Data packet verification method and device

A communications apparatus, comprising:

• a memory, a communications interface, and at least one processor;
• wherein the memory is configured to store computer executable program code;
• the at least one processor is coupled to the memory and the communications interface, the program code stored in the memory including at least one instruction, and when the at least one processor executes the instruction, the at least one instruction enables the communications apparatus to perform operations comprising:
• receiving a data packet of a terminal device of a type that performs data interaction with a user plane function entity, wherein the data packet carries a first token and a service identifier, and the service identifier includes a service type indicator used to indicate a type of a service to which the data packet belongs, the service identifier further including an identifier of a server that provides the indicated type of service;
• obtaining first input information based on the data packet, and generating a second token based on the first input information, wherein the first input information comprises an identifier of the terminal device, the service identifier and a third token generated by the terminal device and obtained by the user plane function entity;
• and
• using the first token to update the third token at the terminal device,
• wherein generating the second token based on the first input information includes using the third token as an input parameter to generate the second token;
• and
• sending the data packet in response to the first token is the same as the second token.

A non-transitory computer readable storage medium storing an instruction, that when executed by a computer, enables the computer to perform functions comprising:

• receiving a data packet of a terminal device of a type that performs data interaction with a user plane function entity, wherein the data packet carries a first token and a service identifier, and the service identifier includes a service type indicator used to indicate a type of a service to which the data packet belongs, the service identifier further including an identifier of a server that provides the indicated type of service;
• obtaining first input information based on the data packet, and generating a second token based on the first input information, wherein the first input information comprises an identifier of the terminal device, the service identifier and a third token generated by the terminal device and obtained by the user plane function entity;
• and
• using the first token to update the third token at the terminal device,
• wherein generating the second token based on the first input information includes using the third token as an input parameter to generate the second token;
• and
• sending the data packet in response to the first token is the same as the second token.