CN111465001B - Registration method and device - Google Patents

Abstract

The invention discloses a registration method, which comprises the following steps: receiving a registration request message broadcast by a card-free terminal, acquiring a temporary identity and a private network address carried therein, sending a private network address request message carrying the temporary identity to a first SMF, receiving the private network address returned by the first SMF, if the private network address acquired from the registration request message is consistent with the private network address returned by the first SMF and the temporary identity acquired from the registration request message is different from the existing temporary identity, broadcasting a first public network address request message carrying the blockchain identity and the private network address of the card-free terminal in a first blockchain, receiving a first public network address response message broadcast by a first UPF, acquiring the public network address carried therein, establishing and storing a mapping relation among the temporary identity, the private network address and the public network address, signing the mapping relation by using a private key, and broadcasting a distribution message carrying the mapping relation in the first blockchain. Enabling the card-less UE to be addressed when called.

Description

A registration method and device

technical field

The invention relates to the field of communication technology, in particular to a registration method and device.

Background technique

In the prior art, UE (User Equipment, user equipment) such as a mobile terminal relies on SIM (Subscriber Identity Module, subscriber identification card) to normally access the 5G (fifth-generation, fifth-generation mobile phone system) network. In 5G session management, the UE will have a formal network identity, and the 5G session management has a complete calling and addressing process for the UE using the SIM card. However, when the cardless UE accesses the 5G network in a certain way, the network identity of the cardless UE is user-defined. If the SMF (Session Management Function, session management function) is the public network allocated by the cardless UE Address (Internet Protocol Address, Internet Protocol Address) is a private address, then the call cannot be completed.

Contents of the invention

Therefore, the present invention provides a registration method and device to solve the problem in the prior art that the cardless UE cannot be addressed by a call because the network identity of the cardless UE is user-defined.

In order to achieve the above object, the first aspect of the present invention provides a registration method, the method includes:

Receive the registration request message broadcast by the cardless terminal, and obtain the temporary identity and private network address carried in it;

Sending a private network address request message carrying the temporary identity to the first session management function entity SMF, and receiving the private network address returned by the first SMF;

If the private network address obtained from the registration request message is consistent with the private network address returned by the first SMF, and the temporary identity obtained from the registration request message is different from the existing temporary identity, Then broadcast the first public network address request message carrying the block chain identification and private network address of the cardless terminal in the first block chain;

receiving the first public network address response message broadcast by the first user plane functional entity UPF, and obtaining the public network address carried therein;

Establish and store the mapping relationship between the temporary identity, private network address and public network address;

Use the blockchain private key of the device to sign the mapping relationship;

The distribution message carrying the mapping relationship is broadcast in the first block chain.

Preferably, after obtaining the temporary identity and private network address in the registration request, the method further includes:

If the temporary identity obtained from the registration request message is different from the existing temporary identity, broadcast a successful registration message carrying the temporary identity in the first block chain;

After receiving the private network address returned by the first SMF, the method further includes:

If the private network address obtained from the registration request message is consistent with the private network address obtained from the first SMF, establish a correspondence between the temporary identity and the private network address and The relationship is sent to other temporary identity registration servers.

A second aspect of the present invention provides a registration method, the method comprising:

Receive the first public network address request message sent by the first temporary identity registration server, and obtain the block chain identification and private network address of the cardless terminal carried therein;

If it is determined according to the private network address of the card-free terminal that the card-free terminal is within the jurisdiction of the device, broadcast the first public network address carrying the public network address and the block chain identification in the first block chain address response message;

Receive the distribution message broadcast by the first temporary identity registration server, obtain the mapping relationship between the private network address and the public network address carried in it, and store the mapping relationship locally.

A third aspect of the present invention provides a registration method, the method includes:

When receiving the distribution message broadcast by the first temporary identity registration server, query the first blockchain account book according to the block chain identification of the first temporary identity registration server, and obtain the block chain of the first temporary identity registration server public key;

Verify the signature of the distribution message according to the block chain public key of the first temporary identity registration server, and if the verification is passed, obtain the information between the temporary identity, private network address and public network address carried in the distribution message mapping relationship, and record the mapping relationship in the first blockchain ledger.

Preferably, the method also includes:

receiving the registration success message sent by the first temporary identity registration server, and acquiring the temporary identity carried therein;

Recording the sign of successful registration and the temporary identity into the first block chain ledger.

The fourth aspect of the present invention provides a temporary identity registration server, the server includes a receiving module, an acquiring module, a sending module, a judging module, a broadcasting module, a processing module and an encryption module;

The receiving module is used to receive the registration request message broadcast by the cardless terminal, receive the private network address returned by the first SMF, and receive the first public network address response message broadcast by the first user plane functional entity UPF;

The obtaining module is configured to obtain the temporary identity and the private network address carried in the registration request message, and obtain the public network address carried in the first public network address response message;

The sending module is configured to send a private network address request message carrying the temporary identity to the first session management function entity SMF;

The judging module is used to judge whether the private network address obtained from the registration request message is consistent with the private network address returned by the first SMF, and the temporary identity obtained from the registration request message is consistent with the Whether the existing temporary identification is different;

The broadcast module is used for broadcasting in the first block chain the first public network address request message carrying the block chain identification and the private network address of the cardless terminal, and broadcasting in the first block chain carrying the The distribution message of the above mapping relationship;

The processing module is used to establish and store the mapping relationship between the temporary identity, private network address and public network address;

The encryption module is used to sign the mapping relationship with the block chain private key of the device.

Preferably, the broadcast module is further configured to, if the temporary identity obtained from the registration request message is different from the existing temporary identity, broadcast the successful registration carrying the temporary identity in the first block chain information;

The processing module is further configured to, if the private network address obtained from the registration request message is consistent with the private network address obtained from the first SMF, establish a connection between the temporary identity and the private network address corresponding relationship;

The sending module is further configured to send the corresponding relationship to other temporary identity registration servers.

A fifth aspect of the present invention provides a user plane functional entity UPF, where the UPF includes a receiving module, an acquiring module, a judging module, a broadcasting module, and a storage module;

The receiving module is used to receive the first public network address request message sent by the first temporary identity registration server, and receive the distribution message broadcast by the first temporary identity registration server;

The obtaining module is used to obtain the block chain identification and private network address of the cardless terminal carried in the first public network address request message, and to obtain the private network address and the public network address carried in the distribution message. The mapping relationship between;

The judging module is used to determine whether the card-free terminal is within the jurisdiction of the device according to the private network address of the card-free terminal;

The broadcast module is used to, if it is determined according to the private network address of the card-free terminal that the card-free terminal is within the jurisdiction of the device, then broadcast in the first block chain carrying the public network address and the block The first public network address response message identified by the chain;

The storage module is configured to store the mapping relationship locally.

The sixth aspect of the present invention provides an accounting node, the accounting node includes a receiving module, a query module, a verification module, an acquisition module and a recording module;

The receiving module is configured to receive the distribution message broadcast by the first temporary identity registration server;

The query module is configured to, when receiving the distribution message broadcast by the first temporary identity registration server, query the first blockchain account book according to the blockchain identifier of the first temporary identity registration server, and obtain the first temporary identity the public key of the blockchain of the registration server;

The verification module is configured to verify the signature of the distribution message according to the blockchain public key of the first temporary identity registration server;

The obtaining module is configured to, if the verification is passed, obtain the mapping relationship between the temporary identity carried in the distribution message, the private network address and the public network address;

The recording module is configured to record the mapping relationship into the first blockchain ledger.

Preferably, the receiving module is further configured to receive a registration success message sent by the first temporary identity registration server;

The obtaining module is also used to obtain the temporary identity carried in the successful registration message;

The recording module is further configured to record the registration success flag and the temporary identity into the first blockchain ledger.

In the registration method provided by the embodiment of the present invention, Server-A receives the registration request message broadcast by UE-A, obtains the temporary identity and the private network address carried therein, and sends the private network address request message carrying the temporary identity to SMF-A, SMF-A returns the private network address to Server-A, if the private network address obtained by Server-A from the registration request message is consistent with the private network address returned by SMF-A, and the temporary identity identifier obtained from the registration request message Different from the existing temporary identity identifier, the first public network address request message carrying UE-A’s blockchain identifier and private network address is broadcast in blockchain A, and UPF-A receives the first public network address request message And obtain the blockchain ID and private network address of UE-A carried in it, if UPF-A determines that UE-A is within the jurisdiction of the device according to the private network address of UE-A, then broadcast in blockchain A The first public network address response message carrying the public network address and blockchain identifier, Server-A receives the first public network address response message and obtains the public network address carried in it, and establishes and stores the temporary identity, private network address and public network address. The mapping relationship between network addresses, use the blockchain private key of this device to sign the mapping relationship, broadcast the distribution message carrying the mapping relationship in blockchain A, UPF-A receives the distribution message and obtains the private network address carried in it The mapping relationship between the public network address and the public network address is stored locally. The registration method provided by the embodiment of the present invention can register a temporary identity for a cardless UE and establish a mapping relationship between a temporary identity identifier, a private network address, and a public network address, so that both the temporary identity registration server and the user plane functional entity record the The mapping relationship enables the non-card UE to be addressed when being called, improves the communication convenience of the non-card UE, and promotes the development of the non-card UE.

Description of drawings

The accompanying drawings are used to provide a further understanding of the present invention, and constitute a part of the description, together with the following specific embodiments, are used to explain the present invention, but do not constitute a limitation to the present invention.

Figure 1a is a schematic flow diagram of a registration method provided by an embodiment of the present invention;

Fig. 1b is a schematic flow diagram II of the registration method provided by the embodiment of the present invention;

FIG. 2 is a schematic flowchart of a call addressing method provided by an embodiment of the present invention;

FIG. 3 is a schematic structural diagram of a first temporary identity registration server provided by an embodiment of the present invention;

FIG. 4 is a schematic structural diagram of a first UPF provided by an embodiment of the present invention;

FIG. 5 is a schematic structural diagram of an accounting node provided by an embodiment of the present invention.

Detailed ways

Specific embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings. It should be understood that the specific embodiments described here are only used to illustrate and explain the present invention, and are not intended to limit the present invention.

The fifth generation mobile communication technology (5th generation mobile networks, 5G) is the latest generation of cellular mobile communication technology, also known as 4G (The 4th Generation mobile communication technology, the fourth generation mobile communication technology such as LTE-A (Long Term Evolution-Advanced, Long-term evolution technology upgrade version) and WiMax (World Interoperability for Microwave Access, global microwave access interoperability)), 3G (Thethird Generation Mobile Telecommunication, third-generation mobile communication technology such as UMTS (Universal Mobile Telecommunications System, universal mobile telecommunications system) ), LTE (Long Term Evolution, long-term evolution technology)) and 2G (Second Generation, the second generation of mobile communication technology such as GSM (Global System for Mobile Communications, Global System for Mobile Communications, Global System for Mobile Communications)) after the extension of the system. The performance goals of 5G are high data rates, reduced latency, energy savings, cost reductions, increased system capacity, and large-scale device connectivity. The first phase of the 5G specification in Release-15 is to accommodate early commercial deployments. The second phase of Release-16 will be completed in April 2020 and submitted to the International Telecommunication Union (ITU) as a candidate for IMT-2020 (5G) technology. The ITU IMT-2020 specification requires a speed of up to 20Gbit/s, which can achieve wide channel bandwidth and large-capacity MIMO (multiple-in multiple-out, multiple-input-multiple-out).

On October 31, 2019, the three major operators announced 5G commercial packages, and officially launched 5G commercial packages on November 1. 5G mobile networks Like earlier 2G, 3G and 4G mobile networks, 5G networks are digital cellular networks in which a provider's covered service area is divided into many small geographic areas called cells. Analog signals representing sound and images are digitized in the phone, converted by an analog-to-digital converter and transmitted as a bit stream. All 5G wireless devices in the cell communicate via radio waves with the local antenna array and low-power autonomous transceivers (transmitters and receivers) in the cell. Transceivers allocate channels from a common pool of frequencies that can be reused in geographically separated cells. The local antennas are connected to the telephone network and the Internet via high-bandwidth fiber optic or wireless backhaul connections. As with existing cell phones, when a user travels from cell to cell, their mobile device will automatically "switch" to the antenna in the new cell.

The main advantage of 5G networks is that the data transfer rate is much higher than previous cellular networks, up to 10Gbit/s, which is faster than current wired Internet and 100 times faster than previous 4G LTE cellular networks. Another advantage is lower network latency (faster response time), below 1 millisecond compared to 30-70 milliseconds for 4G. Because of faster data transmission, 5G networks will not only serve mobile phones, but also become a general home and office network provider, competing with cable network providers. Previous cellular networks provided low-data-rate Internet access suitable for cell phones, but a single cell phone tower could not economically provide enough bandwidth to serve as a general Internet provider for a home computer.

In 5G, services such as audio, video, and images for large-scale users will increase rapidly, and the explosive growth of network traffic will greatly affect the quality of service for users to access the Internet. How to effectively distribute high-traffic business content and reduce the time delay for users to obtain information has become a major problem for network operators and content providers. Just relying on increasing bandwidth cannot solve the problem, it is also affected by factors such as routing congestion and delay in transmission, the processing capacity of the website server, etc. The occurrence of these problems is closely related to the distance between user servers.

Aiming at the problem in the prior art that a UE without a card cannot be addressed by a call, an embodiment of the present invention provides a registration method, and the system applied by the method includes: the first blockchain network (blockchain network) of operator A A) and operator B's second blockchain network (blockchain B). Block chain A includes the called terminal UE-A, the first session management function entity SMF-A (Session Management Function, SMF), the first temporary identity registration server Server-A, the first user plane function entity UPF (User Plane Function ), node C, node D and accounting node. Blockchain B includes the calling terminal UE-B, the second session management function entity SMF-B (Session Management Function, SMF), the second temporary identity registration server Server-B, node C and node D. Among them, node C and node D are public nodes in blockchain A and blockchain B.

As shown in Figure 1a, the registration method provided by the embodiment of the present invention may include the following steps in the stage of registering a temporary identity for a UE without a card (i.e. UE-A):

Step 1, Server-A receives the registration request message broadcast by UE-A, and obtains the temporary identity and private network address carried in it.

In this step, when UE-A registers a temporary identity on Server-A, UE-A signs the registration request message with its own private key, and then broadcasts the registration request message in blockchain A. The registration request message carries a UE-A self-defined temporary identity, and the temporary identity includes a terminal identifier and a private IP (Internet Protocol, Internet Protocol) address. After receiving the registration request message broadcast by UE-A, Server-A can verify the signature of the registration request message according to UE-A's public key, and if the verification passes, it can obtain the temporary identity and private network address carried in it.

Step 2, Server-A sends a private network address request message carrying a temporary identity to SMF-A.

In this step, Server-A may send a private network address request message carrying UE-A's temporary identity to SMF-A, so as to query the private network address allocated by SMF-A to UE-A.

It should be noted that Server-A can also determine UE-A's Subscription Concealed Identifier (SUCI) or Globally Unique Temporary UE Identity (GUTI) according to UE-A's temporary identity. , further sending a private network address request message to SMF-A according to the SUCI or GUTI of UE-A, so as to obtain the private network address allocated to UE-A by SMF-A according to the temporary identity.

Step 3, SMF-A returns the private network address to Server-A.

Step 4, if the private network address obtained by Server-A from the registration request message is consistent with the private network address returned by SMF-A, and the temporary identity obtained from the registration request message is different from the existing temporary identity, Then broadcast the first public network address request message carrying UE-A's blockchain identifier and private network address in blockchain A.

In this step, Server-A compares the private network address obtained from the registration request message with the private network address returned by SMF-A, and compares the temporary identity obtained from the registration request message with the existing temporary identity , if the private network address obtained from the registration request message is consistent with the private network address returned by SMF-A, and the temporary identity obtained from the registration request message is different from the existing temporary identity, then use the device's The private key signs the first public network address request message carrying UE-A's blockchain identifier and private network address, and then broadcasts the first public network address request message in blockchain A.

Step 5, UPF-A receives the first public network address request message and obtains the UE-A's blockchain ID and private network address carried therein.

In this step, after UPF-A receives the first public network address request message, it verifies the signature of the first public network address request message according to the public key of Server-A, and if the verification passes, obtains the signature in the first public network address request message. The blockchain ID and private network address of UE-A carried.

Step 6, if UPF-A determines that UE-A is within the jurisdiction of the device according to UE-A's private network address, broadcast the first public network address carrying the public network address and blockchain identifier in blockchain A Respond to the message.

In this step, UPF-A determines whether UE-A is within its own jurisdiction based on the IP address network segment information and UE-A's private network address. If so, it can use its own private key pair to carry the public network address Sign the response message with the first public network address identified by the block chain, and then broadcast the first public network address response message in the block chain A.

It should be noted that the public network address carried in the first public network address response message may be in the form of a public network address pool.

Step 7, Server-A receives the first public network address response message and acquires the public network address carried therein.

In this step, after Server-A receives the first public network address response message sent by UPF-A, it verifies the signature of the first public network address response message according to the public key of UPF-A. If the verification passes, it can obtain The public network address carried in it.

Step 8, Server-A establishes and stores the mapping relationship between the temporary identity, private network address and public network address.

In this step, Server-A may map the public network address returned by UPF-A with UE-A's temporary identity and private network address. It should be noted that if UPF-A returns a public network address pool, Server-A can take a public network address from the public network address pool and make a mapping with UE-A's temporary identity and private network address. If the number of public network addresses is insufficient, the port number may also be included in the mapping relationship. Then store the mapping relationship locally.

Step 9, Server-A uses the blockchain private key of the device to sign the mapping relationship.

Step 10, Server-A broadcasts the distribution message carrying the mapping relationship in blockchain A.

Step 11, UPF-A receives the distribution message and obtains the mapping relationship between the private network address and the public network address carried in it, and stores the mapping relationship locally.

In this step, after UPF-A receives the distribution message sent by Server-A, it can verify the signature of the distribution message according to Server-A's blockchain public key. If the verification is passed, it can obtain UE-A carried in the distribution message. The mapping relationship between the temporary identity, the private network address and the public network address, and then store the mapping relationship locally. If UE-A is subsequently called, the call request can be forwarded to the private network address of UE-A according to the mapping relationship.

It can be seen from the above steps 1-11 that in the registration method provided by the embodiment of the present invention, Server-A receives the registration request message broadcast by UE-A, obtains the temporary identity and private network address carried in it, and sends the message carrying the registration request to SMF-A. The private network address request message of the temporary identity identifier, SMF-A returns the private network address to Server-A, if the private network address obtained by Server-A from the registration request message is consistent with the private network address returned by SMF-A, and from If the temporary identity obtained in the registration request message is different from the existing temporary identity, the first public network address request message carrying UE-A’s blockchain identity and private network address is broadcast in blockchain A, UPF -A receives the first public network address request message and obtains UE-A’s blockchain ID and private network address carried in it, if UPF-A determines that UE-A is within the jurisdiction of the device based on UE-A’s private network address In the block chain A, broadcast the first public network address response message carrying the public network address and the blockchain identifier, Server-A receives the first public network address response message and obtains the public network address carried in it, establishes and Store the mapping relationship between temporary identity, private network address and public network address, use the blockchain private key of this device to sign the mapping relationship, and broadcast the distribution message carrying the mapping relationship in blockchain A, UPF-A receives Distribute the message and obtain the mapping relationship between the private network address and the public network address carried in it, and store the mapping relationship locally. The registration method provided by the embodiment of the present invention can register a temporary identity for a cardless UE and establish a mapping relationship between a temporary identity identifier, a private network address, and a public network address, so that both the temporary identity registration server and the user plane functional entity record the The mapping relationship enables the non-card UE to be addressed when being called, improves the communication convenience of the non-card UE, and promotes the development of the non-card UE.

In some embodiments, as shown in Figure 1b, after step 10, the registration method provided by the embodiment of the present invention may further include the following steps:

Step 11', when the bookkeeping node receives the distribution message broadcast by Server-A, it queries the account book of blockchain A according to the blockchain identifier of Server-A, and obtains the public key of the blockchain of Server-A.

Step 12', the bookkeeping node verifies the signature of the distribution message according to Server-A's blockchain public key, and if the verification is passed, obtains the mapping relationship between the temporary identity, the private network address and the public network address carried in the distribution message , and record the mapping relationship into the blockchain A ledger.

In this step, if the bookkeeping node verifies the signature of the distribution message successfully, it will obtain the mapping relationship between the temporary identity, the private network address and the public network address carried in it, and then record the mapping relationship in the new block, and then Recorded in the blockchain ledger, it is convenient for other network element devices to query the public network address in the blockchain A ledger according to the temporary identity or terminal identifier.

From the above steps 11'-12', it can be seen that when the bookkeeping node receives the distribution message broadcast by Server-A, it queries the ledger of blockchain A according to the blockchain identifier of Server-A, and obtains the blockchain of Server-A Public key, verify the signature of the distribution message according to the blockchain public key of Server-A, if the verification is passed, obtain the mapping relationship between the temporary identity carried in the distribution message, the private network address and the public network address, and map The relationship is recorded in the blockchain A ledger. The registration method provided by the embodiment of the present invention can enable the accounting node to record the mapping relationship into the blockchain account book, so that other network element devices can query the address in the blockchain account book according to the temporary identity of the UE without a card, and improve the efficiency. It improves the communication convenience of cardless UE and promotes the development of cardless UE.

In some embodiments, after step 1, the registration method may further include the following steps: if the temporary identity obtained by Server-A from the registration request message is different from the existing temporary identity, then in the block chain A broadcasts a registration success message carrying a temporary identity.

In this step, Server-A can query the ledger of blockchain A to determine whether the temporary identity in the registration request message is the same as the existing temporary identity. If not, use its own private key pair to carry the temporary identity Sign the successful registration message, and then broadcast the successful registration message in blockchain A.

In some embodiments, after step 3, the registration method may also include the following steps: if Server-A judges that the private network address obtained from the registration request message is consistent with the private network address obtained from SMF-A , the corresponding relationship between the temporary identity identifier and the private network address is established and the corresponding relationship is sent to other temporary identity registration servers.

In this step, if the public network address assigned by SMF-A to UE-A is consistent with the public network address in the registration request message, Server-A can establish the correspondence between UE-A's temporary identity and the public network address relationship, and send the corresponding relationship to other temporary identity registration servers in blockchain A.

It should be noted that there can be multiple operators’ blockchain networks in the entire 5G network, and each blockchain network can have one or more temporary identity registration servers, that is to say, there can be multiple operators in the entire 5G network. Server, each server presents a star topology network connection, and each server can synchronize the correspondence between the temporary identity of the 5G cardless terminal and the private network address in real time.

In some embodiments, after Server-A broadcasts the registration success message in blockchain A, the registration method may further include the following steps: the accounting node receives the registration success message sent by Server-A, and obtains the temporary Identity mark, record the successful registration mark and temporary identity mark in the block chain A ledger.

In this step, after the billing node receives the successful registration message sent by Server-A, it verifies the signature of the successful registration message according to the public key of Server-A. If the verification is successful, it obtains the temporary identity carried in the successful registration message, and then Record the successful registration sign and the temporary identity into the new block, and then record it into the blockchain A ledger.

As shown in Figure 2, the embodiment of the present invention also provides a call addressing method, which may include the following steps at the stage where the cardless UE (i.e. UE-A) is called by UE-B:

Step 21, SMF-B receives the call request.

In this step, when UE-B in blockchain B calls UE-A in blockchain A, the call request is first forwarded to SMF-B in blockchain B.

Step 22, if SMF-B judges that the called number carried in the call request is a non-standard number, then broadcast the second public network address request message carrying the called number in blockchain B, and the called number is the called party's Temporary ID.

In this step, the called number is carried in the call request. When SMF-B recognizes that the called number is a temporary identity, it means that the called end is a UE without a card, and then SMF-B initiates a request in blockchain B , to request the public network address corresponding to the temporary identity. Specifically, SMF-B uses its own private key to sign the second public network address request message carrying UE-A's temporary identity, and then broadcasts the second public network address request message in blockchain B.

Step 23, Server-B receives the second public network address request message broadcast by SMF-B, and obtains the temporary identity carried therein.

In this step, after Server-B in blockchain B receives the second public network address request message broadcast by SMF-B, it first queries the ledger of blockchain B according to the blockchain identifier of SMF-B, and obtains the SMF- B's public key, and then use the public key of SMF-B to verify the private key signature of the second public network address request message, and if the verification is passed, obtain the temporary UE-A carried in the second public network address request message identification.

The embodiment of the present invention utilizes the traceability of the blockchain ledger and the security mechanism of the public and private key authentication of the blockchain to ensure the authenticity of the identity of each communication node and ensure the safety and reliability of communication.

Step 24, if Server-B does not obtain the corresponding public network address locally according to the temporary identity, broadcast the third public network address request message carrying the temporary identity in blockchain B.

In some embodiments, Server-B locally queries the first blockchain ledger according to the temporary identity to obtain the public network address corresponding to the temporary identity. Specifically, Server-B can query the public network address of UE-A in the account book of blockchain B according to the temporary identity of UE-A. If the public network address corresponding to the temporary identity is not found, it means that UE-A does not belongs to the operator B to which UE-B belongs, then Server-B uses its own private key to sign the third public network address request message carrying UE-A's temporary identity, and then broadcasts the third public network address request message in blockchain B. Public network address request message.

Step 25, Node C receives the third public network address request message broadcast by Server-B and obtains the temporary identity therein.

In this step, since node C is a public node of blockchain A and blockchain B, node C can receive the third public network address request message broadcast by Server-B. After receiving the third public network address request message broadcast by Server-B, node C queries the ledger of blockchain B according to the blockchain identifier of Server-B, obtains the public key of Server-B, and uses the public key of Server-B Verifying the private key signature of the third public network address request message. If the verification is passed, node C obtains the temporary identity in the third public network address request message.

Step 26, node C broadcasts the fourth public network address request message carrying the temporary identity in blockchain A.

In the step, since node C is a public node in blockchain B and blockchain A, node C has a public key-private key pair in blockchain B and blockchain A respectively. Node C uses its own private key in blockchain A to sign the fourth public network address request message carrying UE-A's temporary identity, and then broadcasts the fourth public network address request message in blockchain A.

Step 27, Server-A receives the fourth public network address request message broadcast by node C and obtains the temporary identity carried in it.

In this step, after Server-A in blockchain A receives the fourth public network address request message broadcast by node C, it queries the account book of blockchain A according to the blockchain identifier of node C, and obtains that node C is in the block The public key in chain A uses the public key of node C in blockchain A to verify the private key signature of the fourth public network address request message. If the verification is passed, Server-A obtains the fourth public network address request message temporary identity.

Step 28, Server-A queries the ledger of blockchain A according to the temporary identity, and obtains the public network address corresponding to the temporary identity.

In this step, if UE-A successfully registers the temporary identity at Server-A, the account book of Server-A's local blockchain A will record UE-A's temporary identity, private network address and public network address mapping relationship between them. Server-A can query the ledger of blockchain A according to the temporary identity of UE-A, and obtain the public network address of UE-A.

Step 29, Server-A broadcasts the second public network address response message carrying the public network address in blockchain A.

In this step, after Server-A obtains UE-A's public network address, it uses its own private key to sign the second public network address response message carrying UE-A's public network address, and then A broadcasts the second public network address response message.

Step 30, Node D receives the second public network address response message broadcast by Server-A and obtains the public network address therein.

In this step, since node D is a common node in blockchain A and blockchain B, node D can receive the second public network address response message broadcast by Server-A. After receiving the second public network address response message broadcast by Server-A, node D queries the ledger of blockchain A according to Server-A's blockchain identifier, and obtains the public key of Server-A to the second public network address response message. The private key signature is verified, and if the verification is passed, node D obtains the public network address in the second public network address response message.

Step 31, node D broadcasts the third public network address response message carrying the public network address in blockchain B.

In this step, since node D is a public node in blockchain A and blockchain B, node D has its own public key-private key pair in blockchain A and blockchain B respectively. Node D uses its private key in blockchain B to sign the third public network address response message carrying UE-A's public network address, and then broadcasts the third public network address response message in blockchain B.

Step 32, SMF-B receives the third public network address response message broadcast by node D and obtains the public network address therein, and forwards the call request to UPF-A according to the public network address.

In this step, after receiving the third public network address response message broadcast by node D, SMF-B in blockchain B queries the account book of blockchain B according to the blockchain identifier of node D, and obtains The public key in chain B uses the public key of node D in blockchain B to verify the private key signature of the third public network address response message. If the verification is passed, the public key in the third public network address response message is obtained. network address, and initiate a call to the public network address.

Step 33: After receiving the call request, UPF-A obtains the public network address carried therein, queries the mapping relationship between UE-A's private network address and public network address stored locally, and obtains UE-A's private network address.

In this step, if UE-A successfully registers the temporary identity at Server-A, UPF-A locally stores the mapping relationship between UE-A's private network address and public network address. Server-A can query the mapping relationship according to the public network address of UE-A, and obtain the private network address of UE-A.

Step 34, UPF-A forwards the call request to the private network address of UE-A.

In this step, UPF-A forwards the call request to the private network address of UE-A, and thus completes the addressing process for UE-B to call UE-A.

As can be seen from the above steps 21-34, in the call addressing method provided by the embodiment of the present invention, SMF-B receives the call request, if it is judged that the called number in the call request, that is, the temporary identity, is a non-standard number, then in the area The second public network address request message carrying the called number is broadcast in the block chain B. After receiving the message, Server-B obtains the temporary identity in it. If the public network address is not obtained locally based on the temporary identity, it will B broadcasts the third public network address request message carrying the temporary identity, and Server-A receives the fourth public network address request message broadcast by node C in blockchain A to obtain the temporary identity and query it according to the temporary identity Blockchain A account book obtains the public network address, and broadcasts the second public network address response message carrying the public network address in blockchain A. After receiving the message, node D obtains the public network address and sends it to blockchain B. The middle broadcasts the third public network address response message carrying the public network address. After receiving the message, SMF-B obtains the public network address in it and forwards the call request to UPF-A according to the public network address. UPF-A obtains the call request after receiving the call request. The carried public network address, query the mapping relationship between UE-A's private network address and public network address stored locally, get UE-A's private network address, UPF-A forwards the call request to UE-A's private network address. The registration method provided by the embodiment of the present invention can make the block chain A account book and UPF-A locally record the mapping relationship between UE-A's temporary identity, public network address and private network address, so that the cardless UE When the identity is customized, the cardless UE is provided with the ability to be addressed when being called, which improves the communication convenience of the cardless UE and promotes the development of the cardless UE.

Based on the same inventive concept, the embodiment of the present invention also provides a temporary identity registration server. As shown in FIG. module 106 and encryption module 107.

The receiving module 101 is configured to receive the registration request message broadcast by the cardless terminal, receive the private network address returned by the first SMF, and receive the first public network address response message broadcast by the first user plane functional entity UPF.

The obtaining module 102 is configured to obtain the temporary identity and the private network address carried in the registration request message, and obtain the public network address carried in the first public network address response message.

The sending module 103 is configured to send the private network address request message carrying the temporary identity to the first session management function entity SMF.

The judging module 104 is used to judge whether the private network address obtained from the registration request message is consistent with the private network address returned by the first SMF, and whether the temporary identity obtained from the registration request message is consistent with the existing temporary identity Is the ID different.

The broadcast module 105 is used for broadcasting in the first block chain the first public network address request message carrying the block chain identification and the private network address of the cardless terminal, and broadcasting in the first block chain the distribution message carrying the mapping relationship. information.

The processing module 106 is configured to establish and store the mapping relationship between the temporary identity, the private network address and the public network address.

The encryption module 107 is used to sign the mapping relationship with the blockchain private key of the device.

In some embodiments, the broadcast module 105 is further configured to broadcast the successful registration carrying the temporary identity in the first block chain if the temporary identity obtained from the registration request message is different from the existing temporary identity information.

The processing module 106 is further configured to, if the private network address obtained from the registration request message is consistent with the private network address obtained from the first SMF, establish a correspondence between the temporary identity and the private network address.

The sending module 103 is also configured to send the correspondence to other temporary identity registration servers.

The embodiment of the present invention also provides a user plane functional entity UPF. As shown in FIG.

The receiving module 201 is configured to receive the first public network address request message sent by the first temporary identity registration server, and receive the distribution message broadcast by the first temporary identity registration server.

The acquiring module 202 is configured to acquire the block chain identifier and the private network address of the cardless terminal carried in the first public network address request message, and obtain the mapping relationship between the private network address and the public network address carried in the distribution message.

The judging module 203 is used to determine whether the cardless terminal is within the jurisdiction of the device according to the private network address of the cardless terminal.

The broadcast module 204 is used to, if it is determined according to the private network address of the card-free terminal that the card-free terminal is within the jurisdiction of the device, broadcast the first public network address carrying the public network address and the block chain identifier in the first block chain. Address response message.

The storage module 205 is configured to store the mapping relationship locally.

The embodiment of the present invention also provides an accounting node. As shown in FIG.

The receiving module 301 is configured to receive the distribution message broadcast by the first temporary identity registration server.

The query module 302 is used to, when receiving the distribution message broadcast by the first temporary identity registration server, query the first blockchain account book according to the blockchain identification of the first temporary identity registration server, and obtain the block of the first temporary identity registration server The public key of the chain.

The verification module 303 is configured to verify the signature of the distribution message according to the blockchain public key of the first temporary identity registration server.

The obtaining module 304 is configured to, if the verification is passed, obtain the mapping relationship between the temporary identity carried in the distribution message, the private network address, and the public network address.

The recording module 305 is configured to record the mapping relationship into the first blockchain ledger.

In some embodiments, the receiving module 301 is further configured to receive a registration success message sent by the first temporary identity registration server.

The obtaining module 304 is also used to obtain the temporary identity carried in the successful registration message

The recording module 305 is also configured to record the registration success flag and the temporary identity into the first blockchain ledger.

It can be understood that, the above embodiments are only exemplary embodiments adopted for illustrating the principle of the present invention, but the present invention is not limited thereto. For those skilled in the art, various modifications and improvements can be made without departing from the spirit and essence of the present invention, and these modifications and improvements are also regarded as the protection scope of the present invention.

Claims (6)

1. A registration method, the method further comprising:

Receiving a registration request message broadcast by a card-free terminal, and acquiring a temporary identity and a private network address carried in the registration request message;

sending a private network address request message carrying the temporary identity to a first session management function entity (SMF), and receiving a private network address returned by the first SMF;

if the private network address obtained from the registration request message is consistent with the private network address returned by the first SMF, and the temporary identity obtained from the registration request message is different from the existing temporary identity, broadcasting a first public network address request message carrying the blockchain identity and the private network address of the card-free terminal in a first blockchain;

receiving a first public network address response message broadcast by a first user plane function entity UPF, and acquiring a public network address carried in the first public network address response message;

establishing and storing a mapping relation among the temporary identity, the private network address and the public network address;

signing the mapping relation by using a blockchain private key of the equipment;

and broadcasting a distribution message carrying the mapping relation in the first block chain.

2. The method of claim 1, wherein after the acquiring the temporary identity and the private network address carried therein, the method further comprises:

If the temporary identity obtained from the registration request message is different from the existing temporary identity, broadcasting a registration success message carrying the temporary identity in a first block chain;

after receiving the private network address returned by the first SMF, the method further includes:

if the private network address obtained from the registration request message is consistent with the private network address obtained from the first SMF, establishing a corresponding relation between the temporary identity and the private network address and sending the corresponding relation to other temporary identity registration servers.

3. A method of registration, the method comprising:

receiving a first public network address request message sent by a first temporary identity registration server, and acquiring a blockchain identifier and a private network address of a card-free terminal carried in the first public network address request message, wherein the first public network address request message is a message broadcast in a first blockchain under the condition that the private network address acquired from the registration request message broadcasted by the card-free terminal is consistent with the private network address returned by a first SMF (integrated subscriber identity module), and the temporary identity acquired from the registration request message is different from the existing temporary identity identifier, and the first SMF returns to the private network address after receiving the private network address request message carrying the temporary identity identifier sent by the first temporary identity registration server;

If the card-free terminal is determined to be within the jurisdiction of the device according to the private network address of the card-free terminal, broadcasting a first public network address response message carrying a public network address and a block chain identifier in a first block chain;

and receiving a distribution message broadcast by the first temporary identity registration server, acquiring a mapping relation between a private network address and a public network address carried in the distribution message, and locally storing the mapping relation.

4. The temporary identity registration server is characterized by comprising a receiving module, an acquisition module, a sending module, a judging module, a broadcasting module, a processing module and an encryption module;

the receiving module is used for receiving a registration request message broadcast by the card-free terminal, receiving a private network address returned by the first SMF, and receiving a first public network address response message broadcast by the first user plane functional entity UPF;

the acquisition module is used for acquiring the temporary identity and the private network address carried in the registration request message and acquiring the public network address carried in the first public network address response message;

the sending module is used for sending a private network address request message carrying the temporary identity to the first session management function entity SMF;

The judging module is used for judging whether the private network address obtained from the registration request message is consistent with the private network address returned by the first SMF or not, and whether the temporary identity obtained from the registration request message is different from the existing temporary identity or not;

the broadcasting module is used for broadcasting a first public network address request message carrying the blockchain identifier and the private network address of the card-free terminal in a first blockchain and broadcasting a distribution message carrying a mapping relation in the first blockchain;

the processing module is used for establishing and storing the mapping relation among the temporary identity, the private network address and the public network address;

the encryption module is used for signing the mapping relation by using a blockchain private key of the equipment.

5. The server according to claim 4, wherein the broadcasting module is further configured to broadcast a registration success message carrying a temporary identity in a first blockchain if the temporary identity obtained from the registration request message is different from an existing temporary identity;

the processing module is further configured to establish a correspondence between the temporary identity and a private network address if the private network address obtained from the registration request message is consistent with the private network address obtained from the first SMF;

The sending module is further configured to send the correspondence to other temporary identity registration servers.

6. The user plane function entity UPF is characterized by comprising a receiving module, an obtaining module, a judging module, a broadcasting module and a storage module;

the receiving module is configured to receive a first public network address request message sent by a first temporary identity registration server, and receive a distribution message broadcast by the first temporary identity registration server, where the first public network address request message is a message broadcast in a first blockchain in the case that a private network address obtained from a registration request message broadcast by a card-free terminal is consistent with a private network address returned by a first SMF, and a temporary identity obtained from the registration request message is different from an existing temporary identity, and the first SMF returns to the private network address after receiving the private network address request message carrying the temporary identity sent by the first temporary identity registration server;

the obtaining module is used for obtaining the blockchain identifier and the private network address of the card-free terminal carried in the first public network address request message and obtaining the mapping relationship between the private network address and the public network address carried in the distribution message;

The judging module is used for determining whether the card-free terminal is in the jurisdiction of the equipment according to the private network address of the card-free terminal;

the broadcasting module is used for broadcasting a first public network address response message carrying a public network address and a block chain identifier in a first block chain if the card-free terminal is determined to be in the jurisdiction of the device according to the private network address of the card-free terminal;

the storage module is used for locally storing the mapping relation.

Images