Authentication event processing method, apparatus, and system
Embodiments of this application disclose example authentication event processing methods and apparatuses. One example method includes receiving, by a unified data management network element, a second authentication event processing request from an authentication server network element. The unified data management network element can then query an authentication event corresponding to the second information. The unified data management network element can then process the authentication event. The unified data management network element can then send a third authentication event processing request to a unified data repository network element. The unified data management network element can then receive a third authentication event processing response from the unified data repository network element. The unified data management network element can then send a second authentication event processing response to the authentication server network element.
1 . An authentication event processing method, comprising:
receiving by a unified data management network element, an authentication result confirmation request from an authentication server network element, wherein the authentication result confirmation request comprises a terminal identifier and an authentication event, and the authentication event comprises a serving network name;
storing, by the unified data management network element, the authentication event as an authentication status:
sending, by the unified data management network element, an authentication result confirmation response to the authentication server network element;
receiving, by the unified data management network element, a terminal authentication event confirmation delete request from the authentication server network element, the terminal authentication event confirmation delete request requesting to delete the authentication event, wherein the terminal authentication event confirmation delete request comprises the terminal identifier and the serving network name;
deleting, by the unified data management network element, the authentication event corresponding to the terminal identifier and the serving network name; and
sending, by the unified data management network element, a terminal authentication event confirmation delete response to the authentication server network element.
2 . The method according to claim 1 , wherein the method further comprises:
sending, by the unified data management network element, an authentication event repository request to a unified data repository network element, wherein the authentication event repository request comprises the terminal identifier and the serving network name; and
receiving, by the unified data management network element, an authentication event repository response from the unified data repository network element.
3 . The method according to claim 2 , wherein the authentication event repository response comprises a first authentication event identifier of the authentication event.
4 . The method according to claim 1 , wherein the method further comprises:
querying, by the unified data management network element, the authentication event corresponding to the terminal identifier and the serving network name, after receiving the terminal authentication event confirmation delete request.
5 . The method according to claim 1 , wherein the method further comprises:
sending, by the unified data management network element, a data delete request to a unified data repository network element, wherein the data delete request comprises the terminal identifier and the serving network name; and
receiving, by the unified data management network element, a data delete response from the unified data repository network element.
6 . An authentication event processing method, comprising:
sending, by an authentication server network element, an authentication result confirmation request to a unified data management network element, wherein the authentication result confirmation request comprises a terminal identifier and an authentication event, and the authentication event comprises a serving network name;
receiving, by the unified data management network element, the authentication result confirmation request;
storing, by the unified data management network element, the authentication event as an authentication status;
sending, by the unified data management network element, an authentication result confirmation response to the authentication server network element;
receiving, by the authentication server network element, the authentication result confirmation response;
sending, by the authentication server network element, a terminal authentication event confirmation delete request to the unified data management network element, the terminal authentication event confirmation delete request requesting to delete the authentication event, wherein the terminal authentication event confirmation delete request comprises the terminal identifier and the serving network name;
deleting, by the unified data management network element, the authentication event corresponding to the terminal identifier and the serving network name;
sending, by the unified data management network element, a terminal authentication event confirmation delete processing response to the authentication server network element; and
receiving, by the authentication server network element, the terminal authentication event confirmation delete response.
7 . The method according to claim 5 , wherein the method further comprises:
detecting, by a source mobility management network element, that a terminal moves and registers with a target mobility management network element;
sending, by the source mobility management network element, a context communication service request to the target mobility management network element, wherein the context communication service request comprises an authentication context identifier; and
sending, by the target mobility management network element, a context communication service response to the source mobility management network element.
8 . The method according to claim 5 , wherein the method further comprises:
generating, by the authentication server network element, an authentication context identifier based on at least one of the terminal identifier or the serving network name; and
sending, by the authentication server network element, the authentication context identifier to a mobility management network element.
9 . The method according to claim 6 , wherein the method further comprises:
sending, by the unified data management network element, an authentication event repository request to a unified data repository network element, wherein the authentication event repository request comprises the terminal identifier and the serving network name, or the authentication event repository request comprises the terminal identifier and a first authentication event;
saving, by the unified data repository network element, a correspondence between the terminal identifier and the serving network name or a correspondence between the terminal identifier and the first authentication event; and
receiving, by the unified data management network element, an authentication event repository response from the unified data repository network element.
10 . The method according to claim 6 , wherein the method further comprises:
sending, by the unified data management network element, a data delete request to a unified data repository network element, wherein the data delete request comprises the terminal identifier and the serving network name;
deleting, by the unified data repository network element, the authentication event corresponding to the terminal identifier and the serving network name;
sending, by the unified data repository network element, a data delete response to the unified data management network element; and
receiving, by the unified data management network element, the data delete response.
11 . An authentication event processing apparatus, comprising:
a transceiver;
at least one processor; and
one or more memories coupled to the at least one processor and storing programming instructions for execution by the at least one processor to:
receive, by the transceiver, an authentication result confirmation request from an authentication server network element, wherein the authentication result confirmation request comprises a terminal identifier and an authentication event, and the authentication event comprises a serving network name;
store, by the at least one processor, the authentication event as an authentication status;
send, by the transceiver, an authentication result confirmation response to the authentication server network element;
receive, by the transceiver, a terminal authentication event confirmation delete request from the authentication server network element, the terminal authentication event confirmation delete request requesting to delete the authentication event, wherein the terminal authentication event confirmation delete request comprises the terminal identifier and the serving network name;
delete, by the at least one processor, the authentication event corresponding to the terminal identifier and the serving network name; and
send, by the transceiver, a terminal authentication event confirmation delete response to the authentication server network element.
12 . The apparatus according to claim 11 , the programming instructions are for execution by the at least one processor to:
send, by the transceiver, an authentication event repository request to a unified data repository network element, wherein the authentication event repository request comprises the terminal identifier and the serving network name; and
receive, by the transceiver, an authentication event repository response from the unified data repository network element.
13 . The apparatus according to claim 12 , wherein the authentication event repository response comprises a first authentication event identifier of the authentication event.
14 . The apparatus according to claim 11 , the programming instructions are for execution by the at least one processor to:
send, by the transceiver, a data delete request to a unified data repository network element, wherein the data delete request comprises the terminal identifier and the serving network name; and
receive, by the transceiver, a data delete response from the unified data repository network element.
15 . An authentication event processing system, comprising:
an authentication server network element, configured to send an authentication result confirmation request to a unified data management network element, wherein the authentication result confirmation request comprises a terminal identifier and an authentication event, and the authentication event comprises a serving network name:
the unified data management network element, configured to:
receive the authentication result confirmation request;
store the authentication event as an authentication status; and
send an authentication result confirmation response to the authentication server network element;
the authentication server network element is further configured to send a terminal authentication event confirmation delete request to the unified data management network element, the terminal authentication event confirmation delete request requesting to delete the authentication event, wherein the terminal authentication event confirmation delete request comprises the terminal identifier and the serving network name;
the unified data management network element is further configured to delete the authentication event corresponding to the terminal identifier and the serving network name;
the unified data management network element is further configured to send a terminal authentication event confirmation delete response to the authentication server network element; and
the authentication server network element is further configured to receive the terminal authentication event confirmation delete response.
16 . The system according to claim 15 , wherein the system further comprises:
a source mobility management network element, configured to detect that a terminal moves and registers with a target mobility management network element, wherein
the source mobility management network element is further configured to send a context communication service request to the target mobility management network element, wherein the context communication service request comprises an authentication context identifier; and
the target mobility management network element, configured to send a context communication service response to the source mobility management network element.
17 . The system according to claim 15 , wherein:
the authentication server network element is further configured to generate an authentication context identifier based on at least one of the terminal identifier or the serving network name; and
the authentication server network element is further configured to send the authentication context identifier to a mobility management network element.
18 . The system according to claim 15 , wherein:
the unified data management network element is further configured to send an authentication event repository request to a unified data repository network element, wherein the authentication event repository request comprises fourth information, and the fourth information comprises one or more information comprising at least one of: the terminal identifier, the serving network name, or a second authentication event;
the system further comprises the unified data repository network element configured to store the one or more information in the fourth information; and
the unified data repository network element is further configured to send an authentication event repository response to the unified data management network element.
19 . The system according to claim 18 , wherein:
the unified data repository network element is further configured to generate a second authentication event identifier based on at least one of the terminal identifier or the serving network name; and
the unified data repository network element is further configured to store the second authentication event identifier and the second authentication event, wherein the authentication event repository response comprises the second authentication event identifier.
20 . The system according to claim 15 , wherein the unified data management network element is further configured to send a data delete request to a unified data repository network element, wherein the data delete request comprises the terminal identifier and the serving network name;
the system further comprises the unified data repository network element configured to delete the authentication event corresponding to the terminal identifier and the serving network name; and send a data delete response to the unified data management network element; and
the unified data management network element is further configured to receive the data delete response.