Communication system, subscriber-information management apparatus, information acquisition method, non-transitory computer-readable medium, and communication terminal

Abstract

A purpose of the present disclosure is to provide a communication system that are capable of maintaining a high security level in each divided network in the case of applying network slicing to a core network. A communication system according to the present disclosure includes a subscriber-information management apparatus ( 10 ) configured to manage subscriber information of a communication terminal; and a security apparatus ( 20 ) configured to manage identification information of the communication terminal in association with security information used in at least one network slice system usable by the communication terminal. The subscriber-information management apparatus ( 10 ) acquires, using the identification information of the communication terminal and identification information of a network slice system used by the communication terminal, security information used in the network slice system used by the communication terminal from the security apparatus ( 20 ).

1 . A subscriber-information management apparatus comprising:
 at least one memory storing instructions, and   at least one processor configured to execute the instructions to;   communicate with a security apparatus that manages identification information of a communication terminal in association with security information used in at least one network slice system usable by the communication terminal, and   manage identification information of the network slice system associated with the security apparatus,   acquire, using the identification information of the communication terminal and identification information of a network slice system used by the communication terminal, security information used in the network slice system used by the communication terminal from the security apparatus.   
     
     
         2 . The subscriber-information management apparatus according to  claim 1 , wherein
 when the security apparatus manages the security information used in the at least one network slice system,   the subscriber-information management apparatus transmits the identification information of the communication terminal to the security apparatus and acquires the security information from the security apparatus.   
     
     
         3 . The subscriber-information management apparatus according to  claim 1 , wherein
 when the security apparatus manages first security information used in a first network slice system and second security information used in a second network slice system,   the subscriber-information management apparatus transmits the identification information of the communication terminal and the identification information of the network slice system used by the communication terminal to the security apparatus and acquires the first security information or the second security information from the security apparatus.   
     
     
         4 . The subscriber-information management apparatus according to  claim 3 ,
 wherein the subscriber-information management apparatus manages the identification information of the network slice system associated with the security apparatus and transmits, when the identification information of the network slice system used by the communication terminal is transmitted from the communication terminal, the identification information of the communication terminal and the identification information of the network slice system used by the communication terminal to the security apparatus associated with the network slice system.   
     
     
         5 . The subscriber-information management apparatus according to  claim 4 ,
 wherein the subscriber-information management apparatus acquires, when managing the identification information of the communication terminal in association with identification information of one network slice system usable by the communication terminal, the security information from the security apparatus using the identification information of the communication terminal transmitted from the communication terminal.   
     
     
         6 . The subscriber-information management apparatus according to  claim 1 ,
 wherein the security apparatus determines, based on information associating the identification information of the communication terminal with identification information of the at least one network slice system usable by the communication terminal, whether to transmit the security information to the subscriber-information management apparatus.   
     
     
         7 . The subscriber-information management apparatus according to  claim 1 ,
 wherein the subscriber-information management apparatus receives, via a control apparatus disposed in a core network and not in any network slice system, the identification information of the communication terminal and the identification information of the network slice system used by the communication terminal from the communication terminal or receives the identification information of the communication terminal from the communication terminal.   
     
     
         8 . (canceled) 
     
     
         9 . (canceled) 
     
     
         10 . (canceled) 
     
     
         11 . A communication system comprising:
 a communication terminal;   a control apparatus configured to process control data in a core network;   a subscriber-information management apparatus configured to store subscriber information of the communication terminal; and   a security apparatus configured to perform authentication processing for the communication terminal in cooperation with the subscriber-information management apparatus via the control apparatus, wherein   the communication terminal transmits, to the control apparatus, identification information of a network slice that the communication terminal desires to use, and   the communication terminal communicates, after the authentication processing has succeeded, with the network slice that the communication terminal desires to use based on the identification information of the network slice that the communication terminal desires to use.   
     
     
         12 . The communication system according to  claim 11 , wherein
 the communication terminal transmits identification information of the communication terminal to the control apparatus, and   the control apparatus select the security apparatus from a plurality of security apparatuses based on the identification information of the communication terminal.   
     
     
         13 . A communication terminal comprising:
 at least one memory storing instructions, and   at least one processor configured to execute the instructions to;   transmit, to a control apparatus that processes control data in a core network, identification information of a network slice that the communication terminal desires to use;   receive, via the control apparatus, first security information used for authentication processing by the core network;   transmit second security information corresponding to the first security information to the control apparatus; and   communicate, after the communication terminal has been authenticated by the core network based on the second security information, with the network slice that the communication terminal desires to use based on the identification information of the network slice that the communication terminal desires to use.