CN113596830B - Communication method, communication apparatus, electronic device, storage medium, and program product - Google Patents

Abstract

The application provides a communication method, a communication device, an electronic device, a storage medium and a program product. The method comprises the following steps: the equipment management network element receives an authentication request from a terminal; the authentication and certification request is used for requesting authentication and certification of the target service of the terminal, and comprises the following steps: the identification of the terminal and the identification of the target service; according to the identification of the target service and the identification of the terminal, whether the terminal has the use authority of the target service is authenticated; if the authentication result represents that the terminal has the use authority of the target service, a candidate BSF network element list with a bootstrap service function is sent to the terminal, wherein the candidate BSF network element list comprises information of at least one candidate BSF network element; each candidate BSF network element supports the target service authentication of the terminal; the information of the candidate BSF network element includes: identification of candidate BSF network elements. The method and the device improve the efficiency of the BSF network element for feeding back the key to the terminal.

Description

Communication method, device, electronic device, storage medium, and program product

technical field

The present application relates to communication engineering technology, and in particular to a communication method, device, electronic equipment, storage medium and program product.

Background technique

Before performing a target service, such as a Voice over Long-Term Evolution (VoLTE) service, or a 5th Generation Mobile Communication Technology message (5G message) service, etc., the terminal needs to obtain a The secret key required by the target business server for data transmission. After obtaining the above-mentioned secret key, the terminal can use the secret key to encrypt the data of the target service transmitted between the terminal and the target service server, so as to perform the target service. Specifically, the terminal may obtain the aforementioned secret key from the home subscriber server (Home Subscriber Server, HSS) through a bootstrapping server function (BSF) in the communication network where the terminal is located.

At present, a communication network includes a BSF network element, and the BSF network element is used to provide all terminals in the communication network with secret keys corresponding to all services of each terminal. However, the existing communication method has the problem of low efficiency of the BSF network element feeding back the secret key to the terminal.

Contents of the invention

The present application provides a communication method, device, electronic equipment, storage medium and program product to overcome the problem of low efficiency of the BSF network element feeding back the secret key to the terminal.

In a first aspect, the present application provides a communication method, the method is applied to a device management network element, and the method includes:

Receive an authentication request from the terminal; the authentication request is used to request authentication and authentication of the target service of the terminal, and the authentication request includes: the identifier of the terminal and the identifier of the target service ;

Authenticating whether the terminal has the right to use the target service according to the target service identifier and the terminal identifier;

If the authentication result indicates that the terminal has the right to use the target service, send a candidate bootstrap service function BSF network element list to the terminal, and the candidate BSF network element list includes information about at least one candidate BSF network element ; each of the candidate BSF network elements supports the target service authentication of the terminal; the information of the candidate BSF network elements includes: the identification of the candidate BSF network elements.

Optionally, the sending the candidate bootstrap service function BSF network element list to the terminal includes:

Obtain, from the BSF network element list, the identifiers of a plurality of initial BSF network elements corresponding to the target service according to the identifier of the target service, and the load information of the plurality of initial BSF network elements; the BSF network element The list includes the mapping relationship between services and BSF network elements;

determining candidate BSF network elements from the multiple initial BSF network elements according to the load information of the multiple initial BSF network elements;

Generate the list of candidate BSF network elements according to the determined candidate BSF network elements;

Sending the candidate BSF network element list to the terminal.

Optionally, the loads of the candidate BSF network elements are all less than a first preset load threshold.

Optionally, the information of the candidate BSF network element further includes: load information of the candidate BSF network element.

Optionally, the authenticating whether the terminal has the right to use the target service according to the identity of the target service and the identity of the terminal includes:

Sending an authentication request to the service support system, where the authentication request is used to request authentication of the target service of the terminal; the authentication request includes: the identifier of the terminal and the identifier of the target service;

An authentication result returned by the service support system is received; the authentication result is used to indicate whether the terminal has the right to use the target service.

Optionally, after sending the list of candidate BSF network elements to the terminal, the method further includes:

receiving fault indication information from the terminal; the fault indication information is used to indicate that the terminal fails to establish a connection with a first BSF network element; the first BSF network element is any one of the candidate BSF network element list, The fault indication information includes the identifier of the first BSF network element;

determining whether there is a fault in the first BSF network element;

If it is determined that the first BSF network element is faulty, then send the information of the second BSF network element to the terminal, and delete the identifier of the first BSF network element from the list of BSF network elements; the second The BSF network element is any one in the BSF network element list except the first BSF network element.

Optionally, the determining whether the first BSF network element has a fault includes:

judging whether the first BSF network element in the BSF network element list has a preset label, and the preset label is used to indicate whether the first BSF network element has a fault;

If the first BSF network element has the preset label, then determine that the first BSF network element is faulty; or,

If the first BSF network element does not have the preset label, obtain a fault detection result of the first BSF network element, and determine whether the first BSF network element has a fault according to the fault detection result.

Optionally, the obtaining the fault detection result of the first BSF network element includes:

determining a fault detection result of the first BSF network element according to a communication connection state with the first BSF network element;

and / or,

Obtain a fault detection result of the first BSF network element by the BSF management network element.

Optionally, after determining whether the first BSF network element has a fault according to the fault detection result, the method further includes:

If it is determined that there is no fault in the first BSF network element, adding the preset label to the first BSF network element in the BSF network element list;

Detecting whether there is a fault in the first BSF network element within a preset period of time;

If no fault is detected on the first BSF network element within the preset time period, then delete the preset label of the first BSF network element from the list of BSF network elements;

Alternatively, if it is detected that the first BSF network element is faulty within the preset time period, the identifier of the first BSF network element is deleted from the BSF network element list.

Optionally, the method also includes:

The BSF network element list is updated according to the service and load information corresponding to each BSF network element in the network.

Optionally, updating the BSF network element list according to the service and load information corresponding to each BSF network element in the network includes:

If there is a newly added BSF network element in the network, then according to the service and load information corresponding to each BSF network element in the network, determine the service corresponding to the newly added BSF network element, and list the BSF network element Add the newly added BSF network element.

Optionally, the determining the service corresponding to the newly added BSF network element includes:

For any service in all services corresponding to all BSF network elements in the BSF network element list, obtain the load of each BSF network element corresponding to the service for the service;

Obtaining the average load of each BSF network element corresponding to the service for the service according to the load of each BSF network element corresponding to the service for the service;

The service with the largest average load is used as the service corresponding to the newly added BSF network element.

Optionally, updating the BSF network element list according to the service and load information corresponding to each BSF network element in the network includes:

For any BSF network element in the BSF network element list, if the load of the BSF network element is less than or equal to the second preset load threshold, the service with the largest average load is used as the second service corresponding to the BSF network element .

Optionally, updating the BSF network element list according to the service and load information corresponding to each BSF network element in the network includes:

Delete the invalid BSF network element in the BSF network element list; the invalid BSF network element refers to the BSF network element that cannot establish a connection with the device management network element.

In a second aspect, the present application provides a communication method, the method is applied to a terminal, and the method includes:

Send an authentication request to the device management network element; the authentication request is used to request authentication and authentication of the target service of the terminal, and the authentication request includes: the identity of the terminal and the target service logo;

receiving the list of candidate bootstrapping service function BSF network elements returned by the device management network element, the list of candidate BSF network elements including information of at least one candidate BSF network element; each of the candidate BSF network elements supports the terminal The target service authentication; the information of the candidate BSF network element includes: the identification of the candidate BSF network element;

Sending an authentication request to the target BSF network element according to the identifier of the target BSF network element, where the target BSF network element is any one of the candidate BSF network element list;

receiving the secret key returned by the target BSF network element after the terminal passes the authentication; the secret key is used to encrypt the data of the target service transmitted between the terminal and the target service server.

Optionally, the information of the candidate BSF network element further includes: load information of the candidate BSF network element;

Before sending the authentication request to the target BSF network element according to the identity of the target BSF network element, it also includes:

The target BSF network element is determined according to the load information of the candidate BSF network element.

Optionally, after receiving the candidate BSF network element list returned by the device management network element, the method further includes:

Sending fault indication information to the equipment management network element; the fault indication information is used to indicate that the terminal failed to establish a connection with the first BSF network element; the first BSF network element is any of the candidate BSF network element list One, the fault indication information includes the identifier of the first BSF network element.

In a third aspect, the present application provides a communication device, the device is applied to a device management network element, and the device includes:

A receiving module, configured to receive an authentication request from a terminal; the authentication request is used to request authentication and authentication of the target service of the terminal, and the authentication request includes: the identity of the terminal and the the identification of the target business;

A processing module, configured to authenticate whether the terminal has the right to use the target service according to the identifier of the target service and the identifier of the terminal;

A sending module, configured to send a candidate bootstrap service function BSF network element list to the terminal when the authentication result indicates that the terminal has the right to use the target service, and the candidate BSF network element list includes at least one candidate BSF network element information; each of the candidate BSF network elements supports target service authentication for the terminal; the candidate BSF network element information includes: an identifier of the candidate BSF network element.

In a fourth aspect, the present application provides a communication device, the device is applied to a terminal, and the device includes:

The first sending module is configured to send an authentication request to a device management network element; the authentication request is used to request authentication and authentication of the target service of the terminal, and the authentication request includes: the terminal and the identity of the target business;

The first receiving module is configured to receive the candidate bootstrap service function BSF network element list returned by the equipment management network element, the candidate BSF network element list includes information of at least one candidate BSF network element; each of the candidate BSF network elements Each element supports the target service authentication of the terminal; the information of the candidate BSF network element includes: the identity of the candidate BSF network element;

The second sending module is configured to send an authentication request to the target BSF network element according to the identifier of the target BSF network element, and the target BSF network element is any one of the candidate BSF network element list;

The second receiving module is configured to receive the secret key returned by the target BSF network element after the terminal is authenticated; the secret key is used to encrypt target service data transmitted between the terminal and the target service server.

In a fifth aspect, the present application provides a communication system, including: the device management network element according to any one of the first aspect, the terminal according to any one of the second aspect, and at least two BSF network elements.

In a sixth aspect, the present application provides an electronic device, including: at least one processor, memory, receiver, and transmitter;

Both the receiver and the transmitter are coupled to the processor; the processor controls the receiving action of the receiver, and the processor controls the sending action of the transmitter;

the memory stores computer-executable instructions;

The at least one processor executes the computer-executed instructions stored in the memory, so that the electronic device executes the method described in any one of the first aspect or the second aspect.

In a seventh aspect, the present application provides a computer-readable storage medium, where computer-executable instructions are stored on the computer-readable storage medium, and when the computer-executable instructions are executed by a processor, any of the first aspect or the second aspect can be realized. one of the methods described.

In an eighth aspect, the present application provides a computer program product, including a computer program. When the computer program is executed by a processor, the method described in any one of the first aspect or the second aspect is implemented.

In the communication method, device, electronic equipment, storage medium, and program product provided by this application, the terminal sends an authentication request including the identification of the target service to the equipment management network element, and the authentication of whether the terminal has the right to use the target service After passing, the device management network element can send the candidate BSF network element list to the terminal. Wherein, all the candidate BSF network elements in the candidate BSF network element list support the authentication of the target service of the terminal. Then the terminal may send an authentication request to the target BSF network element based on the identifier of the target BSF network element in the candidate BSF network element list. Through the above method, multiple BSF network elements can provide corresponding secret keys for all target services of all terminals in the communication network. That is to say, a BSF network element may only provide some terminals with keys for services that the BSF network element supports authentication. Compared with a BSF network element in the prior art that needs to provide all terminals with corresponding keys for all services, the communication method provided by this application reduces the load on the BSF network element and improves the efficiency of the BSF network element feeding back the key to the terminal. Efficiency, thereby improving the efficiency of the terminal to perform target services.

Description of drawings

In order to more clearly illustrate the technical solutions in the present application or the prior art, the following will briefly introduce the accompanying drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are the present For some embodiments of the application, those of ordinary skill in the art can also obtain other drawings based on these drawings without any creative effort.

FIG. 1 is a schematic diagram of a network architecture of an existing communication system;

FIG. 2 is a schematic diagram of a network architecture of a communication system provided by the present application;

FIG. 3 is a schematic flowchart of a communication method provided by the present application;

FIG. 4 is a schematic flowchart of another communication method provided by the present application;

FIG. 5 is a schematic structural diagram of a communication device 300 provided by the present application;

FIG. 6 is a schematic structural diagram of a communication device 400 provided by the present application;

FIG. 7 is a schematic structural diagram of an electronic device provided by the present application.

By means of the above drawings, specific embodiments of the present application have been shown, which will be described in more detail hereinafter. These drawings and text descriptions are not intended to limit the scope of the concept of the application in any way, but to illustrate the concept of the application for those skilled in the art by referring to specific embodiments.

Detailed ways

In order to make the purpose, technical solutions and advantages of this application clearer, the technical solutions in this application will be clearly and completely described below in conjunction with the accompanying drawings in this application. Obviously, the described embodiments are part of the embodiments of this application , but not all examples. Based on the embodiments in this application, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the scope of protection of this application.

FIG. 1 is a schematic diagram of a network architecture of an existing communication system. As shown in FIG. 1 , the network architecture of the communication system includes: user equipment (User Equipment, UE), BSF network element, HSS, and service server. Wherein, UE is equal to the terminal involved in this application. The terminal is connected to the BSF network element in a wireless manner, and the terminal is connected to the service server in a wireless manner. The BSF network element is connected to the HSS through wireless or wired means. Terminals can be fixed or mobile. FIG. 1 is only a schematic diagram. The communication system may also include other network devices, such as wireless relay devices and wireless backhaul devices, which are not shown in FIG. 1 . In the communication system, the number of BSF network elements is one, and this application does not limit the number of terminals, service servers and HSSs included in the communication system.

Wherein, the above-mentioned terminal may also be called an access terminal, a subscriber unit, a subscriber station, a mobile station, a mobile station, a remote station, a remote terminal, a mobile device, a user terminal, a terminal, a wireless communication device, a user agent or a user device. The terminal device can also be a cellular phone, a cordless phone, a session initiation protocol (SIP) phone, a wireless local loop (WLL) station, a personal digital assistant (PDA), a Functional handheld devices, computing devices or other processing devices connected to wireless modems, transportation devices such as vehicles/ships/aircraft, vehicle-mounted devices, wearable devices, terminal devices in future 5G networks or future evolution of public land mobile communication networks ( Terminal equipment in public land mobile network, PLMN), etc.

The above-mentioned services may be, for example, services in various communication systems. Exemplarily, the aforementioned communication system may be, for example, a long term evolution (long term evolution, LTE) system, an LTE frequency division duplex (frequency division duplex, FDD) system, an LTE time division duplex (time division duplex, TDD), a universal mobile communication system (universal mobile telecommunications system, UMTS), global interconnection microwave access (worldwide interoperability for microwave access, WiMAX) communication system, the future fifth generation (5th generation, 5G) system or new radio (new radio, NR) system, vehicle to other Equipment (Vehicle-to-X V2X), where V2X can include vehicle to network (vehicle to network, V2N), vehicle to vehicle (vehicle to-vehicle, V2V), vehicle to infrastructure (vehicle to infrastructure, V2I), vehicle to pedestrians (vehicle topedestrian, V2P), etc., long-term evolution of vehicle communication (Long Term Evolution-Vehicle, LTE-V), Internet of Vehicles, machine type communication (machine type communication, MTC), Internet of Things (Internet of Things, IoT) , Long Term Evolution-Machine (LTE-M), machine-to-machine (M2M), non-terrestrial network (NTN) system, NTN system can also be called satellite Communication systems, or other communication systems that evolve in the future, etc.

Based on the above communication system, the terminal can obtain the secret key required for data transmission with the service server from the BSF network element. Specifically, the terminal can use the Internet Protocol (Internet Protocol, IP) address of the BSF network element to establish a connection with the BSF network element, and can send an authentication request to the BSF network element. After the terminal is authenticated, the BSF network element can obtain the secret key required for the terminal to perform the above services from the HSS, and send the secret key to the terminal. Correspondingly, the terminal can receive the secret key sent by the above-mentioned BSF network element, and use the secret key to perform data transmission with the above-mentioned service server.

At present, the communication network provided by the communication system includes a BSF network element, and the BSF network element is used to provide all terminals in the communication network with keys corresponding to all services of each terminal. However, the existing communication method has the problem of low efficiency of the BSF network element feeding back the secret key to the terminal.

After analysis and research, the inventor found that the reason for the low efficiency of the BSF network element to feed back the secret key to the terminal is that only one BSF network element provides all the terminals in the communication network with the secret key corresponding to all the services of each terminal, which may easily lead to the The load of the BSF network element in the communication network is often large, which leads to low efficiency of the BSF network element feeding back the secret key to the terminal.

Therefore, the present application proposes a communication method based on multiple BSF network elements to provide all terminals in the communication network with keys corresponding to target services. Compared with a BSF network element in the prior art that needs to provide all terminals with corresponding keys for all services, the communication method provided by this application reduces the load of a single BSF network element and improves the efficiency of the BSF network element feeding back keys to terminals. The efficiency of the terminal improves the efficiency of the target business.

In order to facilitate the understanding of the present application, the following describes and introduces the network architecture involved in the present application. FIG. 2 is a schematic diagram of a network architecture of a communication system provided by the present application. As shown in FIG. 2, the communication network includes a terminal, a device management (Device Management, DM) network element, an HSS, and at least two BSF network elements (only one BSF network element is exemplarily shown in FIG. 2 ).

Wherein, the device management network element is used to allocate the BSF network element in the communication network to the terminal according to the service to be executed by the terminal. After receiving the information of the candidate BSF network element sent by the equipment management network element, the terminal can connect to the BSF according to the information of the candidate BSF network element, so as to obtain the secret key required for data transmission with the target service server from the BSF.

It should be understood that FIG. 2 only exemplarily shows devices related to the present application in the above communication system, and the present application does not limit whether the communication system further includes other devices.

Based on the communication network provided by the communication system shown in FIG. 2 , the communication method of the present application will be described in detail below in conjunction with specific embodiments. The following specific embodiments may be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments. It should be understood that the following description is made by taking the execution subject of the above communication method as the terminal and the device management network element as an example. In a specific implementation, the execution subject of the method executed by the terminal described below may also be, for example, a chip with a processing function in the terminal. The execution subject of the method performed by the device management network element may also be, for example, a chip with a processing function in the device management network element.

FIG. 3 is a schematic flowchart of a communication method provided by the present application. As shown in Figure 3, the method includes the following steps:

S101. The terminal sends an authentication request to a device management network element.

Wherein, the above-mentioned authentication request is used to request authentication and authentication for the target service of the terminal. Specifically, the authentication request includes the identification of the terminal and the identification of the target service. The foregoing authentication and authentication refers to authenticating whether the terminal has the right to use the target service.

Exemplarily, the above-mentioned identifier of the terminal may be, for example, a unique identification code of the terminal. Or, taking the example that the terminal has the right to use the target service, the identifier of the terminal may also be, for example, the user name and password used by the terminal when activating the target service. Exemplarily, the above identifier of the target service may be pre-stored in the terminal. The identifiers of different target businesses are different. For example, mapping relationships between multiple services and service identifiers may be stored in the terminal. The terminal may determine the identifier of the target service corresponding to the target service according to the service triggered by the user (that is, the target service) and the mapping relationship between the service and the service identifier.

Correspondingly, the device management network element may receive the foregoing authentication request from the terminal.

S102. The device management network element authenticates whether the terminal has the right to use the target service according to the identifier of the target service and the identifier of the terminal.

As a possible implementation, after receiving the above authentication request, the device management network element may, for example, send an authentication request to a business support system (Business support system, BSS) for authenticating the target service of the terminal , and then receive the authentication result returned by the BSS. Wherein, the above-mentioned authentication request may include the identifier of the terminal and the identifier of the target service. It should be understood that this application does not limit how the BSS verifies whether the terminal has the right to use the target service.

Exemplarily, the BSS may store the identities of all terminals that have the right to use the target service. In this implementation manner, the BSS may first determine the target service corresponding to the terminal according to the target task identifier. Then, among the identifiers of all terminals having the right to use the target service, whether there is an identifier identical to the identifier of the terminal. If it exists, it means that the terminal has the right to use the target task, and the BSS can send an authentication result indicating that the terminal has the right to use the target service to the device management network element. If not, it means that the terminal does not have the right to use the target task, and the BSS may send an authentication result indicating that the terminal does not have the right to use the target service to the device management network element.

As another possible implementation manner, for example, the device management network element may also acquire, from the BSS, the identifiers of all the terminals that have the right to use the target service. Then, the device management network element can authenticate whether the terminal has the right to use the target service according to the identifiers of all terminals that have the right to use the target service, and the identifier of the terminal, so as to obtain an authentication result.

When the authentication result indicates that the terminal has the right to use the target service, the device management network element executes step S103. When the authentication result indicates that the terminal does not have the right to use the target service, optionally, the device management network element may perform step S106.

S103. The device management network element sends a candidate BSF network element list to the terminal.

The foregoing list of candidate BSF network elements includes information of at least one candidate BSF network element. The information of the candidate BSF network element includes the identifier of the candidate BSF network element. Wherein, each candidate BSF network element supports authentication of the target service of the terminal. Exemplarily, the identifier of the candidate BSF network element may be the host name of the candidate BSF network element, or the IP address of the candidate BSF network element, and the like.

As a possible implementation manner, the device management network element may first determine multiple initial BSF network elements that support authentication of the target service for the terminal from the BSF network element list according to the target service identifier. Then, according to the load information of these initial BSF network elements, a list of candidate BSF network elements is determined. Compared with a BSF network element in the prior art that needs to provide terminals with keys corresponding to all services, the initial BSF network element in this implementation can only provide terminals with keys corresponding to the target services, reducing BSF The load of the network element improves the efficiency of the BSF network element feeding back the secret key to the terminal. In addition, in this implementation, according to the load information of the initial BSF network element, the initial BSF network element with less load can be used as a candidate BSF network element, which further improves the efficiency of the BSF network element feeding back the secret key to the terminal.

During specific implementation, the device management network element can first obtain the identifiers of multiple initial BSF network elements corresponding to the target service from the BSF network element list based on the identifier of the target service, and the load information of the multiple initial BSF network elements . Wherein, the identifiers of each BSF network element in the above BSF network element list may be pre-stored by the user in the device management network element. The device management network element can update the load information of each BSF network element in the BSF network element list according to a preset frequency. Exemplarily, the device management network element may obtain, for example, the load information corresponding to each BSF network element from each BSF network element.

The above BSF network element list includes the mapping relationship between services and BSF network elements. The device management network element can determine multiple initial BSF network elements corresponding to the target service from the BSF network element list according to the target service identifier and the mapping relationship between the above-mentioned service and the BSF network element.

Exemplarily, the mapping relationship between the above services and BSF network elements may be shown in Table 1 below:

Table 1

business BSF network element business 1 BSF network element 1 business 1 BSF network element 2 business 1 BSF Network Element 3 Business 2 BSF Network Element 4 Business 2 BSF Network Element 5

As shown in Table 1, assuming that the target service is service 1, the multiple initial BSF network elements corresponding to the target service are BSF network element 1, BSF network element 2, and BSF network element 3 respectively.

After determining the multiple initial BSF network elements corresponding to the target service, the equipment management network element may acquire the identifiers of the multiple initial BSF network elements and the load information of the multiple initial BSF network elements from the BSF network element list.

Then, the device management network element can determine a candidate BSF network element from the multiple initial BSF network elements according to the load information of the multiple initial BSF network elements. Optionally, the device management network element may, for example, use an initial BSF network element whose load information is less than a first preset load threshold as a candidate BSF network element. Wherein, the first preset load threshold may be pre-stored by the user in the device management network element, for example. Alternatively, the device management network element may also use the BSF network element with the smallest load information among the multiple initial BSF network elements as a candidate BSF network element.

After determining the candidate BSF network elements, the device management network element may generate a list of candidate BSF network elements according to the determined candidate BSF network elements. Specifically, the device management network element may add the identification of each candidate BSF network element to the list of candidate BSF network elements. Then, the device management network element may send the candidate BSF network element list to the terminal.

As another possible implementation manner, the information of the above candidate BSF network elements may also include the load information of the candidate BSF network elements, so that the terminal can determine the target BSF network element according to the load information of each candidate BSF network element.

Correspondingly, the terminal may receive the candidate BSF network element list returned by the device management network element.

S104. The terminal sends an authentication request to the target BSF network element according to the identifier of the target BSF network element.

Wherein, the above-mentioned target BSF network element is any one in the candidate BSF network element list. The foregoing authentication request refers to a general bootstrapping architecture (General Bootstrapping Architecture, GBA) authentication request.

If the list of candidate BSF network elements only includes the identifier of one candidate BSF network element, the terminal may use the candidate BSF network element as the target BSF network element. If the list of candidate BSF network elements includes identifiers of multiple candidate BSF network elements, optionally, the terminal may determine the target BSF network element according to the load information of the above-mentioned candidate BSF network elements. Specifically, the terminal may use the candidate BSF network element with the smallest load as the target BSF network element.

If the identifier of the target BSF network element is the host name of the target BSF network element, optionally, after obtaining the identifier of the target BSF network element, the terminal may send the identifier of the target BSF network element to a domain name system (Domain Name System, DNS ) to obtain the IP address of the target BSF network element from the DNS. Then the terminal can use the IP address of the target BSF network element to send an authentication request to the target BSF network element.

If the identifier of the target BSF network element is the IP address of the target BSF network element, the terminal can directly use the IP address of the target BSF network element to send an authentication request to the target BSF network element.

S105. The terminal receives the secret key returned by the target BSF network element after the terminal passes the authentication.

Wherein, the secret key is used to encrypt the data of the target service transmitted between the terminal and the target service server.

It should be understood that this application does not limit how the target BSF network element authenticates the terminal. As mentioned above, after receiving the authentication request sent by the terminal, the target BSF network element can obtain the above-mentioned secret key from the HSS network element, and then send the secret key to the terminal.

S106. The device management network element sends indication information to the terminal to indicate that the terminal does not have the right to use the target service.

Correspondingly, the terminal may receive the indication information for indicating that the terminal does not have the right to use the target service. Then, the terminal may output the indication information to remind the user that the right to use the target service has not been activated temporarily. Exemplarily, the terminal may, for example, output the above indication information to a display device of the terminal.

In this embodiment, the terminal sends an authentication request including the identity of the target service to the device management network element. After passing the authentication on whether the terminal has the right to use the target service, the device management network element can send the candidate BSF request to the terminal. NE list. Wherein, all the candidate BSF network elements in the candidate BSF network element list support the authentication of the target service of the terminal. Then the terminal may send an authentication request to the target BSF network element based on the identifier of the target BSF network element in the candidate BSF network element list. Through the above method, multiple BSF network elements can provide corresponding secret keys for all target services of all terminals in the communication network. That is to say, a BSF network element may only provide some terminals with keys for services that the BSF network element supports authentication. Compared with a BSF network element in the prior art that needs to provide all terminals with corresponding keys for all services, the communication method provided by this application reduces the load on the BSF network element and improves the efficiency of the BSF network element feeding back the key to the terminal. Efficiency, thereby improving the efficiency of the terminal to perform target services.

As a possible implementation, after receiving the list of candidate BSF network elements returned by the device management network element, the terminal can also determine whether the first BSF network element is faulty, so as to ensure that the terminal is successfully connected to the BSF network element, thereby ensuring The efficiency with which the terminal obtains the above-mentioned secret key. Wherein, the above-mentioned first BSF network element may be any BSF network element in the candidate BSF network element list. The foregoing failure refers to the failure of the terminal to establish a connection with the first BSF network element.

If the terminal determines that the first BSF network element is faulty, the terminal may send fault indication information to the equipment management network element indicating that the terminal failed to establish a connection with the first BSF network element, so as to notify the equipment management network element that the first BSF The NE may be faulty. Wherein, the above fault indication information includes the identifier of the first BSF network element. If the terminal determines that the first BSF network element is not faulty, optionally, the terminal may send an authentication request to the first BSF network element according to the identifier of the first BSF.

Correspondingly, the device management network element may receive the above fault indication information from the terminal. FIG. 4 is a schematic flowchart of another communication method provided by the present application. As shown in Figure 4, the method includes the following steps:

S201. The device management network element receives fault indication information from a terminal.

S202. The device management network element determines whether the first BSF network element has a fault.

As a first possible implementation manner, the device management network element may first determine whether the first BSF network element in the BSF network element list has a preset label used to indicate that the first BSF network element is faulty. If the first BSF network element has the preset label, the equipment management network element determines that the first BSF network element has a fault, so as to improve the efficiency of judging whether the first BSF network element has a fault. If the first BSF network element does not have the preset label, the equipment management network element can obtain the fault detection result of the first BSF network element, and determine whether the first BSF network element has a fault according to the fault detection result, so as to The accuracy of determining whether the first BSF network element has a fault is improved.

It should be understood that the present application does not limit the form of the above preset label. Exemplarily, the aforementioned preset labels may be numbers or letters, for example.

How the device management network element obtains the fault detection result of the first BSF network element is described in detail below:

Optionally, the device management network element may determine the fault detection result of the first BSF network element according to the state of the communication connection with the first BSF network element. In this implementation mode, if the time it takes for the equipment management network element to establish a connection with the first BSF network element is greater than the preset time threshold, it means that the equipment management network element fails to establish a connection with the first BSF network element, and the equipment management network element can It is determined that the fault detection result is that the first BSF network element has a fault. If the time it takes for the device management network element to establish a connection with the first BSF network element is less than or equal to the preset time threshold, it means that the device management network element has successfully established a connection with the first BSF network element, and the device management network element can determine the fault detection result There is no fault in the first BSF network element.

Alternatively, the device management network element may also acquire a fault detection result of the first BSF network element by the BSF management network element. In this implementation manner, the equipment management network element may send the fault detection request of the first BSF network element to the BSF management network element. Then the fault detection result of the BSF management network element for the first BSF network element is obtained.

Alternatively, the device management network element may also determine the status of the first BSF network element according to the communication connection status with the first BSF network element, and the fault detection result of the first BSF network element by the BSF management network element. Fault detection results. In this implementation, if the time it takes for the device management network element to establish a connection with the first BSF network element is greater than the preset time threshold, or the fault detection result of the BSF management network element for the first BSF network element indicates that the first There is a fault in the BSF network element, and the device management network element can determine that the fault detection result of the first BSF network element is that the first BSF network element has a fault. If the time it takes for the equipment management network element to establish a connection with the first BSF network element is less than or equal to the preset time threshold, and the fault detection result of the BSF management network element for the first BSF network element indicates that the first BSF network element does not exist fault, the equipment management network element may determine that the fault detection result of the first BSF network element is that the first BSF network element does not have a fault.

As a second possible implementation manner, for example, the device management network element may also directly obtain the fault detection result of the first BSF network element, and determine whether the first BSF network element has a fault according to the fault detection result. In this implementation manner, the manner in which the device management network element obtains the above fault detection result may refer to, for example, the method described in the above embodiment, and details are not repeated here.

If it is determined that the first BSF network element has a fault, step S203 is performed. If it is determined that there is no fault in the first BSF network element, optionally, the device management network element may perform step S204.

S203. The device management network element sends the information of the second BSF network element to the terminal, and deletes the identifier of the first BSF network element from the BSF network element list.

Wherein, the above-mentioned second BSF network element is any BSF network element in the BSF network element list except the first BSF network element. By sending the information of the second BSF network element to the terminal immediately after determining that the first BSF network element has a fault, the efficiency of the terminal in obtaining the target BSF network element is ensured. By deleting the identifier of the first BSF network element from the BSF network element list, the device management network element no longer takes the first BSF network element as a candidate BSF network element, which ensures that the device management network element subsequently determines the candidate corresponding to the service The accuracy of the BSF network element ensures the efficiency of each terminal to carry out the target business.

S204. The device management network element adds a preset label to the first BSF network element in the BSF network element list.

After performing the step S204, the equipment management network element may perform the following step S205 to perform further fault detection on the BSF network element with a preset label.

S205. The device management network element further detects whether the first BSF network element is faulty within a preset period of time.

Wherein, the preset duration may be pre-stored by the user in the device management network element.

It should be understood that the present application does not limit how the device management network element detects whether the first BSF network element is faulty within a preset time period. In specific implementation, for example, the method for obtaining the fault detection result of the first BSF network element by the device management network element described in the foregoing embodiments may be referred to, and details are not repeated here.

If no fault is detected on the first BSF network element within the preset period of time, it means that the failure of the connection between the terminal and the first BSF network element may be caused by a fault on the terminal, and the device management network element may perform step S206. If it is detected that the first BSF network element has a fault within the preset time period, the device management network element may perform step S207.

S206. The device management network element deletes the preset label of the first BSF network element from the BSF network element list.

Optionally, after determining that the first BSF network element does not have a fault, the device management network element may also send the information of the first BSF network element to the terminal again. By sending the information of the first BSF network element to the terminal, the time for the equipment management network element to reconfirm the new BSF network element is saved, and the efficiency for the terminal to acquire and perform the target service is improved.

S207. The device management network element deletes the identifier of the first BSF network element from the BSF network element list.

By deleting the identifier of the first BSF network element from the BSF network element list, the device management network element no longer takes the first BSF network element as a candidate BSF network element, which ensures that the device management network element subsequently determines the candidate corresponding to the service The accuracy of the BSF network element ensures the efficiency of each terminal to carry out the target business.

Optionally, if a fault is detected on the first BSF network element within a preset period of time, the device management network element may also send fault alarm information including the identification of the first BSF network element to the BSF management network element.

As a possible implementation, the device management network element can also update the above-mentioned BSF network element list according to the service and load information corresponding to each BSF network element in the network, so as to improve the accuracy of the device management network element in determining the list of candidate BSF network elements. performance, and further improve the terminal's efficiency in performing target services according to the list of candidate BSF network elements. Regarding how the device management network element updates the above-mentioned BSF network element list according to the service and load information corresponding to each BSF network element in the network, the following are several possible implementation methods provided by this application.

In a first possible implementation manner, the device management network element can determine whether there is a newly added BSF network element in the network. Exemplarily, the device management network element may acquire the result of whether there is a newly added BSF network element in the network from the BSF management network element.

If there is a newly added BSF network element in the network, the device management network element can determine the service corresponding to the newly added BSF network element according to the service and load information corresponding to each BSF network element in the network, and list the service in the BSF network element list Add the newly added BSF network element. Specifically, the identification information of the newly added BSF network element may be added to the BSF network element list. Regarding how to determine the service corresponding to the newly added BSF network element, the following are two possible implementation methods provided by this application:

Optionally, for any service among all services corresponding to all BSF network elements in the BSF network element list, the device management network element may acquire the load of each BSF network element corresponding to the service for the service. Then, according to the loads of the BSF network elements corresponding to the service for the service, the average load of the BSF network elements corresponding to the service for the service is obtained. Finally, the service with the largest average load is used as the service corresponding to the newly added BSF network element, so as to improve the efficiency of determining the candidate BSF network element list for the above-mentioned service with the largest average load.

Exemplarily, taking the service 1 in the foregoing Table 1 as an example, the BSF network elements corresponding to the service 1 are BSF network element 1, BSF network element 2, and BSF network element 3. The loads of the above network elements may be shown in Table 2 below, for example:

Table 2

BSF network element load BSF network element 1 40% BSF network element 2 50% BSF Network Element 3 60%

According to the load of each BSF network element corresponding to the service 1 shown in Table 2, it can be determined that the average load of each BSF network element corresponding to the service 1 for the service 1 is (40%+50%+60%)/3 = 50%. Assume that there are services 2 and 3 in the BSF network element list, and the average load of service 2 is 30%, and the average load of service 3 is 33%. That is to say, the service with the largest average load in the BSF network element list is service 1, so the equipment management network element can use the service 1 as the service corresponding to the newly added BSF network element.

Or, for example, the device management network element may also use the service corresponding to the BSF network element with the largest load among the BSF network elements as the service corresponding to the newly added BSF network element.

In the second possible implementation, for any BSF network element in the BSF network element list, if the load of the BSF network element is less than or equal to the second preset load threshold, it means that the remaining computing resources of the BSF network element are relatively low. More, it can also undertake more calculations and maintain a high calculation efficiency. The device management network element can also set the second service for the BSF network element, so that the BSF network element can authenticate the second service of the terminal, thereby improving the efficiency of the terminal to execute the second service.

During specific implementation, the device management network element may use the service with the largest average load as the second service corresponding to the BSF network element. Alternatively, the device management network element may also use the service with the largest load corresponding to the BSF network element whose load is greater than or equal to the third preset load threshold as the second service corresponding to the BSF network element. Wherein, the second preset load threshold is smaller than the third preset load threshold. The second preset load threshold and the third preset load threshold may be pre-stored by the user in the device management network element.

In a third possible implementation manner, the device management network element may also periodically detect whether there is a failed BSF network element in the BSF network element list. Wherein, the failed BSF network element refers to a BSF network element that cannot establish a connection with the equipment management network element. For the failed BSF network element, the device management network element can delete the failed BSF network element from the BSF network element list, so as to improve the accuracy of the device management network element in determining the candidate BSF network element list, and then improve the efficiency of the terminal to perform target services.

Based on the foregoing embodiments, the technical solution of the present application will be illustrated below by taking three BSF network elements deployed in the network as an example. Exemplarily, the service that each BSF network element supports authentication, the load information corresponding to each service, the time (delay) required to connect to each BSF network element, and whether each BSF network element has a preset label, for example, can As shown in Table 3 below:

table 3

Taking the target service as the VoLTE service (for example, it may be the setting of the VoLTE supplementary service by the terminal), the terminal first sends an authentication request to the device management network element. The authentication request includes the identification of the VoLTE service. According to the identification of the VoLTE service, the equipment management network element obtains the authentication result of authenticating whether the terminal has the right to use the VoLTE service from the BSS system.

After the device management network element determines that the terminal has the right to use the VoLTE service, it can determine the candidate BSF network element list corresponding to the VoLTE service. As shown in Table 3, BSF network element 1, BSF network element 2, and BSF network element 3 all support authenticated VoLTE services. Among them, the BSF network element corresponding to the VoLTE service with the smallest load is BSF network element 3 . Then the BSF network element 3 can be used as the target BSF network element corresponding to the VoLTE service.

Taking the target service as an example of a 5G Message service (for example, sending a file in a 5G message), the terminal first sends an authentication request to the device management network element. The authentication request includes the identifier of the 5G Message service. According to the identification of the 5G Message service, the device management network element obtains the authentication result of authenticating whether the terminal has the right to use the 5G Message service from the BSS system.

After the device management network element determines that the terminal has the right to use the 5G Message service, it can determine the list of candidate BSF network elements corresponding to the 5G Message service. As shown in Table 3, BSF network element 2 and BSF network element 3 support authentication of 5GMessage services. Among them, the BSF network element corresponding to the 5G Message service with the smallest load is BSF network element 2. Then the BSF network element 2 can be used as the target BSF network element corresponding to the 5G Message service.

Further, still taking the target service as the VoLTE service as an example, assuming that the preset time threshold is 1 ms, BSF network element 3 is faulty, and BSF network element 1 and BSF network element 2 are not faulty. That is to say, the connection between the terminal and the BSF network element 3 fails. Then the terminal may send fault indication information including the identifier of the BSF network element 3 to the equipment management network element.

After receiving the indication information indicating that the BSF network element 3 has a fault, the device management network element may determine whether the BSF network element 3 has a preset label. As shown in Table 3, the BSF network element 3 does not have a preset label. Then the device management network element can determine whether the BSF network element 3 is faulty according to the first detection result of the communication connection with the BSF network element 3 . If it is determined that the BSF network element 3 is faulty according to the first detection result, the equipment management network element sends the information of the BSF network element 1 or BSF network element 2 to the terminal. If the BSF network element 3 does not have a fault, the device management network element can add a preset label to the BSF network element 3 .

Then the BSF network element 3 is further detected within 10 minutes whether the BSF network element 3 is faulty. If it is detected that the BSF network element 3 has no fault within 10 minutes, the device management network element can delete the preset label of the BSF network element 3 from the BSF network element list. If it is detected that the BSF network element 3 is faulty within 10 minutes, the device management network element can delete the BSF network element 3 from the BSF network element list, and send a failure alarm including the identification of the BSF network element 3 to the BSF management network element information.

FIG. 5 is a schematic structural diagram of a communication device 300 provided in the present application. The apparatus 300 is applied to a device management network element. As shown in FIG. 5 , the device includes: a receiving module 301 , a processing module 302 , and a sending module 303 .

The receiving module 301 is configured to receive an authentication request from a terminal. Wherein, the authentication request is used to request authentication and authentication of the target service of the terminal, and the authentication request includes: an identifier of the terminal and an identifier of the target service.

The processing module 302 is configured to authenticate whether the terminal has the right to use the target service according to the identifier of the target service and the identifier of the terminal.

The sending module 303 is configured to send a list of candidate bootstrap service function BSF network elements to the terminal when the authentication result indicates that the terminal has the right to use the target service. Wherein, the list of candidate BSF network elements includes information of at least one candidate BSF network element; each of the candidate BSF network elements supports target service authentication for the terminal; the information of the candidate BSF network elements includes: The identifier of the candidate BSF network element.

Optionally, the sending module 303 is specifically configured to, according to the identifier of the target service, acquire identifiers of multiple initial BSF network elements corresponding to the target service from the list of BSF network elements, and the multiple initial Load information of BSF network elements; according to the load information of the multiple initial BSF network elements, determine candidate BSF network elements from the multiple initial BSF network elements; generate the candidate BSF according to the determined candidate BSF network elements A network element list; sending the candidate BSF network element list to the terminal. Wherein, the BSF network element list includes a mapping relationship between services and BSF network elements.

Optionally, the loads of the candidate BSF network elements are all less than a first preset load threshold.

Optionally, the information of the candidate BSF network element further includes: load information of the candidate BSF network element.

Optionally, the processing module 302 is specifically configured to send an authentication request to the service support system; receive an authentication result returned by the service support system; the authentication result is used to indicate whether the terminal has the right to use the target service. Wherein, the authentication request is used to request authentication of the target service of the terminal; the authentication request includes: an identifier of the terminal and an identifier of the target service;

Optionally, the receiving module 301 is further configured to receive fault indication information from the terminal after sending the candidate BSF network element list to the terminal. In this implementation manner, the processing module 302 is further configured to determine whether the first BSF network element is faulty. The sending module 303 is further configured to send information of a second BSF network element to the terminal when it is determined that the first BSF network element is faulty, and delete the first BSF network element from the BSF network element list logo. Wherein, the fault indication information is used to indicate that the terminal fails to establish a connection with the first BSF network element; the first BSF network element is any one in the candidate BSF network element list, and the fault indication information includes the An identifier of the first BSF network element; the second BSF network element is any one in the BSF network element list except the first BSF network element.

Optionally, the processing module 302 is specifically configured to determine whether the first BSF network element in the BSF network element list has a preset label, and the preset label is used to indicate whether the first BSF network element has a fault; When the first BSF network element has the preset label, determine that the first BSF network element has a fault; or, when the first BSF network element does not have the preset label, obtain the first The fault detection result of the BSF network element, and according to the fault detection result, determine whether there is a fault in the first BSF network element.

Optionally, the processing module 302 is specifically configured to determine the fault detection result of the first BSF network element according to the communication connection status with the first BSF network element; Describe the fault detection result of the first BSF network element.

Optionally, the processing module 302 is further configured to, after determining whether there is a fault in the first BSF network element according to the fault detection result, when determining that there is no fault in the first BSF network element, in the Adding the preset label to the first BSF network element in the BSF network element list; detecting whether the first BSF network element is faulty within the preset time period; detecting the first BSF within the preset time period When the network element has no fault, delete the preset label of the first BSF network element from the BSF network element list; or, when detecting that the first BSF network element has a fault within the preset time length, Deleting the identifier of the first BSF network element from the BSF network element list.

Optionally, the apparatus 300 may further include an update module 304, configured to update the BSF network element list according to the service and load information corresponding to each BSF network element in the network.

Optionally, the update module 304 is specifically configured to, when there is a newly added BSF network element in the network, determine the correspondence of the newly added BSF network element according to the service and load information corresponding to each BSF network element in the network services, and add the newly added BSF network element to the BSF network element list.

Optionally, the update module 304 is specifically configured to, for any service in all services corresponding to all BSF network elements in the BSF network element list, obtain the information of each BSF network element corresponding to the service for the service load; according to the load of each BSF network element corresponding to the service for the service, obtain the average load of each BSF network element corresponding to the service for the service; use the service with the largest average load as the new The services corresponding to the added BSF network elements.

Optionally, the update module 304 is specifically configured to, for any BSF network element in the BSF network element list, if the load of the BSF network element is less than or equal to the second preset load threshold, the average load of the service with the largest , as the second service corresponding to the BSF network element.

Optionally, the update module 304 is specifically configured to delete the failed BSF network element in the BSF network element list. Wherein, the failed BSF network element refers to a BSF network element that cannot establish a connection with the device management network element.

The communication device 300 provided in this embodiment is used to implement the aforementioned embodiment of the communication method performed by the equipment management network element, and its implementation principle and technical effect are similar, so details will not be repeated here.

FIG. 6 is a schematic structural diagram of a communication device 400 provided in the present application. The device is applied to a terminal. As shown in FIG. 6 , the device includes: a first sending module 401 , a first receiving module 402 , a second sending module 403 , and a second receiving module 404 . in,

The first sending module 401 is configured to send an authentication request to a device management network element. Wherein, the authentication request is used to request authentication and authentication of the target service of the terminal, and the authentication request includes: an identifier of the terminal and an identifier of the target service.

The first receiving module 402 is configured to receive the list of candidate bootstrapping service function BSF network elements returned by the device management network element. Wherein, the list of candidate BSF network elements includes information of at least one candidate BSF network element; each of the candidate BSF network elements supports target service authentication for the terminal; the information of the candidate BSF network elements includes: The identifier of the candidate BSF network element.

The second sending module 403 is configured to send an authentication request to the target BSF network element according to the identifier of the target BSF network element. Wherein, the target BSF network element is any one in the candidate BSF network element list.

The second receiving module 404 is configured to receive the secret key returned by the target BSF network element after the terminal passes the authentication. Wherein, the secret key is used to encrypt the data of the target service transmitted between the terminal and the target service server.

Optionally, the information of the candidate BSF network element further includes: load information of the candidate BSF network element. In this implementation, the communication device 400 may further include a processing module 405, configured to, according to the load information of the candidate BSF network element, before sending the authentication request to the target BSF network element according to the identity of the target BSF network element. , to determine the target BSF network element.

Optionally, the second sending module 403 is further configured to send fault indication information to the device management network element after receiving the candidate BSF network element list returned by the device management network element. Wherein, the fault indication information is used to indicate that the terminal fails to establish a connection with the first BSF network element; the first BSF network element is any one in the candidate BSF network element list, and the fault indication information includes the An identifier of the first BSF network element.

The communication device 400 provided in this embodiment is used to implement the aforementioned embodiment of the communication method performed by the terminal, and its implementation principle and technical effect are similar, so details will not be repeated here.

FIG. 7 is a schematic structural diagram of an electronic device provided by the present application. The electronic device may be, for example, the above-mentioned device management network element or terminal. As shown in FIG. 7 , the electronic device 500 may include: a receiver 5011 , a transmitter 5012 , at least one processor 501 and a memory 502 .

Both the receiver 5011 and the transmitter 5012 are coupled to the processor 501 . The processor 501 controls the receiving action of the receiver 5011 , and controls the sending action of the transmitter 5012 .

The memory 502 is used to store programs. Specifically, the program may include program code, and the program code includes computer operation instructions.

The memory 502 may include a high-speed RAM memory, and may also include a non-volatile memory (non-volatile memory), such as at least one disk memory.

The processor 501 is configured to execute the computer-executed instructions stored in the memory 502, so as to implement the communication method described in the foregoing method embodiments. Wherein, the processor 501 may be a central processing unit (Central Processing Unit, referred to as CPU), or a specific integrated circuit (Application Specific Integrated Circuit, referred to as ASIC), or is configured to implement one or multiple integrated circuits.

Optionally, the electronic device 500 may further include a communication interface 503 . In a specific implementation, if the communication interface 503, the memory 502 and the processor 501 are implemented independently, the communication interface 503, the memory 502 and the processor 501 may be connected to each other through a bus to complete mutual communication. The bus may be an Industry Standard Architecture (Industry Standard Architecture, ISA for short) bus, a Peripheral Component Interconnect (PCI for short) bus, or an Extended Industry Standard Architecture (EISA for short) bus. The bus can be divided into address bus, data bus, control bus, etc., but it does not mean that there is only one bus or one type of bus.

Optionally, in terms of specific implementation, if the communication interface 503, the memory 502, and the processor 501 are integrated and implemented on one chip, then the communication interface 503, the memory 502, and the processor 501 may complete communication through an internal interface.

The present application also provides a computer-readable storage medium, which may include: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random AccessMemory) Various media that can store program codes, such as a magnetic disk or an optical disk, specifically, the computer-readable storage medium stores program instructions, and the program instructions are used in the methods in the above-mentioned embodiments.

The present application also provides a program product, which includes execution instructions, and the execution instructions are stored in a readable storage medium. At least one processor of the electronic device may read the execution instruction from the readable storage medium, and the at least one processor executes the execution instruction so that the electronic device implements the communication method provided by the foregoing various implementations.

Finally, it should be noted that: the above embodiments are only used to illustrate the technical solutions of the present application, and are not intended to limit it; although the application has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: It is still possible to modify the technical solutions described in the foregoing embodiments, or perform equivalent replacements for some or all of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the technical solutions of the various embodiments of the present application. scope.

Claims (19)

1. A communication method, characterized in that the method is applied to a device management network element, and the method comprises: Receive an authentication request from the terminal; the authentication request is used to request authentication and authentication of the target service of the terminal, and the authentication request includes: the identifier of the terminal and the identifier of the target service ; Authenticating whether the terminal has the right to use the target service according to the target service identifier and the terminal identifier; If the authentication result indicates that the terminal has the right to use the target service, then sending a list of candidate bootstrap service function BSF network elements to the terminal, the list of candidate BSF network elements includes information of at least one candidate BSF network element; each Each of the candidate BSF network elements supports the target service authentication of the terminal; the information of the candidate BSF network elements includes: the identification of the candidate BSF network elements; After sending the list of candidate BSF network elements to the terminal, it further includes: receiving fault indication information from the terminal; the fault indication information is used to indicate that the terminal fails to establish a connection with a first BSF network element; the first BSF network element is any one of the candidate BSF network element list, The fault indication information includes the identifier of the first BSF network element; determine whether the first BSF network element is faulty; if it is determined that the first BSF network element is faulty, send the second BSF network element to the terminal element information, and delete the identity of the first BSF network element from the BSF network element list; the second BSF network element is in the BSF network element list except the first BSF network element any one; The determining whether the first BSF network element has a fault includes: Judging whether the first BSF network element in the BSF network element list has a preset label, and the preset label is used to indicate whether the first BSF network element is faulty; if the first BSF network element has the the preset label, then determine that the first BSF network element has a fault; or, if the first BSF network element does not have the preset label, obtain the fault detection result of the first BSF network element, and according to The fault detection result determines whether the first BSF network element has a fault. 2. The method according to claim 1, wherein the sending the candidate bootstrap service function BSF network element list to the terminal comprises: Obtain, from the BSF network element list, the identifiers of a plurality of initial BSF network elements corresponding to the target service according to the identifier of the target service, and the load information of the plurality of initial BSF network elements; the BSF network element The list includes the mapping relationship between services and BSF network elements; determining candidate BSF network elements from the multiple initial BSF network elements according to the load information of the multiple initial BSF network elements; Generate the list of candidate BSF network elements according to the determined candidate BSF network elements; Sending the candidate BSF network element list to the terminal. 3. The method according to claim 2, wherein the loads of the candidate BSF network elements are all less than a first preset load threshold. 4. The method according to any one of claims 1-3, wherein the information of the candidate BSF network element further includes: load information of the candidate BSF network element. 5. The method according to any one of claims 1-3, characterized in that, according to the identifier of the target service and the identifier of the terminal, it is determined whether the terminal has the right to use the target service Certification, including: Sending an authentication request to the service support system, where the authentication request is used to request authentication of the target service of the terminal; the authentication request includes: the identifier of the terminal and the identifier of the target service; An authentication result returned by the service support system is received; the authentication result is used to indicate whether the terminal has the right to use the target service. 6. The method according to claim 1, wherein the obtaining the fault detection result of the first BSF network element comprises: determining a fault detection result of the first BSF network element according to a communication connection state with the first BSF network element; and / or, Obtain a fault detection result of the first BSF network element by the BSF management network element. 7. The method according to claim 1, characterized in that, after determining whether the first BSF network element has a fault according to the fault detection result, further comprising: If it is determined that there is no fault in the first BSF network element, adding the preset label to the first BSF network element in the BSF network element list; Detecting whether there is a fault in the first BSF network element within a preset period of time; If no fault is detected on the first BSF network element within the preset time period, then delete the preset label of the first BSF network element from the list of BSF network elements; Alternatively, if it is detected that the first BSF network element is faulty within the preset time period, the identifier of the first BSF network element is deleted from the BSF network element list. 8. The method according to any one of claims 1-3, characterized in that the method further comprises: The BSF network element list is updated according to the service and load information corresponding to each BSF network element in the network. 9. The method according to claim 8, wherein updating the BSF network element list according to the service and load information corresponding to each BSF network element in the network includes: If there is a newly added BSF network element in the network, then according to the service and load information corresponding to each BSF network element in the network, determine the service corresponding to the newly added BSF network element, and list the BSF network element Add the newly added BSF network element. 10. The method according to claim 9, wherein the determining the service corresponding to the newly added BSF network element comprises: For any service in all services corresponding to all BSF network elements in the BSF network element list, obtain the load of each BSF network element corresponding to the service for the service; Obtaining the average load of each BSF network element corresponding to the service for the service according to the load of each BSF network element corresponding to the service for the service; The service with the largest average load is used as the service corresponding to the newly added BSF network element. 11. The method according to claim 8, wherein updating the BSF network element list according to the service and load information corresponding to each BSF network element in the network comprises: For any BSF network element in the BSF network element list, if the load of the BSF network element is less than or equal to the second preset load threshold, the service with the largest average load is used as the second service corresponding to the BSF network element . 12. The method according to claim 8, wherein updating the BSF network element list according to the service and load information corresponding to each BSF network element in the network comprises: Delete the invalid BSF network element in the BSF network element list; the invalid BSF network element refers to the BSF network element that cannot establish a connection with the device management network element. 13. A communication method, characterized in that the method is applied to a terminal, and the method comprises: Send an authentication request to the device management network element; the authentication request is used to request authentication and authentication of the target service of the terminal, and the authentication request includes: the identity of the terminal and the target service logo; receiving the list of candidate bootstrapping service function BSF network elements returned by the device management network element, the list of candidate BSF network elements including information of at least one candidate BSF network element; each of the candidate BSF network elements supports the terminal The target service authentication; the information of the candidate BSF network element includes: the identification of the candidate BSF network element; Sending an authentication request to the target BSF network element according to the identifier of the target BSF network element, where the target BSF network element is any one of the candidate BSF network element list; receiving the secret key returned by the target BSF network element after the terminal is authenticated; the secret key is used to encrypt the data of the target service transmitted between the terminal and the target service server; After receiving the list of candidate BSF network elements returned by the device management network element, the method further includes: Sending fault indication information to the equipment management network element; wherein, the fault indication information is used to indicate that the terminal fails to establish a connection with the first BSF network element; the first BSF network element is the candidate BSF network element list In either one, the fault indication information includes the identifier of the first BSF network element, so that the device management network element determines whether the first BSF network element has a fault. 14. The method according to claim 13, wherein the information of the candidate BSF network element further comprises: load information of the candidate BSF network element; Before sending the authentication request to the target BSF network element according to the identity of the target BSF network element, it also includes: The target BSF network element is determined according to the load information of the candidate BSF network element. 15. A communication device, characterized in that the device is applied to a device management network element, and the device includes: A receiving module, configured to receive an authentication request from a terminal; the authentication request is used to request authentication and authentication of the target service of the terminal, and the authentication request includes: the identity of the terminal and the the identification of the target business; A processing module, configured to authenticate whether the terminal has the right to use the target service according to the identifier of the target service and the identifier of the terminal; A sending module, configured to send a list of candidate bootstrap service function BSF network elements to the terminal when the authentication result indicates that the terminal has the right to use the target service, the list of candidate BSF network elements includes at least one candidate BSF network element Element information; each of the candidate BSF network elements supports target service authentication for the terminal; the candidate BSF network element information includes: the candidate BSF network element identification; The receiving module is further configured to receive fault indication information from the terminal; the fault indication information is used to indicate that the terminal fails to establish a connection with the first BSF network element; the first BSF network element is the candidate Any one in the BSF network element list, the fault indication information includes the identification of the first BSF network element; determine whether the first BSF network element has a fault; if it is determined that the first BSF network element has a fault, send The terminal sends the information of the second BSF network element, and deletes the identifier of the first BSF network element from the BSF network element list; the second BSF network element is the BSF network element list except the Any one other than the first BSF network element; The processing module is specifically used to judge whether the first BSF network element in the BSF network element list has a preset label, and the preset label is used to indicate whether the first BSF network element is faulty; if the If the first BSF network element has the preset label, it is determined that the first BSF network element has a fault; or, if the first BSF network element does not have the preset label, then obtain the first BSF network element The fault detection result of the first BSF network element, and according to the fault detection result, determine whether there is a fault in the first BSF network element. 16. A communication device, characterized in that the device is applied to a terminal, and the device includes: The first sending module is configured to send an authentication request to a device management network element; the authentication request is used to request authentication and authentication of the target service of the terminal, and the authentication request includes: the terminal and the identity of the target business; The first receiving module is configured to receive the candidate bootstrap service function BSF network element list returned by the equipment management network element, the candidate BSF network element list includes information of at least one candidate BSF network element; each of the candidate BSF network elements Each element supports the target service authentication of the terminal; the information of the candidate BSF network element includes: the identity of the candidate BSF network element; The second sending module is configured to send an authentication request to the target BSF network element according to the identifier of the target BSF network element, and the target BSF network element is any one of the candidate BSF network element list; The second receiving module is configured to receive the secret key returned by the target BSF network element after the terminal is authenticated; the secret key is used to encrypt the data of the target service transmitted between the terminal and the target service server; The second sending module is further configured to send fault indication information to the equipment management network element after receiving the candidate BSF network element list returned by the equipment management network element; wherein, the fault indication information is used for Instructing the terminal to fail to establish a connection with the first BSF network element; the first BSF network element is any one of the candidate BSF network element list, and the failure indication information includes the identifier of the first BSF network element, to enabling the device management network element to determine whether the first BSF network element is faulty. 17. A communication system, comprising: a device management network element capable of performing the method according to any one of claims 1-12, a terminal capable of performing the method according to any one of claims 13-14, And, at least two BSF network elements. 18. An electronic device, comprising: at least one processor, memory, receiver, and transmitter; Both the receiver and the transmitter are coupled to the processor; the processor controls the receiving action of the receiver, and the processor controls the sending action of the transmitter; the memory stores computer-executable instructions; The at least one processor executes the computer-implemented instructions stored in the memory, so that the electronic device performs the method of any one of claims 1-14. 19. A computer-readable storage medium, wherein computer-executable instructions are stored on the computer-readable storage medium, and when the computer-executable instructions are executed by a processor, the computer-readable storage medium according to any one of claims 1-14 is implemented. described method.

Images