Gis data encryption synchronization method and device, base station, mobile terminal and base station cipher machine

Abstract

The present application relates to a GIS data encryption synchronization method and device, a base station, a mobile terminal, and a base station cipher machine, the method comprising: the base station applying for encryption parameters of GIS data from the base station cipher machine for each mobile terminal; the base station cipher machine generating the encryption parameters; the base station cipher machine sending the encryption parameters to the base station; the base station issuing a GIS pull-up instruction to the mobile terminal through control channel downlink signaling, the encryption parameters being carried in the GIS pull-up instruction; the mobile terminal receiving the GIS pull-up instruction; the mobile terminal extracting the encryption parameters from the GIS pull-up instruction, generating an encryption initial vector based on the encryption parameters and the mobile terminal air interface number, and encrypting the GIS data; the mobile terminal reporting GIS ciphertext to the base station through the air interface corresponding to the mobile terminal air interface number; the base station receiving the GIS ciphertext and applying for decryption from the base station cipher machine; and the base station cipher machine generating an encryption initial vector based on the encryption parameters and the air interface number of the mobile terminal, decrypting the GIS ciphertext, and sending the decrypted GIS plaintext to the base station.

Description

Technical Field

[0001] This application belongs to the field of communication security, and in particular, relates to a method and apparatus for GIS data encryption and synchronization in a PDT digital trunking system, a base station, a mobile terminal, and a base station cryptographic machine. Background Technology

[0002] PDT Digital Trunking System is a technologically advanced digital communication standard jointly developed by leading domestic communication equipment manufacturers and possessing independent intellectual property rights in China. PDT Digital Trunking System provides rich trunking scheduling functions such as voice individual calls, group calls, short messages, packet data, and GIS data, meeting the scheduling needs of professional users at various levels.

[0003] The PDT digital trunking standard considers the security requirements of wireless communication, reserves secure encryption interfaces, and supports end-to-end voice / data encryption. However, it does not specify a corresponding encryption standard for GIS data services. Currently, among the PDT digital trunking systems provided by various domestic communication equipment manufacturers, no PDT digital trunking system has been found that implements secure transmission of GIS data. Therefore, current PDT digital trunking systems do not encrypt GIS data services, posing a risk of theft and tampering.

[0004] Therefore, it is evident that there is currently a lack of encryption technology for GIS data in PDT digital cluster systems, and further research and implementation are needed. Summary of the Invention

[0005] This application provides a method and apparatus for GIS data encryption and synchronization in a PDT digital trunking system, including a base station, a mobile terminal, and a base station cryptographic machine, which enables secure GIS data transmission in a PDT digital trunking system.

[0006] One aspect of this application provides a method for encrypting and synchronizing GIS data in a PDT digital trunking system. The method includes: a base station requesting encryption parameters for GIS data from a base station cryptographic device for each mobile terminal; the base station cryptographic device generating encryption parameters; the base station cryptographic device sending the encryption parameters to the base station; the base station issuing a GIS pull-up command to the mobile terminal via downlink signaling on the control channel, the GIS pull-up command carrying the encryption parameters; the mobile terminal receiving the GIS pull-up command; the mobile terminal extracting the encryption parameters from the GIS pull-up command, generating an initial encryption vector based on the encryption parameters and the mobile terminal's air interface number, and encrypting the GIS data; the mobile terminal reporting GIS ciphertext to the base station through the air interface corresponding to the mobile terminal's air interface number; the base station receiving the GIS ciphertext and requesting decryption from the base station cryptographic device; and the base station cryptographic device generating an initial encryption vector based on the encryption parameters and the mobile terminal's air interface number, decrypting the GIS ciphertext, and sending the decrypted GIS plaintext to the base station.

[0007] In the above method, the base station requests encryption parameters from the base station cryptographic machine for each mobile terminal, including: the base station obtaining the total number of mobile terminals selected by the PDT digital trunking system, the mobile terminal air interface number queue, and the base station identifier; and the base station requesting encryption parameters for each mobile terminal from the base station cryptographic machine.

[0008] In the above method, the base station cryptographic machine generates encryption parameters by generating encryption parameter triplets for all mobile terminals.<TSCID,MSID,ENPARAM> A database is established, in which TSCID is the base station identifier, MSID is the mobile terminal air interface number, and ENPARAM is the encryption parameter corresponding to MSID.

[0009] In the above method, the base station cryptographic machine sends the encryption parameters to the base station by: embedding the encryption parameters into the payload of the control signaling frame, carrying them through the downlink signaling of the control channel, and sending them to the base station.

[0010] In the above method, the base station sends a GIS pull-up command carrying encrypted parameters to the mobile terminal via downlink signaling of the control channel, including: sending the mobile terminal's encrypted parameter triplet.<TSCID,MSID,ENPARAM> The encrypted parameters are embedded in the payload of the control signaling frame and transmitted in the GIS pull-up signaling via the downlink signaling of the control channel.

[0011] In the method described above, the length of the encryption parameter is 28 bits.

[0012] In the above method, after embedding the encryption parameters into the payload of the control signaling frame, BPTC error correction coding and interleaving are performed, and / or; when reporting GIS ciphertext to the base station, BPTC error correction coding is performed on the GIS ciphertext.

[0013] In the above method, the process of generating an initial encryption vector based on encryption parameters and the mobile terminal air interface number includes: the mobile terminal extracting encryption parameters and the mobile terminal air interface number from the GIS signaling; and the mobile terminal using the encryption parameters and the mobile terminal air interface number as seeds to calculate the initial encryption vector using the SM3 algorithm.

[0014] In the above method, the process of the base station receiving GIS ciphertext and requesting decryption from the base station cryptographic machine includes: the base station extracting the base station identifier and the mobile terminal air interface number, and providing them, together with the received GIS ciphertext, as base station decryption request data to the base station cryptographic machine.

[0015] In the above method, the base station cryptographic machine generates an initial encryption vector based on encryption parameters and the air interface number of the mobile terminal, decrypts the GIS ciphertext, and sends the decrypted GIS plaintext to the base station. This includes: the base station cryptographic machine extracts the base station identifier and the mobile terminal air interface number from the base station decryption request data, and searches the database for encryption parameters corresponding to the mobile terminal air interface number; the base station cryptographic machine calculates the initial encryption vector based on the encryption parameters and using the encryption parameters and the mobile terminal air interface number as seeds, through the SM3 algorithm; the base station cryptographic machine decrypts the GIS ciphertext based on the initial encryption vector; and the base station cryptographic machine sends the decrypted GIS plaintext to the base station.

[0016] The second aspect of this application provides a GIS data encryption and synchronization device for a PDT digital trunking system. The device includes: a base station, used to establish communication with a mobile terminal according to an air interface protocol and to perform encrypted data interaction with a base station cryptographic machine according to a GIS encryption protocol; a base station cryptographic machine, used to generate encryption parameters for GIS data and send them to the base station, and to generate an initial encryption vector based on the encryption parameters and the air interface number of the mobile terminal, and to decrypt the GIS ciphertext sent by the base station; and multiple mobile terminals, used to receive GIS pull-up commands carrying encryption parameters issued by the base station through downlink signaling of the control channel, generate an initial encryption vector based on the encryption parameters and the air interface number of the mobile terminal, encrypt the GIS data, and report the GIS ciphertext to the base station using the air interface corresponding to the air interface number of the mobile terminal.

[0017] The third aspect of the present invention provides a GIS data encryption and synchronization method, executed by a mobile terminal of a PDT digital trunking system, comprising: receiving a GIS pull-up command carrying encryption parameters issued by a base station through downlink signaling of a control channel, and extracting the encryption parameters; generating an encryption initial vector based on the encryption parameters and the air interface number of the mobile terminal, and encrypting the GIS data; and reporting the GIS ciphertext to the base station through the air interface corresponding to the air interface number of the mobile terminal, so that the base station can decrypt the GIS ciphertext to obtain the GIS data.

[0018] The fourth aspect of the present invention provides a mobile terminal for a PDT digital trunking system, comprising: a receiving module for receiving a GIS pull-up command carrying encrypted parameters sent by a base station via downlink signaling through a control channel; an encryption module for extracting encryption parameters from the command received from the GIS, generating an initial encryption vector based on the encryption parameters and the mobile terminal's air interface number, and encrypting the GIS data; and a sending module for reporting GIS ciphertext to the base station through an air interface corresponding to the mobile terminal's air interface number, so that the base station can decrypt the GIS ciphertext to obtain the GIS data.

[0019] The fifth aspect of this invention provides a GIS data encryption and synchronization method, executed by the base station of a PDT digital trunking system, comprising: requesting encryption parameters from the base station cryptographic machine for each mobile terminal; sending a GIS pull-up command carrying the encryption parameters to the mobile terminal via downlink signaling of the control channel; receiving GIS ciphertext from the mobile terminal; the GIS ciphertext is generated by the mobile terminal based on the encryption parameters and the mobile terminal air interface number to generate an initial encryption vector and encrypt the GIS data, and reported through the air interface corresponding to the mobile terminal air interface number; requesting decryption from the base station cryptographic machine; and receiving the decrypted GIS data from the base station cryptographic machine, the decrypted GIS data being obtained by the base station cryptographic machine based on the encryption parameters and the mobile terminal air interface number to generate an initial encryption vector and decrypt the GIS ciphertext.

[0020] The sixth aspect of this invention provides a base station for a PDT digital trunking system, comprising: an encryption parameter application module for applying for encryption parameters from the base station cryptographic machine for each mobile terminal; an encryption parameter distribution module for distributing a GIS pull-up command carrying the encryption parameters to the mobile terminal via downlink signaling through the control channel; a GIS ciphertext receiving module for receiving GIS ciphertext from the mobile terminal; the GIS ciphertext is generated by the mobile terminal based on the encryption parameters and the mobile terminal's air interface number to generate an initial encryption vector and encrypt the GIS data, and reported through the air interface corresponding to the mobile terminal's air interface number; a decryption application module for applying for decryption from the base station cryptographic machine; and a decrypted data receiving module for receiving decrypted GIS data from the base station cryptographic machine, the decrypted GIS data being obtained by the base station cryptographic machine generating an initial encryption vector based on the encryption parameters and the mobile terminal's air interface number and decrypting the GIS ciphertext.

[0021] The seventh aspect of this invention provides a GIS data encryption and synchronization method, executed by the base station cryptographic machine of a PDT digital trunking system, comprising: generating encryption parameters for each mobile terminal based on a request from the base station; sending the encryption parameters to the base station; and generating encryption parameters based on the generated triplet of encryption parameters from all mobile terminals.<TSCID,MSID,ENPARAM> A database is established, where TSCID is the base station identifier, MSID is the mobile terminal air interface number, and ENPARAM is the encryption parameter corresponding to the MSID. Based on the base station's application, an initial encryption vector is generated based on the encryption parameters and the mobile terminal's air interface number to decrypt the GIS ciphertext. The decrypted GIS plaintext is then sent to the base station.

[0022] The eighth aspect of the present invention provides a base station cryptographic machine for a PDT digital trunking system, comprising: an encryption parameter generation module for generating encryption parameters for each mobile terminal based on a request from the base station; an encryption parameter sending module for sending the encryption parameters to the base station; and a database generation module for generating a database based on the generated encryption parameter triplets of all mobile terminals.<TSCID,MSID,ENPARAM> The system establishes a database, where TSCID is the base station identifier, MSID is the mobile terminal air interface number, and ENPARAM is the encryption parameter corresponding to the MSID. The decryption module generates an initial encryption vector based on the base station's application, the encryption parameters, and the mobile terminal's air interface number, and decrypts the GIS ciphertext. The GIS data sending module sends the decrypted GIS plaintext to the base station.

[0023] By having the features described above, this application can achieve at least one of the following technical effects.

[0024] (1) This application makes full use of the reserved fields in the original PDT communication protocol to transmit the encryption parameters required to generate the GIS encrypted IV, thereby making little change to the original communication protocol and not changing the original PDT digital trunking system GIS data transmission method and process, and not affecting the original PDT digital trunking system GIS scheduling efficiency, and can be widely adapted to PDT digital trunking systems from different manufacturers.

[0025] (2) BPTC error correction coding was applied to the encryption parameters and / or GIS ciphertext used for GIS encrypted data synchronization, which improved the error resistance of GIS encrypted transmission, effectively increased the communication distance, and enhanced the reliability of the system's encrypted transmission.

[0026] (3) By optimizing the length of the encryption parameters for GIS data encryption synchronization, the frequency of GIS data encryption key replacement is reduced. The key replacement cycle can be carried out on an annual basis, which ensures system security and reduces the overhead of the communication system. Attached Figure Description

[0027] Figure 1 This is a schematic diagram illustrating the configuration of the GIS data encryption and synchronization device according to the first embodiment of this application;

[0028] Figure 2 This is a flowchart illustrating the GIS data encryption and synchronization method according to the first embodiment of this application;

[0029] Figure 3 This is a flowchart illustrating the GIS data encryption and synchronization method according to the first embodiment of this application;

[0030] Figure 4 This is a schematic diagram illustrating the GIS data encryption and synchronization control frame of this application;

[0031] Figure 5 This is a functional block diagram illustrating the mobile terminal 30 according to the second embodiment of this application;

[0032] Figure 6 This is a flowchart illustrating a GIS data encryption and synchronization method executed by a mobile terminal 30 according to a second embodiment of this application;

[0033] Figure 7 This is a functional block diagram illustrating the base station 20 according to the third embodiment of this application;

[0034] Figure 8 This is a flowchart illustrating a GIS data encryption and synchronization method performed by base station 20 according to a third embodiment of this application;

[0035] Figure 9 This is a functional block diagram illustrating the base station cryptographic machine 10 according to the fourth embodiment of this application;

[0036] Figure 10 This is a flowchart illustrating a GIS data encryption and synchronization method executed by a base station cryptographic machine 10 according to the fourth embodiment of this application. Detailed Implementation

[0037] Exemplary embodiments or examples of the present invention will now be described in more detail with reference to the accompanying drawings. While exemplary embodiments of the invention are shown in the drawings, it should be understood that the invention can be implemented in various forms and should not be limited to the embodiments or examples set forth herein. Rather, these embodiments or examples are provided to enable a clearer understanding of the invention.

[0038] The terms "first," "second," etc., used in the specification and claims of this application are used to distinguish similar objects, not to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments or examples of this application described herein can be implemented in a sequence other than that illustrated or described. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover a non-exclusive inclusion, such as a process, method, system, product, or apparatus that includes a series of steps or units, not limited to those explicitly listed, but may include other steps or units not explicitly listed. Identical or similar reference numerals throughout the document denote constituent elements having the same or similar functions.

[0039] The specific embodiments of this application will be described in detail below.

[0040] <First Implementation Method>

[0041] The following is for reference. Figures 1-2The first embodiment provides a GIS data encryption and synchronization method and a GIS data encryption and synchronization device for a PDT cluster system.

[0042] Figure 1 The diagram illustrates the configuration of the GIS data encryption and synchronization device 100 in the PDT cluster system, as shown below. Figure 1 As shown, the data encryption and synchronization device 100 may include a base station cryptographic machine 10, a base station 20, and multiple mobile terminals 30. This GIS data encryption and synchronization device 100 may be part of a PDT cluster system.

[0043] The base station cryptographic machine 10 is used to generate encryption parameters for GIS data and send them to the base station 20. Based on the encryption parameters and the air interface number of the mobile terminal, it generates an initial encryption vector to decrypt the GIS ciphertext sent by the base station 20.

[0044] Base station 20 is used to establish communication with mobile terminal 30 according to air interface protocol and to perform encrypted data interaction with base station cryptographic machine 10 according to GIS encryption protocol.

[0045] Here, the base station encryption machine 10 and base station 20 on the base station side are connected via an IP network, that is, using the IP protocol. The aforementioned GIS encryption protocol is a dedicated protocol specifically designed for the encryption processing required by GIS services, and it belongs to the application layer. Therefore, the GIS encryption protocol does not change the original air interface protocol in the PDT digital trunking system.

[0046] Multiple mobile terminals 30 are used to receive GIS pull-up instructions carrying encrypted parameters sent by base station 20 through downlink signaling of control channel, generate encryption initial vector based on encryption parameters and mobile terminal air interface number, encrypt GIS data, and report GIS ciphertext to base station 20 through air interface corresponding to mobile terminal air interface number.

[0047] In this application, the base station 20 and the mobile terminal 30 communicate via an air interface protocol. Here, the air interface protocol can be one currently used in PDT digital trunking systems.

[0048] In other words, existing technologies do not include methods for implementing encrypted GIS communication in PDT digital trunking systems. Therefore, this application achieves encrypted GIS communication by using the original air interface protocol and the aforementioned GIS encryption protocol when the base station 20 communicates with the mobile terminal 30 and the base station cryptographic device 10. Thus, GIS encrypted communication can be implemented without modifying the original air interface protocol, resulting in broad applicability and low cost.

[0049] For details on the specific functions, processing, and effects of the base station cryptographic machine 10, base station 20, and multiple mobile terminals 30, please refer to the following detailed description of the GIS data encryption and synchronization method.

[0050] Figure 2 and Figure 3 This is a flowchart illustrating a GIS data encryption and synchronization method for a PDT digital trunking system. The aforementioned GIS data encryption and synchronization device 100 can execute this GIS data encryption and synchronization method. The method steps executed by the base station cryptographic machine 10, the base station 20, and the multiple mobile terminals 30 are as follows.

[0051] In step S101, base station 20 requests the encryption parameter ENPARAM of GIS data from base station cryptography machine 10 for each mobile terminal.

[0052] Here, base station 20 can request the encryption parameter ENPARAM of the mobile terminal 30 selected by the PDT digital trunking system from base station cryptography machine 10.

[0053] Base station 20 can apply for encryption parameter ENPARAM for each mobile terminal 30 separately, and base station 20 can also apply for encryption parameter ENPARAM uniformly for all mobile terminals 30 selected by the PDT digital trunking system among the mobile terminals 30 it manages.

[0054] As an example, base station 20 can obtain the total number MSCount of mobile terminals 30 selected by the PDT digital trunking system, the MSID[MSCount] of the mobile terminal air interface number queue of these mobile terminals, and the base station identifier TSCID that identifies the base station 20, and apply to the base station cryptographic machine 10 for the encryption parameter ENPARAM of each mobile terminal 30. The encryption parameter ENPARAM is used to encrypt GIS data.

[0055] By uniformly applying for encryption parameters ENPARAM for mobile terminals 30, not only can the application efficiency be improved, but it is also convenient to uniformly manage base station 20, mobile terminals 30 under its management, and encryption parameters ENPARAM of mobile terminals 30 (e.g., the database described later), thereby improving the management efficiency of the entire GIS encrypted communication.

[0056] In step S102, the base station cryptographic machine 10 generates the encryption parameter ENPARAM. Here, the length of the encryption parameter ENPARAM is designed to be 28 bits. The reason for designing the length of the encryption parameter ENPARAM to be 28 bits will be detailed later in the section on... Figure 4 Explanation.

[0057] The base station cryptographic machine 10 generates encryption parameters ENPARAM for each mobile terminal 30. Specifically, in step S101, when the base station 20 requests encryption parameters ENPARAM for each mobile terminal 30 individually, the base station cryptographic machine 10 generates encryption parameters ENPARAM for each mobile terminal 30 individually; while in step S101, when the base station 20 requests encryption parameters ENPARAM for all mobile terminals 30 at the same time, the base station cryptographic machine 10 generates encryption parameters ENPARAM uniformly.

[0058] As an example, the base station cryptographic machine 10 can also, after generating the encryption parameters of all mobile terminals 30, base station cryptographic machine 10 can also base its encryption parameters on the triplet of encryption parameters of the mobile terminals.<TSCID,MSID,ENPARAM> A database is established, in which TSCID is the base station identifier, MSID is the mobile terminal air interface number, and ENPARAM is the encryption parameter corresponding to MSID.

[0059] Generate encrypted parameter triplet<TSCID,MSID,ENPARAM> Subsequently, either simultaneously with or before sending the data to base station 20, the base station cryptographic device 10 can also save the encryption parameters for later use when decrypting the GIS encrypted text reported by the mobile terminal. For example, the encryption parameter triplet can be...<TSCID,MSID,ENPARAM> The constructed database is stored in the base station cryptographic machine 10.

[0060] In step S103, the base station cryptographic machine 10 sends the generated and encrypted parameter ENPARAM to the base station 20.

[0061] As an example, the encrypted parameter ENPARAM can be sent to base station 20 via the GIS encryption protocol described above through an IP network.

[0062] In step S104, base station 20 sends a GIS pull-up command to the mobile terminal through downlink signaling of the control channel. The GIS pull-up command carries the encrypted parameter ENPARAM.

[0063] Here, the GIS pull-up command is used to instruct the mobile terminal 30 to report its own GIS data to the base station 20.

[0064] As an example, the encryption parameter ENPARAM of the mobile terminal 30 can be embedded into the payload of the control signaling frame. After BPTC error correction coding and interleaving, it can be carried in the GIS pull-up signaling and sent to the mobile terminal 30 through the control channel downlink signaling C_DPULL.

[0065] As described above, the mobile terminal encryption parameter triplet<TSCID,MSID,ENPARAM> In this case, the mobile terminal encryption parameter triplet can also be used.<TSCID,MSID,ENPARAM> The encryption parameter ENPARAM is embedded in the payload of the control signaling frame.

[0066] In this application, during the communication from base station 20 to mobile terminal 30 in step S104, encryption parameters are transmitted using the payload of the control signaling frame via downlink signaling through the control channel. Here, since the control signaling frame is used to transmit encryption parameters for GIS data to achieve encrypted synchronization of GIS data, it can also be referred to as… Figure 4 The GIS data encryption synchronization control frame.

[0067] like Figure 4 As shown, in a PDT digital trunking system, a control signaling frame typically includes: an 80-bit payload, namely the control signaling block (CSBK), and a 16-bit cyclic redundancy check (CRC) code.

[0068] In this application, the 80-bit payload CSBK in the existing control signaling is used, and the encryption parameter ENPARAM is embedded in it without changing its length to realize the transmission of the encryption parameter.

[0069] Considering the limited space of the control signaling payload, and in order to effectively utilize wireless channel resources, the encryption parameter length is designed to be 28 bits in this application. Therefore, the effective count range of the encryption parameter is 0 to 268435455 (i.e., 2^68435455). 28 For example, it can be designed such that the initial value of the encryption parameter is 0, and the encryption parameter is incremented by 1 and saved to the database every time the base station sends a GIS pull-up command. If the base station's GIS pull-up command sending cycle is calculated to be 30 seconds, and it works 24 hours a day, the lifespan of the encryption parameter is T = (268435456 × 30) / (60 × 60 × 24 × 366) = 254.66 years. When encrypting GIS data, the encryption initialization vector IV and encryption key generated based on the encryption parameter are used. Since the lifespan of the encryption parameter is longer than the entire lifespan of a typical PDT system, the encryption parameter has a different value throughout the entire lifespan of the PDT system, thus ensuring the security of GIS encrypted communication without changing the GIS data encryption key. In other words, this application optimizes the design of the encryption parameter length for GIS data encryption synchronization, thereby reducing the frequency of GIS data encryption key replacement, which ensures system security and reduces the overhead of the communication system.

[0070] Furthermore, this application utilizes reserved fields in the original PDT communication protocol to transmit the encryption parameter ENPARAM required for generating the GIS encrypted initialization vector IV. This requires minimal modification to the original communication protocol and does not alter the GIS data transmission method and process of the original PDT digital trunking system, nor does it affect the GIS scheduling efficiency of the original PDT digital trunking system. It is widely adaptable to PDT digital trunking systems from different manufacturers. Moreover, it does not require modification to existing PDT standards and hardware structures, thus facilitating the implementation of encrypted GIS data transmission within existing PDT digital trunking systems.

[0071] Furthermore, in this application, in the communication from the base station cryptographic machine 10 to the base station 20 in step S103 and the communication from the base station 20 to the mobile terminal 30 in step S104, after embedding the encryption parameter ENPARAM into the payload of the control signaling frame, as follows... Figure 4 As shown, after BPTC error correction coding and interleaving, the signal can be transmitted to the mobile terminal 30 via the GIS pull-up signaling carried in the downlink signaling C_DPULL of the control channel. By using BPTC error correction coding in the transmission of encrypted parameters, the error resistance of GIS encrypted transmission is improved, the communication distance is effectively increased, and the reliability of encrypted transmission of the PDT digital trunking system is enhanced.

[0072] In step S105, the mobile terminal 30 receives the GIS pull-up command issued by the base station 20 and extracts the encrypted parameter ENPARAM from the GIS pull-up command.

[0073] In step S106, the mobile terminal 30 generates an initial encryption vector IV based on the encryption parameter ENPARAM and the mobile terminal air interface number MSID, and encrypts the GIS data.

[0074] As an example, firstly, using the encryption parameter ENPARAM and the mobile terminal air interface number MSID as seeds, the SM3 algorithm is used to generate the encryption initialization vector IV.

[0075] Specifically, IV = MSB 128 (SM3_HASH(ENPARAM||MSID))

[0076] Secondly, the GIS data is encrypted using the GIS data encryption key and the initialization vector IV to generate GIS ciphertext.

[0077] The GIS data here can be obtained by the mobile terminal 30 by collecting its own location data in real time before encrypting the GIS data.

[0078] In step S107, the mobile terminal 30 reports the GIS encrypted text to the base station 20 through the air interface corresponding to the mobile terminal air interface number.

[0079] Here, the GIS encrypted message is carried by the control channel uplink signaling C_LOC1U and reported to base station 20 through the air interface corresponding to the mobile terminal's air interface number.

[0080] Alternatively, BPTC error correction coding can be used for the transmission of GIS encrypted text, which can further improve the error resistance of GIS encrypted transmission, effectively increase the communication distance, and enhance the reliability of encrypted transmission in the PDT digital trunking system.

[0081] In step S108, after receiving the GIS encrypted text, base station 20 requests decryption from base station cryptographic machine 10.

[0082] Base station 20 can request decryption by sending a GIS ciphertext decryption request to base station cryptographic machine 10. Alternatively, base station 20 can first verify the received GIS ciphertext, and then send a GIS ciphertext decryption request to base station cryptographic machine 10 to request decryption after successful verification.

[0083] As an example, when base station 20 receives GIS encrypted text reported by mobile terminal 30A, the control channel uplink signaling C_LOC1U can carry only the GIS encrypted text. Base station 20 can extract the air interface number (MSID) of mobile terminal 30A from this signaling and report the data. A And GIS encrypted text, combined with the base station identifier TSCID of base station 20 itself, will <TSCID,MSID A The GIS ciphertext is sent as decryption request data to the base station cryptographic machine 10 to request the decryption of the GIS ciphertext.

[0084] In step S109, the base station cryptographic machine 10 generates an initial encryption vector IV for GIS data based on the encryption parameter ENPARAM and the mobile terminal air interface number MSID, decrypts the GIS ciphertext, and sends the decrypted GIS plaintext to the base station.

[0085] As an example, if the encryption parameter ENPARAM is saved in step S103, the base station cryptographic machine 10 can use the encryption parameter ENPARAM and the mobile terminal air interface number MSID saved in step S103 as seeds to generate the GIS data encryption initialization vector IV through the SM3 algorithm, and use the encryption initialization vector IV to decrypt the GIS ciphertext.

[0086] As another example, the base station cryptographic device 10 can be as follows: Figure 3 As shown, in step S1091, the decryption request data sent by base station 20 is extracted. <TSCID,MSIDA TSCID and MSID in GIS Encrypted > A As a feature value, and from the saved mobile terminal encrypted parameter triplet<TSCID,MSID,ENPARAM> Search the database for MSID A The corresponding ENPARAM A .

[0087] In step S1092, the base station cryptographic machine 10 calculates the initial encryption vector IV of the GIS ciphertext. The method by which the base station cryptographic machine 10 calculates the initial encryption vector IV is the same as the method by which the mobile terminal 30 calculates the GIS data encryption IV, where IV = MSB. 128 (SM3_HASH(ENPARAMA||MSID A )).

[0088] In step S1093, the base station cryptographic machine 10 decrypts the GIS ciphertext using the initial encryption vector IV.

[0089] In step S1094, the base station cryptographic machine 10 sends the decrypted GIS plaintext to the base station 20.

[0090] In this embodiment, through the communication interaction and cooperation between the base station cryptographic machine 10, the base station 20, and multiple mobile terminals 30, encryption parameters are transmitted through reserved fields in the original communication protocol. This enables GIS encryption synchronization in the PDT digital cluster system with minimal changes to the original communication protocol and without altering the original PDT digital cluster system's GIS data transmission method and process.

[0091] <Second Implementation Method>

[0092] The second embodiment of this application provides a mobile terminal 30 for a PDT digital trunking system and a GIS data encryption and synchronization method executed by the mobile terminal 30. The mobile terminal 30 for the PDT digital trunking system may include a vehicle-mounted terminal, a handheld terminal, but is not limited thereto.

[0093] In this embodiment, such as Figure 5 As shown, the mobile terminal 30 includes a receiving module 31, an encryption module 32, and a sending module 33. In this embodiment, as... Figure 6 As shown, the GIS data encryption and synchronization method executed by the mobile terminal 30 may include steps S31 to S33.

[0094] In step S31, the receiving module 31 of the mobile terminal 30 receives the GIS pull-up command carrying encrypted parameters issued by the base station 20 through the downlink signaling of the control channel.

[0095] In step 32, the encryption module 32 of the mobile terminal 30 extracts the encryption parameters from the instructions received from the GIS, generates the initial encryption vector IV based on the encryption parameters and the mobile terminal air interface number, and encrypts the GIS data.

[0096] As an example, firstly, the encryption module 32 can use the encryption parameter ENPARAM and the mobile terminal air interface number MSID as seeds to generate the encryption initialization vector IV using the SM3 algorithm.

[0097] Specifically, IV = MSB 128 (SM3_HASH(ENPARAM||MSID))

[0098] Secondly, the encryption module 32 encrypts the GIS data using the GIS data encryption key and the encryption initialization vector IV to generate GIS ciphertext.

[0099] The GIS data here can be obtained by the mobile terminal 30 by collecting its own location data in real time before encrypting the GIS data.

[0100] In step S33, the sending module 33 of the mobile terminal 30 reports the GIS encrypted text to the base station 20 through the air interface corresponding to the air interface number of the mobile terminal, so that after receiving the GIS encrypted text, the base station 20 initiates a GIS encrypted data decryption request to the base station cryptographic machine to obtain the GIS data.

[0101] The sending module 33 can carry GIS encrypted text in the control channel uplink signaling C_LOC1U and report it to the base station 20 through the air interface corresponding to the mobile terminal air interface number MSID.

[0102] The sending module 33 can also use BPTC error correction coding for the transmission of GIS encrypted text, which can further improve the error resistance of GIS encrypted transmission, effectively increase the communication distance, and enhance the reliability of encrypted transmission of PDT digital trunking system.

[0103] Here, the specific processing of the receiving module 31, encryption module 32, and sending module 33 in this embodiment, as well as the specific processing of steps S31 to S33, are respectively different from those in the first embodiment. Figures 2-3 Steps S104, S105-S106, and S107 correspond to each other, so you can refer to the corresponding content in the first embodiment.

[0104] In this embodiment, the encrypted parameters received by the mobile terminal 30 are transmitted using the existing communication protocol in the PDT digital trunking system. Therefore, the mobile terminal 30 can achieve encrypted communication of GIS data without changing the communication protocol. Thus, it is highly applicable to mobile terminals.

[0105] <Third Implementation Method>

[0106] The third embodiment of this application provides a base station 20 of a PDT digital trunking system and a GIS data encryption and synchronization method performed by the base station 20.

[0107] In this embodiment, such as Figure 7 As shown, base station 20 includes: an encryption parameter application module 21, an encryption parameter receiving module 22, an encryption parameter distribution module 23, a GIS encrypted text receiving module 24, a decryption application module 25, and a decrypted data receiving module 26. In this embodiment, as... Figure 8 As shown, the GIS data encryption and synchronization method performed by the base station 20 may include steps S21 to S25.

[0108] In step S21, the encryption parameter application module 21 of the base station 20 applies for encryption parameters from the base station cryptographic machine 10 for each mobile terminal 30.

[0109] The encryption parameter application module 21 can apply for encryption parameters ENPARAM for each mobile terminal 30 separately; the encryption parameter application module 21 can also apply for encryption parameters ENPARAM uniformly for all mobile terminals 30 selected by the PDT digital trunking system among the mobile terminals 30 managed by the base station 20.

[0110] As an example, the encryption parameter application module 21 can obtain the total number MSCount of the mobile terminals 30 selected by the PDT digital trunking system, the MSID[MSCount] of the mobile terminal air interface number queue of these mobile terminals, and the base station identifier TSCID that identifies the base station 20, and apply to the base station cryptographic machine 10 for the encryption parameter ENPARAM of each mobile terminal 30. The encryption parameter ENPARAM is used by the mobile terminal 30 to generate the encryption initialization vector IV required for encrypting GIS data.

[0111] The encryption parameter application module 21 of base station 20 can not only improve the application efficiency by uniformly applying for encryption parameters ENPARAM for mobile terminal 30, but also facilitate the unified management (e.g., database) of base station 20, the mobile terminal 30 it manages, and the encryption parameters ENPARAM of mobile terminal 30, thereby improving the management efficiency of the entire encrypted communication.

[0112] In step S22, the encryption parameter receiving module 22 of base station 20 receives the encryption parameters sent by base station cryptographic machine 10.

[0113] As an example, the encrypted parameter ENPARAM can be sent to base station 20 via the GIS encryption protocol over an IP network.

[0114] In step S23, the encryption parameter sending module 23 of base station 20 sends a GIS pull-up command carrying the encryption parameters to the mobile terminal through downlink signaling of the control channel.

[0115] As an example, the encryption parameter delivery module 23 can embed the encryption parameter ENPARAM of the mobile terminal 30 into the payload of the control signaling frame, and send it to the mobile terminal 30 after BPTC error correction coding and interleaving through the downlink signaling C_DPULL of the control channel.

[0116] As described above, the mobile terminal encryption parameter triplet<TSCID,MSID,ENPARAM> In this case, the encryption parameter distribution module 23 can also transmit the encrypted parameter triplet of the mobile terminal.<TSCID,MSID,ENPARAM> The encryption parameter ENPARAM is embedded in the payload of the control signaling frame.

[0117] As described in the first embodiment, in this embodiment, the 80-bit payload CSBK in the existing control signaling is used, and the encryption parameter ENPARAM is embedded without changing its length to achieve the transmission of the encryption parameter. Based on this, the encryption parameter length is designed to be 28 bits in this application, that is, the encryption parameter length for GIS data encryption synchronization has been optimized, thereby reducing the frequency of changing the GIS data encryption key, which ensures system security and reduces the overhead of the communication system.

[0118] Furthermore, in this application, during the communication from base station 20 to mobile terminal 30 in step S23, the encryption parameter ENPARAM can be embedded into the payload of the control signaling frame, as follows: Figure 4 As shown, the encryption parameter ENPARAM is carried by the downlink signaling C_DPULL on the control channel and sent to the mobile terminal 30 after BPTC error correction coding and interleaving. By using BPTC error correction coding in the transmission of the encryption parameter, the error resistance of GIS encrypted transmission is improved, the communication distance is effectively increased, and the reliability of encrypted transmission in the PDT digital trunking system is enhanced.

[0119] In step S24, the GIS encrypted text receiving module 24 of base station 20 receives GIS encrypted text from mobile terminal 30.

[0120] The GIS encrypted text is generated by the mobile terminal 30 based on the encryption parameter ENPARAM and the mobile terminal air interface number MSID to generate an initial encryption vector IV and encrypt the GIS data. It is then reported through the air interface corresponding to the mobile terminal air interface number MSID.

[0121] In step S25, the decryption request module 25 of base station 20 requests decryption from base station cryptographic machine 10.

[0122] Base station 20 can request decryption by sending a GIS ciphertext decryption request to base station cryptographic machine 10.

[0123] As an example, when the decryption request module 25 of base station 20 can receive the GIS ciphertext reported by mobile terminal 30A, the control channel uplink signaling C_LOC1U can only carry the GIS ciphertext. The decryption request module 25 can extract the air interface number (MSID) of mobile terminal 30A from this signaling and report it. A And GIS encrypted text, combined with the base station identifier TSCID of base station 20 itself, will <TSCID,MSID A The GIS ciphertext is sent as decryption request data to the base station cryptographic machine 10 to request the decryption of the GIS ciphertext.

[0124] In step S26, the decryption data receiving module 26 of base station 20 receives the decrypted GIS data from base station cryptographic machine 10.

[0125] The decrypted GIS data is obtained by the base station cryptographic machine 10 generating an initial encryption vector IV based on the encryption parameter ENPARAM and the mobile terminal air interface number MSID, and then decrypting the GIS ciphertext.

[0126] As an example, when the base station cryptographic machine 10 stores the encryption parameter ENPARAM, the base station cryptographic machine 10 can use the stored encryption parameter ENPARAM and the mobile terminal air interface number MSID as seeds to generate the GIS data encryption initialization vector IV through the SM3 algorithm. After decrypting the GIS ciphertext using the encryption initialization vector IV, it is sent to the decryption data receiving module 25 of the base station 20.

[0127] As another example, the base station cryptographic machine 10 can also decrypt the data and send it to the decryption data receiving module 26 of the base station 20 as follows: First, extract the decryption request data sent by the base station 20. <TSCID,MSID A TSCID and MSID in GIS Encrypted > A As a feature value, and from the saved mobile terminal encrypted parameter triplet<TSCID,MSID,ENPARAM> Search the database for MSID A The corresponding ENPARAM A Secondly, the initial encryption vector (IV) of the GIS encrypted data is calculated. The method for calculating the initial encryption vector IV is the same as the method for calculating the encrypted IV of GIS data on the mobile terminal 30. IV = MSB 128(SM3_HASH(ENPARAMA||MSID A Then, the GIS ciphertext is decrypted using the GIS data encryption key and the encryption initialization vector IV; the decrypted GIS plaintext is then sent to the decryption data receiving module 25 of the base station 20.

[0128] Here, the processing of the encryption parameter request module 21, encryption parameter receiving module 22, encryption parameter sending module 23, GIS encrypted text receiving module 24, decryption request module 25, and decryption data receiving module 26 of the base station 20 in this embodiment, as well as the processing of steps S21 to S25, are respectively different from those in the first embodiment. Figures 2-3 Steps S101, S104, S107, S108, and S109 correspond to each other, so you can refer to the corresponding content in the first embodiment.

[0129] In this embodiment, base station 20 utilizes the existing communication protocol in the PDT digital trunking system to transmit encrypted parameters. Therefore, base station 20 can achieve encrypted communication of GIS data without changing the communication protocol. This makes it highly applicable to various base stations.

[0130] <Fourth Implementation Method>

[0131] The fourth embodiment of this application provides a mobile terminal 30 for a PDT digital trunking system and a GIS data encryption and synchronization method executed by the mobile terminal 30.

[0132] In this embodiment, such as Figure 9 As shown, the base station cryptographic device 10 includes an encryption parameter generation module 11, an encryption parameter sending module 12, a decryption module 13, and a GIS data sending module 14. In this embodiment, as... Figure 10 As shown, the GIS data encryption and synchronization method executed by the mobile terminal 30 may include steps S11 to S14.

[0133] In step S11, the encryption parameter generation module 11 of the base station cryptographic machine 10 generates encryption parameters ENPARAM for each mobile terminal 30 based on the application from the base station 20. Here, the encryption parameter ENPARAM is 28 bits.

[0134] The encryption parameter generation module 11 generates encryption parameters ENPARAM for each mobile terminal 30. Specifically, the encryption parameter generation module 11 can generate encryption parameters ENPARAM for each mobile terminal 30 separately when the base station 20 requests encryption parameters ENPARAM for each mobile terminal 30 individually; or it can generate encryption parameters ENPARAM uniformly when the base station 20 requests encryption parameters ENPARAM for all mobile terminals 30 at the same time.

[0135] As an example, the encryption parameter generation module 11 can also, after generating the encryption parameters for all mobile terminals 30, base its encryption parameter on the mobile terminal encryption parameter triplet.<TSCID,MSID,ENPARAM> A database is established, in which TSCID is the base station identifier, MSID is the mobile terminal air interface number, and ENPARAM is the encryption parameter corresponding to MSID.

[0136] Generate encrypted parameter triplet<TSCID,MSID,ENPARAM> After the database, the encryption parameter generation module 11 can also generate the encryption parameter triplet of all mobile terminals constituted by the body.<TSCID,MSID,ENPARAM> The database is stored in the cryptographic machine 10 of the base station.

[0137] In step S12, the encryption parameter sending module 12 of the base station cryptographic machine 10 sends the encryption parameters to the base station 20.

[0138] As an example, the encrypted parameter sending module 12 can embed the encrypted parameter ENPARAM into the payload of the control signaling frame, and after BPTC error correction coding and interleaving, it can be carried by the downlink signaling of the control channel and sent to the base station 20.

[0139] As described in the first embodiment, in this embodiment, the encryption parameter sending module 12 uses the existing 80-bit payload CSBK from the control signaling and embeds the encryption parameter ENPARAM without changing its length to achieve the transmission of encryption parameters. Therefore, the length of the encryption parameter ENPARAM needs to be less than or equal to the length of the payload CSBK. Based on this, the encryption parameter length is designed to be 28 bits in this application, that is, the encryption parameter length for GIS data encryption synchronization has been optimized, thereby reducing the frequency of changing the GIS data encryption key, which ensures system security and reduces the overhead of the communication system.

[0140] In step S13, the decryption module 13 of the base station cryptographic machine 10 generates an initial encryption vector IV based on the encryption parameter ENPARAM and the air interface number MSID of the mobile terminal, based on the application of the base station 20, and decrypts the GIS ciphertext.

[0141] As an example, when the base station cryptographic machine 10 stores the encryption parameter ENPARAM, the decryption module 13 can use the stored encryption parameter ENPARAM and the mobile terminal air interface number MSID as seeds to generate the GIS data encryption initialization vector IV through the SM3 algorithm, and use the encryption initialization vector IV to decrypt the GIS ciphertext.

[0142] As another example, the decryption module 13 can also perform decryption as follows: First, extract the decryption request data sent by the base station 20. <TSCID,MSID A TSCID and MSID in GIS Encrypted > A As a feature value, and from the saved mobile terminal encrypted parameter triplet<TSCID,MSID,ENPARAM> Search the database for MSID A The corresponding ENPARAM A Secondly, the initial encryption vector (IV) of the GIS encrypted data is calculated. The method for calculating the initial encryption vector IV is the same as the method for calculating the encrypted IV of GIS data on the mobile terminal 30. IV = MSB 128 (SM3_HASH(ENPARAMA||MSID A Then, the encrypted initialization vector IV is used to decrypt the GIS ciphertext; the decrypted GIS plaintext is then sent to the decryption data receiving module 25 of the base station 20.

[0143] In step S14, the GIS data sending module 14 of the base station cryptographic machine 10 sends the decrypted GIS plaintext to the base station 20.

[0144] Here, the processing of the encryption parameter generation module 11, encryption parameter sending module 12, decryption module 13, and GIS data sending module 14 of the base station cryptographic machine 10 in this embodiment, as well as the processing of steps S11 to S14, are respectively different from those in the first embodiment. Figures 2-3 Steps S102, S103, S104, S108, and S109 correspond to each other, so you can refer to the corresponding content in the first embodiment.

[0145] In this embodiment, the encryption parameter length for GIS data encryption synchronization by the base station cryptographic machine 10 has been optimized, thereby reducing the frequency of GIS data encryption key replacement, which ensures system security and reduces the overhead of the communication system.

[0146] Although the above-described embodiments only provide a PDT digital trunking system and a GIS data encryption and synchronization method, a base station, a mobile terminal, and a base station cryptographic machine, this application can also be implemented by storing a storage medium containing a program for executing the steps of the above-described method. The base station, mobile terminal, and base station cryptographic machine can also be implemented by including a processor and a memory containing a program for executing the steps of the above-described method.

[0147] Furthermore, the division of modules or steps in the aforementioned PDT digital cluster system, GIS data encryption and synchronization method, base station, mobile terminal, and base station cryptographic machine is merely illustrative, and any part of it can be split and combined.

[0148] While the embodiments and specific examples of the present invention have been described above in conjunction with the accompanying drawings, those skilled in the art can make various modifications and variations without departing from the spirit and scope of the present invention, and all such modifications and variations fall within the scope defined by the claims.

Claims

1. A method for synchronizing GIS data encryption of a PDT digital trunking system, comprising: a base station applying for encryption parameters of GIS data to a base station cipher machine for each mobile terminal; the base station cipher machine generating the encryption parameters; the base station cipher machine sending the encryption parameters to the base station; the base station issuing a GIS pull-up instruction to the mobile terminal through downlink signaling of a control channel, the encryption parameters being carried in the GIS pull-up instruction; the mobile terminal receiving the GIS pull-up instruction; the mobile terminal extracting the encryption parameters from the GIS pull-up instruction, generating an encryption initial vector based on the encryption parameters and an air interface number of the mobile terminal, and encrypting GIS data; the mobile terminal reporting GIS ciphertext to the base station through an air interface corresponding to the air interface number of the mobile terminal; the base station receiving the GIS ciphertext and applying for decryption to the base station cipher machine; and the base station cipher machine generating an encryption initial vector based on the encryption parameters and the air interface number of the mobile terminal, decrypting the GIS ciphertext, and sending the decrypted GIS plaintext to the base station, the encryption initial vector being calculated by an SM3 algorithm with the encryption parameters and the air interface number of the mobile terminal as seeds. 2.The method of claim 1, wherein the base station applying for encryption parameters to the base station cipher machine for each mobile terminal comprises: the base station obtaining a total number of mobile terminals selected by the PDT digital trunking system, an air interface number queue, and a base station identifier; the base station applying for encryption parameters for each mobile terminal to the base station cipher machine. 3.The method of claim 2, wherein the base station cipher machine generating the encryption parameters comprises: the base station cipher machine generating encryption parameter triplets <TSCID, MSID, ENPARAM> for all mobile terminals and establishing a database, wherein TSCID is a base station identifier, MSID is an air interface number of a mobile terminal, and ENPARAM is an encryption parameter corresponding to MSID. 4.The method of claim 3, wherein the base station cipher machine sending the encryption parameters to the base station comprises: the base station cipher machine sending the encryption parameters to the base station through a GIS encryption protocol of an application layer via an IP network. 5.The method of claim 4, wherein the base station issuing a GIS pull-up instruction carrying the encryption parameters to the mobile terminal through downlink signaling of a control channel comprises: embedding the encryption parameters in the encryption parameter triplets <TSCID, MSID, ENPARAM> for mobile terminals in a payload of a control signaling frame and sending them in the GIS pull-up instruction through downlink signaling of a control channel. 6.The method of claim 4 or 5, wherein the encryption parameters have a length of 28 bits. 7.The method of claim 6, wherein after embedding the encryption parameters in the payload of the control signaling frame, BPTC error correction coding and interleaving are further performed, and / or when reporting the GIS ciphertext to the base station, BPTC error correction coding is performed on the GIS ciphertext. ​ 8. The method of claim 7, wherein the mobile terminal generates an encryption initial vector based on the encryption parameter and the air interface number of the mobile terminal comprises: the mobile terminal extracts the encryption parameter and the air interface number of the mobile terminal from the GIS pull signaling; the mobile terminal calculates the encryption initial vector by the SM3 algorithm with the encryption parameter and the air interface number of the mobile terminal as seeds.

9. The method of claim 8, wherein the base station receives the GIS ciphertext and applies for decryption to the base station cryptomachine comprises: the base station extracts the base station identifier and the air interface number of the mobile terminal, and provides the base station identifier and the air interface number of the mobile terminal together with the received GIS ciphertext to the base station cryptomachine as base station decryption request data.

10. The method of claim 8, wherein the base station cryptomachine generates an encryption initial vector based on the encryption parameter and the air interface number of the mobile terminal, decrypts the GIS ciphertext, and sends the decrypted GIS plaintext to the base station comprises: the base station cryptomachine extracts the base station identifier and the air interface number of the mobile terminal in the base station decryption request data, and finds the encryption parameter corresponding to the air interface number from the database; the base station cryptomachine calculates the encryption initial vector by the SM3 algorithm based on the encryption parameter and with the encryption parameter and the air interface number of the mobile terminal as seeds; the base station cryptomachine decrypts the GIS ciphertext based on the encryption initial vector; and the base station cryptomachine sends the decrypted GIS plaintext to the base station.

11. A GIS data encryption synchronization device of a PDT digital trunking system, comprising: a base station for establishing communication with a mobile terminal according to an air interface protocol and for interacting with a base station cryptomachine for encrypted data according to a GIS encryption protocol; a base station cryptomachine for generating an encryption parameter of GIS data and sending the encryption parameter to the base station, generating an encryption initial vector based on the encryption parameter and an air interface number of the mobile terminal, and decrypting the GIS ciphertext sent by the base station; and a plurality of mobile terminals for receiving a GIS pull instruction carrying the encryption parameter sent by the base station through control channel downlink signaling, generating an encryption initial vector based on the encryption parameter and the air interface number of the mobile terminal, and encrypting GIS data, and reporting the GIS ciphertext to the base station using an air interface corresponding to the air interface number, the encryption initial vector is calculated by the SM3 algorithm with the encryption parameter and the air interface number of the mobile terminal as seeds.

12. A GIS data encryption synchronization method executed by a mobile terminal of a PDT digital trunking system, comprising: receiving a GIS pull instruction carrying an encryption parameter sent by a base station through control channel downlink signaling, and extracting the encryption parameter; generating an encryption initial vector based on the encryption parameter and an air interface number of the mobile terminal, and encrypting GIS data; and ​ ​ ​ reporting GIS cipher text to the base station through an air interface corresponding to the air interface number, so that the base station receives the GIS cipher text and applies for decryption to a base station cipher machine to obtain GIS data, the decrypted GIS data being obtained by the base station cipher machine based on the encryption parameter and the air interface number of the mobile terminal to generate an encryption initial vector and decrypt the GIS cipher text, the encryption initial vector being calculated by an SM3 algorithm with the encryption parameter and the air interface number of the mobile terminal as seeds.

13. A mobile terminal for a PDT digital trunking system, comprising: a receiving module configured to receive a GIS pull-up instruction carrying an encryption parameter and issued by a base station through control channel downlink signaling; an encryption module configured to extract the encryption parameter from the GIS pull-up instruction, generate an encryption initial vector based on the encryption parameter and an air interface number of the mobile terminal, and encrypt GIS data; and a sending module configured to report GIS cipher text to the base station through an air interface corresponding to the air interface number, so that the base station receives the GIS cipher text and applies for decryption to a base station cipher machine to obtain GIS data, the decrypted GIS data being obtained by the base station cipher machine based on the encryption parameter and the air interface number of the mobile terminal to generate an encryption initial vector and decrypt the GIS cipher text, the encryption initial vector being calculated by an SM3 algorithm with the encryption parameter and the air interface number of the mobile terminal as seeds.

14. A GIS data encryption synchronization method, executed by a base station of a PDT digital trunking system, comprising: applying for an encryption parameter for each mobile terminal to a base station cipher machine; issuing a GIS pull-up instruction carrying the encryption parameter to the mobile terminal through control channel downlink signaling; receiving GIS cipher text from the mobile terminal, the GIS cipher text being encrypted by the mobile terminal based on the encryption parameter and an air interface number of the mobile terminal to generate an encryption initial vector and encrypt GIS data and reported through an air interface corresponding to the air interface number; applying for decryption to the base station cipher machine; receiving decrypted GIS data from the base station cipher machine, the decrypted GIS data being obtained by the base station cipher machine based on the encryption parameter and the air interface number of the mobile terminal to generate an encryption initial vector and decrypt the GIS cipher text, the encryption initial vector being calculated by an SM3 algorithm with the encryption parameter and the air interface number of the mobile terminal as seeds.

15. A base station for a PDT digital trunking system, comprising: an encryption parameter application module configured to apply for an encryption parameter for each mobile terminal to a base station cipher machine; an encryption parameter issuing module configured to issue a GIS pull-up instruction carrying the encryption parameter to the mobile terminal through control channel downlink signaling; The GIS ciphertext receiving module is configured to receive a GIS ciphertext from the mobile terminal, the GIS ciphertext being encrypted by the mobile terminal based on the encryption parameter and the air interface number of the mobile terminal to generate an encryption initial vector and encrypt GIS data and reported on an air interface corresponding to the air interface number of the mobile terminal. The decryption application module is configured to apply decryption to the base station cipher machine. The decrypted data receiving module is configured to receive the decrypted GIS data from the base station cipher machine, the decrypted GIS data being obtained by the base station cipher machine based on the encryption parameter and the air interface number of the mobile terminal to generate an encryption initial vector and decrypt the GIS ciphertext. The encryption initial vector is calculated by the SM3 algorithm with the encryption parameter and the air interface number of the mobile terminal as seeds.

16. A GIS data encryption synchronization method, executed by a base station cipher machine of a PDT digital trunking system, comprising: generating, based on an application of a base station, an encryption parameter for each mobile terminal; sending the encryption parameter to the base station; establishing a database based on encryption parameter triplets <TSCID, MSID, ENPARAM> of all generated mobile terminals, wherein TSCID is a base station identifier, MSID is an air interface number of a mobile terminal, and ENPARAM is an encryption parameter corresponding to MSID; decrypting, based on an application of the base station, a GIS ciphertext based on the encryption parameter and the air interface number of the mobile terminal to generate an encryption initial vector, the GIS ciphertext being obtained by the mobile terminal based on the encryption parameter and the air interface number of the mobile terminal to generate an encryption initial vector and encrypt GIS data; sending the decrypted GIS plaintext to the base station, the encryption initial vector is calculated by the SM3 algorithm with the encryption parameter and the air interface number of the mobile terminal as seeds.

17. A base station cipher machine for a PDT digital trunking system, comprising: an encryption parameter generation module configured to generate, based on an application of a base station, an encryption parameter for each mobile terminal; an encryption parameter sending module configured to send the encryption parameter to the base station; a database generation module configured to establish a database based on encryption parameter triplets <TSCID, MSID, ENPARAM> of all generated mobile terminals, wherein TSCID is a base station identifier, MSID is an air interface number of a mobile terminal, and ENPARAM is an encryption parameter corresponding to MSID; a decryption module configured to decrypt, based on an application of the base station, a GIS ciphertext based on the encryption parameter and the air interface number of the mobile terminal to generate an encryption initial vector, the GIS ciphertext being obtained by the mobile terminal based on the encryption parameter and the air interface number of the mobile terminal to generate an encryption initial vector and encrypt GIS data; a GIS data sending module configured to send the decrypted GIS plaintext to the base station, the encryption initial vector is calculated by the SM3 algorithm with the encryption parameter and the air interface number of the mobile terminal as seeds.

Images