CN112655182B - Communication methods and devices - Google Patents

Abstract

The embodiment of the application relates to a communication method and equipment, wherein the method comprises the following steps: the method comprises the steps that a terminal device obtains a first identifier accessed to a first network, wherein the first network is an unshared core network deployed by an operator, and the terminal device signs up with a Public Land Mobile Network (PLMN); the terminal device accesses the first network based on the first identification. The communication method and the device of the embodiment of the application can enable the terminal device signed with the PLMN to access the TAN.

Description

Communication methods and devices

Technical field

This application relates to the field of communication, and specifically to a communication method and device.

Background technique

The New Radio (NR) system (also known as 5G system, 5G network) introduces a non-public core network deployed by operators.

Normally, the terminal device is constantly moving. When the terminal equipment of the Public Land Mobile Network (PLMN) enters the coverage of the non-public core network deployed by the operator, how to enable the terminal equipment contracted with the PLMN to access the non-public core network deployed by the operator? , there is currently no clear regulation.

Contents of the invention

The embodiments of this application provide a communication method and device, which can enable terminal equipment contracted with a PLMN to access a non-public core network deployed by an operator.

In a first aspect, a communication method is provided. The method includes: a terminal device obtains a first identifier for accessing a first network. The first network is a non-public core network deployed by an operator. The terminal device and The public land mobile network PLMN has a contract;

The terminal device accesses the first network based on the first identification.

In a second aspect, a communication method is provided. The method includes: a core network device receiving a second request message sent by a terminal device, where the second request message includes a first identifier for the terminal device to access the first network and The identification of the terminal device, the first network is a non-public core network deployed by an operator, and the terminal device has a contract with the public land mobile network PLMN;

The core network device sends a second request response message to the terminal device, where the second request response message is used to indicate whether the terminal device is allowed to access the first network.

In a third aspect, a communication method is provided, the method including: a first device receiving a first request message sent by a terminal device, the first request message being used to request a first identification for accessing the first network, the The first network is a non-public core network deployed by the operator, and the terminal equipment has a contract relationship with the public land mobile network PLMN;

The first device sends a first request response message to the terminal device, where the first request response message includes the first identification.

A fourth aspect provides a terminal device for executing the method in the above first aspect or its respective implementations.

Specifically, the terminal device includes a functional module for executing the method in the above-mentioned first aspect or its respective implementations.

A fifth aspect provides a core network device for executing the method in the above second aspect or its respective implementations.

Specifically, the core network device includes a functional module for executing the method in the above second aspect or its respective implementations.

A sixth aspect provides a communication device for performing the method in the above third aspect or its respective implementations.

Specifically, the communication device includes a functional module for performing the method in the above third aspect or its respective implementations.

In a seventh aspect, a terminal device is provided, including a processor and a memory. The memory is used to store computer programs, and the processor is used to call and run the computer programs stored in the memory to execute the method in the above first aspect or its implementations.

In an eighth aspect, a core network device is provided, including a processor and a memory. The memory is used to store computer programs, and the processor is used to call and run the computer programs stored in the memory, and execute the method in the above second aspect or its respective implementations.

In a ninth aspect, a communication device is provided, including a processor and a memory. The memory is used to store computer programs, and the processor is used to call and run the computer programs stored in the memory, and execute the method in the above third aspect or its respective implementations.

In a tenth aspect, a chip is provided for implementing any one of the above-mentioned first to third aspects or the method in each implementation manner thereof.

Specifically, the chip includes: a processor, configured to call and run a computer program from a memory, so that the device installed with the chip executes any one of the above-mentioned first to third aspects or implementations thereof. method.

An eleventh aspect provides a computer-readable storage medium for storing a computer program, the computer program causing a computer to execute any one of the above-mentioned first to third aspects or the method in each implementation thereof.

In a twelfth aspect, a computer program product is provided, including computer program instructions, which enable a computer to execute any one of the above-mentioned first to third aspects or the method in each implementation manner thereof.

A thirteenth aspect provides a computer program that, when run on a computer, causes the computer to execute any one of the above-mentioned first to third aspects or the method in each implementation thereof.

With the above technical solution, when a terminal device signed with a PLMN enters the non-public core network deployed by the operator, the terminal device can obtain the identification of the non-public core network deployed by the operator, and thus can access based on the obtained identification. Non-public core network deployed by operators.

Description of the drawings

Figure 1 is a schematic diagram of a communication system architecture provided by an embodiment of the present application.

Figure 2 is a schematic flow chart of a communication method provided by an embodiment of the present application.

Figure 3 is a schematic flow chart of another communication method provided by an embodiment of the present application.

Figure 4 is a schematic flow chart of another communication method provided by an embodiment of the present application.

Figure 5 is a specific schematic interaction diagram of a communication method provided by an embodiment of the present application.

Figure 6 is a schematic block diagram of a terminal device according to an embodiment of the present application.

Figure 7 is a schematic block diagram of core network equipment according to an embodiment of the present application.

Figure 8 is a schematic block diagram of a communication device according to an embodiment of the present application.

Figure 9 is a schematic block diagram of a communication device according to an embodiment of the present application.

Figure 10 is a schematic block diagram of a chip according to an embodiment of the present application.

Figure 11 is a schematic block diagram of a communication system according to an embodiment of the present application.

Detailed ways

The technical solutions in the embodiments of the present application will be described below with reference to the accompanying drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, but not all of the embodiments. Based on the embodiments in this application, all other embodiments obtained by those of ordinary skill in the art without creative efforts fall within the scope of protection of this application.

The technical solutions of the embodiments of the present application can be applied to various communication systems, such as: Global System of Mobile communication (GSM) system, Code Division Multiple Access (Code Division Multiple Access, CDMA) system, Wideband Code Division Multiple Access (Wideband Code Division Multiple Access, WCDMA) system, General Packet Radio Service (GPRS), Long Term Evolution (LTE) system, LTE Frequency Division Duplex (FDD) system, LTE Time Division Duplex (Time Division Duplex, TDD), Universal Mobile Telecommunication System (UMTS), Worldwide Interoperability for Microwave Access (WiMAX) communication system or 5G system, or subsequent versions of communication systems.

Figure 1 shows a wireless communication system 100 applied in the embodiment of the present application. The wireless communication system 100 may include an access network device 110. The access network device 110 may be a device that communicates with terminal devices. The access network device 110 can provide communication coverage for a specific geographical area and can communicate with terminal devices located within the coverage area. Optionally, the access network device 110 may be a Next Generation Radio Access Network (NGRAN), a base station (gNB) in an NR system, or a Cloud Radio Access Network (Cloud Radio Access Network). , the wireless controller in CRAN) or the access network device 110 can be a mobile switching center, a relay station, an access point, a vehicle-mounted device, a wearable device, a hub, a switch, a network bridge, a router, or a network-side device in a 5G network Or network equipment in the future evolved Public Land Mobile Network (Public Land Mobile Network, PLMN), etc. Optionally, the access network device 110 may also be a base station in the LTE system, for example, an Evolved Universal Terrestrial Radio Access Network (E-UTRAN) device.

The wireless communication system 100 also includes at least one terminal device 120 located within the coverage of the access network device 110. Terminal device 120 may be mobile or stationary. Optionally, "terminal equipment" as used herein includes but is not limited to connections via wired lines, such as via Public Switched Telephone Networks (PSTN), Digital Subscriber Line (DSL), digital cables , a direct cable connection; and/or another data connection/network; and/or via a wireless interface, e.g. for cellular networks, Wireless Local Area Network (WLAN), digital television networks such as DVB-H networks, satellite networks , an AM-FM broadcast transmitter; and/or a device of another terminal device configured to receive/transmit communication signals; and/or an Internet of Things (IoT) device. A terminal device configured to communicate via a wireless interface may be referred to as a "wireless communication terminal", "wireless terminal" or "mobile terminal". Examples of mobile terminals include, but are not limited to, satellite or cellular telephones; Personal Communications System (PCS) terminals that may combine cellular radiotelephones with data processing, fax, and data communications capabilities; may include radiotelephones, pagers, Internet/Intranets PDA with access, Web browser, diary, calendar, BeiDou Navigation Satellite System (BDS) and Global Positioning System (GPS) receiver; as well as conventional laptops and/or handhelds Receiver or other electronic device including a radiotelephone transceiver. Terminal equipment may refer to access terminal, user equipment (User Equipment, UE), user unit, user station, mobile station, mobile station, remote station, remote terminal, mobile device, user terminal, terminal, wireless communication equipment, user agent or user device. The access terminal can be a cellular phone, a cordless phone, a Session Initiation Protocol (SIP) phone, a Wireless Local Loop (WLL) station, a Personal Digital Assistant (PDA), or a device with wireless communication capabilities. Handheld devices, computing devices or other processing devices connected to wireless modems, vehicle-mounted devices, wearable devices, terminal devices in 5G networks or terminal devices in future evolved PLMNs, etc.

The wireless communication system 100 also includes a core network device 130 that communicates with access network devices. Optionally, the core network device 130 may be a 5G core network device, such as an Access and Mobility Management Function (AMF), which is responsible for access and mobility management, and has the functions of authenticating, switching, and Location updates and other functions. As another example, the session management function (Session Management Function, SMF) is responsible for session management, including the establishment, modification, and release of packet data unit (Packet Data Unit, PDU) sessions. Another example is the User Plane Function (UPF), which is responsible for forwarding user data.

Optionally, terminal devices can communicate through Device to Device (D2D).

Figure 1 exemplarily shows an access network device, a core network device and two terminal devices. Optionally, the wireless communication system 100 may include multiple access network devices and the coverage of each access network device The scope may include other numbers of terminal devices, which are not limited in the embodiments of this application.

Optionally, the wireless communication system 100 may also include a Mobile Management Entity (MME), a Unified Data Management (UDM), an Authentication Server Function (AUSF), a UPF, a signaling gateway ( Signaling Gateway, SGW) and other network entities are not limited in the embodiments of this application. Figure 1 exemplarily shows one network device and two terminal devices. Optionally, the communication system 100 may include multiple network devices and the coverage of each network device may include other numbers of terminal devices. This application The embodiment does not limit this.

Figure 2 is a schematic flowchart of a communication method 200 according to an embodiment of the present application, where the method can be executed by a terminal device. The method 200 includes at least some of the following.

In 210, the terminal device obtains a first identification for accessing the first network.

Among them, the first network is a non-public core network deployed by operators, and the terminal equipment has a contract with PLMN.

In 220, the terminal device accesses the first network based on the first identification.

Figure 3 is a schematic flowchart of a communication method 300 according to an embodiment of the present application, where the method can be executed by a core network device. The method 300 includes at least some of the following.

In 310, the core network device receives the second request message sent by the terminal device.

The second request message may include a first identifier for the terminal device to access the first network and an identifier of the terminal device. The first network is a non-public core network deployed by an operator, and the terminal device has a contract with the PLMN.

In 320, the core network device sends a second request response message to the terminal device. The second request response message is used to indicate whether the terminal device is allowed to access the first network.

Figure 4 is a schematic flowchart of a communication method 400 according to an embodiment of the present application, where the method can be executed by the first device. The method 400 includes at least some of the following.

In 410, the first device receives the first request message sent by the terminal device.

The first request message is used to request a first identifier for accessing the first network. The first network is a non-public core network deployed by an operator, and the terminal device has a contract with the PLMN.

In 420, the first device sends a first request response message to the terminal device, where the first request response message includes the first identification.

The communication method according to the embodiment of the present application will be further described below with reference to Figures 2-4. It should be understood that the content described below can be applied to method 200 as well as methods 300 and 400 .

Optionally, in this embodiment of the present application, the first network may be, for example, a Type-a Network (Type-a Network, TAN).

The NR system introduces a vertical industrial LAN (Vertical Local Access Network, VLAN). VLAN networks can also be called non-public networks and provide non-public services. VLAN networks can be TAN and Type-b Network (TBN). Among them, TAN can access PLMN and provide PLMN services for UEs accessing TAN. TBN does not access PLMN and cannot provide PLMN for UEs accessing TBN. Serve. Among them, when TAN transmits data, it can transmit data to the external network, or it can only transmit data within the TAN. However, when TBN transmits data, it can only transmit data within the TBN and has no connection with the outside. The UPF of the TAN can be connected to the Data Network (DN) outside the PLMN network through interface N6. However, the TBN's UPF will not connect to DNs outside the PLMN network.

It should be noted that the embodiments of the present application do not limit the names of TAN and TBN, that is to say, they can also be expressed as other names.

Optionally, the first identification is an ID that can access the first network. For example, the first identification may be a verification code. Among them, one terminal device can correspond to at least one first identifier, and one first identifier can also correspond to at least one terminal device.

There are many ways for a terminal device to obtain the first identifier for accessing the first network, and the embodiments of this application do not specifically limit this.

In one implementation, the terminal device obtains the first identity for accessing the first network, which may include: the terminal device sends a first request message to the first device, where the first request message may be used to request the first identity, The request message may include the identification of the terminal device. After receiving the first request message, the first device may allocate a first identification to the terminal device. Afterwards, the first device may send a first request response message to the terminal device, where the first request response message includes the first identification. After the terminal device receives the first request response message, the terminal device may determine the first identification based on the first request response message.

Optionally, the identification of the terminal device may include, but is not limited to, International Mobile Subscriber Identification Number (IMSI), UE ID, and International Mobile Equipment Identity (IMEI). When the terminal device is a mobile phone, the identifier of the terminal device may also be the mobile phone number of the terminal device.

Optionally, the first device may be a core network device, an application server or a user device.

Optionally, after receiving the first request message, the first device may also determine the validity period of the first identification. For example, the validity period of the first identifier is 30 seconds. At this time, the first request response message may include the validity period of the first identifier.

Optionally, after the first device allocates the first identifier to the terminal device, the first device may save the corresponding relationship between the identifier of the terminal device reported by the terminal device and the first identifier.

In another implementation manner, when the first device is an application server, the terminal device can obtain the first identification through interaction within the application.

As an example, the terminal device can apply for the first identification on an application program, that is, the terminal device can send a data packet to the application server. After the application server assigns the first identification to the terminal device, the first identification can be transmitted to the terminal device through the data packet. Terminal Equipment.

In another implementation manner, the terminal device can obtain the first identification through communication between user devices.

For example, when the first identifier is a verification code, the first user equipment can tell the second user equipment the verification code. After obtaining the verification code, the second user equipment enters the verification code into the terminal device, so that the terminal device can obtain the verification code.

Optionally, the method in this embodiment of the present application may further include: the terminal device receiving a broadcast message sent by the access network device of the first network, where the broadcast message may include an identifier of the first network.

Optionally, the broadcast message may also include indication information allowing the terminal device that has signed a contract with the PLMN to access the first network.

After the terminal device reads the identifier of the first network, it compares it with the saved identifier of the first network. If the read identifier of the first network is the same as the saved identifier of the first network, the terminal device can determine where it is currently located. If the location is covered by the first network, the terminal device can initiate registration with the first network. For convenience of description, the following description will refer to the identity of the first network saved by the terminal device as the identity of the first network 1.

Optionally, the identity 1 of the first network may be obtained through the first identity, that is, the first identity may include the identity 1 of the first network.

Optionally, the identifier 1 of the first network may be pre-configured on the terminal device.

Optionally, the identity 1 of the first network may be obtained by the terminal device from a certain application.

After the terminal device establishes a connection with the access network device of the first network, if the first identifier is within the valid time period, the terminal device may send a second request message to the core network device, where the second request message may include the first identifier. and terminal device identification. After receiving the second request message, the core network device may determine whether to allow the terminal device to access the first network. Afterwards, the core network device may send a second request response message to the terminal device, where the second request response message is used to indicate whether the terminal device is allowed to access the first network.

If the second request response message indicates that the terminal device is allowed to access the first network, the terminal device may access the first network.

It should be understood that the core network equipment in the embodiment of this application is the core network equipment of the first network.

Optionally, the second request message may be a registration request message, or a Non-Access Stratum (NAS) message carrying a session establishment request message.

In a possible embodiment, the core network device determines whether to allow the terminal device to access the first network, which may include: the core network device determines whether to allow the terminal device to access the first network based on the first identifier and the identifier of the terminal device.

Specifically, the core network equipment can determine whether the terminal equipment has a contract with the PLMN. If the terminal device has a contract with the PLMN, the core network device may send a verification request message to the first device, and the verification request message may include the first terminal device identifier and the first identifier. The first device verifies the terminal device based on the first terminal device identifier and the first identifier. After obtaining the verification result, the first device may send a verification response message to the core network device, where the verification response message includes the verification result. Afterwards, the core network device may determine whether to allow the terminal device to access the first network based on the verification result.

The core network device determines whether the terminal device has a contract with the PLMN. As an example, the terminal device may send first indication information to the core network device, where the first indication information may be used to indicate that the terminal device has a contract with the PLMN. The core network device may determine that the terminal device has a contract with the PLMN according to the first indication information.

Optionally, the first indication information may be carried in the second request message.

Optionally, the first indication information may indicate whether the terminal device has a contract with the PLMN through at least one bit.

For example, the first indication information may use bit "0" to indicate that the terminal device has not signed a contract with the PLMN, and use bit "1" to indicate that the terminal device has signed a contract with the PLMN.

As another example, the number of bits of the first indication information may be multiple. If multiple bits are the same, it indicates that the terminal device has a contract with the PLMN. If at least two of the multiple bits are different, it indicates that the terminal The equipment has no contract with the PLMN. For example, "000" indicates that the terminal device has a contract with the PLMN, and "010" indicates that the terminal device has not signed a contract with the PLMN.

It should be understood that the specific examples in the embodiments of the present application are only to help those skilled in the art better understand the embodiments of the present invention, but are not intended to limit the scope of the embodiments of the present application.

Optionally, the first indication information may indicate whether the terminal device has a contract with the PLMN through the first parameter.

For example, if the first indication information includes the first parameter, it means that the terminal device has a contract with the PLMN; if the first indication information does not include the first parameter, it means that the terminal device does not have a contract with the PLMN.

It should be noted that the embodiment of the present application does not specifically limit the first parameter, and any parameter that can indicate whether the terminal device has a contract with the PLMN is included in the protection scope of the present application.

Optionally, the first indication information may be identification information of the terminal device. That is, the core network equipment can determine whether the terminal equipment has a contract with the PLMN by identifying the identifier of the terminal equipment.

In a possible embodiment, the first device verifies the terminal device based on the first terminal device identifier and the first identifier, which may include: the first device saves the second identifier and the identifier of the terminal device, wherein the second The identifier is an identifier for the terminal device to access the first network. Afterwards, the first device may determine whether the included second identifier and the identifier of the terminal device are consistent with the identifier of the first terminal device and the first identifier reported by the core network device. If they are consistent, the first device may allow the terminal device to access the first network; if they are inconsistent, the first device may not allow the terminal device to access the first network.

For example, the second identity saved by the first device is ID 1, the identity of the terminal device is ID 2, ID 1 corresponds to ID 2, the first identity reported by the core network device is ID 1', and the identity of the first terminal device is ID 2', then the first device checks whether it saves the ID 1' and ID 2' reported by the core network device. If the first device determines that ID 1’ is the same as ID 1 and ID 2’ is the same as ID2, that is, the first device verifies and saves ID 1’ and ID 2’ reported by the core network device. Then the first device can detect whether the corresponding relationship between ID1' and ID 2' is consistent with the corresponding relationship between ID 1 and ID 2. If they are consistent, the first device determines that the terminal device can access the first network; if they are inconsistent, the first device The device determines that the terminal device cannot access the first network.

If the first device determines that the terminal device can access the first network, the method in the embodiment of the present application may further include: the first device determines a valid time period for the terminal device to access the first network and/or a first time limit for allowing the terminal device to access the first network. Service, wherein the first service is a service of the first network accessed by the terminal device. For example, the first service may be surfing the Internet and sending text messages.

Optionally, the verification response message may include a valid time period for the terminal device to access the first network and/or a first service that the terminal device is allowed to access.

As an example, the first device may determine the effective time period for the terminal device to access the first network based on the traffic volume of the first network at the current moment.

For example, if the business volume of the first network at the current moment is large, the effective time for the terminal device to access the first network may be shorter, such as 1 hour; if the business volume of the first network at the current moment is small, the terminal device may access the first network for a shorter period of time. The valid time for accessing the first network can be longer, such as 2 hours.

As another example, the first device may determine a valid time period for the terminal device to access the first network based on a preset value.

Optionally, the preset value may be protocol-specified. For example, the agreement stipulates that the valid time for terminal equipment to access the first network is 2 hours.

Optionally, the first service included in the verification response message that the terminal device is allowed to access may be the service type and identification of the first service.

Optionally, the identifier may be, for example, an application name, a data network name (Data Network Name, DNN), or a single network slice selection assistance information (Single Network Slice Selection Assistance Information, S-NSSAI).

The method in the embodiment of the present application may also include: the core network device calls the signing request service to the UDM of the PLMN, where the signing request service is used to request the signing information of the terminal device; the core network device receives the signing request response service called by the UDM, and the The subscription request response service includes third indication information, where the third indication information may be used to indicate a second service that the terminal device is allowed to access, and the second service is a service of the PLMN that the terminal device accesses through the first network. For example, the second service may be a voice call, a long-term evolution voice bearer (Voice over Long-Term Evolution, VoLTE), etc.

Optionally, the core network device may obtain the identity of the PLMN from the identity of the terminal device, and then call the UDM of the PLMN to request a subscription service based on the identity of the PLMN.

Optionally, the third indication information may indicate the second service that the terminal device is allowed to access by indicating the service type and identification of the second service.

Optionally, the service identifier of the second service may be, for example, application name, DNN and S-NSSAI.

After the core network device obtains the first service and the second service that allow the terminal device to access, optionally, the method in the embodiment of the present application may also include: the terminal device receives the second indication information sent by the core network device, wherein, The second indication information is used to indicate the first service and/or the second service that the terminal device is allowed to access.

Optionally, the third indication information may be carried in the second request response message.

Optionally, after the core network device sends the second request response message to the terminal device, the core network device may send a NAS message to the terminal device, and the third indication information may be carried in the NAS message.

It should be understood that in the embodiments of the present application, “first”, “second” and “third” are only used to distinguish different objects, but do not limit the scope of the embodiments of the present application.

It should also be understood that the term "and/or" in this article is only an association relationship describing related objects, indicating that there can be three relationships. For example, A and/or B can mean: A alone exists, and A and A exist simultaneously. B, there are three situations of B alone.

Figure 5 provides a specific schematic diagram of an embodiment of the present application. In Figure 5, the first network is TAN, the first identifier is the first ID, the terminal device that has signed a contract with the PLMN is the PLMN UE, the identifier of the PLMN UE is the IMSI, and the access network device of the first network is the radio access network (Radio Access Network, RAN)-a, the core network equipment of the first network is AMF-a.

In 510, the PLMN UE sends a first request message requesting access to the first ID of the TAN to the first device. The first request message includes IMSI.

After receiving the first request message, the first device allocates the first ID and the validity period of the first ID to the PLMN UE, and saves the corresponding relationship between the first ID and the IMSI.

In 520, the first device sends a first request response message to the PLMN UE, where the first request response message includes the first ID and the validity period of the first ID.

In 530, RAN-a broadcasts the TAN ID.

Optionally, RAN-a may also broadcast an indication allowing the PLMN UE to access the TAN.

In 540, if the first ID is still within the validity period, the PLMN UE sends a second request message to AMF-a.

The second request message may include the IMSI, the first ID, and indication information indicating that the UE is a PLMN UE.

Optionally, the second request message may be a registration request message, or may be a NAS message carrying a PDU session establishment request message.

If AMF-a recognizes that the UE is a PLMN UE, AMF-a verifies the access of the PLMN UE and obtains the PLMN ID from the IMSI.

In 541, AMF-a calls the subscription request service to the UDM of the PLMN based on the PLMN ID, and the UDM calls the subscription request response service to the core network device.

Optionally, the subscription request response service may indicate that the PLMN UE is allowed to access the PLMN service through the TAN and the ID+DNN+S-NSSAI of the service.

In 550, AMF-a sends a verification request message to the first device, where the verification request message includes the IMSI and the first ID.

After receiving the verification request message, the first device verifies whether the PLMN UE can access the TAN. If the PLMN UE can access the TAN, the first device determines the validity period for which the PLMN UE can access the TAN and the length of the TAN that can be accessed. Service type and ID.

In 560, the first device sends a verification response message to AMF-a, where the verification response message includes the IMSI, the first ID, the validity period for which the TAN can be accessed, and the service type and ID of the TAN that the PLMN UE is allowed to access. .

In 570, AMF-a sends a second request response message to the PLMN UE.

The second request response message includes the first ID, the verification result, the validity period for accessing the TAN, the service type and ID of the TAN that the PLMN UE is allowed to access, and the service type and ID of the PLMN that the PLMN UE is allowed to access through the TAN. ID.

In the embodiment of this application, when a terminal device that has a contract with a PLMN enters the non-public core network deployed by the operator, the terminal device can obtain the identification of the non-public core network deployed by the operator, and thus can access the network based on the obtained identification. into the non-public core network deployed by the operator.

It should be understood that in the various embodiments of the present application, the size of the sequence numbers of the above-mentioned processes does not mean the order of execution. The execution order of each process should be determined by its functions and internal logic, and should not be used in the embodiments of the present application. The implementation process constitutes any limitation.

The communication method according to the embodiment of the present application is described in detail above. The device according to the embodiment of the present application will be described below with reference to Figures 6 to 9. The technical features described in the method embodiment are applicable to the following device embodiments.

Figure 6 shows a schematic block diagram of the terminal device 600 according to the embodiment of the present application. As shown in Figure 6, the terminal device 600 includes:

The processing unit 610 is configured to obtain a first identifier for accessing a first network. The first network is a non-public core network deployed by an operator. The terminal device 600 has a contract with the PLMN.

The processing unit 610 is also configured to access the first network based on the first identification.

Optionally, in this embodiment of the present application, the terminal device 600 further includes: a communication unit 620, configured to send a first request message to the first device. The first request message is used to request the first identity. The request message includes The identification of the terminal device 600;

The communication unit 620 is also configured to receive a first request response message sent by the first device, where the first request response message includes a first identifier.

Optionally, in this embodiment of the present application, the first request response message also includes the validity period of the first identification.

Optionally, in this embodiment of the present application, the first device is a core network device, an application server or a user device.

Optionally, in this embodiment of the present application, the terminal device 600 further includes: a communication unit 620, configured to send a second request message to the core network device, where the second request message includes the first identifier and the identifier of the terminal device 600. ;

The communication unit 620 is also configured to receive a second request response message sent by the core network device, where the second request response message is used to indicate whether the terminal device 600 is allowed to access the first network.

Optionally, in this embodiment of the present application, the second request message also includes first indication information, and the first indication information is used to indicate that the terminal device 600 has a contract with the PLMN.

Optionally, in this embodiment of the present application, the second request response message includes a valid time period for the terminal device 600 to access the first network.

Optionally, in this embodiment of the present application, the terminal device 600 further includes: a communication unit 620, configured to receive second indication information sent by the core network device, where the second indication information is used to indicate that the terminal device 600 is allowed to access. The first service and/or the second service, wherein the first service is a service of the first network that the terminal device 600 accesses, and the second service is a service of the PLMN that the terminal device 600 accesses through the first network.

Optionally, in this embodiment of the present application, the core network device is the core network device of the first network.

It should be understood that the terminal device 600 may correspond to the terminal device in the method 200, and may implement corresponding operations of the terminal device in the method 200. For the sake of brevity, details will not be described again.

Figure 7 shows a schematic block diagram of the core network device 700 according to the embodiment of the present application. As shown in Figure 7, the core network equipment 700 includes:

The communication unit 710 is configured to receive a second request message sent by the terminal device. The second request message includes a first identification of the terminal device for accessing the first network and an identification of the terminal device. The first network is a non-public network deployed by the operator. The core network and terminal equipment are contracted with PLMN.

The communication unit 710 is also configured to send a second request response message to the terminal device, where the second request response message is used to indicate whether the terminal device is allowed to access the first network.

Optionally, in this embodiment of the present application, the core network device 700 further includes: a processing unit 720, configured to determine whether to allow the terminal device to access the first network based on the first identification and the identification of the terminal device.

Optionally, in this embodiment of the present application, the communication unit 710 is specifically configured to: send a verification request message to the first device, where the verification request message includes the first terminal device identification and the first identification;

Receive a verification response message sent by the first device, where the verification response message includes a verification result of whether the terminal device is allowed to access the first network;

The processing unit 720 is specifically configured to: based on the verification result, determine whether the terminal device is allowed to access the first network.

Optionally, in this embodiment of the present application, the verification response message also includes a valid time period for the terminal device to access the first network and/or a first service that the terminal device is allowed to access, where the first service is the terminal device access. Enter the first network business.

Optionally, in this embodiment of the present application, the first device is a core network device, an application server or a user device.

Optionally, in this embodiment of the present application, the core network device 700 further includes: a processing unit 720, configured to determine whether the terminal device has a contract with the PLMN.

Optionally, in this embodiment of the present application, the processing unit 720 is specifically configured to: determine whether the terminal device has a contract with the PLMN based on the first indication information, where the first indication information is used to indicate that the terminal device has a contract with the PLMN.

Optionally, in this embodiment of the present application, the first indication information is identification information of the terminal device.

Optionally, in this embodiment of the present application, the core network device 700 also includes: a processing unit 720, configured to call a subscription request service to the UDM of the PLMN, where the subscription request service is used to request subscription information of the terminal device;

The communication unit 710 is also configured to: receive a subscription request response service called by UDM. The subscription request response service includes third indication information. The third indication information is used to indicate a second service that is allowed to be accessed by the terminal device. The second service is The terminal equipment accesses PLMN services through the first network.

Optionally, in this embodiment of the present application, the communication unit 710 is also configured to: send second indication information to the terminal device, where the second indication information is used to indicate the first service and/or the second service that the terminal device is allowed to access. Services, wherein the first service is a service of a first network that the terminal device accesses, and the second service is a service of a PLMN that the terminal device accesses through the first network.

Optionally, in this embodiment of the present application, the second request response message includes a valid time period for the terminal device to access the first network.

Optionally, in this embodiment of the present application, the core network device 700 is the core network device of the first network.

It should be understood that the core network device 700 may correspond to the core network device in the method 400, and may implement corresponding operations of the core network device in the method 400. For the sake of brevity, details will not be repeated here.

FIG. 8 shows a schematic block diagram of a communication device 800 according to an embodiment of the present application. The communication device 800 is the first device in an embodiment of the present application. As shown in Figure 8, the communication device 800 includes:

The communication unit 810 is configured to receive a first request message sent by the terminal device. The first request message is used to request a first identification of access to the first network. The first network is a non-public core network deployed by the operator. The terminal device There is a contract with PLMN.

The communication unit 810 is also configured to send a first request response message to the terminal device, where the first request response message includes the first identification.

Optionally, in this embodiment of the present application, the first request response message also includes the validity period of the first identification.

Optionally, in this embodiment of the present application, the communication unit 810 is also configured to: receive a verification request message sent by the core network device, where the verification request message includes a first terminal device identifier and a first identifier;

The communication device 810 also includes: a processing unit 820, configured to verify the terminal device based on the first terminal device identifier and the first identifier to obtain a verification result;

The processing unit 820 is also configured to determine, based on the verification result, whether to allow the terminal device to access the first network.

Optionally, in this embodiment of the present application, the first request message includes the identity of the terminal device, and the processing unit 820 is further configured to: save the second identity and the identity of the terminal device, where the second identity is the terminal device access The logo of First Network.

Optionally, in this embodiment of the present application, the processing unit 820 is specifically configured to: determine whether the saved second identity and the identity of the terminal device are consistent with the first identity of the terminal device and the first identity reported by the core network device;

If they are consistent, the terminal device is allowed to access the first network; if they are inconsistent, the terminal device is not allowed to access the first network.

Optionally, in this embodiment of the present application, if the processing unit 820 determines that the terminal device is allowed to access the first network, the processing unit 820 is further configured to determine a valid time period for the terminal device to access the first network.

Optionally, in this embodiment of the present application, the communication unit 810 is also configured to send a verification response message to the core network device, where the verification response message includes the verification result and the valid time period for the terminal device to access the first network.

Optionally, in this embodiment of the present application, the verification response message also includes a first service that the terminal device is allowed to access, where the first service is a service of the first network that the terminal device accesses.

Optionally, in this embodiment of the present application, the core network device is the core network device of the first network.

Optionally, in this embodiment of the present application, the first device is a core network device, an application server or a user device.

It should be understood that the communication device 800 may correspond to the communication device in the method 500, and may implement corresponding operations of the communication device in the method 500. For the sake of brevity, details will not be described again.

Figure 9 is a schematic structural diagram of a communication device 900 provided by an embodiment of the present application. The communication device 900 shown in Figure 9 includes a processor 910. The processor 910 can call and run a computer program from the memory to implement the method in the embodiment of the present application.

Optionally, as shown in Figure 9, the communication device 900 may further include a memory 920. The processor 910 can call and run the computer program from the memory 920 to implement the method in the embodiment of the present application.

The memory 920 may be a separate device independent of the processor 910 , or may be integrated into the processor 910 .

Optionally, as shown in Figure 9, the communication device 900 may also include a transceiver 930, and the processor 910 may control the transceiver 930 to communicate with other devices. Specifically, it may send information or data to other devices, or receive other devices. Information or data sent by the device.

Among them, the transceiver 930 may include a transmitter and a receiver. The transceiver 930 may further include an antenna, and the number of antennas may be one or more.

Optionally, the communication device 900 may specifically be a terminal device according to the embodiment of the present application, and the communication device 900 may implement the corresponding processes implemented by the terminal device in the various methods of the embodiment of the present application. For the sake of brevity, details will not be repeated here. .

Optionally, the communication device 900 may specifically be the core network device in the embodiment of the present application, and the communication device 900 may implement the corresponding processes implemented by the core network device in the various methods of the embodiment of the present application. For the sake of brevity, they are not mentioned here. Again.

Optionally, the communication device 900 may specifically be the first device in the embodiment of the present application, and the communication device 900 may implement the corresponding processes implemented by the first device in the various methods of the embodiment of the present application. For the sake of brevity, no details are provided here. Again.

Figure 10 is a schematic structural diagram of a chip according to an embodiment of the present application. The chip 1000 shown in Figure 10 includes a processor 1010. The processor 1010 can call and run a computer program from the memory to implement the method in the embodiment of the present application.

Optionally, as shown in FIG. 10 , the chip 1000 may also include a memory 1020 . The processor 1010 can call and run the computer program from the memory 1020 to implement the method in the embodiment of the present application.

The memory 1020 may be a separate device independent of the processor 1010, or may be integrated into the processor 1010.

Optionally, the chip 1000 may also include an input interface 1030. The processor 1010 can control the input interface 1030 to communicate with other devices or chips. Specifically, it can obtain information or data sent by other devices or chips.

Optionally, the chip 1000 may also include an output interface 1040. The processor 1010 can control the output interface 1040 to communicate with other devices or chips. Specifically, it can output information or data to other devices or chips.

Optionally, the chip can be applied to the terminal device in the embodiment of the present application, and the chip can implement the corresponding processes implemented by the terminal device in each method of the embodiment of the present application. For the sake of brevity, details will not be described again.

Optionally, the chip can be applied to the core network equipment in the embodiment of the present application, and the chip can implement the corresponding processes implemented by the core network equipment in the various methods of the embodiment of the present application. For the sake of brevity, details will not be described here.

Optionally, the chip can be applied to the first device in the embodiment of the present application, and the chip can implement the corresponding processes implemented by the first device in the various methods of the embodiment of the present application. For the sake of brevity, the details will not be described again.

It should be understood that the chips mentioned in the embodiments of this application may also be called system-on-chip, system-on-a-chip, system-on-chip or system-on-chip, etc.

It should be understood that the processor in the embodiment of the present application may be an integrated circuit chip and has signal processing capabilities. During the implementation process, each step of the above method embodiment can be completed through an integrated logic circuit of hardware in the processor or instructions in the form of software. The above-mentioned processor can be a general-purpose processor, a digital signal processor (Digital Signal Processor, DSP), an application specific integrated circuit (Application Specific Integrated Circuit, ASIC), an off-the-shelf programmable gate array (Field Programmable Gate Array, FPGA) or other programmable processors. Logic devices, discrete gate or transistor logic devices, discrete hardware components. Each method, step and logical block diagram disclosed in the embodiment of this application can be implemented or executed. A general-purpose processor may be a microprocessor or the processor may be any conventional processor, etc. The steps of the method disclosed in conjunction with the embodiments of the present application can be directly implemented by a hardware decoding processor, or executed by a combination of hardware and software modules in the decoding processor. The software module can be located in random access memory, flash memory, read-only memory, programmable read-only memory or electrically erasable programmable memory, registers and other mature storage media in this field. The storage medium is located in the memory, and the processor reads the information in the memory and completes the steps of the above method in combination with its hardware.

It can be understood that the memory in the embodiment of the present application may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memories. Among them, the non-volatile memory can be read-only memory (Read-Only Memory, ROM), programmable read-only memory (Programmable ROM, PROM), erasable programmable read-only memory (Erasable PROM, EPROM), electrically removable memory. Erase programmable read-only memory (Electrically EPROM, EEPROM) or flash memory. The volatile memory may be random access memory (RAM), which is used as an external cache. By way of illustration, but not limitation, many forms of RAM are available, such as static random access memory (SRAM), dynamic random access memory (Dynamic RAM, DRAM), synchronous dynamic random access memory (Synchronous DRAM, SDRAM), double data rate synchronous dynamic random access memory (Double Data Rate SDRAM, DDR SDRAM), enhanced synchronous dynamic random access memory (Enhanced SDRAM, ESDRAM), synchronous link dynamic random access memory (Synchlink DRAM, SLDRAM) and direct memory bus random access memory (DirectRambus RAM, DR RAM). It should be noted that the memory of the systems and methods described herein is intended to include, but is not limited to, these and any other suitable types of memory.

It should be understood that the above memory is illustrative but not restrictive. For example, the memory in the embodiment of the present application can also be static random access memory (static RAM, SRAM), dynamic random access memory (dynamic RAM, DRAM), Synchronous dynamic random access memory (synchronous DRAM, SDRAM), double data rate synchronous dynamic random access memory (double data rate SDRAM, DDR SDRAM), enhanced synchronous dynamic random access memory (enhanced SDRAM, ESDRAM), synchronous connection Dynamic random access memory (synch link DRAM, SLDRAM) and direct memory bus random access memory (Direct Rambus RAM, DR RAM) and so on. That is, memories in embodiments of the present application are intended to include, but are not limited to, these and any other suitable types of memories.

Figure 11 is a schematic block diagram of a communication system 1100 provided by an embodiment of the present application. As shown in Figure 11, the communication system 1100 includes a terminal device 1110, a core network device 1120 and a first device 1130.

Among them, the terminal device 1110 can be used to implement the corresponding functions implemented by the terminal device in the above method, the core network device 1120 can be used to implement the corresponding functions implemented by the core network device in the above method, and the first device 1130 It can be used to implement the corresponding functions implemented by the first device in the above method, which will not be described again for the sake of simplicity.

Embodiments of the present application also provide a computer-readable storage medium for storing computer programs.

Optionally, the computer-readable storage medium can be applied to the terminal device in the embodiment of the present application, and the computer program causes the computer to execute the corresponding processes implemented by the terminal device in each method of the embodiment of the present application. For the sake of simplicity, here No longer.

Optionally, the computer-readable storage medium can be applied to the core network equipment in the embodiment of the present application, and the computer program causes the computer to execute the corresponding processes implemented by the core network equipment in the various methods of the embodiment of the present application. For the sake of simplicity, I won’t go into details here.

Optionally, the computer-readable storage medium can be applied to the first device in the embodiment of the present application, and the computer program causes the computer to execute the corresponding processes implemented by the first device in the various methods of the embodiment of the present application. For the sake of simplicity, I won’t go into details here.

An embodiment of the present application also provides a computer program product, including computer program instructions.

Optionally, the computer program product can be applied to the terminal device in the embodiment of the present application, and the computer program instructions cause the computer to execute the corresponding processes implemented by the terminal device in the various methods of the embodiment of the present application. For the sake of brevity, they are not mentioned here. Again.

Optionally, the computer program product can be applied to the core network equipment in the embodiment of the present application, and the computer program instructions cause the computer to execute the corresponding processes implemented by the core network equipment in the various methods of the embodiment of the present application. For simplicity, in This will not be described again.

Optionally, the computer program product can be applied to the first device in the embodiment of the present application, and the computer program instructions cause the computer to execute the corresponding processes implemented by the first device in the various methods of the embodiment of the present application. For simplicity, in This will not be described again.

An embodiment of the present application also provides a computer program.

Optionally, the computer program can be applied to the terminal device in the embodiment of the present application. When the computer program is run on the computer, it causes the computer to execute the corresponding processes implemented by the terminal device in the various methods of the embodiment of the present application. For the sake of simplicity , which will not be described in detail here.

Optionally, the computer program can be applied to the core network equipment in the embodiments of the present application. When the computer program is run on the computer, it causes the computer to execute the corresponding processes implemented by the core network equipment in the various methods of the embodiments of the present application. For the sake of brevity, no further details will be given here.

Optionally, the computer program can be applied to the first device in the embodiment of the present application. When the computer program is run on the computer, it causes the computer to execute the corresponding processes implemented by the first device in each method of the embodiment of the present application. For the sake of brevity, no further details will be given here.

Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented with electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Skilled artisans may implement the described functionality using different methods for each specific application, but such implementations should not be considered beyond the scope of this application.

Those skilled in the art can clearly understand that for the convenience and simplicity of description, the specific working processes of the systems, devices and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be described again here.

In the several embodiments provided in this application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only illustrative. For example, the division of the units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components may be combined or can be integrated into another system, or some features can be ignored, or not implemented. On the other hand, the coupling or direct coupling or communication connection between each other shown or discussed may be through some interfaces, and the indirect coupling or communication connection of the devices or units may be in electrical, mechanical or other forms.

The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place, or they may be distributed to multiple network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in each embodiment of the present application can be integrated into one processing unit, each unit can exist physically alone, or two or more units can be integrated into one unit.

If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the existing technology or the part of the technical solution can be embodied in the form of a software product. The computer software product is stored in a storage medium, including Several instructions are used to cause a computer device (which may be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in various embodiments of this application. The aforementioned storage media include: U disk, mobile hard disk, read-only memory (Read-Only Memory,) ROM, random access memory (Random Access Memory, RAM), magnetic disk or optical disk and other media that can store program code. .

The above are only specific embodiments of the present application, but the protection scope of the present application is not limited thereto. Any person familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed in the present application. should be covered by the protection scope of this application. Therefore, the protection scope of this application should be determined by the protection scope of the claims.

Claims (34)

1. A communication method, characterized in that the method includes: The terminal device obtains a first identifier for accessing a first network, the first network is a non-public core network deployed by an operator, and the terminal device has a contract with the public land mobile network PLMN; The terminal device accesses the first network based on the first identification; Wherein, the terminal device obtains the first identifier for accessing the first network, including: The terminal device sends a first request message to the first device, the first request message is used to request the first identification, and the first request message includes the identification of the terminal device; The terminal device receives a first request response message sent by the first device. The first request response message includes the first identification, wherein the first request response message also includes a valid value of the first identification. duration; Wherein, the first device is an application server; Wherein, the terminal device accesses the first network based on the first identification, including: The terminal device sends a second request message to the core network device, where the second request message includes the first identifier and the identifier of the terminal device; The terminal device receives a second request response message sent by the core network device, and the second request response message is used to indicate whether the terminal device is allowed to access the first network. 2. The method according to claim 1, characterized in that the second request message further includes first indication information, and the first indication information is used to indicate that the terminal device has a contract with the PLMN. 3. The method according to claim 1, wherein the second request response message includes a valid time period for the terminal device to access the first network. 4. The method according to any one of claims 1 to 3, characterized in that the method further comprises: The terminal device receives second indication information sent by the core network device, and the second indication information is used to indicate the first service and/or the second service that the terminal device is allowed to access, wherein the first service is The service of the first network that the terminal device accesses, and the second service is the service of the PLMN that the terminal device accesses through the first network. 5. The method according to any one of claims 1 to 3, characterized in that the core network device is the core network device of the first network. 6. A communication method, characterized in that the method includes: The core network device receives a second request message sent by the terminal device. The second request message includes a first identifier for the terminal device to access the first network and an identifier of the terminal device. The first network is deployed by the operator. A non-public core network, and the terminal equipment has a contract with the public land mobile network PLMN; The core network device sends a second request response message to the terminal device, where the second request response message is used to indicate whether the terminal device is allowed to access the first network; Wherein, before the core network device sends the second request response message to the terminal device, the method further includes: The core network device determines whether to allow the terminal device to access the first network based on the first identifier and the identifier of the terminal device; The core network device determines whether to allow the terminal device to access the first network based on the first identifier and the identifier of the terminal device, including: The core network device sends a verification request message to the first device, where the verification request message includes a first terminal device identifier and the first identifier; The core network device receives a verification response message sent by the first device, where the verification response message includes a verification result of whether the terminal device is allowed to access the first network; The core network device determines whether to allow the terminal device to access the first network based on the verification result, Wherein, the first device is an application server. 7. The method according to claim 6, wherein the verification response message further includes a valid time period for the terminal device to access the first network and/or a first time period for allowing the terminal device to access the first network. Service, wherein the first service is a service of the first network accessed by the terminal device. 8. The method according to claim 6, characterized in that, the method further comprises: The core network device determines whether the terminal device has a contract with the PLMN. 9. The method according to claim 8, characterized in that the core network device determines whether the terminal device has a contract with the PLMN, including: The core network device determines whether the terminal device has a contract with the PLMN based on the first indication information, and the first indication information is used to indicate that the terminal device has a contract with the PLMN. 10. The method according to claim 9, wherein the first indication information is identification information of the terminal device. 11. The method according to any one of claims 6 to 10, characterized in that the method further comprises: The core network device calls the subscription request service to the unified data management UDM of the PLMN, and the subscription request service is used to request the subscription information of the terminal device; The core network device receives the subscription request response service called by the UDM, and the subscription request response service includes third indication information, and the third indication information is used to indicate the second service that the terminal device is allowed to access, so The second service is a service of the PLMN accessed by the terminal device through the first network. 12. The method according to any one of claims 6 to 10, characterized in that the method further comprises: The core network device sends second indication information to the terminal device, the second indication information is used to indicate the first service and/or the second service that the terminal device is allowed to access, wherein the first service The second service is a service of the first network that the terminal device accesses through the first network, and the second service is a service of the PLMN that the terminal device accesses through the first network. 13. The method according to any one of claims 6 to 10, characterized in that the second request response message includes a valid time period for the terminal device to access the first network. 14. The method according to any one of claims 6 to 10, characterized in that the core network device is the core network device of the first network. 15. A terminal device, characterized in that it includes: A processing unit configured to obtain a first identification for accessing a first network, where the first network is a non-public core network deployed by an operator, and the terminal device has a contract with the public land mobile network PLMN; The processing unit is also configured to access the first network based on the first identification; Wherein, the terminal equipment also includes: A communication unit configured to send a first request message to the first device, the first request message being used to request the first identification, and the first request message including the identification of the terminal device; The communication unit is further configured to receive a first request response message sent by the first device, where the first request response message includes the first identification, wherein the first request response message also includes the third The validity period of a logo; Wherein, the first device is an application server; Wherein, the communication unit is further configured to send a second request message to the core network device, where the second request message includes the first identifier and the identifier of the terminal device; The communication unit is further configured to receive a second request response message sent by the core network device, where the second request response message is used to indicate whether the terminal device is allowed to access the first network. 16. The terminal device according to claim 15, wherein the second request message further includes first indication information, and the first indication information is used to indicate that the terminal device has a contract with the PLMN. 17. The terminal device according to claim 15, wherein the second request response message includes a valid time period for the terminal device to access the first network. 18. The terminal device according to any one of claims 15 to 17, characterized in that the terminal device further includes: A communication unit, configured to receive second indication information sent by the core network device, where the second indication information is used to indicate the first service and/or the second service that the terminal device is allowed to access, wherein the first service The second service is a service of the first network that the terminal device accesses through the first network, and the second service is a service of the PLMN that the terminal device accesses through the first network. 19. The terminal device according to any one of claims 15 to 17, characterized in that the core network device is the core network device of the first network. 20. A core network equipment, characterized by including: A communication unit configured to receive a second request message sent by a terminal device. The second request message includes a first identifier for the terminal device to access a first network and an identifier of the terminal device. The first network is an operator. A non-public core network deployed by a commercial provider, and the terminal equipment has a contract with the public land mobile network PLMN; The communication unit is further configured to send a second request response message to the terminal device, where the second request response message is used to indicate whether the terminal device is allowed to access the first network; Among them, the core network equipment also includes: A processing unit configured to determine whether to allow the terminal device to access the first network based on the first identifier and the identifier of the terminal device; The communication unit is specifically used for: Send a verification request message to the first device, where the verification request message includes a first terminal device identifier and the first identifier; Receive a verification response message sent by the first device, where the verification response message includes a verification result of whether the terminal device is allowed to access the first network; The processing unit is specifically used for: Based on the verification result, determine whether the terminal device is allowed to access the first network, Wherein, the first device is an application server. 21. The core network device according to claim 20, wherein the verification response message further includes a valid time period for the terminal device to access the first network and/or a time limit for allowing the terminal device to access the first network. A first service, wherein the first service is a service of the first network accessed by the terminal device. 22. The core network equipment according to claim 20, characterized in that the core network equipment further includes: A processing unit, configured to determine whether the terminal device has a contract with the PLMN. 23. The core network equipment according to claim 22, characterized in that the processing unit is specifically used to: Based on the first indication information, it is determined whether the terminal equipment has a contract with the PLMN, and the first indication information is used to indicate that the terminal equipment has a contract with the PLMN. 24. The core network device according to claim 23, wherein the first indication information is the identification information of the terminal device. 25. The core network equipment according to any one of claims 20 to 24, characterized in that the core network equipment further includes: A processing unit configured to call a subscription request service to the unified data management UDM of the PLMN, where the subscription request service is used to request subscription information of the terminal device; The communication unit is also used for: Receive a subscription request response service called by the UDM. The subscription request response service includes third indication information. The third indication information is used to indicate a second service that is allowed to be accessed by the terminal device. The second service is The terminal device accesses PLMN services through the first network. 26. The core network device according to any one of claims 20 to 24, characterized in that the communication unit is also used for: Send second indication information to the terminal device, where the second indication information is used to indicate a first service and/or a second service that the terminal device is allowed to access, wherein the first service is A service of the first network accessed, and the second service is a service of the PLMN accessed by the terminal device through the first network. 27. The core network device according to any one of claims 20 to 24, wherein the second request response message includes a valid time period for the terminal device to access the first network. 28. The core network device according to any one of claims 20 to 24, characterized in that the core network device is the core network device of the first network. 29. A terminal device, characterized in that it includes: a processor and a memory, the memory is used to store a computer program, the processor is used to call and run the computer program stored in the memory, and execute the steps of claims 1 to 29. The method described in any one of 5. 30. A core network device, characterized in that it includes: a processor and a memory, the memory is used to store a computer program, the processor is used to call and run the computer program stored in the memory, and execute as claimed in claim 6 The method described in any one of to 14. 31. A chip, characterized in that it includes: a processor, configured to call and run a computer program from a memory, so that a device equipped with the chip executes the method according to any one of claims 1 to 5. 32. A chip, characterized by comprising: a processor, configured to call and run a computer program from a memory, so that a device equipped with the chip executes the method according to any one of claims 6 to 14. 33. A computer-readable storage medium, characterized in that it is used to store a computer program, the computer program causing the computer to execute the method according to any one of claims 1 to 5. 34. A computer-readable storage medium, characterized in that it is used to store a computer program, the computer program causing the computer to execute the method according to any one of claims 6 to 14.