Huawei Technologies Co., Limited

Yizhuang Wu

Chunshan Xiong

Yanmei Yang

Cuili Ge

Haiyang Sun

Hui Ni

He Li

Yongcui Li

Wanqiang Zhang

Rong Wu

Anni Wei

Xiaobo Wu

Yan Li

Jing Lan Chen

Yang Xin

Fang Yu

Weiwei Chong

Ao Lei

Meng Li

Jing Chen

Xiaoyan Shi

Yongqiang Gao

Fangyuan Zhu

Huan Li

Li Hu

Hualin Zhu

Qiang Deng

Wei Lu

Hui Ding

Haoren Zhu

Ruizhi Liu

Yao Hua

Longhua Guo

Yang Cui

Yong Wang

Zhongding Lei

This application discloses a key obtaining method and a communication apparatus. A remote terminal device sends a first identifier and a relay service code to a relay terminal device. The first identifier is an identifier that is of the remote terminal device and that is corresponding to the relay service code, or the first identifier is an anonymous identifier of the remote terminal device. The remote terminal device generates, based on a first shared key, the relay service code, and at least one first freshness parameter, a root key for communication between the remote terminal device and the relay terminal device. A remote authentication service function network element is an authentication service function network element that serves the remote terminal device, and the first shared key is a key shared between the remote terminal device and the remote authentication service function network element.

Key obtaining method and communication apparatus

A resource information sending method includes determining, by a first network element, a remaining resource of a terminal in a first network, and sending, by the first network element to a first policy control network element, information indicating the remaining resource of the terminal in the first network. The first network is at least one of a first data network or a first network slice. The remaining resource is a subscribed resource currently available to the terminal in the first network. The first policy control network element is a policy control network element configured to provide a service for the terminal in the first network.

Resource information sending method, first network element and system

Embodiments of this application provide a communication method, apparatus, and system, to improve security of a vehicle-to-everything (V2X) PC5 establishment procedure. In the method, a first terminal device obtains a first security protection method, where the first security protection method is a security protection method determined in a discovery procedure between the first terminal device and a second terminal device. Also in the method, the first terminal device determines a second security protection method according to the first security protection method, where the second security protection method is a security protection method for a PC5 connection between the first terminal device and the second terminal device. For example, a security level of the second security protection method is higher than a security level of the first security protection method. The communication method is applicable to the V2X communication field.

Communication method, apparatus, and system

In an embodiment a method includes receiving, by a policy control network element, first information from a first network element, wherein the first information comprises a group identifier and a data type corresponding to the group identifier, the group identifier indicating a group and the group comprising one or more terminal devices, and obtaining, by the policy control network element, first data based on the first information, wherein the first data is data corresponding to the data type.

Communication method, device, and system for obtaining data corresponding to a group to which a terminal device belongs

An authentication management function AUSF receives an authentication request message from an access and mobility management function AMF, where the authentication request message carries a subscription concealed identifier SUCI. The AUSF sends an authentication vector get request message to a unified data management UDM function, where the authentication vector get request message carries the SUCI. The AUSF receives an authentication vector get response message from the UDM, where the authentication vector get response message includes authentication and key management for application AKMA indication information. The AUSF generates, based on the AKMA indication information, an authentication and key management for application-key identifier based on a routing indicator RID in the SUCI.

Key identifier generation method and related apparatus

A communication method includes receiving, by a policy control network element executed by a processor, first information. The first information is service information or a traffic steering requirement. The traffic steering requirement includes at least one service function. The communication method also includes obtaining, by the policy control network element, first traffic steering policy information from a first network element based on the first information. The first traffic steering policy information indicates network elements corresponding to the at least one service function and a sequence in which service data passes through the network elements corresponding to the at least one service function.

A quality of service (QoS) control method and a device, where the method includes: a session management function (SMF) entity obtaining service data flow (SDF)-level QoS control information; the SMF entity sending the SDF-level QoS control information to a terminal; and the terminal performing QoS control on an uplink data packet based on the SDF-level QoS control information, or the terminal deleting the SDF-level QoS control information. The terminal can perform the QoS control on the uplink data packet based on the SDF-level QoS control information.

QoS control method and device

This application provides a key management method, a device, and a system. The method includes: A terminal device sends a first application session establishment request message to a first application function network element, where the establishment request message carries identification information of a first key, and the first key is an authentication and key management for applications AKMA key. The terminal device receives a first authentication request message in a procedure of the re-authentication. The terminal device sends a response message for the first authentication request message in the procedure of the re-authentication. The terminal device receives a response message for the establishment request message. The terminal device derives a communication key between the terminal device and the first application function network element by using the first key.

Key management method, device, and system

A method for determining a user plane security algorithm, a system, and an apparatus. The method may include: a second device selects a non-null user plane confidentiality protection algorithm based on a security capability of a first device and a security capability of the second device in a case in which user plane confidentiality protection between the second device and the first device is enabled and control plane confidentiality protection between the second device and the first device is not enabled. The second device sends a first message to the first device. The first message includes first algorithm indication information indicating the user plane confidentiality protection algorithm. Therefore, the first device can obtain the non-null user plane confidentiality protection algorithm. Embodiments can be adopted to determine an effective user plane confidentiality protection algorithm, for confidentiality protecting user plane data.

Method, system, and apparatus for determining user plane security algorithm

This application provides a method for controlling disorder of downlink data and an apparatus thereof. The method includes: A control plane network element determines to switch from a first user plane device to a second user plane device, and sends indication information to the second user plane device. The second user plane device buffers, according to the received indication information, downlink data received from a session anchor, and sends the buffered downlink data after reception of an end marker from the first user plane device.

Method and apparatus for controlling disorder of downlink data

Disclosed is an AMBR control method, device, and system, so that a quality of service (QoS) control mechanism can be used to control use of resources in a network slice by a terminal device. The method includes: a mobility management network element obtaining M pieces of single network slice selection assistance information (S-NSSAI) corresponding to a terminal device and a first slice-AMBR corresponding to each piece of S-NSSAI in the M pieces of S-NSSAI; and sending the M pieces of S-NSSAI and the first slice-AMBR corresponding to each piece of S-NSSAI to an access network device, where the first slice-AMBR corresponding to each piece of S-NSSAI is used to determine a second slice-AMBR corresponding to the S-NSSAI, and the second slice-AMBR corresponding to each piece of S-NSSAI is used to control an aggregate bit rate of non-guaranteed bit rate non-GBR QoS flows in a network slice indicated by the S-NSSAI.

AMBR control method, device, and system

This application provides a communication system, method, and apparatus. The system is applied to implement authentication and key management for applications (AKMA) service-based data transmission between a terminal device and an application function network element. The system includes an AKMA anchor function network element and a network exposure function network element. The network exposure function network element obtains first identification information from a unified data management network element, where the first identification information is used to determine an authentication server function network element corresponding to the terminal device, and sends the first identification information to the AKMA anchor function network element. The AKMA anchor function network element obtains, from the unified data management network element based on the first identification information, identification information of the authentication server function network element corresponding to the terminal device.

Communication system, method, and apparatus

This application discloses a multicast session establishment method and a network device, and relates to the field of wireless communication technologies, to implement establishment of a multicast session based on a network architecture that has been deployed by an operator. In one example, when the multicast session is established, policy control, for example, quality of service QoS control, of the multicast session may be completed via a policy control network element or a session management network element in the network architecture that has been deployed by the operator.

Multicast session establishment method and network device

A communications method and apparatus, where the method includes: sending, by a session management network element, first indication information when the session management network element determines, based on first information, to establish a first low-latency service flow for a session, wherein the first indication information is used to indicate to set the session to an always-on session. According to solutions of this application, when determining to establish the low-latency service flow, the session management network element flexibly indicates to a terminal apparatus to set the session to the always-on session. This avoids a resource waste caused by setting the session to the always-on session all the time, and avoids a transmission latency caused when the session is not set to the always-on session in time, such that resource utilization and transmission efficiency are improved.

Communications method and apparatus

This application provides a communication method and apparatus. A first mobility management function entity may receive event information from a unified data management function entity, where the event information indicates a first-type terminal event. Therefore, when a terminal apparatus is reachable, the first mobility management function entity may send, based on the event information, a terminal event report to an application function entity that subscribes to the first-type terminal event, thereby improving pertinence of sending the terminal event report.

Growing community of inventors

Beijing, China

Yizhuang Wu