Registration method and apparatus for registering user equipment
Embodiments of this application relate to a registration method and apparatus to ensure that user equipment does not discard and processes a received authentication request message sent by a target AMF. In the registration method, an initial AMF sends indication information to the UE, or the target AMF sends, to the UE, the authentication request message that includes indication information, where the indication information is used to indicate the UE to delete an NAS security context. The UE deletes the NAS security context, processes the received authentication request message, and sends an authentication response message to the target AMF. Alternatively, the UE directly processes a received authentication request message without security protection, and sends an authentication response message to the target AMF.
1. A registration method, comprising:
determining, by an initial core access and mobility management function (AMF) network element, to perform AMF reallocation; and
sending, by the initial core AMF, a first notification message or a first non-access stratum (NAS) message to user equipment (UE), wherein
the first notification message is used to indicate the UE to delete an NAS security context, or
the first NAS message carries first indication information, and the first indication information is used to indicate the UE to delete the NAS security context.
2. The method according to claim 1 , wherein the first notification message or the first NAS message carries a next generation key set identifier (ngKSI), and the ngKSI is used to indicate the UE to delete the NAS security context corresponding to the ngKSI.
3. The method according to claim 1 , wherein the first NAS message may include any of: a configuration update command, a fifth generation (5G) system mobility management status, or a registration reject message.
4. The method according to claim 1 , wherein the initial core AMF sends second indication information to a target AMF, wherein the second indication information indicates the UE to delete the NAS security context.
5. A registration method, comprising:
receiving, by user equipment (UE), a first notification message, or a first non-access stratum (NAS) message sent by an initial access and mobility management function (AMF), wherein the first NAS message carries first indication information;
deleting, by the UE, the NAS security context based on the first notification message, or the first indication information; and
in association with the UE receiving an authentication request message sent by a target AMF:
processing, by the UE, the authentication request message, and
sending an authentication response message to the target AMF.
6. The method according to claim 5 , wherein
the first notification message or the first NAS message carries a next generation key set identifier (ngKSI), and
deleting the NAS security context based on the indication information comprises:
deleting, by the UE, the NAS security context corresponding to the ngKSI.
7. The method according to claim 5 , wherein the first NAS message may include any of: a configuration update command, a fifth generation (5G) system mobility management status, or a registration reject message.
8. The method according to claim 5 , wherein the authentication response message is sent to the target AMF without security protection.
9. A registration method, comprising:
receiving, by a target core access and mobility management function (AMF) network element, first indication information, wherein the first indication information is used to indicate user equipment (UE) to delete a non-access stratum (NAS) security context;
sending, by the target core AMF based on the first indication information, an authentication request message to the UE, wherein the authentication request message includes the first indication information used to indicate the UE to delete the NAS security context; and
receiving an authentication response message sent by the UE.
10. The method according to claim 9 , wherein receiving, by the target core AMF, the indication information comprises:
receiving, by the target core AMF, a notification message sent by a radio access network (RAN), wherein the notification message carries second indication information, and the second indication information is used to indicate the UE to delete the NAS security context; and
sending, by the target core AMF based on the second indication information, the authentication request message to the UE, wherein the authentication request message includes third indication information used to indicate the UE to delete the NAS security context.
11. The method according to claim 9 , wherein receiving, by the target core AMF, the indication information comprises:
receiving, by the target core AMF, a notification message sent by a radio access network (RAN), wherein the notification message carries second indication information used to indicate the UE to verify the second indication information and delete the NAS security context; and
sending, by the target core AMF based on the second indication information, the authentication request message to the UE, wherein the authentication request message includes the second indication information used to indicate the UE to verify the second indication information and delete the NAS security context.
12. The method according to claim 9 , wherein receiving, by the target core AMF, the indication information comprises:
receiving, by the target core AMF, a complete registration request message sent by a radio access network (RAN); and
sending, by the target core AMF, the authentication request message to the UE based on the complete registration request message, wherein the authentication request message includes the indication information used to indicate the UE to delete the NAS security context.
13. The method according to claim 9 , wherein the target core AMF sending the authentication request message to the UE to indicate the UE to delete the NAS security context comprises:
incorporating, by the target core AMF based on an obtained next generation key set identifier (ngKSI), the ngKSI in the authentication request message, and sending the ngKSI to the UE, wherein the ngKSI is used to indicate the UE to delete the NAS security context corresponding to the ngKSI.
14. A registration method, comprising:
receiving, by user equipment (UE), an authentication request message sent by a target core access and mobility management function (AMF) network element, wherein the authentication request message includes indication information used to indicate the UE to delete a non-access stratum (NAS) security context;
deleting, by the UE, the NAS security context based on the indication information that is included in the authentication request message and that is used to indicate the UE to delete the NAS security context; and
processing, by the UE, the authentication request message, and sending an authentication response message to the target core AMF.
15. The method according to claim 14 , wherein the indication information that is included in the authentication request message and that is used to indicate the UE to delete the NAS security context is second indication information; and
deleting, by the UE, the NAS security context based on the indication information comprises:
deleting, by the UE, the NAS security context based on the second indication information.
16. The method according to claim 15 , wherein the indication information that is included in the authentication request message and that is used to indicate the UE to delete the NAS security context is third indication information; and
deleting, by the UE, the NAS security context based on the indication information comprises:
deleting, by the UE, the NAS security context based on the third indication information.
17. The method according to claim 14 , wherein the indication information that is included in the authentication request message and that is used to indicate the UE to delete the NAS security context is second indication information; and
deleting, by the UE, the NAS security context based on the indication information comprises:
verifying, by the UE, the second indication information, and deleting the NAS security context.
18. The method according to claim 14 , wherein the authentication request message includes a next generation key set identifier (ngKSI); and the UE deleting the NAS security context comprises:
deleting, by the UE based on the ngKSI, the NAS security context corresponding to the ngKSI.