WO2019213856A1

WO2019213856A1 - Method and apparatus for configuring drb integrity protection, and computer storage medium

Info

Publication number: WO2019213856A1
Application number: PCT/CN2018/086107
Authority: WO
Inventors: 杨宁
Original assignee: Oppo广东移动通信有限公司
Priority date: 2018-05-09
Filing date: 2018-05-09
Publication date: 2019-11-14
Also published as: CN111512659A; CN111512659B

Abstract

Disclosed is a method and an apparatus for configuring DRB integrity protection, and a computer storage medium. The method comprises: a base station acquiring security policy information and priority information of a PDU session configured by a network element of a first core network, the security policy information comprising an indication parameter of a DRB IP corresponding to the PDU session, the priority information being used to indicate a priority of the DRB IP corresponding to the PDU session; the base station acquiring first UE capability information of a terminal, the first UE capability information comprising an aggregated data rate capability threshold value regarding the DRB IP requested by the terminal; and the base station determining, according to the first UE capability information, the security policy information and priority information of each PDU session corresponding to the terminal, whether to configure a DRB IP function.

Description

DRB integrity protection configuration method and device, computer storage medium

Technical field

The present invention relates to the field of wireless communication technologies, and in particular, to a data bearer (DRB) integrity protection configuration method and apparatus, and a computer storage medium.

Background technique

In order to meet people's pursuit of business speed, delay, high-speed mobility, energy efficiency, and the diversity and complexity of business in the future, the 3rd Generation Partnership Project (3GPP) International Standards Organization began to develop Five (5G, 5 ^th Generation) mobile communication technology.

The main application scenarios of 5G mobile communication technologies are: enhanced mobile broadband (eMBB), low latency and high reliability communication (URLLC, Ultra Reliable Low Latency Communication), and large-scale machine type communication (mMTC, massive machine type communication). ).

5G mobile communication technology is also called Next Generation Wireless Communication Technology (NR, New Radio). When NR was deployed early, complete NR coverage is difficult to achieve, so the typical network coverage is Long Term Evolution (LTE) coverage and Combination of NR coverage. In addition, in order to protect the mobile operator's previous investment in LTE, a tight interworking mode between LTE and NR is proposed. In addition, NR cells can also be deployed independently.

In LTE, there is no need for integrity protection for the DRB, but the need for integrity protection for the DRB is added to the NR, for which each Packet Data Convergence Protocol (PDCP) service data unit (SDU) , Service Data Unit) must carry an integrity protection check code (MAC-I) for integrity protection check.

As shown in Figure 1, the session management function (SMF) configures the security policy information of the PDU session when the protocol data unit (PDU) session is established. This information indicates the current PDU session. The requirements for DRB Integrity Protection (DRB IP, DRB Integrity Protection) are {required, preferred, not needed}. The SMF determines the security policy when the final PDU session is established based on subscription data from Unified Data Management (UDM) or a locally configured security policy. The next generation base station (gNB, next generation NodeB) determines whether to configure each DRB to use the DRB IP function according to security policy information from the Core Access and Mobility Management Function (AMF). Here, the security policy indication of the PDU session means that the gNB must configure the DRB IP function. The preferred means that the SMF tends to configure the DRB IP function but depends on the gNB. Not needed means no need Configure the DRB IP function. At the same time, in order to ensure the performance of the UE, a UE capability is defined, which specifies an aggregation rate threshold of the DRB that allows all DRB IP functions that are configured to be configured to the UE (ie, cannot exceed this threshold). Therefore, the gNB needs to decide how to select the DRB to configure the DRB IP function.

Summary of the invention

To solve the above technical problem, an embodiment of the present invention provides a configuration method and device for DRB integrity protection, and a computer storage medium.

The configuration method of the DRB integrity protection provided by the embodiment of the present invention includes:

The base station acquires the security policy information and the priority information of the PDU session configured by the first core network element, where the security policy information includes an indication parameter of the DRB IP corresponding to the PDU session, and the priority information is used to indicate the PDU. The priority of the DRB IP corresponding to the session;

The base station acquires first UE capability information of the terminal, where the first UE capability information includes an aggregate data rate capability threshold value of the DRB IP required by the terminal;

The base station determines whether to configure the DRB IP function according to the first UE capability information, the security policy information and the priority information of each PDU session corresponding to the terminal.

In an embodiment, the determining, by the base station, whether the DRB IP function is configured, according to the first UE capability information, and the security policy information and the priority information of each PDU session corresponding to the terminal, includes:

Determining, by the base station, the first aggregated data rate of the quality of service (QOS Quality Of Service) flow corresponding to the PDU session of the first parameter, according to the security policy information of each PDU session corresponding to the terminal, The first parameter is used to indicate that the DRB IP function needs to be configured.

If the first aggregated data rate is greater than the aggregated data rate capability threshold, the base station determines whether to configure the DRB IP function for each PDU session according to the priority information of each PDU session corresponding to the terminal.

In an embodiment, the method further includes:

For determining the first PDU session in which the DRB IP function cannot be configured, the base station sends first feedback information to the first core network network element, where the first feedback information is used to notify the first core network element The first PDU session cannot configure the DRB IP function.

In an embodiment, the method further includes:

For determining a first PDU session in which the DRB IP function cannot be configured, the base station does not configure a DRB IP function for the first PDU session;

For determining a second PDU session capable of configuring a DRB IP function, the base station configures a DRB IP function for the second PDU session.

Determining, by the base station, the first aggregation data rate of the QOS flow corresponding to the PDU session of the first parameter according to the security policy information of each PDU session corresponding to the terminal, where the first parameter is used to indicate the need Configure the DRB IP function.

If the first aggregated data rate is less than or equal to the aggregated data rate capability threshold, the base station indicates that the DRB IP indication parameter is a DRB IP function for all PDU sessions of the first parameter.

Determining, by the base station, the third PDU session in which the indication parameter of the DRB IP is the second parameter according to the security policy information of the PDU session corresponding to the terminal, where the second parameter is used to indicate that the DRB IP function is recommended to be configured;

For each third PDU session in which the indication parameter of the DRB IP is the second parameter, the base station determines, according to the priority information of the respective third PDU session, the first UE capability information, and the local policy, Whether the DRB IP function is configured for the three PDU sessions.

In an embodiment, the configuring the DRB IP function means: enabling the DRB IP function for the DRB corresponding to the PDU session.

The base station acquires the security policy information of the PDU session configured by the first core network element and the priority information of each QOS flow in the PDU session, where the security policy information includes an indication parameter of the DRB IP corresponding to the PDU session. The priority information is used to indicate the priority of the DRB IP corresponding to the QOS flow;

The determining, by the base station, whether to configure the DRB IP function according to the first UE capability information, the security policy information of each PDU session corresponding to the terminal, and the priority information of each QOS flow in each PDU session.

In an embodiment, the base station determines whether to configure according to the first UE capability information, the security policy information of each PDU session corresponding to the terminal, and the priority information of each QOS flow in each PDU session. DRB IP features, including:

If the first aggregated data rate is greater than the aggregated data rate capability threshold, the base station determines, according to the priority information of each QOS flow in each PDU session corresponding to the terminal, the session of each PDU. Whether to configure the DRB IP function and/or whether to configure the DRB IP function for each of the QOS flows in the respective PDU sessions.

In an embodiment, the method further includes:

For determining a first PDU session and/or a first QOS flow in which the DRB IP function cannot be configured, the base station sends first feedback information to the first core network network element, where the first feedback information is used to A core network element notifies the first PDU session and/or the first QOS flow that the DRB IP function cannot be configured.

In an embodiment, the method further includes:

For determining a first PDU session and/or a first QOS flow in which the DRB IP function cannot be configured, the base station does not configure a DRB IP function for the first PDU session and/or the first QOS flow;

For determining a second PDU session and/or a second QOS flow capable of configuring a DRB IP function, the base station configures a DRB IP function for the second PDU session and/or the second QOS flow.

For each third PDU session in which the indication parameter of the DRB IP is the second parameter, the base station determines, according to the priority information of each QOS flow in the respective third PDU session, the first UE capability information, and the local policy. Whether to configure a DRB IP function for each of the respective third PDU sessions and/or each of the respective third PDU sessions.

In an embodiment, the configuring the DRB IP function refers to: enabling the DRB IP function for the DRB corresponding to the PDU session and/or the QOS flow.

In an embodiment, the PDU session also has priority information. For two PDU sessions with different priorities, all QOS flows of the PDU session with higher priority have higher priority than the lower priority. The priority of all QOS flows for a PDU session.

The apparatus for configuring DRB integrity protection provided by the embodiment of the present invention includes:

a first acquiring unit, configured to obtain security policy information and priority information of a PDU session configured by the first core network element, where the security policy information includes an indication parameter of the DRB IP corresponding to the PDU session, and the priority information is a priority for indicating a DRB IP corresponding to the PDU session;

a second acquiring unit, configured to acquire first UE capability information of the terminal, where the first UE capability information includes an aggregate data rate capability threshold value of the DRB IP required by the terminal;

And a configuration unit, configured to determine whether to configure the DRB IP function according to the first UE capability information, the security policy information and the priority information of each PDU session corresponding to the terminal.

In an embodiment, the configuration unit is configured to determine, according to the security policy information of each PDU session corresponding to the terminal, a first aggregate data rate of the QOS flow corresponding to the PDU session in which the indication parameter of the DRB IP is the first parameter. The first parameter is used to indicate that the DRB IP function needs to be configured; if the first aggregate data rate is greater than the aggregate data rate capability threshold, the base station according to the priority of each PDU session corresponding to the terminal Information, determining whether a DRB IP function is configured for the respective PDU session.

In an embodiment, the device further includes:

a feedback unit, configured to send first feedback information to the first core network element for determining a first PDU session in which the DRB IP function cannot be configured, where the first feedback information is used to send to the first core network element Notifying the first PDU session that the DRB IP function cannot be configured.

In an embodiment, the configuration unit is configured to: configure a DRB IP function for the first PDU session for determining a first PDU session in which the DRB IP function cannot be configured; and determine a second PDU that can configure the DRB IP function. A session, configuring a DRB IP function for the second PDU session.

In an embodiment, the configuration unit is configured to determine, according to the security policy information of each PDU session corresponding to the terminal, a first aggregate data rate of the QOS flow corresponding to the PDU session in which the indication parameter of the DRB IP is the first parameter. The first parameter is used to indicate that the DRB IP function needs to be configured; if the first aggregate data rate is less than or equal to the aggregate data rate capability threshold, the indication parameter of the DRB IP is the first parameter. The DRB IP function is configured for all PDU sessions.

In an embodiment, the configuration unit is configured to determine, according to security policy information of each PDU session corresponding to the terminal, a third PDU session in which the indication parameter of the DRB IP is the second parameter, where the second parameter is used. Instructing to configure the DRB IP function; for the third PDU session in which the indication parameter of the DRB IP is the second parameter, the base station according to the priority information of the respective third PDU session, the first UE capability information, and the local policy Determining whether a DRB IP function is configured for each of the third PDU sessions.

a first acquiring unit, configured to acquire security policy information of a PDU session configured by the first core network element and priority information of each QOS flow in the PDU session, where the security policy information includes a DRB corresponding to the PDU session An indication parameter of the IP, where the priority information is used to indicate a priority of a DRB IP corresponding to the QOS flow;

And a configuration unit, configured to determine whether to configure the DRB IP function according to the first UE capability information, the security policy information of each PDU session corresponding to the terminal, and the priority information of each QOS flow in each PDU session.

In an embodiment, the configuration unit is configured to determine, according to the security policy information of each PDU session corresponding to the terminal, a first aggregate data rate of the QOS flow corresponding to the PDU session in which the indication parameter of the DRB IP is the first parameter. The first parameter is used to indicate that the DRB IP function needs to be configured; if the first aggregate data rate is greater than the aggregate data rate capability threshold, each QOS flow in each PDU session corresponding to the terminal is used. The priority information determines whether the DRB IP function is configured for the respective PDU session and/or whether the DRB IP function is configured for each QOS flow in the respective PDU session.

In an embodiment, the device further includes:

a feedback unit, configured to send first feedback information to the first core network element for determining a first PDU session and/or a first QOS flow that cannot configure the DRB IP function, where the first feedback information is used by the The first core network element notifies the first PDU session and/or the first QOS flow cannot configure the DRB IP function.

In an embodiment, the configuration unit is configured to not configure the DRB for the first PDU session and/or the first QOS flow for determining a first PDU session and/or a first QOS flow that cannot configure the DRB IP function. IP function; for determining a second PDU session and/or a second QOS flow capable of configuring a DRB IP function, configuring a DRB IP function for the second PDU session and/or the second QOS flow.

In an embodiment, the configuration unit is configured to determine, according to security policy information of each PDU session corresponding to the terminal, a third PDU session in which the indication parameter of the DRB IP is the second parameter, where the second parameter is used. Instructing to configure the DRB IP function; for the third PDU session in which the indication parameter of the DRB IP is the second parameter, the base station according to the priority information of each QOS flow in the respective third PDU session, the first UE The capability information and the local policy determine whether a DRB IP function is configured for each of the respective third PDU sessions and/or each of the respective third PDU sessions.

In an embodiment, the PDU session also has priority information. For two PDU sessions with different priorities, all QOS flows of the PDU session with higher priority have higher priority than the lower priority. The priority of all QOS flows of the PDU session.

The computer storage medium provided by the embodiment of the present invention has stored thereon computer executable instructions, and the computer executable instructions are implemented by the processor to implement the DRB integrity protection configuration method.

In the technical solution of the embodiment of the present invention, 1) the base station acquires the security policy information and the priority information of the PDU session configured by the network element of the first core network, where the security policy information includes an indication parameter of the DRB IP corresponding to the PDU session. The priority information is used to indicate the priority of the DRB IP corresponding to the PDU session; the base station acquires the first UE capability information of the terminal, and the first UE capability information includes an aggregation of the DRB IP required by the terminal. The data rate capability threshold is determined by the base station according to the first UE capability information, the security policy information and the priority information of each PDU session corresponding to the terminal, and whether the DRB IP function is configured. 2) The base station acquires the security policy information of the PDU session configured by the first core network element and the priority information of each QOS flow in the PDU session, where the security policy information includes an indication parameter of the DRB IP corresponding to the PDU session. The priority information is used to indicate the priority of the DRB IP corresponding to the QOS flow; the base station acquires the first UE capability information of the terminal, where the first UE capability information includes the aggregated data about the DRB IP required by the terminal. a rate capability threshold; the base station determines whether to configure according to the first UE capability information, the security policy information of each PDU session corresponding to the terminal, and the priority information of each QOS flow in each PDU session. DRB IP function. With the technical solution of the embodiment of the present invention, the first core network element (such as SMF) configures the DRB IP priority of the PDU session granularity or the DRB IP priority of the QOS flow granularity, so that the base station (such as gNB) can be based on the first core network. These configuration decisions of the network element determine how to configure the DRB IP function for the PDU session and/or the QOS flow (corresponding DRB), so that the base station can more rationally decide and select the DRB to configure the DRB IP function.

DRAWINGS

The drawings described herein are intended to provide a further understanding of the invention, and are intended to be a part of the invention. In the drawing:

Figure 1 is a flow chart of the existing DRB integrity protection;

2 is a schematic flowchart 1 of a method for configuring DRB integrity protection according to an embodiment of the present invention;

3 is a flowchart of DRB integrity protection in Application Example 1 according to an embodiment of the present invention;

4 is a schematic diagram of each protocol stack of Application Example 1;

FIG. 5 is a second schematic flowchart of a method for configuring DRB integrity protection according to an embodiment of the present invention;

6 is a flowchart of DRB integrity protection of application example 2 according to an embodiment of the present invention;

7 is a schematic diagram of each protocol stack of application example 2;

FIG. 8 is a schematic diagram showing the result composition of a DRB integrity protection configuration apparatus according to an embodiment of the present invention; FIG.

FIG. 9 is a schematic structural diagram of a computer device according to an embodiment of the present invention.

detailed description

The embodiments of the present invention are described in detail below with reference to the accompanying drawings.

The technical solution of the embodiment of the present invention is mainly applied to a 5G mobile communication system. Of course, the technical solution of the embodiment of the present invention is not limited to the 5G mobile communication system, and can also be applied to other types of mobile communication systems. The following describes the main application scenarios in the 5G mobile communication system:

1) eMBB scenario: eMBB aims at users to obtain multimedia content, services and data, and its business needs are growing rapidly. Because eMBB may be deployed in different scenarios, such as indoors, urban areas, and rural areas, the difference in service capabilities and requirements is relatively large. Therefore, services must be analyzed in combination with specific deployment scenarios.

2) URLLC scenario: Typical applications for URLLC include: industrial automation, power automation, telemedicine operations, traffic security, and more.

3) mMTC scenario: Typical characteristics of URLLC include: high connection density, small data volume, delay-insensitive service, low cost and long service life of the module.

In the 5G, since the size of the MAC-I may be 32 bits or 64 bits, the network side and the terminal side are required to negotiate the size of the MAC-I.

2 is a schematic flowchart 1 of a method for configuring DRB integrity protection according to an embodiment of the present invention. As shown in FIG. 2, the method for configuring DRB integrity protection includes the following steps:

Step 201: The base station acquires the security policy information and the priority information of the PDU session configured by the network element of the first core network, where the security policy information includes an indication parameter of the DRB IP corresponding to the PDU session, where the priority information is used to indicate The priority of the DRB IP corresponding to the PDU session.

The technical solution of the embodiment of the present invention may be applied to, but not limited to, a 5G system. The technical solution of the embodiment of the present invention is applied to a 5G system, where the base station refers to a gNB, and the first core network element refers to an SMF. In addition, the second core network element referred to below refers to the AMF.

In the embodiment of the present invention, when the PDU session is established, the first core network element (such as the SMF) configures the security policy information and the priority information corresponding to the PDU session, where the security policy information includes the PDU session. An indication parameter of the DRB IP, where the priority information is used to indicate a priority of a DRB IP corresponding to the PDU session.

Here, the indication parameters of the DRB IP corresponding to the PDU session are classified into the following three types:

The first parameter (required): the first parameter is used to indicate that the DRB IP function needs to be configured.

The second parameter (preferred): the second parameter is used to indicate a recommended configuration of the DRB IP function.

Third parameter (not needed): The third parameter is used to indicate that the DRB IP function does not need to be configured.

It should be understood that the indication parameter of the DRB IP in the security policy information is for the PDU session, for example, the PDU session 1 corresponds to the first parameter, the PDU session 2 corresponds to the second parameter, the PDU session 3 corresponds to the first parameter, and the like. In addition, the priority of the DRB IP in the priority information is for the session, for example, the PDU session 1 corresponds to the first priority, the PDU session 2 corresponds to the second priority, the PDU session 3 corresponds to the third priority, and so on.

Step 202: The base station acquires first UE capability information of the terminal, where the first UE capability information includes an aggregate data rate capability threshold value of the DRB IP required by the terminal.

In the embodiment of the present invention, the aggregated data rate of the DRBs that are allowed to be configured to all the DRB IP functions of the terminal needs to be less than or equal to the aggregated data rate capability threshold in the first UE capability information.

Step 203: The base station determines whether to configure the DRB IP function according to the first UE capability information, the security policy information and the priority information of each PDU session corresponding to the terminal.

In the embodiment of the present invention, determining whether to configure the DRB IP function needs to be combined with the security policy information of each PDU session, and is roughly classified into the following scenarios:

Scenario 1: The base station determines, according to the security policy information of each PDU session corresponding to the terminal, the first aggregate data rate of the QOS flow corresponding to the PDU session of the first parameter, where the indication parameter of the DRB IP is the first parameter. Indicates that the DRB IP function needs to be configured. 1) If the first aggregated data rate is greater than the aggregated data rate capability threshold, the base station determines whether to configure the DRB IP for each PDU session according to the priority information of each PDU session corresponding to the terminal. Features. 2) If the first aggregated data rate is less than or equal to the aggregated data rate capability threshold, the base station configures a DRB IP function for all PDU sessions of the first parameter for the indication parameter of the DRB IP.

For the above 1), for determining a first PDU session in which the DRB IP function cannot be configured, the base station does not configure a DRB IP function for the first PDU session; and for determining a second PDU session capable of configuring a DRB IP function, the base station The DRB IP function is configured for the second PDU session. Further, for determining a first PDU session in which the DRB IP function cannot be configured, the base station sends first feedback information to the first core network network element, where the first feedback information is used to the first core network element Notifying the first PDU session that the DRB IP function cannot be configured.

Scenario 2: The base station determines, according to the security policy information of each PDU session corresponding to the terminal, that the indication parameter of the DRB IP is the third PDU session of the second parameter, and the second parameter is used to indicate that the DRB IP function is recommended to be configured. For each third PDU session in which the indication parameter of the DRB IP is the second parameter, the base station determines, according to the priority information of the respective third PDU session, the first UE capability information, and the local policy, Whether the DRB IP function is configured for the three PDU sessions.

Scenario 3: The base station determines, according to the security policy information of each PDU session corresponding to the terminal, that the indication parameter of the DRB IP is the third parameter PDU session, and the third parameter is used to indicate that the DRB IP function is not required to be configured; The indication parameter of the DRB IP is a fourth PDU session of the third parameter, and the base station does not configure the DRB IP function for the fourth PDU session.

It should be understood that the configuration of the DRB IP function involved in the foregoing embodiment of the present invention means that the DRB is enabled for the DRB corresponding to the PDU session.

In addition, in the case that the foregoing needs to be combined with the priority of the PDU session to determine whether to configure the DRB IP function, if the aggregated data rate capability threshold value defined by the first UE capability information is met, the priority is higher. The PDU session is configured with the DRB IP function.

The foregoing technical solutions of the embodiments of the present invention are described in detail below with reference to specific application examples.

3 and FIG. 4, FIG. 3 is a flowchart of DRB integrity protection according to application example 1 of the embodiment of the present invention, and FIG. 4 is a schematic diagram of each protocol stack of application example 1, as shown in FIG. 3 and FIG.

1) When the SMF configures the PDU session information to the gNB, the priority information of the PDU session is also configured, and the priority information indicates that the PDU session is configured with the priority of the DRB IP.

2) The gNB obtains the aggregated data rate capability threshold of the UE about the DRB IP, and the information may be reported from the UE or from the AMF.

3) The gNB decides whether to configure the DRB IP function according to the limitation of the aggregated data rate capability threshold of the DRB IP and the priority information of the PDU session of each DRB IP. specifically,

If the aggregate data rate of the QOS flow corresponding to the PDU session indicating that the security policy is set to "required" is greater than the aggregate data rate capability threshold required by the UE, the gNB determines whether to configure the DRB IP according to the DRB IP priority of the PDU session. Features. For the PDU session of the PDU session in which the DRB IP function cannot be configured, the gNB can directly reject the SMF or the gNB to determine the corresponding DRB without the DRB IP function.

If the aggregate data rate of the QOS flow corresponding to the PDU session with the indicated parameter of the security policy is less than or equal to the aggregated data rate capability threshold required by the UE, the gNB configures all the security policy indication parameters as “required”. The DRB corresponding to the PDU session enables the DRB IP function.

For the PDU session whose security parameter is "preferred", the gNB determines whether to configure the DRB corresponding to the PDU session according to the aggregated data rate capability threshold, the DRB IP priority of the PDU session, and the local policy.

Here, under the condition that the aggregated data rate capability threshold value defined by the first UE capability information is met, the DRB IP function is preferentially configured for the PDU session with higher priority.

FIG. 5 is a schematic flowchart 2 of a method for configuring DRB integrity protection according to an embodiment of the present invention. As shown in FIG. 5, the DRB integrity protection configuration method includes the following steps:

Step 501: The base station acquires the security policy information of the PDU session configured by the first core network element and the priority information of each QOS flow in the PDU session, where the security policy information includes an indication of the DRB IP corresponding to the PDU session. And the priority information is used to indicate a priority of the DRB IP corresponding to the QOS flow.

In the embodiment of the present invention, when the PDU session is established, the first core network element (such as the SMF) configures the security policy information corresponding to the PDU session and the priority information of each QOS flow in the PDU session, where the The security policy information includes an indication parameter of the DRB IP corresponding to the PDU session, and the priority information is used to indicate a priority of the DRB IP corresponding to the QOS flow.

It should be understood that the indication parameter of the DRB IP in the security policy information is for the PDU session, for example, the PDU session 1 corresponds to the first parameter, the PDU session 2 corresponds to the second parameter, the PDU session 3 corresponds to the first parameter, and the like. In addition, the priority of the DRB IP in the priority information is for the QOS flow, for example, the QOS flow 1 corresponds to the first priority, the QOS flow 2 corresponds to the second priority, the QOS flow 3 corresponds to the third priority, etc. .

Further, the PDU session also has priority information. For two PDU sessions with different priorities, all QOS flows of the PDU session with higher priority have higher priority than all PDU sessions with lower priority. The priority of the QOS stream.

Step 502: The base station acquires the first UE capability information of the terminal, where the first UE capability information includes an aggregate data rate capability threshold value of the DRB IP required by the terminal.

Step 503: The base station determines whether to configure the DRB IP function according to the first UE capability information, the security policy information of each PDU session corresponding to the terminal, and the priority information of each QOS flow in each PDU session. .

Scenario 1: The base station determines, according to the security policy information of each PDU session corresponding to the terminal, the first aggregate data rate of the QOS flow corresponding to the PDU session of the first parameter, where the indication parameter of the DRB IP is the first parameter. Indicates that the DRB IP function needs to be configured. 1) If the first aggregated data rate is greater than the aggregated data rate capability threshold, the base station determines, according to the priority information of each QOS flow in each PDU session corresponding to the terminal, Whether the PDU session configures the DRB IP function and/or whether the DRB IP function is configured for each of the QOS flows in the respective PDU session. 2) If the first aggregated data rate is less than or equal to the aggregated data rate capability threshold, the base station configures a DRB IP function for all PDU sessions of the first parameter for the indication parameter of the DRB IP.

For the above 1), for determining a first PDU session and/or a first QOS flow in which the DRB IP function cannot be configured, the base station does not configure the DRB IP function for the first PDU session and/or the first QOS flow; A second PDU session and/or a second QOS flow of the DRB IP function can be configured, the base station configuring a DRB IP function for the second PDU session and/or the second QOS flow. Further, for determining the first PDU session and/or the first QOS flow that cannot configure the DRB IP function, the base station sends first feedback information to the first core network element, where the first feedback information is used for The first core network element notifies the first PDU session and/or the first QOS flow cannot configure the DRB IP function.

Scenario 2: The base station determines, according to the security policy information of each PDU session corresponding to the terminal, that the indication parameter of the DRB IP is the third PDU session of the second parameter, and the second parameter is used to indicate that the DRB IP function is recommended to be configured. For each third PDU session in which the indication parameter of the DRB IP is the second parameter, the base station determines, according to the priority information of each QOS flow in the respective third PDU session, the first UE capability information, and the local policy. Whether to configure a DRB IP function for each of the respective third PDU sessions and/or each of the respective third PDU sessions.

It should be understood that the configuration of the DRB IP function involved in the foregoing embodiment of the present invention means that the DRB-enabled DRB IP function corresponding to the PDU session and/or the QOS flow is enabled.

In addition, in the case that the foregoing needs to be combined with the priority of the QOS flow to determine whether to configure the DRB IP function, the priority is higher under the condition that the aggregated data rate capability threshold value defined by the first UE capability information is met. The QOS stream is configured with the DRB IP function.

Referring to FIG. 6 and FIG. 7, FIG. 6 is a flowchart of DRB integrity protection according to application example 2 of the embodiment of the present invention, and FIG. 7 is a schematic diagram of each protocol stack of application example 2, as shown in FIG. 6 and FIG.

1) When the SMF configures the PDU session information to the gNB, the priority information of each QoS flow in the PDU session is also configured, and the priority information indicates that the QoS flow is configured with the priority of the DRB IP.

3) The gNB determines whether to configure the DRB IP function according to the limitation of the aggregated data rate capability threshold of the DRB IP and the priority information of each QoS flow of each PDU session. specifically,

If the aggregate data rate of the QOS flow corresponding to the PDU session with the indicated parameter of the security policy is greater than the aggregate data rate capability threshold required by the UE, the gNB decides according to the DRB IP priority of each QOS flow of the PDU session. Whether to configure the DRB IP function. For a PDU session and/or Qos flow that cannot be configured with the DRB IP function, the gNB can directly reject the SMF or the gNB to determine the corresponding DRB without the DRB IP function.

For the PDU session whose security parameter is "preferred", the gNB determines whether the DRB corresponding to the QoS session of the PDU session is configured to enable the DRB IP according to the DRB IP precedence and the local policy of each QOS flow in the PDU session.

FIG. 8 is a schematic diagram showing the result composition of a DRB integrity protection configuration apparatus according to an embodiment of the present invention.

In an example, the apparatus comprises:

The first obtaining unit 801 is configured to obtain the security policy information and the priority information of the PDU session configured by the first core network element, where the security policy information includes an indication parameter of the DRB IP corresponding to the PDU session, where the priority is The information is used to indicate a priority of the DRB IP corresponding to the PDU session;

a second acquiring unit 802, configured to acquire first UE capability information of the terminal, where the first UE capability information includes an aggregate data rate capability threshold value of the DRB IP required by the terminal;

The configuration unit 803 is configured to determine whether to configure the DRB IP function according to the first UE capability information, the security policy information and the priority information of each PDU session corresponding to the terminal.

In an embodiment, the configuration unit 803 is configured to determine, according to the security policy information of each PDU session corresponding to the terminal, the first aggregate data of the QOS flow corresponding to the PDU session in which the indication parameter of the DRB IP is the first parameter. Rate, the first parameter is used to indicate that the DRB IP function needs to be configured; if the first aggregate data rate is greater than the aggregate data rate capability threshold, the base station according to the priority of each PDU session corresponding to the terminal Level information, determining whether a DRB IP function is configured for the respective PDU session.

In an embodiment, the device further includes:

The feedback unit 804 is configured to send first feedback information to the first core network element for determining a first PDU session in which the DRB IP function cannot be configured, where the first feedback information is used to the first core network The element notifies that the first PDU session cannot configure the DRB IP function.

In an embodiment, the configuration unit 803 is configured to: not configure a DRB IP function for the first PDU session for determining a first PDU session in which the DRB IP function cannot be configured; and determine a second function capable of configuring the DRB IP function. A PDU session, configuring a DRB IP function for the second PDU session.

In an embodiment, the configuration unit 803 is configured to determine, according to the security policy information of each PDU session corresponding to the terminal, the first aggregate data of the QOS flow corresponding to the PDU session in which the indication parameter of the DRB IP is the first parameter. Rate, the first parameter is used to indicate that the DRB IP function needs to be configured; if the first aggregate data rate is less than or equal to the aggregate data rate capability threshold, the indication parameter for the DRB IP is the first parameter All PDU sessions are configured with the DRB IP feature.

In an embodiment, the configuration unit 803 is configured to determine, according to security policy information of each PDU session corresponding to the terminal, a third PDU session in which the indication parameter of the DRB IP is the second parameter, where the second parameter is used. Demonstrating the recommendation to configure the DRB IP function; for the third PDU session in which the indication parameter of the DRB IP is the second parameter, the base station according to the priority information of the respective third PDU session, the first UE capability information, and the local A policy determines whether a DRB IP function is configured for each of the third PDU sessions.

In another example, the apparatus includes:

The first obtaining unit 801 is configured to obtain security policy information of a PDU session configured by the first core network element and priority information of each QOS flow in the PDU session, where the security policy information includes a corresponding PDU session. An indication parameter of the DRB IP, where the priority information is used to indicate a priority of a DRB IP corresponding to the QOS flow;

The configuration unit 803 is configured to determine whether to configure the DRB IP function according to the first UE capability information, the security policy information of each PDU session corresponding to the terminal, and the priority information of each QOS flow in each PDU session. .

In an embodiment, the configuration unit 803 is configured to determine, according to the security policy information of each PDU session corresponding to the terminal, the first aggregate data of the QOS flow corresponding to the PDU session in which the indication parameter of the DRB IP is the first parameter. The first parameter is used to indicate that the DRB IP function needs to be configured; if the first aggregate data rate is greater than the aggregate data rate capability threshold, each QOS in each PDU session corresponding to the terminal is used. The priority information of the flow determines whether the DRB IP function is configured for the respective PDU session and/or whether the DRB IP function is configured for each QOS flow in the respective PDU session.

In an embodiment, the device further includes:

The feedback unit 804 is configured to send first feedback information to the first core network element for determining a first PDU session and/or a first QOS flow that cannot configure the DRB IP function, where the first feedback information is used to The first core network element notifies the first PDU session and/or the first QOS flow cannot configure the DRB IP function.

In an implementation, the configuration unit 803 is configured to: configure, for the first PDU session and/or the first QOS flow, that the DRB IP function cannot be configured, and configure the first PDU session and/or the first QOS flow. The DRB IP function; for determining a second PDU session and/or a second QOS flow capable of configuring a DRB IP function, configuring a DRB IP function for the second PDU session and/or the second QOS flow.

In an embodiment, the configuration unit 803 is configured to determine, according to security policy information of each PDU session corresponding to the terminal, a third PDU session in which the indication parameter of the DRB IP is the second parameter, where the second parameter is used. Demonstrating the recommendation to configure the DRB IP function; for the third PDU session in which the indication parameter of the DRB IP is the second parameter, the base station according to the priority information of each QOS flow in the respective third PDU session, the first The UE capability information and the local policy determine whether a DRB IP function is configured for each of the respective third PDU sessions and/or each of the respective third PDU sessions.

It will be understood by those skilled in the art that the implementation functions of the units in the DRB integrity protection configuration apparatus shown in FIG. 8 can be understood by referring to the related description of the foregoing DRB integrity protection configuration method. The functions of the units in the DRB integrity protection configuration apparatus shown in FIG. 8 can be implemented by a program running on the processor, or can be realized by a specific logic circuit.

In the embodiment of the present invention, the DRB integrity protection configuration device may be stored in a computer readable storage medium if it is implemented in the form of a software function module and sold or used as a standalone product. Based on such understanding, the technical solution of the embodiments of the present invention may be embodied in the form of a software product in essence or in the form of a software product stored in a storage medium, including a plurality of instructions. A computer device (which may be a personal computer, server, or network device, etc.) is caused to perform all or part of the methods described in various embodiments of the present invention. The foregoing storage medium includes various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read only memory (ROM), a magnetic disk, or an optical disk. Thus, embodiments of the invention are not limited to any specific combination of hardware and software.

Correspondingly, the embodiment of the present invention further provides a computer storage medium, wherein the computer executable instructions are stored, and the computer executable instructions are executed by the processor to implement the DRB integrity protection configuration method of the embodiment of the present invention.

FIG. 9 is a schematic structural diagram of a computer device according to an embodiment of the present invention. The computer device may be a terminal or a network device. As shown in FIG. 9, computer device 100 may include one or more (only one shown) processor 1002 (processor 1002 may include, but is not limited to, a Micro Controller Unit (MCU) or a programmable logic device. A processing device such as an FPGA (Field Programmable Gate Array), a memory 1004 for storing data, and a transmission device 1006 for a communication function. It will be understood by those skilled in the art that the structure shown in FIG. 9 is merely illustrative and does not limit the structure of the above electronic device. For example, computer device 100 may also include more or fewer components than shown in FIG. 9, or have a different configuration than that shown in FIG.

The memory 1004 can be used to store software programs and modules of application software, such as program instructions/modules corresponding to the method in the embodiment of the present invention, and the processor 1002 executes various functional applications by running software programs and modules stored in the memory 1004. And data processing, that is, to achieve the above method. Memory 1004 can include high speed random access memory, and can also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid state memory. In some examples, memory 1004 can further include memory remotely located relative to processor 1002, which can be connected to computer device 100 over a network. Examples of such networks include, but are not limited to, the Internet, intranets, local area networks, mobile communication networks, and combinations thereof.

Transmission device 1006 is for receiving or transmitting data via a network. The network specific examples described above may include a wireless network provided by a communication provider of computer device 100. In one example, the transmission device 1006 includes a Network Interface Controller (NIC) that can be connected to other network devices through a base station to communicate with the Internet. In one example, the transmission device 1006 can be a radio frequency (RF) module for communicating with the Internet wirelessly.

The technical solutions described in the embodiments of the present invention can be arbitrarily combined without conflict.

In the several embodiments provided by the present invention, it should be understood that the disclosed method and smart device may be implemented in other manners. The device embodiments described above are merely illustrative. For example, the division of the unit is only a logical function division. In actual implementation, there may be another division manner, such as: multiple units or components may be combined, or Can be integrated into another system, or some features can be ignored or not executed. In addition, the coupling, or direct coupling, or communication connection of the components shown or discussed may be indirect coupling or communication connection through some interfaces, devices or units, and may be electrical, mechanical or other forms. of.

The units described above as separate components may or may not be physically separated, and the components displayed as the unit may or may not be physical units, that is, may be located in one place or distributed to multiple network units; Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of the embodiment.

In addition, each functional unit in each embodiment of the present invention may be integrated into one second processing unit, or each unit may be separately used as one unit, or two or more units may be integrated into one unit; The above integrated unit can be implemented in the form of hardware or in the form of hardware plus software functional units.

The above is only a specific embodiment of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art can easily think of changes or substitutions within the technical scope of the present invention. It should be covered by the scope of the present invention.

Claims

A method for configuring DRB integrity protection, the method comprising:

The base station acquires the security policy information and the priority information of the PDU session configured by the first core network element, where the security policy information includes an indication parameter of the DRB IP corresponding to the PDU session, and the priority information is used to indicate the PDU. The priority of the DRB IP corresponding to the session;

The base station acquires first UE capability information of the terminal, where the first UE capability information includes an aggregate data rate capability threshold value of the DRB IP required by the terminal;

The base station determines whether to configure the DRB IP function according to the first UE capability information, the security policy information and the priority information of each PDU session corresponding to the terminal.
The method according to claim 1, wherein the base station determines whether to configure the DRB IP function according to the first UE capability information and the security policy information and the priority information of each PDU session corresponding to the terminal, including:

Determining, by the base station, the first aggregation data rate of the QOS flow corresponding to the PDU session of the first parameter according to the security policy information of each PDU session corresponding to the terminal, where the first parameter is used to indicate the need Configure the DRB IP function.

If the first aggregated data rate is greater than the aggregated data rate capability threshold, the base station determines whether to configure the DRB IP function for each PDU session according to the priority information of each PDU session corresponding to the terminal.
The method of claim 2, wherein the method further comprises:

For determining the first PDU session in which the DRB IP function cannot be configured, the base station sends first feedback information to the first core network network element, where the first feedback information is used to notify the first core network element The first PDU session cannot configure the DRB IP function.
The method of claim 2 or 3, wherein the method further comprises:

For determining a first PDU session in which the DRB IP function cannot be configured, the base station does not configure a DRB IP function for the first PDU session;

For determining a second PDU session capable of configuring a DRB IP function, the base station configures a DRB IP function for the second PDU session.
The method according to any one of claims 1 to 4, wherein the base station determines whether to configure the DRB according to the first UE capability information and the security policy information and priority information of each PDU session corresponding to the terminal. IP features, including:

Determining, by the base station, the first aggregation data rate of the QOS flow corresponding to the PDU session of the first parameter according to the security policy information of each PDU session corresponding to the terminal, where the first parameter is used to indicate the need Configure the DRB IP function.

If the first aggregated data rate is less than or equal to the aggregated data rate capability threshold, the base station indicates that the DRB IP indication parameter is a DRB IP function for all PDU sessions of the first parameter.
The method according to any one of claims 1 to 5, wherein the base station determines whether to configure the DRB according to the first UE capability information and the security policy information and priority information of each PDU session corresponding to the terminal. IP features, including:

Determining, by the base station, the third PDU session in which the indication parameter of the DRB IP is the second parameter according to the security policy information of the PDU session corresponding to the terminal, where the second parameter is used to indicate that the DRB IP function is recommended to be configured;

For each third PDU session in which the indication parameter of the DRB IP is the second parameter, the base station determines, according to the priority information of the respective third PDU session, the first UE capability information, and the local policy, Whether the DRB IP function is configured for the three PDU sessions.
The method according to any one of claims 1 to 6, wherein the configuring the DRB IP function means: enabling the DRB IP function for the DRB corresponding to the PDU session.
A method for configuring DRB integrity protection, the method comprising:

The base station acquires the security policy information of the PDU session configured by the first core network element and the priority information of each QOS flow in the PDU session, where the security policy information includes an indication parameter of the DRB IP corresponding to the PDU session. The priority information is used to indicate the priority of the DRB IP corresponding to the QOS flow;

The base station acquires first UE capability information of the terminal, where the first UE capability information includes an aggregate data rate capability threshold value of the DRB IP required by the terminal;

The determining, by the base station, whether to configure the DRB IP function according to the first UE capability information, the security policy information of each PDU session corresponding to the terminal, and the priority information of each QOS flow in each PDU session.
The method according to claim 8, wherein the base station according to the first UE capability information, security policy information of each PDU session corresponding to the terminal, and priority of each QOS flow in each PDU session Information to determine whether to configure DRB IP functions, including:

Determining, by the base station, the first aggregation data rate of the QOS flow corresponding to the PDU session of the first parameter according to the security policy information of each PDU session corresponding to the terminal, where the first parameter is used to indicate the need Configure the DRB IP function.

If the first aggregated data rate is greater than the aggregated data rate capability threshold, the base station determines, according to the priority information of each QOS flow in each PDU session corresponding to the terminal, the session of each PDU. Whether to configure the DRB IP function and/or whether to configure the DRB IP function for each of the QOS flows in the respective PDU sessions.
The method of claim 9 wherein the method further comprises:

For determining a first PDU session and/or a first QOS flow in which the DRB IP function cannot be configured, the base station sends first feedback information to the first core network network element, where the first feedback information is used to A core network element notifies the first PDU session and/or the first QOS flow that the DRB IP function cannot be configured.
The method of claim 9 or 10, wherein the method further comprises:

For determining a first PDU session and/or a first QOS flow in which the DRB IP function cannot be configured, the base station does not configure a DRB IP function for the first PDU session and/or the first QOS flow;

For determining a second PDU session and/or a second QOS flow capable of configuring a DRB IP function, the base station configures a DRB IP function for the second PDU session and/or the second QOS flow.
The method according to any one of claims 8 to 11, wherein the base station according to the first UE capability information, security policy information of each PDU session corresponding to the terminal, and each of the respective PDU sessions The priority information of the QOS flow determines whether the DRB IP function is configured, including:

Determining, by the base station, the first aggregation data rate of the QOS flow corresponding to the PDU session of the first parameter according to the security policy information of each PDU session corresponding to the terminal, where the first parameter is used to indicate the need Configure the DRB IP function.

If the first aggregated data rate is less than or equal to the aggregated data rate capability threshold, the base station indicates that the DRB IP indication parameter is a DRB IP function for all PDU sessions of the first parameter.
The method according to any one of claims 8 to 12, wherein the base station determines whether to configure DRB according to the first UE capability information and security policy information and priority information of each PDU session corresponding to the terminal. IP features, including:

Determining, by the base station, the third PDU session in which the indication parameter of the DRB IP is the second parameter according to the security policy information of the PDU session corresponding to the terminal, where the second parameter is used to indicate that the recommended DRB IP function is configured;

For each third PDU session in which the indication parameter of the DRB IP is the second parameter, the base station determines, according to the priority information of each QOS flow in the respective third PDU session, the first UE capability information, and the local policy. Whether to configure a DRB IP function for each of the respective third PDU sessions and/or each of the respective third PDU sessions.
The method according to any one of claims 8 to 13, wherein the configuring the DRB IP function means: enabling the DRB IP function for the DRB corresponding to the PDU session and/or the QOS flow.
The method according to any one of claims 8 to 14, wherein the PDU session also corresponds to priority information, and for all PDU sessions with different priorities, all QOS flows of a PDU session with a higher priority The priority is higher than the priority of all QOS flows of the PDU session with lower priority.
A configuration device for DRB integrity protection, the device comprising:

a first acquiring unit, configured to obtain security policy information and priority information of a PDU session configured by the first core network element, where the security policy information includes an indication parameter of the DRB IP corresponding to the PDU session, and the priority information is a priority for indicating a DRB IP corresponding to the PDU session;

a second acquiring unit, configured to acquire first UE capability information of the terminal, where the first UE capability information includes an aggregate data rate capability threshold value of the DRB IP required by the terminal;

And a configuration unit, configured to determine whether to configure the DRB IP function according to the first UE capability information, the security policy information and the priority information of each PDU session corresponding to the terminal.
The device according to claim 16, wherein the configuration unit is configured to determine, according to the security policy information of each PDU session corresponding to the terminal, that the indication parameter of the DRB IP is the QOS flow corresponding to the PDU session of the first parameter. The first aggregated data rate, the first parameter is used to indicate that the DRB IP function needs to be configured; if the first aggregated data rate is greater than the aggregated data rate capability threshold, the base station is configured according to each of the terminals The priority information of the PDU session determines whether the DRB IP function is configured for the respective PDU session.
The apparatus of claim 17 wherein said apparatus further comprises:

a feedback unit, configured to send first feedback information to the first core network element for determining a first PDU session in which the DRB IP function cannot be configured, where the first feedback information is used to send to the first core network element Notifying the first PDU session that the DRB IP function cannot be configured.
The apparatus according to claim 17 or 18, wherein the configuration unit is configured to not configure a DRB IP function for the first PDU session for determining a first PDU session in which the DRB IP function cannot be configured; A second PDU session of the DRB IP function, configuring a DRB IP function for the second PDU session.
The device according to any one of claims 16 to 19, wherein the configuration unit is configured to determine, according to security policy information of each PDU session corresponding to the terminal, a PDU session in which the indication parameter of the DRB IP is the first parameter. The first aggregated data rate of the corresponding QOS flow, the first parameter is used to indicate that the DRB IP function needs to be configured; if the first aggregated data rate is less than or equal to the aggregated data rate capability threshold, the DRB IP is used. The indication parameter is to configure the DRB IP function for all PDU sessions of the first parameter.
The device according to any one of claims 16 to 20, wherein the configuration unit is configured to determine, according to security policy information of each PDU session corresponding to the terminal, that the indication parameter of the DRB IP is the third parameter of the second parameter. a PDU session, the second parameter is used to indicate a recommended configuration of the DRB IP function; for the third PDU session in which the indication parameter of the DRB IP is the second parameter, the base station according to the priority information of the respective third PDU session, The first UE capability information and the local policy determine whether a DRB IP function is configured for the respective third PDU session.
The apparatus according to any one of claims 16 to 21, wherein the configuring the DRB IP function means: enabling the DRB IP function for the DRB corresponding to the PDU session.
A configuration device for DRB integrity protection, the device comprising:

a first acquiring unit, configured to acquire security policy information of a PDU session configured by the first core network element and priority information of each QOS flow in the PDU session, where the security policy information includes a DRB corresponding to the PDU session An indication parameter of the IP, where the priority information is used to indicate a priority of a DRB IP corresponding to the QOS flow;

a second acquiring unit, configured to acquire first UE capability information of the terminal, where the first UE capability information includes an aggregate data rate capability threshold value of the DRB IP required by the terminal;

And a configuration unit, configured to determine whether to configure the DRB IP function according to the first UE capability information, the security policy information of each PDU session corresponding to the terminal, and the priority information of each QOS flow in each PDU session.
The device according to claim 23, wherein the configuration unit is configured to determine, according to security policy information of each PDU session corresponding to the terminal, that the indication parameter of the DRB IP is the QOS flow corresponding to the PDU session of the first parameter. The first aggregated data rate, the first parameter is used to indicate that the DRB IP function needs to be configured; if the first aggregated data rate is greater than the aggregated data rate capability threshold, according to each PDU session corresponding to the terminal The priority information of each QOS flow determines whether the DRB IP function is configured for the respective PDU session and/or whether the DRB IP function is configured for each QOS flow in the respective PDU session.
The device of claim 24, wherein the device further comprises:

a feedback unit, configured to send first feedback information to the first core network element for determining a first PDU session and/or a first QOS flow that cannot configure the DRB IP function, where the first feedback information is used by the The first core network element notifies the first PDU session and/or the first QOS flow cannot configure the DRB IP function.
The apparatus according to claim 24 or 25, wherein the configuration unit is configured to determine the first PDU session and/or the first QOS flow for the first PDU session and/or for determining that the DRB IP function cannot be configured. The first QOS flow does not configure the DRB IP function; for determining the second PDU session and/or the second QOS flow capable of configuring the DRB IP function, the DRB IP function is configured for the second PDU session and/or the second QOS flow.
The device according to any one of claims 23 to 26, wherein the configuration unit is configured to determine, according to security policy information of each PDU session corresponding to the terminal, a PDU session in which the indication parameter of the DRB IP is the first parameter. The first aggregated data rate of the corresponding QOS flow, the first parameter is used to indicate that the DRB IP function needs to be configured; if the first aggregated data rate is less than or equal to the aggregated data rate capability threshold, the DRB IP is used. The indication parameter is to configure the DRB IP function for all PDU sessions of the first parameter.
The device according to any one of claims 23 to 27, wherein the configuration unit is configured to determine, according to security policy information of each PDU session corresponding to the terminal, that the indication parameter of the DRB IP is the third parameter of the second parameter. a PDU session, the second parameter is used to indicate a recommended configuration of the DRB IP function; for the third PDU session where the indication parameter of the DRB IP is the second parameter, the base station is configured according to each QOS flow in each of the third PDU sessions The priority information, the first UE capability information, and the local policy determine whether a DRB IP function is configured for each of the respective third PDU sessions and/or each of the respective third PDU sessions.
The apparatus according to any one of claims 23 to 28, wherein the configuring the DRB IP function means: enabling a DRB IP function for a DRB corresponding to a PDU session and/or a QOS flow.
The apparatus according to any one of claims 23 to 29, wherein the PDU session is also corresponding to priority information, and for all PDU sessions having different priorities, all QOS flows of a PDU session having a higher priority The priority is higher than the priority of all QOS flows of the PDU session with lower priority.
A computer storage medium having stored thereon computer executable instructions for performing the method steps of any one of claims 1 to 7 when executed by a processor, or by any of claims 8 to 15 Method steps described.