element comprises: determining the fault detection result of the first BSF network element according to the communication connection state with the first BSF network element; and / or, Obtain a fault detection result of the BSF management network element for the first BSF network element. 9 . The method according to claim 7 , wherein after determining whether the first BSF network element is faulty according to the fault detection result, the method further comprises: 10 . If it is determined that the first BSF network element is not faulty, adding the preset label to the first BSF network element in the BSF network element list; Detecting whether the first BSF network element is faulty within a preset time period; If it is detected that the first BSF network element is fault-free within the preset time period, the preset label of the first BSF network element is deleted from the BSF network element list; Alternatively, if it is detected that the first BSF network element is faulty within the preset time period, the identifier of the first BSF network element is deleted from the BSF network element list. 10. The method according to any one of claims 1-3, wherein the method further comprises: The BSF network element list is updated according to the service and load information corresponding to each BSF network element in the network. 11. The method according to claim 10, wherein the updating the BSF network element list according to the service and load information corresponding to each BSF network element in the network comprises: If there is a newly added BSF network element in the network, the service corresponding to the newly added BSF network element is determined according to the service and load information corresponding to each BSF network element in the network, and is listed in the BSF network element list. Add the newly added BSF network element in . 12. The method according to claim 11, wherein the determining the service corresponding to the newly added BSF network element comprises: For any service in all services corresponding to all BSF network elements in the BSF network element list, obtain the load of each BSF network element corresponding to the service for the service; According to the load of each BSF network element corresponding to the service for the service, obtain the average load of each BSF network element corresponding to the service for the service; The service with the largest average load is used as the service corresponding to the newly added BSF network element. 13. The method according to claim 10, wherein the updating the BSF network element list according to the service and load information corresponding to each BSF network element in the network comprises: For any BSF network element in the BSF network element list, if the load of the BSF network element is less than or equal to the second preset load threshold, the service with the largest average load is used as the second service corresponding to the BSF network element . 14. The method according to claim 10, wherein the updating the BSF network element list according to the service and load information corresponding to each BSF network element in the network comprises: Delete a failed BSF network element in the BSF network element list; the failed BSF network element refers to a BSF network element that cannot establish a connection with the device management network element. 15. A communication method, wherein the method is applied to a terminal, and the method comprises: Send an authentication and authentication request to the device management network element; the authentication and authentication request is used to request authentication and authentication of the target service of the terminal, and the authentication and authentication request includes: the identification of the terminal and the target service 's identification; Receive a list of candidate bootstrapping service function BSF network elements returned by the device management network element, where the candidate BSF network element list includes information about at least one candidate BSF network element; each candidate BSF network element supports target service authentication; the information of the candidate BSF network element includes: the identifier of the candidate BSF network element; sending an authentication request to the target BSF network element according to the identifier of the target BSF network element, where the target BSF network element is any one of the candidate BSF network elements; Receive the secret key returned by the target BSF network element after the terminal is authenticated; the secret key is used to encrypt the data of the target service transmitted between the terminal and the target service server. The method according to claim 15, wherein the information of the candidate BSF network element further comprises: load information of the candidate BSF network element; Before sending the authentication request to the target BSF network element according to the identifier of the target BSF network element, the method further includes: According to the load information of the candidate BSF network elements, the target BSF network element is determined. 17. The method according to claim 15 or 16, wherein after receiving the candidate BSF network element list returned by the device management network element, the method further comprises: Send fault indication information to the device management network element; the fault indication information is used to indicate that the terminal fails to establish a connection with the first BSF network element; the first BSF network element is any one in the candidate BSF network element list. One, the fault indication information includes the identifier of the first BSF network element. 18. A communication apparatus, wherein the apparatus is applied to a device management network element, and the apparatus comprises: The receiving module is used to receive an authentication and authentication request from the terminal; the authentication and authentication request is used to request authentication and authentication of the target service of the terminal, and the authentication and authentication request includes: the identification of the terminal and the the identification of the target business; a processing module, configured to authenticate whether the terminal has the right to use the target service according to the identity of the target service and the identity of the terminal; A sending module, configured to send a list of candidate bootstrapping service function BSF network elements to the terminal when the authentication result indicates that the terminal has the right to use the target service, where the candidate BSF network element list includes at least one candidate Information of the BSF network element; each candidate BSF network element supports target service authentication for the terminal; the information of the candidate BSF network element includes: the identifier of the candidate BSF network element. 19. A communication device, wherein the device is applied to a terminal, and the device comprises: a first sending module, configured to send an authentication and authentication request to a device management network element; the authentication and authentication request is used to request authentication and authentication of the target service of the terminal, and the authentication and authentication request includes: the terminal and the identity of the target business; a first receiving module, configured to receive a list of candidate bootstrapping service function BSF network elements returned by the device management network element, where the candidate BSF network element list includes information about at least one candidate BSF network element; each candidate BSF network element Each element supports the authentication of the target service of the terminal; the information of the candidate BSF network element includes: the identifier of the candidate BSF network element; A second sending module, configured to send an authentication request to the target BSF network element according to the identifier of the target BSF network element, where the target BSF network element is any one of the candidate BSF network element list; The second receiving module is configured to receive the secret key returned by the target BSF network element after the terminal is authenticated; the secret key is used to encrypt the data of the target service transmitted between the terminal and the target service server. 20. A communication system, comprising: the device management network element according to any one of claims 1-14, the terminal according to any one of claims 15-17, and at least two BSFs network element. 21. An electronic device, comprising: at least one processor, memory, receiver, and transmitter; Both the receiver and the transmitter are coupled to the processor; the processor controls a receiving action of the receiver, and the processor controls a sending action of the transmitter; the memory stores computer-executable instructions; The at least one processor executes computer-implemented instructions stored in the memory to cause the electronic device to perform the method of any of claims 1-17. 22. A computer-readable storage medium, characterized in that, computer-executable instructions are stored on the computer-readable storage medium, and when the computer-executable instructions are executed by a processor, any one of claims 1-17 is implemented. method described. 23. A computer program product, comprising a computer program, characterized in that, when the computer program is executed by a processor, the method of any one of claims 1-17 is implemented.

Images