Communication method, device and system, communication equipment, readable storage medium and program product

Abstract

The invention discloses a communication method, device and system, communication equipment, a readable storage medium and a program product, and the method comprises the steps: receiving a first signaling message sent by a first core network element through a first shunting module, and when the first signaling message is recognized as a sensitive message, sending the sensitive message to a first core network element; the first signaling message is sent to the first quantum communication module; the first signaling message is coded and modulated through the first quantum communication module, and the coded and modulated first signaling message is sent to a second quantum communication module at the network element side of a second core network through a quantum channel; therefore, the data security on the physical communication line between the distributed network elements is realized, and the overall security and transmission efficiency of the cross-domain distributed deployment network architecture are improved.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of wireless, core network and security technology, in particular to a communication method, device and system, communication equipment, computer readable storage medium and computer program product. BACKGROUND

[0002] The distributed deployment of 5G network core network capability is a popular direction in the current 5G special network construction mode, but the transmission data type of the specially built transmission network line is single, and the transmission line layout area is difficult to be monitored in real time, and the data security caused by the above problems needs to be solved in the current 5G special network construction. In the prior art, in order to further improve the security performance of the whole network, the information is introduced by quantum communication technology, which is not available, tamper-proof, and real-time sensing of eavesdropping behavior to improve the security protection ability of the whole network, but the quantum communication technology has the problems of low data transmission efficiency caused by bandwidth limitation, transmission distance and one-way transmission. Therefore, how to fully integrate 5G network and quantum communication to build a safe and efficient 5G network still needs to be studied. SUMMARY

[0003] To solve the above technical problems, the embodiments of the present application provide a communication method, device and system, communication equipment, computer readable storage medium and computer program product.

[0004] In a first aspect, the communication method provided by the embodiments of the present application is applied to a first quantum communication module on the side of a first core network element; comprising:

[0005] Receiving a first signaling message sent by a first shunting module, wherein the first signaling message is a sensitive message received and identified by the first shunting module from the first core network element;

[0006] Sending the first signaling message to a second quantum communication module on the side of a second core network element through a quantum channel.

[0007] In a second aspect, the communication method provided by the embodiments of the present application is applied to a second quantum communication module on the side of a second core network element; comprising:

[0008] Receiving a first signaling message sent by a first quantum communication module on the side of a first core network element through a quantum channel, and sending the first signaling message to a second shunting module; wherein the second shunting module is used to send the first signaling message to the second core network element.

[0009] In a third aspect, the communication device provided by the embodiments of the present application is applied to the side of a first core network element, and the communication device comprises a first shunting module and a first quantum communication module;

[0010] The first shunt module is configured to receive a first signaling message sent by the first core network element, and send the first signaling message to the first quantum communication module if it is identified that the first signaling message is a sensitive message.

[0011] The first quantum communication module is configured to encode and modulate the first signaling message, and send the encoded and modulated first signaling message to a second quantum communication module on the second core network element side via a quantum channel.

[0012] In a fourth aspect, a communication device provided by the embodiments of the present application is applied to the second core network element side, and includes a second shunt module and a second quantum communication module.

[0013] The second quantum communication module is configured to receive the encoded and modulated first signaling message sent by the first quantum communication module on the first core network element side via the quantum channel, demodulate the encoded and modulated first signaling message, and send the demodulated first signaling message to the second shunt module.

[0014] The second shunt module is configured to send the first signaling message to the second core network element.

[0015] In a fifth aspect, a communication system provided by the embodiments of the present application includes a first core network element side and a second core network element side. The first core network element side includes a first core network element, a first shunt module, and a first quantum communication module. The second core network element side includes a second core network element, a second shunt module, and a second quantum communication module.

[0016] The first shunt module is configured to receive a first signaling message sent by the first core network element, and send the first signaling message to the first quantum communication module if it is identified that the first signaling message is a sensitive message.

[0017] The first quantum communication module is configured to encode and modulate the first signaling message, and send the encoded and modulated first signaling message to a second quantum communication module on the second core network element side via a quantum channel.

[0018] The second quantum communication module is configured to receive the encoded and modulated first signaling message sent by the first quantum communication module on the first core network element side via the quantum channel, demodulate the encoded and modulated first signaling message, and send the demodulated first signaling message to the second shunt module.

[0019] The second shunt module is configured to send the first signaling message to the second core network element.

[0020] In a sixth aspect, a communication device is provided, which comprises a processor and a memory. The memory is configured to store a computer program. The processor is configured to invoke and run the computer program stored in the memory, and execute any one of the communication methods.

[0021] In a seventh aspect, a computer readable storage medium is provided, which is configured to store a computer program. The computer program causes a computer to execute any one of the methods.

[0022] In an eighth aspect, a computer program product is provided, which comprises computer program instructions. The computer program instructions cause a computer to execute any one of the methods.

[0023] In the technical solution of the embodiments of the present application, the first quantum communication module receives the first signaling message sent by the first shunting module. The first signaling message is a sensitive message received and identified by the first shunting module from the first core network element. The first signaling message is sent to the second quantum communication module on the second core network element side through a quantum channel. In this way, by adding a pair of quantum communication modules and shunting modules in the transmission line of the distributed core network, the sensitive messages are transmitted through the quantum channel, and the non-sensitive messages are transmitted through the classical channel. The quantum communication technology is integrated into the distributed core network architecture. The physical characteristics of the quantum communication technology, such as unobtainability and unforgeability, are fully utilized to guarantee the security protection capability of the key signaling transmission in the core network, so as to realize the data security on the physical communication line between the distributed network elements and improve the overall security and transmission efficiency of the cross-domain distributed network architecture. BRIEF DESCRIPTION OF DRAWINGS

[0024] Figure 1 is a schematic diagram of a service-oriented architecture of an embodiment of the present application;

[0025] Figure 2 is a schematic diagram of a quantum direct communication system of an embodiment of the present application;

[0026] Figure 3 is an architecture diagram of a communication system of an embodiment of the present application;

[0027] Figure 4 is a flowchart of a communication method of an embodiment of the present application Figure 1 ;

[0028] Figure 5 is a flowchart of a communication method of an embodiment of the present application Figure 2 ;

[0029] Figure 6 is a flowchart of a communication method of an embodiment of the present application Figure 3 ;

[0030] Figure 7 is a flowchart of a communication method according to an embodiment of the present application Figure 4 ;

[0031] Figure 8 is a flowchart of a communication method according to an embodiment of the present application Figure 5 ;

[0032] Figure 9 is a flowchart of a communication method according to an embodiment of the present application Figure 6 ;

[0033] Figure 10 is a flowchart of a communication method according to an embodiment of the present application Figure 7 ;

[0034] Figure 11 is a flowchart of a communication method according to an embodiment of the present application Figure 8 ;

[0035] Figure 12 is a flowchart of a communication method according to an embodiment of the present application Figure 9 ;

[0036] Figure 13 is a product of a communication method according to an embodiment of the present application Figure 1 ;

[0037] Figure 14 is a product of a communication method according to an embodiment of the present application Figure 2 ;

[0038] Figure 15 is a structural composition diagram of a communication device according to an embodiment of the present application Figure 1 ;

[0039] Figure 16 is a structural composition diagram of a communication device according to an embodiment of the present application Figure 2 ;

[0040] Figure 17 is a structural composition diagram of a communication system according to an embodiment of the present application

[0041] Figure 18 is a structural composition diagram of a communication device according to an embodiment of the present application DETAILED DESCRIPTION

[0042] The technical solutions in the embodiments of the present application will be described below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only some of the embodiments of the present application, but not all of the embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative work fall within the scope of protection of the present application.

[0043] The core network of the 5G network communication technology is a network system based on a service-based architecture (SBA), which is different from the traditional cellular network core network architecture, and does not need to rely on customized special network equipment and can be deployed on standardized Internet technology (IT) hardware equipment. Therefore, the distributed deployment of the 5G network core network capability is a popular direction in the current 5G special network construction mode. Figure 1 is a schematic diagram of a service-based architecture of an embodiment of the present application. As shown in Figure 1As shown, the service-oriented architecture includes a user equipment, an access network device, and an operator network (such as a 5G network system), and the operator network includes a core network and a data network. The user equipment accesses the operator network through an access network node. Specifically, the user equipment (UE) is a logical entity, and the UE can be any one of a terminal equipment, a communication device, and an Internet of Things (IoT) device. The terminal equipment can be a smart phone, a smart watch, a smart tablet, and the like. The communication device can be a server, a gateway (GW), a controller, and the like. The IoT device can be a sensor, an electricity meter, a water meter, and the like. The radio access network (RAN) is responsible for the access of the UE, and the RAN can be a base station, a wireless fidelity (Wi-Fi) access point, a Bluetooth access point, and the like. The user plane function (UPF) can be a gateway, a server, a controller, a user plane function network element, and the like. The UPF can be arranged inside or outside the operator network. The UPF is a user plane network element provided by an operator, and is a gateway for communication between the operator network and a data network. The data network (DN) is also referred to as a packet data network (PDN). The DN can be an operator external network or an operator controlled network, and is used to provide service to a user. The core network (CN) provides an interface to the DN, and provides communication connection, authentication, management, policy control, and data service bearing for the UE. The CN includes an access and mobility management network element, a session management network element, an authentication server network element, a policy control node, an application function network element, and a user plane node. The access and mobility management function (AMF) is a control plane network element provided by an operator, and is responsible for access control and mobility management of the UE accessing the operator network. The session management function (SMF) is a control plane network element provided by an operator, and is responsible for managing the session of a data packet of the UE. The authentication server function (AUSF) is a control plane network element provided by an operator, and can be used for authentication of a network subscription user of the operator network.Unified Data Manager (UDM), UDM is a control plane network element provided by an operator, responsible for storing the Subscriber Permanent Identifier (SUPI) of the operator's network, registration information, credentials, subscription data, etc. Network Exposure Function (NEF), NEF is a control plane network element provided by an operator. NEF exposes the external interface of the operator's network to third parties in a secure manner. Application Function (AF), AF is used to store business security requirements and provide information for policy determination. Network Function Repository Function (NRF), NRF is responsible for the automatic management, selection and scalability of NFs, including NFS registration, discovery, state monitoring, service authorization, etc., to realize the on-demand configuration of network functions and services and the interconnection between NFs. When the NF is powered on, it actively reports the information of its NFS to the NRF, and can find the appropriate opposite NFS through the NRF. In addition, as shown in the core network service architecture diagram. Figure 1 In the core network service architecture diagram shown, the NFs of the control plane are located on a bus, and all control plane NFs use the same service interface protocol, such as Nnssf, Nnef, Nnrf, etc. The interfaces between the control plane and the user plane, and between the 5G core network and the RAN, are non-service interfaces, such as N3, N4, N6, N9 interfaces in Figure 1 .

[0044] In order to facilitate understanding of the technical solutions of the embodiments of the present application, the related technologies of the embodiments of the present application are described as follows, and the following related technologies can be combined with the technical solutions of the embodiments of the present application in any way, which all belong to the protection scope of the embodiments of the present application.

[0045] As shown in Figure 1In the service-oriented architecture shown, there is a transmission line security protection problem for sensitive signaling transmission between core network elements. In order to further improve the overall security performance of the network, by introducing quantum communication technology, relying on the technical characteristics of quantum communication technology that information is not accessible, tamper-proof, and real-time awareness of eavesdropping behavior, for the key network element signaling information in the 5G network user registration process, quantum communication is used for transmission to improve the overall security protection capability of the network. Quantum communication refers to a technology that uses quantum states as carriers for information transmission, and its security is guaranteed by quantum physics principles, with high security. In today's rapidly developing quantum computing, the security of classical cryptographic systems based on mathematical complex problems is facing great challenges, and quantum communication research has received widespread attention and rapid development, becoming a relatively mature direction in the field of quantum information, and will play an important role in the next generation of secure communication. Quantum communication technology mainly includes four branches: quantum key distribution (QKD), quantum secure direct communication (QSDC), quantum secret sharing, and quantum teleportation. Quantum direct communication technology is a communication technology that transmits light quanta in a fiber channel by preparing light quanta. Among the various quantum communication technologies today, quantum direct communication technology is based on the properties of light quantum indivisibility and quantum non-cloning principle, which ensures that unauthorized parties cannot copy and steal information transmitted in the quantum channel, thereby ensuring the security of information transmission. Among various quantum communication implementation methods, quantum direct communication technology is most suitable for real-time communication technologies such as 5G networks. Figure 2 is a schematic diagram of a quantum direct communication system according to an embodiment of the present application. As shown in Figure 2As shown, the existing quantum direct communication system consists of a transmitting terminal and a receiving terminal. The implementation principle of the system is to prepare the laser beam emitted by the laser into a single photon through attenuation, to realize the transmission of information between the terminals through the transmission of single photons in the optical fiber. The information is based on the quantum direct communication protocol and is transmitted from the transmitting terminal to the receiving terminal. The existing quantum direct communication system belongs to simplex communication, that is, the identity of the transmitting terminal and the receiving terminal is fixed, the transmitting terminal can only send information and cannot receive information; the receiving terminal can only receive information and cannot send information, and the data signal can only be transmitted from one end to the other end, so there is a characteristic that the information flow is unidirectional transmission. In addition, although one photon at a time completely seals the photon number separation attack, there is a characteristic that the transmission rate is low. Moreover, the transmission rate of quantum direct communication technology is affected by the transmission distance, and there is a characteristic that the greater the transmission distance, the smaller the transmission rate. In network communication, the above characteristics will cause low network efficiency, which is difficult to meet the related needs of commercial networks. Therefore, it is necessary to fully integrate the technical advantages of 5G network and quantum communication to build a safe and efficient 5G distributed network architecture. For this purpose, the technical solutions of the present application are proposed.

[0046] In order to facilitate understanding of the technical solutions of the embodiments of the present application, the technical solutions of the present application will be described in detail below through specific embodiments. The above related technologies can be combined with the technical solutions of the embodiments of the present application as optional solutions, which all belong to the protection scope of the embodiments of the present application. The embodiments of the present application include at least part of the following contents.

[0047] Figure 3 is a communication system architecture diagram provided by the embodiments of the present application, which represents a system architecture diagram of integrating 5G network and quantum direct communication. As shown in Figure 3 , the communication architecture includes UE, base station, first core network element side and second core network element side, a pair of quantum communication modules and shunt modules are deployed at both ends of the first core network element side and the second core network element side, and a duplex quantum transmission channel is deployed between the first core network element side and the second core network element side. The first core network element side includes a first core network element, a first shunt module and a first quantum communication module; the second core network element side includes a second core network element, a second shunt module and a second quantum communication module. Among them, the shunt module includes a data shunt device, and the quantum communication module includes a duplex quantum secure direct communication transceiver terminal device. Figure 4 is a flowchart of a communication method provided by the embodiments of the present application Figure 1 , as shown in Figure 4 , the communication method is applied to the first quantum communication module of the first core network element side; the communication method includes the following steps:

[0048] Step 401, receiving a first signaling message sent by a first shunt module, the first signaling message being a sensitive message identified by the first shunt module from a first core network element.

[0049] In some embodiments, the UE sends a first signaling message to the base station, which can be a terminal user's network access request, and the base station sends the first signaling message to the first core network element. The first core network element sends the first signaling message to the first shunt module. The first quantum communication module receives the first signaling message sent by the first shunt module.

[0050] In some embodiments, the first shunt module is configured to receive a first signaling message sent by the first core network element and identify the first signaling message, and to shunt the first signaling message into sensitive messages and non-sensitive messages. The sensitive messages can be sensitive user information such as encrypted user terminal identifier (SUCI) and authentication vector in the user network access authentication process. The non-sensitive messages can be any information other than the sensitive information.

[0051] In some embodiments, when the first shunt module identifies the first signaling message as a sensitive message, the first shunt module sends the first signaling message to the first quantum communication module. The first quantum communication module receives the first signaling message sent by the first shunt module.

[0052] In some embodiments, when the first shunt module identifies the first signaling message as a non-sensitive message, the first shunt module transmits the first signaling message to the second core network element side through a classical channel.

[0053] Step 402, sending the first signaling message to a second quantum communication module on the second core network element side through a quantum channel.

[0054] Here, the first shunt module identifies the first signaling message as a sensitive message and sends the first signaling message to the first quantum communication module. After receiving the first signaling message sent by the first shunt module, the first quantum communication module encapsulates, encodes and quantum light modulates the first signaling message based on a quantum channel transmission protocol, and sends the encoded and modulated first signaling message to the second quantum communication module on the second core network element side through a quantum direct communication channel.

[0055] In some embodiments, referring to Figure 5 , Figure 5 is a communication method flow provided by an embodiment of the present application Figure 2 , which represents a signaling message flow integrating a 5G network and quantum direct communication. As Figure 5As shown, the communication process involves a UE, a base station, a first core network element side and a second core network element side, a pair of shunt modules and quantum communication modules are deployed at both ends of the first core network element side and the second core network element side, and a duplex quantum transmission channel is deployed between the first core network element side and the second core network element side. Specifically, the UE sends a first signaling message to the base station, and the base station sends the first signaling message to the first core network element. The first core network element receives the first signaling message sent by the base station, the first shunt module identifies the first signaling message, and in the case that the first signaling message is identified as a non-sensitive message, the first signaling message is sent to the second shunt module in the second core network element side through a classical channel. The first shunt module identifies the first signaling message, and in the case that the first signaling message is identified as a sensitive message, the first signaling message is sent to the first quantum communication module in the first core network element side. The first quantum communication module encodes and modulates the first signaling message, and sends the encoded and modulated first signaling message to the second quantum communication module of the second core network element side through a quantum channel. The second quantum communication module receives the encoded and modulated first signaling message sent by the first quantum communication module of the first core network element side through the quantum channel, demodulates the encoded and modulated first signaling message, parses, decodes and quantum light demodulates the first signaling message according to the quantum channel transmission protocol, and sends the demodulated first signaling message to the second shunt module. The second shunt module sends the first signaling message to the second core network element.

[0056] As can be seen from the above, the communication method provided by the embodiment of the application receives the first signaling message sent by the first shunt module through the first quantum communication module, the first signaling message being a sensitive message identified by the first shunt module from the first core network element; and the first signaling message is sent to the second quantum communication module of the second core network element side through a quantum channel. In this way, by adding a pair of quantum communication modules and shunt modules in the transmission line of the distributedly deployed core network, sensitive messages are transmitted through a quantum channel, and non-sensitive messages are transmitted through a classical channel, thereby realizing the fusion of quantum communication technology in the distributedly deployed core network architecture, fully utilizing the unobtainable and unforgeable physical characteristics of quantum communication technology, guaranteeing the security protection capability of key signaling transmission in the core network, and thus realizing the data security on the physical communication line between the distributed network elements, and improving the overall security and transmission efficiency of the cross-domain distributed network architecture.

[0057] Figure 6 is a flowchart of the communication method provided by the embodiment of the application Figure 3 As shown in the figure, Figure 6 The communication method further includes the following steps:

[0058] Step 601, receiving the second signaling message encoded and modulated by the second quantum communication module and sent through the quantum channel, demodulating the second signaling message, and sending the demodulated second signaling message to the first shunting module; wherein the first shunting module is configured to send the second signaling message to the first core network element.

[0059] In some embodiments, after the second core network element receives the first signaling message, the second core network element sends the second signaling message to the second shunting module based on the first signaling message. The second shunting module receives the second signaling message sent by the second core network element, identifies that the second signaling message is a non-sensitive message, and sends the second signaling message to the first shunting module through the classical channel; identifies that the second signaling message is a sensitive message, and sends the second signaling message to the second quantum communication module. The second quantum communication module encodes and modulates the second signaling message, encapsulates, encodes, and quantum light modulates the second signaling message according to the quantum channel transmission protocol, and sends the encoded and modulated second signaling message to the first quantum communication module on the first core network element side through the quantum channel. The first quantum communication module receives the second signaling message encoded and modulated by the second quantum communication module and sent through the quantum channel, demodulates the second signaling message, and analyzes, decodes, and quantum light demodulates the second signaling message according to the quantum channel transmission protocol, and sends the demodulated second signaling message to the first shunting module. The first shunting module sends the demodulated second signaling message to the first core network element. The first core network element receives the second signaling message and sends the second signaling message to the base station, and the base station sends the second signaling message to the UE.

[0060] In some embodiments, the second signaling message can be, but is not limited to, a response message corresponding to the first signaling message, for example: the first signaling message is a terminal network access authentication request message, and the second signaling message is an authentication response message.

[0061] From the above, the communication method provided by the embodiment of the application receives the second signaling message after the encoding and modulation sent by the second quantum communication module through the quantum channel, demodulates the second signaling message after the encoding and modulation, and sends the second signaling message obtained by the demodulation to the first shunt module. The first shunt module sends the second signaling message to the first core network element. In this way, by adding a pair of quantum communication modules and shunt modules in the transmission line of the distributed core network, sensitive messages are transmitted through the quantum channel, and non-sensitive messages are transmitted through the classical channel. The quantum communication technology is integrated in the distributed core network architecture, the physical characteristics of the quantum communication technology are fully utilized, the security protection capability of the key signaling transmission in the core network is ensured, the data security on the physical communication line between the distributed network elements is realized, and the overall security and transmission efficiency of the cross-domain distributed network architecture are improved.

[0062] Figure 7 is a flowchart of the communication method provided by the embodiment of the application Figure 4 As shown in Figure 7 , the communication method further includes the following steps:

[0063] Step 701, after the first signaling message after the encoding and modulation is sent to the second quantum communication module on the second core network element side through the quantum channel, a first timer is started.

[0064] In some embodiments, after the first core network element receives the first signaling message, the first shunt module identifies the first signaling message. In the case that the first signaling message is a sensitive message, the first signaling message is sent to the first quantum communication module. After the first signaling message is encoded and modulated by the first quantum communication module, the first signaling message is sent to the second quantum communication module on the second core network element side through the quantum channel, and a first timer is started. The first timer is used for timeout waiting of the first core network element in the quantum channel transmission process. That is, the first core network element determines the transmission delay in the quantum communication transmission process based on the first timer. When the transmission delay exceeds a predetermined threshold, the timeout waiting, timeout processing and other processes are triggered.

[0065] Step 702, if the second signaling message sent by the second quantum communication module is received before the first timer times out, the first timer is stopped.

[0066] Here, the first core network element receives the second signaling message based on the quantum channel transmission through the first quantum communication module before the first timer times out, and then stops the first timer.

[0067] In step 703, if the second signaling message sent by the second quantum communication module is not received by the first quantum communication module before the expiration of the first timer, it is determined that the procedure fails, wherein the procedure is related to the first signaling message and the second signaling message.

[0068] Here, when the first core network element does not receive the second signaling message sent by the second quantum communication module through the first quantum communication module before the expiration of the first timer, it is determined that the procedure fails, and the first core network element sends a procedure failure message to the base station according to the timeout processing, and the base station sends the procedure failure message to the UE.

[0069] In some embodiments, the procedure can be an authentication procedure, and accordingly, the first signaling message can be referred to as an authentication request message, the second signaling message can be referred to as an authentication request response message, and the first timer can be referred to as an authentication timer. In some embodiments, the scenario in which the first core network element initiates the authentication procedure includes but is not limited to that the UE initiates a registration procedure using SUCI, the first core network element does not have a valid context of the UE, the registration request message is not integrity protected, the UE registers with a globally unique temporary identity (5G Globally Unique Temporary Identifier, 5G-GUTI), and the first core network element changes, but the old first core network element fails to perform integrity check on the registration request message.

[0070] In some embodiments, the procedure can be a registration procedure, and accordingly, the first signaling message can be referred to as a registration request message, the second signaling message can be referred to as a registration request response message, and the first timer can be referred to as a registration timer. Specifically, the registration timer is configured. When the first core network element receives the second signaling message sent by the second quantum communication module through the first quantum communication module before the expiration of the registration timer, the registration timer is stopped, and subsequent procedure processing is performed. When the first core network element does not receive the second signaling message sent by the second quantum communication module through the first quantum communication module before the expiration of the registration timer, it is determined that the registration procedure fails. The first core network element sends a registration procedure failure message to the base station, and the base station sends the registration procedure failure message to the UE.

[0071] In some embodiments, when the procedure is a registration procedure, the first core network element supports a registration timer with a long time delay. Specifically, when the procedure is a registration procedure, the first core network element acquires user subscription data from the second core network element. Under the normal networking architecture, the interface between the first core network element and the second core network element and the time delay of the corresponding procedure message response are relatively low, so by default, the setting of the registration timer inside the first core network element is usually less than 1 second. In the case of 5G quantum secure private network networking of the quantum communication system, the first core network element and the second core network element are interconnected by a heterogeneous network, resulting in a longer time delay of the messages between the first core network element and the second core network element. Therefore, the first core network element needs to support a long time delay registration timer.

[0072] In some embodiments, if the second signaling message sent by the second quantum communication module is received through the first quantum communication module after the expiration of the first timer, the second signaling message is discarded.

[0073] Here, with reference to Figure 8 , Figure 8 is a flowchart of the communication method provided by the embodiments of the present application Figure 5 .

[0074] As Figure 8 shown is a schematic diagram of triggering a timeout procedure, specifically comprising the following steps:

[0075] Step 801, triggering a procedure.

[0076] Here, the first core network element triggers a procedure, which can be an authentication procedure or a registration procedure.

[0077] Step 802, sending a first signaling message.

[0078] Here, after receiving the first signaling message, the first shunt module of the first core network element sends the encoded and modulated first signaling message to the second quantum communication module on the second core network element side through the quantum channel.

[0079] Step 803, starting a first timer.

[0080] Here, the first core network element starts the first timer after sending the encoded and modulated first signaling message to the second quantum communication module on the second core network element side through the quantum channel.

[0081] Step 804, receiving a second signaling message.

[0082] Here, when the first core network element receives the second signaling message sent by the second quantum communication module through the first quantum communication module before the first timer expires, the first timer is stopped.

[0083] Step 805, stop the first timer.

[0084] Here, when the first core network element receives the second signaling message sent by the second quantum communication module through the first quantum communication module before the first timer expires, the first timer is stopped.

[0085] Step 806, subsequent process.

[0086] Here, when the first core network element receives the second signaling message sent by the second quantum communication module through the first quantum communication module before the first timer expires, the first timer is stopped, and the subsequent process is performed.

[0087] Step 807, determine whether the first timer expires.

[0088] In some embodiments, when the first core network element does not receive the second signaling message sent by the second quantum communication module through the first quantum communication module before the first timer expires, it is determined that the process fails.

[0089] In some embodiments, when the first core network element receives the second signaling message sent by the second quantum communication module through the first quantum communication module after the first timer expires, the second signaling message is discarded, and it is determined that the process fails. The second signaling message is discarded.

[0090] Step 808, send a process failure message to the UE.

[0091] Here, the first core network element sends the process failure message to the base station, and the base station sends the process failure message to the UE.

[0092] Step 809, end the process.

[0093] In some embodiments, a predetermined threshold is set for the number of times the first timer expires, and if the number of times the first timer expires exceeds the predetermined threshold, the duration of the first timer is reconfigured. Specifically, if the probability of the first timer expiring is very high and exceeds the predetermined threshold, the duration of the first timer needs to be reconfigured.

[0094] From the above, the communication method provided by the embodiments of the present application can determine whether the process is successful or failed by judging whether the first timer is timed out and whether the second signaling message is received before the first timer is timed out after the first signaling message after encoding and modulation is sent to the second quantum communication module of the second core network element through the quantum channel, thereby realizing the network enhancement function of quantum transmission on the basis of the ordinary core network, that is, realizing the functions of time delay timeout parameter configuration, timeout service processing, and time delay timer configuration involved in the authentication, registration and other processes, thereby enhancing the tolerance of the core network side to the quantum channel transmission time delay and improving the user experience and network robustness.

[0095] In some embodiments, the first core network element is an access and mobility management function (AMF), and the second core network element is an authentication service function (AUSF); or the first core network element is the AMF, and the second core network element is a unified data management (UDM).

[0096] In some embodiments, when the first core network element is the AMF and the second core network element is the AUSF, the authentication process described above can be performed. Referring to Figure 9 , Figure 9 is a flowchart of the communication method provided by the embodiments of the present application Figure 6 As shown in Figure 9 , the method specifically includes the following steps:

[0097] Step 901, the AMF sends a terminal network access authentication request message to the first quantum communication module.

[0098] Step 902, the second quantum communication module sends the terminal network access authentication request message to the AUSF.

[0099] Here, steps 901-902 are specifically: the UE is connected to the AMF through the base station, and then the AMF initiates a network access authentication request to the AUSF, the network access authentication request message is transmitted to the first shunt module through the switch, the sensitive message in the network access authentication request message is transmitted to the first quantum communication module through the duplex 5G quantum adaptation interface through the identification message of the first shunt module, and the network access authentication request message is encoded and modulated by the first quantum communication module, transmitted to the second quantum communication module through the quantum channel, demodulated, and then transmitted to the AUSF through the second shunt module through the switch; the AMF sends the network access authentication request, and at the same time triggers the timeout processing mechanism, that is, starts the first timer, and when the authentication response message has a timeout exception, corresponding timeout processing is performed.

[0100] Step 903, the AUSF sends an authentication response message to the second quantum communication module.

[0101] Step 904, the first quantum communication module sends the authentication response message to the AMF.

[0102] Here, steps 903-904 are specifically: the authentication response message of the AUSF is transmitted to the second shunt module through the switch, after identification shunt by the second shunt module, the sensitive messages in the authentication response message are sent to the second quantum communication module, after encoding and modulation by the second quantum communication module, the quantum channel is transmitted back to the first quantum communication module, after demodulation, the authentication response message is parsed and processed by the first shunt module, and then transmitted back to the AMF.

[0103] In some embodiments, the transmission protocol of the duplex quantum system meets the 3GPP protocol standard of the core network side. The 5G quantum secure private network of the duplex quantum direct communication system should complete the transmission protocol adaptation and interface specification definition under the duplex quantum direct communication system based on the 3GPP standard protocol and the duplex quantum channel transmission protocol requirements. The sensitive messages are modulated and transmitted through the duplex quantum direct communication system. In some embodiments, the quantum communication module establishes an http2 link with the AMF and the AUSF, and receives and processes the network access authentication request message of the AMF and the authentication response message of the AUSF. The network access request mode can be but is not limited to http2, POST, and the POST data submission mode can be application / json.

[0104] In some embodiments, when the first core network element is AMF and the second core network element is UDM, the above registration process can be performed. Specifically, the UE connects to the AMF through the base station, and then controls the AMF to initiate a network access registration request to the UDM to obtain subscription information. The network access registration request message is transmitted to the first shunt module through the switch, the sensitive messages in the network access registration request message are transmitted to the first quantum communication module through the duplex 5G quantum adaptation interface through the identification message of the first shunt module, encoded and modulated by the first quantum communication module, transmitted to the second quantum communication module through the quantum channel, demodulated and then transmitted to the UMD through the switch by the second shunt module; after the AMF sends the network access registration request, a timeout processing mechanism is triggered, i.e. a first timer is started, and when the registration message has a timeout exception, corresponding timeout processing is performed. The registration response message of the UDM is transmitted to the second shunt module through the switch, after identification shunt by the second shunt module, the sensitive messages in the registration response message are sent to the second quantum communication module, encoded and modulated by the second quantum communication module, transmitted back to the first quantum communication module through the quantum channel, demodulated and then parsed and processed by the first shunt module to the registration response message, and then transmitted back to the AMF.

[0105] Figure 10 is a flowchart of a communication method provided by an embodiment of the present application Figure 7 As shown in Figure 10 , the communication method is applied to a second quantum communication module on the side of a second core network element; the communication method comprises the following steps:

[0106] Step 1001, receiving the first signaling message sent by the first quantum communication module of the first core network element side through the quantum channel, and sending the first signaling message to the second distribution module; wherein the second distribution module is used to send the first signaling message to the second core network element.

[0107] Here, the second quantum communication module receives the first signaling message sent by the first quantum communication module of the first core network element side through the quantum channel, decodes and demodulates the first signaling message, and sends the first signaling message obtained by decoding and demodulating to the second distribution module. Specifically, the UE sends the first signaling message to the base station, and the first signaling message can be the network access request of the terminal user. The base station sends the first signaling message to the first core network element. The first core network element sends the first signaling message to the first distribution module. The first distribution module is used to receive the first signaling message sent by the first core network element and identify the first signaling message, and distribute the first signaling message into sensitive type messages and non-sensitive type messages. The sensitive type messages can be sensitive user information such as encrypted user terminal identifier (SUCI) and authentication vector in the user network access authentication and authentication process. The non-sensitive type messages can be any information other than the sensitive type information.

[0108] In some embodiments, when the first distribution module identifies that the first signaling message is a non-sensitive type message, the first distribution module transmits the first signaling message to the second core network element side through a classical channel.

[0109] In some embodiments, when the first distribution module identifies that the first signaling message is a sensitive type message, the first distribution module sends the first signaling message to the first quantum communication module. After receiving the first signaling message sent by the first distribution module, the first quantum communication module encapsulates, encodes and quantum light modulates the first signaling message based on a quantum channel transmission protocol, and sends the encoded and modulated first signaling message to the second quantum communication module of the second core network element side through a quantum direct communication channel.

[0110] Here, with reference to Figure 5 , Figure 5 is a communication method flowchart provided by the embodiment of the present application, which represents the signaling message flow of the fusion of 5G network and quantum direct communication. As shown in Figure 5As shown, the communication process involves a UE, a base station, a first core network element, and a second core network element. Paired diversion modules and quantum communication modules are deployed on both ends of the first and second core network elements, and a duplex quantum transmission channel is deployed between the first and second core network elements. Specifically, the UE sends a first signaling message to the base station, which then sends the first signaling message to the first core network element. The first core network element receives the first signaling message from the base station. The first diversion module identifies the first signaling message and, if it is non-sensitive, sends it to the second diversion module on the second core network element via a classical channel. The first diversion module identifies the first signaling message and, if it is sensitive, sends it to the first quantum communication module on the first core network element. The first quantum communication module encodes and modulates the first signaling message and sends the encoded and modulated first signaling message to the second quantum communication module on the second core network element via a quantum channel. The second quantum communication module receives the coded and modulated first signaling message sent by the first quantum communication module on the first core network element side via the quantum channel, demodulates the coded and modulated first signaling message, parses, decodes, and performs quantum optical demodulation on the first signaling message according to the quantum channel transmission protocol, and sends the mediated first signaling message to the second offload module. The second offload module sends the first signaling message to the second core network element.

[0111] From the above, it can be seen that a communication method provided by an embodiment of the present application receives, through a second quantum communication module, a first signaling message sent by a first quantum communication module on the side of a first core network network element via a quantum channel, and sends the first signaling message to a second diversion module; wherein the second diversion module is used to send the first signaling message to the second core network network element; in this way, by adding paired quantum communication modules and diversion modules to the transmission line of the distributed core network, sensitive messages are transmitted through quantum channels, and non-sensitive messages are transmitted through classical channels, thereby realizing the integration of quantum communication technology in the distributed core network architecture, making full use of the inaccessible and tamper-proof physical characteristics of quantum communication technology, and ensuring the security protection capability of key signaling transmission in the core network, thereby realizing data security on the physical communication lines between distributed network elements, and improving the overall security and transmission efficiency of the cross-domain distributed deployment network architecture.

[0112] Figure 11 This is a flow diagram of the communication method provided in the embodiment of the present application. Figure 8 ,like Figure 11 As shown, the communication method includes the following steps:

[0113] Step 1101, receiving a second signaling message sent by the second shunt module, the second signaling message being a sensitive message identified by the second shunt module from the second core network element.

[0114] Here, after the second core network element receives the first signaling message, the second core network element sends the second signaling message to the second shunt module based on the first signaling message. The second shunt module receives the second signaling message sent by the second core network element, and in a case where the second shunt module identifies that the second signaling message is a non-sensitive message, the second shunt module sends the second signaling message to the first shunt module through a classical channel; and in a case where the second shunt module identifies that the second signaling message is a sensitive message, the second shunt module sends the second signaling message to the second quantum communication module.

[0115] In some embodiments, the second signaling message can be, but is not limited to, a response message corresponding to the first signaling message, for example: the first signaling message is a terminal network access authentication request message, and the second signaling message is an authentication response message.

[0116] Step 1102, encoding and modulating the second signaling message, and sending the encoded and modulated second signaling message to the first quantum communication module on the first core network element side through a quantum channel.

[0117] Here, the second quantum communication module encodes and modulates the second signaling message, encapsulates, encodes, and quantum light modulates the second signaling message according to a quantum channel transmission protocol, and sends the encoded and modulated second signaling message to the first quantum communication module on the first core network element side through a quantum channel. The first quantum communication module receives the encoded and modulated second signaling message sent by the second quantum communication module through the quantum channel, demodulates the encoded and modulated second signaling message, parses and decodes the second signaling message according to the quantum channel transmission protocol, quantum light demodulates, and sends the demodulated second signaling message to the first shunt module.

[0118] In some embodiments, the first core network element is an access and mobility management function (AMF), and the second core network element is an authentication service function (AUSF); or the first core network element is an AMF, and the second core network element is a unified data management (UDM).

[0119] In some embodiments, when the first core network element is an AMF and the second core network element is an AUSF, the above-mentioned authentication process can be performed. Referring to Figure 9 , Figure 9 is a flowchart of a communication method provided by an embodiment of the present application, as shown in Figure 9 , specifically comprising the following steps:

[0120] Step 901, the AMF sends a terminal network access authentication request message to the first quantum communication module.

[0121] Step 902, the second quantum communication module sends a terminal network access authentication request message to the AUSF.

[0122] Here, steps 901-902 are specifically: the UE connects to the AMF through the base station, and then the AMF initiates a network access authentication request to the AUSF, the network access authentication request message is transmitted to the first shunt module through the switch, the sensitive messages in the network access authentication request message are transmitted to the first quantum communication module through the duplex 5G quantum adaptation interface through the identification message of the first shunt module, and then the first quantum communication module is modulated and encoded, and then transmitted to the second quantum communication module through the quantum channel, demodulated and then transmitted to the AUSF through the second shunt module through the switch; after the AMF sends the network access authentication request, a timeout processing mechanism is triggered, i.e., a first timer is started, and when the authentication response message has a timeout exception, corresponding timeout processing is performed.

[0123] Step 903, the AUSF sends an authentication response message to the second quantum communication module.

[0124] Step 904, the first quantum communication module sends an authentication response message to the AMF.

[0125] Here, steps 903-904 are specifically: the authentication response message of the AUSF is transmitted to the second shunt module through the switch, the sensitive messages in the authentication response message are transmitted to the second quantum communication module through the identification shunt of the second shunt module, and then the second quantum communication module is modulated and encoded, and then transmitted back to the first quantum communication module through the quantum channel, demodulated and then transmitted back to the AMF through the first shunt module after the authentication response message is parsed and processed.

[0126] In some embodiments, the transmission protocol of the duplex quantum system meets the 3GPP protocol standard of the core network side. The 5G quantum secure private network of the duplex quantum direct communication system should complete the transmission protocol adaptation and interface specification definition under the duplex quantum direct communication system based on the 3GPP standard protocol and the duplex quantum channel transmission protocol requirements. The sensitive messages are modulated and transmitted through the duplex quantum direct communication system. In some embodiments, the quantum communication module establishes an http2 link with the AMF and the AUSF, and receives and processes the network access authentication request message of the AMF and the authentication response message of the AUSF. The network access request mode can be but is not limited to http2, POST, and the POST submission data mode can be application / json.

[0127] In some embodiments, when the first core network element is an AMF and the second core network element is a UDM, the above registration process can be performed. Specifically, the UE is connected to the AMF through the base station, and then the AMF initiates a network registration request to the UDM to obtain the subscription information. The network registration request message is transmitted to the first shunt module through the switch, and the sensitive message in the network registration request message is transmitted to the first quantum communication module through the duplex 5G quantum adaptation interface through the identification of the first shunt module, and then encoded and modulated by the first quantum communication module, transmitted to the second quantum communication module through the quantum channel, demodulated and then transmitted to the UMD through the second shunt module through the switch; after the AMF sends the network registration request, a timeout processing mechanism is triggered, that is, a first timer is started, and when the registration message has a timeout exception, corresponding timeout processing is performed. The registration response message of the UDM is transmitted to the second shunt module through the switch, and after the identification and shunt of the second shunt module, the sensitive message in the registration response message is transmitted to the second quantum communication module, and then encoded and modulated by the second quantum communication module, transmitted back to the first quantum communication module through the quantum channel, demodulated and then transmitted back to the AMF after the registration response message is parsed and processed by the first shunt module.

[0128] Figure 12 is a flowchart of a communication method provided by an embodiment of the present application Figure 9 As shown in Figure 12 , it is a 5G core network signaling transmission flowchart based on duplex quantum. The duplex quantum communication system includes a first quantum communication module Bob end and a second quantum communication module Alice end; the Bob end encodes and modulates the sensitive message based on the quantum channel transmission to obtain a quantum state sequence, and transmits the non-sensitive message based on the classical channel; the Alice end decodes and demodulates the sensitive message based on the quantum channel transmission to obtain a quantum state sequence, and receives the non-sensitive message based on the classical channel. Specifically, the following steps are included:

[0129] Step 1201, the Alice end control terminal initiates a message transmission request.

[0130] Here, the signaling packet transmission program sends the data packet to be transmitted to the Alice side control terminal. The sending terminal needs to have a data packet buffering mechanism.

[0131] Step 1202, the Bob end control terminal informs the Alice end control terminal to prepare for receiving.

[0132] The Alice end control terminal sends a data transmission request to the Bob end control terminal through a traditional transmission channel, and the Bob end terminal replies to Alice. The application layer uses a self-defined protocol.

[0133] Step 1203, drive signal.

[0134] Here, the driving signal is an electrical signal or a control signal, which is used by Bob to control the end machine to control the laser to emit laser.

[0135] Step 1204, the laser emits a laser pulse.

[0136] Step 1205, a single photon pulse is prepared.

[0137] Here, the laser is attenuated by the optical attenuator to form a single photon pulse.

[0138] Step 1206, single photon polarization control.

[0139] Here, the single photon pulse is transmitted by the optical attenuator to the polarization optical unit box, and after polarization, it reaches the optical interference ring. The polarization optical unit box is used to control the natural light polarization state to linear polarization, and to stabilize the single photon polarization state. Among them, the first generation system adopts the form of mechanical control, which can only perform linear polarization in one direction. The subsequent evolution is in the form of electric control, which can control the light polarization to be in multiple different directions.

[0140] Step 1207, modulation signal, driving signal.

[0141] Here, the process control is performed by the Bob side master control receiving end control box. When the interference ring receives the single photon pulse signal after the polarization optical unit box completes the base vector modulation, it will receive the driving signal of the receiving end control box to modulate the random base vector.

[0142] Step 1208, phase modulation, channel transmission.

[0143] Here, the polarization control box is sent from the Bob end to the Alice end through the quantum transmission channel.

[0144] Step 1209, polarization compensation.

[0145] Here, the Alice end polarization control box compensates the polarization of the optical pulse signal, and sends the compensated optical pulse to the optical unit box at the Alice end. The polarization control box is used to compensate the polarization state of the optical pulse to reduce the error rate.

[0146] Step 1210, first light signal, eavesdropping detection.

[0147] Here, the optical signal reaches the interference ring after passing through the optical unit box and is divided into a first light signal and a second light signal; the first light signal is used for channel monitoring and detection, and the second light signal is used for information loading. During the monitoring and detection process, the Alice end control controller will randomly select the base vector and execute steps 1211-1215. The second light signal is used for information loading, and the information loading process can be delayed. After completing the channel monitoring and detection, transmission is performed.

[0148] Step 1211, transmitting a random basis vector control signal.

[0149] Here, the transmitting end control box transmits a phase control signal corresponding to the measurement basis vector to the optical control box, and the optical control box controls the interference ring.

[0150] Step 1212, detecting signal phase demodulation.

[0151] Here, the interference ring transmits the first light signal to the single photon detector for light signal phase demodulation. The first light signal is an optical pulse signal used for monitoring detection.

[0152] Step 1213, generating two single photon pulse detection signals.

[0153] Here, the single photon detector generates a single photon detection signal and sends it to the Alice control end machine. The single photon detector generates a single photon detection signal for channel monitoring detection based on the first light signal.

[0154] Step 1214, transmitting the measurement basis vector and the result.

[0155] Here, the Alice sending control end machine sends the single photon detection signal to the Bob receiving control end machine through the classical channel.

[0156] Step 1215, calculating the bit error rate, giving the detection result, and completing the eavesdropping detection.

[0157] Here, the Bob receiving control end machine calculates the quantum channel transmission bit error rate, judges the monitoring situation of the quantum channel, and returns the measurement result to the Alice end machine. The Bob receiving control end machine calculates the bit error rate according to the basis vector sent by Alice.

[0158] Step 1216, second light signal, data encoding.

[0159] Here, the Alice sending control end machine receives the measurement result sent by the Bob end machine. In the case of normal channel state, the Alice sending control end machine sends the data packet to be transmitted to the optical unit box, and adjusts the information based on the second light signal. In some embodiments, channel detection and data loading are realized by time delay to realize data transmission after detection.

[0160] Step 1217, quantum encoding.

[0161] Here, the optical unit box sends the data to the polarization control box after completing the quantum encoding of the data, and modulates the data on the optical pulse signal.

[0162] Step 1218, quantum information transmission.

[0163] Here, the polarization control box at the Alice end sends data to the Bob end through a quantum channel, and the interference ring device at the Bob end.

[0164] Step 1219, demodulation.

[0165] Here, the interference ring device transmits data to a single-photon detector and demodulates information. The interference ring device divides the optical signal into two paths, one for error rate detection and the other for decoding of the transmitted data, and the two processes are performed simultaneously.

[0166] Step 1220, generate single-photon pulse detection signal.

[0167] Here, the single-photon detector sends a single-photon pulse detection signal to the receiving end controller at the Bob end.

[0168] Step 1221, information demodulation and transmission.

[0169] Here, the receiving end controller at the Bob end demodulates the single-photon pulse signal and feeds it back to the sending end controller at the Alice end through a classical transmission channel. The demodulated transmission data is sent to the signaling packet transmission program. The application layer uses a custom protocol.

[0170] Step 1222, receive message response.

[0171] Here, the Bob end feeds back the data transmission result to the Alice end.

[0172] Through the above steps, the BoB receiving end machine sends the first signaling message to the Alice end through the classical channel in the duplex quantum communication, and then forwards it to the second core network element through the signaling packet transmission program. After receiving the message, the second signaling information is forwarded to the Alice end by the signaling packet transmission program, and is sent to the BoB end through the quantum direct communication channel, and is forwarded to the AMF through the signaling packet transmission program, thereby realizing the entire signaling quantum channel transmission process. Specifically, Figure 13 is a product schematic of the communication method provided by the embodiment of the application Figure 1 , which is represented as a quantum file transmission software Alice end, used to provide encryption and decryption transmission of files, pictures or texts based on quantum direct tcp / udp communication at that time. By opening QSDC in the file transmission software sending end interface, the picture is sent, and by clicking to close QSDC, the quantum transmission system is closed. Figure 14 is a product schematic of the communication method provided by the embodiment of the application Figure 2 . As shown in Figure 14 , it is shown that by monitoring the eavesdropping behavior through the quantum file transmission software Alice end, the error rate is usually below 5% when the eavesdropping controller is closed; after the eavesdropping controller is opened, the error rate rises to more than 25%.

[0173] Figure 15 Figure 1 is a structural composition diagram of a communication device provided by an embodiment of the present application Figure 1 The application is applied to a first core network element side, as shown in Figure 1, the communication device 1500 comprises a first shunting module 1501 and a first quantum communication module 1502. Figure 15

[0174] The first shunting module 1501 is configured to receive a first signaling message of the first core network element, and send the first signaling message to the first quantum communication module if it is identified that the first signaling message is a sensitive message.

[0175] The first quantum communication module 1502 is configured to encode and modulate the first signaling message, and send the encoded and modulated first signaling message to a second quantum communication module of a second core network element side via a quantum channel.

[0176] In some embodiments, the first quantum communication module 1502 is configured to receive the encoded and modulated second signaling message sent by the second quantum communication module via the quantum channel, demodulate the encoded and modulated second signaling message, and send the demodulated second signaling message to the first shunting module.

[0177] In some embodiments, the first shunting module 1501 is configured to send the second signaling message to the first core network element.

[0178] In some embodiments, the communication device 1500 further comprises a first core network element 1503, which is configured to start a first timer after sending the encoded and modulated first signaling message to the second quantum communication module of the second core network element side via the quantum channel.

[0179] In some embodiments, the first core network element 1503 is further configured to stop the first timer if the second signaling message sent by the second quantum communication module is received by the first quantum communication module before the first timer expires.

[0180] In some embodiments, the first core network element 1503 is further configured to determine that a process fails if the second signaling message sent by the second quantum communication module is not received by the first quantum communication module before the first timer expires, wherein the process is related to the first signaling message and the second signaling message.

[0181] In some embodiments, the first core network element 1503 is further configured to discard the second signaling message if the second signaling message sent by the second quantum communication module is received by the first quantum communication module after the first timer expires.

[0182] ​In some embodiments, the first core network element is an access and mobility management function (AMF), and the second core network element is an authentication server function (AUSF); or the first core network element is the AMF, and the second core network element is a unified data management (UDM).

[0183] Those skilled in the art should understand that Figure 15 The implementation functions of the units in the communication device shown can be understood with reference to the related description of the foregoing method. Figure 15 The functions of the units in the communication device shown can be implemented by a program running on a processor, or by a specific logic circuit.

[0184] Figure 16 is a structural composition of the communication device provided by the embodiment of the application Figure 2 applied to the second core network element side, as Figure 16 The communication device 1600 shown includes a second shunting module 1601 and a second quantum communication module 1602.

[0185] The second quantum communication module 1601 is configured to receive a first signaling message that is encoded and modulated by the first quantum communication module on the first core network element side via a quantum channel, demodulate the first signaling message that is encoded and modulated, and send the demodulated first signaling message to the second shunting module.

[0186] The second shunting module 1602 is configured to send the first signaling message to the second core network element.

[0187] In some embodiments, the second shunting module 1602 is further configured to receive a second signaling message sent by the second core network element, and in a case where it is identified that the second signaling message is a sensitive message, send the second signaling message to the second quantum communication module.

[0188] In some embodiments, the second quantum communication module 1601 is further configured to encode and modulate the second signaling message, and send the second signaling message that is encoded and modulated to the first quantum communication module on the first core network element side via the quantum channel.

[0189] In some embodiments, the first core network element is an access and mobility management function (AMF), and the second core network element is an authentication server function (AUSF); or the first core network element is the AMF, and the second core network element is a unified data management (UDM).

[0190] Those skilled in the art should understand that Figure 16 The implementation functions of the units in the communication device shown can be understood with reference to the related description of the foregoing method. Figure 16The functions of the units in the communication device shown can be implemented by programs running on the processor, or by specific logic circuitry.

[0191] Figure 17 is a structural composition schematic diagram of a communication system provided by an embodiment of the present application, as shown in Figure 17 The communication system includes a first core network element side and a second core network element side; the first core network element side includes a first core network element 1701, a first shunting module 1703, and a first quantum communication module 1705; and the second core network element side includes a second core network element 1702, a second shunting module 1704, and a second quantum communication module 1706.

[0192] The first shunting module 1703 is configured to receive a first signaling message sent by the first core network element, and in a case where the first signaling message is identified as a sensitive message, send the first signaling message to the first quantum communication module.

[0193] The first quantum communication module 1705 is configured to encode and modulate the first signaling message, and send the encoded and modulated first signaling message to the second quantum communication module of the second core network element side via a quantum channel.

[0194] The second quantum communication module 1706 is configured to receive the encoded and modulated first signaling message sent by the first quantum communication module of the first core network element side via the quantum channel, demodulate the encoded and modulated first signaling message, and send the demodulated first signaling message to the second shunting module.

[0195] The second shunting module 1704 is configured to send the first signaling message to the second core network element.

[0196] Those skilled in the art should understand that Figure 17 The implementation functions of the units in the communication system shown can be understood with reference to the related descriptions of the foregoing method. Figure 17 The functions of the units in the communication system shown can be implemented by programs running on the processor, or by specific logic circuitry.

[0197] Figure 18 is a schematic structural diagram of a communication device 1800 provided by an embodiment of the present application. The communication device can be a terminal device or a network device, Figure 18 The communication device 1800 shown includes a processor 1810, which can call and run computer programs from a memory to implement the method in the embodiments of the present application.

[0198] Optionally, as Figure 18As shown, the communication device 1800 can further include a memory 1820. The processor 1810 can call and run a computer program from the memory 1820 to implement the method in the embodiments of the present application.

[0199] The memory 1820 can be a separate device independent of the processor 1810, or can be integrated in the processor 1810.

[0200] Optionally, as shown, the communication device 1800 can further include a transceiver 1830, and the processor 1810 can control the transceiver 1830 to communicate with other devices, specifically, can send information or data to other devices, or receive information or data sent by other devices. Figure 18

[0201] The transceiver 1830 can include a transmitter and a receiver. The transceiver 1830 can further include an antenna, and the number of antennas can be one or more.

[0202] Optionally, the communication device 1800 can be specifically a network device of the embodiments of the present application, and the communication device 1800 can implement the corresponding processes in the various methods of the embodiments of the present application implemented by the network device, and for the sake of brevity, will not be repeated here.

[0203] Optionally, the communication device 1800 can be specifically a mobile terminal / terminal device of the embodiments of the present application, and the communication device 1800 can implement the corresponding processes in the various methods of the embodiments of the present application implemented by the mobile terminal / terminal device, and for the sake of brevity, will not be repeated here.

[0204] ​It should be understood that the processor of the embodiments of the present application can be an integrated circuit chip with a processing capability of signals. In the implementation process, each step of the method embodiments described above can be completed by the integrated logic circuit of hardware in the processor or the instructions in the form of software. The processor described above can be a general processor, a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic devices, a discrete gate or transistor logic device, a discrete hardware component. The disclosed methods, steps and logic block diagrams in the embodiments of the present application can be implemented or executed. The general processor can be a microprocessor or the processor can also be any conventional processor or the like. The steps of the method disclosed in conjunction with the embodiments of the present application can be directly embodied as a hardware code processor for execution, or can be executed by a combination of hardware and software modules in the code processor. The software module can be located in a random memory, a flash memory, a read-only memory, a programmable read-only memory or an electrically erasable programmable memory, a register or other mature storage medium in the art. The storage medium is located in the memory, and the processor reads the information in the memory, and combines the hardware to complete the steps of the above method.

[0205] It is to be understood that the memory in the embodiments of the present application can be a volatile memory or a nonvolatile memory, or can include both volatile and nonvolatile memory. Among them, the nonvolatile memory can be a read-only memory (Read-Only Memory, ROM), a programmable read-only memory (Programmable ROM, PROM), an erasable programmable read-only memory (Erasable PROM, EPROM), an electrically erasable programmable read-only memory (Electrically EPROM, EEPROM) or a flash memory. The volatile memory can be a random access memory (Random Access Memory, RAM) used as an external cache. By way of example, but not limitation, many forms of RAM are available, such as static random access memory (Static RAM, SRAM), dynamic random access memory (Dynamic RAM, DRAM), synchronous dynamic random access memory (Synchronous DRAM, SDRAM), double data rate synchronous dynamic random access memory (Double Data Rate SDRAM, DDR SDRAM), enhanced synchronous dynamic random access memory (Enhanced SDRAM, ESDRAM), synchronous link dynamic random access memory (Synchlink DRAM, SLDRAM) and direct memory bus random access memory (Direct Rambus RAM, DR RAM). It should be noted that the memory of the system and method described herein is intended to include, but not limited to, these and any other suitable types of memory.

[0206] It should be understood that the above-mentioned memory is exemplary but not limiting, for example, the memory in the embodiments of the present application can also be static random access memory (static RAM, SRAM), dynamic random access memory (dynamic RAM, DRAM), synchronous dynamic random access memory (synchronous DRAM, SDRAM), double data rate synchronous dynamic random access memory (double data rate SDRAM, DDR SDRAM), enhanced synchronous dynamic random access memory (enhanced SDRAM, ESDRAM), synchronous link dynamic random access memory (synch link DRAM, SLDRAM) and direct memory bus random access memory (Direct Rambus RAM, DR RAM) and the like. That is, the memory in the embodiments of the present application is intended to include, but not limited to, these and any other suitable types of memory.

[0207] The embodiment of the present application further provides a computer readable storage medium for storing the computer program.

[0208] Optionally, the computer readable storage medium can be applied to the network device in the embodiment of the present application, and the computer program makes the computer execute the corresponding process realized by the network device in the various methods of the embodiment of the present application, which will not be repeated here for the sake of brevity.

[0209] Optionally, the computer readable storage medium can be applied to the mobile terminal / terminal device in the embodiment of the present application, and the computer program makes the computer execute the corresponding process realized by the mobile terminal / terminal device in the various methods of the embodiment of the present application, which will not be repeated here for the sake of brevity.

[0210] The embodiment of the present application further provides a computer program product comprising computer program instructions.

[0211] Optionally, the computer program product can be applied to the network device in the embodiment of the present application, and the computer program instructions make the computer execute the corresponding process realized by the network device in the various methods of the embodiment of the present application, which will not be repeated here for the sake of brevity.

[0212] Optionally, the computer program product can be applied to the mobile terminal / terminal device in the embodiment of the present application, and the computer program instructions make the computer execute the corresponding process realized by the mobile terminal / terminal device in the various methods of the embodiment of the present application, which will not be repeated here for the sake of brevity.

[0213] The embodiment of the present application further provides a computer program.

[0214] Optionally, the computer program can be applied to the network device in the embodiment of the present application, and when the computer program runs on the computer, makes the computer execute the corresponding process realized by the network device in the various methods of the embodiment of the present application, which will not be repeated here for the sake of brevity.

[0215] Optionally, the computer program can be applied to the mobile terminal / terminal device in the embodiment of the present application, and when the computer program runs on the computer, makes the computer execute the corresponding process realized by the mobile terminal / terminal device in the various methods of the embodiment of the present application, which will not be repeated here for the sake of brevity.

[0216] Those skilled in the art can clearly understand that the units and algorithm steps of each example described in combination with the embodiments disclosed herein can be realized by electronic hardware or a combination of computer software and electronic hardware. Whether the functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of the present application.

[0217] Those skilled in the art can clearly understand that, for the convenience and brevity of the description, the specific working processes of the above-described system, device and unit can refer to the corresponding processes in the foregoing method embodiments, which will not be repeated here.

[0218] In several embodiments provided in the present application, it should be understood that the disclosed system, device and method can be implemented in other ways. For example, the above-described device embodiments are only schematic, for example, the division of the units is only a logical function division, and actual implementation can have another division manner, for example, a plurality of units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the coupling or direct coupling or communication connection between the units shown or discussed can be indirect coupling or communication connection through some interface, device or unit, and can be electrical, mechanical or other forms.

[0219] The units described as separate components can or can not be physically separated, and the components shown as units can or can not be physical units, that is, they can be located in one place, or can be distributed on a plurality of network units. Part or all of the units can be selected according to actual needs to achieve the purpose of the embodiment.

[0220] In addition, each functional unit in each embodiment of the present application can be integrated into a processing unit, or each unit can exist physically independently, or two or more units can be integrated into one unit.

[0221] If the functions are implemented in the form of software function units and sold or used as independent products, they can be stored in a computer readable storage medium. Based on this understanding, the technical solutions of the present application or the parts of the technical solutions that essentially contribute to the prior art or the parts of the technical solutions can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes a plurality of instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present application. The aforementioned storage medium includes a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and various media that can store program codes.

[0222] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art can easily think of changes or replacements within the technical scope disclosed in the present application, which should be covered within the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the protection scope of the claims.

Claims

1. A communication method characterized by comprising: The first quantum communication module is applied to the side of the first core network element, and the method comprises: receiving a first signaling message sent by the first shunting module, wherein the first signaling message is a sensitive message received and identified by the first shunting module from the first core network element; sending the first signaling message to a second quantum communication module on the side of a second core network element through a quantum channel.

2. The method of claim 1, wherein, The method further comprises: receiving an encoded and modulated second signaling message sent by the second quantum communication module through the quantum channel, demodulating the encoded and modulated second signaling message, and sending the demodulated second signaling message to the first shunting module; wherein the first shunting module is configured to send the second signaling message to the first core network element.

3. The method of claim 2, wherein, The method further comprises: starting a first timer after sending the encoded and modulated first signaling message to the second quantum communication module on the side of the second core network element through the quantum channel; stopping the first timer if the second signaling message sent by the second quantum communication module is received before the first timer expires; determining that the process fails if the second signaling message sent by the second quantum communication module is not received before the first timer expires, wherein the process is related to the first signaling message and the second signaling message.

4. The method of claim 3, wherein, The method further comprises: discarding the second signaling message if the second signaling message sent by the second quantum communication module is received after the first timer expires.

5. The method of any one of claims 1 to 4, wherein: the first core network element is an access and mobility management function (AMF), and the second core network element is an authentication server function (AUSF); or the first core network element is an AMF, and the second core network element is a unified data management (UDM). The second quantum communication module is applied to the side of the second core network element, and the method comprises:

6. A communication method characterized by comprising: receiving a first signaling message sent by a first quantum communication module on the side of a first core network element through a quantum channel, and sending the first signaling message to a second shunting module; wherein the second shunting module is configured to send the first signaling message to the second core network element. The method further comprises:

7. The method according to claim 6, characterized in that receiving a second signaling message sent by the second shunting module, wherein the second signaling message is a sensitive message received and identified by the second shunting module from the second core network element; encoding and modulating the second signaling message, and sending the encoded and modulated second signaling message to a first quantum communication module on the side of a first core network element through a quantum channel.

8. The method of claim 6 or 7, wherein: the first core network element is an access and mobility management function (AMF), and the second core network element is an authentication server function (AUSF); or the first core network element is an AMF, and the second core network element is a unified data management (UDM). The communication device is applied to the side of the first core network element, and comprises a first shunting module and a first quantum communication module; ​ 9. A communications device, characterized by ​ The first shunt module is configured to receive a first signaling message sent by the first core network element, and send the first signaling message to the first quantum communication module if it is identified that the first signaling message is a sensitive message. The first quantum communication module is configured to encode and modulate the first signaling message, and send the encoded and modulated first signaling message to a second quantum communication module on the second core network element side via a quantum channel.

10. A communications device, characterized by The communication device is applied to the second core network element side, and includes a second shunt module and a second quantum communication module. The second quantum communication module is configured to receive the encoded and modulated first signaling message sent by the first quantum communication module on the first core network element side via the quantum channel, demodulate the encoded and modulated first signaling message, and send the demodulated first signaling message to the second shunt module. The second shunt module is configured to send the first signaling message to the second core network element.

11. A communication system, characterized by The communication system includes a first core network element side and a second core network element side; the first core network element side includes a first core network element, a first shunt module, and a first quantum communication module; The second core network element side includes a second core network element, a second shunt module, and a second quantum communication module; The first shunt module is configured to receive a first signaling message sent by the first core network element, and send the first signaling message to the first quantum communication module if it is identified that the first signaling message is a sensitive message. The first quantum communication module is configured to encode and modulate the first signaling message, and send the encoded and modulated first signaling message to a second quantum communication module on the second core network element side via a quantum channel. The second quantum communication module is configured to receive the encoded and modulated first signaling message sent by the first quantum communication module on the first core network element side via the quantum channel, demodulate the encoded and modulated first signaling message, and send the demodulated first signaling message to the second shunt module. The second shunt module is configured to send the first signaling message to the second core network element.

12. A communication device, characterized by comprising: a processor and a memory, the memory being configured to store a computer program, and the processor being configured to invoke and run the computer program stored in the memory to execute the method of any one of claims 1 to 5, or the method of any one of claims 6 to 8.

13. A computer-readable storage medium, characterized in that, a computer program configured to cause a computer to execute the method of any one of claims 1 to 5, or the method of any one of claims 6 to 8.

14. A computer program product, characterised in that, computer program instructions configured to cause a computer to execute the method of any one of claims 1 to 5, or the method of any one of claims 6 to 8.

Images