# US 2020/0404497 A1 · Message processing method and system, and user plane function device > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2020/0404497 A1 - Document ID: US20200404497A1 - Status: Published application - Kind: A1 - Application number: 17/010,055 - Filed: 2020-09-02 - Published: 2020-12-24 - Earliest claimed: 2018-03-05 - Assignees: Huawei Technologies Co., Ltd. - Applicants: Huawei Technologies Co., Ltd. - Inventors: Liping YUAN; Chunlei ZHANG; Xi CHEN - Web page: https://patentgrep.com/patent/US20200404497A1 ## CPC - H04W 12/06: Authentication - H04W 12/72: Subscriber identity - H04W 36/0011: {for data sessions of end-to-end connection} - H04W 36/12: Reselecting a serving backbone network switching or routing node - H04W 84/042: {Public Land Mobile systems, e.g. cellular systems} - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract This application provides a message processing method and system, and a user plane function UPF device. The method includes: receiving user equipment (UE) authentication information sent by a session management function (SMF) device; matching a received uplink message of the UE with the UE authentication information, and if the matching succeeds, sending the uplink message that includes the UE authentication information to a first application (APP); and performing authentication by the first APP on the UE according to the UE authentication information. In the foregoing process, authentication on the UE does not need to be performed by a remote APP. This simplifies the authentication process, reduces network resource overhead, speeds up authentication on UEs, reduces the latency of UE authentication, and further increases the application switching speed. ## Claims ### Claim 1 A message processing method, applied to a user plane function (UPF) device, wherein the method comprises: receiving user equipment (UE) authentication information sent by a session management function (SMF) device; comparing a received uplink message of UE with the UE authentication information; and if the received uplink message of the UE matches the UE authentication information, sending, by the UPF device, the uplink message that comprises the UE authentication information to a first application (APP), wherein the first APP performs authentication on the UE according to the UE authentication information. ### Claim 2 (depends on 1) The method according to claim 1, wherein the UE authentication information comprises a Mobile Station International Subscriber Directory (MSISDN) parameter, and the UE authentication information is obtained by the SMF from an authentication center; or the UE authentication information comprises a token parameter and a session ID, and the UE authentication information is obtained by the SMF from a second APP. ### Claim 3 (depends on 1) The method according to claim 1, wherein the UE authentication information comprises at least an MSISDN parameter, or both a token parameter and a session ID, and the UE authentication information is configured by an operation support system (OSS) and is obtained by the SMF from the OSS. ### Claim 4 (depends on 1) The method according to claim 1, wherein the UE authentication information comprises the MSISDN parameter, and the comparing, by the UPF device, of an uplink message with the UE authentication information comprises: comparing, by the UPF device, uniform resource locator (URL) information in the uplink message with the UE authentication information, and if corresponding flow information is found through comparing, determining that the uplink message matches the UE authentication information. ### Claim 5 (depends on 4) The method according to claim 4, wherein the sending, by the UPF device, of the uplink message that comprises the UE authentication information to a first APP comprises: sending, by the UPF device, the uplink message that comprises the MSISDN parameter to a mobile edge platform (MEP), and forwarding, by the MEP, the MSISDN parameter to the first APP, wherein the uplink message comprises the MSISDN parameter in an hypertext transfer protocol (HTTP) header enrichment manner. ### Claim 6 (depends on 1) The method according to claim 1, wherein the UE authentication information comprises the token parameter and the session ID, and the comparing, by the UPF device, of an uplink message with the UE authentication information comprises: comparing, by the UPF device, profile identifier (profile ID) information in the uplink message with the UE authentication information, and if corresponding flow information is found through comparing, determining that the uplink message matches the UE authentication information. ### Claim 7 (depends on 6) The method according to claim 6, wherein the sending, by the UPF device, the uplink message that comprises the UE authentication information to a first APP comprises: sending, by the UPF device, the uplink message that comprises the token parameter and the session ID to a mobile edge platform (MEP), and forwarding, by the MEP to the first APP, the token parameter and the session ID that are obtained by parsing a tunnel header, wherein the uplink message comprises the token parameter and the session ID in a tunnel header enrichment manner of mobile edge computing (MEC). ### Claim 8 (depends on 6) The method according to claim 6, wherein the sending, by the UPF device, the uplink message that comprises the UE authentication information to a first APP comprises: sending, by the UPF device, the uplink message that comprises the UE authentication information to a mobile edge platform (MEP), and forwarding, by the MEP, the UE authentication information to the first APP, wherein the uplink message comprises the UE authentication information in an IP header extension field manner. ### Claim 9 (depends on 1) The method according to claim 1, wherein the performing authentication, by the first APP on the UE according to the UE authentication information comprises: calculating, by the first APP by using a hash algorithm, a network signature of the UE authentication information and a network signature of authentication information prestored on a network side, and comparing the network signature of the UE authentication information and the network signature of the authentication information prestored on the network side, and if the two network signatures match, determining that the authentication succeeds; or comparing, by the first APP, the UE authentication information with authentication information prestored on a network side, and if the UE authentication information matches the authentication information prestored on the network side, determining that the authentication succeeds; or requesting, by the first APP, a central APP to perform authentication on the UE according to the UE authentication information. ### Claim 10 A user plane function (UPF) device, wherein the UPF device establishes a connection to a session management function (SMF), and the UPF comprises: a communications interface, configured to receive an uplink message of user equipment (UE) and UE authentication information that are sent by the SMF, and send the uplink message and the UE authentication information to a processor; and the processor, configured to compare the uplink message received from the communications interface with the UE authentication information, and if the uplink message matches the UE authentication information, send the uplink message that comprises the UE authentication information to a first application (APP), wherein the first APP performs authentication on the UE according to the UE authentication information. ### Claim 11 (depends on 10) The UPF device according to claim 10, wherein the communications interface is configured to obtain UE authentication information obtained by the SMF from an authentication center, wherein the UE authentication information comprises an MSISDN parameter; or the communications interface is configured to obtain UE authentication information obtained by the SMF from a second APP, wherein the UE authentication information comprises a token parameter and a session ID; or the communications interface is configured to obtain UE authentication information that is obtained by the SMF from an operation support system (OSS), wherein the UE authentication information comprises at least an MSISDN parameter, or both a token parameter and a session ID. ### Claim 12 (depends on 10) The UPF device according to claim 10, wherein if the UE authentication information comprises the MSISDN parameter, the processor is configured to match uniform resource locator (URL) information in the uplink message with the UE authentication information; if corresponding flow information is found through matching, it is determined that the matching succeeds; the uplink message that comprises the MSISDN parameter is sent to a mobile edge platform (MEP) through the communications interface, and the MEP forwards the MSISDN parameter to the first APP, wherein the uplink message comprises the MSISDN parameter in an HTTP header enrichment manner. ### Claim 13 (depends on 10) The UPF device according to claim 10, wherein if the UE authentication information comprises at least the token message and the session ID, the processor is configured to match profile identifier information in the uplink message with the UE authentication information; if corresponding flow information is found through matching, it is determined that the matching succeeds; the uplink message that comprises the token parameter and the session ID is sent to an MEP through the communications interface, and the MEP forwards the token parameter and the session ID that are obtained by parsing a tunnel header to the first APP, wherein the uplink message comprises the token parameter and the session ID in a tunnel header enrichment manner of mobile edge computing (MEC). ### Claim 14 (depends on 10) The UPF device according to claim 10, wherein the communications interface is further configured to send the uplink message that comprises the UE authentication information to an MEP, and the MEP forwards the UE authentication information to the first APP, wherein the uplink message comprises the UE authentication information in an IP header extension field manner. ### Claim 15 (depends on 10) A message processing system, comprising: a session management function (SMF), configured to: after determining to access an uplink classifier, send obtained user equipment (UE) authentication information to a user plane function (UPF) device to which the SMF is connected, wherein the user UPF device is the UPF device according to claim 10; a UPF device, configured to match a received uplink message with the UE authentication information, and if the matching succeeds, send the uplink message that comprises the UE authentication information to a first application (APP); and the first APP, configured to perform authentication on the UE according to the UE authentication information. ### Claim 16 (depends on 15) The system according to claim 15, wherein the first APP is configured to: calculate by using a hash algorithm a network signature of the UE authentication information and a network signature of authentication information prestored on a network side, and compare the network signature of the UE authentication information and the network signature of the authentication information prestored on the network side, and if the two network signatures match, determine that the authentication succeeds; or compare the UE authentication information with authentication information prestored on a network side, and if the UE authentication information matches with the authentication information prestored on the network side, determine that the authentication succeeds; or request a central APP to perform authentication on the UE according to the UE authentication information.