Security material acquisition method and apparatus

Abstract

The method executed by the terminal device comprises the following steps: in a U2U relay discovery process, a first request message is sent to a first network element, wherein the first request message is used for requesting to acquire a first discovery security material, and the first discovery security material is used for protecting a direct discovery set. In this way, the terminal device can acquire the first discovery security material used for protecting the direct discovery set, so as to guarantee the communication security of the U2U relay discovery process.

Description

Technical Field

[0001] This disclosure relates to the field of communication technology, and in particular to a method and apparatus for obtaining secure materials. Background Technology

[0002] In related technologies, two sets of discovery security materials are used for device-to-device (UE to UE, U2U) relay discovery message protection, including discovery security materials for protecting the direct discovery set and discovery security materials for protecting U2U relay discovery messages.

[0003] Among these, the discovery security materials used to protect the direct discovery set cannot be directly obtained using the acquisition methods employed in the U2U relay discovery process. Therefore, how to obtain the discovery security materials used to protect the direct discovery set in U2U relay discovery is a problem that urgently needs to be solved. Summary of the Invention

[0004] This disclosure provides a method and apparatus for acquiring security materials, which can be applied to communication systems such as Long Term Evolution (LTE) systems, 5th Generation (5G) mobile communication systems, 5G New Radio (NR) systems, or other future new mobile communication systems. Terminal devices can acquire first discovery security materials for protecting the direct discovery set to ensure communication security during the U2U relay discovery process.

[0005] In a first aspect, embodiments of this disclosure provide a method for obtaining security materials, the method being executed by a terminal device, comprising: during a U2U relay discovery process, the terminal device sending a first request message to a first network element, wherein the first request message is used to request the acquisition of a first discovery security material, the first discovery security material being used to protect a direct discovery set.

[0006] By implementing the embodiments of this disclosure, during the U2U relay discovery process, the terminal device sends a first request message to a first network element. This first request message requests the acquisition of first discovery security materials, which are used to protect the direct discovery set. Thus, the terminal device can acquire the first discovery security materials used to protect the direct discovery set, thereby ensuring communication security during the U2U relay discovery process.

[0007] Secondly, this disclosure provides another method for obtaining security materials, the method being executed by a first network element, including: receiving a first request message sent by a terminal device, wherein the first request message is used to request the acquisition of a first discovered security material, the first discovered security material being used to protect a direct discovery set.

[0008] Thirdly, embodiments of this disclosure provide a communication device that implements some or all of the functions of the terminal device described in the first aspect above. For example, the communication device may have the functions of some or all of the embodiments in this disclosure, or it may have the functions of any one embodiment in this disclosure implemented individually. The functions may be implemented by hardware or by hardware executing corresponding software. The hardware or software includes one or more units or modules corresponding to the above functions.

[0009] In one implementation, the communication device may include a transceiver module and a processing module, the processing module being configured to support the communication device in performing the corresponding functions described in the above method. The transceiver module supports communication between the communication device and other devices. The communication device may also include a storage module, coupled to the transceiver module and the processing module, which stores necessary computer programs and data for the communication device.

[0010] As an example, the processing module can be a processor, the transceiver module can be a transceiver or a communication interface, and the storage module can be a memory. In one implementation, the communication device includes: a transceiver module configured to send a first request message to a first network element, wherein the first request message is used to request the acquisition of a first discovery security material, and the first discovery security material is used to protect the direct discovery set.

[0011] Fourthly, embodiments of this disclosure provide another communication device that has some or all of the functions of the first network element in the method example described in the second aspect above. For example, the communication device may have the functions of some or all of the embodiments in this disclosure, or it may have the functions of any one embodiment in this disclosure implemented individually. The functions may be implemented by hardware or by hardware executing corresponding software. The hardware or software includes one or more units or modules corresponding to the above functions.

[0012] In one implementation, the communication device may include a transceiver module and a processing module, the processing module being configured to support the communication device in performing the corresponding functions described in the above method. The transceiver module is used to support communication between the communication device and other devices. The communication device may also include a storage module, which is coupled to the transceiver module and the processing module, and stores the necessary computer programs and data of the communication device.

[0013] As an example, the processing module can be a processor, the transceiver module can be a transceiver or a communication interface, and the storage module can be a memory. In one implementation, the communication device includes: a transceiver module configured to receive a first request message sent by a terminal device, wherein the first request message is used to request the acquisition of a first discovery security material, the first discovery security material being used to protect a direct discovery set.

[0014] Fifthly, embodiments of this disclosure provide a communication device including a processor that, when the processor invokes a computer program in memory, executes the method described in the first aspect.

[0015] In a sixth aspect, embodiments of this disclosure provide a communication device including a processor that, when the processor invokes a computer program in memory, executes the method described in the second aspect above.

[0016] In a seventh aspect, embodiments of this disclosure provide a communication device including a processor and a memory, the memory storing a computer program; the processor executes the computer program stored in the memory to cause the communication device to perform the method described in the first aspect above.

[0017] Eighthly, embodiments of this disclosure provide a communication device including a processor and a memory storing a computer program; the processor executes the computer program stored in the memory to cause the communication device to perform the method described in the second aspect above.

[0018] Ninthly, embodiments of this disclosure provide a communication device including a processor and an interface circuit. The interface circuit is configured to receive code instructions and transmit them to the processor, which is configured to execute the code instructions to cause the device to perform the method described in the first aspect above.

[0019] In a tenth aspect, embodiments of this disclosure provide a communication device including a processor and an interface circuit. The interface circuit is configured to receive code instructions and transmit them to the processor, which is configured to execute the code instructions to cause the device to perform the method described in the second aspect above.

[0020] Eleventhly, embodiments of this disclosure provide a sensing service processing system, which includes the communication device described in the third aspect and the communication device described in the fourth aspect, or the communication device described in the fifth aspect and the communication device described in the sixth aspect, or the communication device described in the seventh aspect and the communication device described in the eighth aspect, or the communication device described in the ninth aspect and the communication device described in the tenth aspect.

[0021] In a twelfth aspect, embodiments of this disclosure provide a computer-readable storage medium for storing instructions for use by the aforementioned terminal device, which, when executed, cause the terminal device to perform the method described in the first aspect.

[0022] In a thirteenth aspect, embodiments of this disclosure provide a readable storage medium for storing instructions for use by the first network element, which, when executed, cause the first network element to perform the method described in the second aspect.

[0023] In a fourteenth aspect, this disclosure also provides a computer program product including a computer program that, when run on a computer, causes the computer to perform the method described in the first aspect above.

[0024] In a fifteenth aspect, this disclosure also provides a computer program product including a computer program that, when run on a computer, causes the computer to perform the method described in the second aspect above.

[0025] In a sixteenth aspect, this disclosure provides a chip system including at least one processor and an interface for supporting a terminal device in implementing the functions involved in the first aspect, such as determining or processing at least one of the data and information involved in the above methods. In one possible design, the chip system further includes a memory for storing computer programs and data necessary for the terminal device. The chip system may be composed of chips or may include chips and other discrete devices.

[0026] In a seventeenth aspect, this disclosure provides a chip system including at least one processor and an interface for supporting a first network element in implementing the functions involved in the second aspect, such as determining or processing at least one of the data and information involved in the above methods. In one possible design, the chip system further includes a memory for storing computer programs and data necessary for the first network element. The chip system may be composed of chips or may include chips and other discrete devices.

[0027] In an eighteenth aspect, this disclosure provides a computer program that, when run on a computer, causes the computer to perform the method described in the first aspect above.

[0028] In a nineteenth aspect, this disclosure provides a computer program that, when run on a computer, causes the computer to perform the method described in the second aspect above. Attached Figure Description

[0029] To more clearly illustrate the technical solutions in the embodiments or background art of this disclosure, the accompanying drawings used in the embodiments or background art of this disclosure will be described below.

[0030] Figure 1 This is a schematic diagram of a network architecture for a U2U relay scenario provided in an embodiment of this disclosure;

[0031] Figure 2This is a schematic diagram of a network architecture provided in an embodiment of this disclosure;

[0032] Figure 3 This is a flowchart of a method for obtaining safe materials provided in an embodiment of this disclosure;

[0033] Figure 4 This is a flowchart of another method for obtaining safe materials provided in this disclosure embodiment;

[0034] Figure 5 This is a flowchart of another safe material acquisition method provided in the embodiments of this disclosure;

[0035] Figure 6 This is a flowchart of another safe material acquisition method provided in the embodiments of this disclosure;

[0036] Figure 7 This is a flowchart of another safe material acquisition method provided in the embodiments of this disclosure;

[0037] Figure 8 This is a flowchart of another safe material acquisition method provided in the embodiments of this disclosure;

[0038] Figure 9 This is a flowchart of another safe material acquisition method provided in the embodiments of this disclosure;

[0039] Figure 10 This is a flowchart of another safe material acquisition method provided in the embodiments of this disclosure;

[0040] Figure 11 This is a flowchart of another safe material acquisition method provided in the embodiments of this disclosure;

[0041] Figure 12 This is a flowchart of another safe material acquisition method provided in the embodiments of this disclosure;

[0042] Figure 13 This is a structural diagram of a communication device provided in an embodiment of this disclosure;

[0043] Figure 14 This is a structural diagram of another communication device provided in an embodiment of this disclosure;

[0044] Figure 15 This is a structural diagram of a chip provided in an embodiment of this disclosure. Detailed Implementation

[0045] To facilitate understanding of the technical solutions of this disclosure, some terms involved in the embodiments of this disclosure are briefly introduced below.

[0046] 1. Proximity Service (ProSe)

[0047] ProSe services are provided by the 3rd Generation Partnership Project (3GPP) system for terminal devices located close to each other. ProSe services can support various application scenarios such as public safety, the Internet of Things (IoT), and connected vehicles. ProSe technology mainly comprises two aspects: ProSe Discovery and ProSe Communication. ProSe Discovery refers to the process by which terminal devices can discover each other and complete pairing; ProSe Communication refers to the process by which terminal devices establish a secure communication channel for secure data communication.

[0048] In the Prose scenario, the source terminal device and the target terminal device can discover each other, complete pairing, establish a secure communication channel, and conduct secure data communication.

[0049] In Prose scenarios, when the source terminal device and the target terminal device cannot communicate directly, they can communicate through a terminal device with relay functionality (UE-to-UE relay, U2U relay). For example, the source terminal device sends its source terminal device identifier and / or target terminal device identifier to the relay terminal device. The relay terminal device can broadcast the source terminal device identifier and / or target terminal device identifier to locate the target terminal device. If the target terminal device agrees to communicate, it sends a response to the source terminal device through the relay terminal device.

[0050] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. Unless otherwise indicated, the same numerals in different drawings denote the same or similar elements in the following description relating to the drawings. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with this disclosure. Rather, they are merely examples of apparatuses and methods consistent with some aspects of this disclosure as detailed in the appended claims.

[0051] The terminology used in this disclosure is for the purpose of describing particular embodiments only and is not intended to be limiting of the disclosure. The singular forms “a,” “the,” and “the” as used in this disclosure and the appended claims are also intended to include the plural forms unless the context clearly indicates otherwise. It should also be understood that the term “and / or” as used herein refers to and includes any and all possible combinations of one or more of the associated listed items.

[0052] It should be understood that although the terms first, second, third, etc., may be used in this disclosure to describe various information, such information should not be limited to these terms. These terms are used only to distinguish information of the same type from one another. For example, without departing from the scope of this disclosure, first information may also be referred to as second information, and similarly, second information may also be referred to as first information. Depending on the context, for example, the word "if" as used herein may be interpreted as "when," "when," or "in response to determination."

[0053] It should be noted that the information (including but not limited to user equipment information, user personal information, terminal equipment information, etc.), data (including but not limited to data used for analysis, data stored, data displayed, etc.) and signals involved in this disclosure are all authorized by the user or fully authorized by all parties, and the collection, use and processing of related data must comply with the relevant laws, regulations and standards of the relevant countries and regions.

[0054] Please see Figure 1 , Figure 1 This is a schematic diagram of a network architecture for a U2U relay scenario provided in this disclosure. For example... Figure 1 As shown, the network architecture includes at least three terminal devices. It should be understood that the terminal devices in this embodiment may also be referred to as: user equipment (UE), mobile station (MS), mobile terminal (MT), access terminal, user unit, user station, mobile station, mobile station, remote station, remote terminal, mobile device, user terminal, terminal, wireless communication equipment, user agent, or user device, etc. This network architecture includes at least one source end UE, one U2U relay end UE, and one target end UE. The source end UE may also be referred to as the transmitting UE, and the target end UE may also be referred to as the receiving UE; this disclosure does not specifically limit these terms.

[0055] In U2U (UE to UE) relay communication, the source EndUE communicates with the Target EndUE through one or more U2U relay UEs. The source EndUE and the Target EndUE can exchange data and signaling through the U2U relay UE. This scenario can be used to improve sidelink (SL) coverage (e.g., due to poor coverage signal between the source EndUE and the Target EndUE or because they are outside the coverage area) or to enhance capacity (e.g., because the U2U relay UE is a highly capable device). Among them, the source EndUE, U2U relay UE, and Target EndUE can be in the radio resource control (RRC) connected state, RRC idle state, RRC inactive state, or out of coverage (OOC) state. The communication between the source EndUE and the U2U relay UE, as well as between the U2U relay UE and the Target EndUE, is SL unicast communication. In unicast communication mode, the two UEs need to establish a unicast connection first. After the unicast connection is established, the sending UE (Tx UE) can send unicast data to the receiving UE (Rx UE). Only the Rx UE can receive and parse the data. Figure 1 This is just a simplified illustration; other network devices may also be included in this relay scenario. Figure 1 It was not drawn in the middle.

[0056] To better understand the secure material acquisition method disclosed in this disclosure, the communication system to which this disclosure applies will be described first.

[0057] Please refer to Figure 2This is a schematic diagram of a network architecture used in an embodiment of this disclosure, such as a 5G network architecture. The 5G network includes (radio)access network (RAN) devices, UPF, AMF, SMF, authentication server function (AUSF), network slice selection function (NSSF), network exposure function (NEF), network exposure function repository function (NRF), policy control function (PCF), unified data management (UDM), unified data repository (UDR), application function (AF), or charging function (CHF), etc.

[0058] It should be noted that, Figure 2 These are merely examples of network elements or entities in a 5G network; the 5G network may also include network data analytics functions (NWDAF), etc. Figure 2 Unseen network elements or entities, and Figure 2 The names of network elements or entities in the example 5G network may remain unchanged or change in future communication systems (such as 6G communication systems), and this disclosure does not specifically limit this.

[0059] Among them, AMF is a control plane network element provided by the operator's network, which is responsible for access control and mobility management of terminal equipment accessing the operator's network, including functions such as mobility state management, allocation of temporary user identity identifiers, authentication and authorization of users.

[0060] The SMF (Service Control Module) is a control plane network element provided by the operator's network, responsible for managing the Protocol Data Unit (PDU) sessions of terminal equipment. A PDU session is a channel used to transmit PDUs; terminal equipment needs to exchange PDUs with the DN (Network Node) through PDU sessions. The SMF is responsible for establishing, maintaining, and deleting PDU sessions. The SMF includes session management (such as session establishment, modification, and release, including tunnel maintenance between the UPF and RAN), UPF selection and control, service and session continuity (SSC) mode selection, roaming, and other session-related functions.

[0061] UPF is a gateway provided by the operator, serving as the gateway for communication between the operator's network and the DN. UPF includes user plane-related functions such as packet routing and transmission, packet inspection, service usage reporting, quality of service (QoS) handling, lawful interception, uplink packet inspection, and downlink packet storage.

[0062] PCF is a control plane function provided by the operator, used to provide PDU session policies to SMF. These policies can include billing-related policies, QoS-related policies, and authorization-related policies, among others.

[0063] UDM is a control plane network element provided by the operator, responsible for storing information such as the subscriber permanent identifier (SUPI), security context, and subscription data of subscribed users in the operator's network.

[0064] AF is a functional network element that provides various service functions. It can interact with the core network through other network elements and can also interact with the policy management framework for policy management.

[0065] NEF is used to provide a framework, authentication and interface related to network capability openness, and to pass information between 5G system network functions and other network functions.

[0066] UDR is mainly used to store user-related contract data, policy data, structured data for public access, and application data.

[0067] In this network architecture, the N1 interface is the interface between the terminal equipment and the AMF. The N2 interface is the interface between the RAN and the AMF, used for sending non-access stratum (NAS) messages, etc. The N3 interface is the interface between the (R)AN and the UPF, used for transmitting user plane data, etc. The N4 interface is the interface between the SMF and the UPF, used for transmitting information such as tunnel identification information for N3 connections, data buffer indication information, downlink data notification messages, etc. The N6 interface is the interface between the UPF and the DN, used for transmitting user plane data, etc. In addition, control plane functions such as AUSF, AMF, SMF, NSSF, NEF, NRF, PCF, UDM, UDR, CHF, or AF interact using service-oriented interfaces. For example, AUSF provides the service interface Nausf; AMF provides Namf; SMF provides Nsmf; NSSF provides Nnssf; NEF provides Nnef; NRF provides Nnrf; PCF provides Npcf; UDM provides Nudm; UDR provides Nudr; CHF provides Nchf; and AF provides Naf. Descriptions of these interfaces can be found in relevant technical documentation and will not be elaborated upon here.

[0068] It should be noted that the terms described above may have different names in different fields or standards, and therefore should not be construed as limiting the embodiments of this disclosure. The functions involved in the embodiments of this disclosure may also be referred to as network elements, functional devices, entities, or functional entities. For example, a policy control function may also be referred to as a policy control function network element, policy control function device, policy control entity, or policy control function entity. Their names are not limited in this disclosure, and those skilled in the art can replace the names of the aforementioned functional devices with other names to perform the same function, all of which fall within the scope of protection of this disclosure. The aforementioned functional devices can be network elements in hardware devices, software functions running on dedicated hardware, or virtualized functions instantiated on a platform (e.g., a cloud platform).

[0069] It is understood that the communication system described in the embodiments of this disclosure is for the purpose of more clearly illustrating the technical solutions of the embodiments of this disclosure, and does not constitute a limitation on the technical solutions provided in the embodiments of this disclosure. As those skilled in the art will know, with the evolution of system architecture and the emergence of new business scenarios, the technical solutions provided in the embodiments of this disclosure are also applicable to similar technical problems.

[0070] In addition, the following points are provided to facilitate understanding of the embodiments disclosed herein.

[0071] First, in this embodiment of the disclosure, "for indicating" can include both direct and indirect indication. When describing information as indicating A, it can include whether the information directly indicates A or indirectly indicates A, but does not necessarily mean that the information carries A.

[0072] The information indicated by the information is called the information to be indicated. In the specific implementation process, there are many ways to indicate the information to be indicated, such as, but not limited to, directly indicating the information to be indicated, such as the information to be indicated itself or its index. It can also be indirectly indicated by indicating other information, where there is a relationship between the other information and the information to be indicated. It can also indicate only a part of the information to be indicated, while the other parts are known or pre-agreed upon. For example, the indication of specific information can be achieved by using a pre-agreed (e.g., protocol-defined) arrangement of various pieces of information, thereby reducing the indication overhead to some extent.

[0073] The information to be instructed can be sent as a whole or divided into multiple sub-information messages, and the sending period and / or timing of these sub-information messages can be the same or different. This disclosure does not limit the specific sending method. The sending period and / or timing of these sub-information messages can be predefined, for example, according to a protocol.

[0074] Second, this disclosure provides multiple implementation methods to clearly illustrate the technical solutions of this disclosure. Of course, those skilled in the art will understand that the multiple embodiments provided in this disclosure can be executed individually, or in combination with the methods of other embodiments in this disclosure, or individually or in combination with some methods in other related technologies; this disclosure does not limit these aspects.

[0075] The method and apparatus for obtaining safe materials provided in this disclosure will be described in detail below with reference to the accompanying drawings.

[0076] In related technologies, two sets of discovery security materials are used for the protection of U2U relay discovery messages, including discovery security materials for protecting the direct discovery set and discovery security materials for protecting U2U relay discovery messages. The discovery security materials for protecting the direct discovery set cannot directly reuse the acquisition methods used in the direct discovery process.

[0077] Based on this, this disclosure provides a method and apparatus for acquiring security materials. During the U2U relay discovery process, a terminal device can send a first request message to a first network element. The first request message requests the acquisition of first discovery security materials, which are used to protect the direct discovery set. Thus, the terminal device can acquire the first discovery security materials used to protect the direct discovery set during the U2U relay discovery process, thereby ensuring communication security during the U2U relay discovery process.

[0078] Please see Figure 3 , Figure 3 This is a schematic flowchart of a method for obtaining safe materials provided in an embodiment of this disclosure. Figure 3 As shown, the method is applied to the device-to-device U2U relay discovery process. The method is executed by the terminal device and may include, but is not limited to, the following steps:

[0079] S31: Send a first request message to the first network element, wherein the first request message is used to request the acquisition of the first discovery security material, and the first discovery security material is used to protect the direct discovery set.

[0080] In this embodiment of the disclosure, during the U2U relay discovery process, the terminal device may send a first request message to the first network element, wherein the first request message is used to request the acquisition of a first discovery security material, and the first discovery security material is used to protect the direct discovery set.

[0081] In some embodiments, the first network element may be at least one of the following: Direct Discovery Name Management Function (DDNMF), ProSeKey Management Function (PKMF), PCF, etc.

[0082] In this embodiment of the disclosure, the first discovery security material is used to protect the direct discovery set, and the first discovery security material may also be referred to as the direct discovery security material.

[0083] Understandably, the 5G ProSe U2U relay discovery message contains two sets of identifiers: the direct discovery set and the U2U relay discovery set. The direct discovery set in the identifiers contains a portion of the 5G ProSe direct discovery message content, which may include information about the source end UE and / or the target end UE.

[0084] In some embodiments, the first request message may be a Relay Discovery KeyRequest message, or it may be other key request messages, etc., and this disclosure does not impose specific limitations on this.

[0085] In some embodiments, the first request message includes ProSe identification information for identifying the first discovered safe material.

[0086] In this embodiment of the disclosure, the first request message may include ProSe identification information for determining the first discovered safe material. The ProSe identification information may be a ProSe identifier, or it may be other information that identifies the ProSe application, etc. This embodiment of the disclosure does not impose specific limitations on this.

[0087] In some embodiments, the terminal device receives a first response message sent by a first network element, wherein the first response message includes a first discovery of security material.

[0088] In this embodiment of the disclosure, during the U2U relay discovery process, the terminal device sends a first request message to a first network element. If the first request message requests the acquisition of first discovery security materials, the terminal device can receive a first response message from the first network element, the first response message including the first discovery security materials. Thus, the terminal device can acquire the first discovery security materials used to protect the direct discovery set, thereby ensuring communication security during the U2U relay discovery process.

[0089] In some embodiments, the first response message may be a Relay Discovery KeyResponse message, or it may be a Key Response message, etc., and this disclosure does not impose specific limitations on this.

[0090] In this embodiment of the present disclosure, the terminal device can send a first request message to the first network element, including ProSe identification information for determining the first discovery security material, to request the acquisition of the first discovery security material. Afterwards, it can receive a first response message sent by the first network element, including the first discovery security material. Thus, the terminal device can acquire the first discovery security material for protecting the direct discovery set, thereby ensuring the communication security of the U2U relay discovery process.

[0091] In some embodiments, the first request message is further used to request the acquisition of a second discovery security material, and the first response message further includes the second discovery security material, which is used to protect the U2U relay discovery message.

[0092] In this embodiment of the present disclosure, the terminal device may send a first request message to a first network element. The first request message is used to request the acquisition of a first discovered security material and also to request the acquisition of a second discovered security material. Thus, the terminal device receives a first response message sent by the first network element. The first response message includes the first discovered security material and may also include the second discovered security material.

[0093] In this embodiment of the disclosure, the second discovery security material is used to protect U2U relay discovery messages. The second discovery security material may also be referred to as U2U relay discovery security material.

[0094] In this embodiment of the present disclosure, the terminal device can send a first request message to the first network element to request the acquisition of first discovery security materials and second discovery security materials. Afterwards, it can receive a first response message sent by the first network element, which includes the first discovery security materials and the second discovery security materials. Thus, the terminal device can simultaneously acquire the first discovery security materials for protecting the direct discovery set and the second security materials for protecting the U2U relay discovery message, so as to ensure the communication security of the U2U relay discovery process.

[0095] In some embodiments, the first request message includes a Relay Service Code (RSC).

[0096] In this embodiment of the present disclosure, the terminal device can send a first request message to the first network element, including ProSe identification information for determining the first discovery security material and RSC, to request the acquisition of the first discovery security material and the second discovery security material. Afterwards, it can receive a first response message sent by the first network element, including the first discovery security material and the second discovery security material. Thus, the terminal device can simultaneously acquire the first discovery security material for protecting the direct discovery set and the second security material for protecting the U2U relay discovery message, so as to ensure the communication security of the U2U relay discovery process.

[0097] In some embodiments, the terminal device sends a second request message to the first network element, the second request message further being used to request the acquisition of second discovered security material; and receives a second response message sent by the first network element, wherein the second response message includes the second discovered security material.

[0098] In this embodiment of the present disclosure, the terminal device may send a second request message to the first network element. The second request message is also used to request the acquisition of the second discovered security material. Afterwards, the terminal device may receive a second response message sent by the first network element. The second response message includes the second discovered security material.

[0099] In this embodiment of the disclosure, the second discovery security material is used to protect U2U relay discovery messages. The second discovery security material may also be referred to as U2U relay discovery security material.

[0100] In this embodiment of the present disclosure, the terminal device can send a first request message to the first network element to request the acquisition of first discovery security materials, and can also send a second request message to the first network element to request the acquisition of second discovery security materials. Afterwards, it can receive a first response message including the first discovery security materials and a second response message including the second discovery security materials sent by the first network element. Thus, the terminal device can acquire the first discovery security materials for protecting the direct discovery set and the second security materials for protecting the U2U relay discovery message, so as to ensure the communication security of the U2U relay discovery process.

[0101] In some embodiments, the second request message includes an RSC.

[0102] In this embodiment of the present disclosure, the terminal device can send a first request message to the first network element, including ProSe identification information for determining the first discovery security material, to request the acquisition of the first discovery security material. It can also send a second request message including RSC to the first network element to request the acquisition of the second discovery security material. Afterwards, it can receive a first response message including the first discovery security material and a second response message including the second discovery security material sent by the first network element. Thus, the terminal device can acquire the first discovery security material for protecting the direct discovery set and the second security material for protecting the U2U relay discovery message, so as to ensure the communication security of the U2U relay discovery process.

[0103] In some embodiments, the first request message further includes a first security capability, wherein the terminal device receives a first security algorithm and / or a second security algorithm sent by a first network element.

[0104] In this embodiment of the present disclosure, the first request message sent by the terminal device to the first network element may further include the first security capability of the terminal device. In this case, the terminal device may receive the first security algorithm and / or the second security algorithm sent by the first network element.

[0105] The first network element receives a first request message from the terminal device that includes a first security capability. Based on the first security capability, it can determine the selected first security algorithm and / or second security algorithm. Furthermore, the first network element can send the determined first security algorithm and / or second security algorithm to the terminal device.

[0106] In some embodiments, when the first request message is used to request the acquisition of the first discovered security material, if the first request message includes a first security capability, the terminal device can receive a first security algorithm sent by the first network element, wherein the first security algorithm is related to the first discovered security material.

[0107] In some embodiments, when the first request message is used to request the acquisition of second discovery security, if the first request message includes a first security capability, the terminal device can receive a second security algorithm sent by the first network element, wherein the second security algorithm is related to the second discovery security material.

[0108] In some embodiments, when the first request message is used to request the acquisition of the first discovered security material and the second discovered security material, if the first request message includes a first security capability, the terminal device can receive the first security algorithm and the second security algorithm sent by the first network element, wherein the first security algorithm is related to the first discovered security material and the second security algorithm is related to the second discovered security material.

[0109] In some embodiments, the terminal device receives a first security algorithm and / or a second security algorithm sent by a first network element, and may receive a first response message sent by the first network element, wherein the first response message includes the first security algorithm and / or the second security algorithm.

[0110] In some embodiments, the second request message further includes a second security capability, wherein the terminal device receives a second security algorithm sent by the first network element.

[0111] In this embodiment of the present disclosure, the second request message sent by the terminal device to the first network element may further include the second security capability of the terminal device. In this case, the terminal device may receive the second security algorithm sent by the first network element.

[0112] The first network element receives a second request message from the terminal device that includes a second security capability. Based on the second security capability, it can determine the selected second security algorithm. Furthermore, the first network element can send the determined second security algorithm to the terminal device.

[0113] In some embodiments, when a terminal device sends a first request message to a first network element requesting to obtain first discovered security material, if the first request message includes a first security capability, the terminal device can receive a first security algorithm sent by the first network element, the first security algorithm being related to the first discovered security material. In this case, if the terminal device sends a second request message to the first network element requesting to obtain second discovered security material, and if the second request message includes a second security capability, the terminal device can receive a second security algorithm sent by the first network element, the second security algorithm being related to the second discovered security material.

[0114] In some embodiments, the terminal device receives a second security algorithm sent by a first network element, and may also receive a second response message sent by the first network element, the second response message including the second security algorithm.

[0115] In some embodiments, the first security capability may be the same as or different from the second security capability.

[0116] In some embodiments, the first security algorithm may be the same as or different from the second security algorithm.

[0117] In some embodiments, the terminal device stores at least one of the following information:

[0118] First discovered safe material;

[0119] ProSe identification information;

[0120] The second discovery was of a safe material;

[0121] RSC;

[0122] First-level security algorithm;

[0123] Second security algorithm.

[0124] In this embodiment of the disclosure, when the terminal device obtains at least one of the following: first discovered secure material, ProSe identification information, second discovered secure material, RSC, first security algorithm, and second security algorithm, it can store at least one of the following: first discovered secure material, ProSe identification information, second discovered secure material, RSC, first security algorithm, and second security algorithm.

[0125] For example, the terminal device sends a first request message to the first network element, including ProSe identification information for determining the first discovered security material, and receives a first response message sent by the first network element. If the first response message includes the first discovered security material, the terminal device can store the ProSe identification information and the first discovered security material together.

[0126] For example, if the terminal device sends a first request message to the first network element, including ProSe identification information and RSC for determining the first discovered security material, and receives a first response message sent by the first network element, and the first response message includes the first discovered security material and the second discovered security material, the terminal device can store the ProSe identification information, RSC, the first discovered security material and the second discovered security material together.

[0127] For example, if a terminal device sends a first request message to a first network element, including ProSe identification information, RSC, and a first security capability for determining a first discovered security material, and receives a first response message from the first network element, wherein the first response message includes the first discovered security material, the second discovered security material, and the first security algorithm, the terminal device may store the ProSe identification information, RSC, the first discovered security material, the second discovered security material, and the first security algorithm together.

[0128] It should be noted that the above examples are for illustrative purposes only and are not intended to limit the specific embodiments of this disclosure. The terminal device may obtain the second discovered security material in other ways. Furthermore, the above examples are not exhaustive and are only partial examples; the terminal device may also obtain a second security algorithm, as described above.

[0129] In some embodiments, the first request message may also include a list of public landmobile networks (PLMNs).

[0130] In this embodiment of the disclosure, the first request message may further include a PLMN list, wherein the PLMN list can be used by the first network element to determine the third network element in order to obtain the first discovered security material from the third network element.

[0131] In this implementation or embodiment, unless there is a contradiction, each step can be independent, arbitrarily combined or exchanged in order, the optional methods or examples can be arbitrarily combined, and can be arbitrarily combined with other implementations or embodiments.

[0132] By implementing the embodiments of this disclosure, during the U2U relay discovery process, the terminal device sends a first request message to a first network element. This first request message requests the acquisition of first discovery security materials, which are used to protect the direct discovery set. Thus, the terminal device can acquire the first discovery security materials used to protect the direct discovery set, thereby ensuring communication security during the U2U relay discovery process.

[0133] Please see Figure 4 , Figure 4 This is a schematic flowchart of another method for obtaining safe materials provided in this disclosure. Figure 4 As shown, the method is applied to the device-to-device U2U relay discovery process. The method is executed by the terminal device and may include, but is not limited to, the following steps:

[0134] S41: Send a first request message to the first network element, wherein the first request message is used to request the acquisition of the first discovery security material, the first discovery security material is used to protect the direct discovery set, and the first request message is also used to request the acquisition of the second discovery security material.

[0135] S42: Receive a first response message sent by the first network element, wherein the first response message includes a first discovery security material and a second discovery security material, the second discovery security material being used to protect the U2U relay discovery message.

[0136] In this embodiment of the present disclosure, the terminal device may send a first request message to a first network element. The first request message is used to request the acquisition of a first discovered security material and also to request the acquisition of a second discovered security material. Thus, the terminal device receives a first response message sent by the first network element. The first response message includes the first discovered security material and may also include the second discovered security material.

[0137] In this embodiment of the disclosure, the second discovery security material is used to protect U2U relay discovery messages. The second discovery security material may also be referred to as U2U relay discovery security material.

[0138] In this embodiment of the present disclosure, the terminal device can send a first request message to the first network element to request the acquisition of first discovery security materials and second discovery security materials. Afterwards, it can receive a first response message sent by the first network element, which includes the first discovery security materials and the second discovery security materials. Thus, the terminal device can simultaneously acquire the first discovery security materials for protecting the direct discovery set and the second security materials for protecting the U2U relay discovery message, so as to ensure the communication security of the U2U relay discovery process.

[0139] In some embodiments, the first request message includes ProSe identification information for identifying the first discovered safe material.

[0140] In some embodiments, the first request message includes a Relay Service Code (RSC).

[0141] In this embodiment of the present disclosure, the terminal device can send a first request message to the first network element, including ProSe identification information for determining the first discovery security material and RSC, to request the acquisition of the first discovery security material and the second discovery security material. Afterwards, it can receive a first response message sent by the first network element, including the first discovery security material and the second discovery security material. Thus, the terminal device can simultaneously acquire the first discovery security material for protecting the direct discovery set and the second security material for protecting the U2U relay discovery message, so as to ensure the communication security of the U2U relay discovery process.

[0142] It should be noted that the relevant descriptions of the first network element, the first request message, the first discovered security material, and the first response message can be found in the relevant descriptions in some of the above embodiments, and will not be repeated here.

[0143] In some embodiments, after receiving a first response message sent by a first network element and obtaining the first discovered security material and the second discovered security material, the terminal device can store the first discovered security material, the second discovered security material, RSC and ProSe identification information together.

[0144] In this implementation or embodiment, unless there is a contradiction, each step can be independent, arbitrarily combined or exchanged in order, the optional methods or examples can be arbitrarily combined, and can be arbitrarily combined with other implementations or embodiments.

[0145] It should be noted that in the embodiments of this disclosure, S41 to S42 can be implemented individually or in combination with any other step in the embodiments of this disclosure, such as in combination with S31 in the embodiments of this disclosure. The embodiments of this disclosure do not limit this.

[0146] By implementing the embodiments of this disclosure, during the U2U relay discovery process, the terminal device sends a first request message to a first network element, wherein the first request message is used to request the acquisition of first discovery security materials, and the first request message is also used to request the acquisition of second discovery security materials; and receives a first response message sent by the first network element, wherein the first response message includes the first discovery security materials, and the first response message also includes the second discovery security materials. The first discovery security materials are used to protect the direct discovery set, and the second discovery security materials are used to protect the U2U relay discovery message. Thus, the terminal device can simultaneously acquire the first discovery security materials used to protect the direct discovery set and the second discovery security materials used to protect the U2U relay discovery message, thereby ensuring communication security during the U2U relay discovery process.

[0147] Please see Figure 5 , Figure 5 This is a schematic flowchart of another method for obtaining safe materials provided in this disclosure. Figure 5 As shown, the method is applied to the U2U relay discovery process. The method is executed by the terminal device and may include, but is not limited to, the following steps:

[0148] S51: Send a first request message to the first network element, wherein the first request message is used to request the acquisition of the first discovery security material, and the first discovery security material is used to protect the direct discovery set.

[0149] S52: Receive a first response message sent by a first network element, wherein the first response message includes the first discovery of security material.

[0150] The relevant descriptions of S51 and S52 can be found in the relevant descriptions in the above embodiments, and will not be repeated here.

[0151] S53: Send a second request message to the first network element. The second request message is also used to request the acquisition of the second discovered security material.

[0152] S54: Receive a second response message sent by the first network element, wherein the second response message includes second discovered security material.

[0153] In this embodiment of the present disclosure, the terminal device may send a second request message to the first network element. The second request message is also used to request the acquisition of the second discovered security material. Afterwards, the terminal device may receive a second response message sent by the first network element. The second response message includes the second discovered security material.

[0154] In this embodiment of the disclosure, the second discovery security material is used to protect U2U relay discovery messages. The second discovery security material may also be referred to as U2U relay discovery security material.

[0155] In this embodiment of the present disclosure, the terminal device can send a first request message to the first network element to request the acquisition of first discovery security materials, and can also send a second request message to the first network element to request the acquisition of second discovery security materials. Afterwards, it can receive a first response message including the first discovery security materials and a second response message including the second discovery security materials sent by the first network element. Thus, the terminal device can acquire the first discovery security materials for protecting the direct discovery set and the second security materials for protecting the U2U relay discovery message, so as to ensure the communication security of the U2U relay discovery process.

[0156] In some embodiments, the first request message includes ProSe identification information for identifying the first discovered safe material.

[0157] In some embodiments, the second request message includes an RSC.

[0158] In this embodiment of the present disclosure, the terminal device can send a first request message to the first network element, including ProSe identification information for determining the first discovery security material, to request the acquisition of the first discovery security material. It can also send a second request message including RSC to the first network element to request the acquisition of the second discovery security material. Afterwards, it can receive a first response message including the first discovery security material and a second response message including the second discovery security material sent by the first network element. Thus, the terminal device can acquire the first discovery security material for protecting the direct discovery set and the second security material for protecting the U2U relay discovery message, so as to ensure the communication security of the U2U relay discovery process.

[0159] It should be noted that the execution order of S51 to S54 can also be that S53 and S54 are executed first, and S51 and S52 are executed later. This embodiment does not impose specific restrictions on this.

[0160] It should be noted that the relevant descriptions of the first network element, the first request message, the first discovered security material, and the first response message can be found in the relevant descriptions in some of the above embodiments, and will not be repeated here.

[0161] In some embodiments, after receiving the first response message and the second response message sent by the first network element, and obtaining the first discovered security material and the second discovered security material, the terminal device can store the first discovered security material, the second discovered security material, RSC and ProSe identification information together.

[0162] In this implementation or embodiment, unless there is a contradiction, each step can be independent, arbitrarily combined or exchanged in order, the optional methods or examples can be arbitrarily combined, and can be arbitrarily combined with other implementations or embodiments.

[0163] It should be noted that in the embodiments of this disclosure, S51 to S54 can be implemented individually or in combination with any other step in the embodiments of this disclosure, such as in combination with S31 in the embodiments of this disclosure. The embodiments of this disclosure do not limit this.

[0164] By implementing the embodiments of this disclosure, during the U2U relay discovery process, the terminal device sends a first request message to a first network element, wherein the first request message is used to request the acquisition of first discovery security materials, which are used to protect the direct discovery set; receives a first response message sent by the first network element, wherein the first response message includes the first discovery security materials; sends a second request message to the first network element, wherein the second request message is also used to request the acquisition of second discovery security materials; and receives a second response message sent by the first network element, wherein the second response message includes the second discovery security materials. Thus, the terminal device can acquire the first discovery security materials used to protect the direct discovery set and the second discovery security materials used to protect the U2U relay discovery message, thereby ensuring communication security during the U2U relay discovery process.

[0165] Please see Figure 6 , Figure 6 This is a schematic flowchart of another method for obtaining safe materials provided in this disclosure. Figure 6 As shown, the method is applied to the U2U relay discovery process. The method is executed by the first network element and may include, but is not limited to, the following steps:

[0166] S61: Receive a first request message sent by the terminal device, wherein the first request message is used to request the acquisition of a first discovery security material, and the first discovery security material is used to protect the direct discovery set.

[0167] In this embodiment of the disclosure, the first network element can receive a first request message sent by the terminal device. The first request message is used to request the acquisition of a first discovery security material, which is used to protect the direct discovery set.

[0168] In some embodiments, the first network element may be at least one of the following: Direct Discovery Name Management Function (DDNMF), ProSeKey Management Function (PKMF), PCF, etc.

[0169] In this embodiment of the disclosure, the first discovery security material is used to protect the direct discovery set, and the first discovery security material may also be referred to as the direct discovery security material.

[0170] Understandably, the 5G ProSe U2U relay discovery message contains two sets of identifiers: the direct discovery set and the U2U relay discovery set. The direct discovery set in the identifiers contains a portion of the 5G ProSe direct discovery message content, which may include information about the source end UE and / or the target end UE.

[0171] In some embodiments, the first request message may be a Relay Discovery KeyRequest message, or it may be other key request messages, etc., and this disclosure does not impose specific limitations on this.

[0172] In some embodiments, the first network element sends a first response message to the terminal device, wherein the first response message includes a first discovery of security material.

[0173] In this embodiment of the disclosure, during the U2U relay discovery process, the first network element can receive a first request message sent by the terminal device. If the first request message requests the acquisition of first discovery security materials, the first network element can send a first response message to the terminal device, the first response message including the first discovery security materials. Therefore, the terminal device can be configured with first discovery security materials to protect the direct discovery set, thereby ensuring communication security during the U2U relay discovery process.

[0174] In some embodiments, the first response message may be a Relay Discovery KeyResponse message, or it may be a Key Response message, etc., and this disclosure does not impose specific limitations on this.

[0175] In this embodiment of the disclosure, during the U2U relay discovery process, the first network element can receive a first request message sent by the terminal device, which includes ProSe identification information for determining the first discovery security material. After that, the first network element can send a first response message to the terminal device, which includes the first discovery security material. Thus, the terminal device can be configured with the first discovery security material for protecting the direct discovery set, so as to ensure the communication security of the U2U relay discovery process.

[0176] In some embodiments, the first network element sends a first response message to the terminal device, wherein the first network element determines that the terminal device is authorized to perform a U2U relay discovery process related to ProSe identification information.

[0177] In this embodiment of the disclosure, when the first network element determines that the terminal device is authorized to perform a U2U relay discovery process related to ProSe identification information, it may send a first response message to the terminal device.

[0178] In some embodiments, if the first network element determines that the terminal device is not authorized to perform the U2U relay discovery process related to the ProSe identification information, it may send other response messages to the terminal device. The other response messages are used to indicate that the terminal device is not authorized to perform the U2U relay discovery process related to the ProSe identification information, or they may be used to indicate that the terminal device is refused to perform the U2U relay discovery process related to the ProSe identification information, or they may indicate that the terminal device failed to perform the U2U relay discovery process related to the ProSe identification information, etc.

[0179] In other embodiments, if the first network element determines that the terminal device is not authorized to perform the U2U relay discovery process related to ProSe identification information, it may cancel sending the first response message to the terminal device.

[0180] In some embodiments, the first network element sends an authorization request message to the second network element, wherein the authorization request message is used to request whether the terminal device is authorized to perform a U2U relay discovery process related to ProSe identification information; receives an authorization response message sent by the second network element, wherein the authorization response message is used to indicate that the terminal device is authorized to perform a U2U relay discovery process; and determines that the terminal device is authorized to perform a U2U relay discovery process based on the authorization response message.

[0181] In this embodiment of the present disclosure, the first network element can send an authorization request message to the second network element. The authorization request message is used to request whether the terminal device is authorized to perform the U2U relay discovery process related to the ProSe identification information. After that, the terminal device can receive an authorization response message sent by the second network element. The authorization response message can be used to indicate whether the terminal device is authorized to perform the U2U relay discovery process.

[0182] In some embodiments, when the authorization response message is used to indicate that the terminal device is authorized to perform the U2U relay discovery process, the first network element can determine that the terminal device is authorized to perform the U2U relay discovery process based on the authorization response message.

[0183] In this embodiment of the disclosure, the second network element can be a proximity service application server, or it can also be a UDM.

[0184] In some embodiments, the first request message includes ProSe identification information for identifying the first discovered safe material.

[0185] In this embodiment of the disclosure, the first request message may include ProSe identification information for determining the first discovered safe material. The ProSe identification information may be a ProSe identifier, or it may be other information that identifies the ProSe application, etc. This embodiment of the disclosure does not impose specific limitations on this.

[0186] In some embodiments, the first request message is further used to request the acquisition of a second discovery security material, and the first response message further includes the second discovery security material, which is used to protect the U2U relay discovery message.

[0187] In this embodiment of the present disclosure, the first network element can receive a first request message sent by the terminal device. The first request message is used to request the acquisition of a first discovered security material and also to request the acquisition of a second discovered security material. Thus, the first network element sends a first response message to the terminal device. The first response message includes the first discovered security material and may also include the second discovered security material.

[0188] In this embodiment of the disclosure, the second discovery security material is used to protect U2U relay discovery messages. The second discovery security material may also be referred to as U2U relay discovery security material.

[0189] In this embodiment of the present disclosure, the first network element can receive a first request message sent by the terminal device, requesting to obtain the first discovery security material and the second discovery security material. Then, the first network element can send a first response message to the terminal device, including the first discovery security material and the second discovery security material. Thus, the terminal device can be configured with the first discovery security material for protecting the direct discovery set and the second security material for protecting the U2U relay discovery message at the same time, so as to ensure the communication security of the U2U relay discovery process.

[0190] In some embodiments, the first request message includes a Relay Service Code (RSC).

[0191] In this embodiment of the present disclosure, the first network element can receive a first request message sent by the terminal device, which includes ProSe identification information for determining the first discovery security material and RSC. Then, the first network element can send a first response message to the terminal device, which includes the first discovery security material and the second discovery security material. Thus, the terminal device can be configured with the first discovery security material for protecting the direct discovery set and the second security material for protecting the U2U relay discovery message at the same time, so as to ensure the communication security of the U2U relay discovery process.

[0192] In some embodiments, the first network element receives a second request message sent by the terminal device, the second request message being further configured to request the acquisition of second discovered security material; and sends a second response message to the terminal device, wherein the second response message includes the second discovered security material.

[0193] In this embodiment of the present disclosure, the first network element can receive a second request message sent by the terminal device. The second request message is also used to request the acquisition of the second discovered security material. Afterwards, the first network element can send a second response message to the terminal device. The second response message includes the second discovered security material.

[0194] In this embodiment of the disclosure, the second discovery security material is used to protect U2U relay discovery messages. The second discovery security material may also be referred to as U2U relay discovery security material.

[0195] In this embodiment of the present disclosure, the first network element can receive a first request message sent by the terminal device, and can also receive a second request message sent by the terminal device. Then, the first network element can send a first response message including a first discovery security material and a second response message including a second discovery security material to the terminal device. Thus, the terminal device can be configured with a first discovery security material for protecting the direct discovery set and a second security material for protecting the U2U relay discovery message, so as to ensure the communication security of the U2U relay discovery process.

[0196] In some embodiments, the second request message includes an RSC.

[0197] In this embodiment of the present disclosure, the first network element can receive a first request message sent by the terminal device, which includes ProSe identification information for determining the first discovery security material, and can also receive a second request message sent by the terminal device, which includes RSC. Then, the first network element can send a first response message including the first discovery security material and a second response message including the second discovery security material to the terminal device. Thus, the terminal device can be configured with the first discovery security material for protecting the direct discovery set and the second security material for protecting the U2U relay discovery message, so as to ensure the communication security of the U2U relay discovery process.

[0198] In some embodiments, the first network element sends a third request message to the second network element or the third network element, wherein the third request message is used to request the acquisition of the first discovered security material; and receives a third response message sent by the second network element or the third network element, wherein the third response message includes the first discovered security material.

[0199] In this embodiment of the disclosure, the first network element can send a third request message to the second network element, the third request message being used to request the acquisition of the first discovered security material. Subsequently, the first network element can receive a third response message sent by the second network element, the third response message including the first discovered security material. Thus, the first network element can acquire the first discovered security material from the second network element.

[0200] In this embodiment of the disclosure, the first network element can send a third request message to the third network element, the third request message being used to request the acquisition of the first discovered security material. Subsequently, the first network element can receive a third response message sent by the third network element, the third response message including the first discovered security material. Thus, the first network element can acquire the first discovered security material from the third network element.

[0201] In this embodiment of the disclosure, the second network element can be a proximity service application server, or it can also be a UDM.

[0202] In this embodiment of the disclosure, the third network element can be at least one of the following: DDNMF of other terminal devices, PKMF of other terminal devices, PCF of other terminal devices, etc.

[0203] In some embodiments, the third request message includes ProSe identification information for determining the first discovered safe material.

[0204] In this embodiment of the disclosure, the third request message sent by the first network element to the second or third network element may include ProSe identification information for determining the first discovered secure material. Therefore, the second or third network element can determine the first discovered secure material based on the ProSe identification information.

[0205] In some embodiments, the first request message further includes a first security capability, wherein the first network element determines a selected first security algorithm and / or a second security algorithm based on the first security capability; and sends the determined first security algorithm and / or second security algorithm to the terminal device.

[0206] In this embodiment of the present disclosure, when a first network element receives a first request message sent by a terminal device, and the first request message includes a first security capability, the first network element can determine the selected first security algorithm and / or second security algorithm based on the first security capability, and send the determined first security algorithm and / or second security algorithm to the terminal device.

[0207] In some embodiments, when the first request message is used to request the acquisition of the first discovered security material, if the first request message includes a first security capability, the first network element may send a first security algorithm to the terminal device, wherein the first security algorithm is related to the first discovered security material.

[0208] In some embodiments, when the first request message is used to request the acquisition of second discovered security, if the first request message includes a first security capability, the first network element may send a second security algorithm to the terminal device, wherein the second security algorithm is related to the second discovered security material.

[0209] In some embodiments, when the first request message is used to request the acquisition of the first discovered security material and the second discovered security material, if the first request message includes the first security capability, the first network element can send the first security algorithm and the second security algorithm to the terminal device, wherein the first security algorithm is related to the first discovered security material and the second security algorithm is related to the second discovered security material.

[0210] In some embodiments, the first network element may send a first security algorithm and / or a second security algorithm to the terminal device, and may send a first response message to the terminal device, the first response message including the first security algorithm and / or the second security algorithm.

[0211] In some embodiments, the first network element determines the selected first security algorithm and / or second security algorithm based on the first security capability, including: sending a fourth request message to a second network element or a third network element, wherein the fourth request message is used to request the acquisition of the first security algorithm and / or second security algorithm based on the first security capability; and receiving a fourth response message sent by the second network element or the third network element, wherein the fourth response message includes the determined first security algorithm and / or second security algorithm.

[0212] In this embodiment of the disclosure, the first network element can send a fourth request message to the second or third network element to request the acquisition of a first security algorithm and / or a second security algorithm based on a first security capability. The first network element can then receive a fourth response message from the second or third network element, the fourth response message including the first and / or second security algorithms. Thus, the first network element can determine the selected first and / or second security algorithms.

[0213] In this embodiment of the disclosure, the second network element can be a proximity service application server, or it can also be a UDM.

[0214] In this embodiment of the disclosure, the third network element can be at least one of the following: DDNMF of other terminal devices, PKMF of other terminal devices, PCF of other terminal devices, etc.

[0215] In some embodiments, the fourth request message includes a first security capability and ProSe identification information.

[0216] In this embodiment of the disclosure, the fourth request message may include a first security capability and ProSe identification information.

[0217] In some embodiments, the second request message further includes a second security capability, and the first network element determines the selected second security algorithm based on the second security capability; and sends the determined second security algorithm to the terminal device.

[0218] In this embodiment of the present disclosure, when a first network element receives a first request message sent by a terminal device, and the first request message includes a second security capability, the first network element can determine the selected second security algorithm based on the second security capability and send the determined second security algorithm to the terminal device.

[0219] In some embodiments, when a first network element receives a first request message from a terminal device requesting to obtain first discovered security material, if the first request message includes a first security capability, the first network element may send a first security algorithm to the terminal device, the first security algorithm being related to the first discovered security material. In this case, if the first network element receives a second request message from the terminal device requesting to obtain second discovered security material, and if the second request message includes a second security capability, the first network element may send a second security algorithm to the terminal device, the second security algorithm being related to the second discovered security material.

[0220] In some embodiments, the first network element determines the third network element based on the PLMN list.

[0221] In this embodiment of the disclosure, the first network element can determine the third network element based on the PLMN list.

[0222] The first network element can determine the PLMN list based on the agreement between operators, or it can determine the PLMN list based on pre-configured information.

[0223] In some embodiments, the first request message may also include a list of PLMNs.

[0224] In this embodiment of the present disclosure, the first network element receives a first request message sent by the terminal device. The first request message includes a PLMN. Thus, the first network element can obtain a list of PLMNs from the terminal device to determine the third network element.

[0225] In this implementation or embodiment, unless there is a contradiction, each step can be independent, arbitrarily combined or exchanged in order, the optional methods or examples can be arbitrarily combined, and can be arbitrarily combined with other implementations or embodiments.

[0226] By implementing the embodiments of this disclosure, a first network element receives a first request message sent by a terminal device, wherein the first request message is used to request the acquisition of first discovery security material, and the first discovery security material is used to protect the direct discovery set. Therefore, the terminal device can be configured with first discovery security material to protect the direct discovery set, thereby ensuring communication security during the U2U relay discovery process.

[0227] Please see Figure 7 , Figure 7 This is a schematic flowchart of another method for obtaining safe materials provided in this disclosure. Figure 7 As shown, the method is applied to the U2U relay discovery process. The method is executed by the first network element and may include, but is not limited to, the following steps:

[0228] S71: Receive a first request message sent by the terminal device, wherein the first request message is used to request the acquisition of a first discovery security material, and the first discovery security material is used to protect the direct discovery set.

[0229] The relevant description of S71 can be found in the relevant descriptions of some of the embodiments above, and will not be repeated here.

[0230] S72: Send an authorization request message to the second network element, wherein the authorization request message is used to request whether the terminal device is authorized to perform the U2U relay discovery process related to the ProSe identification information.

[0231] S73: Receive the authorization response message sent by the second network element, wherein the authorization response message is used to indicate that the terminal device is authorized to perform the U2U relay discovery process.

[0232] S74: If, based on the authorization response message, it is determined that the terminal device is authorized to perform the U2U relay discovery process, a first response message is sent to the terminal device, wherein the first response message includes first discovery security material.

[0233] In this embodiment of the present disclosure, the first network element can send an authorization request message to the second network element. The authorization request message is used to request whether the terminal device is authorized to perform a U2U relay discovery process related to ProSe identification information. Afterwards, the first network element can receive an authorization response message sent by the second network element. If the authorization response message is used to indicate that the terminal device is authorized to perform a U2U relay discovery process, the first network element can determine that the terminal device is authorized to perform a U2U relay discovery process based on the authorization response message. Based on this, the first network element can determine to send a first response message to the terminal device. The first response message includes the first discovery security material.

[0234] In this embodiment of the disclosure, the second network element can be a proximity service application server, or it can also be a UDM.

[0235] In some embodiments, the first request message includes ProSe identification information for identifying the first discovered safe material.

[0236] In this embodiment of the disclosure, the first request message may include ProSe identification information for determining the first discovered safe material, wherein the ProSe identification information may be a ProSe identifier.

[0237] It should be noted that the relevant descriptions of the first network element, the first request message, the first discovered security material, and the first response message can be found in the relevant descriptions in some of the above embodiments, and will not be repeated here.

[0238] In this implementation or embodiment, unless there is a contradiction, each step can be independent, arbitrarily combined or exchanged in order, the optional methods or examples can be arbitrarily combined, and can be arbitrarily combined with other implementations or embodiments.

[0239] It should be noted that in the embodiments of this disclosure, S71 to S74 can be implemented individually or in combination with any other step in the embodiments of this disclosure, such as in combination with S61 in the embodiments of this disclosure. The embodiments of this disclosure do not limit this.

[0240] By implementing the embodiments of this disclosure, a first network element receives a first request message sent by a terminal device, wherein the first request message is used to request the acquisition of first discovery security material, which is used to protect the direct discovery set; sends an authorization request message to a second network element, wherein the authorization request message is used to request determination of whether the terminal device is authorized to perform a U2U relay discovery process related to ProSe identification information; receives an authorization response message sent by the second network element, wherein the authorization response message is used to indicate that the terminal device is authorized to perform the U2U relay discovery process; and, if it is determined from the authorization response message that the terminal device is authorized to perform the U2U relay discovery process, sends a first response message to the terminal device, wherein the first response message includes the first discovery security material. Therefore, the terminal device can be configured with the first discovery security material for protecting the direct discovery set to ensure communication security during the U2U relay discovery process.

[0241] Please see Figure 8 , Figure 8 This is a schematic flowchart of another method for obtaining safe materials provided in this disclosure. Figure 8 As shown, the method is applied to the U2U relay discovery process. The method is executed by the first network element and may include, but is not limited to, the following steps:

[0242] S81: Receive a first request message sent by the terminal device, wherein the first request message is used to request the acquisition of a first discovery security material, the first discovery security material is used to protect the direct discovery set, and the first request message is also used to request the acquisition of a second discovery security material.

[0243] S82: Send a first response message to the terminal device, wherein the first response message includes a first discovery of security material and a second discovery of security material.

[0244] In this embodiment of the present disclosure, the first network element can receive a first request message sent by the terminal device. The first request message is used to request the acquisition of a first discovered security material and also to request the acquisition of a second discovered security material. Thus, the first network element sends a first response message to the terminal device. The first response message includes the first discovered security material and may also include the second discovered security material.

[0245] In this embodiment of the disclosure, the second discovery security material is used to protect U2U relay discovery messages. The second discovery security material may also be referred to as U2U relay discovery security material.

[0246] In this embodiment of the present disclosure, the first network element can receive a first request message sent by the terminal device, requesting to obtain the first discovery security material and the second discovery security material. Then, the first network element can send a first response message to the terminal device, including the first discovery security material and the second discovery security material. Thus, the terminal device can be configured with the first discovery security material for protecting the direct discovery set and the second security material for protecting the U2U relay discovery message at the same time, so as to ensure the communication security of the U2U relay discovery process.

[0247] In some embodiments, the first request message includes ProSe identification information for identifying the first discovered safe material.

[0248] In some embodiments, the first request message includes a Relay Service Code (RSC).

[0249] In this embodiment of the present disclosure, the first network element can receive a first request message sent by the terminal device, which includes ProSe identification information for determining the first discovery security material and RSC. Then, the first network element can send a first response message to the terminal device, which includes the first discovery security material and the second discovery security material. Thus, the terminal device can be configured with the first discovery security material for protecting the direct discovery set and the second security material for protecting the U2U relay discovery message at the same time, so as to ensure the communication security of the U2U relay discovery process.

[0250] It should be noted that the relevant descriptions of the first network element, the first request message, the first discovered security material, and the first response message can be found in the relevant descriptions in some of the above embodiments, and will not be repeated here.

[0251] In this implementation or embodiment, unless there is a contradiction, each step can be independent, arbitrarily combined or exchanged in order, the optional methods or examples can be arbitrarily combined, and can be arbitrarily combined with other implementations or embodiments.

[0252] It should be noted that in the embodiments of this disclosure, S81 to S82 can be implemented individually or in combination with any other step in the embodiments of this disclosure, such as in combination with S61 and / or S71 to S74 in the embodiments of this disclosure. The embodiments of this disclosure do not limit this.

[0253] By implementing the embodiments of this disclosure, a first network element receives a first request message sent by a terminal device, wherein the first request message is used to request the acquisition of first discovery security material, the first discovery security material is used to protect the direct discovery set, and the first request message is also used to request the acquisition of second discovery security material; and sends a first response message to the terminal device, wherein the first response message includes the first discovery security material, and the first response message also includes the second discovery security material. Thus, the terminal device can be simultaneously configured with first discovery security material for protecting the direct discovery set and second discovery security material for protecting U2U relay discovery messages, thereby ensuring communication security during the U2U relay discovery process.

[0254] Please see Figure 9 , Figure 9 This is a schematic flowchart of another method for obtaining safe materials provided in this disclosure. Figure 9 As shown, the method is applied to the U2U relay discovery process. The method is executed by the first network element and may include, but is not limited to, the following steps:

[0255] S91: Receive a first request message sent by the terminal device, wherein the first request message is used to request the acquisition of a first discovery security material, and the first discovery security material is used to protect the direct discovery set.

[0256] S92: Send a first response message to the terminal device, wherein the first response message includes the first discovery of security material.

[0257] The relevant descriptions of S91 to S92 can be found in the relevant descriptions of some of the embodiments above, and will not be repeated here.

[0258] S93: Receive a second request message sent by the terminal device, the second request message also being used to request the acquisition of second discovered security material.

[0259] S94: Send a second response message to the terminal device, wherein the second response message includes second discovered security material.

[0260] In this embodiment of the present disclosure, the first network element can receive a second request message sent by the terminal device. The second request message is also used to request the acquisition of the second discovered security material. Afterwards, the first network element can send a second response message to the terminal device. The second response message includes the second discovered security material.

[0261] In this embodiment of the disclosure, the second discovery security material is used to protect U2U relay discovery messages. The second discovery security material may also be referred to as U2U relay discovery security material.

[0262] In this embodiment of the present disclosure, the first network element can receive a first request message sent by the terminal device, and can also receive a second request message sent by the terminal device. Then, the first network element can send a first response message including a first discovery security material and a second response message including a second discovery security material to the terminal device. Thus, the terminal device can be configured with a first discovery security material for protecting the direct discovery set and a second security material for protecting the U2U relay discovery message, so as to ensure the communication security of the U2U relay discovery process.

[0263] In some embodiments, the first request message includes ProSe identification information for identifying the first discovered safe material.

[0264] In some embodiments, the second request message includes an RSC.

[0265] In this embodiment of the present disclosure, the first network element can receive a first request message sent by the terminal device, which includes ProSe identification information for determining the first discovery security material, and can also receive a second request message sent by the terminal device, which includes RSC. Then, the first network element can send a first response message including the first discovery security material and a second response message including the second discovery security material to the terminal device. Thus, the terminal device can be configured with the first discovery security material for protecting the direct discovery set and the second security material for protecting the U2U relay discovery message, so as to ensure the communication security of the U2U relay discovery process.

[0266] It should be noted that the execution order of S91 to S94 can also be that S93 and S94 are executed first, and S91 and S92 are executed later. This embodiment does not impose specific restrictions on this.

[0267] It should be noted that the relevant descriptions of the first network element, the first request message, the first discovered security material, and the first response message can be found in the relevant descriptions in some of the above embodiments, and will not be repeated here.

[0268] In this implementation or embodiment, unless there is a contradiction, each step can be independent, arbitrarily combined or exchanged in order, the optional methods or examples can be arbitrarily combined, and can be arbitrarily combined with other implementations or embodiments.

[0269] It should be noted that in the embodiments of this disclosure, S91 to S94 can be implemented individually or in combination with any other step in the embodiments of this disclosure, such as in combination with S61 and / or S71 to S74 in the embodiments of this disclosure. The embodiments of this disclosure do not limit this.

[0270] By implementing the embodiments of this disclosure, a first network element receives a first request message sent by a terminal device, wherein the first request message is used to request the acquisition of first discovery security material, and the first discovery security material is used to protect the direct discovery set; sends a first response message to the terminal device, wherein the first response message includes the first discovery security material; receives a second request message sent by the terminal device, the second request message being further used to request the acquisition of second discovery security material; and sends a second response message to the terminal device, wherein the second response message includes the second discovery security material. Therefore, the terminal device can be configured with first discovery security material for protecting the direct discovery set and second discovery security material for protecting U2U relay discovery messages, thereby ensuring communication security during the U2U relay discovery process.

[0271] Please see Figure 10 , Figure 10 This is a schematic flowchart of another method for obtaining safe materials provided in this disclosure. Figure 10 As shown, the method is applied to the U2U relay discovery process. The method is executed by the first network element and may include, but is not limited to, the following steps:

[0272] S101: Send a third request message to the second network element or the third network element, wherein the third request message is used to request the acquisition of the first discovered security material.

[0273] S102: Receive a third response message sent by a second network element or a third network element, wherein the third response message includes the first discovered security material.

[0274] In this embodiment of the disclosure, the first network element can send a third request message to the second network element, the third request message being used to request the acquisition of the first discovered security material. Subsequently, the first network element can receive a third response message sent by the second network element, the third response message including the first discovered security material. Thus, the first network element can acquire the first discovered security material from the second network element.

[0275] In this embodiment of the disclosure, the first network element can send a third request message to the third network element, the third request message being used to request the acquisition of the first discovered security material. Subsequently, the first network element can receive a third response message sent by the third network element, the third response message including the first discovered security material. Thus, the first network element can acquire the first discovered security material from the third network element.

[0276] In this embodiment of the disclosure, the second network element can be a proximity service application server, or it can also be a UDM.

[0277] In this embodiment of the disclosure, the third network element can be at least one of the following: DDNMF of other terminal devices, PKMF of other terminal devices, PCF of other terminal devices, etc.

[0278] In some embodiments, the third request message includes ProSe identification information for determining the first discovered safe material.

[0279] In this embodiment of the disclosure, the third request message sent by the first network element to the second or third network element may include ProSe identification information for determining the first discovered secure material. Therefore, the second or third network element can determine the first discovered secure material based on the ProSe identification information.

[0280] S103: Receive a first request message sent by the terminal device, wherein the first request message is used to request the acquisition of a first discovery security material, and the first discovery security material is used to protect the direct discovery set.

[0281] S104: Send a first response message to the terminal device, wherein the first response message includes the first discovery of security material.

[0282] The relevant descriptions of S103 and S104 can be found in the relevant descriptions of some of the above embodiments, and will not be repeated here.

[0283] In some embodiments, the first network element determines the third network element based on the PLMN list.

[0284] In this embodiment of the disclosure, the first network element can determine the third network element based on the PLMN list.

[0285] The first network element can determine the PLMN list based on the agreement between operators, or it can determine the PLMN list based on pre-configured information.

[0286] In some embodiments, the first request message may also include a list of PLMNs.

[0287] In this embodiment of the present disclosure, the first network element receives a first request message sent by the terminal device. The first request message includes a PLMN. Thus, the first network element can obtain a list of PLMNs from the terminal device to determine the third network element.

[0288] It should be noted that the execution order of S101 to S104 can be arbitrarily adjusted. For example, S101 and S102 can be executed after S103 and before S104. This embodiment does not impose any specific restrictions on this.

[0289] It should be noted that the relevant descriptions of the first network element, the first request message, the first discovered security material, and the first response message can be found in the relevant descriptions in some of the above embodiments, and will not be repeated here.

[0290] In this implementation or embodiment, unless there is a contradiction, each step can be independent, arbitrarily combined or exchanged in order, the optional methods or examples can be arbitrarily combined, and can be arbitrarily combined with other implementations or embodiments.

[0291] It should be noted that in the embodiments of this disclosure, S101 to S104 can be implemented individually or in combination with any other step in the embodiments of this disclosure, such as in combination with S61 and / or S71 to S74 and / or S81 to S82 and / or S91 to S94 in the embodiments of this disclosure. The embodiments of this disclosure do not limit this.

[0292] By implementing the embodiments of this disclosure, a first network element sends a third request message to a second or third network element, wherein the third request message is used to request the acquisition of first discovery security material; receives a third response message sent by the second or third network element, wherein the third response message includes the first discovery security material; receives a first request message sent by a terminal device, wherein the first request message is used to request the acquisition of the first discovery security material, and the first discovery security material is used to protect the direct discovery set; and sends a first response message to the terminal device, wherein the first response message includes the first discovery security material. Therefore, the terminal device can be configured with the first discovery security material for protecting the direct discovery set to ensure communication security during the U2U relay discovery process.

[0293] To facilitate understanding of the embodiments of this disclosure, the following exemplary embodiments are provided.

[0294] In an exemplary embodiment, two sets of discovery security materials are used for U2U relay discovery message protection, including direct discovery security materials and U2U relay discovery security materials. Direct discovery security materials are used to protect the direct discovery set. U2U relay discovery security materials are used to protect U2U relay discovery messages.

[0295] The distribution of security materials through direct discovery reuses the security material distribution mechanism for restricted 5G neighbor service direct discovery. However, since DDNMF does not participate in U2U relay discovery to provide neighbor service restriction codes, neighbor service query codes, or neighbor service response codes, the security mechanism of direct discovery cannot be directly reused in the U2U relay discovery mechanism.

[0296] Furthermore, directly discovered security materials are associated with Prose restriction codes, Prose query codes, or Prose response codes, which are not used in the U2U relay discovery process. Therefore, how to identify directly discovered security materials in U2U relay discovery requires further research.

[0297] like Figure 11 As shown, the example is a U2U relay terminal device with a UE as the terminal device, a UE's DDNMF / PKMF / PCF as the first network element, a UDM or a Prose Application server as the second network element, and a U2U relay terminal device's DDNMF / PKMF / PCF as the third network element.

[0298] Steps 1a to 1c refer to U2U relay terminal equipment:

[0299] 1a. The U2U relay terminal device sends a relay discovery key request message containing the relay service code (RSC) and security capabilities to the 5G DDNMF / PKMF / PCF in its HPLMMN in order to obtain relevant U2U relay discovery security materials.

[0300] 1b.5G DDNMF / PKMF / PCF can query UDM to see if the U2U relay terminal device is authorized to perform the U2U relay discovery process.

[0301] 1c. If the U2U relay terminal device is authorized to perform U2U relay discovery, the 5G DDNMF / PKMF / PCF of the U2U relay terminal device returns the corresponding U2U relay discovery security material. The U2U relay discovery security material provides the necessary information for the U2U relay to protect the U2U relay discovery message. The 5G DDNMF / PKMF / PCF also determines the selected PC5 encryption algorithm based on the RSC received in step 1a and the received PC5 UE security capabilities. The U2U relay stores the selected PC5 encryption algorithm along with the RSC.

[0302] Steps 2a-3c refer to the nearest server terminal devices:

[0303] 2a. The neighboring UE sends a relay discovery key request message containing RSC and security capabilities to the 5G DDNMF / PKMF / PCF in its HPLMMN to obtain relevant U2U relay discovery security materials. The neighboring UE may also include a list of PLMNs in which the UE is authorized to use the 5G ProSe U2U discovery mechanism.

[0304] 2b.5G DDNMF / PKMF / PCF can verify with the UDM or Prose Application server whether the neighboring server UE is authorized to announce / monitor U2U relay discovery messages under this RSC.

[0305] 2c. If the neighboring UE is authorized and the corresponding U2U relay discovery security information is not stored in the 5G DDNMF / PKMF / PCF, the 5G DDNMF / PKMF / PCF of the neighboring UE may send a key request message to the 5G DDNMF / PKMF / PCF of the U2U relay and / or the 5G DDNMF / PKMF / PCF of other neighboring UEs.

[0306] Note: The DDNMF / PKMF of the neighboring UE can discover the DDNMF / PKMF of potential U2U trunks supporting the RSC based on the HPLMN contained in the potential U2U trunk ID, or based on the HPLMN information pre-configured in the DDNMF / PKMF, or based on the HPLMN information provided by the neighboring UE in the discovery key request.

[0307] 2d. The 5G DDNMF / PKMF / PCF of the neighboring UE returns the corresponding U2U relay discovery security material and the selected security algorithm. The neighboring UE stores the U2U relay discovery security material, the selected PC5 encryption algorithm, and RSC.

[0308] 3a. The neighboring UE sends a relay discovery key request message containing the ProSe identifier and security capabilities to the 5G DDNMF / PKMF / PCF in its HPLMMN to obtain relevant direct discovery security materials. The neighboring UE may also include a list of PLMNs in which the UE is authorized to use the 5G ProSe U2U discovery mechanism.

[0309] 3b.5G DDNMF / PKMF / PCF may query the neighbor service application server to see if the neighbor service UE has the right to announce / monitor U2U relay discovery messages based on the neighbor service identifier.

[0310] 3c. If the neighboring service UE is authorized, the 5G DDNMF / PKMF / PCF will return the corresponding Direct Discovery Security Material and the selected security algorithm. The neighboring service UE will store the Direct Discovery Security Material and the selected security algorithm along with the neighboring service identifier.

[0311] Optionally, direct discovery security materials can be generated by the 5G DDNMF / PKMF / PCF. If the list of potential neighboring service UEs is provided by the neighboring service UEs or pre-configured in the 5G DDNMF / PKMF, the 5G DDNMF / PKMF of the neighboring service UEs may contact the 5G DDNMF / PKMF that supports the neighboring service identifier to obtain relevant direct discovery security materials and selected security algorithms.

[0312] Optionally, direct discovery security materials can be provided by the neighborhood service application server. Based on the neighborhood service identifier and the UE's security capabilities, the neighborhood service application server generates the corresponding direct discovery security materials and determines the selected security algorithm.

[0313] It should be noted that detailed descriptions of the relevant steps in the exemplary embodiments can be found in the relevant descriptions in some of the embodiments above, and will not be repeated here.

[0314] In another exemplary embodiment, such as Figure 12 As shown, the example is a U2U relay terminal device with a UE as the terminal device, a UE's DDNMF / PKMF / PCF as the first network element, a UDM or Prose Application server as the second network element, and a U2U relay terminal device's DDNMF / PKMF / PCF as the third network element.

[0315] The nearest-neighbor service UE can obtain both direct discovery security materials and U2U relay discovery security materials at once by sending a relay discovery key request message containing the RSC and the nearest-neighbor service identifier.

[0316] Steps 2a-3c refer to the nearest server terminal devices:

[0317] 2a. The neighboring UE sends a relay discovery key request message containing the RSC, neighbor service identifier, and security capabilities to the 5G DDNMF / PKMF / PCF in its HPLMMN to obtain relevant direct discovery security materials and U2U relay discovery security materials. The neighboring UE may also include a list of PLMNs in which the UE is authorized to perform the 5G ProseU2U relay discovery mechanism.

[0318] 2b.5G DDNMF / PKMF / PCF can verify with the UDM or Prose Application server whether the neighboring service UE is authorized to announce / monitor the U2U relay discovery message under the RSC and / or the neighboring service identifier.

[0319] 2c. If the neighboring UE is authorized and the corresponding U2U relay discovery security information is not stored in the 5G DDNMF / PKMF / PCF, the 5G DDNMF / PKMF / PCF of the neighboring UE may send a key request message to the 5G DDNMF / PKMF / PCF of the U2U relay and / or the 5G DDNMF / PKMF / PCF of other neighboring UEs.

[0320] Note: The DDNMF / PKMF of the neighboring UE can discover the DDNMF / PKMF of potential U2U trunks supporting the RSC based on the HPLMN contained in the potential U2U trunk ID, or based on the HPLMN information pre-configured in the DDNMF / PKMF, or based on the HPLMN information provided by the neighboring UE in the discovery key request.

[0321] 2d. The 5G DDNMF / PKMF / PCF of the neighboring UE returns the corresponding U2U relay discovery security material, direct discovery security material, and selected security algorithm. The neighboring UE stores the U2U relay discovery security material, direct discovery security material, selected PC5 encryption algorithm, and RSC.

[0322] It should be noted that detailed descriptions of the relevant steps in the exemplary embodiments can be found in the relevant descriptions in some of the embodiments above, and will not be repeated here.

[0323] In the embodiments provided above, the methods provided by the present disclosure have been described from the perspectives of a terminal device and a first network element, respectively. To implement the functions of the methods provided in the embodiments of the present disclosure, the first network element and the terminal device may include hardware structures and software modules, implementing the above functions in the form of hardware structures, software modules, or a combination of hardware structures and software modules. One of the above functions may be executed in the form of hardware structures, software modules, or a combination of hardware structures and software modules.

[0324] Please see Figure 13 This is a schematic diagram of the structure of a communication device 1 provided in an embodiment of the present disclosure. Figure 13The communication device 1 shown may include a transceiver module 11 and a processing module 12. The transceiver module may include a sending module and / or a receiving module. The sending module is used to implement the sending function, and the receiving module is used to implement the receiving function. The transceiver module can implement both sending and / or receiving functions.

[0325] Communication device 1, located on the terminal equipment side: includes: transceiver module 11.

[0326] The transceiver module 11 is configured to send a first request message to the first network element, wherein the first request message is used to request the acquisition of the first discovery security material, and the first discovery security material is used to protect the direct discovery set.

[0327] In some embodiments, the transceiver module 11 is further configured to receive a first response message sent by the first network element, wherein the first response message includes a first discovered security material.

[0328] In some embodiments, the first request message includes ProSe identification information for determining the nearest neighbor service of the first discovered safe material.

[0329] In some embodiments, the first request message is further used to request the acquisition of a second discovery security material, and the first response message further includes the second discovery security material, which is used to protect the U2U relay discovery message.

[0330] In some embodiments, the first request message includes a relay service code (RSC).

[0331] In some embodiments, the transceiver module 11 is further configured to send a second request message to the first network element, the second request message being used to request the acquisition of the second discovered security material; and to receive a second response message sent by the first network element, wherein the second response message includes the second discovered security material.

[0332] In some embodiments, the second request message includes an RSC.

[0333] In some embodiments, the first request message further includes a first security capability, wherein the transceiver module 11 is further configured to receive a first security algorithm and / or a second security algorithm sent by the first network element.

[0334] In some embodiments, the second request message further includes a second security capability, wherein the transceiver module 11 is further configured to receive a second security algorithm sent by the first network element.

[0335] In some embodiments, such as Figure 13 As shown, the device also includes a processing module 12.

[0336] Processing module 12 is also configured to store at least one of the following:

[0337] First discovered safe material;

[0338] ProSe identification information;

[0339] The second discovery was of a safe material;

[0340] RSC;

[0341] First-level security algorithm;

[0342] Second security algorithm.

[0343] In some embodiments, the first request message may also include a list of Public Land Mobile Networks (PLMNs).

[0344] Communication device 1, located on the first network element side: includes: transceiver module 11.

[0345] The transceiver module 11 is configured to receive a first request message sent by a terminal device, wherein the first request message is used to request the acquisition of a first discovery security material, and the first discovery security material is used to protect the direct discovery set.

[0346] In some embodiments, the transceiver module 11 is further configured to send a first response message to the terminal device, wherein the first response message includes a first discovery of security material.

[0347] In some embodiments, the transceiver module 11 is further configured to send a first response message to the terminal device, wherein the first network element determines that the terminal device is authorized to perform a U2U relay discovery process related to ProSe identification information.

[0348] In some embodiments, the transceiver module 11 is further configured to send an authorization request message to the second network element, wherein the authorization request message is used to request whether the terminal device is authorized to perform a U2U relay discovery process related to ProSe identification information; and to receive an authorization response message sent by the second network element, wherein the authorization response message is used to indicate that the terminal device is authorized to perform a U2U relay discovery process.

[0349] In some embodiments, the device further includes a processing module 12.

[0350] Processing module 12 is configured to determine, based on the authorization response message, that the terminal device is authorized to perform the U2U relay discovery process.

[0351] In some embodiments, the first request message includes ProSe identification information for identifying the first discovered safe material.

[0352] In some embodiments, the first request message is further used to request the acquisition of the second discovered security material, and the first response message also includes the second discovered security material.

[0353] In some embodiments, the first request message includes an RSC.

[0354] In some embodiments, the transceiver module 11 is further configured to receive a second request message sent by a terminal device, the second request message being used to request the acquisition of a second discovered security material; and to send a second response message to the terminal device, wherein the second response message includes the second discovered security material.

[0355] In some embodiments, the second request message includes an RSC.

[0356] In some embodiments, the transceiver module 11 is further configured to send a third request message to a second network element or a third network element, wherein the third request message is used to request the acquisition of the first discovered security material; and to receive a third response message sent by the second network element or the third network element, wherein the third response message includes the first discovered security material.

[0357] In some embodiments, the third request message includes ProSe identification information for determining the first discovered safe material.

[0358] In some embodiments, the first request message further includes a first security capability, the processing module 12 is further configured to determine a selected first security algorithm and / or a second security algorithm based on the first security capability, and the transceiver module 11 is further configured to send the determined first security algorithm and / or second security algorithm to the terminal device.

[0359] In some embodiments, the transceiver module 11 is further configured to send a fourth request message to a second network element or a third network element, wherein the fourth request message is used to request the acquisition of a first security algorithm and / or a second security algorithm according to a first security capability; and to receive a fourth response message sent by the second network element or the third network element, wherein the fourth response message includes the first security algorithm and / or the second security algorithm.

[0360] In some embodiments, the fourth request message includes a first security capability and ProSe identification information.

[0361] In some embodiments, the second request message further includes a second security capability, and the processing module 12 is further configured to determine a selected second security algorithm based on the second security capability; the transceiver module 11 is further configured to send the determined second security algorithm to the terminal device.

[0362] In some embodiments, the processing module 12 is further configured to determine a third network element based on the PLMN list.

[0363] In some embodiments, the first request message may also include a list of PLMNs.

[0364] Regarding the communication device 1 in the above embodiments, the specific methods by which each module performs operations have been described in detail in the embodiments related to the method, and will not be elaborated here.

[0365] The communication device 1 provided in the above embodiments of this disclosure achieves the same or similar beneficial effects as the secure material acquisition method provided in some of the above embodiments, and will not be repeated here.

[0366] Please see Figure 14 , Figure 14 This is a structural diagram of another communication device 1000 provided in this embodiment. The communication device 1000 can be a terminal device or a first network element. This device can be used to implement the methods described in the above method embodiments, and for details, please refer to the description in the above method embodiments.

[0367] The communication device 1000 may include one or more processors 1001. The processor 1001 may be a general-purpose processor or a dedicated processor, such as a baseband processor or a central processing unit (CPU). The baseband processor can be used to process communication protocols and communication data, while the CPU can be used to control the communication device (e.g., base station, baseband chip, terminal equipment, terminal equipment chip, DU or CU, etc.), execute computer programs, and process data from the computer programs.

[0368] Optionally, the communication device 1000 may further include one or more memories 1002, which may store a computer program 1004. The memories 1002 execute the computer program 1004 to cause the communication device 1000 to perform the methods described in the above method embodiments. Optionally, the memories 1002 may also store data. The communication device 1000 and the memories 1002 may be provided separately or integrated together.

[0369] Optionally, the communication device 1000 may further include a transceiver 1005 and an antenna 1006. The transceiver 1005 may be referred to as a transceiver unit, transceiver, or transceiver circuit, etc., and is used to implement the transmission and reception functions. The transceiver 1005 may include a receiver and a transmitter. The receiver may be referred to as a receiver or receiving circuit, etc., and is used to implement the receiving function; the transmitter may be referred to as a transmitter or transmitting circuit, etc., and is used to implement the transmitting function.

[0370] Optionally, the communication device 1000 may further include one or more interface circuits 1007. The interface circuit 1007 is used to receive code instructions and transmit them to the processor 1001. The processor 1001 executes the code instructions to cause the communication device 1000 to perform the method described in the above method embodiments.

[0371] Communication device 1000 is a terminal device: transceiver 1005 is used to perform... Figures 1 to 5 Any step in the process.

[0372] Communication device 1000 is the first network element, and transceiver 1005 is used to perform... Figures 6 to 10 Any step in the process.

[0373] In one implementation, the processor 1001 may include a transceiver for implementing receiving and transmitting functions. For example, the transceiver may be a transceiver circuit, an interface, or an interface circuit. The transceiver circuit, interface, or interface circuit for implementing receiving and transmitting functions may be separate or integrated. The aforementioned transceiver circuit, interface, or interface circuit can be used for reading and writing code / data, or it can be used for transmitting or relaying signals.

[0374] In one implementation, processor 1001 may store computer program 1003, which runs on processor 1001 and causes communication device 1000 to execute the methods described in the above method embodiments. Computer program 1003 may be embedded in processor 1001, in which case processor 1001 may be implemented in hardware.

[0375] In one implementation, the communication device 1000 may include circuitry capable of performing the functions of transmitting, receiving, or communicating as described in the foregoing method embodiments. The processor and transceiver described in this disclosure can be implemented on integrated circuits (ICs), analog ICs, radio frequency integrated circuits (RFICs), mixed-signal ICs, application-specific integrated circuits (ASICs), printed circuit boards (PCBs), electronic devices, etc. The processor and transceiver can also be manufactured using various IC process technologies, such as complementary metal-oxide-semiconductor (CMOS), n-metal-oxide-semiconductor (NMOS), positive-channel metal-oxide-semiconductor (PMOS), bipolar junction transistors (BJTs), bipolar CMOS (BiCMOS), silicon-germanium (SiGe), gallium arsenide (GaAs), etc.

[0376] The communication device described in the above embodiments can be a terminal device, a first network element, or a core network, but the scope of the communication device described in this disclosure is not limited thereto, and the structure of the communication device is not restricted to these. Figure 14 The communication device may be a standalone device or part of a larger device. For example, the communication device may be:

[0377] (1) Independent integrated circuit IC, or chip, or chip system or subsystem;

[0378] (2) A collection of one or more ICs, optionally including storage components for storing data and computer programs;

[0379] (3) ASIC, such as modem;

[0380] (4) Modules that can be embedded in other devices;

[0381] (5) Receivers, terminal equipment, smart terminal equipment, cellular phones, wireless equipment, handheld devices, mobile units, vehicle-mounted equipment, network equipment, cloud equipment, artificial intelligence equipment, etc.

[0382] (6) Others, etc.

[0383] For cases where the communication device can be a chip or a chip system, please refer to [link / reference]. Figure 15 This is a structural diagram of a chip provided in an embodiment of this disclosure.

[0384] like Figure 13 As shown, chip 1100 includes processor 1101 and interface 1103. The number of processors 1101 can be one or more, and the number of interfaces 1103 can be multiple.

[0385] Regarding the case where the chip is used to implement the function of the first network element in the embodiments of this disclosure:

[0386] Interface 1103 is used to receive code instructions and transmit them to the processor.

[0387] Processor 1101 is configured to run code instructions to perform a secure material acquisition method as described in some of the embodiments above.

[0388] Regarding the case where the chip is used to implement the functions of the terminal device in the embodiments of this disclosure:

[0389] Interface 1103 is used to receive code instructions and transmit them to the processor.

[0390] Processor 1101 is configured to run code instructions to perform a secure material acquisition method as described in some of the embodiments above.

[0391] Optionally, chip 1100 may also include memory 1102, which is used to store necessary computer programs and data.

[0392] Those skilled in the art will also understand that the various illustrative logical blocks and steps listed in the embodiments of this disclosure can be implemented by electronic hardware, computer software, or a combination of both. Whether such functionality is implemented in hardware or software depends on the specific application and the overall system design requirements. Those skilled in the art can implement the described functionality using various methods for each specific application, but such implementation should not be construed as exceeding the scope of protection of the embodiments of this disclosure.

[0393] This disclosure also provides a communication system, which includes the aforementioned... Figure 13 In the embodiments, the communication device serves as both the communication device and the terminal device, which are the first network element; alternatively, the system includes the aforementioned components. Figure 14 The embodiments include a communication device as a first network element and a communication device as a terminal device.

[0394] This disclosure also provides a communication system, which includes a terminal device and a first network element.

[0395] The terminal device is configured to execute the secure material acquisition method described in some of the above embodiments; the first network element is configured to execute the secure material acquisition method described in some of the above embodiments.

[0396] This disclosure also provides a readable storage medium having instructions stored thereon that, when executed by a computer, implement the functions of any of the above method embodiments.

[0397] This disclosure also provides a computer program product that, when executed by a computer, implements the functions of any of the above method embodiments.

[0398] In the above embodiments, implementation can be achieved, in whole or in part, through software, hardware, firmware, or any combination thereof. When implemented in software, it can be implemented, in whole or in part, as a computer program product. The computer program product includes one or more computer programs. When the computer program is loaded and executed on a computer, all or part of the processes or functions described in the embodiments of this disclosure are generated. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer program can be stored in a computer-readable storage medium or transferred from one computer-readable storage medium to another. For example, the computer program can be transferred from one website, computer, server, or data center to another via wired (e.g., coaxial cable, fiber optic, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) means. The computer-readable storage medium can be any available medium accessible to a computer or a data storage device such as a server or data center that integrates one or more available media. The available media may be magnetic media (e.g., floppy disks, hard disks, magnetic tapes), optical media (e.g., high-density digital video discs (DVDs)), or semiconductor media (e.g., solid-state disks (SSDs)).

[0399] Unless the context otherwise requires, throughout the specification and claims, the term "comprise" and its other forms, such as the third-person singular "comprises" and the present participle "comprising," are interpreted as open-ended and encompassing, meaning "including, but not limited to." In the description of the specification, terms such as "some embodiments," "exemplary embodiments," etc., are intended to indicate that a particular feature, structure, material, or characteristic associated with that embodiment or example is included in at least one embodiment or example of this disclosure. The illustrative representations of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics mentioned may be included in any suitable manner in any one or more embodiments or examples.

[0400] Those skilled in the art will understand that the various numerical designations such as "first," "second," etc., used in this disclosure are merely for the convenience of description and are not intended to limit the scope of the embodiments of this disclosure, nor do they indicate the order of events.

[0401] At least one of the features described in this disclosure can also be described as one or more, and multiple features can be two, three, four or more, and this disclosure does not impose any limitations. In the embodiments of this disclosure, for a technical feature, the technical features in that technical feature are distinguished by "first", "second", "third", "A", "B", "C" and "D", etc., and there is no sequential order or size order among the technical features described by "first", "second", "third", "A", "B", "C" and "D".

[0402] Where there is no contradiction, each step in a particular implementation method or embodiment can be implemented as an independent embodiment, and the steps can be arbitrarily combined. For example, the solution after removing some steps in a particular implementation method or embodiment can also be implemented as an independent embodiment, and the order of the steps in a particular implementation method or embodiment can be arbitrarily interchanged. In addition, the optional methods or examples in a particular implementation method or embodiment can be arbitrarily combined; furthermore, the implementation methods or embodiments can be arbitrarily combined with each other. For example, some or all of the steps in different implementation methods or embodiments can be arbitrarily combined, and a particular implementation method or embodiment can be arbitrarily combined with the optional methods or examples of other implementation methods or embodiments. Moreover, each element, each row, or each column in the tables involved in this disclosure can be implemented as an independent embodiment, and any combination of any element, any row, or any column can also be implemented as an independent embodiment.

[0403] Regarding the notation “A or B”, “A and / or B”, “at least one of A and B”, “A in one case and B in another case”, “in response to one case A and in response to another case B”, the following at least one scheme may be included depending on the situation: A is performed regardless of B, i.e., A in some embodiments; B is performed regardless of A, i.e., B in some embodiments; A and B are performed selectively, i.e., A and B are selected to be performed in some embodiments; A and B are both performed, i.e., A and B are performed in some embodiments.

[0404] Those skilled in the art will recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this disclosure.

[0405] Those skilled in the art will understand that, for the sake of convenience and brevity, the specific working processes of the systems, devices, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here.

[0406] The above description is merely a specific embodiment of this disclosure, but the scope of protection of this disclosure is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in this disclosure should be included within the scope of protection of this disclosure. Therefore, the scope of protection of this disclosure should be determined by the scope of the claims.

Claims

1. A method for obtaining safe materials, characterized in that, The method is applied to the device-to-device (U2U) relay discovery process, and is executed by the terminal device, including: A first request message is sent to the first network element, wherein the first request message is used to request the acquisition of a first discovery security material, the first discovery security material is used to protect the direct discovery set, and there are two sets of discovery security materials in the U2U relay discovery process, the two sets of discovery security materials include: the first discovery security material and the second discovery security material, the second discovery security material is used to protect the U2U relay discovery message.

2. The method as described in claim 1, characterized in that, The method further includes: Receive a first response message sent by the first network element, wherein the first response message includes the first discovered security material.

3. The method as described in claim 1, characterized in that, The first request message includes ProSe identification information for determining the nearest neighbor service of the first discovered safe material.

4. The method as described in claim 2, characterized in that, The first request message is also used to request the acquisition of a second discovery security material, and the first response message also includes the second discovery security material, which is used to protect U2U relay discovery messages.

5. The method as described in claim 4, characterized in that, The first request message includes the relay service code RSC.

6. The method as described in claim 1, characterized in that, The first request message further includes a first security capability, wherein the method further includes: Receive at least one of the following from the first network element: First-level security algorithm; Second security algorithm.

7. The method as described in claim 1, characterized in that, The method further includes: Send a second request message to the first network element, the second request message being further used to request the acquisition of the second discovered security material; The system receives a second response message sent by the first network element, wherein the second response message includes the second discovered security material.

8. The method as described in claim 7, characterized in that, The second request message includes RSC.

9. The method as described in claim 7, characterized in that, The second request message also includes a second security capability, wherein the method further includes: Receive the second security algorithm sent by the first network element.

10. The method as described in claim 9, characterized in that, The first request message further includes a first security capability, wherein the method further includes: Receive the first security algorithm sent by the first network element.

11. The method according to any one of claims 1 to 10, characterized in that, The method further includes: Store at least one of the following information: First discovered safe material; ProSe identification information; The second discovery was of a safe material; RSC; First-level security algorithm; Second security algorithm.

12. The method according to any one of claims 1 to 10, characterized in that, The first request message also includes a list of Public Land Mobile Networks (PLMNs).

13. A method for obtaining safe materials, characterized in that, The method is applied to the U2U relay discovery process, and the method is executed by the first network element, including: The terminal device receives a first request message, wherein the first request message is used to request the acquisition of a first discovery security material, the first discovery security material is used to protect the direct discovery set, and there are two sets of discovery security materials in the U2U relay discovery process, the two sets of discovery security materials include: the first discovery security material and the second discovery security material, the second discovery security material is used to protect the U2U relay discovery message.

14. The method as described in claim 13, characterized in that, The method further includes: A first response message is sent to the terminal device, wherein the first response message includes the first discovered security material.

15. The method as described in claim 14, characterized in that, Sending the first response message to the terminal device includes: In response to determining that the terminal device is authorized to perform a U2U relay discovery process related to ProSe identification information, the first response message is sent to the terminal device.

16. The method as described in claim 15, characterized in that, The step of determining that the terminal device is authorized to perform the U2U relay discovery process related to Prose identification information includes: Send an authorization request message to the second network element, wherein the authorization request message is used to request whether the terminal device is authorized to perform the U2U relay discovery process related to ProSe identification information; Receive an authorization response message sent by the second network element, wherein the authorization response message is used to indicate that the terminal device is authorized to perform the U2U relay discovery process; Based on the authorization response message, it is determined that the terminal device is authorized to perform the U2U relay discovery process.

17. The method as described in claim 13, characterized in that, The first request message includes ProSe identification information for determining the first discovered safe material.

18. The method as described in claim 13, characterized in that, The first request message is also used to request the acquisition of the second discovered security material, and the first response message also includes the second discovered security material.

19. The method as described in claim 18, characterized in that, The first request message includes RSC.

20. The method as described in claim 13, characterized in that, The method further includes: The terminal device receives a second request message, which is further used to request the acquisition of a second discovered security material. A second response message is sent to the terminal device, wherein the second response message includes the second discovered security material.

21. The method as described in claim 20, characterized in that, The second request message includes RSC.

22. The method as described in claim 13, characterized in that, The method further includes: Send a third request message to a second network element or a third network element, wherein the third request message is used to request the acquisition of the first discovered security material; Receive a third response message sent by the second network element or the third network element, wherein the third response message includes the first discovered security material.

23. The method as described in claim 22, characterized in that, The third request message includes ProSe identification information for determining the first discovered safe material.

24. The method according to any one of claims 13 to 19, characterized in that, The first request message further includes a first security capability, wherein the method further includes: Based on the first security capability, determine the selected first security algorithm and / or second security algorithm; Send the determined first security algorithm and / or second security algorithm to the terminal device.

25. The method as described in claim 24, characterized in that, The step of determining the selected first security algorithm and / or second security algorithm based on the first security capability includes: Send a fourth request message to the second network element or the third network element, wherein the fourth request message is used to request the acquisition of the first security algorithm and / or the second security algorithm based on the first security capability; Receive a fourth response message sent by the second network element or the third network element, wherein the fourth response message includes the first security algorithm and / or the second security algorithm.

26. The method as described in claim 25, characterized in that, The fourth request message includes the first security capability and ProSe identification information for determining the first discovered security material.

27. The method as described in claim 20 or 21, characterized in that, The second request message also includes a second security capability, wherein the method further includes: Based on the second security capability, the selected second security algorithm is determined; The determined second security algorithm is sent to the terminal device.

28. The method as described in claim 27, characterized in that, The first request message further includes a first security capability, wherein the method further includes: Based on the first security capability, determine the selected first security algorithm; The determined first security algorithm is sent to the terminal device.

29. The method as described in claim 22 or 25, characterized in that, The method further includes: The third network element is determined based on the PLMN list.

30. The method as described in claim 13, characterized in that, The first request message also includes a list of PLMNs.

31. A communication device, characterized in that, include: The transceiver module is configured to send a first request message to a first network element during the U2U relay discovery process. The first request message is used to request the acquisition of a first discovery security material. The first discovery security material is used to protect the direct discovery set. There are two sets of discovery security materials in the U2U relay discovery process. The two sets of discovery security materials include: the first discovery security material and the second discovery security material. The second discovery security material is used to protect the U2U relay discovery message.

32. A communication device, characterized in that, include: The transceiver module is configured to receive a first request message sent by a terminal device during the U2U relay discovery process. The first request message is used to request the acquisition of a first discovery security material, which is used to protect the direct discovery set. There are two sets of discovery security materials in the U2U relay discovery process, including the first discovery security material and the second discovery security material. The second discovery security material is used to protect the U2U relay discovery message.

33. A communication device, characterized in that, The device includes a processor and a memory, the memory storing a computer program, the processor executing the computer program stored in the memory to cause the device to perform the method as claimed in any one of claims 1 to 12, or the processor executing the computer program stored in the memory to cause the device to perform the method as claimed in any one of claims 13 to 30.

34. A communication device, characterized in that, include: Processor and interface circuitry; The interface circuit is used to receive code instructions and transmit them to the processor; The processor is configured to execute the code instructions to perform the method as claimed in any one of claims 1 to 12, or to execute the code instructions to perform the method as claimed in any one of claims 13 to 30.

35. A computer-readable storage medium storing instructions that, when executed, cause the method of any one of claims 1 to 12 to be implemented, or, when executed, cause the method of any one of claims 13 to 30 to be implemented.

36. A communication system, characterized in that, include: A terminal device is configured to perform the method as described in any one of claims 1 to 12; The first network element is configured to perform the method as described in any one of claims 13 to 30.

Images