WO2025010570A1 - Communication method and apparatus, and communication device, storage medium and communication system - Google Patents

Abstract

Provided in the present disclosure are a communication method and apparatus, and a communication device, a storage medium and a communication system. The method comprises: a first network function entity sending a first parameter set to a second network function entity, wherein the first parameter set is applied to an authentication-and-key-management-for-applications (AKMA) service, and the first parameter set at least comprises first information. The method of the present disclosure implements an AKMA service.

Description

Communication method, device, communication equipment, storage medium and communication system Technical Field

The present disclosure relates to the field of communication technology, and in particular to a communication method, apparatus, communication equipment, storage medium and communication system.

Background Art

In the communication system, the Authentication and Key Management method for Applications (AKMA) service has been used to protect the communication between the terminal and the application function (AF), and the terminal and the AF can be authenticated by the application function key (K _AF ). When there is no terminal update in the current AKMA service, the technology of enabling the relevant network function entity to obtain the updated K _AF .

Summary of the invention

The present disclosure provides a communication method, an apparatus, a communication device, a storage medium and a communication system.

According to a first aspect of an embodiment of the present disclosure, a communication method is proposed. The method is performed by a first network function entity, and the method includes:

A first parameter set is sent to a second network function entity, where the first parameter set is used for application authentication and key management AKMA service. The first parameter set includes at least first information, so that the second network function entity obtains a routing identifier (Router Indic, RID) to discover the third network function entity based on the RID, thereby realizing an application authentication and key management AKMA service.

According to a second aspect of an embodiment of the present disclosure, a communication method is proposed. The method is performed by a second network function entity, and the method includes:

A first parameter set sent by a first network function entity is received, wherein the first parameter set is used for application authentication and key management AKMA service and the first parameter set includes at least first information, so that the second network function entity obtains the first parameter set to discover the third network function entity.

According to a third aspect of an embodiment of the present disclosure, a communication method is proposed. The method is performed by a third network function entity, and the method includes:

Receive at least one of the updated fifth information, the fourth information and the first key sent by the second network function entity, so that when the first information is updated, the AF can identify the second network function entity and the third network function entity and obtain K _AF .

According to a fourth aspect of an embodiment of the present disclosure, a first network function entity is provided, the first network function entity including a transceiver module, configured to:

A first parameter set is sent to the second network function entity, where the first parameter set is used for application authentication and key management AKMA service, and the first parameter set includes at least first information.

According to a fifth aspect of an embodiment of the present disclosure, a second network function entity is provided, the second network function entity including a transceiver module, configured to:

A first parameter set sent by a first network function entity is received, wherein the first parameter set is used for application authentication and key management AKMA service, and the first parameter set includes at least first information.

According to a sixth aspect of an embodiment of the present disclosure, a third network function entity is provided, where the third network function entity includes a transceiver module, configured to:

Used to receive at least one of the updated fifth information, the fourth information and the first key sent by the second network function entity.

According to the seventh aspect of an embodiment of the present disclosure, a communication device is proposed, comprising: a transceiver; a memory; a processor, which is connected to the transceiver and the memory respectively, and is configured to control the wireless signal reception and transmission of the transceiver by executing computer executable instructions on the memory, and can implement any one of the methods described in the first to third aspects above.

According to an eighth aspect of an embodiment of the present disclosure, a computer storage medium is proposed, wherein the computer storage medium stores computer executable instructions; after the computer executable instructions are executed by a processor, the method described in any one of the first to third aspects above can be implemented.

According to a ninth aspect of an embodiment of the present disclosure, a communication system is provided, comprising: a first network function entity, a second network function entity, and a third network function entity, wherein the first network function entity is used to execute the method according to the first aspect, and the second network function entity is used to execute The method described in the second aspect is performed, and the third network function entity is used to perform the method described in the third aspect.

BRIEF DESCRIPTION OF THE DRAWINGS

The above and/or additional aspects and advantages of the present disclosure will become apparent and easily understood from the following description of the embodiments in conjunction with the accompanying drawings, in which:

FIG1 is a schematic diagram of the architecture of a communication system provided in an embodiment of the present disclosure;

FIG2 is a schematic diagram of some communication methods provided by embodiments of the present disclosure;

3a-3b are flowchart diagrams of some communication methods provided by embodiments of the present disclosure;

4a-4d are flowchart diagrams of other communication methods provided by embodiments of the present disclosure;

5a-5b are flowchart diagrams of some further communication methods provided by embodiments of the present disclosure;

FIG6 is a schematic diagram of interactions of some communication methods provided by embodiments of the present disclosure;

FIG7 is an example diagram of some interaction methods provided by embodiments of the present disclosure;

FIG8a is a schematic diagram of the structure of a communication device provided by an embodiment of the present disclosure;

FIG8b is a schematic diagram of the structure of a communication device provided by an embodiment of the present disclosure;

FIG8c is a schematic diagram of the structure of a communication device provided by an embodiment of the present disclosure;

FIG9a is a schematic diagram of the structure of a communication device provided by an embodiment of the present disclosure;

FIG. 9 b is a schematic diagram of the structure of a chip provided in an embodiment of the present disclosure.

DETAILED DESCRIPTION

The method disclosed in the present invention can be used to solve the technical problem of "implementing an AKMA service when the RID on the terminal side is updated, so that the AF can identify the AAnF and obtain the K _AF ." The embodiments of the present invention provide a communication method, an apparatus, a communication device, a storage medium and a communication system.

In a first aspect, an embodiment of the present disclosure provides a communication method, which is performed by a first network function entity, and the method includes:

A first parameter set is sent to the second network function entity, where the first parameter set is used for application authentication and key management AKMA service, and the first parameter set includes at least first information.

In the above embodiment, the first network function entity may send a first parameter set to the second network function entity to implement an AKMA service.

In combination with some embodiments of the first aspect, in some embodiments, the first network function entity is an entity corresponding to the unified data management function UDM, and the second network function entity is an entity corresponding to the AKMA anchor function AAnF.

In combination with some embodiments of the first aspect, in some embodiments, sending a first parameter set to a second network function entity includes: sending the first parameter set to the second network function entity under a first condition, wherein the first condition is that the terminal receives first information configured by the first network function entity.

In combination with some embodiments of the first aspect, in some embodiments, the method further includes: determining whether the first condition is met.

In combination with some embodiments of the first aspect, in some embodiments, determining whether the first condition is met includes: determining whether second information sent by the terminal is consistent with third information stored by the first network function entity; if the second information is consistent with the third information, it is determined that the first condition is met.

In the above embodiment, the first network element determines whether the second information sent by the terminal is consistent with the third information stored in the first network element, thereby determining whether the first condition is met, and a determination method for meeting the first condition is proposed to determine whether the first network element sends the first data set, thereby avoiding waste of resources.

In combination with some embodiments of the first aspect, in some embodiments, the first parameter set also includes fourth information.

In combination with some embodiments of the first aspect, in some embodiments, the first network function entity discovers the second network function entity based on the sixth information, and the sixth information is the unupdated first information.

In the above example, the first network function entity discovers the second network function entity based on the sixth information to send information to the second network function entity.

In a second aspect, an embodiment of the present disclosure provides a communication method, which is performed by a second network function entity, and the method includes:

A first parameter set sent by a first network function entity is received, wherein the first parameter set is used for application authentication and key management AKMA service, and the first parameter set includes at least first information.

In the above embodiment, the second network function entity receives the first parameter set sent by the first network function entity, so that the second network function entity obtains the first parameter set and discovers the third network function entity.

In combination with some embodiments of the second aspect, in some embodiments, the first parameter set also includes fourth information.

In conjunction with some embodiments of the second aspect, in some embodiments, the method further includes:

Determine that the second network function entity stores fourth information and/or fifth information, and update the fifth information with the first information.

In the above embodiment, the second network function entity updates the fifth information by determining that the fourth information and/or the fifth information is stored, thereby updating the key identifier.

In combination with some embodiments of the second aspect, in some embodiments, updating the fifth information includes: determining the fifth information based on the fourth information included in the first parameter set, the fifth information including the sixth information; replacing the sixth information in the fifth information with the first information to generate updated fifth information.

In the above embodiment, a method for the second network function entity to update the fifth information is proposed.

In combination with some embodiments of the second aspect, in some embodiments, it is determined whether to update the fifth information.

In combination with some embodiments of the second aspect, in some embodiments, determining whether to update the fifth information includes: determining that the first information is inconsistent with the sixth information, and determining to update the fifth information.

In combination with some embodiments of the second aspect, in some embodiments, the method further includes: discovering a third network function entity based on the first information.

In the above embodiment, the application scope of the AKMA service is expanded by discovering the third network function entity.

In combination with some embodiments of the second aspect, in some embodiments, the method further includes: sending at least one of the updated fifth information, the fourth information, and the first key to the third network function entity,

The fifth information is used to identify the first key.

In the above embodiment, data update of the third network function entity is achieved by sending updated fifth information, fourth information and at least one of the first key to the third network function entity.

In combination with some embodiments of the second aspect, in some embodiments, feedback information sent by a third network function entity is received, wherein the feedback information is used to identify that the third network function entity has received at least one of the updated fifth information, fourth information and first key sent by the second network function entity.

In the above embodiment, feedback information is received to determine that the third network function entity has received relevant information, thereby improving the stability of the AKMA service.

In a third aspect, an embodiment of the present disclosure proposes a communication method, which is executed by a third network function entity, and the method includes: receiving updated fifth information, fourth information and at least one of the first key sent by the second network function entity.

In the above embodiment, the third network function entity receives at least one of the updated fifth information, fourth information and first key sent by the second network function entity, and implements an AKMA service, so that the AF can discover the third network function entity and obtain K _AF when the terminal updates the first information.

In combination with some embodiments of the third aspect, in some embodiments, the updated fifth information is generated based on the first information, and the fifth information is used to identify the first key.

In combination with some embodiments of the third aspect, in some embodiments, the third network function entity is discovered based on the first information.

In a fourth aspect, an embodiment of the present disclosure proposes a first network function entity, which includes a transceiver module for sending a first parameter set to a second network function entity, the first parameter set being used for application authentication and key management AKMA service, and the first parameter set including at least first information.

In a fifth aspect, an embodiment of the present disclosure proposes a second network function entity, which includes a transceiver module for receiving a first parameter set sent by a first network function entity, wherein the first parameter set is used for application authentication and key management AKMA service, and the first parameter set includes at least first information.

In a sixth aspect, an embodiment of the present disclosure proposes a third network function entity, which includes a transceiver module for receiving at least one of the updated fifth information, fourth information and first key sent by the second network function entity.

In the seventh aspect, an embodiment of the present disclosure proposes a communication device, which includes: one or more processors; one or more memories for storing instructions; wherein the processor is used to call the instructions so that the communication device executes the method described in the optional implementation modes of the first, second and third aspects.

In an eighth aspect, the present disclosure provides a computer program, which, when executed on a computer, enables the computer to execute the operations in the first aspect, Optional implementations of the second and third aspects.

In a ninth aspect, an embodiment of the present disclosure proposes a communication system, and the above-mentioned communication system includes: a first network function entity, a second network function entity, and a third network function entity, wherein the first network function entity is used to execute the method described in the first aspect, the second network function entity is used to execute the method described in the second aspect, and the third network function entity is used to execute the method described in the third aspect.

In combination with some embodiments of the ninth aspect, in some embodiments, the communication system also includes a fourth network function entity.

It is understandable that the above communication method, communication device, communication equipment, communication system, storage medium, program product, and computer program are all used to execute the method proposed in the embodiment of the present disclosure. Therefore, the beneficial effects that can be achieved can refer to the beneficial effects in the corresponding method, which will not be repeated here.

The embodiments of the present disclosure provide communication methods, devices, communication equipment, storage media and communication systems. In some embodiments, the terms communication method, information processing method, communication method, etc. can be replaced with each other, the terms information transmission device, information processing device, communication device, etc. can be replaced with each other, and the terms information processing system, communication system, etc. can be replaced with each other.

The embodiments of the present disclosure are not exhaustive, but are merely illustrative of some embodiments, and are not intended to be a specific limitation on the scope of protection of the present disclosure. In the absence of contradiction, each step in an embodiment can be implemented as an independent embodiment, and the steps can be arbitrarily combined. For example, a solution after removing some steps in an embodiment can also be implemented as an independent embodiment, and the order of the steps in an embodiment can be arbitrarily exchanged, and in addition, they can be arbitrarily combined in an embodiment; in addition, the embodiments can be arbitrarily combined, for example, some or all steps of different embodiments can be arbitrarily combined, and an embodiment can be arbitrarily combined with other embodiments.

In each embodiment of the present disclosure, unless otherwise specified or there is a logical conflict, the terms and/or descriptions between the embodiments are consistent and can be referenced to each other, and the technical features in different embodiments can be combined to form a new embodiment based on their internal logical relationships.

The terms used in the embodiments of the present disclosure are only for the purpose of describing specific embodiments and are not intended to limit the present disclosure.

In the embodiments of the present disclosure, unless otherwise specified, elements expressed in the singular form, such as "a", "an", "the", "above", "said", "aforementioned", "this", etc., may mean "one and only one", or "one or more", "at least one", etc. For example, when using articles such as "a", "an", "the" in English in translation, the noun after the article may be understood as a singular expression or a plural expression.

In the embodiments of the present disclosure, “plurality” refers to two or more.

In some embodiments, the terms "at least one of", "at least one of", "at least one of", "one or more", "a plurality of", "multiple", etc. can be used interchangeably.

In the embodiments of the present disclosure, descriptions such as “at least one of A, B, C…”, “A and/or B and/or C…”, etc. include the case where any one of A, B, C… exists alone, and also include any combination of any multiple of A, B, C…, and each case may exist alone; for example, “at least one of A, B, C” includes the case where A exists alone, B exists alone, C exists alone, the combination of A and B, the combination of A and C, the combination of B and C, and the combination of A, B, and C; for example, A and/or B includes the case where A exists alone, B exists alone, and the combination of A and B.

In some embodiments, the description methods such as "in one case A, in another case B", "in response to one case A, in response to another case B", etc. may include the following technical solutions according to the situation: A is executed independently of B, that is, in some embodiments A; B is executed independently of A, that is, in some embodiments B; A and B are selectively executed, that is, selected from A and B in some embodiments; A and B are both executed, that is, A and B in some embodiments. When there are more branches such as A, B, C, etc., it is similar to the above.

The prefixes such as "first" and "second" in the embodiments of the present disclosure are only used to distinguish different description objects, and do not constitute restrictions on the position, order, priority, quantity or content of the description objects. The statement of the description object refers to the description in the context of the claims or embodiments, and should not constitute unnecessary restrictions due to the use of prefixes. For example, if the description object is a "field", the ordinal number before the "field" in the "first field" and the "second field" does not limit the position or order between the "fields", and the "first" and "second" do not limit whether the "fields" they modify are in the same message, nor do they limit the order of the "first field" and the "second field". For another example, if the description object is a "level", the ordinal number before the "level" in the "first level" and the "second level" does not limit the priority between the "levels". For another example, the number of description objects is not limited by the ordinal number, and can be one or more. Taking the "first device" as an example, the number of "devices" can be one or more. In addition, the objects modified by different prefixes may be the same or different. For example, if the description object is "device", then the "first device" and the "second device" may be the same device or different devices, and their types may be the same or different. For another example, if the description object is "information", then the "first information" and the "second information" may be the same information or different information, and their contents may be the same or different.

In some embodiments, "including A", "comprising A", "used to indicate A", "carrying A" can be interpreted as directly carrying A. Interpreted as an indirect indication of A.

In some embodiments, terms such as "in response to ...", "in response to determining ...", "in the case of ...", "at the time of ...", "when ...", "if ...", "if ...", etc. can be used interchangeably.

In some embodiments, terms such as "greater than", "greater than or equal to", "not less than", "more than", "more than or equal to", "not less than", "higher than", "higher than or equal to", "not lower than", and "above" can be replaced with each other, and terms such as "less than", "less than or equal to", "not greater than", "less than", "less than or equal to", "no more than", "lower than", "lower than or equal to", "not higher than", and "below" can be replaced with each other.

In some embodiments, devices, etc. can be interpreted as physical or virtual, and their names are not limited to the names recorded in the embodiments. Terms such as "device", "equipment", "device", "circuit", "network function entity", "node", "function", "unit", "section", "system", "network", "chip", "chip system", "entity", and "subject" can be used interchangeably.

In some embodiments, the terms "terminal", "terminal device", "user equipment (UE)", "user terminal" "mobile station (MS)", "mobile terminal (MT)", subscriber station, mobile unit, subscriber unit, wireless unit, remote unit, mobile device, wireless device, wireless communication device, remote device, mobile subscriber station, access terminal, mobile terminal, wireless terminal, remote terminal, handset, user agent, mobile client, client and the like can be used interchangeably.

In some embodiments, the access network device, the core network device, or the network device can be replaced by a terminal. For example, the various embodiments of the present disclosure can also be applied to a structure in which the access network device, the core network device, or the network device and the communication between the terminals is replaced by the communication between multiple terminals (for example, it can also be referred to as device-to-device (D2D), vehicle-to-everything (V2X), etc.). In this case, it can also be set as a structure in which the terminal has all or part of the functions of the access network device. In addition, the language such as "uplink" and "downlink" can also be replaced by the language corresponding to the communication between the terminals (for example, "side"). For example, the uplink channel, the downlink channel, etc. can be replaced by the side channel, and the uplink, the downlink, etc. can be replaced by the side link.

In some embodiments, the terminal may be replaced by an access network device, a core network device, or a network device. In this case, the access network device, the core network device, or the network device may also be configured to have a structure that has all or part of the functions of the terminal.

In some embodiments, "network" may be interpreted as devices included in the network (eg, access network equipment, core network equipment, etc.).

In some embodiments, acquisition of data, information, etc. may comply with the laws and regulations of the country where the data is obtained.

In some embodiments, data, information, etc. may be obtained with the user's consent.

FIG1 is a schematic diagram of the architecture of a communication system according to an embodiment of the present disclosure. As shown in FIG1 , a communication system 100 may include at least one of a terminal 101 and a core network device 102.

In some embodiments, the terminal 101 includes, for example, a mobile phone, a wearable device, an Internet of Things device, a car with communication function, a smart car, a tablet computer (Pad), a computer with wireless transceiver function, a virtual reality (VR) terminal device, an augmented reality (AR) terminal device, a wireless terminal device in industrial control, a wireless terminal device in self-driving, a wireless terminal device in remote medical surgery, a wireless terminal device in a smart grid, a wireless terminal device in transportation safety, a wireless terminal device in a smart city, and at least one of a wireless terminal device in a smart home, but is not limited to these.

In some embodiments, the core network device 102 may be a device including one or more network function entities, or may be a plurality of devices or device groups, each including all or part of one or more network function entities. The network function entity may be virtual or physical. The core network may include, for example, at least one of an Evolved Packet Core (EPC), a 5G Core Network (5GCN), and a Next Generation Core (NGC).

In some embodiments, the one or more network function entities may include, for example, an application function (AF), an authentication and key management for applications anchor function (AAnF), an access and mobility management function (AMF), a user plane function (UPF), a session management function (SMF), a mobility management entity (M capacity Management Entity, MME), unified data management function (Unified Data Management, UDM), etc.

In some embodiments, the above-mentioned PCF, AF, NAF, AAnF, BSF, AMF, UPF, SMF, MME, and UDM are used for "function limitation", and the names are not limited thereto.

In some embodiments, the above-mentioned PCF, AF, NAF, AAnF, BSF, AMF, UPF, SMF, MME, and UDM may be independent of the core network equipment.

In some embodiments, the above-mentioned PCF, AF, NAF, AAnF, BSF, AMF, UPF, SMF, MME, and UDM may be part of the core network device 102.

It can be understood that the communication system described in the embodiment of the present disclosure is for the purpose of more clearly illustrating the technical solution of the embodiment of the present disclosure, and does not constitute a limitation on the technical solution proposed in the embodiment of the present disclosure. A person of ordinary skill in the art can know that with the evolution of the system architecture and the emergence of new business scenarios, the technical solution proposed in the embodiment of the present disclosure is also applicable to similar technical problems.

The following embodiments of the present disclosure may be applied to the communication system 100 shown in FIG1 , or part of the subject, but are not limited thereto. The subjects shown in FIG1 are examples, and the communication system may include all or part of the subjects in FIG1 , or may include other subjects other than FIG1 , and the number and form of the subjects are arbitrary, and the connection relationship between the subjects is an example, and the subjects may be connected or disconnected, and the connection may be in any manner, which may be a direct connection or an indirect connection, and may be a wired connection or a wireless connection.

FIG2 is an interactive schematic diagram of a communication method according to an embodiment of the present disclosure. As shown in FIG2 , the present disclosure embodiment relates to a communication method, which is used in a communication system 100, and the method includes:

Step 2101: The first network function entity 101 determines whether a first condition is met.

In some embodiments, the first network function entity 101 determines whether a first condition is satisfied to determine whether the terminal receives the first information.

In some embodiments, the first condition is that the terminal receives first information configured by the first network function entity.

In some embodiments, determining whether the first condition is met includes: determining whether second information sent by the terminal is consistent with third information stored by the first network function entity; if the second information is consistent with the third information, it is determined that the first condition is met.

In some embodiments, the first information may be indication information configured by the first network function entity for the terminal, and is used to identify the first network function entity, the second network function entity, and the third network function entity.

In some embodiments, the first network function entity may be a network function entity corresponding to UDM, the second network function entity may be AAnF ₁ , and the third network function entity may be AAnF ₂ , where AAnF1 and AAnF2 are used to represent two different network function entities (Network function instance) related to AAnF.

In some embodiments, the name of the first information is not limited, and it may be, for example, “routing indication information”, “indication information”, etc.

In some embodiments, the first information includes at least: a routing indicator (Routing Indicator, RID).

In some embodiments, the RID can be a random character consisting of 1 to 4 decimal digits pre-configured in the Universal Subscriber Identity Module (USIM).

In some embodiments, the first information can be used together with a home network identifier (Home Network Identifier) to route network signaling containing a subscription concealed identifier (SUCI) to a first network function entity, a second network function entity, or a third network function entity that can provide services to the terminal.

In some embodiments, the first network function entity may configure the first information for the terminal so that the terminal uses the configured first information to perform application authentication and key management AKMA service.

In some embodiments, the second information is used by the first network function entity to determine whether the terminal has received the configured first information.

In some embodiments, the first network function entity may receive the second information sent by the UE, but is not limited thereto. The present disclosure does not limit the manner in which the first network function entity obtains the second information.

In some embodiments, the name of the second information is not limited, and it can be, for example, "terminal receiving information", "terminal updating information", etc.

In some embodiments, the second information includes at least UPU-MAC-I _UE , where UPU-MAC-I _UE can be a hash value calculated by the terminal through an authentication server function key (Authentication Server Function Key, K _AUSF ), used to indicate that the terminal has received the information.

In some embodiments, the third information is used by the first network function entity to determine whether the terminal has received the configured first information.

In some embodiments, the first network functional entity is a network functional entity corresponding to a unified data management function UDM.

In some embodiments, the third information stored by the first network function entity may be sent by the second network function entity, but is not limited thereto. The present disclosure does not limit the method for acquiring the third information stored by the first network function entity.

In some embodiments, the name of the third information is not limited, and it may be, for example, "expected terminal reception information", "expected terminal update information", etc.

In some embodiments, the third information includes at least UPU-XMAC-I _UE , where UPU-XMAC-I _UE may be a hash value calculated by the second network function entity through K _AUSF , which is used to estimate whether the terminal has received the information.

Optionally, in some embodiments, the first network function entity receives second information sent by the terminal, and compares the received second information with third information stored by the first network function entity. If the second information is consistent with the third information, the first network function entity determines that the first condition is met.

For example, in some embodiments, the first network function entity is a network function entity corresponding to the UDM. The UDM may compare the received UPU-MAC-I _UE with the UPU-XMAC-I _UE temporarily stored by the UDM. If the received UPU-MAC-I _UE is the same as the stored UPU-XMAC-I _UE , the UDM may confirm that the UE has received the updated RID.

Step 2102: The first network function entity 101 sends a first parameter set to the second network function entity 102 under a first condition.

In some embodiments, the second network function entity 102 may receive the first parameter set sent by the first network function entity 101 under the first condition.

In some embodiments, the first network function entity is a network function entity corresponding to the unified data management function UDM, and the second network function entity is a network function entity corresponding to the AKMA anchor function AAnF, specifically AAnF ₁ .

In some embodiments, the first parameter set is used for Application Authentication and Key Management AKMA services.

In some embodiments, the name of the first parameter set is not limited, and it may be, for example, a "key set", "authentication parameter set", etc.

In some embodiments, the first parameter set includes at least first information.

In some embodiments, the first information in the first parameter set may be the unupdated first information or the updated first information, which is not limited by the present disclosure. In some embodiments, the first information in the first parameter set may be the new RID sent by the UDM. It should be understood that the "new RID" is relative to the "original RID" and does not constitute a limitation on the first information.

In some embodiments, the first parameter set may further include fourth information.

In some embodiments, the fourth information may be used to identify information related to the subscriber. In some embodiments, the fourth information may be used to identify the terminal. For example, when the subscriber and the terminal have a one-to-one correspondence, the fourth information may be used to identify the terminal. When the subscriber and the terminal have a many-to-one relationship, for example, the subscriber changes the mobile phone or communication card, the fourth information may be used to identify the subscriber.

In some embodiments, the name of the fourth information is not limited, and it may be, for example, "subscriber identification information", "terminal identification information", "identification information", etc.

In some embodiments, the fourth information includes at least a permanent subscription identifier (Subscription Permanent Identifier, SUPI).

In some embodiments, the first network function entity discovers the second network function entity based on the sixth information. The sixth information may be an unupdated RID, that is, an original RID. In other words, the first network function entity may discover the second network function entity based on the original RID.

In some embodiments, one second network function entity may correspond to one first information or may correspond to multiple first information. The present disclosure does not limit the correspondence between the second network function entity and the first information.

Specifically, in some embodiments, the terminal receives the first information configured by the first network function entity, and the first network function entity may send the first parameter set. In other words, if the second information sent by the terminal received by the first network function entity is consistent with the third information stored by the first network function entity, the first network function entity may send the first parameter set to the second network function entity.

For example, in some embodiments, the first network function entity is a network function entity corresponding to UDM, and the second network function entity is a network function entity corresponding to AAnF. If the UPU-MAC-I _UE received by UDM is the same as the stored UPU-XMAC-I _UE , then UDM confirms that the UE has received the configured RID. At this time, UDM can send a first parameter set to AAnF, and the first parameter set includes at least the configured RID and SUPI.

Step 2103: The second network function entity 102 determines whether to update the fifth information.

In some embodiments, when the second network function entity 102 determines that the first information is inconsistent with the sixth information, it determines to update the fifth information. When it is determined that the first information is consistent with the sixth information, it determines that there is no need to update the fifth information.

In some embodiments, the sixth information is included in the fifth information.

In some embodiments, the second network function entity 102 may determine that the second network function entity stores the fourth information and/or the fifth information.

In other words, in some embodiments, the second network function entity may determine whether the second network function entity stores the unupdated fifth information generated using the unupdated first information. If the second network function entity stores the unupdated fifth information generated using the unupdated first information, the second network function entity may use the unupdated first information in the unupdated fifth information of the updated first information to generate the updated fifth information. Fifth information; if the second network function entity does not store the unupdated fifth information generated using the unupdated first information, the second network function entity stops the service.

In some embodiments, the second network function entity stores one or more fifth information, which is not limited by the present disclosure.

In some embodiments, the name of the fifth information is not limited, and it may be, for example, "AKAM key identification information", "key representation information", etc.

In some embodiments, the fifth information at least includes an AKMA key identification (A-KID), wherein the A-KID includes the RID.

In some embodiments, the sixth information and the first information may both be RIDs, wherein the first information may be an updated RID, and the sixth information may be an unupdated RID, that is, the original RID, or in other words, the RID stored locally by the second network function entity. The similarities between the sixth information and the first information may refer to the relevant description of the first information, which will not be repeated here.

In other words, in some embodiments, the first information is an updated RID, ie, the RID currently sent by the UDM, and the sixth information is a non-updated RID, ie, the RID previously sent by the UDM.

In some embodiments, the first network function entity may discover the second network function entity using the sixth information, that is, the first network function entity may discover the second network function entity based on the original RID.

For example, in some embodiments, the second network function entity is a network function entity corresponding to AAnF. When the terminal updates the RID in the first information from 1000 to 1001, AAnF stores the A-KID generated by RID1000 in the first information that has not been updated, then it can be determined that AAnF updates the A-KID generated using RID1000 that has not been updated.

Step 2104: The second network function entity 102 determines that the second network function entity stores the fourth information and/or the fifth information.

In some embodiments, the second network function entity 102 may determine whether the second network function entity stores the fourth information and/or the fifth information to determine whether to perform the service.

In some embodiments, if the second network function entity determines that the second network function entity stores the fourth information and/or the fifth information, the second network function entity continues the service, determines the fifth information and updates the fifth information. In other words, if the second network function entity determines that the second network function entity does not store the fourth information and/or the fifth information, the second network function entity may generate new fifth information based on the first information.

In some embodiments, the fifth information stored by the second network function may be generated according to the sixth information.

In some embodiments, the second network function entity stores one or more fourth information and/or fifth information, which is not limited in the present disclosure.

For example, in some embodiments, the second network function entity is a network function entity corresponding to AAnF. When the terminal updates the RID in the first information from 1000 to 1001, AAnF can determine whether it stores RID1000 and the corresponding SUPI.

Step 2105: The second network function entity 102 determines fifth information according to the fourth information.

In some embodiments, the second network function entity may determine the fifth information according to the fourth information, so as to update the fifth information using the first information.

Specifically, the fourth information may be a SUPI, and the fifth information may be an A-KID, where the A-KID is generated based on the original RID, that is, the A-KID is the original A-KID. The A-KID may be determined by the SUPI, that is, the SUPI and the A-KID correspond. The second network function entity may determine the corresponding A-KID based on the SUPI.

Step 2106: The second network function entity 102 replaces the sixth information in the fifth information with the first information to generate updated fifth information.

In some embodiments of the present disclosure, the second network function entity 102 may replace the sixth information in the fifth information with the first information to generate updated fifth information, thereby updating the information stored in the second network function entity.

For example, in some embodiments, the second network function entity is a network function entity corresponding to AAnF. When the terminal updates the RID in the first information from 1000 to 1001, the second network function entity can determine the unupdated A-KID based on the SUPI received in the fourth information, and the AAnF can replace the RID1000 in the unupdated A-KID with the updated RID1001 to generate an updated A-KID.

Step 2107: The second network function entity 102 determines whether to discover the third network function entity 103 based on the first information.

In some embodiments, the second network function entity 102 may determine whether to discover the third network function entity 103 based on the first information.

In some embodiments, the second network function entity supports the first information, that is, the second network function entity supports the updated first information, and the second network function entity may not discover the third network function entity.

In some embodiments, the second network function entity does not support the first information, that is, the second network function entity does not support the updated first information, then the second network function entity can discover the third network function entity based on the updated first information, wherein the third network function entity supports the first information.

In some embodiments, "the second network function entity supports the first information" means that the AAnF has an association relationship with the RID sent by the UDM. In other words, the RID list corresponding to AAnF contains the RID sent by UDM.

In some embodiments, the first information may be indication information configured by the first network function entity for the terminal, and is used to identify the first network function entity, the second network function entity, and the third network function entity.

The third network function entity is a network function entity corresponding to AAnF, and may specifically be AAnF2.

For example, the second network function entity is AAnF ₁ and the third network function entity is AAnF _2. AAnF ₁ does not support the RID (or in other words, the new RID) sent by UDM, so AAnF ₁ can discover the third network function entity AAnF ₂ that supports the RID to implement the AKMA service. In other words, if AAnF ₁ supports the RID, there is no need to discover the third network function entity AAnF ₂ , and AAnF ₁ can implement the AKMA service.

Step 2108: The second network function entity 102 discovers the third network function entity 103 based on the first information under the second condition.

In some embodiments, the second network function entity 102 discovers the third network function entity 103 based on the first information under the second condition to send at least one of the updated fifth information, the fourth information and the first key to the third network function entity 103 .

In some embodiments, the second condition is that the second network function entity does not support the first information. That is, when the second network function entity does not support the first information, the second network function entity can discover the third network function entity based on the updated first information.

In some embodiments, the first network function entity may discover the second network function entity using the sixth information, that is, the first network function entity may discover the second network function entity based on the original RID.

Specifically, the RID is unique, and the second network function entity can determine the corresponding third network function entity based on the first information.

In some embodiments, a second or third network function entity may support one or more first information, that is, a second or third network function entity may support one or more RIDs, which is not limited in the present disclosure.

For example, the second network function entity is AAnF ₁ and the third network function entity is AAnF _2. When the second network function entity AAnF ₁ does not support the RID sent by UDM, AAnF ₁ can determine AAnF ₂ corresponding to the RID based on the RID to discover AAnF ₂ .

Step 2109 : The second network function entity 102 sends at least one of the updated fifth information, the fourth information, and the first key to the third network function entity 103 .

In some embodiments, the second network function entity 102 may send at least one of the updated fifth information, the fourth information, and the first key to the third network function entity 103 .

In some embodiments, the third network function entity 103 may receive at least one of the updated fifth information, the fourth information, and the first key sent by the second network function entity 102 .

In some embodiments, the third network function entity is discovered by the second network function entity based on the first information, that is, the third network function entity is a third network function entity corresponding to the RID sent by the UDM.

Optionally, in some embodiments, the AF receives the fifth information A-KID sent by the terminal, and based on the RID in the A-KID, the AF can discover the third network function entity, and based on the received fifth information, the AF can obtain K _AF from the third network function entity. Thus, an AKMA service is implemented, so that the AF can discover the third network function entity and obtain K _AF when the terminal updates the first information.

Optionally, in some embodiments, the AF may send the fifth information received from the terminal to a network exposure function (NEF), so that the NEF discovers the third network function entity through the received fifth information, and the NEF may obtain K _AF from the third network function entity based on the received fifth information. Thus, an AKMA service is implemented, so that the AF can discover the third network function entity and obtain K _AF when the terminal updates the first information.

For example, the second network function entity is AAnF ₁ and the third network function entity is AAnF _2. Then AAnF ₁ may send at least one of A-KID, SUPI and K _AKMA to AAnF ₂ .

Step 2110 : The third network function entity 103 sends feedback information to the second network function entity 102 .

In some embodiments, the third network function entity may send feedback information to the second network function entity, so that the second network function entity determines that the third network function entity receives at least one of the updated fifth information, the fourth information, and the first key.

In some embodiments, the feedback information is used to identify that the third network function entity receives at least one of the updated fifth information, the fourth information, and the first key sent by the second network function entity.

For example, the second network function entity is AAnF ₁ and the third network function entity is AAnF _2. AAnF ₁ may send feedback information to AAnF ₂ , so that AAnF ₁ confirms that AAnF ₂ receives at least one of A-KID, SUPI and K _AKMA sent by AAnF ₁ .

The communication method involved in the embodiment of the present disclosure may include at least one of step 2101 to step 2110. For example, step 2101 may be implemented as an independent embodiment, step 2110 may be implemented as an independent embodiment, steps 2101+2102 may be implemented as an independent embodiment, and steps 2103+2104 may be implemented as an independent embodiment, but are not limited thereto.

In some embodiments, steps 2107 to 2110 are optional, and one or more of these steps may be omitted or replaced in different embodiments.

In this implementation mode or example, unless there is any contradiction, each step can be independent, arbitrarily combined or exchanged in order, the optional methods or optional examples can be arbitrarily combined, and can be arbitrarily combined with any steps of other implementation modes or other examples.

In some embodiments, the names of information, etc. are not limited to the names recorded in the embodiments, and terms such as "information", "message", "signal", "signaling", "report", "configuration", "indication", "instruction", "command", "channel", "parameter", "domain", "field", "symbol", "symbol", "code element", "codebook", "codeword", "codepoint", "bit", "data", "program", and "chip" can be used interchangeably.

In some embodiments, "obtain", "obtain", "get", "receive", "transmit", "bidirectional transmission", "send and/or receive" can be interchangeable, and can be interpreted as receiving from other entities, obtaining from protocols, obtaining from high levels, obtaining by self-processing, autonomous implementation, etc.

In some embodiments, terms such as "send", "transmit", "report", "send", "transmit", "bidirectional transmission", "send and/or receive" can be used interchangeably.

In some embodiments, terms such as "certain", "preset", "preset", "set", "indicated", "some", "any", and "first" can be interchangeable, and "specific A", "preset A", "preset A", "set A", "indicated A", "some A", "any A", and "first A" can be interpreted as A pre-defined in a protocol, etc., or as A obtained through setting, configuration, or indication, etc., and can also be interpreted as specific A, some A, any A, or first A, etc., but is not limited to this.

FIG3a is a flow chart of a communication method according to an embodiment of the present disclosure. As shown in FIG3a, the present disclosure embodiment relates to a communication method, which is used for a first network function entity 101, and the method includes:

Step 3101, determine whether the first condition is met.

For step 3101, reference may be made to step 2101 in FIG. 2 and other related parts of the embodiment involved in FIG. 2 , which will not be described in detail here.

In some embodiments, the first network function entity 101 determines whether a first condition is satisfied to determine whether the terminal receives the configured first information.

In some embodiments, the first network function entity 101 may determine whether the first condition is met based on the second information sent by the terminal and the third information stored by the first network function entity.

In some embodiments, step 3101 is omitted and the above functions are default or acquiescent.

In some embodiments, the first network function entity is, for example, a UDM-related network function entity, but is not limited thereto.

Step 3102, sending a first parameter set.

For step 3102, reference may be made to step 2102 in FIG. 2 and other related parts of the embodiment involved in FIG. 2 , which will not be described in detail here.

In some embodiments, the first network function entity 101 sends a first parameter set to the second network function entity 102 under a first condition so that the second network function entity obtains the above information, but is not limited thereto and the second parameter set may also be sent to other entities.

In some embodiments, the second network function entity 102 may receive the first parameter set sent by the first network function entity 101 under the first condition.

In some embodiments, step 3102 is omitted and the above functions are default or by default.

In some embodiments, the first network function entity is, for example, a UDM-related network function entity, but is not limited thereto.

In some embodiments, the second network function entity is, for example, an AAnF-related network function entity, but is not limited thereto.

In this implementation mode or example, unless there is any contradiction, each step can be independent, arbitrarily combined or exchanged in order, the optional methods or optional examples can be arbitrarily combined, and can be arbitrarily combined with any steps of other implementation modes or other examples.

FIG3b is a flow chart of a communication method according to an embodiment of the present disclosure. As shown in FIG3b, the present disclosure embodiment relates to a communication method, For the first network function entity 101, the method includes:

Step 3201, sending a first parameter set.

For step 3201, reference may be made to step 2102 of FIG. 2 , step 3102 of FIG. 3 a , and other related parts of the embodiments involved in FIG. 2 and FIG. 3 a , which will not be described in detail here.

In some embodiments, the first network function entity 101 sends a first parameter set to the second network function entity 102 under a first condition.

In some embodiments, the second network function entity 102 may receive the first parameter set sent by the first network function entity 101 under the first condition.

In some embodiments, step 3102 is omitted and the above functions are default or by default.

In some embodiments, the first network function entity is, for example, a UDM-related network function entity, but is not limited thereto.

In some embodiments, the second network function entity is, for example, an AAnF-related network function entity, but is not limited thereto.

In this implementation mode or example, unless there is any contradiction, each step can be independent, arbitrarily combined or exchanged in order, and the optional methods or optional examples can be arbitrarily combined and can be arbitrarily combined with other implementation modes or examples.

FIG4a is a flow chart of a communication method according to an embodiment of the present disclosure. As shown in FIG4a, the present disclosure embodiment relates to a communication method, which is used for a second network function entity 102, and the method includes:

Step 4101, receiving a first parameter set.

For step 4101, reference may be made to step 2102 in FIG. 2 and other related parts of the embodiment involved in FIG. 2 , which will not be described in detail here.

In some embodiments, the second network function entity 102 may receive the first parameter set sent by the first network function entity 101, but is not limited thereto and may also receive the first parameter set sent by other entities.

In some embodiments, the first network function entity 101 may send a first parameter set to the second network function entity 102 .

In some embodiments, step 4101 is omitted and the above functions are default or acquiescent.

In some embodiments, the first network function entity is, for example, a UDM-related network function entity, but is not limited thereto.

In some embodiments, the second network function entity is, for example, an AAnF-related network function entity, but is not limited thereto.

Step 4102, determine whether to update the fifth information.

For step 4102, reference may be made to step 2103 in FIG. 2 and other related parts of the embodiment involved in FIG. 2 , which will not be described in detail here.

In some embodiments, the second network function entity 102 may determine whether to update the non-updated fifth information generated using the non-updated first information.

In some embodiments, the fifth information is used to identify the first key.

In some embodiments, step 4102 is omitted and the above functions are default or acquiescent.

In some embodiments, the second network function entity is, for example, an AAnF-related network function entity, but is not limited thereto.

Step 4103: Determine whether the second network function entity stores the fourth information and/or the fifth information.

For step 4103, reference may be made to step 2104 in FIG. 2 and other related parts of the embodiment involved in FIG. 2 , which will not be described in detail here.

In some embodiments, the second network function entity 102 may determine that the second network function entity stores the fourth information and/or the unupdated first information.

In some embodiments, the fourth information is used to identify the terminal.

In some embodiments, step 4103 is omitted and the above functions are default or acquiescent.

In some embodiments, the second network function entity is, for example, an AAnF-related network function entity, but is not limited thereto.

Step 4104, determine the fifth information.

For step 4104, reference may be made to step 2105 in FIG. 2 and other related parts of the embodiment involved in FIG. 2 , which will not be described in detail here.

In some embodiments, the second network function entity 102 may determine the unupdated fifth information according to the fourth information.

In some embodiments, the fourth information includes at least a SUPI, wherein the SUPI may indicate the fifth information that is not updated.

In some embodiments, step 4104 is omitted and the above functions are default or acquiescent.

In some embodiments, the second network function entity is, for example, an AAnF-related network function entity, but is not limited thereto.

Step 4105: Replace the non-updated first information in the non-updated fifth information with the updated first information to generate updated fifth information.

For step 4105, reference may be made to step 2106 in FIG. 2 and other related parts of the embodiment involved in FIG. 2 , which will not be described in detail here.

In some embodiments, the second network function entity 102 may replace the unupdated fifth information with the updated first information. first information to generate updated fifth information.

In some embodiments, step 4105 is omitted and the above functions are default or acquiescent.

In some embodiments, the second network function entity is, for example, an AAnF-related network function entity, but is not limited thereto.

Step 4106: Determine whether to discover a third network function entity based on the updated first information.

For step 4106, reference may be made to step 2107 in FIG. 2 and other related parts of the embodiment involved in FIG. 2 , which will not be described in detail here.

In some embodiments, the second network function entity 102 may determine whether to discover the third network function entity based on the updated first information.

In some embodiments, step 4106 is omitted and the above functions are default or acquiescent.

In some embodiments, the second network function entity is, for example, an AAnF-related network function entity, but is not limited thereto.

Step 4107: discover the third network function entity.

For step 4107, reference may be made to step 2108 in FIG. 2 and other related parts of the embodiment involved in FIG. 2 , which will not be described in detail here.

In some embodiments, the second network function entity 102 may discover the third network function entity based on the updated first information.

In some embodiments, the first information may indicate a third network function entity.

In some embodiments, step 4107 is omitted and the above functions are default or acquiescent.

In some embodiments, the second network function entity is, for example, AAnF ₁ , but is not limited thereto.

In some embodiments, the third network function entity is, for example, AAnF ₂ , but is not limited thereto.

Step 4108, sending the updated fifth information, fourth information and at least one of the first key.

For step 4108, reference may be made to step 2109 in FIG. 2a and other related parts of the embodiment involved in FIG. 2a, which will not be described in detail here.

In some embodiments, the second network function entity 102 may send the updated fifth information, the fourth information, and at least one of the first key to the third network function entity 103, but is not limited to this, and may also send the updated fifth information, the fourth information, and at least one of the first key to other recipients.

In some embodiments, the third network function entity 103 may receive at least one of the updated fifth information, the fourth information, and the first key sent by the second network function entity 102 .

In some embodiments, step 4108 is omitted and the above functions are default or acquiescent.

In some embodiments, the second network function entity is, for example, AAnF ₁ , but is not limited thereto.

In some embodiments, the third network function entity is, for example, AAnF ₂ , but is not limited thereto.

Step 4109, receiving feedback information.

In some embodiments, the second network function entity 102 may receive feedback information sent by the third network function entity 103, but is not limited thereto, and may also receive feedback information sent by other entities.

In some embodiments, the third network function entity 103 may send feedback information to the second network function entity 102 .

In some embodiments, the feedback information is used to identify that the third network function entity receives at least one of the updated fifth information, the fourth information, and the first key sent by the second network function entity.

In some embodiments, step 4109 is omitted and the above functions are default or acquiescent.

In some embodiments, the second network function entity is, for example, AAnF ₁ , but is not limited thereto.

In some embodiments, the third network function entity is, for example, AAnF ₂ , but is not limited thereto.

The communication method involved in the embodiment of the present disclosure may include at least one of step 4101 to step 4109. For example, step 4101 may be implemented as an independent embodiment, step 4102 may be implemented as an independent embodiment, and step 4102+4103 may be implemented as an independent embodiment but is not limited thereto.

In some embodiments, steps 4107 to 4109 are optional, and one or more of these steps may be omitted or replaced in different embodiments.

In this implementation mode or example, unless there is any contradiction, each step can be independent, arbitrarily combined or exchanged in order, the optional methods or optional examples can be arbitrarily combined, and can be arbitrarily combined with any steps of other implementation modes or other examples.

FIG4b is a flow chart of a communication method according to an embodiment of the present disclosure. As shown in FIG4b, the present disclosure embodiment relates to a communication method, which is used for a second network function entity 102, and the method includes:

Step 4201, receiving a first parameter set.

For step 4201, reference may be made to step 2102 of FIG. 2 , step 4101 of FIG. 4 a , and other related parts of the embodiments involved in FIG. 2 and FIG. 4 a . I will not go into details here.

In some embodiments, the second network function entity 102 may receive the first parameter set sent by the first network function entity 101, but is not limited thereto and may also receive the first parameter set sent by other entities.

In some embodiments, the first network function entity 101 may send a first parameter set to the second network function entity 102 .

In some embodiments, step 4201 is omitted and the above functions are default or acquiescent.

In some embodiments, the first network function entity is, for example, a UDM-related network function entity, but is not limited thereto.

In some embodiments, the second network function entity is, for example, an AAnF-related network function entity, but is not limited thereto.

Step 4202, determining whether to update the non-updated fifth information generated using the non-updated first information.

For step 4202, reference may be made to step 2103 in FIG. 2, step 4102 in FIG. 4a, and other related parts of the embodiments involved in FIG. 2 and FIG. 4a, which will not be described in detail here.

In some embodiments, the second network function entity 102 may determine whether to update the non-updated fifth information generated using the non-updated first information.

In some embodiments, the fifth information is used to identify the first key.

In some embodiments, step 4202 is omitted and the above functions are default or by default.

In some embodiments, the second network function entity is, for example, an AAnF-related network function entity, but is not limited thereto.

Step 4203: Determine whether the second network function entity stores fourth information and/or unupdated first information.

For step 4203, reference may be made to step 2104 in FIG. 2, step 4103 in FIG. 4a, and other related parts of the embodiments involved in FIG. 2 and FIG. 4a, which will not be described in detail here.

In some embodiments, the second network function entity 102 may determine that the second network function entity stores the fourth information and/or the unupdated first information.

In some embodiments, step 4203 is omitted and the above functions are default or by default.

In some embodiments, the second network function entity is, for example, an AAnF-related network function entity, but is not limited thereto.

Step 4204, determine the fifth information that has not been updated.

For step 4204, reference may be made to step 2105 of FIG. 2 , step 4104 of FIG. 4 a , and other related parts of the embodiments involved in FIG. 2 and FIG. 4 a , which will not be described in detail here.

In some embodiments, the second network function entity 102 may determine the fifth information according to the fourth information.

In some embodiments, the fourth information may be a SUPI, wherein the SUPI may indicate the fifth information.

In some embodiments, step 4205 is omitted and the above functions are default or default.

In some embodiments, the second network function entity is, for example, an AAnF-related network function entity, but is not limited thereto.

Step 4205, replacing the sixth information in the fifth information with the first information to generate updated fifth information.

For step 4205, reference may be made to step 2106 of FIG. 2 , step 4105 of FIG. 4 a , and other related parts of the embodiments involved in FIG. 2 and FIG. 4 a , which will not be described in detail here.

In some embodiments, the second network function entity 102 may replace the non-updated first information in the non-updated fifth information with the updated first information to generate updated fifth information.

In some embodiments, step 4205 is omitted and the above functions are default or default.

In some embodiments, the second network function entity is, for example, an AAnF-related network function entity, but is not limited thereto.

Step 4206: Determine whether to discover a third network function entity based on the updated first information.

For step 4206, reference may be made to step 2107 of FIG. 2 , step 4106 of FIG. 4 a , and other related parts of the embodiments involved in FIG. 2 and FIG. 4 a , which will not be described in detail here.

In some embodiments, the second network function entity 102 may determine whether to discover the third network function entity based on the updated first information.

In some embodiments, step 4206 is omitted and the above functions are default or default.

In some embodiments, the second network function entity is, for example, an AAnF-related network function entity, but is not limited thereto.

The communication method involved in the embodiment of the present disclosure may include at least one of step 4201 to step 4207. For example, step 4201 may be implemented as an independent embodiment, and step 4203 may be implemented as an independent embodiment but is not limited thereto.

In some embodiments, step 4202 is optional, and one or more of these steps may be omitted or replaced in different embodiments.

In this implementation mode or example, unless there is any contradiction, each step can be independent, arbitrarily combined or exchanged in order, the optional methods or optional examples can be arbitrarily combined, and can be arbitrarily combined with any steps of other implementation modes or other examples.

FIG4c is a flow chart of a communication method according to an embodiment of the present disclosure. As shown in FIG4c, the present disclosure embodiment relates to a communication method, which is used for a second network function entity 102, and the method includes:

Step 4301, receiving a first parameter set.

For step 4301, reference may be made to step 2102 in FIG. 2, step 4101 in FIG. 4a, step 4201 in FIG. 4b, and other related parts in the embodiments involved in FIG. 2, FIG. 4a and FIG. 4b, which will not be described in detail here.

In some embodiments, the second network function entity 102 may receive the first parameter set sent by the first network function entity 101, but is not limited thereto and may also receive the first parameter set sent by other entities.

In some embodiments, the first network function entity 101 may send a first parameter set to the second network function entity 102 .

In some embodiments, step 4301 is omitted and the above functions are default or acquiescent.

In some embodiments, the first network function entity is, for example, a UDM-related network function entity, but is not limited thereto.

In some embodiments, the second network function entity is, for example, an AAnF-related network function entity, but is not limited thereto.

Step 4302, determine whether to update the fifth information.

For step 4302, reference may be made to step 2103 in FIG. 2, step 4102 in FIG. 4a, step 4202 in FIG. 4b, and other related parts of the embodiments involved in FIG. 2, FIG. 4a and FIG. 4b, which will not be described in detail here.

In some embodiments, the second network function entity 102 may determine whether to update the non-updated fifth information generated using the non-updated first information.

In some embodiments, the fifth information is used to identify the first key.

In some embodiments, step 4302 is omitted and the above functions are default or default.

In some embodiments, the second network function entity is, for example, an AAnF-related network function entity, but is not limited thereto.

The communication method involved in the embodiment of the present disclosure may include at least one of step 4301 and step 4302. For example, step 4301 may be implemented as an independent embodiment, and step 4302 may be implemented as an independent embodiment, but is not limited thereto.

In some embodiments, step 4302 is optional, and one or more of these steps may be omitted or replaced in different embodiments.

In this implementation mode or example, unless there is any contradiction, each step can be independent, arbitrarily combined or exchanged in order, the optional methods or optional examples can be arbitrarily combined, and can be arbitrarily combined with any steps of other implementation modes or other examples.

FIG4d is a flow chart of a communication method according to an embodiment of the present disclosure. As shown in FIG4d, the present disclosure embodiment relates to a communication method, which is used for a second network function entity 102, and the method includes:

Step 4401, receiving a first parameter set.

For step 4401, reference may be made to step 2102 of FIG. 2, step 4101 of FIG. 4a, step 4201 of FIG. 4b, step 4301 of FIG. 4c, and other related parts in the embodiments involved in FIG. 2, FIG. 4a, FIG. 4b and FIG. 4c, which will not be described in detail here.

In some embodiments, the second network function entity 102 may receive a first parameter set sent by the first network function entity 101 , wherein the first parameter set is used for application authentication and key management AKMA service, and the first parameter set includes at least first information.

In some embodiments, the first parameter set also includes fourth information, and the fourth information is used to identify the terminal.

In some embodiments, the second network function entity 102 may determine that the second network function entity stores the fourth information and/or the unupdated first information, and update the unupdated fifth information generated using the unupdated first information.

In some embodiments, the second network function entity 102 may determine the unupdated fifth information according to the fourth information; and replace the unupdated first information in the unupdated fifth information with the updated first information to generate updated fifth information.

In some embodiments, the second network function entity 102 may determine whether to update the fifth information.

In some embodiments, the second network function entity 102 may discover the third network function entity based on the first information.

In some embodiments, the second network function entity 102 may discover the third network function entity based on the first information under a second condition, wherein the second condition is that the second network function entity does not support the first information.

In some embodiments, the second network function entity 102 may determine whether to discover the third network function entity based on the first information.

In some embodiments, the second network function entity 102 may send at least one of the updated fifth information, the fourth information, and the first key to the third network function entity, wherein the fifth information is used to identify the first key.

In some embodiments, the second network function entity 102 may receive feedback information sent by the third network function entity, wherein the feedback information is used to identify that the third network function entity has received at least one of the updated fifth information, fourth information and first key sent by the second network function entity.

In some embodiments, the first network function entity is, for example, a UDM-related network function entity, but is not limited thereto.

In some embodiments, the second network function entity is, for example, AAnF ₁ , but is not limited thereto.

In some embodiments, the third network function entity is, for example, AAnF ₂ , but is not limited thereto.

For a detailed description of step 4401, please refer to the embodiment shown in FIG. 2 above.

FIG5a is a flow chart of a communication method according to an embodiment of the present disclosure. As shown in FIG5, the present disclosure embodiment relates to a communication method, which is used for a third network function entity 103, and the method includes:

Step 5101, receiving updated fifth information, fourth information and at least one of the first key.

For step 5101, reference may be made to step 2109 in FIG. 2 and other related parts of the embodiment involved in FIG. 2a, which will not be described in detail here.

In some embodiments, the third network function entity 103 can receive at least one of the updated fifth information, fourth information and first key sent by the second network function entity 102, but is not limited to this, and can also receive at least one of the updated fifth information, fourth information and first key sent by other entities.

In some embodiments, the second network function entity 102 may send at least one of the updated fifth information, the fourth information, and the first key to the third network function entity 103 .

In some embodiments, the second network function entity is, for example, AAnF ₁ , but is not limited thereto.

In some embodiments, the third network function entity is, for example, AAnF ₂ , but is not limited thereto.

Step 5102, sending feedback information.

For step 5102, reference may be made to step 2110 of FIG. 2 and other related parts of the embodiment involved in FIG. 2a, which will not be described in detail here.

In some embodiments, the third network function entity 103 may send feedback information to the second network function entity 102, but is not limited thereto, and may also send feedback information to other entities.

In some embodiments, the second network function entity is, for example, AAnF ₁ , but is not limited thereto.

In some embodiments, the third network function entity is, for example, AAnF ₂ , but is not limited thereto.

The communication method involved in the embodiment of the present disclosure may include at least one of step 5101-step 5102. For example, step 5101 may be implemented as an independent embodiment, step 5102 may be implemented as an independent embodiment, and step 5101+5102 may be implemented as an independent embodiment but is not limited thereto.

In some embodiments, step 5102 is optional and may be omitted or replaced in different embodiments.

In this implementation mode or example, unless there is any contradiction, each step can be independent, arbitrarily combined or exchanged in order, the optional methods or optional examples can be arbitrarily combined, and can be arbitrarily combined with any steps of other implementation modes or other examples.

FIG5b is a flow chart of a communication method according to an embodiment of the present disclosure. As shown in FIG5 , the present disclosure embodiment relates to a communication method, which is used for a third network function entity 103, and the method includes:

Step 5201, receiving updated fifth information, fourth information and at least one of the first key.

For step 5101, reference may be made to step 2109 of FIG. 2 , step 5101 of FIG. 5 a , and other related parts of the embodiments involved in FIG. 2 a and FIG. 5 a , which will not be described in detail here.

In some embodiments, the third network function entity 103 may send feedback information to the second network function entity 102, but is not limited thereto, and may also send feedback information to other entities.

In some embodiments, the updated fifth information is generated based on the updated first information, and the fifth information is used to identify the first key.

In some embodiments, the third network function entity is discovered based on the first information.

In this implementation mode or example, unless there is any contradiction, each step can be independent, arbitrarily combined or exchanged in order, the optional methods or optional examples can be arbitrarily combined, and can be arbitrarily combined with any steps of other implementation modes or other examples.

FIG6a is an interactive schematic diagram of a communication method according to an embodiment of the present disclosure. As shown in FIG6a, the embodiment of the present disclosure relates to a communication method, and the method includes:

Step 6101: The first network function entity 101 sends a first parameter set to the second network function entity 102.

Optional implementations of step 6101 may refer to step 2101 in FIG. 2 , step 3101 in FIG. 3a , step 3201 in FIG. 3b , step 3301 in FIG. 3c , and other related parts of the embodiments involved in FIG. 2 , FIG. 3a , FIG. 3b , and FIG. 3c , which will not be described in detail here.

Step 6102 : The second network function entity 102 sends at least one of the updated fifth information, the fourth information, and the first key to the third network function entity 103 .

Optional implementations of step 6102 can refer to step 2109 of Figure 2, step 4108 of Figure 4a, step 5101 of Figure 5a, step 5201 of Figure 5b and other related parts in the embodiments involved in Figures 2, 4a, 5a and 5b, which will not be repeated here.

In some embodiments, the above method may include the method described in the above embodiments of the first network function entity side, the second network function entity side, the third network function entity side, etc., which will not be repeated here.

FIG7a is an interactive schematic diagram of a communication method according to an embodiment of the present disclosure. As shown in FIG7a, the communication method of the embodiment of the present disclosure includes:

Step 7101, send SUPI and update RID.

Optionally, in some embodiments, the UDM may send the SUPI and update the RID to the AAnF ₁ .

Optionally, in some embodiments, before executing step 7101, the UDM further includes determining that the UE successfully receives the updated RID, that is, the UDM compares the received UPU-MAC-I _UE with the UPU-XMAC-I _UE temporarily stored by the UDM, and if the received UPU-MAC-I _UE is the same as the UPU-XMAC-I _UE, the UDM can confirm that the UE successfully receives the updated RID. Then the UDM can send the SUPI and the updated RID to the AAnF ₁ .

Step 7102, sending A-KID, SUPI and K _AKMA .

Optionally, in some embodiments, the UDM may send the SUPI and update the RID to the AAnF ₁ .

Optionally, in some embodiments, AAnF ₁ receives the update RID and AAnF ₁ needs to check whether A-KID should be updated.

Optionally, in some embodiments, if AAnF ₁ receives the SUPI sent by UDM and/or the updated RID has been stored locally, AAnF ₁ may store A-KID based on the SUPI identification.

Optionally, in some embodiments, AAnF ₁ may generate an updated A-KID by replacing the RID in the original A-KID with the updated RID.

Optionally, in some embodiments, AAnF ₁ may determine K _AKMA based on the received SUPI and the stored K _AUSF .

Optionally, in some embodiments, AAnF ₁ may determine whether it itself needs to discover AAnF ₂ .

Specifically, in some embodiments, if AAnF ₁ supports the new RID, AAnF ₁ may not discover AAnF _2. Otherwise, if AAnF ₁ does not support the new RID, AAnF ₁ discovers AAnF ₂ based on the updated RID and sends updated A-KID, SUPI and K _AKMA to AAnF ₂ .

Step 7103, send confirmation message.

Optionally, in some embodiments, AAnF ₂ may send a confirmation message to AAnF ₁ , indicating that the updated A-KID, SUPI and K _AKMA have been received.

Step 7104: Get K _AF based on the updated A-KID.

Optionally, in some embodiments, the AF may retrieve K _AF from the AAnF using the updated A-KID sent by the UE.

Optionally, in some embodiments, the AF may discover the AAnF using an updated RID, where the updated RID is included in the A-KID sent by the UE.

Optionally, in some embodiments, the AF may send an updated A-KID to the NEF, so that the NEF discovers the AAnF through the updated A-KID.

Optionally, in some embodiments, the AF may send an updated A-KID to the NEF, so that the NEF obtains K _AF from the AAnF through the updated A-KID.

The communication method involved in the embodiment of the present disclosure may include at least one of step 7101 to step 7104. For example, step 7101 may be implemented as an independent embodiment, step 7104 may be implemented as an independent embodiment, and step 7101+7102 may be implemented as an independent embodiment but is not limited thereto.

In some embodiments, steps 7102 to 7104 are optional, and one or more of these steps may be omitted or replaced in different embodiments.

In this implementation mode or example, unless there is any contradiction, each step can be independent, arbitrarily combined or exchanged in order, the optional methods or optional examples can be arbitrarily combined, and can be arbitrarily combined with any steps of other implementation modes or other examples.

The embodiments of the present disclosure also propose a device for implementing any of the above methods, for example, a device is proposed, the above device includes a unit or module for implementing each step performed by the terminal in any of the above methods. For another example, another device is also proposed, including a unit or module for implementing each step performed by a network device (such as an access network device, a core network function node, a core network device, etc.) in any of the above methods.

It should be understood that the division of the units or modules in the above device is only a division of logical functions, which can be fully or partially integrated into one physical entity or physically separated in actual implementation. In addition, the units or modules in the device can be implemented in the form of a processor calling software: for example, the device includes a processor, the processor is connected to a memory, and instructions are stored in the memory. The processor calls the instructions stored in the memory to implement any of the above methods or implement the functions of the units or modules of the above device, wherein the processor is, for example, a general-purpose processor, such as a central processing unit (CPU) or a microprocessor, and the memory is a memory inside the device or a memory outside the device. Alternatively, the units or modules in the device may be implemented in the form of hardware circuits, and the functions of some or all of the units or modules may be implemented by designing the hardware circuits. The hardware circuits may be understood as one or more processors; for example, in one implementation, the hardware circuits are application-specific integrated circuits (ASICs), and the functions of some or all of the above units or modules may be implemented by designing the logical relationship of the components in the circuits; for another example, in another implementation, the hardware circuits may be implemented by programmable logic devices (PLDs), and Field Programmable Gate Arrays (FPGAs) may be used as an example, which may include a large number of logic gate circuits, and the connection relationship between the logic gate circuits may be configured by configuring the configuration files, thereby implementing the functions of some or all of the above units or modules. All units or modules of the above devices may be implemented in the form of software called by the processor, or in the form of hardware circuits, or in the form of software called by the processor, and the remaining part may be implemented in the form of hardware circuits.

In the disclosed embodiments, the processor is a circuit with signal processing capability. In one implementation, the processor may be a circuit with instruction reading and execution capability, such as a central processing unit (CPU), a microprocessor, a graphics processing unit (GPU) (which may be understood as a microprocessor), or a digital signal processor (DSP); in another implementation, the processor may implement certain functions through the logical relationship of a hardware circuit, and the logical relationship of the above hardware circuit may be fixed or reconfigurable, such as a hardware circuit implemented by an application-specific integrated circuit (ASIC) or a programmable logic device (PLD), such as an FPGA. In a reconfigurable hardware circuit, the process of the processor loading a configuration document to implement the hardware circuit configuration may be understood as the process of the processor loading instructions to implement the functions of some or all of the above units or modules. In addition, it can also be a hardware circuit designed for artificial intelligence, which can be understood as ASIC, such as Neural Network Processing Unit (NPU), Tensor Processing Unit (TPU), Deep Learning Processing Unit (DPU), etc.

FIG8a is a schematic diagram of the structure of the first network function entity proposed in an embodiment of the present disclosure. As shown in FIG8a, the first network function entity includes: a transceiver module 8101. In some embodiments, the transceiver module is used to send a first parameter set to the second network function entity, the first parameter set is used to apply the authentication and key management AKMA service, and the first parameter set includes at least the first information. Optionally, the transceiver module is used to execute at least one of the communication steps such as sending and/or receiving (for example, step 2102, step 2103, but not limited to this) performed by the first network function entity 101 in any of the above methods, which will not be repeated here. Optionally, in some embodiments, the first network function entity also includes a processing module 8102, and the processing module is used to execute other steps (for example, step 2101, but not limited to this) performed by the first network function entity 101 in any of the above methods, which will not be repeated here.

Figure 8b is a schematic diagram of the structure of the second network function entity proposed in an embodiment of the present disclosure. As shown in Figure 8b, the second network function entity includes: a transceiver module 8201. In some embodiments, the above-mentioned transceiver module is used to receive a first parameter set sent by the first network function entity, wherein the first parameter set is used for application authentication and key management AKMA service, and the first parameter set includes at least first information. Optionally, the above-mentioned transceiver module is used to execute at least one of the communication steps such as sending and/or receiving (for example, step 2110, step 2111, but not limited to this) performed by the second network function entity 102 in any of the above methods, which will not be repeated here. Optionally, in some embodiments, the second network function entity also includes a processing module 8202, and the above-mentioned processing module is used to execute other steps (for example, step At least one of steps 2104, 2105, 2106, 2107, 2108, and 2109 (but not limited to these) will not be repeated here.

FIG8c is a schematic diagram of the structure of the third network function entity proposed in an embodiment of the present disclosure. As shown in FIG8c, the third network function entity includes: a transceiver module 8301. In some embodiments, the transceiver module is used to receive at least one of the updated fifth information, the fourth information and the first key sent by the second network function entity. Optionally, the transceiver module is used to perform at least one of the communication steps such as sending and/or receiving (for example, step 2110, step 2111, but not limited to this) performed by the second network function entity 102 in any of the above methods, which will not be repeated here.

As shown in FIG9a, the communication device 9100 includes one or more processors 9101. The processor 9101 may be a general-purpose processor or a dedicated processor, for example, a baseband processor or a central processing unit. The baseband processor may be used to process the communication protocol and the communication data, and the central processing unit may be used to control the communication device (such as a base station, a baseband chip, a terminal device, a terminal device chip, a DU or a CU, etc.), execute a program, and process the data of the program. The processor 9101 is used to call instructions so that the communication device 9100 executes any of the above methods.

In some embodiments, the communication device 9100 further includes one or more memories 9102 for storing instructions. Optionally, all or part of the memory 9102 may also be outside the communication device 9100.

In some embodiments, the communication device 9100 further includes one or more transceivers 9103. When the communication device 9100 includes one or more transceivers 9103, the communication steps such as sending and receiving in the above method are executed by the transceiver 9103, and the other steps are executed by the processor 9101.

In some embodiments, the transceiver may include a receiver and a transmitter, and the receiver and the transmitter may be separate or integrated. Optionally, the terms such as transceiver, transceiver unit, transceiver, transceiver circuit, etc. may be replaced with each other, the terms such as transmitter, transmission unit, transmitter, transmission circuit, etc. may be replaced with each other, and the terms such as receiver, receiving unit, receiver, receiving circuit, etc. may be replaced with each other.

Optionally, the communication device 9100 further includes one or more interface circuits 9104, which are connected to the memory 9102. The interface circuit 9104 can be used to receive signals from the memory 9102 or other devices, and can be used to send signals to the memory 9102 or other devices. For example, the interface circuit 9104 can read instructions stored in the memory 9102 and send the instructions to the processor 9101.

The communication device 9100 described in the above embodiments may be a network device or a terminal, but the scope of the communication device 9100 described in the present disclosure is not limited thereto, and the structure of the communication device 9100 may not be limited by FIG. 9a. The communication device may be an independent device or may be part of a larger device. For example, the communication device may be: 1) an independent integrated circuit IC, or a chip, or a chip system or subsystem; (2) a collection of one or more ICs, optionally, the above IC collection may also include a storage component for storing data and programs; (3) an ASIC, such as a modem; (4) a module that can be embedded in other devices; (5) a receiver, a terminal device, an intelligent terminal device, a cellular phone, a wireless device, a handheld device, a mobile unit, a vehicle-mounted device, a network device, a cloud device, an artificial intelligence device, etc.; (6) others, etc.

Fig. 9b is a schematic diagram of the structure of a chip 9200 provided in an embodiment of the present disclosure. In the case where the communication device 9100 may be a chip or a chip system, reference may be made to the schematic diagram of the structure of the chip 9200 shown in Fig. 9b, but the present invention is not limited thereto.

The chip 9200 includes one or more processors 9201, and the processor 9201 is used to call instructions so that the chip 9200 executes any of the above methods.

In some embodiments, the chip 9200 further includes one or more interface circuits 9202, which are connected to the memory 9203. The interface circuit 9202 can be used to receive signals from the memory 9203 or other devices, and the interface circuit 9202 can be used to send signals to the memory 9203 or other devices. For example, the interface circuit 9202 can read instructions stored in the memory 9203 and send the instructions to the processor 9201. Optionally, the terms such as interface circuit, interface, transceiver pin, and transceiver can be replaced with each other.

In some embodiments, the chip 9200 further includes one or more memories 9203 for storing instructions. Optionally, all or part of the memory 9203 may be outside the chip 9200.

The present disclosure also proposes a storage medium, on which instructions are stored, and when the instructions are executed on the communication device 9100, the communication device 9100 executes any of the above methods. Optionally, the storage medium is an electronic storage medium. Optionally, the storage medium is a computer-readable storage medium, but is not limited to this, and it can also be a storage medium readable by other devices. Optionally, the storage medium can be a non-transitory storage medium, but is not limited to this, and it can also be a temporary storage medium.

The present disclosure also proposes a program product, which, when executed by the communication device 9100, enables the communication device 9100 to execute any of the above methods. Optionally, the program product is a computer program product.

The present disclosure also proposes a computer program, which, when executed on a computer, causes the computer to execute any one of the above methods.

In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented by software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer programs. When the computer program is loaded and executed on a computer, the process or function described in the embodiment of the present disclosure is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer program can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer program can be transmitted from a website site, computer, server or data center by wired (e.g., coaxial cable, optical fiber, digital subscriber line (digital subscriber line, DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) mode to another website site, computer, server or data center. The computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device such as a server or data center that includes one or more available media integrated. The available medium may be a magnetic medium (e.g., a floppy disk, a hard disk, a magnetic tape), an optical medium (e.g., a high-density digital video disc (DVD)), or a semiconductor medium (e.g., a solid state disk (SSD)), etc.

The corresponding relationships shown in the tables in the present disclosure can be configured or predefined. The values of the information in each table are only examples and can be configured as other values, which are not limited by the present disclosure. When configuring the corresponding relationship between the information and each parameter, it is not necessarily required to configure all the corresponding relationships illustrated in each table. For example, in the table in the present disclosure, the corresponding relationships shown in some rows may not be configured. For another example, appropriate deformation adjustments can be made based on the above table, such as splitting, merging, etc. The names of the parameters shown in the titles of the above tables can also use other names that can be understood by the communication device, and the values or representations of the parameters can also be other values or representations that can be understood by the communication device. When implementing the above tables, other data structures can also be used, such as arrays, queues, containers, stacks, linear lists, pointers, linked lists, trees, graphs, structures, classes, heaps, hash tables or hash tables.

The predefined in the present disclosure may be understood as defined, predefined, stored, pre-stored, pre-negotiated, pre-configured, solidified, or pre-burned.

Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this disclosure.

Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

The above is only a specific embodiment of the present disclosure, but the protection scope of the present disclosure is not limited thereto. Any person skilled in the art who is familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed in the present disclosure, which should be included in the protection scope of the present disclosure. Therefore, the protection scope of the present disclosure should be based on the protection scope of the claims.

Claims (25)

A communication method, characterized in that the method is performed by a first network function entity, and the method comprises: sending a first parameter set to the second network function entity, The first parameter set is used for application authentication and key management AKMA service, and the first parameter set at least includes first information. The method according to claim 1 is characterized in that the first network function entity is an entity corresponding to the unified data management function UDM, and the second network function entity is an entity corresponding to the AKMA anchor function AAnF. The method according to claim 1 or 2, characterized in that the sending the first parameter set to the second network function entity comprises: under a first condition, sending the first parameter set to the second network function entity, Among them, the first condition is that the terminal receives the first information configured by the first network function entity. The method according to claim 3, characterized in that the method further comprises: Determine whether the first condition is met. ; Wherein, determining whether the first condition is met includes: Determining whether the second information sent by the terminal is consistent with the third information stored by the first network function entity; The second information is consistent with the third information, and it is determined that the first condition is satisfied. The method according to any one of claims 1 to 4, characterized in that the first parameter set also includes fourth information. The method according to any one of claims 1 to 5, characterized in that the method further comprises: The second network function entity is discovered based on sixth information, where the sixth information is the first information that has not been updated. A communication method, characterized in that the method is performed by a second network function entity, and the method comprises: receiving a first parameter set sent by a first network function entity, The first parameter set is used for application authentication and key management AKMA service, and the first parameter set at least includes first information. The method according to claim 7 is characterized in that the first parameter set also includes fourth information. The method according to claim 8, characterized in that the method further comprises: Determine that the second network function entity stores fourth information and/or fifth information, and update the fifth information with the first information. The method according to claim 9, characterized in that updating the fifth information with the first information comprises: Determine the fifth information according to the fourth information included in the first parameter set, wherein the fifth information includes the sixth information; The sixth information in the fifth information is replaced with the first information to generate updated fifth information. The method according to claim 10, characterized in that the method further comprises: determining whether to update the fifth information; Wherein, the determining whether to update the fifth information includes: It is determined that the first information is inconsistent with the sixth information, and it is determined to update the fifth information. The method according to any one of claims 9 to 11, characterized in that the method further comprises: Based on the first information, a third network function entity is discovered. The method according to claim 12, wherein discovering the third network function entity based on the first information comprises: Under a second condition, based on the first information, discovering the third network function entity, The second condition is that the second network function entity does not support the first information. The method according to claim 12 or 13, characterized in that the method further comprises: Determine whether to discover the third network function entity based on the first information. The method according to any one of claims 12 to 14, characterized in that the method further comprises: sending at least one of the updated fifth information, the fourth information and the first key to the third network function entity, The fifth information is used to identify the first key. The method according to claim 15, characterized in that the method further comprises: receiving feedback information sent by the third network function entity, The feedback information is used to identify that the third network function entity has received at least one of the updated fifth information, the fourth information and the first key sent by the second network function entity. A communication method, characterized in that the method is performed by a third network function entity, and the method comprises: Receive at least one of the updated fifth information, the fourth information, and the first key sent by the second network function entity. The method according to claim 16 or 17 is characterized in that the updated fifth information is generated based on the first information, and the fifth information is used to identify the first key. The method according to claim 18 is characterized in that the third network functional entity is discovered based on the first information. A first network function entity, characterized by comprising: a transceiver module, configured to send a first parameter set to a second network function entity, The first parameter set is used for application authentication and key management AKMA service, and the first parameter set at least includes first information. A second network function entity, characterized by comprising: a transceiver module, configured to receive a first parameter set sent by a first network function entity, The first parameter set is used for application authentication and key management AKMA service, and the first parameter set at least includes first information. A third network function entity, characterized by comprising: The transceiver module is used to receive at least one of the updated fifth information, the fourth information and the first key sent by the second network function entity. A communication device, comprising: a transceiver; a memory; a processor, connected to the transceiver and the memory respectively, configured to control the wireless signal reception and transmission of the transceiver by executing computer executable instructions on the memory, and capable of implementing any one of the methods of claims 1-19. A computer storage medium, wherein the computer storage medium stores computer executable instructions; after the computer executable instructions are executed by a processor, the method according to any one of claims 1 to 21 can be implemented. A communication system, characterized in that it comprises: a first network function entity, a second network function entity, and a third network function entity, wherein the first network function entity is used to execute the method described in any one of claims 1 to 6, the second network function entity is used to execute the method described in any one of claims 7 to 16, and the third network function entity is used to execute the method described in any one of claims 17 to 19.