Granted Patent B2

US 12,531,756 · App. 18/029,429 · Granted Jan 20, 2026

Inventors: Chunyan Qian (Shenzhen, CN); Hui Xie (Shenzhen, CN); Lu Zhao (Shenzhen, CN)

Assignee: ZTE CORPORATION

H04L12/06H04L67/141

Abstract

Claims (45)

1 . A session establishment method, applied to an access network device, comprising:

receiving a session request of a user equipment (UE), and sending the session request to a core network device;

receiving a request response message returned by the core network device; wherein the request response message carries a session resource and a security key, and the session resource comprises an IP address allocated by the core network device to the UE and a Session Management Function (SMF) selected by the core network device for the UE;

extracting the session resource from the request response message, and storing the extracted session resource in a cache area; extracting the security key from the request response message, and initiating security activation of an access stratum to the UE based on the security key; and

after confirming that the security activation is successful, sending the session resource stored in the cache area to the UE so that the UE establishes a session based on the session resource;

wherein initiating security activation of an access stratum to the UE comprises: configuring a Data Radio Bearer (DRB) for the session and performing negotiation of access stratum security parameters.

2 . The session establishment method according to claim 1 , wherein after receiving a request response message returned by the core network device and before initiating security activation of an access stratum to the UE, the method further comprises:

detecting whether the request response message carries a security key;

when the request response message carries the security key, then executing the step of initiating the security activation of the access stratum to the UE; when the request response message does not carry the security key, directly sending the session resource to the UE.

3 . The session establishment method according to claim 2 , wherein the step of initiating the security activation of an access stratum to the UE comprises:

sending a security activation command to the UE based on the security key.

4 . The session establishment method according to claim 3 , wherein the session request carries a request identification value for identifying the session request;

the security activation command carries the request identification value so that the UE can confirm that the security activation command is a command for the session request.

5 . An access network device, comprising:

at least one processor;

a memory communicatively coupled to the at least one processor;

the memory stores an instruction executable by the at least one processor, wherein the instruction is executed by the at least one processor, so that the at least one processor execute the session establishment method according to claim 4 .

6 . An access network device, comprising:

at least one processor;

a memory communicatively coupled to the at least one processor;

the memory stores an instruction executable by the at least one processor, wherein the instruction is executed by the at least one processor, so that the at least one processor execute the session establishment method according to claim 3 .

7 . An access network device, comprising:

at least one processor;

a memory communicatively coupled to the at least one processor;

the memory stores an instruction executable by the at least one processor, wherein the instruction is executed by the at least one processor, so that the at least one processor execute the session establishment method according to claim 2 .

8 . A non-transitory computer readable storage medium, storing a computer program, wherein when the computer program is executed by a processor, to perform the session establishment method as claimed in claim 2 .

9 . The session establishment method according to claim 1 , wherein after sending the session resource to the UE, the method further comprises:

returning a request response acknowledgement message to the core network device.

10 . An access network device, comprising:

at least one processor;

a memory communicatively coupled to the at least one processor;

the memory stores an instruction executable by the at least one processor, wherein the instruction is executed by the at least one processor, so that the at least one processor execute the session establishment method according to claim 9 .

11 . A non-transitory computer readable storage medium, storing a computer program, wherein when the computer program is executed by a processor, to perform the session establishment method as claimed in claim 9 .

12 . An access network device, comprising:

at least one processor;

a memory communicatively coupled to the at least one processor;

the memory stores an instruction executable by the at least one processor, wherein the instruction is executed by the at least one processor, so that the at least one processor execute the session establishment method according to claim 1 .

13 . A non-transitory computer readable storage medium, storing a computer program, wherein when the computer program is executed by a processor, to perform the session establishment method as claimed in claim 1 .

14 . A session establishment apparatus, comprising:

a request receiving module, configured to receive a session request from a user equipment (UE);

a forwarding module, configured to send the session request to a core network device;

a response receiving module, configured to receive a request response message returned by the core network device; wherein the request response message carries a session resource and a security key, and the session resource comprises an IP address allocated by the core network device to the UE and a Session Management Function (SMF) selected by the core network device for the UE;

a security activation module, configured to extract the session resource from the request response message, store the extracted session resource in a cache area, extract the security key from the request response message, and initiate a security activation of an access stratum to the UE based on the security key; and

a sending module, configured to send the session resources stored in the cache area to the UE after confirming that the security activation is successful, so that the UE establishes a session based on the session resource;

wherein the security activation module is further configured to configure a Data Radio Bearer (DRB) for the session and perform negotiation of access stratum security parameters.

Assignments (1)

Priority Claims (1)

Continuity (1)

References Cited (31)