Key deduction method and device

Abstract

The invention discloses a key deduction method and device, and relates to the field of communication. In the method, an access and mobility management network element receives a first registration request message from a terminal device, the first registration request message is used for requesting the terminal device to register to a network through a first 3GPP access, generating a first key and sending the first key to a first access network device, the first key is a key used for communication between the terminal equipment and the first access network equipment. The access and mobility management network element also receives a second registration request message from the terminal device, the second registration request message being used for requesting the terminal device to register to the network through a second 3GPP access, and generating a second key, the second key is a key used for communication between the terminal device and the second access network device and is sent to the second access network device, and the first key is different from the second key. By adopting the method, two different keys are generated for two 3GPP accesses, and key isolation can be realized.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to a key derivation method and device. Background Art

[0002] Currently, terminal devices can register in the same access and mobility management function (AMF) network element through 3rd generation partnership project (3GPP) access and non-3GPP access, and then connect to the same public land mobile network (PLMN).

[0003] Specifically, when a terminal device connects to the same PLMN through 3GPP access and non-3GPP access, the terminal device can perform only one primary authentication with the AMF network element to maintain a public security context. For 3GPP access, the terminal device registers with the AMF through the next generation NodeB (gNB) in the 5G mobile communication system. For non-3GPP access, the terminal device also registers with the AMF through the non-3GPP InterWorking Function (N3IWF) network element. Therefore, the AMF maintains the parameters of the NAS connection for 3GPP access and non-3GPP access respectively, thereby achieving secure isolation of the two accesses.

[0004] However, when a terminal device connects to the same PLMN via two 3GPP accesses, there is no corresponding key derivation solution. Summary of the invention

[0005] The present application provides a key derivation method and device to solve the problem of how to derive a key when a terminal device is connected to the same PLMN through two 3GPP accesses.

[0006] In a first aspect, the present application provides a key derivation method, which can be executed by an access and mobility management network element or a module (such as a chip) in the access and mobility management network element. The method includes: receiving a first registration request message from a terminal device, the first registration request message is used to request the terminal device to register to a network through a first third generation partnership project 3GPP access; generating a first key, the first key is a key used for communication between the terminal device and the first access network device; the first access network device is used for the first 3GPP access; sending the first key to the first access network device; receiving a second registration request message from the terminal device, the second registration request message is used to request the terminal device to register to a network through a second 3GPP access; generating a second key, the second key is a key used for communication between the terminal device and the second access network device, the second access network device is used for the second 3GPP access; the first key is different from the second key; sending the second key to the second access network device. Using the above method, when the terminal device registers in the same access and mobility management network element through two 3GPP accesses, the access and mobility management network element generates two different keys for the two 3GPP accesses, that is, the key used for communication between the terminal device and the first access network device is different from the key used for communication between the terminal device and the second access network device, so that key isolation can be achieved to ensure communication security.

[0007] In one possible design, the first registration request message and / or the second registration request message includes indication information, where the indication information is used to indicate that the terminal device is connected to the network via two 3GPP accesses.

[0008] With the above design, the access and mobility management network element can determine through the indication information that the terminal device is connected to the network through two 3GPP accesses. The two 3GPP accesses can also be replaced by multiple 3GPP accesses.

[0009] In one possible design, when generating a first key, the first key is generated according to a first access type identifier corresponding to the first 3GPP access; when generating a second key, the second key is generated according to a second access type identifier corresponding to the second 3GPP access, and the first access type identifier and the second access type identifier are different.

[0010] By adopting the above design, by using different access type identifiers in the two 3GPP access processes, it can be ensured that the first key is different from the second key, thereby achieving key isolation.

[0011] In one possible design, the second registration request message includes the indication information; before generating the second key, the second access type identifier is determined for the second 3GPP access based on the indication information.

[0012] With the above design, the access and mobility management network element can determine through indication information that the terminal device is connected to the network via two 3GPP accesses, and then determine a second access type identifier that is different from the first access type identifier for the second 3GPP access.

[0013] In one possible design, the first registration request message includes the indication information; before generating the first key, determining the first access type identifier for the first 3GPP access according to the indication information, the first access type identifier being one of the dual 3GPP access type identifiers; before generating the second key, determining the second access type identifier for the second 3GPP access, the second access type identifier being the other of the dual 3GPP access type identifiers.

[0014] With the above design, the access and mobility management network element can determine through indication information that the terminal device is connected to the network through two 3GPP accesses, and then use one of the dual 3GPP access type identifiers as the first access type identifier, and use the other of the dual 3GPP access type identifiers as the second access type identifier, so that the first access type identifier is different from the second access type identifier.

[0015] In one possible design, the second access type identifier is an unused one of the dual 3GPP access type identifiers.

[0016] In one possible design, a first registration acceptance message is sent to the terminal device, the first registration acceptance message including the first access type identifier; and / or a second registration acceptance message is sent to the terminal device, the second registration acceptance message including the second access type identifier.

[0017] With the above design, the terminal device can obtain the first access type identifier through the first registration acceptance message, and obtain the second access type identifier through the second registration acceptance message.

[0018] In one possible design, the first bearer parameter includes the first access type identifier, and the second bearer parameter includes the second access type identifier; the first NAS signaling is securely protected using the NAS security protection key and the first bearer parameter, and the first NAS signaling corresponds to the first 3GPP access; the second NAS signaling is securely protected using the NAS security protection key and the second bearer parameter, and the second NAS signaling corresponds to the second 3GPP access.

[0019] In the above manner, by using different bearer parameters, the problem of key stream reuse caused by two 3GPPs using the same NAS security protection key can be avoided.

[0020] In one possible design, when generating a first key, the first key is generated according to a third access type identifier and an identifier of the first 3GPP access, and the third access type identifier indicates that the access type is 3GPP access; when generating a second key, the second key is generated according to the third access type identifier and an identifier of the second 3GPP access; the identifier of the first 3GPP access is different from the identifier of the second 3GPP access.

[0021] By adopting the above method, by providing new identifiers for different 3GPP accesses during two 3GPP access processes, it can be ensured that the first key is different from the second key, thereby achieving key isolation.

[0022] In one possible design, the first registration request message includes the indication information; before generating the first key, determining the identifier of the first 3GPP access for the first 3GPP access according to the indication information; before generating the second key, determining the identifier of the second 3GPP access for the second 3GPP access.

[0023] With the above design, the access and mobility management network element can determine through indication information that the terminal device is connected to the network via two 3GPP accesses, and then determine the identifier of the first 3GPP access for the first 3GPP access, and determine the identifier of the second 3GPP access for the second 3GPP access.

[0024] In one possible design, when determining the identifier of the first 3GPP access for the first 3GPP access according to the indication information, two 3GPP access identifiers are obtained from the data management network element according to the indication information; one of the two 3GPP identifiers is used as the identifier of the first 3GPP access; and when determining the identifier of the second 3GPP access for the second 3GPP access, the other of the two 3GPP identifiers is used as the identifier of the second 3GPP access.

[0025] By adopting the above method, the access and mobility management network element can obtain two pre-configured 3GPP access identifiers from the data management network element according to the indication information, and use the two 3GPP access identifiers as the first 3GPP access identifier and the second 3GPP access identifier respectively.

[0026] In one possible design, a first registration accept message is sent to the terminal device, the first registration accept message including an identifier of the first 3GPP access; and a second registration accept message is sent to the terminal device, the second registration accept message including an identifier of the second 3GPP access.

[0027] With the above design, the terminal device can obtain the identifier of the first 3GPP access through the first registration acceptance message, and obtain the identifier of the second 3GPP access through the second registration acceptance message.

[0028] In one possible design, the first registration request message includes an identifier of the first 3GPP access, and the second registration request message includes an identifier of the second 3GPP access.

[0029] With the above design, the terminal device can provide the identifier of the first 3GPP access and the identifier of the second 3GPP access.

[0030] In one possible design, a first bearer parameter corresponds to an identifier of the first 3GPP access, and a second bearer parameter corresponds to an identifier of the second 3GPP access; the first NAS signaling is securely protected using the NAS security protection key and the first bearer parameter, and the first NAS signaling corresponds to the first 3GPP access; the second NAS signaling is securely protected using the NAS security protection key and the second bearer parameter, and the second NAS signaling corresponds to the second 3GPP access.

[0031] With the above design, by using different bearer parameters, the problem of key stream reuse caused by two 3GPPs using the same NAS security protection key can be avoided.

[0032] In one possible design, when generating a first key, the first key is generated according to a first value of an uplink NAS counter; when generating a second key, the second key is generated according to a second value of the uplink NAS counter; wherein the first 3GPP access and the second 3GPP access share the uplink NAS counter, and the first value is different from the second value.

[0033] With the above design, by using different values ​​of the same uplink NAS counter in two 3GPP access processes, it can be ensured that the first key is different from the second key, thereby achieving key isolation.

[0034] In a second aspect, the present application provides a key derivation method, which can be executed by a terminal device or a module (such as a chip) in the terminal device. The method includes: sending a first registration request message to an access and mobility management network element, the first registration request message is used to request the terminal device to register to the network through a first 3GPP access; generating a first key, the first key is a key used for communication between the terminal device and the first access network device; the first access network device is used for the first 3GPP access; sending a second registration request message to the access and mobility management network element, the second registration request message is used to request the terminal device to register to the network through a second 3GPP access; generating a second key, the second key is a key used for communication between the terminal device and the second access network device, the second access network device is used for the second 3GPP access; the first key is different from the second key.

[0035] Using the above method, when the terminal device registers in the same access and mobility management network element through two 3GPP accesses, the terminal device generates two different keys for the two 3GPP accesses, that is, the key used for communication between the terminal device and the first access network device is different from the key used for communication between the terminal device and the second access network device, so that key isolation can be achieved to ensure communication security.

[0036] In one possible design, the first registration request message and / or the second registration request message includes indication information, where the indication information is used to indicate that the terminal device is connected to the network via two 3GPP accesses.

[0037] With the above design, the terminal device can notify the access and mobility management network element through the indication information that the terminal device is connected to the network through two 3GPP accesses. Among them, the two 3GPP accesses can also be replaced by multiple 3GPP accesses.

[0038] In one possible design, when generating a first key, the first key is generated according to a first access type identifier corresponding to the first 3GPP access; when generating a second key, the second key is generated according to a second access type identifier corresponding to the second 3GPP access, and the first access type identifier and the second access type identifier are different.

[0039] By adopting the above design, by using different access type identifiers in the two 3GPP access processes, it can be ensured that the first key is different from the second key, thereby achieving key isolation.

[0040] In one possible design, before generating a first key, the first access type identifier is determined for the first 3GPP access, and the first access type identifier is one of the dual 3GPP access type identifiers; before generating a second key, the second access type identifier is determined for the second 3GPP access, and the second access type identifier is the other of the dual 3GPP access type identifiers.

[0041] In one possible design, the second access type identifier is an unused one of the dual 3GPP access type identifiers.

[0042] In one possible design, a first registration acceptance message is received from the access and mobility management network element, the first registration acceptance message including the first access type identifier; and / or a second registration acceptance message is received from the access and mobility management network element, the first registration acceptance message including the second access type identifier.

[0043] With the above design, the terminal device can obtain the first access type identifier through the first registration acceptance message, and / or obtain the second access type identifier through the second registration acceptance message, that is, the terminal device obtains the first access type identifier and / or the second access type identifier from the access and mobility management network element.

[0044] In one possible design, a first AS security mode command is received from the first access network device, the first AS security mode command including the first access type identifier; and / or a second AS security mode command is received from the second access network device, the second AS security mode command including the second access type identifier.

[0045] With the above design, the terminal device can obtain the first access type identifier through the first AS security mode command, and / or obtain the second access type identifier through the second AS security mode command, that is, the terminal device obtains the first access type identifier from the first access network device, and / or obtains the second access type identifier from the second access network device.

[0046] In one possible design, the first bearer parameter includes the first access type identifier, and the second bearer parameter includes the second access type identifier; the first NAS signaling is securely protected using the NAS security protection key and the first bearer parameter, and the first NAS signaling corresponds to the first 3GPP access; the second NAS signaling is securely protected using the NAS security protection key and the second bearer parameter, and the second NAS signaling corresponds to the second 3GPP access.

[0047] In the above manner, by using different bearer parameters, the problem of key stream reuse caused by two 3GPPs using the same NAS security protection key can be avoided.

[0048] In one possible design, when generating a first key, the first key is generated according to a third access type identifier and an identifier of the first 3GPP access, and the third access type identifier indicates that the access type is 3GPP access; when generating a second key, the second key is generated according to the third access type identifier and an identifier of the second 3GPP access; the identifier of the first 3GPP access is different from the identifier of the second 3GPP access.

[0049] By adopting the above method, by providing new identifiers for different 3GPP accesses during two 3GPP access processes, it can be ensured that the first key is different from the second key, thereby achieving key isolation.

[0050] In one possible design, before generating the first key, an identifier of the first 3GPP access is determined for the first 3GPP access; before generating the second key, an identifier of the second 3GPP access is determined for the second 3GPP access.

[0051] In one possible design, a first registration acceptance message is received from the access and mobility management network element, the first registration acceptance message including the identifier of the first 3GPP access; and / or a second registration acceptance message is received and sent from the access and mobility management network element, the second registration acceptance message including the identifier of the second 3GPP access.

[0052] With the above design, the terminal device can obtain the identifier of the first 3GPP access through the first registration acceptance message, and / or obtain the identifier of the second 3GPP access through the second registration acceptance message, that is, the terminal device can obtain the identifier of the first 3GPP access and / or the identifier of the second 3GPP access from the access and mobility management network element.

[0053] In one possible design, a first AS security mode command is received from the first access network device, the first AS security mode command including the identifier of the first 3GPP access; and / or a second AS security mode command is received from the second access network device, the second AS security mode command including the identifier of the second 3GPP access.

[0054] With the above design, the terminal device can obtain the identifier of the first 3GPP access through the first AS security mode command, and / or obtain the identifier of the second 3GPP access through the second AS security mode command, that is, the terminal device obtains the identifier of the second 3GPP access from the first access network device, and / or obtains the identifier of the second 3GPP access from the second access network device.

[0055] In one possible design, the first registration request message includes an identifier of the first 3GPP access, and the second registration request message includes an identifier of the second 3GPP access.

[0056] With the above design, the terminal device can provide the identifier of the first 3GPP access and the identifier of the second 3GPP access.

[0057] In one possible design, a first bearer parameter corresponds to an identifier of the first 3GPP access, and a second bearer parameter corresponds to an identifier of the second 3GPP access; a first NAS signaling is securely protected using a NAS security protection key and the first bearer parameter, and the first NAS signaling corresponds to the first 3GPP access; a second NAS signaling is securely protected using the NAS security protection key and the second bearer parameter, and the second NAS signaling corresponds to the second 3GPP access.

[0058] In one possible design, when generating a first key, the first key is generated according to a first value of an uplink NAS counter; when generating a second key, the second key is generated according to a second value of the uplink NAS counter; wherein the first 3GPP access and the second 3GPP access share the uplink NAS counter, and the first value is different from the second value.

[0059] With the above design, by using different values ​​of the same uplink NAS counter in two 3GPP access processes, it can be ensured that the first key is different from the second key, thereby achieving key isolation.

[0060] In a third aspect, the present application provides a communication device, comprising a unit for executing any of the methods described in any of the above aspects.

[0061] In a fourth aspect, the present application provides a communication device, comprising at least one processing element and at least one storage element, wherein the at least one storage element is used to store programs and data, and the at least one processing element is used to read and execute the programs and data stored in the storage element, so that any method described in any of the above aspects of the present application is implemented.

[0062] In a fifth aspect, the present application further provides a computer program, which, when executed on a computer, enables the computer to execute any of the methods described in any of the above aspects.

[0063] In a sixth aspect, the present application provides a communication device, comprising: an interface circuit; the interface circuit is used to provide input and / or output of programs or instructions to at least one processor; the at least one processor is used to execute the program or instructions so that the communication device can implement any of the methods described in any of the above aspects.

[0064] In a possible manner, the communication device includes the at least one processor.

[0065] In a possible manner, the communication device includes the at least one memory.

[0066] In a seventh aspect, the present application provides a computer storage medium storing a software program, which, when read and executed by one or more processors, can implement any of the methods described in any of the above aspects.

[0067] In an eighth aspect, the present application provides a computer program product comprising instructions, which, when executed on a computer, enables the computer to execute any of the methods described in any of the above aspects.

[0068] In a ninth aspect, a chip system is provided, comprising at least one chip and a memory, wherein the at least one chip is used to read and execute a program stored in the memory to implement any of the methods described in any of the above aspects.

[0069] In a tenth aspect, a communication system is provided, comprising a terminal device, a first access network device, a second access network device, and an access and mobility management network element. The terminal device is used to execute any method in the first aspect, and the access and mobility management network element is used to execute any method in the second aspect.

[0070] Based on the implementations provided in the above aspects, the present application can also be further combined to provide more implementations. BRIEF DESCRIPTION OF THE DRAWINGS

[0071] Figure 1 A schematic diagram of the architecture of a mobile communication system used in an embodiment of the present application;

[0072] Figure 2 This is a schematic diagram of the key derivation architecture in the 5G system in this application;

[0073] Figure 3A A schematic diagram of using a confidentiality key to protect a message in this application;

[0074] Figure 3B A schematic diagram of using integrity protection keys to protect messages in this application;

[0075] Figure 4 This is a schematic diagram of a terminal device in this application being connected to the same PLMN via two 3GPP accesses;

[0076] Figure 5 This is one of the flow charts summarizing a key derivation method in this application;

[0077] Figure 6 This is the second flow chart of an overview of a key derivation method in this application;

[0078] Figure 7 This is the third flow chart of an overview of a key derivation method in this application;

[0079] Figure 8 This is the fourth flow chart of an overview of a key derivation method in this application;

[0080] Fig. 9 This is a schematic diagram of the structure of a communication device in this application;

[0081] Fig.10 This is a schematic diagram of the structure of another communication device in this application. DETAILED DESCRIPTION

[0082] The embodiments of the present application can be applied to various communication systems, for example: global system for mobile communications (GSM) system, code division multiple access (CDMA) system, wideband code division multiple access (WCDMA) system, general packet radio service (GPRS), long term evolution (LTE) system, LTE frequency division duplex (FDD) system, LTE time division duplex (TDD), universal mobile telecommunication system (UMTS), worldwide interoperability for microwave access (WIMAX) communication system, fifth generation (5G) system or new radio (NR), or applied to future communication systems or other similar communication systems.

[0083] like Figure 1The figure shows an architecture diagram of a 5G communication system developed by the 3rd Generation Partnership Project (3GPP) standard. Figure 1 The 5G network architecture shown may include terminal equipment, access network equipment and core network equipment. The terminal equipment accesses the data network (DN) through the access network equipment and the core network equipment.

[0084] The access network device may be a radio access network (RAN) device. For example: a base station, an evolved NodeB (eNodeB), a transmission reception point (TRP), a next generation NodeB (gNB) in a 5G mobile communication system, a next generation base station in a sixth generation (6G) mobile communication system, a base station in a future mobile communication system, or an access node in a wireless fidelity (WiFi) system, etc.; it may also be a module or unit that completes part of the functions of a base station, for example, a centralized unit (CU) or a distributed unit (DU). The radio access network device may be a macro base station, a micro base station or an indoor station, a relay node or a donor node, etc. The embodiments of the present application do not limit the specific technology and specific device form adopted by the radio access network device.

[0085] Terminal devices can be user equipment (UE), mobile stations, mobile terminals, etc. Terminal devices can be widely used in various scenarios, such as device-to-device (D2D), vehicle to everything (V2X) communication, machine-type communication (MTC), Internet of Things (IOT), virtual reality, augmented reality, industrial control, autonomous driving, telemedicine, smart grid, smart furniture, smart office, smart wearable, smart transportation, smart city, etc. Terminal devices can be mobile phones, tablet computers, computers with wireless transceiver functions, wearable devices, vehicles, urban air vehicles (such as drones, helicopters, etc.), ships, robots, robotic arms, smart home devices, etc.

[0086] The access network equipment and terminal equipment can be fixed or movable. The access network equipment and terminal equipment can be deployed on land, including indoors or outdoors, handheld or vehicle-mounted; they can also be deployed on the water surface; they can also be deployed on airplanes, balloons and artificial satellites in the air. The embodiments of the present application do not limit the application scenarios of the access network equipment and terminal equipment.

[0087] Among them, the core network equipment includes user plane function (UPF) network element, AMF network element, session management function (SMF), network exposure function (NEF) network element, network function repository function (NRF) network element, unified data management (UDM) network element, policy control function (PCF) network element, application function (AF) network element, authentication server function (AUSF) network element, network slice selection function (NSSF) network element, etc. Among them, UPF network element is user plane network element, and the above other network elements are control plane network elements.

[0088] The interfaces between the control plane network elements can be service-oriented interfaces (such as Figure 1 As shown), it can also be a point-to-point interface, which is not limited in this application. Figure 1 Take this as an example to illustrate.

[0089] The following is a brief introduction to some core network equipment:

[0090] 1. SMF network element, referred to as SMF, is mainly used for session management, IP address allocation and management of terminal devices, selection of manageable user equipment plane functions, policy control, or termination points of charging function interfaces, and downlink data notification. Nsmf is a service-based interface provided by SMF, through which SMF can communicate with other network functions.

[0091] 2. AMF network element, referred to as AMF, is mainly used for mobility management and access management. Namf is a service-based interface provided by AMF. AMF can communicate with other network functions through Namf.

[0092] 3. UDM network element, referred to as UDM, is used to process user identification, contract signing, access authentication, registration, or mobility management. Nudm is a service-based interface provided by UDM, and UDM can communicate with other network functions through Nudm.

[0093] 4. UPF network element, referred to as UPF, is used for packet routing and forwarding, or quality of service (QoS) processing of user plane data.

[0094] 5. AUSF network element, referred to as AUSF, is mainly used for user authentication, etc. Nausf is a service-based interface provided by AUSF, through which AUSF can communicate with other network functions.

[0095] It is understandable that the core network device may also include other network elements, which is not limited in this application. The above network elements are examples of one implementation method, and this application does not exclude the existence of network elements or devices with the above network element functions in 6G or newer wireless communication systems with other names or other forms. The above network elements or functions may be network elements in hardware devices, software functions running on dedicated hardware, or virtualized functions instantiated on a platform (for example, a cloud platform). As a possible implementation method, the above network elements or functions may be implemented by one device, or by multiple devices, or may be a functional module within a device, which is not specifically limited in this embodiment of the present application.

[0096] like Figure 2 Shown is an exemplary key derivation architecture in a 5G system.

[0097] Authentication can be performed between the terminal device and the service network. Specifically, two authentication methods, Extensible Authentication Protocol Authentication and Key Agreement (EAP-AKA′) and 5G AKA, can be used.

[0098] The long-term key K and related functions are stored in the terminal device. When performing two-way authentication, the terminal device can use the long-term key K and related functions to verify the authenticity of the network. Among them, the long-term key K can be stored in the universal subscriber identity module (USIM) of the terminal device. Correspondingly, the network side also stores the long-term key K and related functions. For example, the long-term key K and related functions can be stored in the UDM or the authentication repository and processing function (ARPF) network element (ARPF for short).

[0099] On the service network side, UDM or ARPF derives the encryption key (CK) and integrity key (IK) based on the long-term key K. If the 5G AKA authentication method is used, UDM or ARPF can derive KAUSF based on CK and IK. If the EAP-AKA' authentication method is used, UDM or ARPF can derive CK', IK' based on CK and IK, and send CK', IK' to AUSF. AUSF further derives KAUSF based on CK', IK'.

[0100] The key derivation process of the subsequent two authentication methods is similar. AUSF derives the anchor key KSEAF based on KAUSF and sends KSEAF to the security anchor function (SEAF) network element (SEAF for short). SEAF derives KAMF through KSEAF. Among them, SEAF can be a part of AMF or an independent functional network element, which is not limited in this application.

[0101] Furthermore, AMF is based on K AMF Derive NAS confidentiality key K NASenc , NAS integrity protection key K NASint AMF also based on K AMF Derived K gNB , and K gNB and NH (next hop) to the gNB. The gNB converts K gNB The RRC key and the user plane key are derived from NH. The RRC key includes the RRC confidentiality key K RRCenc and RRC integrity protection key K RRCint , the user plane key includes the user plane confidentiality key K UPenc and user plane integrity protection key K UPint For non-3GPP access, AMF also follows K AMF Derived K N3IWF , and K N3IWF Sent to N3IWF to protect subsequent non-3GPP access data traffic.

[0102] On the terminal device side, the terminal device includes a USIM and mobile equipment (ME). Similar to the key derivation process on the service network side, the above key derivation process is completed by the ME.

[0103] The following is a brief introduction to the key derivation and key usage scenarios involved in this application:

[0104] (1) AMF according to KAMF Derived K gNB Required input parameters.

[0105] It is understandable that the AMF and the ME in the UE use the same method according to K AMF Derivation K gNB . For example, according to K AMF Derived K gNB The input parameters are as follows:

[0106] FC = 0x6E;

[0107] P0 = uplink NAS counter value (uplink NAS COUNT);

[0108] L0 = length of the uplink NAS counter value;

[0109] P1 = access type distinguisher;

[0110] L1 = length of access type identifier.

[0111] The value of P1 can be as shown in Table 1.

[0112] Table 1

[0113] Access type identifier Value 3GPP Access 0x01 Non-3GPP access 0x02

[0114] From the above, we can see that K gNB =KDF(FC, P0, L0, P1, L1), KDF is the abbreviation of Key derivation function (KDF). The access type identifier (ie, P1) can be used to distinguish between 3GPP access and non-3GPP access.

[0115] (2) Use of integrity protection keys and confidentiality keys

[0116] The process of protecting a message using a confidentiality key, such as Figure 3A The process of using integrity protection keys to protect messages is shown in Figure 3B As shown. Figure 3A and Figure 3B It can be seen that the left side of the dotted line represents the sending end, and the right side of the dotted line represents the receiving end.

[0117] exist Figure 3A In , when protecting a message, in addition to the confidentiality key, the following input parameters are required: counter value, bearer parameter, direction parameter, and length parameter. Among them, when the confidentiality protection key is K NASenctWhen the bearer parameter is a NAS connection identifier, the NAS connection identifier is the same as the access type identifier, and the direction parameter takes a value of 0 for uplink and a value of 1 for downlink. When the direction parameter indicates uplink, the counter takes a value of the uplink NAS counter, and when the direction parameter indicates downlink, the counter takes a value of the downlink NAS counter.

[0118] Similarly, in Figure 3B In , when protecting a message, in addition to the integrity protection key, the following input parameters are required: counter value, message parameter, direction parameter, and bearer parameter. NASint When the bearer parameter is a NAS connection identifier, the NAS connection identifier is the same as the access type identifier.

[0119] The same terminal device can access both 3GPP and non-3GPP access networks at the same time. When using the access traffic steering, switching, splitting (ATSSS) function, the terminal device establishes a special protocol data unit (PDU) session: a multi-access PDU session (MA PDU) session, which supports multiple accesses, and the data in this session can be transmitted on different access paths. The terminal device side needs to support multiple steering functions, namely: multipath TCP (MPTCP) function, multipath QUIC (MPQUIC) function and ATSSS-low layer (LL) function. TCP is the abbreviation of transmission control protocol (TCP). QUIC is the abbreviation of quick UDP internet connection (QUIC). UDP is the abbreviation of User Datagram Protocol (UDP). Each steering function in the terminal device allows the steering, switching and diversion of service traffic across 3GPP access and non-3GPP access according to the ATSSS rules provided by the network.

[0120] Currently, the multi-access scenario supports one 3GPP access and one non-3GPP access. Among them, the multi-access scenario can also be called a multi-registration scenario. After receiving the registration request message, the AMF checks whether the terminal device has passed the network authentication. If an available security context for the terminal device is retrieved through the 5G globally unique temporary identifier (5G-GUTI), the AMF may decide not to run a new authentication. Exemplarily, the available security context of the terminal device is a public 5G NAS security context, which can also be called a public NAS security context.

[0121] For example, if the terminal device first registers to an AMF via 3GPP access, and the terminal device registers to the same AMF via non-3GPP access, and the AMF retrieves the 5G NAS security context for the terminal device through 5G-GUTI, the AMF may decide not to run a new authentication. In this case, the terminal device also directly uses the 5G NAS security context and uses it to protect the registration of the non-3GPP access. If the NAS count of the non-3GPP access of the PLMN is stored in the terminal device, the stored NAS count of the non-3GPP access of the PLMN shall be used to protect the registration of the non-3GPP access. If the NAS count of the non-3GPP access of the PLMN is not stored in the terminal device, the 5G NAS security context will be used for the first time (partially) through the non-3GPP access. At this time, before the terminal device uses the 5G NAS security context on the non-3GPP access, the terminal device needs to set the ULNAS count value and DLNAS count value of the non-3GPP access to zero.

[0122] The AMF and the terminal device shall establish a common NAS security context consisting of a set of NAS keys and algorithms upon first registration. The AMF and the terminal device shall also store parameters specific to each NAS connection in the common NAS security context. To achieve key separation and anti-replay protection, the parameters for each NAS connection include a pair of NAS counts and a unique NAS connection identifier for uplink and downlink. For example, for 3GPP access, the value of the unique NAS connection identifier shall be set to "0x01", and for non-3GPP access, the value of the unique NAS connection identifier shall be set to "0x02". Other parameters in the common NAS security context, such as the algorithm identifier, are common to multiple NAS connections.

[0123] Currently, multi-access scenarios do not support two 3GPP accesses. Therefore, how the MA PDU session can support at least two 3GPP accesses has become an issue worthy of attention. The two 3GPP access paths can be in the same PLMN or in different PLMNs. Among them, the two 3GPP access paths can use the same standard or different standards. For example, they can include the following situations: terrestrial NR+terrestrial NR; terrestrial NR+terrestrial evolved universal terrestrial radio access (E-UTRA) (for example, using a combination of evolved packet core (EPC) and 5G Core Network (5GC)); terrestrial NR+non-terrestrial NR; dual non-terrestrial NR (for example, using the same or different non-terrestrial networks (NTN) orbits, such as earth observation orbits, or medium orbits, or low orbits). Unless otherwise specified, this application mainly discusses multi-access scenarios in which terminal devices are connected to the same PLMN through two 3GPP accesses, and does not limit whether the standards of the two 3GPP access paths are the same, such as Figure 4 The figure shows a schematic diagram of a terminal device connected to the same PLMN via two 3GPP accesses. It should be noted that the present application takes the scenario of dual 3GPP access as an example for explanation, and the present application can also be applied to the scenario of multiple 3GPP access, such as the scenario of two or more 3GPP accesses, wherein the dual 3GPP access can also be replaced by multiple 3GPP access.

[0124] When a multi-access scenario supports one 3GPP access and one non-3GPP access, both accesses use the same K AMF Perform key derivation, where for 3GPP access, use K AMF Derivation K gNB For non-3GPP access, use K AMF Derivation K N3IWF . In the deduction process of the above two keys, the input parameters include the access type identifier (i.e. P1) to distinguish between 3GPP access and non-3GPP access. It can be seen that the current access type identifier (i.e. P1) cannot distinguish between two 3GPP accesses. Therefore, when a terminal device connects to the same PLMN through two 3GPP accesses, if only one primary authentication is performed, the two 3GPP accesses may not be distinguished, resulting in the use of the same key for two 3GPP accesses, that is, the key reuse problem occurs.

[0125] Based on the above Figure 1The network system architecture shown and the contents of the above-mentioned related technical introductions, several possible communication methods are provided in the embodiments of the present application, and the execution subjects of each key derivation method are introduced by taking the access and mobility management network element and the terminal device as examples. It should be understood that the access and mobility management network element can also be replaced by a communication device having the function of the access and mobility management network element or a chip, unit or module inside the communication device having the function of the access and mobility management network element. The terminal device can also be replaced by a communication device having a terminal function or a chip, unit or module inside the communication device having a terminal function.

[0126] In an embodiment of the present application, a terminal device sends a first registration request message and a second registration request message to an access and mobility management network element, wherein the first registration request message is used to request the terminal device to register with the network through a first 3GPP access. The second registration request message is used to request the terminal device to register with the network through a second 3GPP access. Furthermore, the access and mobility management network element and the terminal device generate a first key for the first 3GPP access and a second key for the second 3GPP access. The first key is different from the second key, the first key is a key used for communication between the terminal device and the first access network device, and the second key is a key used for communication between the terminal device and the second access network device. The access and mobility management network element sends the first key to the first access network device and sends the second key to the second access network device. Using the above method, two different keys are generated for two 3GPP accesses to achieve key isolation.

[0127] In a possible implementation, the terminal device and the first access network device may communicate using a first key or a key derived from the first key, and the terminal device and the second access network device may communicate using a second key or a key derived from the second key.

[0128] Exemplarily, when the terminal device communicates with the first access network device, the terminal device and the first access network device can generate a first RRC key and a first user plane key based on the first key. The first RRC key includes a first RRC integrity protection key and / or a first RRC confidentiality key. The first user plane key includes a first user plane integrity protection key and / or a first user plane confidentiality key. Furthermore, the terminal device and the first access network device can perform security protection on the first RRC signaling based on the first RRC key, and / or the terminal device and the first access network device can perform security protection on the first data based on the first user plane key. The first RRC signaling is the RRC signaling sent by the terminal device to the first access network device, or the RRC signaling sent by the first access network device to the terminal device. The first data is the uplink data sent by the terminal device to the first access network device, or the downlink data sent by the first access network device to the terminal device.

[0129] Similarly, when the terminal device communicates with the second access network device, the terminal device and the second access network device can generate a second RRC key and a second user plane key based on the second key. The second RRC key includes a second RRC integrity protection key and / or a second RRC confidentiality key. The second user plane key includes a second user plane integrity protection key and / or a second user plane confidentiality key. Furthermore, the terminal device and the second access network device can perform security protection on the second RRC signaling based on the second RRC key, and / or the terminal device and the second access network device can perform security protection on the second data based on the second user plane key. The second RRC signaling is the RRC signaling sent by the terminal device to the second access network device, or the RRC signaling sent by the second access network device to the terminal device. The second data is the uplink data sent by the terminal device to the second access network device, or the downlink data sent by the second access network device to the terminal device.

[0130] like Figures 5 to 8 As shown, the above process is described below with reference to specific examples. In each of the following examples, the terminal device is a UE, the access and mobility management network element is an AMF, the first access network device is RAN1, and the second access network device is RAN2.

[0131] Example 1:

[0132] S501: UE sends a first registration request message to AMF via RAN1. Correspondingly, AMF receives the first registration request message.

[0133] The first registration request message is used to request the UE to register with the network through the first 3GPP access.

[0134] Exemplarily, the UE sends a first registration request message to RAN1. RAN1 selects AMF and sends the first registration request message to AMF. Optionally, if the UE has previously registered with another AMF (i.e., source AMF), the AMF obtains the previous UE context from the source AMF. If the UE has not registered with another AMF, RAN1 performs the AMF discovery and selection process.

[0135] Exemplarily, the AMF may also trigger the main authentication process to complete the authentication of the network side to the UE and the UE to the network side, and the network side derives the key K AMF , determine the key K AMF The corresponding key set identifier (key set identifier in 5g, ngKSI). AMF The deduction process can refer to the above related content, which will not be repeated here. ngKSI is used to identify the key K established by the main authentication process. AMFIf the UE identity authentication is successful, ngKSI can also be used to identify the partial security context created by the UE. For example, ngKSI can identify the corresponding key K AMF , the values ​​of the uplink and downlink NAS counters, etc.

[0136] like Figure 2 As shown, the UE can also deduce the key K AMF . Further, AMF and UE can AMF Derive NAS confidentiality key K NASenc and / or NAS integrity protection key K NASint Among them, the NAS confidentiality key K NASenc and / or NAS integrity protection key K NASint It can be stored in the security context of the UE. In this application, the NAS confidentiality key K NASenc and NAS integrity protection key K NASint Both the NAS security protection key and the AMF key can be referred to as the NAS key.

[0137] S502: AMF generates a first key according to the first access type identifier.

[0138] In a possible implementation, before generating the first key, the AMF determines a first access type identifier for the first 3GPP access. The first access type identifier can be stored in the security context of the UE. Exemplarily, the AMF also creates a pair of NAS counters for the first NAS connection corresponding to the first 3GPP access and sets them to initial values. The AMF stores the parameters of the first NAS connection in the security context of the UE. The parameters of the first NAS connection include the first access type identifier and a pair of NAS counters.

[0139] In one example, before generating the first key, the AMF determines the first access type identifier, and the UE also determines the first access type identifier. The AMF and the UE may agree in advance on the first allocated access type identifier through a protocol to ensure that the same first access type identifier is allocated to both.

[0140] In another example, the AMF determines a first access type identifier and sends the first access type identifier to RAN1, and RAN1 notifies the UE through a first access stratum (AS) security mode command (AS security mode command) carrying the first access type identifier.

[0141] In another example, the AMF determines a first access type identifier and carries the first access type identifier through a first registration acceptance message to notify the UE.

[0142] For example, as shown in Table 2, the first access type identifier may be 0x01 or 0x03.

[0143] Table 2

[0144] Access type identifier Value 3GPP Access 0x01 Non-3GPP access 0x02 3GPP Access 0x03

[0145] It is understandable that the above values ​​0x01 and 0x03 are only examples, and other currently undefined values, such as 0x11, etc., may also be used through extension, which is not limited here.

[0146] In one possible implementation, after determining the first access type identifier, the AMF AMF ) and the first access type identifier to generate a first key. The first key can be recorded as K gNB 1. It is understandable that the generation of the first key also needs to be combined with other parameters, such as K gNB 1=KDF(FC, P0, L0, P1, L1), at this time, P0=the uplink NAS counter value corresponding to the first 3GPP access, L0==the length of the uplink NAS counter value corresponding to the first 3GPP access, P1=the first access type identifier, L1=the length of the first access type identifier. For details, please refer to the above related content, which will not be repeated here.

[0147] Exemplarily, the AMF may also send a first registration acceptance message to the UE through RAN1, where the first registration acceptance message includes a 5G GUTI. The 5G GUTI is allocated by the AMF to the UE. Optionally, the first registration acceptance message includes a first access type identifier.

[0148] In addition, the AMF may also send a NAS security mode command to the UE via RAN1, where the NAS security mode command includes ngKSI. The UE may also reply to the AMF with a NAS security mode complete message via RAN1.

[0149] S503: AMF sends the first key to RAN1. Correspondingly, RAN1 receives the first key from AMF.

[0150] For example, RAN1 may receive the first key (eg, K gNB 1) Generate a first RRC key and a first user plane key. For example, the first RRC key includes K RRCenc 1 and / or K RRCint 1. The first user plane key includes K UPenc 1 and / or KUPint 1.

[0151] Optionally, AMF may also send a first access type identifier to RAN1. In addition, RAN1 may also send a first AS security mode command to the UE, and the first AS security mode command is used to notify the UE of the RRC signaling protection encryption algorithm and / or user plane protection encryption algorithm selected by the network side. Optionally, the first AS security mode command may also include the first access type identifier. Further, after the UE executes S504 to generate the first key, the UE may also send a first AS security mode response to RAN1. In addition, RAN1 may also use other signaling to carry the first access type identifier, which is not limited in this application.

[0152] S504: The UE generates a first key according to the first access type identifier.

[0153] In a possible implementation manner, before generating the first key, the UE may determine a first access type identifier for the first 3GPP access.

[0154] In one example, the UE determines the first access type identifier by itself. The AMF and the UE may agree in advance on the first allocated access type identifier through a protocol to ensure that the same first access type identifier is allocated to both.

[0155] In another example, the UE receives a first registration accept message from the AMF, and the first registration accept message includes a first access type identifier.

[0156] In yet another example, the UE receives a first AS security mode command from RAN1, where the first AS security mode command includes a first access type identifier.

[0157] In addition, the UE also creates a pair of NAS counters for the first NAS connection corresponding to the first 3GPP access and sets them to initial values, and the UE saves parameters of the first NAS connection, and the parameters of the first NAS connection are saved in the security context of the UE. The parameters of the first NAS connection include a first access type identifier and a pair of NAS counters.

[0158] In one possible implementation, the UE receives the AMF key (e.g., K AMF ) and the first access type identifier to generate a first key, namely K gNB 1, a first RRC key and a first user plane key may be further generated according to the first key. The method for generating the first key by the AMF and the UE is the same, which will not be repeated here. The AMF key here is the same as the AMF key mentioned in S502, both of which are key K AMF .

[0159] It is understandable that the present application does not limit the sequence of S502, S503 and S504.

[0160] Therefore, when RAN1 communicates with the UE, RAN1 and the UE may use the first RRC key to perform security protection on the first RRC signaling, and / or use the first user plane key to perform security protection on the first data.

[0161] S505: The UE sends a second registration request message to the AMF. Correspondingly, the AMF receives the second registration request message.

[0162] The second registration request message is used to request the UE to register with the network through the second 3GPP access.

[0163] Exemplarily, the second registration request message includes indication information, wherein the indication information is used to indicate that the UE is connected to the network through two 3GPP accesses. It can also be described as that the indication information is used to indicate that the UE is registered to the network through two 3GPP accesses.

[0164] It is understandable that the indication information may also be used to indicate that the UE is connected to the network via multiple 3GPP accesses, or that the UE is registered to the network via multiple 3GPP accesses, wherein multiple 3GPP accesses may be understood as two or more 3GPP accesses.

[0165] For example, the indication information may indicate that the registration type (registration type) is dual 3GPP registration, or the indication information may indicate that the access type (access type) is dual 3GPP access.

[0166] For another example, the indication information may indicate that the registration type is multi-3GPP registration, or the indication information may indicate that the access type is multi-3GPP access.

[0167] In addition, the second registration request message may also include 5G-GUTI. Optionally, the second registration request message may also include ngKSI. The UE may also use the NAS integrity protection key K NASint The second registration request message is integrity protected. It can be understood that, in combination with the above S501, the NAS integrity protection key K NASint According to K AMF Derived, NAS integrity protection key K NASint Saved in the UE's security context.

[0168] Exemplarily, the UE sends a second registration request message to RAN2. RAN2 obtains the AMF identifier according to 5G-GUTI, and RAN2 forwards the second registration request message to AMF. For example, the AMF identifier is a globally unique AMF identifier (globallyunique AMF identifier, GUAMI), <5G-GUTI> = <guami>+<5G-TMSI>, the identity of the PLMN to which the UE is registered is also provided in the GUAMI of the 5G-GUTI, for example, the mobile country code (MCC) and mobile network code (MNC) are also included in the GUAMI.

[0169] After receiving the second registration request message, the AMF can retrieve the security context of the UE in the AMF according to the 5G-GUTI (and ngKSI) in the second registration request message, and use the NAS integrity protection key K in the security context of the UE NASint , verify the integrity of the second registration request message, thereby completing the identity authentication of the UE.

[0170] S506: AMF generates a second key according to the second access type identifier.

[0171] In a possible implementation, after the AMF successfully authenticates the UE and before generating the second key, the AMF determines the second access type identifier for the second 3GPP access according to the indication information.

[0172] Exemplarily, the AMF determines a second access type identifier that is different from the first access type identifier for the second 3GPP access based on the indication information and the first access type identifier. In the above manner, the AMF can determine, based on the indication information, that the UE is connected to the network through two 3GPP accesses, and then obtain the first access type identifier based on the security context of the UE, and the AMF determines the second access type identifier for the second 3GPP access, and the second access type identifier is an unused access type identifier. The first access type identifier is different from the second access type identifier.

[0173] For example, as shown in Table 2, if the first access type identifier is 0x01, the second access type identifier is 0x03. If the first access type identifier is 0x03, the second access type identifier is 0x01.

[0174] In addition, the AMF creates a pair of NAS counters for the second NAS connection corresponding to the second 3GPP access and sets them to initial values, and the AMF saves the parameters of the second NAS connection in the security context of the UE. The parameters of the second NAS connection include a second access type identifier and a pair of NAS counters.

[0175] It can be understood that the AMF maintains a set of UE security contexts for the first 3GPP access and the second 3GPP access, and the UE security context includes two sets of NAS connection parameters. The parameters of the first NAS connection include a first access type identifier and a pair of NAS counters, and the parameters of the second NAS connection include a second access type identifier and a pair of NAS counters.

[0176] In one possible implementation, after determining the second access type identifier, the AMF sends a second access type identifier based on the AMF key (e.g., K AMF ) and a second access type identifier to generate a second key. The second key can be recorded as K gNB 2. The AMF key here is the same as the AMF key mentioned in S502 and S504 above, both of which are key K AMF It is understandable that the generation of the second key also needs to be combined with other parameters, for example, K gNB 2=KDF(FC, P0, L0, P1, L1), at this time, P0=the uplink NAS counter value corresponding to the second 3GPP access, L0==the length of the uplink NAS counter value corresponding to the second 3GPP access, P1=the second access type identifier, and L1=the length of the second access type identifier.

[0177] In addition, the AMF may also send a second registration acceptance message to the UE. Optionally, the second registration acceptance message may include a second access type identifier.

[0178] S507: AMF sends the second key to RAN2. Correspondingly, RAN2 receives the second key from AMF.

[0179] For example, RAN2 may, based on the received second key (eg, K gNB 2) Generate a second RRC key and a second user plane key. For example, the second RRC key includes K RRCenc 2 and K RRCint 2. The second user plane key includes K UPenc 2 and K UPint 2.

[0180] Optionally, the AMF may also send a second access type identifier to RAN2. In addition, RAN2 may also send a second AS security mode command to the UE, and the second AS security mode command is used to notify the UE of the RRC signaling protection password algorithm and / or user plane protection password algorithm selected by the network side. Optionally, the second AS security mode command may also include a second access type identifier. Further, after the UE executes S508 to generate a second key, the UE may also send a second AS security mode response to RAN2. In addition, RAN2 may also use other signaling to carry the second access type identifier, which is not limited in this application.

[0181] S508: The UE generates a second key according to the second access type identifier.

[0182] In a possible implementation manner, before the UE generates the second key, the UE determines a second access type identifier for the second 3GPP access.

[0183] In one example, the UE determines the second access type identifier for the second 3GPP access based on the first access type identifier in the security context of the UE. Exemplarily, the UE determines that the first access type identifier has been used by the first 3GPP access, and allocates an unused second access type identifier to the second 3GPP access. At this time, since the AMF and the UE have agreed in advance on the first allocated access type identifier through a protocol, and there are two access type identifiers used to identify the 3GPP access as shown in Table 2, it can be ensured that the second access type identifiers allocated by the two for the second time are also the same.

[0184] In another example, the AMF sends a second registration acceptance message to the UE, and the second registration acceptance message includes the second access type identifier. Therefore, the UE can determine the second access type identifier according to the second registration acceptance message.

[0185] In another example, the AMF sends a second access type identifier to RAN2, and RAN2 sends a second AS security mode command to the UE, where the second AS security mode command includes the second access type identifier. Therefore, the UE can determine the second access type identifier according to the second AS security mode command.

[0186] In addition, the UE also creates a pair of NAS counters for the second NAS connection corresponding to the second 3GPP access and sets them to initial values. The UE saves parameters of the second NAS connection, and the parameters of the second NAS connection include a second access type identifier and a pair of NAS counters.

[0187] It can be understood that the UE maintains a set of UE security contexts for the first 3GPP access and the second 3GPP access, and the UE security context includes two sets of NAS connection parameters, the parameters of the first NAS connection include a first access type identifier and a pair of NAS counters, and the parameters of the second NAS connection include a second access type identifier and a pair of NAS counters.

[0188] In one possible implementation, the UE receives the AMF key (e.g., K AMF ) and the second access type identifier to generate a second key, namely K gNB 2. A second RRC key and a second user plane key may be further generated based on the second key. The method for AMF and UE to generate the second key is the same. The AMF key here is the same as the AMF key mentioned in S502, S504 and S506 above, both of which are key K AMF .

[0189] It is understandable that the present application does not limit the sequence of S506, S507 and S508.

[0190] Therefore, when RAN2 communicates with the UE, RAN2 and the UE may use the second RRC key to protect the second RRC signaling, and use the second user plane key to protect the second data.

[0191] By adopting the above method, by using different access type identifiers in two 3GPP access processes, it can be ensured that the first key is different from the second key, thereby achieving key isolation.

[0192] Example 2:

[0193] S601: UE sends a first registration request message to AMF via RAN1. Correspondingly, AMF receives the first registration request message.

[0194] For the specific content of S601, please refer to the above S501.

[0195] The difference from the above S501 is that the first registration request message includes indication information, wherein the indication information can refer to the relevant content in the above S505.

[0196] S602: AMF generates a first key according to the first access type identifier.

[0197] In a possible implementation, before generating the first key, the AMF determines the first access type identifier for the first 3GPP access according to the indication information, and the first access type identifier is one of the dual 3GPP access type identifiers. The first access type identifier can be saved in the security context of the UE. Exemplarily, the AMF determines, according to the indication information, that the UE is connected to the network via two 3GPP accesses, then determines one of the dual 3GPP access type identifiers for the first 3GPP access as the first access type identifier, and creates a pair of NAS counters and sets them to initial values. The AMF saves the parameters of the first NAS connection corresponding to the first 3GPP access in the security context of the UE. The parameters of the first NAS connection include the first access type identifier and a pair of NAS counters.

[0198] Among them, the dual 3GPP access type identifier is a newly defined access type identifier. The value of the dual 3GPP access type identifier is different from the previous access type identifier used to identify 3GPP access. The dual 3GPP access type identifier is used in multi-3GPP access or dual 3GPP access scenarios. The dual 3GPP access type identifier can also be called a multi-3GPP access type identifier. Generally, the dual 3GPP access type identifier can include two or more.

[0199] As described in Table 3, a possible implementation of the dual 3GPP access type identifier is shown in Table 3. As shown in Table 3, the first access type identifier may be 0x03 or 0x04.

[0200] Table 3

[0201] Access type identifier Value 3GPP Access 0x01 Non-3GPP access 0x02 Dual 3GPP access 0x03 Dual 3GPP access 0x04

[0202] It is understandable that the above values ​​0x03 and 0x04 are only examples, and other currently undefined values ​​may also be used through extension, which is not limited here.

[0203] In one example, before generating the first key, the AMF determines the first access type identifier, and the UE also determines the first access type identifier. At this time, the AMF and the UE can agree in advance on the first allocated identifier in the dual 3GPP access type identifier through a protocol to ensure that the same identifier is allocated to both.

[0204] In another example, the AMF determines a first access type identifier and notifies the UE by carrying the first access type identifier through a first registration acceptance message.

[0205] In another example, the AMF determines the first access type identifier and sends the first access type identifier to RAN1, and RAN1 carries the first access type identifier through a first AS security mode command to notify the UE.

[0206] In addition, in a possible implementation, a new field may be added to the security context of the UE. For example, the field is recorded as the first field. Exemplarily, the first field may include 1 bit. The value of the 1 bit is 1, indicating that the UE is connected to the network through two 3GPP accesses, or the access type (or registration type) of the UE is dual 3GPP access or multi-3GPP access. The value of the 1 bit is 0, indicating that the UE is not connected to the network through two 3GPP accesses, or the access type (or registration type) of the UE is non-dual 3GPP access or non-multi-3GPP access. The AMF may determine the value of the first field based on the indication information.

[0207] In one possible implementation, after determining the first access type identifier, the AMF AMF ) and the first access type identifier to generate a first key. The first key can be recorded as K gNB 1, for example, K gNB 1=KDF(FC, P0, L0, P1, L1, P2, L2), P0=uplink NAS counter value corresponding to the first 3GPP access, L0==length of the uplink NAS counter value corresponding to the first 3GPP access, P1=first access type identifier, L1=length of the first access type identifier.

[0208] In addition, the AMF may also send a first registration acceptance message to the UE through RAN1. Optionally, the first registration acceptance message includes a first access type identifier.

[0209] S603: AMF sends the first key to RAN1. Correspondingly, RAN1 receives the first key from AMF.

[0210] For example, RAN1 may receive the first key (eg, K gNB 1) Generate a first RRC key and a first user plane key. For example, the first RRC key includes K RRCenc 1 and / or K RRCint 1. The first user plane key includes K UPenc 1 and / or K UPint 1.

[0211] Optionally, the AMF may also send a first access type identifier to RAN1. In addition, RAN1 may also send a first AS security mode command to the UE, and the first AS security mode command is used to notify the UE of the RRC signaling protection cipher algorithm and / or the user plane protection cipher algorithm selected by the network side. Optionally, the first AS security mode command may also include the first access type identifier. Further, after the UE executes S504 to generate the first key, the UE may also send a first AS security mode response to RAN1.

[0212] S604: The UE generates a first key according to the first access type identifier.

[0213] In a possible implementation manner, before generating the first key, the UE may determine a first access type identifier for the first 3GPP access.

[0214] In one example, the UE knows that it is connected to the network through two 3GPP accesses, and the first 3GPP access is the first 3GPP access. Before generating the first key, the UE determines a first access type identifier for the first 3GPP access, and the first access type identifier is one of the dual 3GPP access type identifiers.

[0215] In another example, the UE receives a first registration accept message from the AMF, and the first registration accept message includes a first access type identifier.

[0216] In yet another example, the UE receives a first AS security mode command from RAN1, where the first AS security mode command includes a first access type identifier.

[0217] In addition, the UE also creates a pair of NAS counters for the first NAS connection corresponding to the first 3GPP access and sets them to initial values, and the UE saves parameters of the first NAS connection, and the parameters of the first NAS connection are saved in the security context of the UE. The parameters of the first NAS connection include a first access type identifier and a pair of NAS counters.

[0218] Further, in a possible implementation, the UE sends a key to the AMF according to the AMF key (for example, K AMF ) and the first access type identifier to generate a first key, namely K gNB 1, a first RRC key and a first user plane key may be further generated according to the first key. The method for generating the first key by the AMF and the UE is the same, which will not be repeated here. The AMF key here is the same as the AMF key mentioned in S602, both of which are key K AMF .

[0219] It is understandable that the present application does not limit the sequence of S602, S603 and S604.

[0220] Therefore, when RAN1 communicates with the UE, RAN1 and the UE may use the first RRC key to perform security protection on the first RRC signaling, and use the first user plane key to perform security protection on the first data.

[0221] S605: The UE sends a second registration request message to the AMF. Correspondingly, the AMF receives the second registration request message.

[0222] The second registration request message is used to request the UE to register with the network through the second 3GPP access. Optionally, the second registration request message may also include indication information.

[0223] In addition, for other contents of the second registration request message, please refer to S505.

[0224] S606: AMF generates a second key according to the second access type identifier.

[0225] In a possible implementation, after the AMF successfully authenticates the UE and before generating the second key, the AMF determines a second access type identifier for the second 3GPP access.

[0226] Exemplarily, the AMF can obtain the first access type identifier based on the security context of the UE. Since the first access type identifier is one of the dual 3GPP access type identifiers, the AMF determines that the UE is connected to the network through two 3GPP accesses; or, if the security context of the UE includes the first field, the AMF determines that the UE is connected to the network through two 3GPP accesses based on the first field in the security context of the UE; or, if the second registration request message includes indication information, the AMF determines that the UE is connected to the network through two 3GPP accesses based on the indication information.

[0227] Further, after the AMF determines that the UE is connected to the network through two 3GPP accesses, the AMF allocates a second access type identifier for the second 3GPP access, the second access type identifier being another identifier in the dual 3GPP access type identifier, wherein the second access type identifier is an unused identifier in the dual 3GPP access type identifier. The first access type identifier is different from the second access type identifier.

[0228] In addition, the AMF creates a pair of NAS counters for the second NAS connection corresponding to the second 3GPP access and sets them to initial values, and the AMF saves the parameters of the second NAS connection in the security context of the UE. The parameters of the second NAS connection include a second access type identifier and a pair of NAS counters.

[0229] It can be understood that the AMF maintains a set of UE security contexts for the first 3GPP access and the second 3GPP access, and the UE security context includes two sets of NAS connection parameters. The parameters of the first NAS connection include a first access type identifier and a pair of NAS counters, and the parameters of the second NAS connection include a second access type identifier and a pair of NAS counters.

[0230] Further, in a possible implementation, after determining the second access type identifier, the AMF sends the second access type identifier according to the AMF key (for example, K AMF ) and a second access type identifier to generate a second key. The second key can be recorded as K gNB 2. It is understandable that the generation of the second key also needs to be combined with other parameters, such as K gNB 2=KDF(FC, P0, L0, P1, L1), at this time, P0=the uplink NAS counter value corresponding to the second 3GPP access, L0==the length of the uplink NAS counter value corresponding to the second 3GPP access, P1=the second access type identifier, L1=the length of the second access type identifier. The AMF key here is the same as the AMF key mentioned in S602 and S604 above, both of which are key K AMF .

[0231] In addition, the AMF may also send a second registration acceptance message to the UE. Optionally, the second registration acceptance message may include a second access type identifier.

[0232] S607: AMF sends the second key to RAN2. Correspondingly, RAN2 receives the second key from AMF.

[0233] For example, RAN2 may, based on the received second key (eg, K gNB 2) Generate a second RRC key and a second user plane key. For example, the second RRC key includes K RRCenc 2 and K RRCint 2. The second user plane key includes K UPenc 2 and K UPint 2.

[0234] Optionally, the AMF may also send a second access type identifier to RAN2. In addition, RAN2 may also send a second AS security mode command to the UE, and the second AS security mode command is used to notify the UE of the RRC signaling protection cipher algorithm and / or the user plane protection cipher algorithm selected by the network side. Optionally, the second AS security mode command may also include a second access type identifier. Further, after the UE executes S508 to generate the second key, the UE may also send a second AS security mode response to RAN2.

[0235] S608: The UE generates a second key according to the second access type identifier.

[0236] In a possible implementation manner, before the UE generates the second key, the UE determines a second access type identifier for the second 3GPP access.

[0237] In one example, the UE determines to allocate a second access type identifier for the second 3GPP access based on the first access type identifier in the security context of the UE. The UE determines that the first access type identifier is one of the dual 3GPP access type identifiers, and allocates another identifier in the dual 3GPP access type identifier as the second access type identifier for the second 3GPP access, and the second access type identifier is an unused identifier in the dual 3GPP access type identifier. The first access type identifier is different from the second access type identifier. At this time, since the AMF and the UE have agreed in advance on the first allocated identifier in the dual 3GPP access type identifier through an agreement, and there are two identifiers for identifying the dual 3GPP access type as shown in Table 3, it can be further ensured that the second access type identifiers allocated for the second time by the two are also the same.

[0238] In another example, the AMF sends a second registration acceptance message to the UE, and the second registration acceptance message includes the second access type identifier. Therefore, the UE can determine the second access type identifier according to the second registration acceptance message.

[0239] In another example, the AMF sends a second access type identifier to RAN2, and RAN2 sends a second AS security mode command to the UE, where the second AS security mode command includes the second access type identifier. Therefore, the UE can determine the second access type identifier according to the second AS security mode command.

[0240] In addition, the UE also creates a pair of NAS counters for the second NAS connection corresponding to the second 3GPP access and sets them to initial values. The UE saves parameters of the second NAS connection, and the parameters of the second NAS connection include a second access type identifier and a pair of NAS counters.

[0241] It can be understood that the UE maintains a set of UE security contexts for the first 3GPP access and the second 3GPP access, and the UE security context includes two sets of NAS connection parameters, the parameters of the first NAS connection include a first access type identifier and a pair of NAS counters, and the parameters of the second NAS connection include a second access type identifier and a pair of NAS counters.

[0242] In a possible implementation, the UE generates a second key, namely K according to the AMF key and the second access type identifier. gNB 2. A second RRC key and a second user plane key may be further generated based on the second key. The method for AMF and UE to generate the second key is the same, which will not be repeated here. The AMF key here is the same as the AMF key mentioned in S602, S604 and S606 above, both of which are key K AMF .

[0243] It is understandable that the present application does not limit the sequence of S606, S607 and S608.

[0244] Therefore, when RAN2 communicates with the UE, RAN2 and the UE may use the second RRC key to protect the second RRC signaling, and use the second user plane key to protect the second data.

[0245] By adopting the above method, by using different access type identifiers in two 3GPP access processes, it can be ensured that the first key is different from the second key, thereby achieving key isolation.

[0246] In addition, for the above example 1 and example 2, in addition, in a possible implementation, the AMF uses the NAS security protection key and the first bearer parameter to perform security protection on the first NAS signaling, the first NAS signaling corresponds to the first 3GPP access, and uses the NAS security protection key and the second bearer parameter to perform security protection on the second NAS signaling, the second NAS signaling corresponds to the second 3GPP access. The first bearer parameter is the first access type identifier, and the second bearer parameter is the first access type identifier.

[0247] Among them, it can be known from the above S501 that the NAS security protection key includes the NAS confidentiality key K NASenc and / or NAS integrity protection key K NASint The first NAS signaling is NAS signaling transmitted between the AMF and the UE through the first 3GPP access. The second NAS signaling is NAS signaling transmitted between the AMF and the UE through the second 3GPP access.

[0248] For example, AMF is based on K AMF Derive NAS confidentiality key K NASenc , NAS integrity protection key K NASint , according to the NAS confidentiality key K NASenc and the first access type identifier to protect the confidentiality of the first NAS signaling, and according to the NAS integrity protection key K NASint and the first access type identifier to perform integrity protection on the first NAS signaling, and to NASenc The second NAS signaling is protected confidentially using the second access type identifier and the NAS integrity protection key K NASint The second NAS signaling is integrity protected by the second access type identifier.

[0249] For example, combined with Figure 3A As shown, for the first 3GPP access, according to the NAS confidentiality key K NASenc The first NAS signaling is protected by the corresponding input parameters, wherein the input parameters include at least one of the value of the first counter, the first bearer parameter, the first direction parameter, and the first length parameter, and the first bearer parameter includes the first access type identifier. If the AMF performs confidentiality protection on the first NAS signaling, the first counter is the downlink NAS counter corresponding to the first 3GPP access, and the first direction parameter indicates downlink. If the UE performs confidentiality protection on the first NAS signaling, the first counter is the uplink NAS counter corresponding to the first 3GPP access, and the first direction parameter indicates uplink.

[0250] For the second 3GPP access, according to the NAS confidentiality key K NASenc The second NAS signaling is protected by the corresponding input parameters, wherein the input parameters include at least one of the value of the second counter, the second bearer parameter, the second direction parameter, and the second length parameter, and the second bearer parameter includes the second access type identifier. If the AMF protects the second NAS signaling confidentiality, the second counter is the downlink NAS counter corresponding to the second 3GPP access, and the second direction parameter indicates downlink. If the UE protects the second NAS signaling confidentiality, the second counter is the uplink NAS counter corresponding to the second 3GPP access, and the second direction parameter indicates uplink.

[0251] For example, combining Figure 3B As shown, for the first 3GPP access, the AMF or UE uses the NAS integrity protection key K NASint and corresponding input parameters to perform integrity protection on the second NAS signaling, wherein the input parameters include at least one of the value of the first counter, the first bearer parameter, the first direction parameter, and the first message parameter, and the first bearer parameter includes the first access type identifier. For the second 3GPP access, the AMF or the UE performs integrity protection on the second NAS signaling according to the NAS integrity protection key K NASint And corresponding input parameters are used to perform integrity protection on the second NAS signaling, wherein the input parameters here include at least one of the value of the second counter, the second bearer parameter, the second direction parameter, and the second message parameter, and the second bearer parameter includes a second access type identifier.

[0252] In the above manner, by using different bearer parameters, the problem of key stream reuse caused by two 3GPPs using the same NAS key can be avoided.

[0253] Example 3:

[0254] S701: UE sends a first registration request message to AMF via RAN1. Correspondingly, AMF receives the first registration request message.

[0255] For the specific content of S701, please refer to the above S501.

[0256] The difference from the above S501 is that the first registration request message includes indication information, wherein the indication information can refer to the relevant content in the above S505.

[0257] S702: AMF generates a first key according to the third access type identifier and the identifier of the first 3GPP access.

[0258] In a possible implementation manner, before the AMF generates the first key, the AMF determines an identifier of the first 3GPP access for the first 3GPP access according to the indication information.

[0259] Exemplarily, the identifier of the first 3GPP access is a path identifier of the first 3GPP access, or other identifiers used to identify the first 3GPP access, wherein the identifier of the first 3GPP access is different from the access type identifier. Exemplarily, the path identifier of the first 3GPP access is an identifier of the data transmission path between the UE and the UPF. For example, taking the downlink data as an example, the downlink data from the DN arrives at UPF1, is forwarded to RAN1 via UPF2, and then RAN1 sends the downlink data to the UE, and the downlink data transmission path is UPF1→UPF2→RAN1→UE. Similarly, the uplink data transmission path is UE→RAN1→UPF2→UPF1, and the path identifier of the first 3GPP access is an identifier used to identify the uplink data transmission path and / or the downlink data transmission path. Exemplarily, the AMF determines the identifier of the first 3GPP access according to the indication information, which may include but is not limited to the following methods:

[0260] Method a: AMF can allocate the first 3GPP access identifier for the first 3GPP access according to the indication information. At this time, AMF also needs to send the first 3GPP access identifier to the UE. For example, AMF sends a first registration acceptance message to the UE, and the first registration acceptance message includes the first 3GPP access identifier. Or AMF sends the first 3GPP access identifier to RAN1, and RAN1 carries the first 3GPP access identifier through the first AS security mode command to notify the UE.

[0261] Method b: AMF can obtain the identifier of the first 3GPP access from other core network elements. In addition, AMF needs to send the identifier of the first 3GPP access to the UE. For example, AMF sends a first registration acceptance message to the UE, and the first registration acceptance message includes the identifier of the first 3GPP access. Or AMF sends the identifier of the first 3GPP access to RAN1, and RAN1 carries the identifier of the first 3GPP access through the first AS security mode command to notify the UE.

[0262] Exemplarily, AMF can obtain two 3GPP access identifiers from UDM. For example, UDM configures two 3GPP access identifiers in the subscription information when the UE is connected to the network through two 3GPP accesses, and the two 3GPP access identifiers are different. The Nudm_UECM_Registration request message sent by AMF to UDM includes the content of the indication information, and then UDM can obtain two 3GPP access identifiers from the subscription information according to the content of the indication information and send them to AMF. AMF uses one of the two 3GPP access identifiers received as the identifier of the first 3GPP access.

[0263] In one example, the UDM may also indicate an allocation order of two 3GPP access identifiers, and then the AMF determines the identifier of the first 3GPP access for the first 3GPP access from the two 3GPP access identifiers according to the allocation order.

[0264] In another example, the two 3GPP access identifiers replied by the UDM do not indicate the allocation order, then the AMF can determine the identifier of the first 3GPP access from the two 3GPP access identifiers for the first 3GPP access. For example, the AMF can randomly select an identifier from the two 3GPP access identifiers as the identifier of the first 3GPP access.

[0265] Further, after the AMF determines the identifier of the first 3GPP access, the AMF may store the identifier of the first 3GPP access in the security context of the UE. In addition, the identifier of another 3GPP access that has not yet been allocated may also be stored in the security context of the UE.

[0266] Mode c: The first registration request message includes the identifier of the first 3GPP access, that is, the UE determines the identifier of the first 3GPP access.

[0267] Exemplarily, after determining the identifier of the first 3GPP access, the AMF may store the identifier of the first 3GPP access in the security context of the UE. In addition, the AMF creates a pair of NAS counters for the first NAS connection corresponding to the first 3GPP access and sets them to initial values.

[0268] In one possible implementation, the AMF receives the AMF key (e.g., K AMF ), the third access type identifier and the first 3GPP access identifier generate a first key. The third access type identifier is the access type identifier for identifying 3GPP access shown in Table 1. Combining Table 1, it can be seen that the access type identifier here can be 0x01, and the first key can be recorded as K gNB1 .

[0269] In one example, the identifier of the first 3GPP access is used as the identifier for generating K gNB1 The new input parameter K gNB 1=KDF(FC, P0, L0, P1, L1, P2, L2), P0=uplink NAS counter value corresponding to the first 3GPP access, L0=length of the uplink NAS counter value corresponding to the first 3GPP access, P1=third access type identifier, L1=length of the third access type identifier, P2 is the identifier of the first 3GPP access, and L2 is the length of the identifier of the first 3GPP access.

[0270] In another example, the definition of P1 is updated, and P1 is determined according to the identifier of the first 3GPP access and the third access type identifier. For example, the result of connecting the identifier of the first 3GPP access and the third access type identifier is taken as P1. Then K gNB 1=KDF(FC, P0, L0, P1, L1), P0=uplink NAS counter value corresponding to the first 3GPP access, L0=length of the uplink NAS counter value corresponding to the first 3GPP access, P1=third access type identifier||identifier of the first 3GPP access, L1=third access type identifier||length of the identifier of the first 3GPP access.

[0271] In another example, the definition of P1 is updated, and P1 is determined according to the identifier of the first 3GPP access. For example, the identifier of the first 3GPP access is used as P1, then K gNB 1=KDF(FC, P0, L0, P1, L1), P0=uplink NAS counter value corresponding to the first 3GPP access, L0==length of the uplink NAS counter value corresponding to the first 3GPP access, P1=identifier of the first 3GPP access, L1=length of the identifier of the first 3GPP access.

[0272] It can be understood that the above examples are only examples and are not intended to limit the present application. K can be generated by one or more parameters including the uplink NAS counter value corresponding to the first 3GPP access, the length of the uplink NAS counter value corresponding to the first 3GPP access, the identifier of the first 3GPP access, the length of the identifier of the first 3GPP access, the third access type identifier, and the length of the third access type identifier. gNB 1.

[0273] In a possible implementation, a new field may be added to the security context of the UE. For example, the field is recorded as the first field. Exemplarily, the first field may include 1 bit. The value of the 1 bit is 1, indicating that the UE is connected to the network through two 3GPP accesses, or the access type (or registration type) of the UE is dual 3GPP access or multi-3GPP access. The value of the 1 bit is 0, indicating that the UE is not connected to the network through two 3GPP accesses, or the access type (or registration type) of the UE is non-dual 3GPP access or non-multi-3GPP access. The AMF may determine the value of the first field according to the indication information.

[0274] In addition, the AMF may also send a first registration acceptance message to the UE through RAN1. Optionally, the first registration acceptance message includes an identifier corresponding to the first 3GPP access.

[0275] S703: AMF sends the first key to RAN1. Correspondingly, RAN1 receives the first key from AMF.

[0276] For example, RAN1 may receive the first key (eg, K gNB 1) Generate a first RRC key and a first user plane key. For example, the first RRC key includes K RRCenc 1 and K RRCint 1. The first user plane key includes K UPenc 1 and K UPint 1.

[0277] Optionally, the AMF may also send a first access type identifier to RAN1. In addition, RAN1 may also send a first AS security mode command to the UE, and the first AS security mode command is used to notify the UE of the RRC signaling protection cipher algorithm and / or the user plane protection cipher algorithm selected by the network side. Optionally, the first AS security mode command may also include the first access type identifier. Further, after the UE executes S504 to generate the first key, the UE may also send a first AS security mode response to RAN1.

[0278] S704: The UE generates a first key according to the third access type identifier and the first 3GPP access identifier.

[0279] In one possible design, the UE determines an identifier of the first 3GPP access before generating the first key.

[0280] In one example, the UE knows that it is connected to the network through two 3GPP accesses, and the first 3GPP access is the first 3GPP access. Before generating the first key, the UE determines the identifier of the first 3GPP for the first 3GPP access. Exemplarily, the UE can determine the identifier of the first 3GPP access by itself. At this time, the first registration request message can include the identifier of the first 3GPP access.

[0281] In another example, the UE receives a first registration accept message from the AMF, and the first registration accept message includes an identifier of the first 3GPP access.

[0282] In yet another example, the UE receives a first AS security mode command from RAN1, where the first AS security mode command includes an identifier of a first 3GPP access.

[0283] In addition, the UE also creates a pair of NAS counters for the first NAS connection corresponding to the first 3GPP access, and sets them to initial values.

[0284] Further, in a possible design, the UE generates a first key, that is, K according to the AMF key, the third access type identifier and the identifier of the first 3GPP access. gNB 1. A first RRC key and a first user plane key can be further generated based on the first key. The method for AMF and UE to generate the first key is the same, which will not be repeated here.

[0285] It is understandable that the present application does not limit the sequence of S702, S703 and S704.

[0286] Therefore, when RAN1 communicates with the UE, RAN1 and the UE may use the first RRC key to protect the first RRC signaling, and use the first user plane key to protect the first data.

[0287] S705: The UE sends a second registration request message to the AMF. Correspondingly, the AMF receives the second registration request message.

[0288] The second registration request message is used to request the UE to register with the network through the second 3GPP access. Optionally, the second registration request message may also include indication information. In addition, for other contents of the second registration request message, reference may be made to S505.

[0289] S706: AMF generates a second key according to the third access type identifier and the second 3GPP access identifier.

[0290] In a possible implementation, after the AMF successfully authenticates the UE and before generating the second key, the AMF determines the identifier of the second 3GPP for the second 3GPP access. Specifically, the following methods may be included but are not limited to:

[0291] Method a: If the security context of the UE includes the first field, the AMF determines that the UE is connected to the network through two 3GPP accesses based on the first field in the security context of the UE, or if the second registration request message includes indication information, the AMF determines that the UE is connected to the network through two 3GPP accesses based on the indication information, and further the AMF may allocate a second 3GPP access identifier for the second 3GPP access. At this time, the AMF also needs to send the identifier of the second 3GPP access to the UE. For example, the AMF sends a second registration acceptance message to the UE, and the second registration acceptance message includes the identifier of the second 3GPP access. Or the AMF sends the identifier of the second 3GPP access to RAN2, and RAN2 carries the identifier of the second 3GPP access through the second AS security mode command to notify the UE.

[0292] Method b: If the AMF obtains the identifier of the unallocated 3GPP access according to the security context of the UE, and then determines that the UE is connected to the network through two 3GPP accesses, the AMF further uses the identifier of the unallocated 3GPP access as the identifier of the second 3GPP. At this time, the AMF also needs to send the identifier of the second 3GPP access to the UE. For example, the AMF sends a second registration acceptance message to the UE, and the second registration acceptance message includes the identifier of the second 3GPP access. Or the AMF sends the identifier of the second 3GPP access to RAN2, and RAN2 carries the identifier of the second 3GPP access through the second AS security mode command to notify the UE.

[0293] Mode c: The second registration request message includes the identifier of the second 3GPP access, that is, the identifier of the second 3GPP access allocated by the UE. At this time, the AMF determines that the UE is connected to the network through two 3GPP accesses and determines the identifier of the second 3GPP access based on the identifier of the second 3GPP access in the second registration request message.

[0294] In addition, the AMF saves the identifier of the second 3GPP access to the context of the UE. The AMF also creates a pair of NAS counters for the first NAS connection corresponding to the second 3GPP access and sets them to initial values.

[0295] It can be understood that the AMF maintains a set of UE security contexts for the first 3GPP access and the second 3GPP access, and the UE security context includes two sets of NAS connection parameters. The parameters of the first NAS connection include the identifier of the first 3GPP access, the third access type identifier and a pair of NAS counters, and the parameters of the second NAS connection include the identifier of the second 3GPP access, the third access type identifier and a pair of NAS counters.

[0296] Exemplarily, AMF sends a request based on an AMF key (e.g., K AMF ), the third access type identifier and the second 3GPP access identifier generate a second key. The third access type identifier is the access type identifier for identifying 3GPP access shown in Table 1. Combining Table 1, it can be seen that the access type identifier here can be 0x01, and the second key can be recorded as K gNB 2.

[0297] In one example, the identifier of the second 3GPP access is used as the identifier for generating K gNB 2, then K gNB2 =KDF(FC, P0, L0, P1, L1, P2, L2), P0=the uplink NAS counter value corresponding to the second 3GPP access, L0==the length of the uplink NAS counter value corresponding to the second 3GPP access, P1=the third access type identifier, L1=the length of the third access type identifier, P2 is the identifier of the second 3GPP access, and L2 is the length of the identifier of the second 3GPP access.

[0298] In another example, the definition of P1 is updated, and P1 is determined according to the second 3GPP access identifier and the third access type identifier. For example, the result of connecting the second 3GPP access identifier and the third access type identifier is taken as P1. Then K gNB 2=KDF(FC, P0, L0, P1, L1), P0=uplink NAS counter value corresponding to the second 3GPP access, L0==length of the uplink NAS counter value corresponding to the second 3GPP access, P1=third access type identifier||identifier of the second 3GPP access, L1=third access type identifier||length of the identifier of the second 3GPP access.

[0299] In another example, the definition of P1 is updated, and P1 is determined according to the identifier of the second 3GPP access. For example, the identifier of the second 3GPP access is used as P1, then K gNB 2=KDF(FC, P0, L0, P1, L1), P0=uplink NAS counter value corresponding to the second 3GPP access, L0==length of the uplink NAS counter value corresponding to the second 3GPP access, P1=identifier of the second 3GPP access, L1=length of the identifier of the second 3GPP access.

[0300] It can be understood that the above examples are only examples and are not intended to limit the present application. K can be generated by one or more parameters including the uplink NAS counter value corresponding to the second 3GPP access, the length of the uplink NAS counter value corresponding to the second 3GPP access, the identifier of the second 3GPP access, the length of the identifier of the second 3GPP access, the third access type identifier, and the length of the third access type identifier. gNB 2.

[0301] S707: AMF sends the second key to RAN2. Correspondingly, RAN2 receives the second key from AMF.

[0302] For example, RAN2 may, based on the received second key (eg, K gNB 2) Generate a second RRC key and a second user plane key. For example, the second RRC key includes K RRCenc 2 and K RRCint 2. The second user plane key includes K UPenc 2 and K UPint 2.

[0303] Optionally, the AMF may also send a second access type identifier to RAN2. In addition, RAN2 may also send a second AS security mode command to the UE, and the second AS security mode command is used to notify the UE of the RRC signaling protection cipher algorithm and / or the user plane protection cipher algorithm selected by the network side. Optionally, the second AS security mode command may also include a second access type identifier. Further, after the UE executes S508 to generate the second key, the UE may also send a second AS security mode response to RAN2.

[0304] S708: The UE generates a second key according to the third access type identifier and the second 3GPP access identifier.

[0305] In a possible implementation manner, before generating the second key, the UE determines an identifier of the second 3GPP access.

[0306] In one example, the UE knows that it is connected to the network through two 3GPP accesses, and the second 3GPP access is a second 3GPP access, then before generating the second key, the UE determines the identity of the second 3GPP for the second 3GPP access. Exemplarily, the UE can allocate the identity of the second 3GPP access itself.

[0307] In another example, the UE receives a second registration accept message from the AMF, and the second registration accept message includes an identifier of the second 3GPP access.

[0308] In yet another example, the UE receives a second AS security mode command from RAN2, where the second AS security mode command includes an identifier of a second 3GPP access.

[0309] The UE also creates a pair of NAS counters for the second NAS connection corresponding to the second 3GPP access and sets them to initial values.

[0310] It can be understood that the UE maintains a set of UE security contexts for the first 3GPP access and the second 3GPP access, and the UE security context includes two sets of NAS connection parameters, the parameters of the first NAS connection include the identifier of the first 3GPP access, the third access type identifier and a pair of NAS counters, and the parameters of the second NAS connection include the identifier of the second 3GPP access, the third access type identifier and a pair of NAS counters.

[0311] Further, the UE generates a second key, namely K according to the AMF key, the third access type identifier and the second 3GPP access identifier. gNB 2. A second RRC key and a second user plane key can be further generated based on the second key. The method for AMF and UE to generate the second key is the same, which will not be repeated here.

[0312] It is understandable that the present application does not limit the sequence of S706, S707 and S708.

[0313] Therefore, when RAN2 communicates with the UE, RAN2 and the UE may use the second RRC key to protect the second RRC signaling, and use the second user plane key to protect the second data.

[0314] By adopting the above method, by allocating new identifiers for different 3GPP accesses during two 3GPP access processes, it can be ensured that the first key is different from the second key, thereby achieving key isolation.

[0315] In addition, in a possible implementation, the AMF uses a NAS security protection key and a first bearer parameter to perform security protection on the first NAS signaling, the first NAS signaling corresponds to the first 3GPP access, and uses a security protection NAS key and a second bearer parameter to perform security protection on the second NAS signaling, the second NAS signaling corresponds to the second 3GPP access. Among them, the first bearer parameter corresponds to the identifier of the first 3GPP access, which can be understood as the first bearer parameter is determined according to the identifier of the first 3GPP access, for example, the first bearer parameter is the identifier of the first 3GPP access or is determined according to the identifier of the first 3GPP access and the third access type identifier. The second bearer parameter corresponds to the identifier of the second 3GPP access, which can be understood as the second bearer parameter is determined according to the identifier of the second 3GPP access, for example, the second bearer parameter is the identifier of the second 3GPP access or is determined according to the identifier of the second 3GPP access and the third access type identifier.

[0316] For example, AMF is based on K AMF Derive NAS confidentiality key K NASenc , NAS integrity protection key K NASint , according to the NAS confidentiality key K NASenc The first NAS signaling is protected confidentially by the first bearer parameter, and the NAS integrity protection key K is used NASint and the first bearer parameter to perform integrity protection on the first NAS signaling, and to NASenc The second NAS signaling is protected confidentially using the second bearer parameter and the NAS integrity protection key K NASint The second NAS signaling is integrity protected by the second bearer parameter.

[0317] Therefore, by using different bearer parameters, the problem of key stream reuse caused by two 3GPPs using the same NAS key can be avoided.

[0318] Example 4:

[0319] S801: UE sends a first registration request message to AMF via RAN1. Correspondingly, AMF receives the first registration request message.

[0320] For the specific content of S801, please refer to the above S501.

[0321] Optionally, the first registration request message includes indication information, wherein the indication information may refer to the relevant content in the above S505.

[0322] S802: AMF generates a first key according to the first value of the uplink NAS counter.

[0323] Exemplarily, the AMF allocates a third access type identifier to the first NAS connection corresponding to the first 3GPP access, and creates a pair of NAS counters, setting them to initial values. The pair of NAS counters includes an uplink NAS counter and a downlink NAS counter. The AMF saves the parameters of the first NAS connection in the security context of the UE. The parameters of the first NAS connection include a third access type identifier and a pair of NAS counters. The third access type identifier is an access type identifier for identifying 3GPP access shown in Table 1. In combination with Table 1, it can be seen that the access type identifier here can be 0x01.

[0324] In one possible implementation, the AMF receives the AMF key (e.g., K AMF ) and the first value of the uplink NAS counter to generate a first key. The first key can be recorded as K gNB 1. It is understandable that the generation of the first key also needs to be combined with other parameters, such as K gNB 1=KDF(FC, P0, L0, P1, L1), at this time, P0=the first value of the uplink NAS counter, L0==the length of the first value of the uplink NAS counter, P1=the third access type identifier, L1=the length of the third access type identifier. For details, please refer to the above related content, which will not be repeated here.

[0325] In addition, the AMF may also send a first registration acceptance message to the UE through RAN1.

[0326] S803: AMF sends the first key to RAN1. Correspondingly, RAN1 receives the first key from AMF.

[0327] For example, RAN1 may receive the first key (eg, K gNB 1) Generate a first RRC key and a first user plane key. For example, the first RRC key includes K RRCenc 1 and K RRCint 1. The first user plane key includes K UPenc 1 and K UPint 1.

[0328] In addition, RAN1 may also send an AS security mode command to the UE, where the AS security mode command is used to notify the UE of the RRC signaling protection key algorithm and / or user plane protection cipher algorithm selected by the network side. Further, after the UE executes S804 to generate the first key, the UE may also send an AS security mode response to RAN1.

[0329] S804: The UE generates a first key according to the first value of the uplink NAS counter.

[0330] Exemplarily, the UE further creates a pair of NAS counters for the first NAS connection corresponding to the first 3GPP access and sets them to initial values, and the UE saves parameters of the first NAS connection, the parameters of the first NAS connection including the third access type identifier and the pair of NAS counters. The pair of NAS counters includes an uplink NAS counter and a downlink NAS counter.

[0331] Further, in a possible implementation, the UE generates a first key, namely K according to the AMF key and the first value of the uplink NAS counter. gNB 1. A first RRC key and a first user plane key may be further generated according to the first key. The method for the AMF and the UE to generate the first key is the same, which will not be repeated here.

[0332] It is understandable that the present application does not limit the sequence of S802, S803 and S804.

[0333] Therefore, when RAN1 communicates with the UE, RAN1 and the UE may use the first RRC key to protect the second RRC signaling, and use the first user plane key to protect the second data.

[0334] S805: The UE sends a second registration request message to the AMF. Correspondingly, the AMF receives the second registration request message.

[0335] The second registration request message is used to request the UE to register with the network through the second 3GPP access.

[0336] Optionally, the second registration request message includes indication information. In addition, for other contents of the second registration request message, reference may be made to S505.

[0337] S806: The AMF generates a second key according to the second value of the uplink NAS counter.

[0338] Exemplarily, the AMF does not create a new pair of NAS counters for the second NAS connection corresponding to the second 3GPP access, but uses the already created NAS counters. The AMF uses the AMF key (e.g., K AMF ) and the second value of the uplink NAS counter to generate a second key. The second key can be recorded as K gNB 2. It is understandable that the generation of the second key also needs to be combined with other parameters, such as K gNB 2=KDF(FC, P0, L0, P1, L1), at this time, P0=the second value of the uplink NAS counter, L0==the length of the second value of the uplink NAS counter, P1=the third access type identifier, and L1=the length of the third access type identifier.

[0339] In addition, the AMF may also send a second registration acceptance message to the UE through RAN2.

[0340] S807: AMF sends the second key to RAN2. Correspondingly, RAN2 receives the second key from AMF.

[0341] For example, RAN2 may, based on the received second key (eg, K gNB 2) Generate a second RRC key and a second user plane key. For example, the second RRC key includes K RRCenc 2 and K RRCint 2. The second user plane key includes K UPenc 2 and K UPint 2.

[0342] In addition, RAN2 may also send an AS security mode command to the UE, where the AS security mode command is used to notify the UE of the RRC signaling protection cipher algorithm and / or the user plane protection cipher algorithm selected by the network side. Further, after the UE executes S808 to generate the second key, the UE may also send an AS security mode response to RAN2.

[0343] S808: The UE generates a second key according to the second value of the uplink NAS counter.

[0344] Exemplarily, the UE does not create a new pair of NAS counters for the second NAS connection corresponding to the second 3GPP access, but uses the already created NAS counters. The UE determines the number of NAS counters to be used for the second NAS connection according to the AMF key (e.g., K AMF ) and the second value of the uplink NAS counter to generate a second key, namely K gNB 2. A second RRC key and a second user plane key may be further generated according to the second key. The method for the AMF and the UE to generate the second key is the same.

[0345] It is understandable that the present application does not limit the sequence of S806, S807 and S808.

[0346] Therefore, when RAN2 communicates with the UE, RAN2 and the UE may use the second RRC key to protect the second RRC signaling, and use the second user plane key to protect the second data.

[0347] By adopting the above method, by using different values ​​of the same uplink NAS counter in two 3GPP access processes, it can be ensured that the first key is different from the second key, thereby achieving key isolation.

[0348] In addition, after generating the second key, the AMF and the UE may also create a new pair of NAS counters for the second NAS connection corresponding to the second 3GPP access and set them to initial values. The use of two sets of NAS counters allows the AMF to better distinguish between messages from RAN1 and RAN2, and to better confirm the order of messages from RAN1 and the order of messages from RAN2.

[0349] It is understandable that, in order to implement the functions in the above embodiments, the terminal device or the access and mobility management network element includes a hardware structure and / or software module corresponding to the execution of each function. Those skilled in the art should easily realize that, in combination with the units and method steps of each example described in the embodiments disclosed in this application, the present application can be implemented in the form of hardware or a combination of hardware and computer software. Whether a function is executed in the form of hardware or computer software driving hardware depends on the specific application scenario and design constraints of the technical solution.

[0350] Fig. 9 and Fig.10 The schematic diagram of the structure of possible communication devices provided by the embodiments of the present application. These communication devices can be used to implement the functions of the terminal equipment or access and mobility management network element in the above method embodiments, and thus can also achieve the beneficial effects possessed by the above method embodiments.

[0351] like Fig. 9 As shown, the communication device 900 includes a processing unit 910 and a transceiver unit 920. The communication device 900 is used to implement the above Figure 5 , 6 , 7, and 8 are the functions of a terminal device or an access and mobility management network element in the method embodiments shown in FIG.

[0352] When the communication device 900 is used to implement Figure 5 , 6 , 7, and 8. In the method embodiments shown in FIG. 8, the functions of accessing and managing the mobility network element are as follows:

[0353] The transceiver unit 920 is used to receive a first registration request message from a terminal device, wherein the first registration request message is used to request the terminal device to register with the network through a first Third Generation Partnership Project 3GPP access; the processing unit 910 is used to generate a first key, wherein the first key is a key used for communication between the terminal device and the first access network device; the first access network device is used for the first 3GPP access; the transceiver unit 920 is used to send the first key to the first access network device; receive a second registration request message from the terminal device, wherein the second registration request message is used to request the terminal device to register with the network through a second 3GPP access; the processing unit 910 is used to generate a second key, wherein the second key is a key used for communication between the terminal device and the second access network device, and the second access network device is used for the second 3GPP access; the first key is different from the second key; the transceiver unit 920 is used to send the second key to the second access network device.

[0354] In one possible design, the first registration request message and / or the second registration request message includes indication information, where the indication information is used to indicate that the terminal device is connected to the network via two 3GPP accesses.

[0355] In one possible design, the processing unit 910 is used to generate the first key according to the first access type identifier corresponding to the first 3GPP access when generating the first key; and to generate the second key according to the second access type identifier corresponding to the second 3GPP access when generating the second key, and the first access type identifier and the second access type identifier are different.

[0356] In one possible design, the second registration request message includes the indication information; and the processing unit 910 is used to determine the second access type identifier for the second 3GPP access according to the indication information before generating the second key.

[0357] In one possible design, the first registration request message includes the indication information; the processing unit 910 is used to determine the first access type identifier for the first 3GPP access according to the indication information before generating the first key, and the first access type identifier is one of the dual 3GPP access type identifiers; before generating the second key, determine the second access type identifier for the second 3GPP access, and the second access type identifier is the other of the dual 3GPP access type identifiers.

[0358] In one possible design, the second access type identifier is an unused one of the dual 3GPP access type identifiers.

[0359] In one possible design, the transceiver unit 920 is used to send a first registration acceptance message to the terminal device, the first registration acceptance message including the first access type identifier; and / or send a second registration acceptance message to the terminal device, the first registration acceptance message including the second access type identifier.

[0360] In one possible design, the first bearer parameter includes the first access type identifier, and the second bearer parameter includes the second access type identifier; the processing unit 910 is used to use the NAS security protection key and the first bearer parameter to securely protect the first NAS signaling, and the first NAS signaling corresponds to the first 3GPP access; use the NAS security protection key and the second bearer parameter to securely protect the second NAS signaling, and the second NAS signaling corresponds to the second 3GPP access.

[0361] In one possible design, the processing unit 910 is used to generate the first key according to a third access type identifier and an identifier of the first 3GPP access when generating the first key, and the third access type identifier indicates that the access type is 3GPP access; when generating the second key, generate the second key according to the third access type identifier and an identifier of the second 3GPP access; the identifier of the first 3GPP access is different from the identifier of the second 3GPP access.

[0362] In one possible design, the first registration request message includes the indication information; the processing unit 910 is used to determine the identifier of the first 3GPP access for the first 3GPP access according to the indication information before generating the first key; and determine the identifier of the second 3GPP access for the second 3GPP access before generating the second key.

[0363] In one possible design, the transceiver unit 920 is used to obtain two 3GPP access identifiers from the data management network element according to the indication information when determining the identifier of the first 3GPP access for the first 3GPP access according to the indication information; use one of the two 3GPP access identifiers as the identifier of the first 3GPP access; and use the other of the two 3GPP access identifiers as the identifier of the second 3GPP access when determining the identifier of the second 3GPP access for the second 3GPP access.

[0364] In one possible design, the transceiver unit 920 is used to send a first registration acceptance message to the terminal device, wherein the first registration acceptance message includes an identifier of the first 3GPP access; and send a second registration acceptance message to the terminal device, wherein the second registration acceptance message includes an identifier of the second 3GPP access.

[0365] In one possible design, the first registration request message includes an identifier of the first 3GPP access, and the second registration request message includes an identifier of the second 3GPP access.

[0366] In one possible design, a first bearer parameter corresponds to an identifier of the first 3GPP access, and a second bearer parameter corresponds to an identifier of the second 3GPP access; the processing unit 910 is configured to use the NAS security protection key and the first bearer parameter to perform security protection on a first NAS signaling, the first NAS signaling corresponding to the first 3GPP access; and use the NAS security protection key and the second bearer parameter to perform security protection on a second NAS signaling, the second NAS signaling corresponding to the second 3GPP access.

[0367] In one possible design, the processing unit 910 is used to generate the first key according to a first value of an uplink NAS counter when generating a first key; and to generate the second key according to a second value of the uplink NAS counter when generating a second key; wherein the first 3GPP access and the second 3GPP access share the uplink NAS counter, and the first value is different from the second value.

[0368] When the communication device 900 is used to implement Figure 5 , 6 , 7, and 8. The function of the terminal device in the method embodiments shown in FIG. 8 is:

[0369] The transceiver unit 920 is used to send a first registration request message to the access and mobility management network element, wherein the first registration request message is used to request the terminal device to register with the network through the first 3GPP access; the processing unit 910 is used to generate a first key, wherein the first key is a key used for communication between the terminal device and the first access network device; the first access network device is used for the first 3GPP access; the transceiver unit 920 is used to send a second registration request message to the access and mobility management network element, wherein the second registration request message is used to request the terminal device to register with the network through the second 3GPP access; the processing unit 910 is used to generate a second key, wherein the second key is a key used for communication between the terminal device and the second access network device, and the second access network device is used for the second 3GPP access; the first key is different from the second key.

[0370] In one possible design, the first registration request message and / or the second registration request message includes indication information, where the indication information is used to indicate that the terminal device is connected to the network through two 3GPP accesses;

[0371] In one possible design, the processing unit 910 is used to generate the first key according to the first access type identifier corresponding to the first 3GPP access when generating the first key; and to generate the second key according to the second access type identifier corresponding to the second 3GPP access when generating the second key, and the first access type identifier and the second access type identifier are different.

[0372] In one possible design, the processing unit 910 is used to determine the first access type identifier for the first 3GPP access before generating the first key, and the first access type identifier is one of the dual 3GPP access type identifiers; before generating the second key, determine the second access type identifier for the second 3GPP access, and the second access type identifier is the other of the dual 3GPP access type identifiers.

[0373] In one possible design, the second access type identifier is an unused one of the dual 3GPP access type identifiers.

[0374] In one possible design, the transceiver unit 920 is used to receive a first registration acceptance message from the access and mobility management network element, the first registration acceptance message including the first access type identifier; and / or, to receive a second registration acceptance message from the access and mobility management network element, the first registration acceptance message including the second access type identifier.

[0375] In one possible design, the transceiver unit 920 is used to receive a first AS security mode command from the first access network device, the first AS security mode command including the first access type identifier; and / or, to receive a second AS security mode command from the second access network device, the second AS security mode command including the second access type identifier.

[0376] In one possible design, the first bearer parameter includes the first access type identifier, and the second bearer parameter includes the second access type identifier; the processing unit 910 is used to use the NAS security protection key and the first bearer parameter to securely protect the first NAS signaling, and the first NAS signaling corresponds to the first 3GPP access; use the NAS security protection key and the second bearer parameter to securely protect the second NAS signaling, and the second NAS signaling corresponds to the second 3GPP access.

[0377] In one possible design, the processing unit 910 is used to generate the first key according to a third access type identifier and an identifier of the first 3GPP access when generating the first key, and the third access type identifier indicates that the access type is 3GPP access; when generating the second key, generate the second key according to the third access type identifier and an identifier of the second 3GPP access; the identifier of the first 3GPP access is different from the identifier of the second 3GPP access.

[0378] In one possible design, the processing unit 910 is used to determine the identifier of the first 3GPP access for the first 3GPP access before generating the first key; and to determine the identifier of the second 3GPP access for the second 3GPP access before generating the second key.

[0379] In one possible design, the transceiver unit 920 is used to receive a first registration acceptance message from the access and mobility management network element, wherein the first registration acceptance message includes an identifier of the first 3GPP access; and receive and send a second registration acceptance message from the access and mobility management network element, wherein the second registration acceptance message includes an identifier of the second 3GPP access.

[0380] In one possible design, the transceiver unit 920 is used to receive a first AS security mode command from the first access network device, the first AS security mode command including the identifier of the first 3GPP access; and / or, to receive a second AS security mode command from the second access network device, the second AS security mode command including the identifier of the second 3GPP access.

[0381] In one possible design, the first registration request message includes an identifier of the first 3GPP access, and the second registration request message includes an identifier of the second 3GPP access.

[0382] In one possible design, a first bearer parameter corresponds to an identifier of the first 3GPP access, and a second bearer parameter corresponds to an identifier of the second 3GPP access; the processing unit 910 is used to use a NAS security protection key and the first bearer parameter to perform security protection on a first NAS signaling, the first NAS signaling corresponding to the first 3GPP access; and use the NAS security protection key and the second bearer parameter to perform security protection on a second NAS signaling, the second NAS signaling corresponding to the second 3GPP access.

[0383] In one possible design, the processing unit 910 is used to generate the first key according to a first value of an uplink NAS counter when generating a first key; and to generate the second key according to a second value of the uplink NAS counter when generating a second key; wherein the first 3GPP access and the second 3GPP access share the uplink NAS counter, and the first value is different from the second value.

[0384] For a more detailed description of the processing unit 910 and the transceiver unit 920, please refer to Figure 5 , 6 The relevant descriptions in the method embodiments shown in , 7 and 8 are directly obtained and will not be repeated here.

[0385] like Fig.10 As shown, the communication device 1000 includes a processor 1010 and an interface circuit 1020. The processor 1010 and the interface circuit 1020 are coupled to each other. It is understood that the interface circuit 1020 can be a transceiver or an input-output interface. Optionally, the communication device 1000 may also include a memory 1030 for storing instructions executed by the processor 1010 or storing input data required by the processor 1010 to execute instructions or storing data generated after the processor 1010 executes instructions.

[0386] When the communication device 1000 is used to implement Figure 5 , 6 , 7, and 8, the processor 1010 is used to implement the functions of the above-mentioned processing unit 910, and the interface circuit 1020 is used to implement the functions of the above-mentioned transceiver unit 920.

[0387] It is understandable that the processor in the embodiments of the present application may be a central processing unit 910 (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field programmable gate arrays (FPGA) or other programmable logic devices, transistor logic devices, hardware components or any combination thereof. A general-purpose processor may be a microprocessor or any conventional processor.

[0388] In the present application, another example of a device is provided, the notification device includes at least one processor and at least one memory, the at least one processor is coupled to the at least one memory, the at least one memory is used to store instructions, when the instructions are executed by the at least one processor, the communication device executes the method in the above embodiment. Take the communication device including a processor and a memory as an example, Fig.10 As shown, the communication device 1000 includes a processor 1010 and a memory 1030. The processor 1010 and the memory 1030 are coupled, and the memory 1030 stores instructions. When the instructions stored in the memory 1030 are executed by the processor 1010, the communication device 1000 executes the method executed by the terminal device or the access and mobility management network element in the above embodiment.

[0389] The method steps in the embodiments of the present application can be implemented in hardware or in software instructions that can be executed by a processor. The software instructions can be composed of corresponding software modules, and the software modules can be stored in random access memory, flash memory, read-only memory, programmable read-only memory, erasable programmable read-only memory, electrically erasable programmable read-only memory, registers, hard disks, mobile hard disks, CD-ROMs, or any other form of storage medium known in the art. An exemplary storage medium is coupled to the processor so that the processor can read information from the storage medium and write information to the storage medium. The storage medium can also be a component of the processor. The processor and the storage medium can be located in an ASIC. In addition, the ASIC can be located in a terminal device or an access and mobility management network element. The processor and the storage medium can also exist as discrete components in a terminal device or an access and mobility management network element.

[0390] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented by software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer programs or instructions. When the computer program or instruction is loaded and executed on a computer, the process or function described in the embodiment of the present application is executed in whole or in part. The computer may be a general-purpose computer, a special-purpose computer, a computer network, a network device, a user device or other programmable device. The computer program or instruction may be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer program or instruction may be transmitted from one website site, computer, server or data center to another website site, computer, server or data center by wired or wireless means. The computer-readable storage medium may be any available medium that a computer can access or a data storage device such as a server, data center, etc. that integrates one or more available media. The available medium may be a magnetic medium, for example, a floppy disk, a hard disk, a tape; it may also be an optical medium, for example, a digital video disc; it may also be a semiconductor medium, for example, a solid-state hard disk. The computer-readable storage medium may be a volatile or nonvolatile storage medium, or may include both volatile and nonvolatile types of storage media.

[0391] In the various embodiments of the present application, unless otherwise specified or provided for in any logical conflict, the terms and / or descriptions between the different embodiments are consistent and may be referenced to each other, and the technical features in the different embodiments may be combined to form new embodiments according to their inherent logical relationships.

[0392] In the present application, "at least one" means one or more, and "more than one" means two or more. "And / or" describes the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B may mean: A exists alone, A and B exist at the same time, and B exists alone, where A and B may be singular or plural. In the text description of the present application, the character " / " generally indicates that the previous and next associated objects are in an "or" relationship; in the formula of the present application, the character " / " indicates that the previous and next associated objects are in a "division" relationship. "Including at least one of A, B and C" may mean: including A; including B; including C; including A and B; including A and C; including B and C; including A, B and C.

[0393] It is understood that the various numbers involved in the embodiments of the present application are only for the convenience of description and are not used to limit the scope of the embodiments of the present application. The size of the sequence number of the above-mentioned processes does not mean the order of execution, and the execution order of each process should be determined by its function and internal logic.< / guami>

Claims

1. A key derivation method, characterized in that: The method includes: Receiving a first registration request message from a terminal device, where the first registration request message is used to request the terminal device to register with a network through a first Third Generation Partnership Project 3GPP access; Generate a first key, where the first key is a key used for communication between the terminal device and the first access network device; the first access network device is used for the first 3GPP access; Sending the first key to the first access network device; receiving a second registration request message from the terminal device, where the second registration request message is used to request the terminal device to register with a network through a second 3GPP access; generating a second key, where the second key is a key used for communication between the terminal device and the second access network device, and the second access network device is used for the second 3GPP access; the first key is different from the second key; Send the second key to the second access network device.

2. The method according to claim 1, characterized in that The first registration request message and / or the second registration request message includes indication information, and the indication information is used to indicate that the terminal device is connected to the network via two 3GPP accesses.

3. The method according to claim 1 or 2, characterized in that Generate a first key, including: generating the first key according to a first access type identifier corresponding to the first 3GPP access; Generate a second key, including: The second key is generated according to a second access type identifier corresponding to the second 3GPP access, where the first access type identifier is different from the second access type identifier.

4. The method according to claim 3, characterized in that The second registration request message includes the indication information; Before generating the second key, the method further includes: Determine the second access type identifier for the second 3GPP access according to the indication information.

5. The method according to claim 3, characterized in that The first registration request message includes the indication information; Before generating the first key, it also includes: Determine the first access type identifier for the first 3GPP access according to the indication information, where the first access type identifier is one of dual 3GPP access type identifiers; Before generating the second key, the method further includes: The second access type identifier is determined for the second 3GPP access, where the second access type identifier is the other of the dual 3GPP access type identifiers.

6. The method according to claim 5, characterized in that The second access type identifier is an unused one of the dual 3GPP access type identifiers.

7. The method according to any one of claims 3 to 6, characterized in that: Also includes: Sending a first registration acceptance message to the terminal device, where the first registration acceptance message includes the first access type identifier; And / or, sending a second registration acceptance message to the terminal device, wherein the second registration acceptance message includes the second access type identifier.

8. The method according to any one of claims 3 to 7, characterized in that: The first bearer parameter includes the first access type identifier, and the second bearer parameter includes the second access type identifier; The method further comprises: Performing security protection on a first NAS signaling using a non-access layer NAS security protection key and the first bearer parameter, the first NAS signaling corresponding to the first 3GPP access; The second NAS signaling is securely protected using the NAS security protection key and the second bearer parameter, where the second NAS signaling corresponds to the second 3GPP access.

9. The method according to claim 1 or 2, characterized in that: Generate a first key, including: generating the first key according to a third access type identifier and the first 3GPP access identifier, wherein the third access type identifier indicates that the access type is 3GPP access; Generate a second key, including: The second key is generated according to the third access type identifier and the identifier of the second 3GPP access; the identifier of the first 3GPP access is different from the identifier of the second 3GPP access.

10. The method according to claim 9, characterized in that The first registration request message includes the indication information; Before generating the first key, it also includes: determining an identifier of the first 3GPP access for the first 3GPP access according to the indication information; Before generating the second key, the method further includes: An identifier of the second 3GPP access is determined for the second 3GPP access.

11. The method according to claim 10, characterized in that Determining an identifier of the first 3GPP access for the first 3GPP access according to the indication information includes: Acquire two 3GPP access identifiers from the data management network element according to the indication information; Using one of the two 3GPP access identifiers as the identifier of the first 3GPP access; Determining an identifier of the second 3GPP access for the second 3GPP access includes: The other of the two 3GPP access identifiers is used as the identifier of the second 3GPP access.

12. The method according to any one of claims 9 to 11, characterized in that: Also includes: Sending a first registration acceptance message to the terminal device, where the first registration acceptance message includes an identifier of the first 3GPP access; A second registration acceptance message is sent to the terminal device, where the second registration acceptance message includes an identifier of the second 3GPP access.

13. The method according to claim 9, characterized in that The first registration request message includes the identifier of the first 3GPP access, and the second registration request message includes the identifier of the second 3GPP access.

14. The method according to any one of claims 9 to 13, characterized in that: The first bearer parameter corresponds to the identifier of the first 3GPP access, and the second bearer parameter corresponds to the identifier of the second 3GPP access; The method further comprises: Performing security protection on a first NAS signaling using a NAS security protection key and the first bearer parameter, the first NAS signaling corresponding to the first 3GPP access; The second NAS signaling is securely protected using the NAS security protection key and the second bearer parameter, where the second NAS signaling corresponds to the second 3GPP access.

15. The method according to claim 1 or 2, characterized in that: Generate a first key, including: Generate the first key according to the first value of the uplink NAS counter; Generate a second key, including: The second key is generated according to a second value of the uplink NAS counter; wherein the first 3GPP access and the second 3GPP access share the uplink NAS counter, and the first value is different from the second value.

16. A key derivation method, characterized in that: The method includes: Sending a first registration request message to an access and mobility management network element, where the first registration request message is used to request a terminal device to register with a network through a first 3GPP access; Generate a first key, where the first key is a key used for communication between the terminal device and the first access network device; the first access network device is used for the first 3GPP access; Sending a second registration request message to the access and mobility management network element, where the second registration request message is used to request the terminal device to register with the network through a second 3GPP access; Generate a second key, where the second key is a key used for communication between the terminal device and the second access network device, and the second access network device is used for the second 3GPP access; the first key is different from the second key.

17. The method according to claim 16, characterized in that The first registration request message and / or the second registration request message includes indication information, and the indication information is used to indicate that the terminal device is connected to the network via two 3GPP accesses.

18. The method according to claim 16 or 17, characterized in that Generate a first key, including: generating the first key according to a first access type identifier corresponding to the first 3GPP access; Generate a second key, including: The second key is generated according to a second access type identifier corresponding to the second 3GPP access, where the first access type identifier is different from the second access type identifier.

19. The method according to claim 18, characterized in that Before generating the first key, it also includes: Determine the first access type identifier for the first 3GPP access, where the first access type identifier is one of dual 3GPP access type identifiers; Before generating the second key, the method further includes: The second access type identifier is determined for the second 3GPP access, where the second access type identifier is the other of the dual 3GPP access type identifiers.

20. The method of claim 19, wherein: The second access type identifier is an unused one of the dual 3GPP access type identifiers.

21. The method according to any one of claims 18 to 20, characterized in that Also includes: receiving a first registration accept message from the access and mobility management network element, wherein the first registration accept message includes the first access type identifier; and / or, receiving a second registration acceptance message from the access and mobility management network element, wherein the first registration acceptance message includes the second access type identifier; Alternatively, a first access layer AS security mode command is received from the first access network device, the first AS security mode command including the first access type identifier; and / or a second AS security mode command is received from the second access network device, the second AS security mode command including the second access type identifier.

22. The method according to any one of claims 18 to 21, characterized in that: The first bearer parameter includes the first access type identifier, and the second bearer parameter includes the second access type identifier; The method further comprises: Performing security protection on a first NAS signaling using the NAS security protection key and the first bearer parameter, where the first NAS signaling corresponds to the first 3GPP access; The second NAS signaling is securely protected using the NAS security protection key and the second bearer parameter, where the second NAS signaling corresponds to the second 3GPP access.

23. The method according to claim 16 or 17, characterized in that Generate a first key, including: generating the first key according to a third access type identifier and the first 3GPP access identifier, wherein the third access type identifier indicates that the access type is 3GPP access; Generate a second key, including: The second key is generated according to the third access type identifier and the identifier of the second 3GPP access; the identifier of the first 3GPP access is different from the identifier of the second 3GPP access.

24. The method of claim 23, wherein: Before generating the first key, it also includes: determining an identifier of the first 3GPP access for the first 3GPP access; Before generating the second key, the method further includes: An identifier of the second 3GPP access is determined for the second 3GPP access.

25. The method according to claim 23 or 24, characterized in that Also includes: receiving a first registration accept message from the access and mobility management network element, wherein the first registration accept message includes an identifier of the first 3GPP access; and / or, receiving and sending a second registration acceptance message from the access and mobility management network element, where the second registration acceptance message includes an identifier of the second 3GPP access; Alternatively, receiving a first AS security mode command from the first access network device, where the first AS security mode command includes an identifier of the first 3GPP access; And / or, receiving a second AS security mode command from the second access network device, where the second AS security mode command includes an identifier of the second 3GPP access.

26. The method according to claim 23 or 24, characterized in that The first registration request message includes the identifier of the first 3GPP access, and the second registration request message includes the identifier of the second 3GPP access.

27. The method according to any one of claims 23 to 26, characterized in that The first bearer parameter corresponds to the identifier of the first 3GPP access, and the second bearer parameter corresponds to the identifier of the second 3GPP access; The method further comprises: Performing security protection on a first NAS signaling using a NAS security protection key and the first bearer parameter, the first NAS signaling corresponding to the first 3GPP access; The second NAS signaling is securely protected using the NAS security protection key and the second bearer parameter, where the second NAS signaling corresponds to the second 3GPP access.

28. The method according to claim 16 or 17, characterized in that Generate a first key, including: Generate the first key according to the first value of the uplink NAS counter; Generate a second key, including: The second key is generated according to a second value of the uplink NAS counter; wherein the first 3GPP access and the second 3GPP access share the uplink NAS counter, and the first value is different from the second value.

29. A communication device, characterized in that: The method comprises a unit or a module for executing the method according to any one of claims 1 to 15, or comprises a unit or a module for executing the method according to any one of claims 16 to 28.

30. A communication device, characterized in that: include: One or more processors and one or more memories; wherein the one or more memories store one or more programs, and when the programs are executed by the one or more processors, the device executes the method as described in any one of claims 1-15, or executes the method as described in any one of claims 16-28.

31. A chip system, characterized in that: The chip system includes at least one chip and a memory, and the at least one chip is used to read and execute a program stored in the memory to implement the method as described in any one of claims 1 to 15, or to implement the method as described in any one of claims 16 to 28.

32. A readable storage medium, characterized in that: The readable storage medium includes a program, and when the program is executed on a device, the device executes the method according to any one of claims 1 to 15, or executes the method according to any one of claims 16 to 28.

Images