Method, Device, And System For Enhancing Cross-Network Access Security

A method for enhancing cross-network access security, wherein the method is used by a terminal to access a second network by using a packet data unit (PDU) session established in a first network, and the method comprises:

• when authentication of the LI fails, recording, by a network element in the second network, a result of authentication failure;
• determining, by the network element in the second network based on the result of the authentication failure, to stop the terminal from accessing the second network;
• and
• sending, by the network element in the second network, an authentication response to a network element in the first network, wherein the authentication response comprises address information of the terminal and information for prohibiting the terminal from accessing the second network.

An apparatus for enhancing cross-network access security, wherein the apparatus is used by a terminal to access a second network by using a packet data unit (PDU) session established in a first network, and the apparatus comprises:

• at least one processor;
• and
• one or more memories coupled to the at least one processor and storing programming instructions for execution by the at least one processor to:
• receive a first request message for the PDU session, wherein the first request message comprises address information of the terminal, an identifier of the second network, and information for prohibiting the terminal from accessing the second network;
• store, based on the first request message, the information for prohibiting the terminal from accessing the second network;
• and
• block access of the terminal to the second network.