Method and apparatus for unmanned aerial vehicle authentication

1. An unmanned aerial vehicle authentication method comprising:

determining, by a communications device belonging to a core network, that a type of a terminal is an unmanned aerial vehicle (UAV);

obtaining, by the communications device, location information of the terminal,

wherein the location information includes at least one of a tracking area identity, a cell identifier (ID), a local IP address of the terminal and a user datagram protocol source port number of the terminal; and

sending, by the communications device, authentication information of the terminal and the location information to an authentication server,

wherein the authentication information is used by the authentication server to perform take-off authentication or flight plan authentication,

wherein the take-off authentication comprises checking whether the location information is a lawful take-off location of the terminal, and

wherein the flight plan authentication comprises checking whether the location information is applicable for executing a flight mission.

2. The method according to claim 1 , wherein determining that the type of the terminal is the UAV comprises:

determining, by the communications device, based on subscription information of the terminal received from a data management network element, or the type of the terminal that is reported by the terminal, that the type of the terminal is the UAV.

3. The method according to claim 1 , wherein sending the authentication information of the terminal and the location information to the authentication server comprises:

sending, by the communications device, a first container and a second container to the authentication server, wherein the first container comprises the authentication information of the terminal, and the second container comprises the location information.

4. The method according to claim 1 , wherein before sending the authentication information of the terminal to the authentication server, the method further comprises:

obtaining, by the communications device, the authentication information of the terminal from the terminal, wherein the authentication information comprises an identifier of the terminal, location information provided by the terminal, or possible flight path information of the terminal.

5. The method according to claim 1 , wherein before determining that the type of the terminal is the UAV, the method further comprises:

registering, by the communications device, the terminal with the core network; and

after sending the authentication information of the terminal to the authentication server, the method further comprises:

receiving, by the communications device, response information from the authentication server, wherein the response information indicates that authentication on the terminal fails; and

initiating, by the communications device, a deregistration procedure of the terminal.

6. The method according to claim 1 , wherein before determining that the type of the terminal is the UAV, the method further comprises:

receiving, by the communications device, a registration request message from the terminal, wherein the registration request message is used to request to register the terminal with the core network, the registration request message comprises the authentication information of the terminal, and the authentication information comprises an identifier of the terminal, location information provided by the terminal, or possible flight path information of the terminal.

7. The method according to claim 6 , wherein after sending the authentication information of the terminal to the authentication server, the method further comprises:

receiving, by the communications device, response information from the authentication server, wherein the response information indicates that authentication on the terminal fails; and

sending, by the communications device, a registration reject message to the terminal.

8. The method according to claim 1 , wherein the communications device is a session management function (SMF) network element or a mobility management entity (MME); and

wherein determining that the type of the terminal is the UAV comprises:

determining, by the communications device in a session establishment procedure of the terminal, that the type of the terminal is the UAV.

9. The method according to claim 8 , wherein after sending the authentication information of the terminal to the authentication server, the method further comprises:

receiving, by the communications device, response information from the authentication server, wherein the response information indicates that authentication on the terminal fails; and

sending, by the communications device, a session establishment reject message to the terminal.

10. The method according to claim 9 , wherein before sending the authentication information of the terminal to the authentication server, the method further comprises:

selecting, by the communications device, a user plane function (UPF) network element; and

establishing, by the communications device, a first interface between the communications device and the UPF network element, and establishing a second interface between the UPF network element and the authentication server; and

wherein sending the authentication information of the terminal to the authentication server comprises sending, by the communications device, the authentication information of the terminal to the authentication server by using the first interface and the second interface.

11. A device belonging to a core network comprising: a non-transitory memory storage comprising processor-executable instructions; and at least one processor in communication with the non-transitory memory storage, wherein the at least one processor, upon execution of the processor-executable instructions, is configured to:

determine that a type of a terminal is an unmanned aerial vehicle (UAV);

obtain location information of the terminal, wherein the location information includes at least one of a tracking area identity, a cell identifier (ID), a local IP address of the terminal and a user datagram protocol source port number of the terminal; and

send authentication information of the terminal and the location information to an authentication server,

wherein the authentication information is used by the authentication server to perform take-off authentication or flight plan authentication,

wherein the take-off authentication comprises checking whether the location information is a lawful take-off location of the terminal, and

wherein the flight plan authentication comprises checking whether the location information is applicable for executing a flight mission.

12. The device according to claim 11 , wherein the at least one processor is further configured to:

determine, based on subscription information of the terminal that is received from a data management network element, or the type of the terminal that is reported by the terminal, that the type of the terminal is the UAV.

13. The device according to claim 11 , wherein:

the at least one processor is further configured to send a first container and a second container to the authentication server, wherein the first container comprises the authentication information of the terminal, and the second container comprises the location information.

14. The device according to claim 11 , further comprising a transmitter configured to cooperate with the at least one processor to obtain the authentication information of the terminal from the terminal, wherein the authentication information comprises an identifier of the terminal, location information provided by the terminal, or possible flight path information of the terminal.

15. A system comprising a communication device, belonging to a core network, and an authentication server, wherein:

the communication device is configured to determine that a type of a terminal is an unmanned aerial vehicle (UAV), and

receive location information of the terminal, wherein the location information includes at least one of a tracking area identity, a cell identifier (ID), a local IP address of the terminal and a user datagram protocol source port number of the terminal, and

send authentication information of the terminal and the location information to the authentication server,

wherein the authentication information is used by the authentication server to perform take-off authentication or flight plan authentication,

wherein the take-off authentication comprises checking whether the location information is a lawful take-off location of the terminal, and

wherein the flight plan authentication comprises checking whether the location information is applicable for executing a flight mission; and

the authentication server is configured to

receive the authentication information of the terminal and the location information, and

perform the authentication on the terminal based on the authentication information of the terminal and the location information.

16. The system according to claim 15 , wherein the communication device is configured to:

send a first container and a second container to the authentication server, wherein the first container comprises the authentication information of the terminal, and the second container comprises the location information.

17. The system according to claim 15 , wherein the communication device is further configured to:

receive a registration request message from the terminal, wherein the registration request message requests to register the terminal with the core network, the registration request message comprises the authentication information of the terminal, and the authentication information comprises an identifier of the terminal, location information provided by the terminal, or possible flight path information of the terminal;

register the terminal with the core network;

receive response information from the authentication server, wherein the response information indicates that authentication on the terminal fails; and

initiate a deregistration procedure of the terminal.

18. The system according to claim 15 , wherein the communications device is a session management function (SMF) network element or a mobility management entity (MME), and wherein the communication device is configured to:

determine in a session establishment procedure of the terminal, that the type of the terminal is the UAV;

the communication device is further configured to:

receive response information from the authentication server, wherein the response information indicates that authentication on the terminal fails; and

send a session establishment reject message to the terminal.

19. The device according to claim 11 , wherein the at least one processor is further configured to:

receive a registration request message from the terminal, wherein the registration request message requests to register the terminal with the core network, the registration request message comprises the authentication information of the terminal, and the authentication information comprises an identifier of the terminal, location information provided by the terminal, or possible flight path information of the terminal;

register the terminal with the core network;

receive response information from the authentication server, wherein the response information indicates that authentication on the terminal fails; and

initiate a deregistration procedure of the terminal.

20. The device according to claim 11 , wherein the device is a session management function (SMF) network element or a mobility management entity (MME), and the at least one processor is configured to:

determine in a session establishment procedure of the terminal, that the type of the terminal is the UAV;

the at least one processor is further configured to:

receive response information from the authentication server, wherein the response information indicates that authentication on the terminal fails; and

send a session establishment reject message to the terminal.