NETWORK SLICE ALLOCATION METHOD, DEVICE, AND SYSTEM

• US 20200137576A1
• Filed: 12/30/2019
• Published: 04/30/2020
• Est. Priority Date: 06/29/2017
• Status: Active Grant

• Current Assignee: Huawei International Pte., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei International Pte., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: HU, Hao, LEI, Zhongding, LI, Lichun
• Granted Patent: US 10,880,747 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 63/0414 during transmission, i.e. party's identity is protected against eavesdropping, e.g. by using temporary identifiers, but is known to the other party or parties involved in the communication
• CPC Class Codes: H04L 9/30 Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 12/75 Temporary identity
• CPC Class Codes: H04W 48/18 Selecting a network or a communication service
• CPC Class Codes: H04W 72/04 Wireless resource allocation
• CPC Class Codes: H04W 8/065 involving selection of the user mobility server
• CPC Class Codes: H04W 8/24 Transfer of terminal data

Abstract

This application provides a network slice allocation method, device, and system, including a terminal device, a first core network device, a second core network device, and a third core network device. The terminal device encrypts NSSAI and an ID of the terminal device to obtain encrypted information, and sends a slice access request message to the first core network device. The first core network device sends the encrypted information to the second core network device. The second core network device decrypts the encrypted information to obtain the NSSAI and the ID of the terminal device, generates an authentication vector, and sends the NSSAI and the authentication vector to the first core network device.

Claims

1. A network slice allocation system, comprising:

an access network device; and

a second core network device,

wherein;

the access network device is further configured to receive a slice access request message from a terminal device, wherein the slice access request message comprises a second pseudo identity;

determine the second core network device corresponding to the second pseudo identity, and send the slice access request message to the second core network device; and

the second core network device is configured to send a security mode command to the terminal device, receive a security mode complete command sent by the terminal device, receive a second network slice selection assistance information (NSSAI) sent by the terminal device based on the security mode command, and allocate a network slice to the terminal device based on the slice access request message and the second NSSAI.

2. The system according to claim 1, wherein when the terminal device is in a visited network, at least one piece of first NSSAI comprises at least one piece of NSSAI in the visited network, and the second NSSAI comprises NSSAI in a home network of the terminal device;

the terminal device is configured to obtain at least one second mapping relationship, wherein each second mapping relationship comprises a correspondence between one piece of first NSSAI and one piece of third NSSAI, and the third NSSAI comprises NSSAI in the home network of the terminal device; and

the terminal device is configured to determine fourth NSSAI based on the second NSSAI and the at least one second mapping relationship, and determine the second pseudo identity based on the fourth NSSAI and the at least one first mapping relationship, wherein the fourth NSSAI comprises one of the at least one piece of first NSSAI.

3. The system according to claim 1, wherein a priority of a first core network device is higher than a first preset threshold or a priority of each piece of first NSSAI is higher than a second preset threshold.

4. The system according to claim 1, wherein the access network device is configured to broadcast at least one first mapping relationship including a mapping relationship between a first pseudo identity and at least one piece of first network slice selection assistance information (NSSAI), and the first pseudo identity comprises a pseudo identity of a first core network device.

5. The system according to claim 4, wherein the at least one first mapping relationship is carried in a system information block SIB.

6. The system according to claim 5, wherein the terminal device is configured to determine the second pseudo identity based on second NSSAI and the at least one first mapping relationship, and send a slice access request message to the access network device.

7. A network slice allocation method, comprising:

receiving, by an access network device, a slice access request message sent by a terminal device, wherein the slice access request message comprises a second pseudo identity determined by the terminal device based on second network slice selection assistance information (NSSAI) and the at least one first mapping relationship;

determining, by the access network device, a second core network device corresponding to the second pseudo identity; and

sending, by the access network device, the slice access request message to the second core network device.

8. The network slice allocation method according to claim 7, further comprising:

broadcasting, by the access network device, at least one first mapping relationship, wherein each first mapping relationship comprises a mapping relationship between a first pseudo identity of a first core network device and at least one piece of first network slice selection assistance information (NSSAI).

9. The network slice allocation method according to claim 8, further comprising:

wherein the at least one first mapping relationship is carried in a system information block SIB.

10. A network slice allocation method, comprising:

receiving, by a terminal device, at least one first mapping relationship, wherein each first mapping relationship is a mapping relationship between a first pseudo identity of a first core network device and at least one piece of first network slice selection assistance information (NSSAI);

determining, by the terminal device, a second pseudo identity of a second core network device based on second NSSAI and the at least one first mapping relationship;

sending, by the terminal device, a slice access request message to an access network device, wherein the slice access request message comprises the second pseudo identity;

receiving, by the terminal device, a security mode command sent by the second core network device;

sending, by the terminal device, a security mode complete command to the second core network device; and

sending, by the terminal device, the second NSSAI to the second core network device based on the security mode command.

11. The method according to claim 10, wherein when the terminal device is in a visited network, the at least one piece of first NSSAI comprises at least one piece of NSSAI in the visited network;

and the second NSSAI comprises NSSAI in a home network of the terminal device, and before the determining the second pseudo identity based on second NSSAI and the at least one first mapping relationship, the method further comprises;

obtaining, by the terminal device, at least one second mapping relationship, wherein each second mapping relationship is a correspondence between one piece of first NSSAI and one piece of third NSSAI, and the third NSSAI is NSSAI in the home network of the terminal device;

wherein the determining the second pseudo identity based on second NSSAI and the at least one first mapping relationship comprises;

determining, by the terminal device, fourth NSSAI based on the second NSSAI and the at least one second mapping relationship, wherein the fourth NSSAI comprises one of the at least one piece of first NSSAI; and

determining, by the terminal device, the second pseudo identity based on the fourth NSSAI and the at least one first mapping relationship.