Information processing method, key material acquisition method and device

Abstract

The present application discloses an information processing method, a method and a device for obtaining key materials, and belongs to the field of communication technology. The information processing method of an embodiment of the present application includes: a first network function receives capability indication information sent by a first terminal, and the capability indication information is used to indicate that the first terminal does not have a secure storage function; according to the capability indication information, the first network function performs at least one of the following: the first network function sends the key material of the first terminal; the first network function sends first information to the second terminal; the first information is used to determine a first association relationship between the first terminal and the second terminal; wherein the key material of the first terminal includes: security information required for the first terminal to communicate.

Description

Technical Field

[0001] The present application belongs to the field of communication technology, and specifically relates to an information processing method, a method and a device for obtaining key materials. Background Art

[0002] With the popularity of the Internet of Things and smart homes, there may be multiple smart homes in one family. Smart homes connect various devices in the home (such as audio and video equipment, lighting systems, curtain control, air conditioning control, security systems, etc.) and communicate with each other to form a communication topology network, providing a variety of functions and means such as home appliance control, lighting control, telephone remote control, indoor and outdoor remote control, anti-theft alarm, environmental monitoring, HVAC control, etc.

[0003] In order to utilize 5G network services, all devices in the smart home need to access the 5G network when the smart home network is established. However, many smart IoT devices have only limited functions (also known as limited functions), and how to provide relevant security materials for these limited-function smart IoT devices is an unresolved issue. Summary of the invention

[0004] The embodiments of the present application provide an information processing method, a method and a device for obtaining key materials, which can solve the problem of how to provide relevant security materials for smart Internet of Things devices with limited functions.

[0005] In a first aspect, an information processing method is provided, comprising:

[0006] The first network function receives capability indication information sent by the first terminal, where the capability indication information is used to indicate that the first terminal does not have a secure storage function;

[0007] According to the capability indication information, the first network function performs at least one of the following:

[0008] Sending key material of the first terminal;

[0009] Sending first information to a second terminal; the first information is used to determine a first association relationship between the first terminal and the second terminal;

[0010] The key material of the first terminal includes: security information required by the first terminal for communication.

[0011] In a second aspect, a method for obtaining key material is provided, comprising:

[0012] The first terminal sends capability indication information to the first network function, where the capability indication information is used to indicate that the first terminal does not have a secure storage function;

[0013] The first terminal receives the key material of the first terminal; the key material of the first terminal includes: security information required by the first terminal for communication.

[0014] In a third aspect, an information processing device is provided, comprising:

[0015] A first receiving module, used to receive capability indication information sent by a first terminal, where the capability indication information is used to indicate that the first terminal does not have a secure storage function;

[0016] A first execution module is configured to execute at least one of the following according to the capability indication information:

[0017] Sending key material of the first terminal;

[0018] Sending first information to a second terminal; the first information is used to determine a first association relationship between the first terminal and the second terminal;

[0019] The key material of the first terminal includes: security information required by the first terminal for communication.

[0020] In a fourth aspect, a device for obtaining key material is provided, comprising:

[0021] A second sending module, used to send capability indication information to the first network function, where the capability indication information is used to indicate that the first terminal does not have a secure storage function;

[0022] The second receiving module is used to receive the key material of the first terminal; wherein the key material of the first terminal includes: security information required by the first terminal for communication.

[0023] In a fifth aspect, a network side device is provided, which includes a processor, a memory, and a program or instruction stored in the memory and executable on the processor, wherein the program or instruction, when executed by the processor, implements the steps of the method described in the first aspect.

[0024] In a sixth aspect, a network side device is provided, including a processor and a communication interface, wherein the communication interface is used to receive capability indication information sent by a first terminal, the capability indication information is used to indicate that the first terminal does not have a secure storage function; the processor is used to perform at least one of the following according to the capability indication information:

[0025] Sending key material of the first terminal;

[0026] Sending first information to a second terminal; the first information is used to determine a first association relationship between the first terminal and the second terminal;

[0027] The key material of the first terminal includes: security information required by the first terminal for communication.

[0028] In the seventh aspect, a terminal is provided, which includes a processor, a memory, and a program or instruction stored in the memory and executable on the processor, wherein the program or instruction, when executed by the processor, implements the steps of the method described in the second aspect.

[0029] In an eighth aspect, a terminal is provided, comprising a processor and a communication interface, wherein the communication interface is used to send capability indication information to a first network function, wherein the capability indication information is used to indicate that the first terminal does not have a secure storage function; and receive key material of the first terminal; wherein the key material of the first terminal includes: security information required for the first terminal to communicate.

[0030] In a ninth aspect, a readable storage medium is provided, on which a program or instruction is stored. When the program or instruction is executed by a processor, the steps of the method described in the first aspect are implemented, or the steps of the method described in the second aspect are implemented.

[0031] In the tenth aspect, a chip is provided, comprising a processor and a communication interface, wherein the communication interface is coupled to the processor, and the processor is used to run a program or instruction to implement the method described in the first aspect, or to implement the method described in the second aspect.

[0032] In the eleventh aspect, a computer program / program product is provided, wherein the computer program / program product is stored in a non-volatile storage medium, and the program / program product is executed by at least one processor to implement the steps of the method described in the first aspect, or the steps of the method described in the second aspect.

[0033] In an embodiment of the present application, the first terminal reports capability indication information to the first network function, and the first network function or the second terminal determines the key material of the first terminal, thereby enabling the first terminal to obtain the key material of the first terminal through the first network function or the second terminal. Therefore, even if the function of the first terminal is limited, the security of the first terminal in the process of accessing the network can be guaranteed, solving the problem of how to generate relevant key materials used by home smart devices during networking authorization / authentication. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] Figure 1 A block diagram showing a wireless communication system to which the embodiments of the present application can be applied;

[0035] Figure 2 A flowchart showing the steps of the information processing method provided by an embodiment of the present application;

[0036] Figure 3 A flowchart showing the steps of a method for obtaining key material provided in an embodiment of the present application;

[0037] Figure 4 An interactive schematic diagram showing Example 1 provided in an embodiment of the present application;

[0038] Figure 5 A schematic diagram showing an interaction of Example 2 provided in an embodiment of the present application;

[0039] Figure 6 An interactive schematic diagram showing Example 3 provided in an embodiment of the present application;

[0040] Figure 7 A schematic diagram showing the structure of an information processing device provided in an embodiment of the present application;

[0041] Figure 8 A schematic diagram showing the structure of a device for obtaining key materials provided in an embodiment of the present application;

[0042] Fig. 9 A schematic diagram showing the structure of a communication device provided in an embodiment of the present application;

[0043] Fig.10 A schematic diagram showing the structure of a terminal provided in an embodiment of the present application;

[0044] Fig.11 A schematic diagram showing the structure of a network side device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0045] The following will be combined with the drawings in the embodiments of the present application to clearly describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field belong to the scope of protection of this application.

[0046] The terms "first", "second", etc. in the specification and claims of the present application are used to distinguish similar objects, and are not used to describe a specific order or sequence. It should be understood that the terms used in this way are interchangeable under appropriate circumstances, so that the embodiments of the present application can be implemented in an order other than those illustrated or described here, and the objects distinguished by "first" and "second" are generally of the same type, and the number of objects is not limited. For example, the first object can be one or more. In addition, "and / or" in the specification and claims represents at least one of the connected objects, and the character " / " generally represents that the objects associated with each other are in an "or" relationship.

[0047] It is worth noting that the technology described in the embodiments of the present application is not limited to the Long Term Evolution (LTE) / LTE-Advanced (LTE-A) system, but can also be used in other wireless communication systems, such as Code Division Multiple Access (CDMA), Time Division Multiple Access (TDMA), Frequency Division Multiple Access (FDMA), Orthogonal Frequency Division Multiple Access (OFDMA), Single-carrier Frequency-Division Multiple Access (SC-FDMA) and other systems. The terms "system" and "network" in the embodiments of the present application are often used interchangeably, and the described technology can be used for the systems and radio technologies mentioned above as well as for other systems and radio technologies. The following description describes a New Radio (NR) system for illustrative purposes, and NR terminology is used in most of the following descriptions, but these technologies can also be applied to applications other than NR system applications, such as the 6th generation (6 th Generation, 6G) communication system.

[0048] Figure 1A block diagram of a wireless communication system applicable to an embodiment of the present application is shown. The wireless communication system includes a terminal 11 and a network side device 12. Among them, the terminal 11 can also be called a terminal device or a user terminal (User Equipment, UE), and the terminal 11 can be a mobile phone, a tablet computer (Tablet Personal Computer), a laptop computer (Laptop Computer) or a notebook computer, a personal digital assistant (Personal Digital Assistant, PDA), a handheld computer, a netbook, an ultra-mobile personal computer (ultra-mobile personal computer, UMPC), a mobile Internet device (Mobile Internet Device, MID), a wearable device (Wearable Device) or a vehicle-mounted device (VUE), a pedestrian terminal (PUE) and other terminal side devices, and the wearable device includes: a smart watch, a bracelet, a headset, glasses, etc. It should be noted that the specific type of the terminal 11 is not limited in the embodiment of the present application. The network side device 12 can be a base station or a core network, wherein the base station can be referred to as a node B, an evolved node B, an access point, a base transceiver station (Base Transceiver Station, BTS), a radio base station, a radio transceiver, a basic service set (Basic Service Set, BSS), an extended service set (Extended Service Set, ESS), a B node, an evolved B node (eNB), a home B node, a home evolved B node, a WLAN access point, a WiFi node, a transmitting and receiving point (Transmitting Receiving Point, TRP) or some other suitable term in the field. As long as the same technical effect is achieved, the base station is not limited to a specific technical vocabulary. It should be noted that in the embodiment of the present application, only the base station in the NR system is taken as an example, but the specific type of the base station is not limited.

[0049] The information processing method, key material acquisition method and device provided in the embodiments of the present application are described in detail below with reference to the accompanying drawings through some embodiments and their application scenarios.

[0050] like Figure 2 As shown, the embodiment of the present application provides an information processing method, including:

[0051] Step 201: A first network function receives capability indication information sent by a first terminal, where the capability indication information is used to indicate that the first terminal does not have a secure storage function; for example, the capability indication information includes 1 bit of information, and when the 1 bit of information is 0, it indicates that the first terminal does not have a secure storage function. Of course, the capability indication information may also be configuration information or parameter information corresponding to the secure storage function, etc.;

[0052] Step 202: According to the capability indication information, the first network function performs at least one of the following:

[0053] Sending key material of the first terminal;

[0054] Sending first information to a second terminal; the first information is used to determine a first association relationship between the first terminal and the second terminal;

[0055] The key material of the first terminal includes: security information required by the first terminal for communication.

[0056] It should be noted that the first network function is an access network function or a core network function, which is not specifically limited here.

[0057] In at least one optional embodiment of the present application, after receiving the capability indication information of the first terminal, the first network function directly determines and sends the key material of the first terminal, and the second terminal is a terminal that has a first association relationship with the first terminal; or, after receiving the capability indication information of the first terminal, the first network function sends the first information to the second terminal that has a first association relationship with the first terminal, so that the second terminal determines the key material of the first terminal.

[0058] As an optional embodiment, before the first network function sends the key material of the first terminal, the method further includes:

[0059] The first network function derives the key material of the first terminal according to the key material of the second terminal; wherein the key material of the second terminal includes: security information required by the second terminal for communication.

[0060] As an optional embodiment, when the first terminal is not configured with at least one of the following items, the first terminal does not have a secure storage function:

[0061] Universal Integrated Circuit Card (UICC);

[0062] Universal User Identity Module USIM;

[0063] Embedded Subscriber Identity Module eSIM;

[0064] Secure storage of components.

[0065] As another optional embodiment, the first association relationship includes at least one of the following:

[0066] An association relationship between a device identification of the first terminal and a device identification of the second terminal;

[0067] An association relationship between a device identifier of the first terminal and a user identifier of the second terminal;

[0068] An association relationship between a user identification of the first terminal and a user identification of the second terminal;

[0069] The association relationship between the user identification of the first terminal and the device identification of the second terminal.

[0070] In at least one optional embodiment of the present application, the first information includes:

[0071] A first identifier; the first identifier is a device identifier and / or a user identifier of the first terminal;

[0072] The association information is information for determining the first association relationship.

[0073] In at least one optional embodiment of the present application, after the first network function derives the key material of the first terminal, the method further includes:

[0074] The first network function sends key material of the first terminal to the first terminal.

[0075] It should be noted that if direct communication is established between the first terminal and the second terminal, the first network function may first send the key material of the first terminal to the second terminal, and the second terminal may send the key material of the first terminal to the first terminal through direct communication.

[0076] As an optional embodiment, the security information includes at least one of the following:

[0077] Security key;

[0078] Security parameters.

[0079] As another optional embodiment, the key material further includes:

[0080] The validity period is the validity period of the security information. After the validity period has expired, the security information of the first terminal is invalid.

[0081] In an optional embodiment of the present application, the method further includes:

[0082] A first timer is started, wherein a timing period of the first timer is a valid time of the security information of the first terminal; after the valid time expires, the security information of the first terminal is invalid.

[0083] Furthermore, after the validity period of the security information of the first terminal expires, the first terminal may also actively send relevant information requesting to update the key material or relevant information requesting to reallocate the key material to the first network function, or, after the validity period of the key material of the first terminal expires, the first terminal may autonomously update the key material of the first terminal according to predefined rules, thereby more effectively ensuring the security of the key material.

[0084] In summary, in the embodiments of the present application, the first terminal reports capability indication information to the first network function, and the first network function or the second terminal determines the key material of the first terminal, thereby enabling the first terminal to obtain the key material of the first terminal through the first network function or the second terminal. Therefore, even if the function of the first terminal is limited, the security of the first terminal in the process of accessing the network can be guaranteed, and the problem of how to generate relevant key materials used by home smart devices during networking authorization / authentication is solved.

[0085] like Figure 3 As shown, the embodiment of the present application also provides a method for obtaining key material, including:

[0086] Step 301: A first terminal sends capability indication information to a first network function, where the capability indication information is used to indicate that the first terminal does not have a secure storage function; for example, the capability indication information includes 1 bit of information, and when the 1 bit of information is 0, it indicates that the first terminal does not have a secure storage function;

[0087] Step 302: The first terminal receives the key material of the first terminal; wherein the key material of the first terminal includes: security information required by the first terminal for communication.

[0088] It should be noted that the first network function is an access network function or a core network function, which is not specifically limited here.

[0089] In at least one optional embodiment of the present application, step 302 includes;

[0090] The first terminal receives the key material of the first terminal sent by the first network function;

[0091] or,

[0092] The first terminal receives the key material of the first terminal sent by the second terminal.

[0093] As an optional embodiment, the key material of the first terminal is derived according to the key material of the second terminal;

[0094] The second terminal key material includes: security information required by the second terminal for communication.

[0095] In at least one optional embodiment of the present application, after receiving the capability indication information of the first terminal, the first network function directly derives the key material of the first terminal based on the key material of the second terminal, and the second terminal is a terminal that has a first association relationship with the first terminal; or, after receiving the capability indication information of the first terminal, the first network function sends the first information to the second terminal that has a first association relationship with the first terminal, so that the second terminal determines the key material of the first terminal.

[0096] As an optional embodiment, when the first terminal is not configured with at least one of the following items, the first terminal does not have a secure storage function:

[0097] Universal Integrated Circuit Card (UICC);

[0098] Universal User Identity Module USIM;

[0099] Embedded Subscriber Identity Module eSIM;

[0100] Secure storage of components.

[0101] As an optional embodiment, the security information includes at least one of the following:

[0102] Security key;

[0103] Security parameters.

[0104] As another optional embodiment, the key material further includes:

[0105] The validity period is the validity period of the security information. After the validity period has expired, the security information of the first terminal is invalid.

[0106] In at least one optional embodiment of the present application, the method further includes:

[0107] After the validity period expires, the first terminal sends first update indication information to the first network function, where the first update indication information is used to instruct the first network function to update the key material of the first terminal.

[0108] In other words, further, after the validity period of the security information of the first terminal expires, the first terminal may also actively send relevant information requesting to update the key material or relevant information requesting to reallocate the key material to the first network function, or, after the validity period of the key material of the first terminal expires, the first terminal may autonomously update the key material of the first terminal according to predefined rules, thereby more effectively ensuring the security of the key material.

[0109] In summary, in the embodiments of the present application, the first terminal reports capability indication information to the first network function, and the first network function or the second terminal determines the key material of the first terminal, thereby enabling the first terminal to obtain the key material of the first terminal through the first network function or the second terminal. Therefore, even if the function of the first terminal is limited, the security of the first terminal in the process of accessing the network can be guaranteed, and the problem of how to generate relevant key materials used by home smart devices during networking authorization / authentication is solved.

[0110] In order to more clearly describe the method provided in the embodiments of the present application, several examples are provided below for illustration.

[0111] Example 1: The first terminal sends capability indication information, and the first network function determines the key material of the first terminal and sends it to the first terminal; Figure 4 As shown:

[0112] Step 41, the first terminal sends capability indication information to the first network function;

[0113] Step 42, the first network function determines the key material of the first terminal;

[0114] Step 43: The first network function sends the key material of the first terminal to the first terminal.

[0115] Example 2: The first terminal sends capability indication information, and the second terminal determines the key material of the first terminal and sends it to the first terminal; Figure 5 As shown:

[0116] Step 51, the first terminal sends capability indication information to the first network function;

[0117] Step 52: The first network function sends first information to the second terminal, where the first information indicates a first association relationship;

[0118] Step 53, the second terminal determines the key material of the first terminal;

[0119] Step 54: The second terminal sends the key material of the first terminal to the first terminal.

[0120] Example 3: The first terminal sends capability indication information, the first network function determines the key material of the first terminal and sends it to the first terminal, and after the first counter ends, the first terminal sends an indication message to indicate that the key material of the first terminal is updated; Figure 6 As shown:

[0121] Step 61, the first terminal sends capability indication information to the first network function;

[0122] Step 62, the first network function determines the key material of the first terminal;

[0123] Step 63, the first network function sends the key material of the first terminal to the first terminal;

[0124] Step 64: a first timer at the first terminal side ends, the time length of the first timer being the effective time length of the key material of the first terminal;

[0125] Step 65: The first terminal sends an instruction message to the first network function, instructing the first network function to update the key material of the first terminal.

[0126] It should be noted that the method provided in the embodiment of the present application can be executed by a device or a control module in the device for executing the method. In the embodiment of the present application, the device executing the method is taken as an example to illustrate the device provided in the embodiment of the present application.

[0127] like Figure 7 As shown, the embodiment of the present application further provides an information processing device 700, including:

[0128] A first receiving module 701 is used to receive capability indication information sent by a first terminal, where the capability indication information is used to indicate that the first terminal does not have a secure storage function;

[0129] The first execution module 702 is configured to execute at least one of the following according to the capability indication information:

[0130] Sending key material of the first terminal;

[0131] Sending first information to a second terminal; the first information is used to determine a first association relationship between the first terminal and the second terminal;

[0132] The key material of the first terminal includes: security information required by the first terminal for communication.

[0133] As an optional embodiment, the device further includes:

[0134] A derivation module is used to derive the key material of the first terminal according to the key material of the second terminal; wherein the key material of the second terminal includes: security information required by the second terminal for communication.

[0135] As an optional embodiment, when the first terminal is not configured with at least one of the following items, the first terminal does not have a secure storage function;

[0136] Universal Integrated Circuit Card UICC;

[0137] Universal User Identity Module USIM;

[0138] Embedded Subscriber Identity Module eSIM;

[0139] Secure storage of components.

[0140] As an optional embodiment, the first association relationship includes at least one of the following:

[0141] An association relationship between a device identification of the first terminal and a device identification of the second terminal;

[0142] An association relationship between a device identifier of the first terminal and a user identifier of the second terminal;

[0143] An association relationship between a user identification of the first terminal and a user identification of the second terminal;

[0144] The association relationship between the user identification of the first terminal and the device identification of the second terminal.

[0145] As an optional embodiment, the first information includes:

[0146] A first identifier; the first identifier is a device identifier and / or a user identifier of the first terminal;

[0147] The association information is information for determining the first association relationship.

[0148] As an optional embodiment, the device further includes:

[0149] The first sending module is configured to send the key material of the first terminal to the first terminal.

[0150] As an optional embodiment, the security information includes at least one of the following:

[0151] Security key;

[0152] Security parameters.

[0153] As an optional embodiment, the key material further includes:

[0154] Validity time, where the validity time is the validity time of the security information.

[0155] As an optional embodiment, the device further includes:

[0156] The timing module is used to start a first timer, wherein the timing period of the first timer is the validity period of the security information of the first terminal; after the validity period exceeds the security information of the first terminal, the security information of the first terminal is invalid.

[0157] In an embodiment of the present application, the first terminal reports capability indication information to the first network function, and the first network function or the second terminal determines the key material of the first terminal, thereby solving the problem of how to generate relevant key materials used by home smart devices during networking authorization / authentication.

[0158] It should be noted that the information processing device provided in the embodiment of the present application is a device capable of executing the above-mentioned information processing method, and all embodiments of the above-mentioned information processing method are applicable to the device and can achieve the same or similar beneficial effects.

[0159] like Figure 8 As shown, the embodiment of the present application further provides a key material acquisition device 800, comprising:

[0160] A second sending module 801 is used to send capability indication information to the first network function, where the capability indication information is used to indicate that the first terminal does not have a secure storage function;

[0161] The second receiving module 802 is used to receive the key material of the first terminal; wherein the key material of the first terminal includes: security information required by the first terminal for communication.

[0162] As an optional embodiment, the second receiving module includes:

[0163] A first receiving submodule, configured to receive a key material of the first terminal sent by a first network function;

[0164] or,

[0165] The second receiving submodule is configured to receive the key material of the first terminal sent by the second terminal.

[0166] As an optional embodiment, the key material of the first terminal is derived according to the key material of the second terminal;

[0167] The second terminal key material includes: security information required by the second terminal for communication.

[0168] As an optional embodiment, the security information includes at least one of the following:

[0169] Security key;

[0170] Security parameters.

[0171] As an optional embodiment, the key material further includes:

[0172] Validity time, where the validity time is the validity time of the security information.

[0173] As an optional embodiment, the device further includes:

[0174] The third sending module is used to send first update indication information to the first network function after the validity time expires, where the first update indication information is used to instruct the first network function to update the key material of the first terminal.

[0175] In an embodiment of the present application, the first terminal reports capability indication information to the first network function, and the first network function or the second terminal determines the key material of the first terminal, thereby solving the problem of how to generate relevant key materials used by home smart devices during networking authorization / authentication.

[0176] It should be noted that the device for obtaining key materials provided in the embodiments of the present application is a device capable of executing the above-mentioned method for obtaining key materials. All embodiments of the above-mentioned method for obtaining key materials are applicable to the device and can achieve the same or similar beneficial effects.

[0177] The information processing device or key material acquisition device in the embodiment of the present application can be a device, a device or electronic device with an operating system, or a component, an integrated circuit, or a chip in a terminal. The device or electronic device can be a mobile terminal or a non-mobile terminal. Exemplarily, the mobile terminal can include but is not limited to the types of terminals 11 listed above, and the non-mobile terminal can be a server, a network attached storage (Network Attached Storage, NAS), a personal computer (personal computer, PC), a television (television, TV), a teller machine or a self-service machine, etc., which is not specifically limited in the embodiment of the present application.

[0178] The information processing device or key material acquisition device provided in the embodiments of the present application can achieve Figures 1 to 6 The various processes implemented by the method embodiment and achieving the same technical effect are not described here to avoid repetition.

[0179] Optional, such as Fig. 9As shown, the embodiment of the present application also provides a communication device 900, including a processor 901, a memory 902, and a program or instruction stored in the memory 902 and executable on the processor 901. For example, when the communication device 900 is a terminal, the program or instruction is executed by the processor 901 to implement the various processes of the above-mentioned key material acquisition method embodiment, and can achieve the same technical effect. When the communication device 900 is a network side device, the program or instruction is executed by the processor 901 to implement the various processes of the above-mentioned information processing method embodiment, and can achieve the same technical effect. To avoid repetition, it will not be repeated here.

[0180] An embodiment of the present application also provides a terminal, including a processor and a communication interface, wherein the communication interface is used to send capability indication information to a first network function, wherein the capability indication information is used to indicate that the first terminal does not have a secure storage function; and receive key material from the first terminal; wherein the key material of the first terminal includes: security information required for the first terminal to communicate. This terminal embodiment corresponds to the above-mentioned terminal-side method embodiment, and each implementation process and implementation method of the above-mentioned method embodiment can be applied to this terminal embodiment, and can achieve the same technical effect. Specifically, Fig.10 A schematic diagram of the hardware structure of a terminal for implementing an embodiment of the present application.

[0181] The terminal 1000 includes but is not limited to: a radio frequency unit 1001, a network module 1002, an audio output unit 1003, an input unit 1004, a sensor 1005, a display unit 1006, a user input unit 1007, an interface unit 1008, a memory 1009, and at least some of the components of a processor 1010.

[0182] Those skilled in the art will appreciate that the terminal 1000 may also include a power source (such as a battery) for supplying power to various components, and the power source may be logically connected to the processor 1010 through a power management system, thereby implementing functions such as managing charging, discharging, and power consumption management through the power management system. Fig.10 The terminal structure shown in the figure does not constitute a limitation on the terminal. The terminal may include more or fewer components than shown in the figure, or combine certain components, or arrange the components differently, which will not be described in detail here.

[0183] It should be understood that in the embodiment of the present application, the input unit 1004 may include a graphics processor (Graphics Processing Unit, GPU) 10041 and a microphone 10042, and the graphics processor 10041 processes the image data of the static picture or video obtained by the image capture device (such as a camera) in the video capture mode or the image capture mode. The display unit 1006 may include a display panel 10061, and the display panel 10061 may be configured in the form of a liquid crystal display, an organic light emitting diode, etc. The user input unit 1007 includes a touch panel 10071 and other input devices 10072. The touch panel 10071 is also called a touch screen. The touch panel 10071 may include two parts: a touch detection device and a touch controller. Other input devices 10072 may include, but are not limited to, a physical keyboard, function keys (such as volume control keys, switch keys, etc.), a trackball, a mouse, and a joystick, which will not be repeated here.

[0184] In the embodiment of the present application, the radio frequency unit 1001 receives downlink data from the network side device and sends it to the processor 1010 for processing; in addition, the uplink data is sent to the network side device. Generally, the radio frequency unit 1001 includes but is not limited to an antenna, at least one amplifier, a transceiver, a coupler, a low noise amplifier, a duplexer, etc.

[0185] The memory 1009 can be used to store software programs or instructions and various data. The memory 1009 can mainly include a program or instruction storage area and a data storage area, wherein the program or instruction storage area can store an operating system, an application program or instruction required for at least one function (such as a sound playback function, an image playback function, etc.), etc. In addition, the memory 1009 can include a high-speed random access memory, and can also include a non-volatile memory, wherein the non-volatile memory can be a read-only memory (Read-Only Memory, ROM), a programmable read-only memory (Programmable ROM, PROM), an erasable programmable read-only memory (Erasable PROM, EPROM), an electrically erasable programmable read-only memory (Electrically EPROM, EEPROM) or a flash memory. For example, at least one disk storage device, a flash memory device, or other non-volatile solid-state storage devices.

[0186] The processor 1010 may include one or more processing units; optionally, the processor 1010 may integrate an application processor and a modem processor, wherein the application processor mainly processes an operating system, a user interface, and application programs or instructions, etc., and the modem processor mainly processes wireless communications, such as a baseband processor. It is understandable that the modem processor may not be integrated into the processor 1010.

[0187] Among them, the radio frequency unit 1001 is used to send capability indication information to the first network function, and the capability indication information is used to indicate that the first terminal does not have a secure storage function; receive the key material of the first terminal; wherein the key material of the first terminal includes: security information required for the first terminal to communicate.

[0188] In an embodiment of the present application, the first terminal reports capability indication information to the first network function, and the first network function or the second terminal determines the key material of the first terminal, so that the first terminal obtains the key material of the first terminal through the first network function or the second terminal. Therefore, even if the function of the first terminal is limited, the security of the first terminal in the process of accessing the network can be guaranteed, which solves the problem of how to generate relevant key materials used by home smart devices during networking authorization / authentication.

[0189] The embodiment of the present application further provides a network side device, including a processor and a communication interface, wherein the communication interface is used to receive capability indication information sent by a first terminal, wherein the capability indication information is used to indicate that the first terminal does not have a secure storage function; and the processor is used to perform at least one of the following according to the capability indication information:

[0190] Sending key material of the first terminal;

[0191] Sending first information to a second terminal; the first information is used to determine a first association relationship between the first terminal and the second terminal;

[0192] The key material of the first terminal includes: security information required by the first terminal for communication. This network side device embodiment corresponds to the above network side device method embodiment, and each implementation process and implementation method of the above method embodiment can be applied to this network side device embodiment and can achieve the same technical effect.

[0193] Specifically, the embodiment of the present application also provides a network side device. Fig.11 As shown, the network device 1100 includes: an antenna 111, a radio frequency device 112, and a baseband device 113. The antenna 111 is connected to the radio frequency device 112. In the uplink direction, the radio frequency device 112 receives information through the antenna 111 and sends the received information to the baseband device 113 for processing. In the downlink direction, the baseband device 113 processes the information to be sent and sends it to the radio frequency device 112, and the radio frequency device 112 processes the received information and sends it out through the antenna 111.

[0194] The frequency band processing device may be located in the baseband device 113 . The method performed by the network-side device in the above embodiment may be implemented in the baseband device 113 . The baseband device 113 includes a processor 114 and a memory 115 .

[0195] The baseband device 113 may include, for example, at least one baseband board on which a plurality of chips are arranged. Fig.11 As shown, one of the chips is, for example, a processor 114, which is connected to a memory 115 to call a program in the memory 115 to execute the network device operations shown in the above method embodiment.

[0196] The baseband device 113 may further include a network interface 116 for exchanging information with the radio frequency device 112 . The interface may be, for example, a common public radio interface (CPRI).

[0197] Specifically, the network side device of the embodiment of the present invention further includes: instructions or programs stored in the memory 115 and executable on the processor 114, and the processor 114 calls the instructions or programs in the memory 115 to execute Fig.11 The methods executed by the modules shown achieve the same technical effects, and therefore will not be described here in detail to avoid repetition.

[0198] An embodiment of the present application also provides a readable storage medium, on which a program or instruction is stored. When the program or instruction is executed by a processor, each process of the above-mentioned information processing method embodiment or key material acquisition method embodiment is implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0199] The processor is the processor in the terminal described in the above embodiment. The readable storage medium includes a computer readable storage medium, such as a computer read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0200] An embodiment of the present application further provides a chip, which includes a processor and a communication interface, wherein the communication interface is coupled to the processor, and the processor is used to run programs or instructions to implement the various processes of the above-mentioned information processing method embodiment or the key material acquisition method embodiment, and can achieve the same technical effect. To avoid repetition, it will not be repeated here.

[0201] It should be understood that the chip mentioned in the embodiments of the present application can also be called a system-level chip, a system chip, a chip system or a system-on-chip chip, etc.

[0202] An embodiment of the present application further provides a computer program product, which is stored in a non-volatile storage medium and is executed by at least one processor to implement the steps in the method embodiments described above.

[0203] It should be noted that, in this article, the terms "comprise", "include" or any other variant thereof are intended to cover non-exclusive inclusion, so that the process, method, article or device including a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise one..." do not exclude the presence of other identical elements in the process, method, article or device including the element. In addition, it should be pointed out that the scope of the methods and devices in the embodiments of the present application is not limited to performing functions in the order shown or discussed, and may also include performing functions in a substantially simultaneous manner or in reverse order according to the functions involved, for example, the described method may be performed in an order different from that described, and various steps may also be added, omitted, or combined. In addition, the features described with reference to certain examples may be combined in other examples.

[0204] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present application, or the part that contributes to the prior art, can be embodied in the form of a computer software product, which is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk), and includes a number of instructions for a terminal (which can be a mobile phone, computer, server, air conditioner, or network device, etc.) to execute the methods described in each embodiment of the present application.

[0205] The embodiments of the present application are described above in conjunction with the accompanying drawings, but the present application is not limited to the above-mentioned specific implementation methods. The above-mentioned specific implementation methods are merely illustrative and not restrictive. Under the guidance of the present application, ordinary technicians in this field can also make many forms without departing from the purpose of the present application and the scope of protection of the claims, all of which are within the protection of the present application.

Claims

1. An information processing method, characterized in that: include: The first network function receives capability indication information sent by the first terminal, where the capability indication information is used to indicate that the first terminal does not have a secure storage function; According to the capability indication information, the first network function performs at least one of the following: Sending key material of the first terminal; Sending first information to a second terminal, for the second terminal to determine a key material of the first terminal; wherein a first association relationship exists between the first terminal and the second terminal; The key material of the first terminal includes: security information required by the first terminal for communication.

2. The method according to claim 1, characterized in that Before the first network function sends the key material of the first terminal, the method further includes: The first network function derives the key material of the first terminal according to the key material of the second terminal; wherein the key material of the second terminal includes: security information required by the second terminal for communication.

3. The method according to claim 1, characterized in that In the case where the first terminal is not provided with at least one of the following items, the first terminal does not have a secure storage function; Universal Integrated Circuit Card UICC; Universal User Identity Module USIM; Embedded Subscriber Identity Module eSIM; Secure storage of components.

4. The method according to claim 1, characterized in that: The first association relationship includes at least one of the following: An association relationship between a device identification of the first terminal and a device identification of the second terminal; An association relationship between a device identifier of the first terminal and a user identifier of the second terminal; An association relationship between a user identification of the first terminal and a user identification of the second terminal; The association relationship between the user identification of the first terminal and the device identification of the second terminal.

5. The method according to claim 1, characterized in that The first information includes: A first identifier; the first identifier is a device identifier and / or a user identifier of the first terminal; The association information is information for determining the first association relationship.

6. The method according to claim 1, characterized in that The method further comprises: The first network function sends key material of the first terminal to the first terminal.

7. The method according to claim 1, characterized in that The security information includes at least one of the following: Security key; Security parameters.

8. The method according to claim 1, characterized in that The key material also includes: Validity time, where the validity time is the validity time of the security information.

9. The method according to claim 1, characterized in that: The method further comprises: A first timer is started, wherein a timing period of the first timer is a valid time of the security information of the first terminal; after the valid time expires, the security information of the first terminal is invalid.

10. A method for obtaining key material, characterized in that: include: The first terminal sends capability indication information to the first network function, where the capability indication information is used to indicate that the first terminal does not have a secure storage function; The first terminal receives the key material of the first terminal; The key material of the first terminal includes: security information required by the first terminal for communication; The first terminal receiving the key material of the first terminal includes: The first terminal receives the key material of the first terminal sent by the first network function; or, The first terminal receives the key material of the first terminal sent by the second terminal.

11. The method according to claim 10, characterized in that The key material of the first terminal is derived according to the key material of the second terminal; The second terminal key material includes: security information required by the second terminal for communication.

12. The method according to claim 10, characterized in that The security information includes at least one of the following: Security key; Security parameters.

13. The method according to claim 10, characterized in that The key material also includes: Validity time, where the validity time is the validity time of the security information.

14. The method according to claim 13, characterized in that The method further comprises: After the validity period expires, the first terminal sends first update indication information to the first network function, where the first update indication information is used to instruct the first network function to update the key material of the first terminal.

15. An information processing device, characterized in that: include: A first receiving module, used to receive capability indication information sent by a first terminal, where the capability indication information is used to indicate that the first terminal does not have a secure storage function; A first execution module is configured to execute at least one of the following according to the capability indication information: Sending key material of the first terminal; Sending first information to a second terminal, for the second terminal to determine a key material of the first terminal; wherein a first association relationship exists between the first terminal and the second terminal; The key material of the first terminal includes: security information required by the first terminal for communication.

16. The device according to claim 15, characterized in that The device also includes: A derivation module is used to derive the key material of the first terminal according to the key material of the second terminal; wherein the key material of the second terminal includes: security information required by the second terminal for communication.

17. The device according to claim 15, characterized in that In the case where the first terminal is not provided with at least one of the following items, the first terminal does not have a secure storage function; Universal Integrated Circuit Card UICC; Universal User Identity Module USIM; Embedded Subscriber Identity Module eSIM; Secure storage of components.

18. The device according to claim 15, characterized in that The first association relationship includes at least one of the following: An association relationship between a device identification of the first terminal and a device identification of the second terminal; An association relationship between a device identifier of the first terminal and a user identifier of the second terminal; An association relationship between a user identification of the first terminal and a user identification of the second terminal; The association relationship between the user identification of the first terminal and the device identification of the second terminal.

19. The device according to claim 15, characterized in that The first information includes: A first identifier; the first identifier is a device identifier and / or a user identifier of the first terminal; The association information is information for determining the first association relationship.

20. The device according to claim 15, characterized in that The device also includes: The first sending module is configured to send the key material of the first terminal to the first terminal.

21. The device according to claim 15, characterized in that The security information includes at least one of the following: Security key; Security parameters.

22. The device according to claim 15, characterized in that The key material also includes: Validity time, where the validity time is the validity time of the security information.

23. The device according to claim 15, characterized in that The device also includes: The timing module is used to start a first timer, wherein the timing period of the first timer is the validity period of the security information of the first terminal; after the validity period exceeds the security information of the first terminal, the security information of the first terminal is invalid.

24. A network side device, the network side device having a first network function, characterized in that: The method comprises a processor, a memory, and a program or instruction stored in the memory and executable on the processor, wherein the program or instruction, when executed by the processor, implements the steps of the information processing method as claimed in any one of claims 1 to 9.

25. A device for obtaining key material, applied to a first terminal, characterized in that: include: A second sending module, used to send capability indication information to the first network function, where the capability indication information is used to indicate that the first terminal does not have a secure storage function; A second receiving module is used to receive the key material of the first terminal; wherein the key material of the first terminal includes: security information required by the first terminal for communication; Wherein, the second receiving module includes: A first receiving submodule, configured to receive a key material of the first terminal sent by a first network function; or, The second receiving submodule is configured to receive the key material of the first terminal sent by the second terminal.

26. The device according to claim 25, characterized in that The key material of the first terminal is derived according to the key material of the second terminal; The second terminal key material includes: security information required by the second terminal for communication.

27. The device according to claim 26, characterized in that The security information includes at least one of the following: Security key; Security parameters.

28. The device according to claim 25, characterized in that The key material also includes: Validity time, where the validity time is the validity time of the security information.

29. The device according to claim 28, characterized in that The device also includes: The third sending module is used to send first update indication information to the first network function after the validity time expires, where the first update indication information is used to instruct the first network function to update the key material of the first terminal.

30. A terminal, characterized in that: The method comprises a processor, a memory, and a program or instruction stored in the memory and executable on the processor, wherein the program or instruction, when executed by the processor, implements the steps of the method for obtaining key material according to any one of claims 10 to 14.

31. A readable storage medium, characterized in that: The readable storage medium stores a program or instruction, and when the program or instruction is executed by the processor, it implements the information processing method according to any one of claims 1 to 9, or implements the steps of the method for obtaining key materials according to any one of claims 10 to 14.

Images