Method and apparatus for wireless communication

Abstract

The application provides a wireless communication method and device. The method comprises: determining whether a terminal device supports access layer (AS) security by a network device; and sending first indication information and first request information to a base station by the network device, wherein the first indication information is used to indicate that the terminal device does not support the AS security, and the first request information is used to request the base station to determine whether the terminal device has IMS-VoPS capability according to the wireless capability. By letting the base station directly initiate a UE capability matching process when the UE does not support the AS security, and initiating the UE capability matching process after determining that the AS security has been established when the UE supports the AS security, the problem of UE capability matching process failure caused by the fact that the AS security has not been established can be avoided.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of communication, and more particularly, to a method and apparatus for wireless communication. BACKGROUND

[0002] A user equipment (UE) has a voice over PS (VoPS) capability in an internet protocol (IP) multimedia subsystem (IMS), which can be referred to as an IMS-VoPS capability. The IMS-VoPS capability represents that the UE can maintain the continuity of an IMS-VoPS service in a PS domain of different networks when switching between the different networks. The different networks can be 4G, 5G, and the like.

[0003] A network needs to determine whether the UE and the network both have the IMS-VoPS capability through a radio access network (RAN), and in the case that the UE and the network both have the IMS-VoPS capability, the network can provide the UE with the IMS-VoPS service. Specifically, after an access and mobility management function (AMF) network element receives a registration request message sent by a UE, the AMF can send a UE capability matching request to a RAN to cause the RAN to determine whether the UE and the network both have the IMS-VoPS capability. If the AMF has the radio capability information of the UE, the AMF will carry the radio capability information of the UE in the UE capability matching request. The RAN determines whether the UE has the IMS-VoPS capability according to the radio capability information of the UE.

[0004] When the RAN does not obtain the radio capability information of the UE, the RAN needs to request the UE for the radio capability information of the UE. However, the RAN cannot successfully obtain the radio capability information of the UE from the UE in some cases, which causes the RAN to be unable to determine whether the UE has the IMS-VoPS capability, and thus causes the network to be unable to provide the UE with the IMS-VoPS service in the case that the UE has the IMS-VoPS capability.

[0005] Therefore, how to enable the RAN to successfully determine whether the UE has the IMS-VoPS capability, and thus enable the AMF to determine whether the UE can be provided with the IMS-VoPS service, is a problem to be solved at present. SUMMARY

[0006] The wireless communication method of the embodiments of the present application enables the RAN to successfully determine whether the UE side has IMS-VoPS capability.

[0007] In a first aspect, a method of wireless communication is provided. The method includes receiving, by a network device, a first message from a terminal device; determining, by the network device, whether the terminal device supports access stratum (AS) security; and sending, by the network device, first indication information and first request information to a base station in a case where the terminal device does not support the AS security, the first indication information being used to indicate that the terminal device does not support the AS security, and the first request information being used to request the base station to determine whether the terminal device has IMS-VoPS capability according to a radio capability of the terminal device.

[0008] The wireless communication method of the embodiments of the present application enables the RAN to successfully determine whether the UE side has IMS-VoPS capability.

[0009] Optionally, the first indication information and the first request information can be issued in one message or in different messages. The first request information can be carried in a capability matching request message and occupy one or more fields. The first indication information can be carried in the capability matching request message or in other messages.

[0010] The foregoing solution is a processing in a case where the terminal device does not support the AS security. The network device can also determine whether the terminal device needs to start the AS security or whether the terminal device currently needs to start the AS security. When the network device determines that the terminal device does not need to start the AS security or currently does not need to start the AS security, for example, in an emergency service scenario, the terminal device currently does not need to start the AS security, the network device sends first indication information to the base station, the first indication information being used to indicate that the terminal device does not need to start the AS security or currently does not need to start the AS security. Or in the emergency service scenario, the first indication information is used to indicate the emergency service.

[0011] Optionally, when the network device determines that the terminal device does not support the AS security, the network device sends an encryption algorithm and / or an integrity protection algorithm to the base station.

[0012] With reference to the first aspect, in some implementations of the first aspect, the method further includes: in a case where the terminal device supports the AS security, sending, by the network device, second request information to the base station, the second request information being used to request the base station to establish an AS security context; and after receiving response information from the base station in response to the second request information, sending, by the network device, the first request information to the base station.

[0013] The wireless communication method of the embodiments of the present application, after determining that the terminal device supports the AS security, requests the base station to establish an AS security context, so that the base station sends request information for obtaining wireless capability information to the terminal device in a case where the AS security establishment is completed, so that the information exchanged between the base station and the terminal device can be protected by the AS security, and thus the wireless capability information of the terminal device can be successfully obtained and it can be successfully determined whether the terminal device has the IMS-VoPS capability.

[0014] With reference to the first aspect, in some implementations of the first aspect, the network device determines whether the terminal device supports establishment of an access layer AS security, including: the network device receives second indication information, the second indication information being used to determine whether the terminal device supports the AS security.

[0015] With reference to the first aspect, in some implementations of the first aspect, the receiving of the second indication information includes: the network device receives mobility management (MM) capability information from the terminal device, the MM capability information carrying the second indication information; or the network device receives subscription information from a unified data manager (UDM), the subscription information carrying the second indication information.

[0016] Optionally, the second indication information carries an emergency service identifier, and in this case, the second indication information is used to indicate that the terminal device does not support the AS security or does not need to start the AS security. The emergency service identifier is used to indicate an emergency service scenario in which the security mechanism (including the AS security) of the terminal device does not need to be started.

[0017] Optionally, the base station determines whether the terminal device has the IMS-VoPS capability according to the wireless capability information of the terminal device. Then the base station sends the determination result to the network device, and the network device can determine whether the IMS-VoPS service can be provided for the terminal device according to the determination result.

[0018] In a possible implementation of the first aspect, after the network device sends the first indication information and the first request information to the base station, the method further includes: receiving, by the network device, the wireless capability information and the integrity protection parameter of the terminal device from the base station, the integrity protection parameter being used to verify whether the wireless capability information of the terminal device is tampered with; verifying, by the network device, whether the wireless capability information of the terminal is tampered with according to the first key and the integrity protection parameter, the first key being a shared key between the network device and the terminal device; in the case that the wireless capability information of the terminal is tampered with, the network device optionally re-sends a capability matching request message to the base station, the base station re-receives the capability matching request message of the terminal device, and re-sends a capability query message to the terminal device to request the wireless capability information of the terminal device; or the network device sends indication information to the base station, indicating that the base station re-sends the capability query message of the terminal device; or the network device sends a rejection message, an error message or a failure message to the UE, indicating that the wireless capability information and the integrity protection parameter of the terminal device sent by the UE are incorrect; further, the base station can continue to send a rejection message, an error message or a failure message to the terminal device, indicating that the wireless capability information and the integrity protection parameter of the terminal device sent by the terminal device are incorrect. When the terminal device receives the rejection message, the error message or the failure message, the terminal device can re-calculate the integrity protection parameter and re-send the wireless capability information and the integrity protection parameter of the terminal device to the base station.

[0019] Therefore, the wireless communication method provided by the embodiments of the present application can verify the wireless capability information sent by the terminal device through the integrity protection parameter, so as to ensure that the wireless capability information sent by the terminal device is not tampered with by an attacker, prevent the attacker from performing a dimension reduction attack on the modified wireless capability information, and thus ensure the security of communication.

[0020] In a second aspect, a wireless communication method is provided, which includes: receiving, by a network device, a first message from a terminal device; determining, by the network device, whether the terminal device supports AS security or whether the AS security needs to be started; in the case that the terminal device does not support the AS security or does not need to start the AS security, sending, by the network device, first indication information and first request information to a base station, the first indication information being used to indicate that the terminal device does not support the AS security, and the first request information being used to request the base station to determine whether the terminal device has IMS-VoPS capability according to the wireless capability of the terminal device.

[0021] In some implementations of the second aspect, the method further includes: in a case that the terminal device supports the AS security or needs to start the AS security, sending, by the network device, second request information to the base station, the second request information being used to request the base station to establish an AS security context; and after receiving response information from the base station in response to the second request information, sending, by the network device, the first request information to the base station. In a third aspect, a method of wireless communication is provided, including: receiving, by a network device, first information from a terminal device; determining, by the network device, whether the terminal device supports access stratum (AS) security; in a case that the terminal device supports the AS security, sending, by the network device, second request information to the base station, the second request information being used to request the base station to establish an AS security context; and after receiving response information from the base station in response to the second request information, sending, by the network device, the first request information to the base station.

[0022] Optionally, the network device sends the first request information to the base station after receiving a response message of the second request information from the base station; or the network device sends the first request information after sending the second request information.

[0023] The wireless communication method of the embodiments of the present application, after determining that the terminal device supports the AS security, requests the base station to establish an AS security context, so that the base station sends request information for obtaining wireless capability information to the terminal device in a case that the AS security establishment is completed, so that the information exchanged between the base station and the terminal device can be protected by the AS security, and thus the wireless capability information of the terminal device can be successfully obtained and it can be successfully determined whether the terminal device has the IMS-VoPS capability.

[0024] In some implementations of the third aspect, determining, by the access and mobility management network element, whether a user equipment (UE) supports establishing access stratum (AS) security includes: receiving, by the access and mobility management network element, second indication information, the second indication information being used to determine whether the UE supports the AS security.

[0025] In some implementations of the third aspect, receiving the second indication information includes: receiving, by the network device, mobility management (MM) capability information from the terminal device, the MM capability information carrying the second indication information; or receiving, by the network device, UE subscription information from a unified data management (UDM), the terminal device subscription information carrying the second indication information.

[0026] In some implementations of the third aspect, after the network device sends the first indication information and the first request information to the base station, the method further includes: receiving, by the network device, the UE radio capability information and the integrity protection parameter from the base station, the UE radio capability information being used by the network device to save the UE radio capability information, and the integrity protection parameter being used to verify whether the UE radio capability information is tampered; verifying, by the access and mobility management network element, whether the UE radio capability information is tampered according to the first key and the integrity protection parameter; and in the case that the UE radio capability information is tampered, sending, by the network device, a rejection message to the base station, or sending the first request information to the base station again.

[0027] In the fourth aspect, a method of wireless communication is provided, which includes: receiving, by a base station, first indication information and first request information from a network device, the first indication information being used to indicate at least one of the following: a first terminal device does not support the AS security, the first terminal device does not need to start the AS security, the first terminal device currently does not need to start the AS security, and the first terminal device requests emergency service, and the first request information being used to request the base station to determine whether the first terminal device has IMS-VoPS capability according to a radio capability of the first terminal device; after receiving the first request information, if the base station cannot obtain the radio capability information of the first terminal device through information saved by the base station and information carried in the first request information, the base station sends, to the first terminal device, request information for obtaining the radio capability information of the first terminal device according to the first indication information, and the request information is not protected by the AS security; obtaining, by the base station, the radio capability information of the first terminal device from response information from the first terminal device; determining, by the base station, whether the first terminal device has IMS-VoPS capability according to the radio capability information of the first terminal device, and feeding back a determination result to the network device. The network device can determine whether to provide IMS-VoPS service for the terminal device according to the determination result.

[0028] Optionally, the base station determines whether the terminal device has IMS-VoPS capability according to the radio capability information of the terminal device, and sends a determination result to the network device.

[0029] In some implementations of the fourth aspect, the method further includes: receiving, by the base station, second request information from the network device, the second request information being used to request the base station to establish an AS security context with a second terminal device, and the second terminal device supporting the AS security; establishing, by the base station, the AS security with the second terminal device, and sending a response message to the network device.

[0030] With reference to the fourth aspect, in some implementations of the fourth aspect, after the base station establishes the AS security, the method further includes: receiving, by the base station, third request information from the network device, the third request information being used to request the RAN to determine whether the second terminal device has IMS-VoPS capability according to the wireless capability of the second terminal device; after receiving the first request information, if the base station cannot obtain the wireless capability information of the second terminal device through the information stored in the base station and the information carried in the first request information, the base station sends, to the second terminal device, request information for obtaining the wireless capability information of the second terminal device, the request information being AS security protected; the base station obtains the wireless capability information of the second terminal device from response information from the second terminal device; the base station determines whether the second terminal device has IMS-VoPS capability according to the wireless capability information of the second terminal device, and feeds back the determination result to the network device.

[0031] With reference to the fourth aspect, in some implementations of the fourth aspect, the method further includes: receiving, by the base station, the wireless capability information of the terminal device and the integrity protection parameter of the first terminal device from the first terminal device; sending, by the base station, the wireless capability information of the first terminal device and the integrity protection parameter to the network device, the integrity protection parameter being used to verify whether the wireless capability information of the first terminal device is tampered; receiving, by the base station, a rejection message from the network device, the rejection message being used to indicate that the wireless capability information of the first terminal device is tampered, or receiving the first request information again.

[0032] The fifth aspect provides a method of wireless communication, including: determining, by a terminal device, whether to support establishment of access stratum (AS) security; and sending, by the terminal device, third indication information, the third indication information being used to indicate whether the terminal device supports establishment of the AS security.

[0033] With reference to the fifth aspect, in some implementations of the fifth aspect, the terminal device sending the third indication information includes: the terminal device sending the third indication information to an access and mobility management network element; or the terminal device sending the third indication information to a radio access network base station.

[0034] It should be understood that the third indication information can also be sent without the registration request message, for example, the third indication information is an independent parameter, and the UE can send the parameter to the AMF through other messages, which is not limited in the present application.

[0035] It should also be understood that the third indication information can be part of UE security capability information, which is used to represent the security capability of the UE, including information such as security algorithms supported by the UE. Therefore, the third indication information can also be written into the UE security capability information and sent to the AMF.

[0036] Optionally, the third indication information can be other information that can be used to indicate the AS security capability of the UE. For example, the first indication information is an indication information (CP only indication information) indicating that the UE only supports control plane cellular IoT (CPCIoT) service, because the CP CIoT service does not require AS security, and therefore a UE that only supports CPCIoT service can be understood as not supporting AS security.

[0037] Optionally, the third indication information can also carry or can be a service identifier that does not require AS security, which means that the UE does not need to support AS security to use it, and therefore can be understood as not supporting AS security.

[0038] In combination with the fifth aspect, in some implementations of the fifth aspect, the method further includes: receiving, by the terminal device, a third request message from the base station, the third request message being used to request to obtain wireless capability information of the terminal device, the wireless capability information of the terminal device being used to determine whether the terminal device supports IMS voice service; and sending, by the terminal device, the wireless capability information of the terminal device and an integrity protection parameter to the base station, the integrity protection parameter being used to verify whether the wireless capability information of the terminal device is tampered.

[0039] In combination with the fifth aspect, in some implementations of the fifth aspect, the method further includes: calculating, by the terminal device, the integrity protection parameter according to a first key and the wireless capability information of the terminal device, the first key being a shared key between the UE and the access and mobility management network element.

[0040] The sixth aspect provides a method of wireless communication, which includes: receiving, by a network device, wireless capability information of a terminal device; receiving, by the network device, capability information of a base station; and determining, by the network device, whether IMS voice service is supported between the terminal device and the base station according to the wireless capability information of the terminal device and the capability information of the base station.

[0041] In some implementations of the sixth aspect, the network device receiving the wireless capability information of the terminal device comprises: the network device receiving the wireless capability information from the terminal device; or the network device receiving the wireless capability information of the terminal device from the base station.

[0042] In some implementations of the sixth aspect, the network device receiving the wireless capability information of the terminal device comprises: receiving a non-access stratum (NAS) security mode complete message from the terminal device, the security mode complete message comprising the wireless capability information of the terminal device, the NAS security mode complete message being used to indicate that the NAS security establishment is complete.

[0043] In some implementations of the sixth aspect, the wireless capability information of the terminal device comprises a first service characteristic parameter, the first service characteristic parameter being used to determine whether the UE supports the IMS voice service; and the capability information of the base station comprises a second service characteristic parameter, the second service characteristic parameter being used to determine whether the RAN supports the IMS voice service.

[0044] In a seventh aspect, a device for wireless communication is provided, the device comprising: a transceiver configured to receive a first message from a terminal device; and a processor configured to determine whether the terminal device supports access stratum (AS) security, wherein, in a case that the terminal device does not support the AS security, the transceiver is further configured to send first indication information and first request information to a base station, the first indication information being used to indicate that the terminal device does not support the AS security, and the first request information being used to request the base station to determine whether the terminal device has IMS-VoPS capability according to wireless capability of the terminal device.

[0045] The transceiver can perform the receiving and sending in the first aspect to the third aspect and the fifth aspect, and the processor can perform other processing in the first aspect to the third aspect and the fifth aspect except for the receiving and sending.

[0046] In an eighth aspect, a device for wireless communication is provided, which comprises: a transceiver configured to receive first indication information and first request information from a network device, the first indication information being used to indicate that a first terminal device does not support AS security, and the first request information being used to request the base station to determine whether the first terminal device has IMS-VoPS capability according to wireless capability of the first terminal device; the transceiver is further configured to, after receiving the first request information, if wireless capability information of the first terminal device cannot be obtained through saved information and information carried in the first request information, send, to the first terminal device, request information for obtaining the wireless capability information of the first terminal device according to the first indication information, the request information not being protected by AS security; a processor configured to obtain the wireless capability information of the first terminal device from response information from the first terminal device; the processor is further configured to determine whether the first terminal device has IMS-VoPS capability according to the wireless capability information of the first terminal device; and the transceiver is further configured to feed back the determination result to the network device.

[0047] The transceiver can perform the receiving and sending processing in the fourth aspect, and the processor can perform other processing in the third aspect except for the receiving and sending.

[0048] In a ninth aspect, a communication device is provided, which comprises: a processor configured to execute a computer program stored in a memory, so that the communication device performs any possible implementation manner in the first aspect to the sixth aspect.

[0049] In a tenth aspect, a computer readable storage medium is provided, which stores a computer program, when the computer program is run on a computer, the computer is caused to perform any possible implementation manner in the first aspect to the sixth aspect.

[0050] In an eleventh aspect, a chip system is provided, which comprises: a processor configured to call and run a computer program from a memory, so that a communication device installed with the chip system performs any possible implementation manner in the first aspect to the sixth aspect.

[0051] The method for wireless communication provided in the application first determines whether the terminal device supports AS security. When the terminal device does not support AS security, the network device is indicated that the terminal device does not support AS security, so that the base station sends the request information for obtaining the wireless capability information to the terminal device in the case of not establishing AS security (or AS security establishment failure, or AS algorithm protection), so that the base station can still successfully obtain the wireless capability information of the terminal device in the case of not supporting AS security of the terminal device, so as to successfully determine whether the terminal side has IMS-VoPS capability. When the terminal device supports AS security, the base station is requested to establish AS security context, so that the base station sends the request information for obtaining the wireless capability information to the terminal device in the case of establishing the AS security context, so that the information exchanged between the base station and the terminal device can be protected by AS security, so as to successfully obtain the wireless capability information of the terminal device and successfully determine whether the terminal side has IMS-VoPS capability. BRIEF DESCRIPTION OF DRAWINGS

[0052] Figure 1 is a schematic diagram of a network architecture suitable for the method provided in the embodiments of the application.

[0053] Figure 2 is a schematic flow chart of determining whether the UE has IMS-VoPS capability on the network side.

[0054] Figure 3 is a schematic flow chart of a communication method provided in an embodiment of the application.

[0055] Figure 4 is a schematic flow chart of a communication method provided in another embodiment of the application.

[0056] Figure 5 is a schematic flow chart of a communication method provided in another embodiment of the application.

[0057] Figure 6 is a schematic flow chart of a communication method provided in another embodiment of the application.

[0058] Figure 7 is a schematic flow chart of a communication method provided in another embodiment of the application.

[0059] Figure 8 is a schematic flow chart of a communication method provided in another embodiment of the application.

[0060] Figure 9 is a schematic flow chart of a communication method provided in another embodiment of the application.

[0061] Figure 10is a schematic flow chart of a communication method according to another embodiment of the present application.

[0062] Figure 11 is a schematic block diagram of an example of a network device according to the present application.

[0063] Figure 12 is a schematic block diagram of an example of a base station according to the present application.

[0064] Figure 13 is a schematic block diagram of an example of a communication apparatus according to the present application.

[0065] Figure 14 is a schematic block diagram of another example of a communication apparatus according to the present application.

[0066] Figure 15 is a schematic structural diagram of a communication apparatus according to the present application. DETAILED DESCRIPTION

[0067] The technical solutions in the present application will be described below with reference to the accompanying drawings.

[0068] The technical solutions provided by the present application can be applied to various communication systems, such as a long term evolution (LTE) system, an LTE frequency division duplex (FDD) system, an LTE time division duplex (TDD), a universal mobile telecommunication system (UMTS), a worldwide interoperability for microwave access (WiMAX) communication system, a 5th generation (5G) system or a new radio (NR), etc.

[0069] The network elements involved in the present application mainly include terminal devices, access network devices and mobile management network elements. Among them, the access network device is connected with the terminal device through a wireless air interface, can manage wireless resources, provide access services for the terminal device, and further complete the forwarding of control signals and user plane data between the terminal device and the core network. The mobile management network element is connected with the access network device through wired or wireless means, and is mainly used for mobility management and access management, etc.

[0070] The terminal device can be a user equipment (UE), an access terminal, a subscriber unit, a subscriber station, a mobile station, a mobile, a remote station, a remote terminal, a mobile device, a user terminal, a terminal, a wireless communication device, a user agent, or a user device. The terminal device in the embodiments of the present application can also be a mobile phone, a pad, a computer with wireless transceiver function, a virtual reality (VR) terminal device, an augmented reality (AR) terminal device, a wireless terminal in industrial control, a wireless terminal in self driving, a wireless terminal in remote medical treatment, a wireless terminal in smart grid, a wireless terminal in transportation safety, a wireless terminal in smart city, a wireless terminal in smart home, etc.

[0071] The access network device can be an evolved Node B (eNB), a radio network controller (RNC), a Node B (NB), a base station controller (BSC), a base transceiver station (BTS), a home evolved NodeB (HNB), a baseband unit (BBU), an access point (AP) in a wireless fidelity (WiFi) system, a wireless relay node, a wireless backhaul node, a transmission point (TP), or a transmission and reception point (TRP), etc. The access network device can also be a gNB or a transmission point (TRP or TP) in a 5G system, one or a group of (including multiple antenna panels) antenna panels of a base station in a 5G system, or can also be a network node constituting a gNB or a transmission point, such as a baseband unit (BBU), or a distributed unit (DU), etc.

[0072] The mobility management network element can be a mobility management entity (MME), a network element with MME function, an access and mobility management function (AMF) network element, a network element with AMF function, a Non-3GPP interworking function (N3IWF), or a Serving GPRS Support Node (SGSN), etc.

[0073] In different network systems, the naming of network elements may be different. Hereinafter, the naming of network elements in the 5G network is taken as an example to illustrate the present application.

[0074] First, in combination with the 5G network architecture diagram shown in FIG. 1, the main network elements involved in the 5G network system are briefly described. Figure 1

[0075] 1. User equipment (UE) 101: can include various handheld devices, vehicle-mounted devices, wearable devices, computing devices or other processing devices connected to wireless modems with wireless communication functions, and various forms of terminals, mobile stations (MS), terminals, soft terminals, etc. For example, water meters, electricity meters, sensors, etc.

[0076] 2. Radio access network (RAN) network element 102: referred to as RAN hereinafter, corresponding to the access network device.

[0077] Used to provide network access functions for authorized user equipment in a specific area, and can use different quality transmission tunnels according to the level of user equipment, the needs of services, etc.

[0078] The RAN network element can manage radio resources, provide access services for user equipment, and further complete the forwarding of control signals and user equipment data between user equipment and the core network. The RAN network element can also be understood as a base station in the traditional network. For example, the RAN can be an NB, an eNB, a gNB, an ng-eNB, or any other access network device.

[0079] 3. User plane function (UPF) 103: used for packet routing and forwarding, quality of service (QoS) processing of user plane data, etc.

[0080] ​In the 5G communication system, the user plane network element can be a user plane function (UPF) network element. In the future communication system, the user plane network element can still be a UPF network element, or can also have other names, which are not limited in the present application.

[0081] 4. Data network (DN) 104: a network for providing data transmission.

[0082] In the 5G communication system, the data network network element can be a data network network element. In the future communication system, the data network network element can still be a DN network element, or can also have other names, which are not limited in the present application.

[0083] 5. AMF 105: mainly used for mobility management and access management, etc., which can be used to realize other functions in MME function except session management, for example, lawful interception and access authorization / authentication functions, etc.

[0084] In the 5G communication system, the access and mobility management network element can be an access and mobility management function (AMF). In the future communication system, the access and mobility management device can still be an AMF, or can also have other names, which are not limited in the present application.

[0085] 6. Session management function (SMF) 106: mainly used for session management, internet protocol (IP) address allocation and management of user equipment, selection of manageable user plane function, terminal point of policy control and charging function interface and downlink data notification, etc.

[0086] In the 5G communication system, the session management network element can be a session management function network element. In the future communication system, the session management network element can still be an SMF network element, or can also have other names, which are not limited in the present application.

[0087] 7. Policy control function (PCF) 107: a unified policy framework for guiding network behavior, providing policy rule information for control plane function network elements (such as AMF, SMF, etc.), etc.

[0088] In the 4G communication system, the policy control network element can be a policy and charging rules function (PCRF) network element. In the 5G communication system, the policy control network element can be a policy control function (PCF) network element. In future communication systems, the policy control network element can still be a PCF network element, or can also have other names, which are not limited in the present application.

[0089] 8. Application function (AF) 108: used for data routing of application influence, radio access network exposure function network element, interacting with a policy framework for policy control, etc.

[0090] In the 5G communication system, the application network element can be an application function network element. In future communication systems, the application network element can still be an AF network element, or can also have other names, which are not limited in the present application.

[0091] 9. Unified data management (UDM) 109: used for processing UE identification, access authentication, registration, and mobility management, etc.

[0092] In the 5G communication system, the data management network element can be a unified data management network element; in the 4G communication system, the data management network element can be a home subscriber server (HSS) network element. In future communication systems, unified data management can still be a UDM network element, or can also have other names, which are not limited in the present application.

[0093] 10. Unified data repository (UDR) 110: mainly includes the following functions: access functions of subscription data, policy data, application data, and other types of data.

[0094] 11. Authentication server function (AUSF) 111: used for authentication service, generating keys to realize two-way authentication of user equipment, and supporting a unified authentication framework.

[0095] In the 5G communication system, the authentication server can be an authentication server function network element. In future communication systems, the authentication server function network element can still be an AUSF network element, or can also have other names, which are not limited in the present application.

[0096] It can be understood that the above network elements or functions can be network elements in a hardware device, or software functions running on a dedicated hardware, or virtualized functions instantiated on a platform (for example, a cloud platform). For the convenience of description, hereinafter, the network device is taken as an access and mobility management network element AMF, and the base station is taken as a radio access network RAN for example to describe the embodiments of the present application.

[0097] In Figure 1 In the network architecture shown, the user equipment is connected with the AMF through the N1 interface, the RAN is connected with the AMF through the N2 interface, and the RAN is connected with the UPF through the N3 interface. The UPFs are connected through the N9 interface, and the UPF is interconnected with the DN through the N6 interface. The SMF controls the UPF through the N4 interface. The AMF interfaces with the SMF through the N11 interface. The AMF obtains the user equipment subscription data from the UDM unit through the N8 interface, and the SMF obtains the user equipment subscription data from the UDM unit through the N10 interface.

[0098] It should be understood that the network architecture applied to the embodiments of the present application is only an example, and the network architecture applicable to the embodiments of the present application is not limited thereto. Any network architecture capable of realizing the functions of the above-mentioned network elements is applicable to the embodiments of the present application.

[0099] For example, in some network architectures, the AMF, SMF network element, PCF network element, BSF network element, and UDM network element, etc. network function network element entities are collectively referred to as network function (network function, NF) network elements; or in another network architecture, the AMF, SMF network element, PCF network element, BSF network element, and UDM network element, etc. network elements can be collectively referred to as a control plane function network element.

[0100] In order to facilitate understanding of the method for wireless communication provided by the embodiments of the present application, the following will be described in combination with Figure 2 The process 200 in which the AMF judges whether the UE has the IMS-VoPS capability through the RAN will be briefly introduced. As shown in the figure, the process 200 includes the following steps: Figure 2

[0101] S210, the UE sends a registration request message to the AMF.

[0102] S220, the AMF sends a UE capability matching request message to the RAN.

[0103] After the AMF receives the registration request sent by the UE, the AMF judges whether the UE and the network have the IMS-VoPS capability by sending the UE capability matching request message to the RAN.

[0104] If the AMF has previously saved the wireless capability information of the UE, the AMF will carry the wireless capability information of the UE in the UE capability matching request message.​

[0105] If the RAN does not receive the radio capability information of the UE from the AMF and does not have the radio capability information of the UE locally, the RAN can optionally send a UE capability enquiry message to the UE to request the radio capability information of the UE at S230.

[0106] The UE can send its radio capability information to the RAN according to the UE capability enquiry message sent by the RAN at S240.

[0107] The RAN determines whether the UE has IMS-VoPS capability according to the radio capability information of the UE at S250.

[0108] The RAN can also determine whether the network has IMS-VoPS capability.

[0109] The RAN sends a UE capability match response message to the AMF at S260.

[0110] The RAN determines whether the UE and the network both have IMS-VoPS capability, and sends the determination result to the AMF through the UE capability match response message after the determination is completed.

[0111] The RAN can optionally send a UE capability indication message to the AMF at S270.

[0112] When the RAN performs steps S230 and S240, i.e., the RAN does not have the radio capability information of the UE, does not receive the radio capability information of the UE from the AMF, and obtains the radio capability information of the UE through the UE capability enquiry message, the RAN can send the radio capability information of the UE to the AMF through the UE capability indication message. After receiving the radio capability information of the UE, the AMF saves the radio capability information of the UE locally, so that the AMF can send the radio capability information of the UE to the RAN for use when the above process needs to be performed again in the future.

[0113] The AMF sends a registration accept message to the UE at S280.

[0114] Exemplarily, the AMF determines the determination result of the base station according to the UE capability match response message. When the determination result indicates that the UE and the network both have IMS-VoPS capability, i.e., the network can provide IMS-VoPS service for the UE, the AMF sets information for indicating IMS-VoPS capability in the network characteristic parameter, and sends the information to the UE through the network characteristic parameter in the registration accept message.

[0115] However, according to the requirements of the 5G security standard, the RAN can only send a request to the UE to obtain the wireless capability information of the UE if the AS security between the UE and the RAN has been established. This means that for a UE that does not support the establishment of an AS security context, if the RAN does not obtain the wireless capability information of the UE and the RAN cannot obtain the wireless capability information of the UE from the UE, the RAN cannot determine whether the UE side has IMS-VoPS capability. Secondly, for a UE that supports the establishment of an AS security context, if the AS security is not established before the RAN sends a request to obtain the wireless capability information of the UE, the RAN cannot obtain the wireless capability information of the UE, and thus the RAN cannot determine whether the UE side has IMS-VoPS capability. Obviously, the RAN cannot determine whether the UE side has IMS-VoPS capability, and thus the network cannot provide IMS-VoPS services for the UE in the case that the UE has IMS-VoPS capability. In addition, in other scenarios, such as in the case of emergency services or a UE that does not support AS security, the RAN needs to solve the problem of how to obtain the wireless capability of the UE and then perform relevant determinations.

[0116] Figure 3 A schematic flowchart of a wireless communication method 300 provided by an embodiment of the present application is shown. From Figure 3 It can be seen that the method 300 includes the following steps.

[0117] S301, a terminal device sends a first message to a network device.

[0118] Correspondingly, the network device receives the first message sent by the terminal device, and the first message can be, for example, a registration request message, which is used for the terminal device to request access to the network from the network device.

[0119] S302, the network device determines that the terminal device does not support AS security.

[0120] When the network device determines that the terminal device does not support AS security, in S303, the network device sends first indication information to a base station, and the first indication information is used to indicate that the terminal device does not support AS security.

[0121] Alternatively, in another possible implementation, the network device determines that the terminal device does not need to start AS security or does not currently need to start AS security, for example, in the case of emergency services, the terminal device does not currently need to start AS security. In S303, the network device sends first indication information to a base station, and the first indication information is used to indicate that the terminal device does not need to start AS security or does not currently need to start AS security. Or in the case of emergency services, the first indication information is used to indicate emergency services, and the base station determines that the terminal device wants to use emergency services according to the first indication information.

[0122] Optionally, when the network device determines that the terminal device does not support AS security, the network device sends a cipher algorithm and / or an integrity protection algorithm to the base station. The base station determines that the terminal device does not support AS security or that the terminal device (currently) does not need to start AS security or that the terminal device only supports AS security based on an algorithm protection according to the cipher algorithm and / or the integrity protection algorithm sent by the network device.

[0123] S304, the network device sends first request information to the base station, and the first request information is used to request the base station to determine whether the terminal device has IMS-VoPS capability.

[0124] It should be understood that the first indication information and the first request information can be issued in one message or in different messages.

[0125] Specifically, the first request information can be carried in a capability matching request message and occupy one or more fields. The first indication information can be carried in the capability matching request message or in other messages. That is, the first indication information and the first request information can be sent simultaneously or sent separately, and the present application does not limit this.

[0126] S305, the base station sends request information for obtaining wireless capability information of the terminal device to the terminal device.

[0127] When the base station receives the first request information sent by the network device, if the base station cannot obtain the wireless capability information of the terminal device through the information carried in the first request information and the information saved by the base station itself, the base station sends request information for obtaining the wireless capability information of the terminal device to the terminal device according to the first indication information, and the request information is not protected by AS security.

[0128] Specifically, when the base station and the network device do not have the wireless capability information of the terminal device, the base station needs to send request information to the terminal device to obtain the wireless capability information of the network device according to the first request information. According to the first indication information, the base station can determine that the terminal device does not support AS security, or, in another possible implementation, the base station determines that the terminal device does not need to start AS security or does not need to start AS security currently or that the terminal device only supports AS security based on an algorithm protection or that the terminal device hopes to use emergency services. At this time, the base station sends the request information for obtaining the wireless capability information of the terminal device to the terminal device without establishing AS security (or AS security establishment fails or AS algorithm protection). The request information is not protected by AS security.

[0129] Of course, the base station can also not consider whether the base station itself has the radio capability information and whether the first request information has the radio capability information before sending the request information to the terminal device according to the first indication information. Alternatively, only one of them is considered, for example, the request information is sent after it is determined that the base station itself does not have the radio capability information, or the request information is sent after it is determined that the first request information does not have the radio capability information.

[0130] S306, the terminal device sends the radio capability information of the terminal device to the base station.

[0131] After the terminal device receives the request information for obtaining the radio capability information sent by the base station, the terminal device sends the radio capability information of the terminal device to the base station, and the radio capability information is also not AS security protected.

[0132] Optionally, in S307, the base station determines whether the terminal device has IMS-VoPS capability according to the radio capability information of the terminal device. It should be understood that the application does not limit the way in which the base station determines whether the terminal device has IMS-VoPS capability.

[0133] Optionally, in S308, the base station sends the determination result to the network device, which can be the determination result of whether the terminal device has IMS-VoPS capability made by the base station in S307, or the determination result of whether the network supports IMS-VoPS service made by the base station, or the determination result of whether IMS-VoPS service is supported between the terminal device and the network, which is not limited by the application.

[0134] The network device can determine whether the network supports IMS-VoPS service or whether the terminal device can be provided with IMS-VoPS service according to the determination result.

[0135] Optionally, the base station sends the radio capability information obtained in S306 to the network device.

[0136] The wireless communication method of the embodiments of the application indicates that the terminal device does not support AS security to the network device, so that the base station sends the request information for obtaining the radio capability information to the terminal device without establishing AS security (or AS security establishment fails, or AS security algorithm protection), and the request information is not AS security protected, so that the base station can still successfully obtain the radio capability information of the terminal device in the case that the terminal device does not support AS security, and can successfully determine whether the terminal side has IMS-VoPS capability.

[0137] Figure 4 A schematic flowchart of a wireless communication method 400 provided by the embodiments of the application is shown. From Figure 4 It can be seen from the method 400 that the method 400 includes:

[0138] S401, the terminal device sends a first message to the network device.

[0139] Correspondingly, the network device receives the first message sent by the terminal device, which can be a registration request message, for example, used for the terminal device to request the network device to access the network.

[0140] S402, the network device determines that the terminal device supports AS security.

[0141] For example, the network device determines whether the terminal device supports AS security, for example, the network device receives second indication information indicating whether the terminal device supports AS security.

[0142] When the network device determines that the terminal device supports AS security, in S403, the network device sends second request information to the base station, the second request information being used for requesting the base station to establish an AS security context.

[0143] In another possible implementation, the network device determines that the terminal device needs to start AS security. For example, the network device receives second indication information indicating that the terminal device needs to start AS security. When the network device determines that the terminal device needs to start AS security, in S403, the network device sends second request information and indication information indicating that the terminal device needs to start AS security to the base station, the second request information being used for requesting the base station to establish AS security.

[0144] S404, the base station establishes the AS security context.

[0145] Specifically, the base station establishes the AS security context between the terminal device according to the second request information. That is, the base station establishes the AS security context between the terminal, and then the base station can obtain the wireless capability information of the terminal device through the AS security context.

[0146] S405, the base station sends response information to the network device.

[0147] Specifically, the base station sends response information to the network device in response to the second request information.

[0148] It should be noted that the base station can send the response message to the network device after receiving the second request information, or can send the response message to the network after the establishment of the AS security context is completed, which is not limited in the present application.

[0149] S406, the network device sends third request information to the base station.

[0150] Optionally, after receiving the response information from the base station in response to the second request information, the network device sends third request information to the base station; or after sending the second request information, the network device sends the third request message. The third request information is used to request the base station to determine whether the terminal device has the IMS-VoPS capability according to the wireless capability information of the terminal device. The third request information is similar to the foregoing first request information, which can be carried in the capability matching request message, and will not be described again. Figure 3 The first request information in the corresponding embodiment is similar, for example, can be carried in the capability matching request message, and will not be described again.

[0151] Optionally, in another possible implementation, after the base station receives the second request information sent by the network device and the indication information indicating that the terminal device needs to start AS security (or the indication information indicating that the terminal device currently needs to start AS security), the base station establishes the AS security context between the terminal device according to the second request information. When the AS security context is successfully established, the base station sends the request information for obtaining the wireless capability information of the terminal device to the terminal device according to the third request information; when the AS security context fails to be established, the base station sends a rejection message or indication information indicating that the AS security context fails to be established to the terminal device.

[0152] S407, the base station sends the request information for obtaining the wireless capability information of the terminal device to the terminal device.

[0153] When the base station receives the first request information sent by the network device, if the base station cannot obtain the wireless capability information of the terminal device from the information saved by itself and the information carried in the third request information, the base station sends the request information for obtaining the wireless capability information of the terminal device to the terminal device, and the request information has been AS security protected.

[0154] Specifically, when neither the base station nor the network device has the wireless capability information of the terminal device, the base station needs to send the request information to the terminal device to obtain the wireless capability information of the network device. Before this, if the AS security context has not been established, the base station establishes the AS security context between the terminal device according to the second request information, so that the request information for obtaining the wireless capability information of the terminal device is sent with AS security protection.

[0155] S408, the terminal device sends its wireless capability information to the base station.

[0156] After the terminal device receives the request information for obtaining the wireless capability information sent by the base station, the terminal device sends its wireless capability information to the base station. For example, the terminal device sends a response message to the base station, and the response message carries the wireless capability information of the terminal device, and the response message is also AS security protected. The base station obtains the wireless capability information of the terminal device from the response message from the terminal device

[0157] Optionally, at S409, the base station determines whether the terminal device has IMS-VoPS capability according to the wireless capability information of the terminal device. It should be understood that the present application does not limit the manner in which the base station determines whether the terminal device has IMS-VoPS capability.

[0158] Optionally, at S410, the base station sends the determination result to the network device. The determination result is related to Figure 3 The determination result in step S308 in the corresponding embodiment is similar, for example, it can be the determination result made by the base station at S409, or the determination result of whether the network supports IMS-VoPS service, and the like, which will not be described herein.

[0159] The network device can determine whether to provide the terminal device with IMS-VoPS service according to the determination result.

[0160] The wireless communication method of the embodiments of the present application, after the network device determines that the terminal device supports AS security, requests the base station to establish AS security context, so that the base station sends the request information for obtaining wireless capability information to the terminal device in the case that the AS security establishment is completed, so that the information exchanged between the base station and the terminal device can be protected by AS security, and the base station can successfully obtain the wireless capability information of the terminal device, thereby successfully determining whether the terminal side has IMS-VoPS capability.

[0161] Figure 5 A schematic flowchart of a wireless communication method 500 provided by the embodiments of the present application is shown. From Figure 5 It can be seen from the method 500 that the method 500 includes:

[0162] S501, the UE sends a registration request message to the AMF.

[0163] Optionally, the registration request message carries third indication information, and the third indication information is used to indicate that the UE does not support AS security.

[0164] Optionally, after the UE sends the third indication information, the third indication information is locally saved for subsequent security verification.

[0165] It should be understood that the third indication information can also be sent without the registration request message, for example, the third indication information is an independent parameter, and the UE can send the parameter to the AMF through other messages, and the present application does not limit this.

[0166] It should also be understood that the third indication information can be part of UE security capability information, which is used to represent the security capability of the UE, including information such as security algorithms supported by the UE. Therefore, the third indication information can also be written into the UE security capability information and sent to the AMF.

[0167] Optionally, the third indication information can be other information that can be used to indicate the AS security capability of the UE. For example, the third indication information is indication information (CP only indication information) indicating that the UE only supports control plane cellular IoT (CPCIoT) services, because CP CIoT services do not require AS security, and therefore a UE that only supports CPCIoT services can be understood as not supporting AS security.

[0168] Optionally, the third indication information can be used to indicate the use of CP CIoT services.

[0169] Optionally, the third indication information can also carry a service identifier that does not require AS security, which indicates that the UE does not need to support AS security to use it, and therefore can be understood as not supporting AS security. For example, the third indication information carries an emergency service identifier, because in the emergency service scenario, the security mechanism of the UE does not need to be turned on, including not turning on the AS security.

[0170] In another possible implementation, the third indication information is used to indicate that the UE does not need to turn on the AS security or does not currently need to turn on the AS security, for example, in an emergency service scenario, the UE does not currently need to turn on the AS security. Or in the emergency service scenario, the third indication information is used to indicate the emergency service, and the RAN can determine that the terminal device wants to use the emergency service according to the third indication information. After the AMF receives the registration request message sent by the UE, the authentication of the UE is performed. It should be understood that the authentication here can be an initial authentication mode of the network, for example, a 5G network, or the authentication is based on an existing security context to authenticate the UE, which is not limited in the present application;

[0171] After authentication, both parties finally save the non-access stratum (NAS) protection key, including the NAS encryption key and the NAS integrity protection key.

[0172] Optionally, at S502, the AMF sends a NAS security mode command message to the UE.

[0173] If a scenario of performing a NAS security mode command (SMC) is needed, the AMF sends a NAS security mode command message to the UE.

[0174] It should be noted that the scenario of performing the NAS SMC may be, for example, that NAS security needs to be established after initial authentication, or that an AMF key is derived, or that the NAS SMC needs to be performed according to a local policy, which is not limited in the present application.

[0175] It should be understood that the NAS security mode command message is integrity protected based on a NAS integrity protection key shared between the AMF and the UE, and if an attacker tampers with the message, the UE will not pass the verification.

[0176] Optionally, the NAS security mode command message carries third indication information for security verification of the message.

[0177] It should also be understood that if the third indication information is part of the UE security capability information, that is, the UE security capability parameter is already carried in the NAS security mode command message, the third indication information does not need to be sent again.

[0178] Optionally, at S503, the UE sends a NAS security mode complete message to the AMF.

[0179] After the UE receives the NAS security mode command message, the UE performs integrity verification on the NAS security mode command message, and if the verification passes, the UE continues to perform.

[0180] Optionally, the third indication information carried in the NAS security mode command message is verified to be consistent with the third indication information sent at S501. If they are the same, the NAS security mode complete message is sent to the AMF; if they are not the same, a rejection or failure message is sent to the AMF.

[0181] Optionally, the UE can also send the third indication information to the AMF after NAS security is established. Specifically, the third indication information can be sent at S503 or after S503 in a protected NAS message.

[0182] At S504, the AMF determines that the UE does not support AS security.

[0183] Optionally, before step S504, the AMF receives third indication information indicating that the UE does not support AS security. For example, the AMF receives a registration request message sent by the UE and obtains the third indication information carried in the registration request message.

[0184] Optionally, in another possible implementation, the AMF determines that the UE does not need to start AS security or does not need to start AS security currently.

[0185] Exemplarily, the AMF receives a registration request message sent by the UE, the registration request message carrying third indication information, the third indication information being used to indicate that the UE does not need to start AS security or the UE does not need to start AS security currently.

[0186] As another example, the AMF receives a registration request message sent by the UE, the registration request being a registration request of emergency service or the registration request message carrying indication information indicating emergency service. In the emergency service scenario, AS security does not need to be started, and it is determined that the security mechanism of the UE does not need to be started according to the emergency service scenario, including that AS security does not need to be started.

[0187] Exemplarily, the AMF receives MM capability information sent by the UE and obtains third indication information carried in the MM capability information.

[0188] Exemplarily, the AMF sends a subscription data request to a unified data management (UDM) and receives subscription information of the UE from the UDM and obtains third indication information carried in the subscription information.

[0189] It should be noted that the registration request message sent by the UE to the AMF usually carries MM capability information. Therefore, when the AMF obtains the third indication information through the MM capability information or the subscription information of the UE, the confirmation of the AS security capability of the UE can be completed without changing the UE.

[0190] The AMF determines that the UE does not support AS security currently according to the third indication information. In S506, the AMF sends a UE capability matching request message to the RAN.

[0191] If the AMF needs to determine whether the network can provide IMS-VoPS service for the UE, the AMF sends a UE capability matching request message to the RAN, the UE capability matching request message being used to request the RAN to judge whether the UE has IMS-VoPS capability.

[0192] Optionally, the UE capability matching request message carries fourth indication information, the fourth indication information being used to indicate that the UE does not support AS security or the UE does not need to start AS security currently or does not need to start AS security; or indicating emergency service or CP CIoT service.

[0193] It should be understood that the fourth indication information can also not be carried through the UE capability matching request message, that is, the AMF can send the fourth indication information through a separate message, which is not limited in the present application.

[0194] It should be understood that the fourth indication information and the third indication information can be the same or different, which is not limited in the present application.

[0195] Optionally, the UE capability matching request message carries an encryption algorithm and / or an integrity protection algorithm, and the RAN determines that the UE does not support AS security or the UE (currently) does not need to start AS security or the UE only supports AS security based on an algorithm protection according to the encryption algorithm and / or the integrity protection algorithm.

[0196] Optionally, before step S506, that is, before the AMF sends the UE capability matching request message to the RAN, the AMF calculates an integrity protection parameter, which is used by the UE to verify whether a message sent by the network is tampered.

[0197] Exemplarily, the integrity protection parameter is a message authentication code (MAC), the AMF calculates a MAC1 according to the fourth indication information and a first key, the MAC1 is used by the UE to verify whether the fourth indication information sent by the network is correct, and the first key is an integrity protection key shared between the AMF and the UE. The AMF carries the fourth indication information and the MAC1 in the UE capability matching request message and sends them to the RAN.

[0198] In S507, the RAN sends a UE capability query message to the UE.

[0199] When the RAN cannot obtain the radio capability information of the UE through the information saved by itself and the UE capability matching request message from the AMF, the RAN sends the UE capability query message to the UE according to the fourth indication information.

[0200] It should be noted that the AMF indicates that the UE does not support AS security or the UE (currently) does not need to start security or does not need to start AS security or indicates emergency service or CP CIoT service through the fourth indication information. Here, the RAN determines that AS security does not need to be started according to the emergency service indication or the CP CIoT service indication. The fourth indication information means that the security process of AS SMC does not need to be performed, or the execution of AS SMC will definitely fail, or only AS security based on an algorithm protection is supported; therefore, in this case, the base station does not establish AS security (or AS security establishment fails, or in the case of AS algorithm protection), and directly sends the UE capability query message to the UE to obtain the radio capability information of the UE.

[0201] Optionally, the UE capability query message carries the fourth indication information and the MAC1. It should be understood that the fourth indication information and the MAC1 can also be sent separately through other messages, which is not limited in the present application.

[0202] In a possible implementation, after the RAN receives the UE capability matching request message sent by the AMF, the RAN can directly send an AS security context establishment request to the UE regardless of whether the UE supports AS security. If the RAN receives an indication that the AS SMC fails from the UE side, that is, the UE reports the AS security context establishment failure to the RAN, the RAN continues to send a UE capability query message to the UE to request the wireless capability information of the UE, and the UE capability query message is not protected by AS security. In the scenario in which the UE does not support AS security or the UE does not need to start security or does not need to start AS security at present, the RAN can still obtain the wireless capability information of the UE even if the AS SMC fails. At this time, the AMF can not need to send the fourth indication information to the RAN to indicate that the UE does not support AS security. At this time, it means that the RAN can still obtain the wireless capability information of the UE from the UE even if the AS SMC fails.

[0203] Optionally, at S508, the UE checks the MAC1 and calculates the MAC2.

[0204] Illustratively, the UE receives the UE capability query message sent by the RAN and obtains the fourth indication information and the MAC1 therefrom. The UE checks the correctness of the MAC1 according to the first key and the fourth indication information. If the check is correct, the UE continues to perform. Otherwise, the UE sends a rejection message or a failure message to the RAN. Further, the UE calculates the MAC2 according to the first key and the wireless capability information of the UE. Here, the MAC2 is used for the AMF to check whether the wireless capability information of the UE received from the RAN is tampered.

[0205] At S509, the UE sends the wireless capability information of the UE to the RAN.

[0206] Illustratively, the UE sends a response message in response to the UE capability query message to the RAN, and carries the wireless capability information of the UE in the response message.

[0207] Optionally, the response message also carries the MAC2.

[0208] Optionally, in the scenario in which the UE does not support AS security or the UE does not need to start security or does not need to start AS security at present (for example, an emergency service scenario), even if the AS security is not established or the AS SMC fails, when the UE receives the UE capability query message that is not protected by AS security from the RAN, the UE still sends the wireless capability information of the UE to the RAN.

[0209] At S510, the RAN judges whether the UE has the IMS-VoPS capability.

[0210] Exemplarily, the RAN performs a UE capability matching check according to the UE's radio capability information, and confirms the check result. The UE capability matching check refers to the RAN judging whether the UE has IMS-VoPS capability. It should be understood that the present application does not limit the specific check method.

[0211] At S511, the RAN sends a UE capability matching response message to the AMF.

[0212] Exemplarily, after the RAN receives the UE's radio capability information and judges whether the UE has IMS-VoPS capability according to the UE's radio capability information, the RAN sends the judgment result to the AMF through the UE capability matching response message. Further, the RAN judges whether the RAN supports IMS-VoPS service according to the RAN capability information, and sends the judgment result to the AMF through the UE capability matching response message. Alternatively, the UE capability matching response message directly carries an indication information, which is used to indicate whether the UE and the network support IMS-VoPS service.

[0213] Optionally, at S512, the RAN sends a UE capability information indication message to the AMF, and the UE capability information indication message carries the UE's radio capability information, so that the AMF can save the UE's radio capability information, and when the above process needs to be performed subsequently, the AMF can directly send the UE's radio capability information to the RAN.

[0214] Optionally, the UE radio capability information indication message also carries a MAC2, which is used for the AMF to verify whether the received UE's radio capability information is tampered.

[0215] It should be understood that the RAN can also carry the UE's radio capability information and the MAC2 in the UE capability matching response message and send them to the AMF. The present application does not limit this.

[0216] Optionally, at S513, the AMF checks the correctness of the MAC2 according to the first key and the UE's radio capability information. If the check is correct, it is determined that the UE's radio capability information received by the AMF has not been tampered, then the UE's radio capability information is saved, and the process continues.

[0217] If the verification fails, the AMF optionally re-sends a UE capability matching request message to the RAN, the RAN re-receives the UE capability matching request message and re-sends a UE capability query message to the UE to request the wireless capability information of the UE; or the AMF sends indication information to the RAN, indicating that the RAN re-sends the UE capability query message; or the AMF sends a rejection message, an error message or a failure message to the UE, indicating that the UE wireless capability information sent by the UE and the MAC2 verification are incorrect. Further, the RAN can continue to send a rejection message, an error message or a failure message to the UE, indicating that the UE wireless capability information sent by the UE and the MAC2 verification are incorrect. When the UE receives the rejection message, the error message or the failure message, the UE can re-calculate the MAC2 and re-send the UE wireless capability information and the MAC2 to the RAN.

[0218] Therefore, the wireless communication method provided by the embodiments of the present application can ensure that the wireless capability information sent by the UE has not been tampered with by an attacker, prevent the attacker from performing a dimension reduction attack on the wireless capability information modification, and thus guarantee the security of communication.

[0219] At S514, the AMF sends a registration accept message to the UE.

[0220] For example, the AMF determines the judgment result of the base station according to the UE capability matching response message. When the judgment result indicates that the UE and the network both have IMS-VoPS capability, that is, the network can provide IMS-VoPS service for the UE, the AMF sets information for indicating IMS-VoPS capability in the network characteristic parameter and sends the information to the UE through the network characteristic parameter in the registration accept message.

[0221] Therefore, the wireless communication method of the embodiments of the present application indicates that the terminal device does not support AS security to the network device, so that the base station sends request information for obtaining wireless capability information to the terminal device in the case that the AS security is not established (or the AS security establishment fails), so that the base station can successfully obtain the wireless capability information of the terminal device and can successfully determine whether the terminal device has IMS-VoPS capability in the case that the terminal device does not have AS security.

[0222] Figure 6 A schematic flowchart of a method 600 of wireless communication provided by the embodiments of the present application is shown. From Figure 6 It can be seen from the method 600 that the method 600 includes:

[0223] S601, the UE sends a registration request message to the AMF.

[0224] Optionally, the registration request message carries fifth indication information, and the fifth indication information is used to indicate that the UE supports AS security.

[0225] The description of the fifth indication information is similar to the foregoing Figure 5 The third indication information in the corresponding embodiments is similar and will not be described again.

[0226] Optionally, the fifth indication information can be other information that can be used to indicate whether the UE supports AS security. For example, the fifth indication information is used to indicate that the UE does not support CP CIoT service (non-CP only indication information) and supports services other than CP CIoT service. Because CP CIoT service does not require AS security, when the fifth indication information indicates that the UE supports services other than CP CIoT service, it can be understood that the UE supports AS security, that is, the AMF can determine that the UE supports AS security according to the fifth indication information.

[0227] Optionally, the fifth indication information can also carry the identity of the service requiring AS security. Because the identity of the service requiring AS security indicates that the UE needs to support AS security to use, it can be understood that the UE supports AS security.

[0228] S602, the AMF determines that the UE supports AS security.

[0229] Optionally, before step S602, the AMF receives fifth indication information, and the fifth indication information is used to indicate that the UE supports AS security.

[0230] For example, the AMF receives the registration request message sent by the UE and obtains the fifth indication information carried in the registration request message. For example, the AMF receives the MM capability information sent by the UE and obtains the fifth indication information carried in the MM capability information.

[0231] For example, the AMF sends a subscription data request to the UDM, receives the subscription information of the UE from the UDM, and obtains the fifth indication information carried in the subscription information.

[0232] It should be noted that the registration request message sent by the UE to the AMF usually carries MM capability information. Therefore, when the AMF obtains the third indication information through the MM capability information or the subscription information of the UE, the confirmation of the AS security capability of the UE can be completed without changing the UE.

[0233] The AMF determines that the current UE supports AS security according to the fifth indication information.

[0234] Optionally, if the AMF does not receive information that the UE does not support security or does not support AS security or emergency service or CP CIoT service from the UE or the UDM, the AMF determines that the UE supports AS security.

[0235] Optionally, the fifth indication information can also be sent by the UE to the AMF after the NAS security mode complete message or after the NAS security is established.

[0236] Optionally, the AMF sends the fifth indication information to the UE in the NAS security mode command message, so that the UE can check whether the received fifth indication information is consistent with the fifth indication information sent in S601. If they are the same, the NAS security mode complete message is sent to the AMF; if they are not the same, a rejection or failure message is sent to the AMF.

[0237] Alternatively, the AMF can determine by default that the UE supports AS security when the fifth indication information is not received.

[0238] S603, the AMF sends an initial context setup request message to the RAN.

[0239] Exemplarily, when the AMF determines that the UE supports AS security and the AMF needs to determine whether the network can provide IMS-VoPS service for the UE, the initial context setup request message is sent to the RAN to request the RAN to establish an AS security context with the UE.

[0240] Optionally, before S603, the AMF derives a second key K g Note that the second key is used by the RAN to establish AS security. The AMF carries the second key in the context setup request message and sends it to the RAN.

[0241] S604, the RAN establishes AS security.

[0242] Exemplarily, the RAN establishes an AS security context with the UE using the second key according to the context setup request message sent by the AMF,

[0243] and sends an initial context setup response message to the AMF at S605.

[0244] S606, the AMF sends a UE capability match request message to the RAN.

[0245] Specifically, after receiving the initial context setup response message from the RAN, the AMF sends a UE capability match request message to the RAN.

[0246] S607, the RAN sends a UE capability query message to the UE.

[0247] When the RAN cannot obtain the UE's radio capability information through the information stored by itself and the UE capability matching request message from the AMF, the UE capability query message is sent to the UE. It should be noted that the AS security between the RAN and the UE has been established before step S607, so the UE capability query message can be protected by AS security.

[0248] Optionally, at S608, the UE calculates the MAC3.

[0249] Exemplarily, the UE calculates the MAC3 according to the UE's radio capability information, and the MAC3 is used by the AMF to verify whether the UE's radio capability information received from the RAN is tampered.

[0250] It should be understood that steps S609 to S614 are similar to S509 to S514 in method 500, and the present application will not be repeated here.

[0251] Optionally, the AMF can also perform S606 before performing S605. When the RAN performs S606, if the AS security has not been established at this time, the AS security is first established in step S604, and then step S607 is performed.

[0252] Therefore, the wireless communication method provided by the embodiments of the present application determines that the terminal device supports the AS security, and requests the base station to establish the AS security context, so that the base station sends the request information for obtaining the radio capability information to the terminal device in the case that the AS security is established, so that the information exchanged between the base station and the terminal device can be protected by the AS security, and the radio capability information of the terminal device can be successfully obtained and it can be successfully judged whether the terminal device has the IMS-VoPS capability.

[0253] Figure 7 A schematic flowchart of a method 700 of wireless communication provided by an embodiment of the present application is shown. As can be seen from Figure 7 , the method 700 includes:

[0254] S701, the UE sends a registration request message to the AMF.

[0255] S702, the AMF sends a context establishment request message to the RAN.

[0256] If the AMF needs to determine whether the network can provide the UE with the IMS-VoPS service, the AMF directly sends a context establishment request message to the RAN to request the RAN to establish the AS security context with the UE. That is, when the AMF needs the RAN to judge whether the UE has the IMS-VoPS capability, the AMF does not consider whether the UE supports the AS security, and directly requests the RAN to establish the AS security context.

[0257] Optionally, before S702, the AMF derives the second key K g NB, the second key is used for RAN to establish AS security. The AMF sends the second key to the RAN in the context setup request message.

[0258] S703, the RAN sends an AS security mode command message to the UE.

[0259] After the RAN receives the context setup request message sent by the AMF, the RAN sends an AS security mode command message to the UE to request to establish an AS security context.

[0260] S704, the UE sends an AS security mode failure / success message to the RAN.

[0261] When the establishment of the AS security context fails, the UE sends an AS security mode failure message to the RAN.

[0262] When the establishment of the AS security context succeeds, the UE sends an AS security mode success message to the RAN.

[0263] S705, the UE sends sixth indication information to the RAN, the sixth indication information being used to indicate that the UE does not support / support AS security. It should be understood that the sixth indication information can be carried in the AS security mode failure / success message, or can be sent separately through other messages.

[0264] Optionally, the UE calculates an integrity protection parameter, and sends the integrity protection parameter to the RAN, the integrity protection parameter being used for the AMF to verify whether a message sent from the UE side is tampered.

[0265] Exemplarily, the integrity protection parameter is a message authentication code MAC, the UE calculates the MAC4 according to the sixth indication information and a first key, the first key being an integrity protection key shared between the AMF and the UE. The UE sends the sixth indication information and the MAC4 to the RAN, the MAC4 being used for the AMF to verify whether the sixth indication information is tampered. S706, the RAN sends a context setup response message to the AMF.

[0266] Optionally, the sixth indication information is carried in the context setup response message, the sixth indication information being used to indicate that the UE does not support / support AS security. Alternatively, the seventh indication information is carried in the context setup response message, the seventh indication information being used to indicate that the UE does not support / support AS security, the seventh indication information being different from the sixth indication information.

[0267] Optionally, the RAN sends the MAC4 to the AMF in the context setup response message.

[0268] S707, the AMF determines that the UE does not support / support AS security.

[0269] The AMF determines that the UE does not support / support AS security according to the sixth indication information.

[0270] Optionally, the AMF receives the MAC4 from the RAN, and the AMF checks the correctness of the MAC4 according to the first key and the sixth indication information. If the checking is correct, the method continues to be executed. Otherwise, the AMF sends a rejection message or a failure message to the RAN.

[0271] When the AMF determines that the UE does not support AS security, steps S708 to S713 are similar to steps S506 to S514 in the method 500. However, it should be noted that step S506 in the method 500 needs to carry the indication information indicating that the UE does not support AS security, but step S708 in the method 700 can not need to carry the indication information. When the AMF determines that the UE supports AS security, steps S708 to S713 are similar to steps S606 to S612 in the method 600. For brevity, the present application will not repeat here.

[0272] Optionally, the indication that the UE supports AS security can also not be sent, because if the AS security mode is successful, it means that the UE supports AS security.

[0273] Therefore, the wireless communication method provided by the embodiments of the present application can avoid the case that the flow of whether the UE side has the IMS-VoPS capability cannot be judged without changing the UE by defining the order of the mechanism.

[0274] Figure 8 A schematic flowchart of a method 800 of wireless communication provided by the embodiments of the present application is shown. From Figure 8 It can be seen that the method 800 includes:

[0275] S801, the UE sends a registration request message to the AMF.

[0276] S802, the AMF sends a UE capability matching request message to the RAN.

[0277] If the AMF needs to determine whether the network can provide the UE with IMS-VoPS service, the AMF sends a UE capability matching request message to the RAN, and the UE capability matching request message is used to request the RAN to judge whether the UE has the IMS-VoPS capability.

[0278] Further, the UE capability matching request message carries a second key, and the second key is used for the RAN to establish AS security.

[0279] Optionally, the UE capability matching request message carries context establishment request information, and the context establishment request information is used to request the RAN to establish an AS security context. It should be understood that the context establishment request information can also be sent in other messages.

[0280] S803, the RAN sends an AS security mode command message to the UE.

[0281] After the RAN receives the UE capability matching request message sent by the AMF, the RAN directly initiates an AS security establishment procedure according to the context establishment request information, that is, the RAN sends an AS security mode command message to the UE to request the establishment of an AS security context.

[0282] S804, the UE sends an AS security mode failure / complete message to the RAN.

[0283] When the establishment of the AS security context fails, the UE sends an AS security mode failure message to the RAN.

[0284] When the establishment of the AS security context succeeds, the UE sends an AS security mode success message to the RAN.

[0285] The AS security mode failure / complete message carries eighth indication information, and the eighth indication information is used to indicate that the UE does not support / support AS security.

[0286] S805, the RAN sends a UE capability query message to the UE.

[0287] After receiving the AS security mode failure / complete message, the RAN sends a UE capability query message to the UE according to the UE capability matching request message.

[0288] It should be noted that in the method 800 of the embodiments of the present application, after the RAN receives the UE capability matching request message carrying the context establishment request information, the RAN first establishes an AS security context with the UE according to the context establishment request message, and then sends a UE capability query message to the UE according to the UE capability matching request message to request the wireless capability information of the UE.

[0289] When the eighth indication information indicates that the UE does not support AS security, steps S708 to S713 are similar to steps S507 to S514 in the method 500. When the eighth indication information indicates that the UE supports AS security, steps S709 to S713 are similar to steps S606 to S612 in the method 600. For the sake of brevity, the present application will not be described here.

[0290] Therefore, the wireless communication method provided by the embodiments of the present application avoids the failure of the judgment process and reduces signaling waste by sending a key used to establish AS security in advance, defaulting to establish an AS security context when indicating the RAN to judge whether the UE and the network both have IMS-VoPS capability, and sending a UE capability query message after determining that the AS security context establishment is completed.

[0291] Figure 9 A schematic flowchart of a wireless communication method 900 provided by the embodiments of the present application is shown. From Figure 9 It can be seen that the method 900 includes the following steps.

[0292] S901, the UE sends a registration request message to the AMF.

[0293] After the AMF receives the registration request message sent by the UE, the authentication of the UE is performed. It should be understood that the authentication here can be an initial authentication mode of the network, for example, a 5G network, or the authentication is based on an existing security context to authenticate the UE, which is not limited by the present application.

[0294] After the authentication, both parties finally save the non-access stratum (NAS) protection key, including the NAS encryption key and the NAS integrity protection key.

[0295] Optionally, in S902, the AMF sends a NAS security mode command message to the UE.

[0296] If the scenario of performing NAS SMC is needed, the AMF sends a NAS security mode command message to the UE.

[0297] It should be noted that the scenario of performing NAS SMC, for example, can be: after the initial authentication, the NAS security needs to be established; or the AMF key is derived, or the NAS SMC needs to be performed according to the local policy, which is not limited by the present application.

[0298] It should be understood that the NAS security mode command message is integrity protected based on the NAS integrity protection key shared between the AMF and the UE, and if an attacker tampers with this message, the UE will not pass the verification.

[0299] Optionally, in S903, the UE sends a NAS security mode complete message to the AMF.

[0300] After the UE receives the NAS security mode command message, the NAS security mode command message is integrity checked, and if the verification is passed, the NAS security mode complete message is sent to the AMF, and the NAS security mode complete message carries the wireless capability information of the UE.

[0301] It should be understood that the wireless capability information of the UE can also be sent through other messages, which are not limited in the present application.

[0302] S904, the RAN sends RAN capability information to the AMF, which can be used to indicate whether the RAN has IMS-VoPS capability.

[0303] Optionally, the RAN sends the RAN capability information to the AMF after receiving the registration request message; or the RAN sends the RAN capability information to the AMF according to the request message sent by the AMF. The present application does not limit the sending time and sending mode of the RAN sending the RAN capability information. It is also possible that the AMF is configured with the RAN capability information, in which case step S904 will not be needed.

[0304] S905, the AMF determines whether the UE and the network support IMS-VoPS service.

[0305] The AMF determines whether the UE has IMS-VoPS capability according to the wireless capability information of the UE, and determines whether the RAN has IMS-VoPS capability according to the RAN capability information. When the UE and the RAN both have IMS-VoPS capability, the AMF determines that the UE and the network support IMS-VoPS service, otherwise the AMF determines that the UE and the network do not support IMS-VoPS service.

[0306] S906, the AMF sends a registration acceptance message to the UE.

[0307] Exemplarily, when the AMF determines that the UE and the network support IMS-VoPS service, the AMF sets the information in the network characteristic parameter for indicating IMS-VoPS capability, and sends it to the UE through the network characteristic parameter in the registration acceptance message.

[0308] Therefore, the wireless communication method of the embodiments of the present application avoids the problem of failure of the judgment process due to the failure of AS security establishment by letting the AMF determine whether the UE and the network support IMS-VoPS service.

[0309] Figure 10 A schematic flowchart of a wireless communication method 1000 provided by the embodiments of the present application is shown. From Figure 10 It can be seen from the method 1000 that the method 1000 includes:

[0310] S1010, the UE sends a registration request message to the AMF, and the registration request message carries ninth indication information, which is used to indicate emergency registration or CP CIoT service and other services that do not require AS security.

[0311] S1020, the AMF determines, based on the ninth indication information, that this is an emergency registration scenario or CPCIoT, etc., where UE security does not need to be enabled, or can be understood as UE AS security not needing to be enabled. Then, the AMF sends a UE capability matching request message to the RAN, which carries the tenth indication information. The tenth indication information indicates emergency registration or CPCIoT, or that UE security does not need to be enabled, or UE AS security does not need to be enabled. Here, the tenth indication information can also be an empty encryption algorithm and / or an empty integrity protection algorithm.

[0312] It should be understood that the tenth instruction message may also be sent separately in other messages, and this application does not limit this.

[0313] After receiving the registration request from the UE, the AMF sends a UE capability matching request message to the RAN, enabling the RAN to determine whether the UE and the network have IMS-VoPS capabilities.

[0314] If the AMF has stored the UE's radio capability information in advance, the AMF will include the UE's radio capability information in the UE capability matching request message.

[0315] If the RAN does not receive the UE's radio capability information from the AMF, and does not store the UE's radio capability information locally, and the RAN determines based on the tenth instruction information that this is an emergency registration scenario or CP CIoT, etc., and that UE security does not need to be enabled, or can be understood as not needing to enable UE AS security, or can be understood as empty encryption algorithm and / or empty integrity protection algorithm meaning that the UE does not support AS security or does not need to establish AS security, then in S1030, if AS security is not established or AS SMC fails, the RAN directly sends a UE capability query message to the UE to request the UE's radio capability information.

[0316] In the wireless communication method provided in this application embodiment, steps S1040 to S1080 are similar to steps S240 to S280 in method 200. For the sake of brevity, these steps will not be repeated here.

[0317] It should be noted that the wireless communication method provided in this application, which determines whether a UE supports AS security, can also be applied to other scenarios that require identifying whether a terminal device supports AS security, or other scenarios where parameters can only be transmitted based on whether the UE supports AS security or whether the UE needs to enable AS. For example, a base station can only correctly activate / deactivate AS security if it knows whether the UE supports it. In this case, the method for determining whether the UE supports AS security provided in this application can be used to implement the above method. This application does not limit other similar application scenarios.

[0318] It should be noted that for the embodiments in the present application, if the AMF determines that the UE does not support AS security or the current service of the UE does not support AS security according to the indication information sent by the UE, or the emergency service indication information or the indication information of CP CIoT service sent by the UE, the AMF can also not send the indication information that the UE does not support AS security or the current service of the UE does not support AS, but can send the encryption algorithm and / or integrity protection algorithm to the RAN. If the RAN receives the encryption algorithm and / or integrity protection algorithm from the AMF, it is determined that the UE does not support AS security or the current service of the UE does not support AS security, or the UE only supports AS security based on the algorithm protection, the RAN can directly send the UE capability query message to the UE without establishing AS security or in the case of AS SMC failure or the AS protection algorithm being the algorithm, to request to obtain the wireless capability information of the UE. Other steps remain unchanged.

[0319] It should be noted that for the embodiments in the present application, the AMF receives the registration message sent by the UE, and determines that the UE hopes to use the emergency service, or the CP CIoT service, etc. which does not need to establish AS security, or only needs the AS security protected by the algorithm. The AMF can also not send the indication that the UE does not support AS security or the current service of the UE does not support AS, but can send the indication of the emergency service or the CP CIoT service to the RAN. If the RAN receives the indication of the emergency service or the CP CIoT service from the AMF, it is determined that the UE can not need to establish AS security or the current service of the UE does not need AS security, or the UE only supports AS security based on the algorithm protection, the RAN can directly send the UE capability query message to the UE without establishing AS security or in the case of AS SMC failure or the AS protection algorithm being the algorithm, to request to obtain the wireless capability information of the UE. Other steps remain unchanged.

[0320] The above, in combination with Figures 2-10 The method provided by the embodiments of the present application is described in detail. In the following, in combination with Figures 11-15 The communication device provided by the embodiments of the present application is described in detail.

[0321] Figure 11 is a schematic block diagram of the communication device provided by the embodiments of the present application. As shown in the figure, the communication device 10 can include a transceiver module 11 and a processing module 12.

[0322] In a possible design, the communication device 10 can correspond to the network device or the AMF in the above method embodiments.

[0323] Exemplarily, the communication apparatus 10 can correspond to a network device or an AMF in the method 200 to the method 1000 according to the embodiments of the present application, and can include modules for performing the methods performed by the network device or the AMF in the method 200 in the method 1000. And, the units in the communication apparatus 10 and the other operations and / or functions described above are respectively for realizing the corresponding procedures of the method 200 to the method 1000. Figure 2 Figure 3 Figure 4 Figure 5 Figure 6 Figure 7 Figure 8 Figure 9 Figure 10

[0324]

[0325] Figure 12 is a schematic block diagram of a communication apparatus provided by the embodiments of the present application. As shown in the figure, the communication apparatus 20 can include a transceiver module 21 and a processing module 22. Exemplarily, Figure 12 Figure 2 Figure 3 Figure 4 Figure 5 Figure 6 Figure 7 Figure 8 Figure 9 Figure 10

[0326]

[0327] According to the foregoing method, Figure 13 ​​​​​​​​​​​​​​​​​​​​​A schematic diagram of the communication apparatus 30 provided by the embodiments of the present application is shown in Figure 13 The apparatus 30 can be a network device, including a network element with access management function, such as AMF, etc.

[0328] The apparatus 30 can include a processor 31 (i.e., an example of a processing module) and a memory 32. The memory 32 is configured to store instructions, and the processor 31 is configured to execute the instructions stored in the memory 32, so that the apparatus 30 implements the steps performed in the corresponding method. Figures 2-10 The corresponding method.

[0329] Further, the apparatus 30 can further include an input port 33 (i.e., an example of a transceiver module) and an output port 34 (i.e., another example of a transceiver module). Further, the processor 31, the memory 32, the input port 33 and the output port 34 can communicate with each other through internal connection paths to transfer control and / or data signals. The memory 42 is configured to store a computer program, and the processor 31 can be configured to call and run the computer program from the memory 32 to control the input port 43 to receive signals and control the output port 34 to send signals, thereby completing the steps of the network device in the above method. The memory 32 can be integrated in the processor 31 or can be separately arranged from the processor 31.

[0330] Optionally, if the communication apparatus 30 is a communication device, the input port 33 is a receiver, and the output port 34 is a transmitter. The receiver and the transmitter can be the same or different physical entities. When they are the same physical entity, they can be collectively referred to as a transceiver.

[0331] Optionally, if the communication apparatus 30 is a chip or a circuit, the input port 33 is an input interface, and the output port 34 is an output interface.

[0332] As an implementation manner, the functions of the input port 33 and the output port 34 can be implemented by a transceiver circuit or a dedicated transceiver chip. The processor 31 can be implemented by a dedicated processing chip, a processing circuit, a processor or a general-purpose chip.

[0333] As another implementation manner, a general-purpose computer can be used to implement the communication device provided by the embodiments of the present application. That is, program codes for implementing the functions of the processor 31, the input port 33 and the output port 34 are stored in the memory 32, and the general-purpose processor implements the functions of the processor 31, the input port 33 and the output port 34 by executing the codes in the memory 32.

[0334] The modules or units in the communication apparatus 30 can be used to perform the actions or processing procedures performed by the device (i.e., the base station) for SL carrier management in the above method. Here, to avoid redundancy, the detailed description is omitted.

[0335] The concepts, explanations and detailed descriptions related to the technical solutions provided in the embodiments of the present application involved in the apparatus 30, and other steps, please refer to the foregoing method or other embodiments for the description of these contents, and will not be repeated here.

[0336] According to the foregoing method, Figure 14 A schematic diagram of a communication apparatus 40 provided in the embodiments of the present application is shown. The communication apparatus 40 can be a network device or an access and mobility management network element, etc. The apparatus 40 can include a processor 41 (which can also be understood as an example of a processing module), and can also include a memory 42. The memory 42 is used to store instructions, and the processor 41 is used to execute the instructions stored in the memory 42, so that the apparatus 40 implements the steps performed by the communication apparatus in the corresponding method as Figures 2-10 described in the foregoing method.

[0337] The structure of the apparatus 40 is similar to that of the foregoing apparatus 30, and will not be repeated here.

[0338] The concepts, explanations and detailed descriptions related to the technical solutions provided in the embodiments of the present application involved in the apparatus 40, and other steps, please refer to the foregoing method or other embodiments for the description of these contents, and will not be repeated here.

[0339] Figure 15 A simplified network device structure schematic diagram is shown. The network device includes a 51 part and a 52 part. The 51 part is mainly used for the transceiving of radio frequency signals and the conversion between radio frequency signals and baseband signals; the 52 part is mainly used for baseband processing, controlling the network device, etc. The 51 part can be commonly referred to as a transceiving module, a transceiver, a transceiving circuit, or a transceiver, etc. The 52 part is usually the control center of the network device, and can be commonly referred to as a processing module, used to control the network device to perform the processing operations on the network device side in the foregoing method embodiments.

[0340] The transceiving module of the 51 part, which can also be referred to as a transceiver or a transceiver, etc., includes an antenna and a radio frequency circuit, wherein the radio frequency circuit is mainly used for radio frequency processing. For example, the devices in the 51 part used to implement the receiving function can be regarded as a receiving module, and the devices used to implement the sending function can be regarded as a sending module, that is, the 51 part includes a receiving module and a sending module. The receiving module can also be referred to as a receiver, a receiver, or a receiving circuit, etc., and the sending module can be referred to as a transmitter, a transmitter, or a transmitting circuit, etc.

[0341] The 52 part can include one or more single boards, each of which can include one or more processors and one or more memories. The processor is used to read and execute the program in the memory to realize the baseband processing function and the control of the network device. If there are multiple single boards, the single boards can be interconnected to enhance the processing capability. As an optional implementation, multiple single boards can also share one or more processors, or multiple single boards can share one or more memories, or multiple single boards can share one or more processors at the same time.

[0342] For example, in an implementation, the transceiver module of the 51 part is used to execute the steps related to the transceiving of the network device or the base station in the method; and the 52 part is used to execute the steps related to the processing of the network device or the base station in the method. Figures 2-10 Figures 2-10 For example, in an implementation, the transceiver module of the 51 part is used to execute the steps related to the transceiving of the network device or the base station in the method; and the 52 part is used to execute the steps related to the processing of the network device or the base station in the method.

[0343] It should be understood that Figure 15 The network device including the transceiver module and the processing module described above is only an example and is not limited to the structure shown. Figure 15

[0344] When the device 50 is a chip, the chip includes a transceiver module and a processing module. The transceiver module can be an input / output circuit, a communication interface; and the processing module is a processor or a microprocessor or an integrated circuit integrated on the chip.

[0345] The embodiment of the present application also provides a computer readable storage medium, which stores computer instructions for implementing the method executed by the first network device in the method embodiment.

[0346] For example, when the computer program is executed by a computer, the computer can implement the method executed by the network device in the method embodiment.

[0347] The embodiment of the present application also provides a computer program product including instructions, which, when executed by a computer, cause the computer to implement the method executed by the first device in the method embodiment or the method executed by the second device.

[0348] The embodiment of the present application also provides a communication system, which includes the network device in the above embodiment.

[0349] The explanations and beneficial effects of the related contents in any of the above provided devices can refer to the corresponding method embodiments provided above, and will not be repeated here.

[0350] ​​In the embodiments of the present application, the network device can include a hardware layer, an operating system layer running above the hardware layer, and an application layer running on the operating system layer. The hardware layer can include a central processing unit (CPU), a memory management unit (MMU), a memory (also referred to as main memory), and the like. The operating system of the operating system layer can be any one or more computer operating systems that implement service processing through a process, such as a Linux operating system, a Unix operating system, an Android operating system, an iOS operating system, or a windows operating system. The application layer can include a browser, an address book, word processing software, instant messaging software, and the like.

[0351] The embodiments of the present application do not particularly limit the specific structure of the execution subject of the method provided by the embodiments of the present application, as long as the execution subject can communicate according to the method provided by the embodiments of the present application by running a program in which the code of the method provided by the embodiments of the present application is recorded. For example, the execution subject of the method provided by the embodiments of the present application can be a network device, or a functional module in the network device that can invoke and execute a program.

[0352] Various aspects or features of the disclosure can be implemented as a method, apparatus, or article of manufacture using standard programming and / or engineering techniques. The term "article of manufacture" as used herein can encompass a computer program accessible from any computer-readable device, carrier, or media. For example, computer-readable media can include but are not limited to magnetic storage devices (e.g., hard disk, floppy disk, magnetic strips, etc.), optical disks (e.g., compact disk (CD), digital versatile disk (DVD), etc.), smart cards, and flash memory devices (e.g., EPROM, card, stick, or key drive, etc.).

[0353] Various storage media described herein can represent one or more devices and / or other machine-readable media for storing information. The term "machine-readable medium" can include, without limitation, wireless channels and various other media capable of storing, containing, and / or carrying instruction(s) and / or data.

[0354] It should be appreciated that the processor referenced in the embodiments of the present application can be a central processing unit (CPU), and can also be other general-purpose processors, digital signal processors (DSPs), application specific integrated circuits (ASICs), field programmable gate arrays (FPGAs) or other programmable logic devices, discrete gates or transistor logic components, discrete hardware components, etc. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor.

[0355] It should also be understood that the memory referenced in the embodiments of the present application can be a volatile memory or a non-volatile memory, or can include both volatile and non-volatile memories. Among them, the non-volatile memory can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically EPROM (EEPROM) or a flash memory. The volatile memory can be a random access memory (RAM). For example, the RAM can be used as an external cache. As an example but not limitation, the RAM can include the following various forms: static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM) and direct memory bus random access memory (DR RAM).

[0356] It should be noted that when the processor is a general-purpose processor, a DSP, an ASIC, an FPGA or other programmable logic device, a discrete gate or transistor logic component, a discrete hardware component, the memory (storage module) can be integrated in the processor.

[0357] It is also important to note that the storage described herein is intended to comprise, without being limited to, these and any other suitable types of storage.

[0358] Those skilled in the art can clearly understand that the units and steps of each example described in combination with the embodiments disclosed herein can be realized by electronic hardware or a combination of computer software and electronic hardware. Whether the functions are realized in hardware or software mode depends on the specific application and design constraints of the technical solution. The skilled person can use different methods to realize the described functions for each specific application, but such implementation should not be considered beyond the scope of the present application.

[0359] Those skilled in the art can clearly understand that, for the convenience and brevity of the description, the specific working process of the above-described device and unit can refer to the corresponding process in the foregoing method embodiments, which will not be repeated here.

[0360] In several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division, and actual implementation can have another division manner. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the coupling or direct coupling or communication connection between the units shown or discussed can be indirect coupling or communication connection through some interface, device or unit, and can be electrical, mechanical or other forms.

[0361] The units described as separate components can or can not be physically separated, and the components shown as units can or can not be physical units, i.e. they can be located in one place or distributed on multiple network units. Part or all of the units can be selected according to actual needs to realize the scheme provided in the present application.

[0362] In addition, each functional unit in each embodiment of the present application can be integrated into one unit, or each unit can exist physically, or two or more units can be integrated into one unit.

[0363] In the above embodiments, implementation can be achieved entirely or partially through software, hardware, firmware, or any combination thereof. When implemented using software, it can be implemented entirely or partially in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, all or part of the processes or functions described in the embodiments of this application are generated. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. For example, the computer can be a personal computer, a server, or a network device, etc. The computer instructions can be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another. For example, the computer instructions can be transmitted from one website, computer, server, or data center to another website, computer, server, or data center via wired (e.g., coaxial cable, fiber optic, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) means. The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or data center that integrates one or more available media. The available media can be magnetic media (e.g., floppy disks, hard disks, magnetic tapes), optical media (e.g., DVDs), or semiconductor media (e.g., solid-state disks (SSDs)). For example, the aforementioned available media may include, but are not limited to, various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0364] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the technical scope disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of protection of the claims and the specification.

Claims

1. A method for wireless communication, characterized in that, include: The network device receives the first message from the terminal device; The network device determines whether the terminal device supports access layer AS security. In the case where the terminal device does not support the AS security, the network device sends a first indication message and a first request message to the base station. The first indication message is used to indicate that the terminal device does not support the AS security, and the first request message is used to request the base station to determine whether the terminal device has IMS-VoPS capability based on the wireless capabilities of the terminal device.

2. The method according to claim 1, characterized in that, The method further includes: When the terminal device supports the AS security, the network device sends a second request message to the base station, the second request message being used to request the base station to establish an AS security context; After receiving a response from the base station in response to the second request information, the network device sends the first request information to the base station.

3. The method according to claim 1 or 2, characterized in that, The network device determines whether the terminal device supports establishing access layer AS security, including: The network device receives second indication information, which is used to determine whether the terminal device supports the AS security. The network device determines whether the terminal device supports establishing access layer AS security based on the second indication information.

4. The method according to claim 3, characterized in that, The receipt of the second indication information includes: The network device receives mobility management capability information from the terminal device, the mobility management capability information carrying the second indication information; or The network device receives subscription information from unified data management, the subscription information carrying the second indication information.

5. The method according to claim 1 or 2, characterized in that, After the network device sends the first request information to the base station, the method further includes: The network device receives wireless capability information and integrity protection parameters from the terminal device of the base station. The integrity protection parameters are used to verify whether the wireless capability information of the terminal device has been tampered with. The network device verifies whether the terminal's wireless capability information has been tampered with based on the first key and the integrity protection parameters, wherein the first key is a shared key between the network device and the terminal device; If the terminal's wireless capability information is tampered with, the network device sends a rejection message to the base station, or resends the first request information to the base station.

6. A method for wireless communication, characterized in that, include: The base station receives a first indication information and a first request information from the network device. The first indication information is used to indicate that the first terminal device does not support access layer AS security, and the first request information is used to request the base station to determine whether the first terminal device has IMS-VoPS capability based on the wireless capability of the first terminal device. After receiving the first request information, if the base station cannot obtain the wireless capability information of the first terminal device through the information stored by the base station and the information carried by the first request information, then the base station sends a request information to the first terminal device to obtain the wireless capability information of the first terminal device according to the first instruction information. The request information is not protected by AS security. The base station obtains the wireless capability information of the first terminal device from the response information from the first terminal device; The base station determines whether the first terminal device has IMS-VoPS capability based on the wireless capability information of the first terminal device.

7. The method according to claim 6, characterized in that, The method further includes: The base station receives a second request information from the network device, the second request information being used to request the base station to establish an AS security context with the second terminal device, the second terminal device supporting the AS security; The base station establishes an AS security context with the second terminal device and sends a response message to the network device.

8. The method according to claim 7, characterized in that, After the base station establishes the AS security context, the method further includes: The base station receives a third request information from the network device, the third request information being used to request the base station to determine whether the second terminal device has IMS-VoPS capability based on the wireless capability of the second terminal device. After receiving the first request information, if the base station cannot obtain the wireless capability information of the second terminal device through the information stored by the base station and the information carried by the first request information, the base station sends a request information to the second terminal device to obtain the wireless capability information of the second terminal device. The request information has been protected by AS security. The base station obtains the wireless capability information of the second terminal device from the response information from the second terminal device; The base station determines whether the second terminal device has IMS-VoPS capability based on the wireless capability information of the second terminal device, and feeds back the determination result to the network device.

9. The method according to any one of claims 6 to 8, characterized in that, The method further includes: The base station receives wireless capability information and integrity protection parameters from the first terminal device. The base station sends the wireless capability information and integrity protection parameters of the first terminal device to the network device. The integrity protection parameters are used to verify whether the wireless capability information of the first terminal device has been tampered with. The base station receives a rejection message from the network device indicating that the wireless capability information of the first terminal device has been tampered with, or receives the first request information again.

10. A wireless communication device, characterized in that, include: The transceiver module is used to receive the first message from the terminal device; The processing module is used to determine whether the terminal device supports access layer AS security. In the event that the terminal device does not support the AS security, the transceiver module sends a first indication message and a first request message to the base station. The first indication message indicates that the terminal device does not support the AS security, and the first request message requests the base station to determine whether the terminal device has IMS-VoPS capability based on the wireless capabilities of the terminal device.

11. The apparatus according to claim 10, characterized in that, The processing module is further configured to, when the terminal device supports the AS security, send a second request message to the base station through the transceiver module, wherein the second request message is used to request the base station to establish an AS security context; And after the transceiver module receives the response information from the base station in response to the second request information, it sends the first request information to the base station through the transceiver module.

12. The apparatus according to claim 10 or 11, characterized in that, The transceiver module is also configured to receive second indication information, which is used to determine whether the terminal device supports the AS security. The processing module is used to determine whether the terminal device supports establishing access layer AS security based on the second indication information.

13. The apparatus according to claim 12, characterized in that, The transceiver module is specifically used for: Receive mobility management capability information from the terminal device, wherein the mobility management capability information carries the second indication information; or Receive subscription information from unified data management, wherein the subscription information carries the second indication information.

14. The apparatus according to claim 10 or 11, characterized in that, The transceiver module is also used for: After sending the first request information to the base station, the terminal device receives wireless capability information and integrity protection parameters from the base station. The integrity protection parameters are used to verify whether the wireless capability information of the terminal device has been tampered with. The processing module is also used for: Verify whether the terminal wireless capability information has been tampered with based on the first key and the integrity protection parameters, wherein the first key is a shared key between the device and the terminal equipment; In the event that the terminal's wireless capability information has been tampered with, the transceiver module can send a rejection message to the base station or resend the first request information to the base station.

15. A wireless communication device, characterized in that, include: The transceiver module is used to receive first indication information and first request information from the network device. The first indication information is used to indicate that the first terminal device does not support access layer AS security, and the first request information is used to request the device to determine whether the first terminal device has IMS-VoPS capability based on the wireless capability of the first terminal device. The processing module is configured to, after the transceiver module receives the first request information, if it cannot obtain the wireless capability information of the first terminal device through the saved information and the information carried by the first request information, send a request information for obtaining the wireless capability information of the first terminal device through the transceiver module according to the first indication information, wherein the request information is not protected by AS security. Used to obtain the wireless capability information of the first terminal device from the response information received from the first terminal device by the transceiver module; and to determine whether the first terminal device has IMS-VoPS capability based on the wireless capability information of the first terminal device.

16. The apparatus according to claim 15, characterized in that, The transceiver module is also used for: The device receives a second request message from the network device, the second request message being used to request the device to establish an AS security context with the second terminal device, the second terminal device supporting the AS security. The processing module is also used for: Establish AS security with the second terminal device; The transceiver module is also used for: Send a response message to the network device.

17. The apparatus according to claim 16, characterized in that, The transceiver module is further configured to, after the processing module establishes the AS security, The device receives a third request message from the network device, the third request message being used to request the device to determine whether the second terminal device has IMS-VoPS capability based on the wireless capability of the second terminal device. The processing module is further configured to, after the transceiver module receives the first request information, if it cannot obtain the wireless capability information of the second terminal device through the saved information and the information carried by the first request information, send a request information for obtaining the wireless capability information of the second terminal device to the second terminal device through the transceiver module, wherein the request information has been protected by AS security. Obtain the wireless capability information of the second terminal device from the response information from the second terminal device; The system determines whether the second terminal device has IMS-VoPS capability based on its wireless capability information.

18. The apparatus according to any one of claims 15 to 17, characterized in that, The transceiver module is also used for: Receive wireless capability information and integrity protection parameters from the first terminal device; The wireless capability information and integrity protection parameters of the first terminal device are sent to the network device. The integrity protection parameters are used to verify whether the wireless capability information of the first terminal device has been tampered with. The network device receives a rejection message indicating that the wireless capability information of the first terminal device has been tampered with, or receives the first request information again.

19. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program that, when run on a computer, causes the computer to perform the method as described in any one of claims 1-9.

20. A chip, characterized in that, It includes a processor and a memory, the memory being used to store a computer program, and the processor being used to invoke and run the computer program stored in the memory to perform the method as described in any one of claims 1-9.

21. A communication system, characterized in that, The communication system includes at least one network device, a base station, and a terminal device, wherein the network device is used to perform the method as described in any one of claims 1-5, and the base station is used to perform the method as described in any one of claims 6-9.

Images