External authentication method, communication apparatus, and communication system

A method, comprising:

• obtaining, by a data management network element of a first telecommunications network, an identity of a terminal;
• sending, by the data management network element of the first telecommunications network based on subscription data of the terminal indicating that external authentication needs to be performed on the terminal, and to an authentication server function network element of the first telecommunications network, external authentication indication information and a third-party identifier identifying an external entity in a second telecommunications network to perform the external authentication on the terminal, wherein the external authentication indication information indicates to perform external authentication on the terminal, and wherein the external authentication is from the external entity that is external to the first telecommunications network;
• and
• receiving, by the authentication server function network element, the external authentication indication information.

A data management network element of a first telecommunications network, comprising:

• one or more processors;
• and
• a memory coupled to the one or more processors and configured to store instructions for execution by the one or more processors to cause the data management network element to:
• obtain an identity of a terminal;
• and
• send, by the data management network element of the first telecommunications network, based on subscription data of the terminal indicating that external authentication needs to be performed on the terminal, and to a mobility management network element or an authentication server function network element of the first telecommunications network, external authentication indication information and a third-party identifier identifying an external entity in a second telecommunications network to perform the external authentication on the terminal,
• wherein the external authentication indication information indicates to perform the external authentication on the terminal, and
• wherein the external authentication is from the external entity that is external to the first telecommunications network of the data management network element.

A system, comprising:

• a data management network element of a first telecommunications network comprising:
• a first memory configured to store first instructions;
• and
• one or more first processors coupled to the first memory and configured to execute the first instructions to:
• obtain an identity of a terminal;
• and
• send, based on subscription data of the terminal indicating that external authentication needs to be performed on the terminal, external authentication indication information and a third-party identifier identifying an external entity in a second telecommunications network to perform the external authentication on the terminal, wherein the external authentication indication information indicates to perform the external authentication on the terminal, and wherein the external authentication is from the external entity that is external to the first telecommunications network;
• and
• an authentication server function network element of the first telecommunications network comprising:
• a second memory configured to store second instructions;
• and
• one or more second processors coupled to the second memory and configured to execute the second instructions to receive the external authentication indication information and the third-party identifier from the data management network element of the first telecommunications network.