Terminal device configuration method, device and communication device

Abstract

An embodiment of the present invention discloses a configuration method, apparatus, and communication device for a terminal device, the method comprising: the terminal device generates a second key based on a first key, and encrypts and / or integrity protects a certificate request message based on the second key; and sends a first request message, wherein the first request message includes the certificate request message encrypted and / or integrity protected by the second key.

Description

[0001] CROSS-REFERENCE TO RELATED APPLICATIONS

[0002] This application is based on the Chinese patent application with application number 202110304444.4 and application date of March 22, 2021, and claims the priority of the Chinese patent application. The entire content of the Chinese patent application is hereby incorporated into this application by introduction. Technical Field

[0003] The present invention relates to the technical field of vehicle networking, and in particular to a configuration method and apparatus for a terminal device and a communication device. Background Art

[0004] In the Cellular Vehicle-to-Everything (C-V2X) vehicle network, a large amount of real-time traffic information is transmitted between vehicles, traffic facilities, and vehicle network management systems, including vehicle driving status, road conditions, traffic light information, etc. This critical traffic information is directly related to public transportation safety and the life safety of drivers and passengers, and fundamentally determines whether C-V2X technology can be implemented in the industry.

[0005] To ensure information security, digital certificates have been introduced. These certificates are used to guarantee the authenticity of users and devices in the C-V2X system, as well as the authenticity of transmitted information. Therefore, ensuring the security of digital certificates is crucial to the implementation of C-V2X technology.

[0006] In the current production process, digital certificates need to be configured offline during the production of vehicles or Internet of Vehicles equipment. This method has high production safety requirements for vehicle manufacturers and C-V2X terminal equipment manufacturers. Either the production line needs to be modified to meet the physical environment safety requirements of offline filling, or the equipment needs to be sent to a professional security agency for filling. Therefore, this method has high investment costs, poor flexibility, difficulty in deployment, and greater technical implementation difficulties.

[0007] In addition, using existing standard GBA methods, such as Figure 1 As shown in Figure 2, a secure connection can be established between the vehicle or connected vehicle device and the CA server, and the C-V2X device can complete the digital certificate configuration online. However, the standard solution requires network operators to deploy a NAF / AP network element for each CA server to provide GBA services (see Figure 1The C-V2X Service Provider virtual box in the figure has a one-to-one correspondence between the CA server (C-V2X Application Server in the figure) and the NAF / AP network element. This significantly increases network operation and maintenance costs for operators. In addition, because the GBA session keys used by the CA server to communicate with connected vehicle devices are stored in the NAF / AP network element, security protection operations such as message encryption and decryption and integrity protection are performed by the NAF / AP devices. NAF / AP is developed in accordance with communications industry security technical standards. Therefore, the CA server cannot flexibly use the GBA session keys, and the security protection operations performed may not meet the C-V2X vehicle industry security technical requirements. This brings difficulties to the industrial application of the GBA solution.

[0008] Furthermore, online digital certificate configuration places extremely high demands on the security of C-V2X devices. To ensure the security of digital certificates and sensitive parameters on the device side, this information cannot simply be processed by client applications on the device's general-purpose CPU, internal or external memory, etc. Instead, it must be processed in a trusted, secure environment, combined with key generation and acquisition methods. However, existing configuration solutions lack holistic device-side security design and implementation, failing to ensure secure digital certificate configuration.

[0009] In summary, how to safely and conveniently deploy and configure digital certificates and sensitive security parameters on C-V2X devices is a major security challenge facing the C-V2X Internet of Vehicles industry. Summary of the Invention

[0010] To solve existing technical problems, embodiments of the present invention provide a configuration method and apparatus for a terminal device and a communication device.

[0011] To achieve the above-mentioned purpose, the technical solution of the embodiment of the present invention is implemented as follows:

[0012] In a first aspect, an embodiment of the present invention provides a configuration method for a terminal device, the method comprising:

[0013] The terminal device generates a second key based on the first key, and encrypts and / or integrity protects the certificate request message based on the second key;

[0014] Sending a first request message, where the first request message includes the certificate request message encrypted and / or integrity protected by the second key.

[0015] In the above solution, the method also includes: the terminal device receives a first response message from the server, performs integrity verification and / or decryption on the first response message based on the second key, and obtains the digital certificate carried in the first response message.

[0016] In the above solution, the terminal device includes: an application client, a baseband chip and a universal subscriber identity module (USIM);

[0017] The terminal device generates a second key based on the first key, and encrypts and / or integrity protects the certificate request message based on the second key, including:

[0018] The application client triggers the USIM to generate a second key based on the first key through the baseband chip;

[0019] The application client generates a first certificate request message, and sends the first certificate request message to the USIM through the baseband chip;

[0020] The USIM generates a public-private key pair, adds the public key of the public-private key pair to the first certificate request message, and signs the first certificate request message using the private key of the public-private key pair to obtain a second certificate request message;

[0021] The USIM encrypts and / or integrity protects the second certificate request message based on the second key, and adds a first verification value to the second certificate request message;

[0022] The USIM sends the second certificate request message processed as above to the application client through the baseband chip.

[0023] In the above scheme, sending the first request message includes: the application client sends a first request message to the server, the first request message includes the second certificate request message encrypted and / or integrity protected by the second key; the first request message also includes: a boot transaction identifier (B-TID) and / or a fully qualified domain name (FQDN) of the server.

[0024] In the above solution, the terminal device includes: an application client, a baseband chip and a USIM;

[0025] The terminal device receives a first response message from the server, performs integrity verification and / or decrypts the first response message based on the second key, and obtains the digital certificate carried in the first response message, including:

[0026] The application client receives the first response message from the server, and sends the first response message to the USIM through the baseband chip;

[0027] performing, by the USIM, integrity verification and / or decryption on the first response message based on the second key;

[0028] After the verification is passed, the USIM obtains the digital certificate carried in the first response message and stores the digital certificate in a security component.

[0029] In the above solution, the method further includes: the terminal device executes a Generic Bootstrapping Architecture (GBA) authentication process or an Application-Oriented Authentication or Key Management (AKMA) authentication process to negotiate the first key with the network device.

[0030] In a second aspect, an embodiment of the present invention further provides a configuration method for a terminal device, the method comprising: a server receiving a first request message from a terminal device; the first request message including a certificate request message encrypted and / or integrity protected by a second key;

[0031] The server obtains the second key from the network device; the second key is generated by the network device based on the first key;

[0032] The server performs integrity verification and / or decryption on the first request message based on the second key, and issues a digital certificate after authorizing the first request message;

[0033] The server sends a first response message to the terminal device, where the first response message includes the digital certificate.

[0034] In the above solution, the server sends a first response message to the terminal device, including:

[0035] The server constructs a first response message including the digital certificate, encrypts and / or integrity protects the first response message based on the second key, and adds a second check value to the first response message;

[0036] Sending a first response message after the above processing to the terminal device.

[0037] In the above solution, the first request message further includes: a bootstrapping transaction identifier (B-TID);

[0038] The server obtains the second key from the network device, including:

[0039] The server queries whether there is a second key corresponding to the B-TID;

[0040] If the query result shows that there is no second key corresponding to the B-TID, the second key is obtained from the network device.

[0041] In the above solution, the server obtains the second key from the network device, including:

[0042] The server sends a second request message to the network device, where the second request message is used to request the second key;

[0043] The server receives a second response message sent by the network device, where the second response message includes the second key.

[0044] In a third aspect, an embodiment of the present invention further provides a configuration method for a terminal device, the method comprising: a network device generating a second key based on a pre-negotiated first key, and sending the second key to a server.

[0045] In the above solution, the method further includes: the network device and the terminal device negotiate the first key with the terminal device by executing a GBA authentication process or an AKMA authentication process.

[0046] In the above solution, the network device generates a second key based on the pre-negotiated first key and sends the second key to the server, including:

[0047] The network device receives a second request message sent by the server, where the second request message is used to request the second key;

[0048] The network device generates a second key based on the pre-negotiated first key, and sends a second response message to the server, where the second response message includes the second key.

[0049] In a fourth aspect, an embodiment of the present invention further provides a configuration device for a terminal device, the device comprising: a first generating unit and a first communication unit; wherein,

[0050] The first generating unit is configured to generate a second key based on the first key, and encrypt and / or integrity protect the certificate request message based on the second key;

[0051] The first communication unit is configured to send a first request message, where the first request message includes the certificate request message encrypted and / or integrity protected by the second key.

[0052] In the above solution, the first communication unit is further used to receive a first response message from the server, perform integrity verification and / or decrypt the first response message based on the second key, and obtain the digital certificate carried in the first response message.

[0053] In the above solution, the first generating unit includes: an application client, a baseband chip and a USIM;

[0054] The application client is configured to trigger, through the baseband chip, the USIM to generate a second key based on the first key; and is further configured to generate a first certificate request message and send the first certificate request message to the USIM through the baseband chip;

[0055] The USIM is configured to generate a public-private key pair, add the public key of the public-private key pair to the first certificate request message, and sign the first certificate request message using the private key of the public-private key pair to obtain a second certificate request message; encrypt and / or integrity protect the second certificate request message based on the second key, and add a first check value to the second certificate request message; and send the second certificate request message encrypted and / or integrity protected by the second key to the application client through the baseband chip.

[0056] In the above scheme, the application client is used to send a first request message to the server through the first communication unit, and the first request message includes the second certificate request message encrypted and / or integrity protected by the second key; the first request message also includes: B-TID and / or server FQDN.

[0057] In the above solution, the first generating unit includes: an application client, a baseband chip and a USIM;

[0058] The application client is configured to receive a first response message from the server through the first communication unit, and send the first response message to the USIM through the baseband chip;

[0059] The USIM is configured to perform integrity verification and / or decryption on the first response message based on the second key; after the verification is passed, obtain the digital certificate carried in the first response message and store the digital certificate in a security component.

[0060] In the above solution, the apparatus further includes a first execution unit, configured to execute a GBA authentication process or an AKMA authentication process and negotiate the first key with the network device.

[0061] In a fifth aspect, an embodiment of the present invention further provides a configuration device for a terminal device, the device comprising: a second communication unit and a first verification unit; wherein,

[0062] The second communication unit is configured to receive a first request message from a terminal device; the first request message includes a certificate request message encrypted and / or integrity protected by a second key;

[0063] The first verification unit is configured to obtain the second key from the network device; the second key is generated by the network device based on the first key; and is further configured to perform integrity verification and / or decrypt the first request message based on the second key, and issue a digital certificate after the first request message is authorized.

[0064] The second communication unit is further configured to send a first response message to the terminal device, where the first response message includes the digital certificate.

[0065] In the above scheme, the second communication unit is used to construct a first response message containing the digital certificate, encrypt and / or integrity protect the first response message based on the second key, add a second verification value to the first response message, and send the first response message after the above processing to the terminal device.

[0066] In the above solution, the first request message also includes: a bootstrapping transaction identifier B-TID;

[0067] The apparatus further includes a second execution unit configured to query whether a second key corresponding to the B-TID exists; if the query result shows that the second key corresponding to the B-TID does not exist, obtain the second key from the network device through the second communication unit.

[0068] In a sixth aspect, an embodiment of the present invention further provides a configuration device for a terminal device, the device comprising a second generation unit and a third communication unit; wherein,

[0069] The second generating unit is configured to generate a second key based on the pre-negotiated first key;

[0070] The third communication unit is used to send the second key to the server.

[0071] In the above solution, the apparatus further includes a third execution unit, configured to negotiate the first key with the terminal device by executing a GBA authentication process or an AKMA authentication process with the terminal device.

[0072] In the above solution, the second generating unit is used to generate a corresponding second key for each server based on the pre-negotiated first key;

[0073] The third communication unit is used to send the corresponding second key to each server respectively.

[0074] In a seventh aspect, an embodiment of the present invention further provides a configuration method for a terminal device, the method comprising: the terminal device generating a second key based on the first key, and encrypting and / or integrity protecting part or all of the first message based on the second key;

[0075] Send the first message.

[0076] In the above solution, the method further includes: the terminal device receives a second message from the server, and performs integrity verification and / or decryption on the second message based on the second key.

[0077] In the above solution, the terminal device includes: an application client, a baseband chip and a universal subscriber identity module (USIM);

[0078] The terminal device generates a second key based on the first key, and encrypts and / or integrity protects part or all of the first message based on the second key, including:

[0079] The application client triggers the USIM to generate a second key based on the first key through the baseband chip;

[0080] The application client generates a first message and sends the first message to the USIM through the baseband chip;

[0081] The USIM encrypts and / or integrity protects part or all of the first message based on the second key;

[0082] The USIM sends the first message after the above processing to the application client through the baseband chip.

[0083] In the above solution, the sending of the first message includes: the application client sending the first message to the server;

[0084] The first message also includes: a bootstrapping transaction identifier (B-TID) and / or a fully qualified domain name (FQDN) of the server; or includes: an application-oriented authentication or key management (AKMA) key identifier (A-KID) and / or FQDN.

[0085] In the above solution, the terminal device includes: an application client, a baseband chip and a universal subscriber identity module (USIM);

[0086] The terminal device receives a second message from the server, and performs integrity verification and / or decryption on the second message based on the second key, including:

[0087] The application client receives the second message from the server and sends the second message to the USIM through the baseband chip;

[0088] The USIM performs integrity check and / or decryption on the second message based on the second key.

[0089] In an eighth aspect, an embodiment of the present invention further provides a configuration method for a terminal device, the method comprising:

[0090] The server receives a first message from the terminal device, wherein part or all of the first message is encrypted and / or integrity protected by a second key;

[0091] The server obtains the second key from the network device; the second key is generated by the network device based on the first key;

[0092] The server performs integrity verification and / or decryption on the first message based on the second key.

[0093] In the above solution, the method further includes: the server encrypting and / or integrity protecting part or all of the second message based on the second key;

[0094] Send the second message.

[0095] In the above solution, the first message further includes: a bootstrapping transaction identifier (B-TID), or an application-oriented authentication or key management (AKMA) key identifier (A-KID);

[0096] The server obtains the second key from the network device, including:

[0097] The server queries whether there is a second key corresponding to the B-TID or the A-KID;

[0098] If the query result shows that there is no second key corresponding to the B-TID or the A-KID, the second key is obtained from the network device.

[0099] In a ninth aspect, an embodiment of the present invention further provides a configuration device for a terminal device, the device comprising: a third generating unit and a fourth communication unit; wherein,

[0100] The third generating unit is configured to generate a second key based on the first key, and encrypt and / or integrity protect part or all of the first message based on the second key;

[0101] The fourth communication unit is used to send a first message.

[0102] In the above solution, the fourth communication unit is further used to receive a second message from the server, and perform integrity verification and / or decryption on the second message based on the second key.

[0103] In the above solution, the third generating unit includes: an application client, a baseband chip and a universal subscriber identity module (USIM);

[0104] The application client is configured to trigger, through the baseband chip, the USIM to generate a second key based on the first key; and is further configured to generate a first message and send the first message to the USIM through the baseband chip;

[0105] The USIM is used to encrypt and / or integrity protect part or all of the first message based on the second key; and is also used to send the first message after the above processing to the application client through the baseband chip.

[0106] In the above solution, the application client is further used to send the first message to the server;

[0107] The first message also includes: a bootstrapping transaction identifier (B-TID) and / or a fully qualified domain name (FQDN) of the server; or includes: an application-oriented authentication or key management (AKMA) key identifier (A-KID) and / or FQDN.

[0108] In the above solution, the third generating unit includes: an application client, a baseband chip and a universal subscriber identity module (USIM);

[0109] The application client is configured to receive a second message from the server and send the second message to the USIM through the baseband chip;

[0110] The USIM is configured to perform integrity verification and / or decryption on the second message based on the second key.

[0111] In a tenth aspect, an embodiment of the present invention further provides a configuration device for a terminal device, the device comprising: a fifth communication unit and a second verification unit; wherein,

[0112] The fifth communication unit is configured to receive a first message from a terminal device, wherein part or all of the first message is encrypted and / or integrity protected by a second key;

[0113] The second verification unit is used to obtain the second key from the network device; the second key is generated by the network device based on the first key; and is also used to perform integrity verification and / or decryption on the first message based on the second key.

[0114] In the above solution, the apparatus further includes a fourth generating unit, configured to encrypt and / or integrity protect part or all of the second message based on the second key;

[0115] The fifth communication unit is further configured to send a second message.

[0116] In the above solution, the first message further includes: a bootstrapping transaction identifier (B-TID), or an application-oriented authentication or key management (AKMA) key identifier (A-KID);

[0117] The apparatus further includes a third execution unit, configured to query whether a second key corresponding to the B-TID or the A-KID exists;

[0118] The second verification unit is configured to obtain the second key from the network device through the fifth communication unit when the query result obtained by the third execution unit is that the second key corresponding to the B-TID or the A-KID does not exist.

[0119] In the eleventh aspect, an embodiment of the present invention further provides a computer-readable storage medium on which a computer program is stored, which, when executed by a processor, implements the steps of the method described in the first aspect, second aspect, third aspect, seventh aspect or eighth aspect of the embodiment of the present invention.

[0120] In the twelfth aspect, an embodiment of the present invention further provides a communication device, comprising a memory, a processor, and a computer program stored in the memory and runnable on the processor, wherein when the processor executes the program, the steps of the method described in the first aspect, the second aspect, the third aspect, the seventh aspect or the eighth aspect of the embodiment of the present invention are implemented.

[0121] The terminal device configuration method, apparatus, and communication device provided by the embodiments of the present invention include: the terminal device generates a second key based on a first key, encrypts and / or integrity-protects a certificate request message based on the second key; sends a request message, wherein the request message includes the certificate request message encrypted and / or integrity-protected by the second key; the server receives the request message from the terminal device; the request message includes the certificate request message encrypted and / or integrity-protected by the second key; obtains the second key from a network device; the second key is generated by the network device based on the first key; performs integrity verification and / or decryption on the request message based on the second key, and issues a digital certificate after the request message is authorized; and sends a response message to the terminal device, wherein the response message includes the digital certificate. Using the technical solution of the embodiments of the present invention, based on the GBA mechanism, secure configuration of digital certificates for C-V2X terminal devices can be achieved through "one-click configuration," without the need for modification of the production line's security environment or for professional security organizations to perform configuration, thereby improving the flexibility of digital certificate configuration and reducing deployment difficulty and investment costs. BRIEF DESCRIPTION OF THE DRAWINGS

[0122] Figure 1 This is a schematic diagram of the GBA architecture;

[0123] Figure 2 Schematic diagram of the configuration method of the terminal device according to the embodiment of the present invention Figure 1 ;

[0124] Figure 3 Schematic diagram of the GBA enhanced architecture in an embodiment of the present invention;

[0125] Figure 4 A schematic diagram of an optional architecture of a terminal device according to an embodiment of the present invention;

[0126] Figure 5 Schematic diagram of the configuration method of the terminal device according to the embodiment of the present invention Figure 2 ;

[0127] Figure 6 Schematic diagram of the configuration method of the terminal device according to the embodiment of the present invention Figure 3 ;

[0128] Figure 7 Schematic diagram of the interactive process of the configuration method of the terminal device according to the embodiment of the present invention Figure 1 ;

[0129] Figure 8 Schematic diagram of the configuration device of the terminal device according to the embodiment of the present invention Figure 1 ;

[0130] Figure 9 Schematic diagram of the configuration device of the terminal device according to the embodiment of the present invention Figure 2 ;

[0131] Figure 10 Schematic diagram of the configuration device of the terminal device according to the embodiment of the present invention Figure 3 ;

[0132] Figure 11 Schematic diagram of the configuration method of the terminal device according to the embodiment of the present invention Figure 4 ;

[0133] Figure 12 Schematic diagram of the configuration method of the terminal device according to the embodiment of the present invention Figure 5 ;

[0134] Figure 13 Schematic diagram of the interactive process of the configuration method of the terminal device according to the embodiment of the present invention Figure 2 ;

[0135] Figure 14 Schematic diagram of the configuration device of the terminal device according to the embodiment of the present invention Figure 4 ;

[0136] Figure 15 Schematic diagram of the configuration device of the terminal device according to the embodiment of the present invention Figure 5 ;

[0137] Figure 16 Schematic diagram of the hardware structure of a communication device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0138] The present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments.

[0139] An embodiment of the present invention provides a configuration method for a terminal device. Figure 2 Schematic diagram of the configuration method of the terminal device according to the embodiment of the present invention Figure 1 ;like Figure 2 As shown, the method includes:

[0140] Step 101: The terminal device generates a second key based on the first key, and encrypts and / or integrity protects a certificate request message based on the second key;

[0141] Step 102: Send a first request message, where the first request message includes the certificate request message encrypted and / or integrity protected by the second key.

[0142] The configuration method of the terminal device of this embodiment (hereinafter referred to as the method) is applied to the terminal device. The terminal device can specifically be a vehicle network terminal device (also called a C-V2X Device). In some optional embodiments, the vehicle network terminal device can be, for example, an on-board unit (OBU), a roadside unit (RSU), etc.; in other optional embodiments, the vehicle network terminal device can also be a pedestrian's handheld device, wearable device, etc.

[0143] In some optional embodiments of the present invention, the method further includes: the terminal device executes a Generic Bootstrapping Architecture (GBA) authentication process or an Authentication and Key Management for Applications (AKMA) authentication process to negotiate the first key with the network device.

[0144] Specifically, the network device here can be a Network Application Function (NAF) or an Authentication Proxy (AP) under the GBA authentication process. Furthermore, under the AKMA authentication process, the network device can be a Network Exposure Function (NEF), which is used to expose network capabilities to other network elements.

[0145] A possible implementation method for pre-negotiating the first key between the terminal and the network device is as follows (here taking the GBA authentication process of the C-V2X device as an example):

[0146] The C-V2X device performs AKA authentication with the BSF. After the BSF returns a 200OK response, the C-V2X device generates a GBA session key, also known as the first key. Subsequently, when the C-V2X device accesses the NAF / AP, the NAF / AP requests the BSF to negotiate and generate the same GBA session key, also known as the first key. The NAF / AP provides GBA services to the C-V2X service provider (e.g., a C-V2X application server). The NAF / AP obtains the GBA session key, also known as the first key, from the BSF, thus completing the first key negotiation process between the terminal and the network device.

[0147] When a C-V2X device needs to securely exchange service messages with a server (such as requesting a digital certificate), it initiates an application request to the server. The server then accesses the NAF / AP through a pre-established secure connection with the network device, requests the NAF / AP to generate a second key for this service based on the first key, and then retrieves the generated second key. Using this second key, the C-V2X terminal and server can perform security processing such as encryption and integrity protection on the exchanged service messages, effectively establishing a secure communication channel between the two.

[0148] The server here can be a C-V2X application server, which can be a CA server (CA stands for Certificate Authority). In this architecture, the CA server can be either an Enrolment CA server or an Authorization CA server. Specifically, if a C-V2X device requests an Enrolment CA server (ECA), the server becomes an Enrolment CA server (ECA). If a C-V2X device requests an Authorization CA, Application Certificate, or Identity Certificate, the server becomes an Authorization CA server (ACA). The CA server can be deployed by the MNO itself or by a third party, providing certificate services for C-V2X devices.

[0149] The establishment of a secure communication channel between the C-V2X terminal and the server here means that after the terminal device passes the above-mentioned GBA authentication process, it will obtain a first key, and then generate a second key based on the first key. The server side can obtain the second key from the network device (the network device NAF / AP has already negotiated the first key with the terminal in advance, and when the server needs the second key, it generates the second key based on the first key and returns the second key to the server. This process will be explained in detail later). It can be seen that both the terminal device and the server have obtained the second key, and use the second key to securely protect and send and receive messages. Therefore, a secure channel (also called a secure connection, secure link, etc.) is actually established between the terminal device and the server, which is used to effectively protect the sent and received messages based on the second key.

[0150] In addition, the first key here can also be called a shared session key; the second key is generated based on the first key, and the second key can also be called an application session key or a session key.

[0151] It should be noted that the terminal device applying this method can be deployed in Figure 3 In the enhanced GBA architecture shown in FIG. In the enhanced architecture, the network equipment NAF / AP is shared by a few C-V2X application servers (such as CA servers) (see Figure 3The C-V2X Service Provider virtual box in the figure does not contain the NAF / AP network element. Instead, the NAF / AP network element is deployed on the mobile network operator (MNO) side, and multiple CA servers (the C-V2X Application Server in the figure) share one NAF / AP network element. It is not difficult to understand that multiple CA servers sharing one NAF / AP network element can greatly reduce deployment costs and ease maintenance.

[0152] Furthermore, based on the GBA session key (e.g., Ks_int_NAF) provided by the Bootstrapping Server Function (BSF) during the GBA bootstrapping security association process, the network device NAF / AP further derives a GBA application session key (K*) for each C-V2X application server (e.g., CA server) and shares this K* with the CA server. Simultaneously, the C-V2X device also locally obtains the same K* used during the GBA bootstrapping process and provides it to the upper-layer C-V2X Application Client for invocation. In this way, the CA server and C-V2X device share the same GBA application session key K*. They can use K* for mutual authentication, message protection, and secure channel establishment. The shared GBA application session key K* then protects the C-V2X certificate application and issuance process.

[0153] The method of this embodiment allows users to configure digital certificates with a single click. Specifically, users can easily trigger the terminal to initiate certificate configuration by clicking a button on the terminal's human-machine interface or through other interface software. Upon receiving the trigger command, the terminal automatically completes access authentication, secure channel establishment, key generation, digital certificate application, and subsequent digital certificate download and secure storage with the server, achieving initial security configuration for the terminal device. Compared to existing offline and online deployment methods, this method offers a high degree of automation, lower application and maintenance costs, fewer manual steps, and is easily scalable.

[0154] In some optional embodiments of the present invention, the terminal device includes: an application client (also referred to as a C-V2X application client), a baseband chip (also referred to as a device modem, used to access a 4G or 5G network), and a Universal Subscriber Identity Module (USIM); the terminal device generates a second key based on a first key, and encrypts and / or integrity protects a certificate request message based on the second key, including: the application client triggering the USIM to generate a second key based on the first key through the baseband chip; the application client generates a first certificate request message, and sends the first certificate request message to the USIM through the baseband chip; the USIM generates a public-private key pair, adds a public key from the public-private key pair to the first certificate request message, and signs the first certificate request message using the private key from the public-private key pair to obtain a second certificate request message; the USIM encrypts and / or integrity protects the second certificate request message based on the second key, and adds a first check value to the second certificate request message; and the USIM sends the processed second certificate request message to the application client through the baseband chip.

[0155] The second key here may consist of only one key or multiple keys (i.e., all of the multiple keys here are generated based on the first key and are collectively referred to as the second key). In one feasible implementation, the second key consists of multiple keys, such as an encryption key and / or an integrity protection key. Of course, other types of keys may also be included as needed, which will not be described in detail here. Furthermore, the process of the USIM encrypting the second certificate request message based on the second key includes: the USIM encrypting the plaintext second certificate request message using the encryption key in the second key to convert it into ciphertext. And / or, the process of the USIM performing integrity protection on the second certificate request message based on the second key includes: the USIM performing integrity protection on the message using the integrity protection key in the second key. For example, the USIM may calculate a first check value on the encrypted message using the integrity protection key, and then add the calculated first check value to the second certificate request message. Optionally, the first check value may be a Hash-based Message Authentication Code (HMAC) value. Exemplarily, the USIM may calculate the first check value based on certain bits in the message. It should be noted that "adding the calculated first check value to the request message" is actually a step in the message integrity protection process. This step is emphasized here in order to more clearly explain how to protect the second certificate request message later.

[0156] Figure 4 FIG. 1 is a schematic diagram of an optional architecture of a terminal device according to an embodiment of the present invention; Figure 4 As shown, the terminal device may include an application layer, user libraries, a Linux kernel, and a hardware layer, among others. The application layer may include CA management applications and V2X applications; the user library includes a GBA interface library, a USIM interface library, a hardware security module (HSM) interface library, and an LTE-V2X interface library, among others; the hardware layer includes an HSM, an LTE-V2X communication module, and an LTE-Uu communication module. The LTE-Uu communication module may include a baseband chip and a USIM. The LTE-Uu communication module, the LTE-V2X communication module, and the HSM may be implemented as discrete modules or components, or they may be packaged and integrated into one module / modules, but this does not affect the logical functional division between them.

[0157] In this example, the CA management application (also known as the CA application client) is the control software that implements "initial secure one-click configuration" on terminal devices (such as C-V2X terminals). It is responsible for the logical control of the entire service process. The V2X application (also known as the C-V2X application) is the service application module that implements V2X direct communication via the PC5 / V5 interface on terminal devices and is responsible for controlling the transmission and reception of direct communication service messages. It accesses the LTE-V2X communication module at the hardware layer by calling the LTE-V2X interface library, enabling C-V2X service interaction with other terminal devices.

[0158] The GBA interface library, USIM interface library, and HSM interface library are calling interfaces opened by the terminal's underlying hardware modules to upper-layer applications. They are used to call the GBA secure access authentication capabilities supported by the LTE-Uu communication module, the digital certificate management application capabilities and security capabilities provided by the USIM, and the secure storage and computing capabilities provided by the HSM.

[0159] Of course, the terminal device in the embodiment of the present invention is not limited to the Figure 4 As shown in , other architectural forms may also fall within the protection scope of the embodiments of the present invention.

[0160] The application client in this embodiment is responsible for implementing the CA management application function and managing the digital certificates of terminal devices. Figure 4 CA management application in .

[0161] In this embodiment, the application client triggers the USIM to generate a second key based on the first key via the baseband chip and calls the USIM interface library. The application client can generate a first certificate request message based on a "one-touch trigger," call the USIM's certificate reconstructing interface (i.e., the first USIM interface), and send the first certificate request message to the USIM via the baseband chip. Of course, in this embodiment, the first USIM interface is not limited to the USIM certificate reconstructing interface; other interface names for certificate reconstructing are also within the scope of protection of this embodiment. After receiving the first certificate request message, the USIM can generate a public-private key pair based on a random number generator within the Universal Integrated Circuit Card (UICC), complete the certificate request message in accordance with the protocol format requirements of the C-V2X specification, add the public key from the public-private key pair to the first certificate request message, and sign the first certificate request message using the private key from the public-private key pair to obtain a second certificate request message. The USIM then encrypts and / or integrity-protects the second certificate request message using the second key. The USIM then sends the processed second certificate request message to the application client via the baseband chip and the interface library.

[0162] The UICC is a secure hardware device with a security level of EAL 4+. It can be used to implement USIM functions and ensure the security of Ks_int_NAF (i.e., the first key). Specifically, the UICC can be understood as a universal architecture, or as a secure carrier. When the USIM function is implemented within this universal architecture, the USIM function is realized, thus becoming a USIM. The UICC can also implement many applications, meaning that the architecture can support the implementation of many functions. In the embodiments of the present invention, the USIM is implemented, so the USIM also has high security. Furthermore, performing operations such as certificate public and private key pair generation, cryptographic operations, and secure storage within the USIM effectively ensures terminal security. This avoids security risks such as sensitive information leakage caused by the calculation and storage of keys in unsecured devices such as the terminal CPU and memory, as is common in existing technologies. Furthermore, by using the existing USIM as a secure device on the terminal to perform the aforementioned security operations, the addition of new security hardware to the terminal can be avoided, thereby reducing the hardware implementation cost of the terminal.

[0163] For example, the digital certificate in this embodiment can also be called an enrollment certificate (EC), which is used to identify a trusted terminal device. Therefore, it is necessary to implement the initial security configuration of the digital certificate on the terminal device in a secure manner. Accordingly, the server in this embodiment can be an ECA server, that is, an authorized CA server.

[0164] In some optional embodiments of the present invention, sending the first request message includes: the application client sending the first request message to the server, the first request message including the second certificate request message encrypted and / or integrity protected by the second key; the first request message also includes: a bootstrapping-Transaction Identifier (B-TID) and / or a server fully qualified domain name (FQDN).

[0165] In some optional embodiments of the present invention, the method further includes: the terminal device receives a first response message from the server, performs integrity verification and / or decryption on the first response message based on the second key, and obtains the digital certificate carried in the first response message.

[0166] In this embodiment, illustratively, the first response message may be carried by a HyperText Transfer Protocol (HTTP) message, for example, by an HTTP 200OK message.

[0167] In some optional embodiments of the present invention, the terminal device includes: an application client, a baseband chip and a USIM; the terminal device receives a first response message from the server, performs integrity verification and / or decryption on the first response message based on the second key, and obtains the digital certificate carried in the first response message, including: the application client receives the first response message from the server, and sends the first response message to the USIM through the baseband chip; the USIM performs integrity verification and / or decryption on the first response message based on the second key; after the verification is passed, the USIM obtains the digital certificate carried in the first response message and stores the digital certificate in the security component.

[0168] In this embodiment, the application client receives the first response message from the CA server, calls the USIM security verification interface (i.e., the second USIM interface) to send the first response message to the USIM through the baseband chip; of course, in this embodiment, the second USIM interface is not limited to the USIM security verification interface, and other interfaces for security verification may also be within the protection scope of the embodiment of the present invention. The USIM performs integrity verification and / or decryption on the first response message based on the second key, wherein the first response message carries a second verification value, and the integrity verification is to verify the second verification value carried in the first response message; wherein, optionally, the second verification value may also be an HMAC value. For example, the USIM may calculate based on certain bits in the message to obtain a verification value, and then compare the verification value with the second verification value. If the comparison is consistent, it indicates that the integrity verification has passed. After the verification passes, the USIM obtains the digital certificate carried in the first response message.

[0169] In this embodiment, the USIM stores the digital certificate in a secure component. Exemplarily, the USIM (which may also include an HSM) is a local security entity / module in the terminal device, capable of providing a reliable and secure environment for data calculation, storage, and processing. To ensure the security of V2X service data, keys (e.g., sensitive parameters such as the primary key and public-private key pairs), digital certificates, and the operations involving them should generally be processed in a local security entity / module in the terminal device, thereby ensuring the security of the digital certificate security configuration process for C-V2X terminal devices.

[0170] Based on the above embodiments, an embodiment of the present invention further provides a configuration method for a terminal device. Figure 5 Schematic diagram of the configuration method of the terminal device according to the embodiment of the present invention Figure 2 ;like Figure 5 As shown, the method includes:

[0171] Step 201: The server receives a first request message from a terminal device; the first request message includes a certificate request message encrypted and / or integrity protected by a second key;

[0172] Step 202: Obtain the second key from the network device; the second key is generated by the network device based on the first key;

[0173] Step 203: Perform integrity verification and / or decryption on the first request message based on the second key, and issue a digital certificate after the first request message is authorized.

[0174] Step 204: Send a first response message to the terminal device, where the first response message includes the digital certificate.

[0175] In this embodiment, under the user's "one-click" trigger, the terminal device can automatically complete server access authentication and security channel establishment, key generation and digital certificate application, as well as subsequent digital certificate download and secure storage operations based on the GBA technical mechanism or AKMA authentication mechanism, thereby realizing the initial security configuration of the terminal device.

[0176] In this embodiment, the server receives the first request message from the terminal device through the secure channel established above. Exemplarily, the server may receive the first request message from the terminal device through a network device, i.e., the first request message is sent by the terminal device, arrives at the network device, and then is sent to the server via the network device.

[0177] In this embodiment, because the first request message includes a certificate request message encrypted and / or integrity-protected with a second key, the server needs to obtain the second key. Exemplarily, the server obtains the second key from the network device. During the GBA or AKMA authentication process performed by the terminal device, the terminal device and the network device negotiate a first key, which may also be referred to as a shared session key.

[0178] In some optional embodiments, the server obtains the second key from the network device, including: the server sends a second request message to the network device, where the second request message is used to request the second key; and the server receives a second response message sent by the network device, where the second response message includes the second key.

[0179] In this embodiment, the server may send a second request message to the network device, where the second request message is used to request a second key; after receiving the second request message, the network device generates a second key based on the pre-negotiated first key, and then sends a second response message to the server, where the second response message includes the second key, thereby enabling the server to obtain the second key.

[0180] In other optional implementations, after receiving the first request message sent by the terminal device to request a digital certificate, the network device may also generate a second key based on the pre-negotiated first key, and send the second key to the server during the process of sending the first request message to the server.

[0181] In some optional embodiments of the present invention, the first request message also includes: a B-TID; the server obtains the second key from the network device, including: the server queries whether there is a second key corresponding to the B-TID; if the query result is that there is no second key corresponding to the B-TID, obtaining the second key from the network device.

[0182] In this embodiment, the server may have pre-obtained the second key corresponding to the B-TID. Upon receiving the first request message, the server may first query whether the second key corresponding to the B-TID exists using the B-TID carried in the first request message. If the query result indicates that the second key corresponding to the B-TID does not exist, the server may obtain the second key from the network device. If the second key corresponding to the B-TID exists, the server may directly obtain the second key corresponding to the B-TID.

[0183] In this embodiment, since the message sent by the terminal device is encrypted and / or integrity protected by a second key, after obtaining the second key, the server performs integrity verification and / or decryption on the first request message based on the second key, and issues a digital certificate after the first request message is authorized.

[0184] In this embodiment, the certificate request message also includes a first verification value, which can be a HAMC value. The server can calculate based on certain bits in the first request message to obtain a verification value, and then compare the verification value with the first verification value. If the comparison is consistent, it indicates that the integrity check has passed.

[0185] In some optional embodiments of the present invention, the server sends a first response message to the terminal device, including: the server constructs a first response message including the digital certificate, encrypts and / or integrity protects the first response message based on the second key, adds a second check value to the first response message, and sends the first response message processed as described above to the terminal device. Similarly, adding the second check value here is also part of the process of integrity protection for the first response message. To more clearly explain how the subsequent terminal performs processing based on the first response message, the step of adding the second check value is emphasized in this embodiment.

[0186] In this embodiment, after issuing the digital certificate, the server constructs a first response message (or certificate response message) in accordance with the protocol format requirements of the C-V2X specification, performs calculations based on certain bits in the first response message to obtain a second check value, adds the second check value to the first response message, and sends the processed first response message to the terminal device. Exemplarily, the first response message can be carried via an HTTP message, such as an HTTP 200 OK message.

[0187] Based on the above embodiments, an embodiment of the present invention further provides a configuration method for a terminal device. Figure 6 Schematic diagram of the configuration method of the terminal device according to the embodiment of the present invention Figure 3 ;like Figure 6 As shown, the method includes:

[0188] Step 301: The network device generates a second key based on a pre-negotiated first key;

[0189] Step 302: Send the second key to the server.

[0190] In this embodiment, the network device may specifically be a NAF / AP. The terminal device executes a GBA authentication process or an AKMA authentication process to begin establishing a secure access connection (or secure channel, secure link, etc.) with the server. After authentication is complete, the terminal device and the network device have negotiated a first key, which may also be called a shared session key.

[0191] In some optional embodiments, the network device may receive a second request message from the server, where the second request message is used to request a second key. The network device then generates the second key based on the pre-negotiated first key and then sends a second response message to the server, where the second response message includes the second key, thereby enabling the server to obtain the second key. In other optional embodiments, after receiving a first request message from a terminal device requesting a digital certificate, the network device may also generate the second key based on the pre-negotiated first key and send the second key to the server during the process of sending the first request message to the server.

[0192] In some optional embodiments of the present invention, the method further includes: the network device and the terminal device negotiate the first key with the terminal device by executing a GBA authentication process or an AKMA authentication process.

[0193] By adopting the technical solution of the embodiment of the present invention and based on the GBA mechanism, the secure configuration of the digital certificate of the C-V2X terminal device can be achieved through a "one-click configuration" method. There is no need to modify the production line security environment or require professional security organizations to perform filling. This improves the flexibility of digital certificate configuration and reduces deployment difficulty and investment costs.

[0194] The configuration method of the terminal device according to the embodiment of the present invention is described below with reference to specific scenarios.

[0195] In this example, a C-V2X device is used as the terminal device, and a NAF / AP is used as the network device. The C-V2X device includes a USIM, a baseband chip, and an application client. The baseband chip can also be called a device modem, and the application client can also be called a C-V2X application client. The CA server in the above embodiment is called an application server or C-V2X application server in this example. Figure 7 Schematic diagram of the interactive process of the configuration method of the terminal device according to the embodiment of the present invention Figure 1 ;like Figure 7 As shown, the method includes:

[0196] Step 401: The C-V2X application client initiates a GBA start request to the baseband chip.

[0197] When the C-V2X device needs to be initialized and digital certificates configured, the application client calls the underlying baseband chip through the GBA interface library to start the GBA authentication process and begin to establish a secure access connection to the CA server (such as the ECA server).

[0198] Step 402: Execute the GBA authentication process and negotiate with the NAF / AP for a shared session key Ks_int_NAF (ie, the first key in the aforementioned embodiment).

[0199] Step 403: The baseband chip sends a GBA response corresponding to the GBA start request to the C-V2X application client.

[0200] Steps 404-408: When the GBA enhanced technology is adopted, the C-V2X application client transmits a message to the USIM through an interface call, that is, calling the USIM interface library (for example, the USIM reconstruction certificate request interface) to trigger the USIM to generate the application session key K* (that is, the second key) based on Ks_int_NAF; the USIM returns through the baseband chip and the interface, that is, calling the USIM interface library to transmit a message to the C-V2X application client to inform the C-V2X application client that the application session key K* has been generated.

[0201] Exemplarily, the message transmitted by the C-V2X application client to the USIM may carry the B-TID, IMPI and NAF identifier (ID); after receiving the message, the USIM generates an application session key K* based on Ks_int_NAF.

[0202] In steps 409 and 410, the C-V2X application client constructs a certificate request message (i.e., the aforementioned first certificate request message) to request a digital certificate from the CA server. The C-V2X application client invokes an interface, namely, calls the USIM's reconstructed certificate request interface, and transmits a message to the USIM via the baseband chip. The message carries the prepared certificate request message (i.e., the first certificate request message in the aforementioned embodiment).

[0203] Step 411: After receiving the certificate request message, the USIM generates a public-private key pair, adds the public key of the public-private key pair to the certificate request message, and signs the certificate request message using the private key of the public-private key pair to obtain a second certificate request message; encrypts and / or integrity protects the second certificate request message based on the second key, and adds an HMAC value to the second certificate request message.

[0204] Specifically, the USIM performs the following operations:

[0205] 1) Use the random number generator inside the UICC to generate the cryptographic public and private key pairs required for the EC digital certificate;

[0206] 2) Improve the certificate request message in accordance with the protocol requirements of the C-V2X specifications, including adding the public key of the generated public-private key pair;

[0207] 3) Use the private key in the public-private key pair to sign the certificate request message;

[0208] 4) Use the application session key K* to encrypt and integrity protect the certificate request message, and add the HMAC value to the message to obtain a second certificate request message.

[0209] Steps 412-413: The USIM returns through the baseband chip and the interface, that is, by calling the USIM interface library to transmit a message to the C-V2X application client. The transmitted message includes a second certificate request message encrypted and / or integrity protected by the application session key K*.

[0210] Step 414: The C-V2X application client sends a request message to the CA server. The request message carries the second certificate request message protected by K*, as well as information such as the B-TID and the Server FQDN.

[0211] Exemplarily, the request message is transmitted to the CA server via the NAF / AP.

[0212] In steps 415-417, the CA server interacts with the NAF / AP through a pre-established secure channel, requests the NAF / AP to generate an application session key K* based on Ks_int_NAF, and obtains the application session key K* and related information, such as the lifetime of the application session key K*.

[0213] The NAF / AP may send the application session key K* and related information to the CA server via an HTTP 200OK response message.

[0214] The request message sent by the CA server to the NAF / AP may also include information such as B-TID and Server FQDN.

[0215] Step 418: After the CA server obtains the application session key K*, it performs integrity verification and / or decrypts the request message based on the application session key K*, and issues a digital certificate after the request message is authorized; constructs a response message including the digital certificate, encrypts and / or integrity protects the response message based on the application session key K*, and adds an HMAC value to the response message.

[0216] Specifically, the CA server can perform the following operations:

[0217] 1) Use the application session key K* to verify the HMAC value of the request message and decrypt the message;

[0218] 2) Perform authorization verification on the certificate request message; if the authorization verification passes, issue a digital certificate for the C-V2X device;

[0219] 3) Construct a response message in accordance with the protocol requirements of the C-V2X specifications, which includes the issued digital certificate;

[0220] 4) Use the application session key K* to encrypt and integrity protect the response message, and add the HMAC value to the response message.

[0221] Step 419: The CA server returns a response message protected by the application session key K* to the C-V2X application client. Exemplarily, the response message may be carried by an HTTP 200 OK message.

[0222] Steps 420-421: The C-V2X application client calls the USIM security verification interface through the interface and transmits a message to the USIM via the baseband chip. The transmitted message carries the response message protected by the application session key K*.

[0223] In steps 422-424, the USIM uses the application session key K* to perform integrity check and / or decrypt the response message. After successful verification, the USIM securely stores the digital certificate issued by the CA server in the security component, returns it through the interface, and transmits a result status indication to the C-V2X application client via the baseband chip.

[0224] An embodiment of the present invention further provides a configuration device for a terminal device, which is applied to the terminal device. Figure 8 Schematic diagram of the configuration device of the terminal device according to the embodiment of the present invention Figure 1 ;like Figure 8 As shown, the device includes: a first generating unit 11 and a first communication unit 12; wherein,

[0225] The first generating unit 11 is configured to generate a second key based on the first key, and encrypt and / or integrity protect the certificate request message based on the second key;

[0226] The first communication unit 12 is configured to send a first request message, where the first request message includes the certificate request message encrypted and / or integrity protected by the second key.

[0227] In some optional embodiments of the present invention, the first communication unit 12 is further used to receive a first response message from the server, perform integrity verification and / or decrypt the first response message based on the second key, and obtain the digital certificate carried in the first response message.

[0228] In some optional embodiments of the present invention, the first generating unit 11 includes: an application client, a baseband chip and a USIM;

[0229] The application client is configured to trigger, through the baseband chip, the USIM to generate a second key based on the first key; and is further configured to generate a first certificate request message and send the first certificate request message to the USIM through the baseband chip;

[0230] The USIM is configured to generate a public-private key pair, add the public key of the public-private key pair to the first certificate request message, and sign the first certificate request message using the private key of the public-private key pair to obtain a second certificate request message; encrypt and / or integrity protect the second certificate request message based on the second key, and add a first check value to the second certificate request message; and send the second certificate request message encrypted and / or integrity protected by the second key to the application client through the baseband chip.

[0231] In some optional embodiments of the present invention, the application client is used to send a first request message to the server through the first communication unit 12, wherein the first request message includes the second certificate request message encrypted and / or integrity protected by the second key; the first request message also includes: B-TID and / or server FQDN.

[0232] In some optional embodiments of the present invention, the first generating unit 11 includes: an application client, a baseband chip and a USIM;

[0233] The application client is configured to receive a first response message from the server through the first communication unit 12, and send the first response message to the USIM through the baseband chip;

[0234] The USIM is configured to perform integrity verification and / or decryption on the first response message based on the second key; after the verification is passed, obtain the digital certificate carried in the first response message and store the digital certificate in a security component.

[0235] In some optional embodiments of the present invention, the apparatus further includes a first execution unit, configured to execute a GBA authentication process or an AKMA authentication process, and negotiate the first key with the network device.

[0236] In an embodiment of the present invention, the first generation unit 11, the first communication unit 12 and the first execution unit in the device can all be implemented in actual applications by a central processing unit (CPU), a digital signal processor (DSP), a microcontroller unit (MCU) or a programmable gate array (FPGA) combined with a communication module (including: basic communication kit, operating system, communication module, standardized interface and protocol, etc.) and a transceiver antenna.

[0237] An embodiment of the present invention further provides a configuration device for a terminal device, which is applied to a server. Figure 9 Schematic diagram of the configuration device of the terminal device according to the embodiment of the present invention Figure 2 ;like Figure 9 As shown, the device includes: a second communication unit 21 and a verification unit 22; wherein,

[0238] The second communication unit 21 is configured to receive a first request message from a terminal device; the first request message includes a certificate request message encrypted and / or integrity protected by a second key;

[0239] The verification unit 22 is configured to obtain the second key from the network device; the second key is generated by the network device based on the first key; and is further configured to perform integrity verification and / or decryption on the first request message based on the second key, and issue a digital certificate after the first request message is authorized.

[0240] The second communication unit 21 is further configured to send a first response message to the terminal device, where the first response message includes the digital certificate.

[0241] In some optional embodiments of the present invention, the second communication unit 21 is used to construct a first response message including the digital certificate, encrypt and / or integrity protect the first response message based on the second key, add a second check value to the first response message, and send the first response message after the above processing to the terminal device.

[0242] In some optional embodiments of the present invention, the first request message further includes: a B-TID;

[0243] The apparatus further includes a second execution unit configured to query whether a second key corresponding to the B-TID exists; if the query result shows that the second key corresponding to the B-TID does not exist, obtain the second key from the network device through the second communication unit.

[0244] In some optional embodiments of the present invention, the second communication unit 21 is used to send a second request message to the network device, where the second request message is used to request the second key; and receive a second response message sent by the network device, where the second response message includes the second key.

[0245] In an embodiment of the present invention, the second communication unit 21 and the verification unit 22 in the device can be implemented in actual applications by a CPU, DSP, MCU or FPGA combined with a communication module (including: basic communication kit, operating system, communication module, standardized interface and protocol, etc.) and a transceiver antenna.

[0246] An embodiment of the present invention further provides a terminal device configuration apparatus, which is applied to a network device. Figure 10 Schematic diagram of the configuration device of the terminal device according to the embodiment of the present invention Figure 3 ;like Figure 10 As shown, the device includes a second generating unit 31 and a third communication unit 32; wherein,

[0247] The second generating unit 31 is configured to generate a second key based on the pre-negotiated first key;

[0248] The third communication unit 32 is configured to send the second key to the server.

[0249] In some optional embodiments of the present invention, the apparatus further includes a second execution unit, configured to negotiate the first key with the terminal device by executing a GBA authentication process or an AKMA authentication process with the terminal device.

[0250] In some optional embodiments of the present invention, the second generating unit 31 is configured to generate a corresponding second key for each server based on the pre-negotiated first key;

[0251] The third communication unit 32 is configured to send the corresponding second key to each server respectively.

[0252] In some optional embodiments of the present invention, the third communication unit 32 is used to receive a second request message sent by the server, where the second request message is used to request the second key; and send a second response message to the server, where the second response message includes the second key generated by the second generation unit 31.

[0253] In an embodiment of the present invention, the second generation unit 31, the third communication unit 32 and the second execution unit in the device can all be implemented in actual applications by a CPU, DSP, MCU or FPGA combined with a communication module (including: basic communication kit, operating system, communication module, standardized interface and protocol, etc.) and a transceiver antenna.

[0254] It should be noted that the configuration apparatus for a terminal device provided in the above embodiment only uses the division of the above-mentioned program modules as an example for explanation during configuration. In actual applications, the above-mentioned processing can be assigned to different program modules as needed, that is, the internal structure of the device can be divided into different program modules to complete all or part of the above-described processing. In addition, the configuration apparatus for a terminal device provided in the above embodiment and the embodiment of the method for configuring a terminal device are based on the same concept. The specific implementation process is detailed in the method embodiment and will not be repeated here.

[0255] An embodiment of the present invention also provides a configuration method for a terminal device. Figure 11 Schematic diagram of the configuration method of the terminal device according to the embodiment of the present invention Figure 4 ;like Figure 11 As shown, the method includes:

[0256] Step 501: The terminal device generates a second key based on the first key, and encrypts and / or integrity protects part or all of the first message based on the second key;

[0257] Step 502: Send a first message.

[0258] The configuration method of the terminal device of this embodiment (hereinafter referred to as the method) is applied to the terminal device. The terminal device can specifically be a vehicle network terminal device (also referred to as a C-V2X Device). In some optional embodiments, the vehicle network terminal device can be, for example, an OBU, an RSU, etc.; in other optional embodiments, the vehicle network terminal device can also be a pedestrian's handheld device, a wearable device, etc.

[0259] In some optional embodiments of the present invention, the method further includes: the terminal device executing a GBA authentication process or an AKMA authentication process to negotiate the first key with the network device. The specific process can be found in the detailed description of the terminal device configuration method in the above embodiment, and will not be repeated here.

[0260] In some optional embodiments of the present invention, the terminal device includes: an application client, a baseband chip and a USIM; the terminal device generates a second key based on a first key, and encrypts and / or integrity protects part or all of the first message based on the second key, including: the application client triggers the USIM to generate a second key based on the first key through the baseband chip; the application client generates a first message and sends the first message to the USIM through the baseband chip; the USIM encrypts and / or integrity protects part or all of the first message based on the second key; the USIM sends the first message after the above processing to the application client through the baseband chip.

[0261] In this embodiment, the second key may consist of only one key or multiple keys (i.e., the multiple keys herein are all generated based on the first key and are collectively referred to as the second key). In one feasible implementation, the second key consists of multiple keys, such as an encryption key and / or an integrity protection key. Of course, other types of keys may also be included as needed, which will not be described in detail here. Furthermore, the USIM encrypts and / or integrity protects part or all of the first message based on the second key. The specific encryption and / or integrity protection process can be referred to as described in the aforementioned embodiment and will not be described in detail here.

[0262] In this embodiment, the first message may be any message, information, etc. sent by the terminal device to the server.

[0263] In some optional embodiments of the present invention, sending the first message includes: the application client sending the first message to the server; the first message also includes: B-TID and / or FQDN of the server; or includes: AKMA key identifier (A-KID) and / or FQDN.

[0264] In some optional embodiments of the present invention, the method further includes: the terminal device receiving a second message from the server, and performing integrity verification and / or decryption on the second message based on the second key.

[0265] In this embodiment, the second message may be any message, information, etc. sent by the server to the terminal device.

[0266] In some optional embodiments of the present invention, the terminal device includes: an application client, a baseband chip and a USIM; the terminal device receives a second message from the server and performs integrity verification and / or decryption on the second message based on the second key, including: the application client receives the second message from the server and sends the second message to the USIM through the baseband chip; the USIM performs integrity verification and / or decryption on the second message based on the second key.

[0267] In this embodiment, the application client receives the second message from the server and invokes the USIM security verification interface to send the second message to the USIM via the baseband chip. Of course, the interface in this embodiment is not limited to the USIM security verification interface; other interfaces for security verification are also within the scope of protection of this embodiment of the present invention. The USIM performs integrity verification and / or decryption on the second message based on the second key. The specific process of integrity verification and / or decryption can be referred to as described in the previous embodiment and will not be repeated here. The USIM then returns the decrypted plaintext information and / or processing results to the application client.

[0268] Based on the above embodiments, an embodiment of the present invention further provides a configuration method for a terminal device. Figure 12 Schematic diagram of the configuration method of the terminal device according to the embodiment of the present invention Figure 4 ;like Figure 12 As shown, the method includes:

[0269] Step 601: The server receives a first message from a terminal device, wherein part or all of the first message is encrypted and / or integrity protected by a second key;

[0270] Step 602: The server obtains the second key from the network device; the second key is generated by the network device based on the first key;

[0271] Step 603: The server performs integrity verification and / or decryption on the first message based on the second key.

[0272] In this embodiment, under the user's "one-click" trigger, the terminal device can automatically complete server access authentication, establishment of a secure channel, key generation and other operations based on the GBA technical mechanism or the AKMA authentication mechanism, thereby realizing the initial security configuration of the terminal device.

[0273] In this embodiment, the server receives the first message from the terminal device through the secure channel established above. Exemplarily, the server may receive the first message from the terminal device through a network device, that is, the first request message is sent by the terminal device, arrives at the network device, and then the first message is sent to the server through the network device.

[0274] In this embodiment, because part or all of the first message is encrypted and / or integrity-protected using the second key, the server needs to obtain the second key. Exemplarily, the server obtains the second key from the network device. During the GBA or AKMA authentication process performed by the terminal device, the terminal device and the network device negotiate a first key, which may also be referred to as a shared session key.

[0275] In some optional embodiments, the server obtains the second key from the network device, including: the server sends a third message to the network device, the third message is used to request the second key; the server receives a fourth message sent by the network device, the fourth message includes the second key.

[0276] In this embodiment, the server may send a third message to the network device, where the third message is used to request the second key; after receiving the third message, the network device generates a second key based on the pre-negotiated first key, and then sends a fourth message to the server, where the fourth message includes the second key, thereby enabling the server to obtain the second key.

[0277] In other optional implementations, after receiving the first message sent by the terminal device, the network device may also generate a second key based on the pre-negotiated first key, and send the second key to the server during the process of sending the first message to the server.

[0278] In some optional embodiments of the present invention, the first message further includes: a B-TID, or an AKMA key identifier (A-KID); the server obtains the second key from the network device, including: the server queries whether there is a second key corresponding to the B-TID or the A-KID; if the query result is that there is no second key corresponding to the B-TID or the A-KID, obtaining the second key from the network device.

[0279] In this embodiment, the server may have pre-obtained the second key corresponding to the B-TID. Upon receiving the first request message, the server may first query whether the second key corresponding to the B-TID exists using the B-TID carried in the first request message. If the query result indicates that the second key corresponding to the B-TID does not exist, the server may obtain the second key from the network device. If the second key corresponding to the B-TID exists, the server may directly obtain the second key corresponding to the B-TID.

[0280] In some optional embodiments of the present invention, the method further includes: the server encrypting and / or integrity protecting part or all of the second message based on the second key; and sending the second message.

[0281] In this embodiment, when the server is about to send a second message to the terminal device, it constructs the second message in accordance with the protocol format requirements of the relevant specifications, and specifically encrypts and / or integrity protects part or all of the second message based on the second key. The specific process of encryption and / or integrity protection can be referred to as described in the aforementioned embodiments and will not be repeated here.

[0282] The configuration method of the terminal device according to the embodiment of the present invention is described below with reference to specific scenarios.

[0283] In this example, the terminal device is a UE and the network device is an AF. The UE includes a USIM, a baseband chip, and an application client. The baseband chip can also be called a device modem, and the application client can also be called a C-V2X application client. The server in the above embodiment is called an application server or a C-V2X application server in this example. Figure 13 Schematic diagram of the interactive process of the configuration method of the terminal device according to the embodiment of the present invention Figure 2 ;like Figure 13 As shown, the method includes:

[0284] Step 701: The UE starts AKMA.

[0285] When the C-V2X device needs to be initialized and digital certificates configured, the application client calls the underlying baseband chip through the GBA interface library to start the GBA authentication process and begin to establish a secure access connection to the CA server (such as the ECA server).

[0286] Step 702: Execute the AKMA authentication process and negotiate with AF to share the session key K AF (i.e., the first key in the aforementioned embodiment).

[0287] Step 703: UE obtains the shared session key K AF .

[0288] Step 704-step 705, UE uses the shared session key K AF Generate an application session key K*, and use the application session key K* to encrypt and / or integrity protect the message (uplink message).

[0289] For example, the application client sends a message to the USIM through the baseband chip, and the message may carry information such as B-TID; after receiving the message, the USIM uses the shared session key K AF Generate an application session key K*, and use the application session key K* to encrypt or integrity protect part or all of the message, and send the processed message to the application client through the baseband chip.

[0290] Step 706: The UE sends a message (ie, an uplink message) to the application server. The message carries the uplink message protected by the application session key K* as well as information such as the B-TID and the Server FQDN.

[0291] Wherein, illustratively, the message is transmitted to the application server via AF.

[0292] Steps 707-709: The application server interacts with the AF through a pre-established secure channel, requesting the AF to share the session key K AF Generate an application session key K*, and obtain the application session key K* and related information thereof, such as the lifetime of the application session key K*.

[0293] The AF may send the application session key K* and related information to the application server via an HTTP 200OK response message.

[0294] The request message sent by the application server to the AF may also include information such as B-TID and Server FQDN.

[0295] Step 710: After obtaining the application session key K*, the application server uses the application session key K* to perform integrity check and / or decryption on the message.

[0296] The above is the transmission process of the uplink message between the terminal and the application server.

[0297] Step 711: The application server uses the application session key K* to encrypt and / or integrity protect the message (downlink message).

[0298] Step 712: The application server sends a message (downlink message) to the UE.

[0299] Step 713: The UE uses the application session key K* to perform integrity check and / or decryption on the message.

[0300] Step 714: The UE and the application server may use the application session key K* to securely transmit uplink and downlink messages.

[0301] Based on the above embodiments, an embodiment of the present invention further provides a configuration device for a terminal device, which is applied to the terminal device. Figure 14 Schematic diagram of the configuration device of the terminal device according to the embodiment of the present invention Figure 4 ;like Figure 14 As shown, the device includes: a third generating unit 51 and a fourth communication unit 52; wherein,

[0302] The third generating unit 51 is configured to generate a second key based on the first key, and encrypt and / or integrity protect part or all of the first message based on the second key;

[0303] The fourth communication unit 52 is configured to send a first message.

[0304] In some optional embodiments of the present invention, the fourth communication unit 52 is further configured to receive a second message from the server, and perform integrity verification and / or decryption on the second message based on the second key.

[0305] In some optional embodiments of the present invention, the third generating unit 51 includes: an application client, a baseband chip and a USIM;

[0306] The application client is configured to trigger, through the baseband chip, the USIM to generate a second key based on the first key; and is further configured to generate a first message and send the first message to the USIM through the baseband chip;

[0307] The USIM is used to encrypt and / or integrity protect part or all of the first message based on the second key; and is also used to send the first message after the above processing to the application client through the baseband chip.

[0308] In some optional embodiments of the present invention, the application client is further configured to send the first message to the server;

[0309] The first message further includes: B-TID and / or FQDN of the server; or includes: AKMA key identifier (A-KID) and / or FQDN.

[0310] In some optional embodiments of the present invention, the third generating unit 51 includes: an application client, a baseband chip and a universal subscriber identity module USIM;

[0311] The application client is configured to receive a second message from the server and send the second message to the USIM through the baseband chip;

[0312] The USIM is configured to perform integrity verification and / or decryption on the second message based on the second key.

[0313] In an embodiment of the present invention, the third generation unit 51 and the fourth communication unit 52 in the device can be implemented in actual applications by a CPU, DSP, MCU or FPGA combined with a communication module (including: basic communication kit, operating system, communication module, standardized interface and protocol, etc.) and a transceiver antenna.

[0314] An embodiment of the present invention further provides a configuration device for a terminal device, which is applied to a server. Figure 15 Schematic diagram of the configuration device of the terminal device according to the embodiment of the present invention Figure 4 ;like Figure 15 As shown, the device includes: a fifth communication unit 61 and a second verification unit 62; wherein,

[0315] The fifth communication unit 61 is configured to receive a first message from a terminal device, wherein part or all of the first message is encrypted and / or integrity protected by a second key;

[0316] The second verification unit 62 is configured to obtain the second key from the network device; the second key is generated by the network device based on the first key; and is further configured to perform integrity verification and / or decryption on the first message based on the second key.

[0317] In some optional embodiments of the present invention, the apparatus further includes a fourth generating unit, configured to encrypt and / or integrity protect part or all of the second message based on the second key;

[0318] The fifth communication unit 61 is further configured to send a second message.

[0319] In some optional embodiments of the present invention, the first message further includes: a B-TID, or an AKMA key identifier (A-KID);

[0320] The apparatus further includes a third execution unit, configured to query whether a second key corresponding to the B-TID or the A-KID exists;

[0321] The second verification unit 62 is configured to obtain the second key from the network device through the fifth communication unit 61 if the query result obtained by the third execution unit is that there is no second key corresponding to the B-TID or the A-KID.

[0322] In an embodiment of the present invention, the fifth communication unit 61, the second verification unit 62 and the third execution unit in the device can all be implemented in actual applications by a CPU, DSP, MCU or FPGA combined with a communication module (including: basic communication kit, operating system, communication module, standardized interface and protocol, etc.) and a transceiver antenna.

[0323] It should be noted that the configuration apparatus for a terminal device provided in the above embodiment only uses the division of the above-mentioned program modules as an example for explanation during configuration. In actual applications, the above-mentioned processing can be assigned to different program modules as needed, that is, the internal structure of the device can be divided into different program modules to complete all or part of the above-described processing. In addition, the configuration apparatus for a terminal device provided in the above embodiment and the embodiment of the method for configuring a terminal device are based on the same concept. The specific implementation process is detailed in the method embodiment and will not be repeated here.

[0324] An embodiment of the present invention also provides a communication device. Figure 16 FIG. 1 is a schematic diagram of the hardware structure of a communication device according to an embodiment of the present invention. Figure 16 As shown, the communication device includes a memory 42, a processor 41, and a computer program stored in the memory 42 and executable on the processor 41. When the processor 41 executes the program, the steps of the configuration method of the terminal device in the terminal device as described above in the embodiment of the present invention are implemented; or, when the processor 41 executes the program, the steps of the configuration method of the terminal device in the server as described above in the embodiment of the present invention are implemented; or, when the processor 41 executes the program, the steps of the configuration method of the terminal device in the network device as described above in the embodiment of the present invention are implemented.

[0325] Optionally, the communication device may further include one or more network interfaces 43. It is understood that the various components in the communication device are coupled together via a bus system 44. It is understood that the bus system 44 is used to achieve connection and communication between these components. In addition to the data bus, the bus system 44 also includes a power bus, a control bus, and a status signal bus. However, for the sake of clarity, Figure 16 Various buses are labeled as bus system 44 .

[0326] It is understood that the memory 42 can be a volatile memory or a non-volatile memory, or can include both volatile and non-volatile memories. Among them, the non-volatile memory can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), a magnetic random access memory (FRAM), a flash memory, a magnetic surface memory, an optical disk, or a compact disc read-only memory (CD-ROM); the magnetic surface memory can be a magnetic disk or a magnetic tape. The volatile memory can be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of RAM are available, such as static random access memory (SRAM), synchronous static random access memory (SSRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDRSDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM), and direct rambus random access memory (DRRAM).The memory 42 described in the embodiments of the present invention is intended to include, but is not limited to, these and any other suitable types of memory.

[0327] The methods disclosed in the above embodiments of the present invention can be applied to or implemented by processor 41. Processor 41 may be an integrated circuit chip with signal processing capabilities. During implementation, each step of the above method can be completed by hardware integrated logic circuits in processor 41 or by software instructions. The above processor 41 may be a general-purpose processor, a DSP, or other programmable logic device, a discrete gate or transistor logic device, a discrete hardware component, etc. Processor 41 can implement or execute the various methods, steps, and logic block diagrams disclosed in the embodiments of the present invention. A general-purpose processor may be a microprocessor or any conventional processor. The steps of the methods disclosed in the embodiments of the present invention can be directly implemented and executed by a hardware decoding processor, or by a combination of hardware and software modules in the decoding processor. The software module may be located in a storage medium located in memory 42. Processor 41 reads the information in memory 42 and, in conjunction with its hardware, completes the steps of the above method.

[0328] In an exemplary embodiment, the communication device may be implemented by one or more application-specific integrated circuits (ASICs), DSPs, programmable logic devices (PLDs), complex programmable logic devices (CPLDs), FPGAs, general-purpose processors, controllers, MCUs, microprocessors, or other electronic components to perform the aforementioned method.

[0329] In an exemplary embodiment, the present invention further provides a computer-readable storage medium, such as a memory 42 including a computer program. The computer program can be executed by a processor 41 of a communication device to perform the steps of the aforementioned method. The computer-readable storage medium can be a memory such as FRAM, ROM, PROM, EPROM, EEPROM, Flash Memory, magnetic surface mount storage, optical disk, or CD-ROM; or various devices including any one or any combination of the aforementioned memories.

[0330] An embodiment of the present invention also provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the configuration method of a terminal device as described above in the embodiment of the present invention applied to a terminal device; or, when executed by a processor, implements the steps of the configuration method of a terminal device as described above in the embodiment of the present invention applied to a server; or, when executed by a processor, implements the steps of the configuration method of a terminal device as described above in the embodiment of the present invention applied to a network device.

[0331] The methods disclosed in the several method embodiments provided in this application can be arbitrarily combined without conflict to obtain new method embodiments.

[0332] The features disclosed in the several product embodiments provided in this application can be arbitrarily combined without conflict to obtain new product embodiments.

[0333] The features disclosed in the several method or device embodiments provided in this application can be arbitrarily combined without conflict to obtain new method embodiments or device embodiments.

[0334] In the several embodiments provided in this application, it should be understood that the disclosed devices and methods can be implemented in other ways. The device embodiments described above are merely schematic. For example, the division of the units is merely a logical function division. In actual implementation, there may be other division methods, such as: multiple units or components can be combined, or can be integrated into another system, or some features can be ignored or not executed. In addition, the coupling, direct coupling, or communication connection between the components shown or discussed can be through some interfaces, and the indirect coupling or communication connection of the devices or units can be electrical, mechanical or other forms.

[0335] The units described above as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units; some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0336] In addition, all functional units in the embodiments of the present invention may be integrated into one processing unit, or each unit may be separately used as a unit, or two or more units may be integrated into one unit; the above-mentioned integrated units may be implemented in the form of hardware or in the form of hardware plus software functional units.

[0337] Those skilled in the art will understand that all or part of the steps of implementing the above-mentioned method embodiment can be completed by hardware related to program instructions, and the aforementioned program can be stored in a computer-readable storage medium. When the program is executed, it executes the steps of the above-mentioned method embodiment; and the aforementioned storage medium includes: mobile storage devices, ROM, RAM, disks or optical disks, etc. Various media that can store program codes.

[0338] Alternatively, if the above-mentioned integrated unit of the present invention is implemented in the form of a software functional module and sold or used as an independent product, it can also be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the embodiment of the present invention, or the part that contributes to the prior art, can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes a number of instructions for enabling a computer device (which can be a personal computer, server, or network device, etc.) to execute all or part of the methods described in each embodiment of the present invention. The aforementioned storage medium includes: various media that can store program codes, such as mobile storage devices, ROM, RAM, magnetic disks or optical disks.

[0339] The above description is merely a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any modifications or substitutions that can be easily conceived by a person skilled in the art within the technical scope disclosed in the present invention should be included in the scope of protection of the present invention. Therefore, the scope of protection of the present invention should be based on the scope of protection of the claims.

Claims

1. A configuration method for a terminal device, characterized in that: The method comprises: The terminal device generates a second key based on the first key, and encrypts and / or integrity protects the certificate request message based on the second key; the first key is generated by negotiation between the terminal device and the network device; Sending a first request message to a server, where the first request message includes the certificate request message encrypted and / or integrity protected by the second key; The terminal device includes: an application client, a baseband chip, and a universal subscriber identity module (USIM); the terminal device generates a second key based on a first key, and encrypts and / or integrity protects a certificate request message based on the second key, including: The application client triggers the USIM to generate a second key based on the first key through the baseband chip; The application client generates a first certificate request message, and sends the first certificate request message to the USIM through the baseband chip; The USIM generates a public-private key pair, adds the public key of the public-private key pair to the first certificate request message, and signs the first certificate request message using the private key of the public-private key pair to obtain a second certificate request message; The USIM encrypts and / or integrity protects the second certificate request message based on the second key, and adds a first verification value to the second certificate request message; The USIM sends the second certificate request message processed as above to the application client through the baseband chip.

2. The method according to claim 1, characterized in that The method further comprises: The terminal device receives a first response message from the server, performs integrity verification and / or decryption on the first response message based on the second key, and obtains the digital certificate carried in the first response message.

3. The method according to claim 1, characterized in that The sending of the first request message includes: The application client sends a first request message to the server, where the first request message includes the second certificate request message encrypted and / or integrity protected by the second key; The first request message also includes: a bootstrapping transaction identifier B-TID and / or a fully qualified domain name FQDN of the server.

4. The method according to claim 2, characterized in that The terminal device includes: an application client, a baseband chip and a USIM; The terminal device receives a first response message from the server, performs integrity verification and / or decrypts the first response message based on the second key, and obtains the digital certificate carried in the first response message, including: The application client receives the first response message from the server, and sends the first response message to the USIM through the baseband chip; performing, by the USIM, integrity verification and / or decryption on the first response message based on the second key; After the verification is passed, the USIM obtains the digital certificate carried in the first response message and stores the digital certificate in a security component.

5. The method according to claim 1, characterized in that The method further comprises: The terminal device executes a general bootstrapping architecture (GBA) authentication process or an application-oriented authentication or key management (AKMA) authentication process to negotiate the first key with the network device.

6. A configuration method for a terminal device, characterized in that: The method comprises: The server receives a first request message from a terminal device; the first request message includes a certificate request message encrypted and / or integrity-protected by a second key generated by the terminal device; The server obtains the second key from the network device; the second key is generated by the network device based on the first key; the first key is generated by negotiation between the terminal device and the network device; The server performs integrity verification and / or decryption on the first request message based on the second key, and issues a digital certificate after authorizing the first request message; The server sends a first response message to the terminal device, where the first response message includes the digital certificate; In which, the terminal device includes: an application client, a baseband chip and a universal user identity module USIM; the second key generated by the terminal device is generated by the USIM based on the first key when the application client triggers the USIM through the baseband chip; the certificate request message encrypted and / or integrity protected by the second key generated by the terminal device is encrypted and / or integrity protected by the USIM based on the second key pair generated by the terminal device, and a first check value is added to the second certificate request message, and is sent by the USIM to the application client through the baseband chip; the second certificate request message is obtained by the USIM generating a public-private key pair, adding the public key in the public-private key pair to the first certificate request message, and signing the first certificate request message using the private key in the public-private key pair; the first certificate request message is generated by the application client and sent to the USIM through the baseband chip.

7. The method according to claim 6, characterized in that The server sends a first response message to the terminal device, including: The server constructs a first response message including the digital certificate, encrypts and / or integrity protects the first response message based on the second key, and adds a second check value to the first response message; Sending a first response message after the above processing to the terminal device.

8. The method according to claim 6, characterized in that The first request message also includes: a bootstrapping transaction identifier B-TID; The server obtains the second key from the network device, including: The server queries whether there is a second key corresponding to the B-TID; If the query result shows that there is no second key corresponding to the B-TID, the second key is obtained from the network device.

9. The method according to claim 6, characterized in that The server obtains the second key from the network device, including: The server sends a second request message to the network device, where the second request message is used to request the second key; The server receives a second response message sent by the network device, where the second response message includes the second key.

10. A configuration method for a terminal device, characterized in that: The method comprises: The network device generates a second key based on a pre-negotiated first key, and sends the second key to the server, where the first key is generated by negotiation between the terminal device and the network device; the first key is used by the terminal device to generate the second key, so as to send a first request message including a certificate request message encrypted and / or integrity-protected by the second key to the server; In which, the terminal device includes: an application client, a baseband chip and a universal user identity module USIM; the second key generated by the terminal device is generated by the USIM based on the first key when the application client triggers the USIM through the baseband chip; the certificate request message encrypted and / or integrity protected by the second key is encrypted and / or integrity protected by the USIM based on the second key pair to obtain a second certificate request message, and a first check value is added to the second certificate request message, and is sent by the USIM to the application client through the baseband chip; the second certificate request message is obtained by the USIM generating a public-private key pair, adding the public key in the public-private key pair to the first certificate request message, and signing the first certificate request message using the private key in the public-private key pair; the first certificate request message is generated by the application client and sent to the USIM through the baseband chip.

11. The method according to claim 10, characterized in that The method further comprises: The network device negotiates the first key with the terminal device by executing a General Bootstrapping Architecture (GBA) authentication process or an Application-Oriented Authentication and Key Management (AKMA) authentication process.

12. The method according to claim 10, characterized in that The network device generates a second key based on a pre-negotiated first key, and sends the second key to the server, including: The network device generates a corresponding second key for each server based on the pre-negotiated first key, and sends the corresponding second key to each server.

13. The method according to any one of claims 10 to 12, characterized in that The network device generates a second key based on a pre-negotiated first key, and sends the second key to the server, including: The network device receives a second request message sent by the server, where the second request message is used to request the second key; The network device generates a second key based on the pre-negotiated first key, and sends a second response message to the server, where the second response message includes the second key.

14. A configuration device for a terminal device, characterized in that: The device includes: a first generating unit and a first communicating unit; wherein, The first generating unit is configured to generate a second key based on the first key, and encrypt and / or integrity protect the certificate request message based on the second key; the first key is generated through negotiation with the network device; The first communication unit is configured to send a first request message to a server, where the first request message includes the certificate request message encrypted and / or integrity protected by the second key; The first generating unit includes: an application client, a baseband chip and a universal subscriber identity module USIM; The application client is configured to trigger, through the baseband chip, the USIM to generate a second key based on the first key; and is further configured to generate a first certificate request message and send the first certificate request message to the USIM through the baseband chip; The USIM is configured to generate a public-private key pair, add the public key of the public-private key pair to the first certificate request message, and sign the first certificate request message using the private key of the public-private key pair to obtain a second certificate request message; encrypt and / or integrity protect the second certificate request message based on the second key, and add a first check value to the second certificate request message; and send the second certificate request message encrypted and / or integrity protected by the second key to the application client through the baseband chip.

15. The device according to claim 14, characterized in that The first communication unit is further configured to receive a first response message from the server, perform integrity verification and / or decrypt the first response message based on the second key, and obtain the digital certificate carried in the first response message.

16. The device according to claim 14, characterized in that The application client is configured to send a first request message to a server through the first communication unit, where the first request message includes the second certificate request message encrypted and / or integrity protected by the second key; The first request message also includes: a bootstrapping transaction identifier B-TID and / or a server fully qualified domain name FQDN.

17. The device according to claim 15, characterized in that The first generating unit includes: an application client, a baseband chip and a universal subscriber identity module USIM; The application client is configured to receive a first response message from the server through the first communication unit, and send the first response message to the USIM through the baseband chip; The USIM is configured to perform integrity verification and / or decryption on the first response message based on the second key; after the verification is passed, obtain the digital certificate carried in the first response message and store the digital certificate in a security component.

18. The device according to claim 14, characterized in that The apparatus further includes a first execution unit, configured to execute a General Bootstrapping Architecture (GBA) authentication process or an Application-Oriented Authentication and Key Management (AKMA) authentication process, and negotiate the first key with the network device.

19. A configuration device for a terminal device, characterized in that: The device includes: a second communication unit and a first verification unit; wherein, The second communication unit is configured to receive a first request message from a terminal device; the first request message includes a certificate request message encrypted and / or integrity protected by a second key generated by the terminal device; The first verification unit is configured to obtain the second key from the network device; the second key is generated by the network device based on the first key; and is further configured to perform integrity verification and / or decryption on the first request message based on the second key, and to issue a digital certificate after authorization of the first request message is passed; the first key is generated by negotiation between the terminal device and the network device; The second communication unit is further configured to send a first response message to the terminal device, where the first response message includes the digital certificate; In which, the terminal device includes: an application client, a baseband chip and a universal user identity module USIM; the second key generated by the terminal device is generated by the USIM based on the first key when the application client triggers the USIM through the baseband chip; the certificate request message encrypted and / or integrity protected by the second key generated by the terminal device is encrypted and / or integrity protected by the USIM based on the second key pair generated by the terminal device, and a first check value is added to the second certificate request message, and is sent by the USIM to the application client through the baseband chip; the second certificate request message is obtained by the USIM generating a public-private key pair, adding the public key in the public-private key pair to the first certificate request message, and signing the first certificate request message using the private key in the public-private key pair; the first certificate request message is generated by the application client and sent to the USIM through the baseband chip.

20. The device according to claim 19, characterized in that The second communication unit is used to construct a first response message including the digital certificate, encrypt and / or integrity protect the first response message based on the second key, add a second check value to the first response message, and send the first response message after the above processing to the terminal device.

21. The device according to claim 19, characterized in that The first request message also includes: a bootstrapping transaction identifier B-TID; The apparatus further includes a second execution unit configured to query whether a second key corresponding to the B-TID exists; if the query result shows that the second key corresponding to the B-TID does not exist, obtain the second key from the network device through the second communication unit.

22. A configuration device for a terminal device, characterized in that: The device includes a second generating unit and a third communication unit; wherein, The second generating unit is configured to generate a second key based on a pre-negotiated first key; the first key is generated through negotiation with the terminal device; the first key is used by the terminal device to generate the second key, so as to send a first request message including a certificate request message encrypted and / or integrity-protected by the second key to the server; The third communication unit is configured to send the second key to the server; In which, the terminal device includes: an application client, a baseband chip and a universal user identity module USIM; the second key generated by the terminal device is generated by the USIM based on the first key when the application client triggers the USIM through the baseband chip; the certificate request message encrypted and / or integrity protected by the second key is encrypted and / or integrity protected by the USIM based on the second key pair to obtain a second certificate request message, and a first check value is added to the second certificate request message, and is sent by the USIM to the application client through the baseband chip; the second certificate request message is obtained by the USIM generating a public-private key pair, adding the public key in the public-private key pair to the first certificate request message, and signing the first certificate request message using the private key in the public-private key pair; the first certificate request message is generated by the application client and sent to the USIM through the baseband chip.

23. The device according to claim 22, characterized in that The apparatus further includes a second execution unit, configured to negotiate the first key with the terminal device by executing a General Bootstrapping Architecture (GBA) authentication process or an Application-Oriented Authentication and Key Management (AKMA) authentication process.

24. The device according to claim 22, characterized in that The second generating unit is configured to generate a corresponding second key for each server based on the pre-negotiated first key; The third communication unit is used to send the corresponding second key to each server respectively.

25. A configuration method for a terminal device, characterized in that: The method comprises: The terminal device generates a second key based on the first key, and encrypts and / or integrity protects part or all of the first message based on the second key; the first key is generated by negotiation between the terminal device and the network device; Sending a first message to the server; The terminal device includes: an application client, a baseband chip and a universal subscriber identity module (USIM); The terminal device generates a second key based on the first key, and encrypts and / or integrity protects part or all of the first message based on the second key, including: The application client triggers the USIM to generate a second key based on the first key through the baseband chip; The application client generates a first message and sends the first message to the USIM through the baseband chip; The USIM encrypts and / or integrity protects part or all of the first message based on the second key; The USIM sends the first message after the above processing to the application client through the baseband chip.

26. The method according to claim 25, characterized in that The method further comprises: The terminal device receives a second message from the server, and performs integrity verification and / or decryption on the second message based on the second key.

27. The method according to claim 25, characterized in that The sending of the first message includes: The application client sends the first message to the server; The first message further includes: a bootstrapping transaction identifier B-TID and / or a fully qualified domain name FQDN of a server; or includes: an application-oriented authentication or key management AKMA key identifier A-KID and / or FQDN.

28. The method according to claim 26, characterized in that The terminal device includes: an application client, a baseband chip and a universal subscriber identity module USIM; The terminal device receives a second message from the server, and performs integrity verification and / or decryption on the second message based on the second key, including: The application client receives the second message from the server and sends the second message to the USIM through the baseband chip; The USIM performs integrity check and / or decryption on the second message based on the second key.

29. A configuration method for a terminal device, characterized in that: The method comprises: The server receives a first message from a terminal device, wherein part or all of the first message is encrypted and / or integrity protected by a second key generated by the terminal device; The server obtains the second key from the network device; the second key is generated by the network device based on the first key; the first key is generated by negotiation between the terminal device and the network device; The server performs integrity verification and / or decryption on the first message based on the second key; In which, the terminal device includes: an application client, a baseband chip and a universal user identity module USIM; the second key generated by the terminal device is generated by the USIM based on the first key when the application client triggers the USIM through the baseband chip; part or all of the first message encrypted and / or integrity protected by the second key generated by the terminal device is encrypted and / or integrity protected by the USIM based on the second key generated by the terminal device, and sent by the USIM to the application client through the baseband chip; the first message is generated by the application client and sent to the USIM through the baseband chip.

30. The method according to claim 29, wherein The method further comprises: The server encrypts and / or integrity protects part or all of the second message based on the second key; Send the second message.

31. The method according to claim 29, wherein The first message also includes: a bootstrapping transaction identifier B-TID, or an application-oriented authentication or key management AKMA key identifier A-KID; The server obtains the second key from the network device, including: The server queries whether there is a second key corresponding to the B-TID or the A-KID; If the query result shows that there is no second key corresponding to the B-TID or the A-KID, the second key is obtained from the network device.

32. A configuration device for a terminal device, characterized in that: The device includes: a third generating unit and a fourth communication unit; wherein, The third generating unit is configured to generate a second key based on the first key, and encrypt and / or integrity protect part or all of the first message based on the second key; the first key is generated through negotiation with the network device; The fourth communication unit is configured to send a first message to the server; The third generating unit includes: an application client, a baseband chip and a universal subscriber identity module USIM; The application client is configured to trigger, through the baseband chip, the USIM to generate a second key based on the first key; and is further configured to generate a first message and send the first message to the USIM through the baseband chip; The USIM is used to encrypt and / or integrity protect part or all of the first message based on the second key; and is also used to send the first message after the above processing to the application client through the baseband chip.

33. The device according to claim 32, characterized in that The fourth communication unit is further configured to receive a second message from the server, and perform integrity verification and / or decryption on the second message based on the second key.

34. The device according to claim 32, characterized in that The application client is further configured to send the first message to the server; The first message further includes: a bootstrapping transaction identifier B-TID and / or a fully qualified domain name FQDN of a server; or includes: an application-oriented authentication or key management AKMA key identifier A-KID and / or FQDN.

35. The device according to claim 33, characterized in that The third generating unit includes: an application client, a baseband chip and a universal subscriber identity module USIM; The application client is configured to receive a second message from the server and send the second message to the USIM through the baseband chip; The USIM is configured to perform integrity verification and / or decryption on the second message based on the second key.

36. A configuration device for a terminal device, characterized in that: The device includes: a fifth communication unit and a second verification unit; wherein, The fifth communication unit is configured to receive a first message from a terminal device, wherein part or all of the first message is encrypted and / or integrity protected by a second key generated by the terminal device; The second verification unit is configured to obtain the second key from the network device; the second key is generated by the network device based on the first key; and is further configured to perform integrity verification and / or decryption on the first message based on the second key; the first key is generated by negotiation between the terminal device and the network device; In which, the terminal device includes: an application client, a baseband chip and a universal user identity module USIM; the second key generated by the terminal device is generated by the USIM based on the first key when the application client triggers the USIM through the baseband chip; part or all of the first message encrypted and / or integrity protected by the second key generated by the terminal device is encrypted and / or integrity protected by the USIM based on the second key generated by the terminal device, and sent by the USIM to the application client through the baseband chip; the first message is generated by the application client and sent to the USIM through the baseband chip.

37. The device according to claim 36, characterized in that The apparatus further includes a fourth generating unit, configured to encrypt and / or integrity protect part or all of the second message based on the second key; The fifth communication unit is further configured to send a second message.

38. The device according to claim 36, characterized in that The first message also includes: a bootstrapping transaction identifier B-TID, or an application-oriented authentication or key management AKMA key identifier A-KID; The apparatus further includes a third execution unit, configured to query whether a second key corresponding to the B-TID or the A-KID exists; The second verification unit is configured to obtain the second key from the network device through the fifth communication unit when the query result obtained by the third execution unit is that the second key corresponding to the B-TID or the A-KID does not exist.

39. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the steps of the method according to any one of claims 1 to 5 are implemented; or When the program is executed by a processor, the steps of the method according to any one of claims 6 to 9 are implemented; or When the program is executed by a processor, the steps of the method according to any one of claims 10 to 13 are implemented; or When the program is executed by a processor, the steps of the method according to any one of claims 25 to 28 are implemented; or When the program is executed by a processor, the steps of the method according to any one of claims 29 to 31 are implemented.

40. A communication device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein: When the processor executes the program, the steps of the method according to any one of claims 1 to 5 are implemented; or When the processor executes the program, the steps of the method according to any one of claims 6 to 9 are implemented; or, When the processor executes the program, the steps of the method according to any one of claims 10 to 13 are implemented; or, When the processor executes the program, the steps of the method according to any one of claims 25 to 28 are implemented; or, When the processor executes the program, the steps of the method according to any one of claims 29 to 31 are implemented.

Images