Method and device for network slice authentication
View Patent ↗Embodiments of the present application provides a method and device for network slice authentication, which is beneficial to realize an authentication of a terminal device by a third-party server. The method includes: acquiring, by a terminal device, first indication information, where the first indication information is used to indicate whether a third-party server corresponding to at least one network slice needs to perform authentication on the terminal device.
1. An authentication method, comprising:
acquiring, by a terminal device, first indication information, wherein the first indication information is used to indicate whether authentication needs to be performed on the terminal device by a corresponding third-party server for at least one network slice;
wherein the acquiring, by a terminal device, first indication information, comprises:
acquiring, by the terminal device, one or more single network slice selection assistance information (S-NSSAI), wherein the one or more S-NSSAI are used to indicate whether the authentication needs to be performed on the terminal device by the corresponding third-party server for the at least one network slice;
the method further comprises:
determining, by the terminal device, based on the first indication information, that the authentication needs to be performed for a network slice corresponding to a first S-NSSAI, wherein the first S-NSSAI is comprised in the one or more S-NSSAI.
2. The method according to claim 1 , wherein the first indication information is sent to the terminal device by a network device through signaling or through an open mobile alliance (OMA).
3. The method according to claim 1 , wherein the method further comprises:
receiving, by the terminal device, a first registration response message sent by a network device, wherein the first registration response message comprises the first indication information, and the first registration response message is a response message with respect to a first registration request message sent by the terminal device to the network device.
4. The method according to claim 3 , wherein the first registration request message is based on authentication result information.
5. The method according to claim 3 , wherein the first registration response message is based on authentication result information.
6. The method according to claim 5 , wherein the authentication result information comprises authentication successful information.
7. The method according to claim 3 , wherein the first registration response message comprises rejected information for a second S-NSSAI and a rejected reason for the second S-NSSAI.
8. The method according to claim 1 , wherein the terminal device acquires the first indication information from an access and mobility management function (AMF).
9. The method according to claim 1 , wherein the third-party server locates inside a 3rd generation partner project (3GPP) network or outside the 3GPP network.
10. A chip, comprising: a processor, configured to call and run a computer program from a memory to enable a device installed with the chip to execute the method according to claim 1 .
11. An authentication method, comprising:
configuring, by a network device, first indication information for a terminal device, wherein the first indication information is used to indicate whether authentication needs to be performed on the terminal device by a corresponding third-party server for at least one network slice, wherein the first indication information comprises one or more single network slice selection assistance information (S-NSSAI), and the one or more S-NSSAI are used to indicate whether the authentication needs to be performed on the terminal device by the corresponding third-party server for the at least one network slice, wherein the first indication information is sent to the terminal device by the network device.
12. The method according to claim 11 , wherein the first indication information is sent to the terminal device by the network device through signaling or through an open mobile alliance (OMA).
13. The method according to claim 11 , wherein the configuring, by a network device, first indication information for a terminal device, comprises:
receiving, by the network device, a first registration request message sent by the terminal device; and
sending, by the network device, a first registration response message to the terminal device, wherein the first registration response message comprises the first indication information.
14. A terminal device, comprising:
a processor and a memory, wherein the memory is configured to store a computer program, the processor when executing the computer program, being configured to:
acquire first indication information, wherein the first indication information is used to indicate whether authentication needs to be performed on the terminal device by a corresponding third-party server for at least one network slice;
wherein the processor is configured to:
acquire one or more single network slice selection assistance information (S-NSSAI), wherein the one or more S-NSSAI are used to indicate whether the authentication needs to be performed on the terminal device by the corresponding third-party server for the at least one network slice; and determine, based on the first indication information, that the authentication needs to be performed for a network slice corresponding a first S-NSSAI, wherein the first S-NSSAI is comprised in the one or more S-NSSAI.
15. The terminal device according to claim 14 , wherein the first indication information is sent to the terminal device by a network device through signaling or through an open mobile alliance (OMA).
16. The terminal device according to claim 14 , wherein the processor is further configured to:
receive a first registration response message sent by a network device, wherein the first registration response message comprises the first indication information, and the first registration response message is a response message with respect to a first registration request message sent by the terminal device to the network device.
17. The terminal device according to claim 16 , wherein the first registration request message is based on authentication result information.
18. The terminal device according to claim 16 , wherein the first registration response message is based on authentication result information.
19. The terminal device according to claim 18 , wherein the authentication result information comprises authentication successful information.
20. The terminal device according to claim 16 , wherein the first registration response message comprises rejected information for a second S-NSSAI and a rejected reason for the second S-NSSAI.
21. The terminal device according to claim 14 , wherein the terminal device acquires the first indication information from an access and mobility management function (AMF).
22. The terminal device according to claim 14 , wherein the third-party server locates inside a 3rd generation partner project (3GPP) network or outside the 3GPP network.