# US 2021/0243600 A1 · Method, Device and System for Accessing Network Slice > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2021/0243600 A1 - Document ID: US20210243600A1 - Status: Published application - Kind: A1 - Application number: 17/050,474 - Filed: 2019-04-26 - Published: 2021-08-05 - Earliest claimed: 2018-04-26 - Assignees: Zte Corporation - Applicants: ZTE Corporation - Inventors: Wantao YU - Web page: https://patentgrep.com/patent/US20210243600A1 ## CPC - H04W 8/205: {Transfer to or from user equipment or user record carrier} - H04W 12/06: Authentication - H04L 12/14: Charging, metering or billing arrangements specially adapted for data communications, e.g. authentication, authorisation and accounting [AAA] framework - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04W 8/18: Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data - H04W 12/033: of the user plane, e.g. user's traffic - H04W 12/08: Access security - H04W 12/72: Subscriber identity - H04W 12/75: Temporary identity - H04W 60/002: {Registration for requesting network slices} - H04W 48/18: Selecting a network or a communication service - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract The embodiments of the disclosure disclose a method, device and system for accessing a network slice. The method includes that: User Equipment (UE) sends, to a base station, request information for accessing a network slice, wherein the request information contains user identity information and temporary network slice identity information (SliceIDt); a user subscription data management entity receives the request information from the UE through the base station, determines authentication information of the UE according to the user identity information contained in the request information, searches for corresponding network slice identity information (SliceID) according to the SliceIDt and sends the authentication information to a security management entity of the network slice corresponding to the SliceID; and the security management entity performs access authentication with the UE according to the authentication information, and in case of successful authentication, the UE accesses the network slice. ## Claims ### Claim 1 A method for accessing a network slice, comprising: sending, by User Equipment (UE), request information for accessing a network slice, wherein the request information contains user identity information and temporary network slice identity information (SliceIDt); and by the UE, performing access authentication with the network slice, and in case of successful authentication, accessing the network slice. ### Claim 2 (depends on 1) The method as claimed in claim 1, wherein the request information for accessing the network slice comprises at least one of: attachment request information, and network slice access request information. ### Claim 3 (depends on 1) The method as claimed in claim 1, wherein the user identity information comprises at least one of: temporary user subscription identity information, and encrypted user subscription identity information. ### Claim 4 (depends on 1) The method as claimed in claim 1, further comprising: saving and maintaining, by the UE, a corresponding relationship list between network slice identity information (SliceID) and the SliceIDt, wherein the SliceIDt is in one-to-one correspondence with the SliceID. ### Claim 5 A method for accessing a network slice, comprising: receiving, by a user subscription data management entity from User Equipment (UE) through a base station, request information for accessing a network slice, wherein the request information contains user identity information and temporary network slice identity information (SliceIDt); and by the user subscription data management entity, determining authentication information of the UE according to the user identity information, searching for corresponding network slice identity information (SliceID) according to the SliceIDt and sending the authentication information to a security management entity of the network slice corresponding to the SliceID to enable the security management entity to perform authentication with the UE to implement access of the UE to the network slice. ### Claim 6 (depends on 5) The method as claimed in claim 5, wherein the request information for accessing the network slice comprises attachment request information, the authentication information comprises one or more authentication vectors, and determining, by the user subscription data management entity, the authentication information of the UE according to the user identity information comprises: by the user subscription data management entity, determining user subscription identity information according to the user identity information, and generating a set of corresponding authentication vectors according to the user subscription identity information. ### Claim 7 (depends on 5) The method as claimed in claim 5, wherein the request information for accessing the network slice comprises network slice access request information, the authentication information comprises user subscription identity information and the network slice access request information, and determining, by the user subscription data management entity, the authentication information of the UE according to the user identity information comprises: determining, by the user subscription data management entity, the user subscription identity information according to the user identity information. ### Claim 8 (depends on 7) The method as claimed in claim 7, after sending the authentication information to the security management entity of the network slice corresponding to the SliceID, further comprising: receiving, by the user subscription data management entity, authentication request information sent by the security management entity, wherein the authentication request information contains the user subscription identity information; and by the user subscription data management entity, generating a set of authentication vectors according to the user subscription identity information and sending the set of generated authentication vectors to the security management entity. ### Claim 9 (depends on 5) The method as claimed in claim 5, wherein the SliceIDt is in one-to-one correspondence with the SliceID, and before receiving, by the user subscription data management entity from the UE through the base station, the request information for accessing the network slice, the method further comprises: generating, by the user subscription data management entity, the SliceIDt corresponding to the SliceID. ### Claim 10 (depends on 5) The method as claimed in claim 5, wherein the user identity information comprises at least one of: temporary user subscription identity information, and encrypted user subscription identity information. ### Claim 11 (depends on 5) The method as claimed in claim 5, wherein the user subscription data management entity comprises an Authentication Server Function (AUSF), and the security management entity comprises a Security Anchor Function (SEAF). ### Claim 12 A method for accessing a network slice, comprising: sending, by User Equipment (UE) to a base station, request information for accessing a network slice, wherein the request information contains user identity information and temporary network slice identity information (SliceIDt); by a user subscription data management entity, receiving the request information from the UE through the base station, determining authentication information of the UE according to the user identity information contained in the request information, searching for corresponding network slice identity information (SliceID) according to the SliceIDt and sending the authentication information to a security management entity of the network slice corresponding to the SliceID; and performing, by the security management entity, access authentication with the UE according to the authentication information, and in case of successful authentication, accessing, by the UE, the network slice. ### Claim 13 (canceled) ### Claim 14 (canceled) ### Claim 15 (canceled) ### Claim 16 (depends on 1) User Equipment (UE), comprising: a processor; a memory configured to store an instruction executable for the processor; and a transmission device configured to perform information transmission and reception communication according to control of the processor, wherein the processor is configured to run the instruction stored in the memory to execute operations in the method as claimed in claim 1. ### Claim 17 (depends on 5) A user subscription data management entity, comprising: a processor; a memory configured to store an instruction executable for the processor; and a transmission device configured to perform information transmission and reception communication according to control of the processor, wherein the processor is configured to run the instruction stored in the memory to execute operations in the method as claimed in claim 5. ### Claim 18 (depends on 12) The method as claimed in claim 12, wherein the request information for accessing the network slice comprises attachment request information, the authentication information comprises one or more authentication vectors, and determining, by the user subscription data management entity, the authentication information of the UE according to the user identity information contained in the request information comprises: by the user subscription data management entity, determining user subscription identity information according to the user identity information, and generating a set of corresponding authentication vectors according to the user subscription identity information. ### Claim 19 (depends on 12) The method as claimed in claim 12, wherein the request information for accessing the network slice comprises network slice access request information, the authentication information comprises user subscription identity information and the network slice access request information, and determining, by the user subscription data management entity, the authentication information of the UE according to the user identity information contained in the request information comprises: determining, by the user subscription data management entity, the user subscription identity information according to the user identity information. ### Claim 20 (depends on 19) The method as claimed in claim 19, after sending the authentication information to the security management entity of the network slice corresponding to the SliceID, further comprising: receiving, by the user subscription data management entity, authentication request information sent by the security management entity, wherein the authentication request information contains the user subscription identity information; and by the user subscription data management entity, generating a set of authentication vectors according to the user subscription identity information and sending the set of generated authentication vectors to the security management entity. ### Claim 21 (depends on 12) The method as claimed in claim 12, wherein the SliceIDt is in one-to-one correspondence with the SliceID, and before receiving, by the user subscription data management entity, the request information from the UE through the base station, the method further comprises: generating, by the user subscription data management entity, the SliceIDt corresponding to the SliceID. ### Claim 22 (depends on 12) The method as claimed in claim 12, wherein the user identity information comprises at least one of: temporary user subscription identity information, and encrypted user subscription identity information. ### Claim 23 (depends on 12) The method as claimed in claim 12, wherein the user subscription data management entity comprises an Authentication Server Function (AUSF), and the security management entity comprises a Security Anchor Function (SEAF).