A dynamic key management method and system in 5G network

Abstract

The present invention discloses a dynamic key management method and system in a 5G network, and relates to the technical field of dynamic key management. It includes: position acquisition: respectively acquiring the positions of a key sender and a key receiver, obtaining a sending position item and a receiving position item, and obtaining a sending path item based on the connection between the sending position item and the receiving position item; base station acquisition: setting a coverage range threshold, and based on the coverage range threshold, searching for base stations from the coverage range thresholds of the sending position item, the receiving position item, and the sending path item. The present invention screens and determines the base stations so that a sending path is formed between the sending position and the receiving position. Since the signal strength of the base station signal changes in different time periods, the selection of the first screened base station set and the second screened base station set will be full of uncertainty, so that the transmission path of the signal can be uncertain, thereby improving the security transmission effect of the key.

Description

Technical Field

[0001] The present invention relates to the field of dynamic key management technology, and specifically to a dynamic key management method and system in a 5G network. Background Art

[0002] A dynamic key is an encryption key used during communication or data transmission. It changes over time or with different sessions. Unlike static keys, dynamic keys may be different in each session or each data packet, which improves security. Dynamic key management refers to the strategies and technologies for effectively managing the generation, distribution, storage, use and destruction of dynamic keys in information security systems. The goal of dynamic key management is to ensure the security, validity and availability of keys to protect the confidentiality and integrity of data, including key generation, key distribution, key storage, key use, key update and rotation, and key destruction.

[0003] The industrial network dynamic key management method and industrial network encrypted communication method with patent publication number CN114710359A avoid the leakage of each sub-encrypted random number during transmission by introducing the asymmetric key public key of the security control center, thus ensuring the key security. By decrypting and storing each sub-encrypted random number by each non-central member, the distributed management of the communication symmetric key can be realized, so that each terminal device does not need to store a large number of keys, reducing the storage pressure of a single terminal device in the industrial network and ensuring the stability of the industrial network.

[0004] In the process of transmission management of security keys, the above-mentioned and similar technical features rely on base stations for signal coverage and transmission of 5G network dynamic keys, and the dynamic keys are more easily intercepted during transmission by base stations. Therefore, when the interceptor knows the sender and receiver locations of the dynamic keys, they may intercept or obtain the dynamic keys by controlling or disguising themselves as base stations, thereby affecting the security of the dynamic keys and making it easy for keys to be lost or leaked. During the transmission process, the dynamic keys are easily captured by criminals using network monitoring tools. This will also seriously affect the security of the dynamic keys. The dynamic keys can only be protected by encryption, but the encryption method is at risk of being cracked, so the security management capabilities of security keys are poor. Summary of the invention

[0005] The purpose of the present invention is to provide a dynamic key management method and system in a 5G network to solve the problems raised in the above background technology.

[0006] To achieve the above object, the present invention provides the following technical solution: a dynamic key management method and system in a 5G network, comprising:

[0007] Position acquisition: respectively acquiring the positions of the key sender and the key receiver, obtaining a sending position item and a receiving position item, and obtaining a sending path item based on the connection between the sending position item and the receiving position item;

[0008] Base station acquisition: Set a coverage threshold, and based on the coverage threshold, search for base stations within the coverage threshold of the sending position item and the receiving position item respectively to obtain a sending base station set and a receiving base station set. At the same time, search for base stations within the coverage threshold of the sending path item to obtain a path base station set, and then obtain a total base station set based on the sending base station set, the receiving base station set and the path base station set;

[0009] Base station search: Based on the search method, base stations are obtained from the total base station set, so that a base station coverage path is formed between the sending position item and the receiving position item, and a base station path item is obtained. The base station path item includes at least two base stations, and a selected base station set is obtained. According to different selected base station sets, the base station path item is different, and the transmission path of the key will be full of randomness and uncertainty, which strengthens the guarantee of key security;

[0010] Transmission encryption: Encrypt the key based on the encryption method until the security key reaches the receiving location, further improving the security of the security key;

[0011] The search method comprises:

[0012] Step 1: signal sorting, based on the sending base station set, acquiring and sorting the base station signals in the sending base station set to obtain a first signal sorting item;

[0013] Step 2: Eliminate base stations: based on the first signal ranking item, eliminate the first and last base stations in the first signal ranking item to obtain a first screening base station set;

[0014] Step three: Determine the base station. Based on the first screened base station set, select the base station closest to the receiving position item as the first target base station, and take the first target base station as the starting point to sort the signals of the base stations within the signal range of the first target base station and in the total set of base stations to obtain the second signal sorting item. Repeat step two to obtain the second screened base station set, repeat step three to obtain the second target base station, repeat steps one to three until a base station coverage path is formed with the receiving position item to obtain the base station path item.

[0015] Furthermore, the signal sorting method includes:

[0016] S1: signal acquisition, obtaining the load status of each base station in the sending base station set, and obtaining a base station load set, which includes at least one base station load item;

[0017] S2: sorting the base stations, based on the base station load set and according to the load conditions of the base stations, sorting the base stations from low to high according to the load rates to obtain a first signal sorting item.

[0018] Furthermore, the method for eliminating base stations includes: quantity judgment, based on the first signal ranking item, judging the number of the first signal ranking items, setting a judgment threshold, when the first signal ranking item is lower than the judgment threshold, eliminating the end of the first signal ranking item, when the first signal ranking item is higher than the judgment threshold, eliminating the first and the end of the first signal ranking item to obtain a first screening base station set.

[0019] Furthermore, the method for eliminating base stations also includes: threshold judgment, setting a transmission threshold, when the first signal sorting item is higher than the judgment threshold, judging the load rates of the remaining base stations excluding the first and last base stations in the first signal sorting item, when there is no base station with a load rate higher than the judgment threshold among the remaining base stations excluding the first and last base stations, selecting the first base station in the first signal sorting item as the first screening base station set, when there is a base station with a load rate higher than the judgment threshold among the remaining base stations excluding the first and last base stations, eliminating the first and last base stations in the first signal sorting item to obtain the first screening base station set.

[0020] Furthermore, the method for determining the first target base station includes:

[0021] M1: information acquisition, based on the first screening base station set, acquiring the location information of the base stations in the first screening base station set to obtain a first screening location set, the first screening location set including at least one first screening location item;

[0022] M2: Connection determination: Based on the first filtering position set and the receiving position item, the connection is determined to obtain a first filtering connection set, the first filtering connection set includes at least one first filtering connection item, and the connection lengths are sorted based on the first filtering connection set, and the first filtering connection item with the shortest connection is selected as the target connection, thereby obtaining the first target base station.

[0023] Furthermore, the method for determining the first target base station also includes:

[0024] M3: establishing storage information, based on the previous sending location item and the receiving location item, storing and recording the information of the previous sending location item and the receiving location item to obtain a record information item, and obtaining the previous first selected target base station according to the record information item;

[0025] M4: Information matching, based on matching the real-time sending location item and the real-time receiving location item with the recorded information item, determine whether the real-time sending location item and the real-time receiving location item are consistent with the recorded information item. When the real-time sending location item and the real-time receiving location item are consistent with the recorded information item, take the previous first target base station as an excluded base station, repeat steps M1-M2 to obtain the first target base station, and repeat M3 to replace the recorded information item with the real-time sending location item and the real-time receiving location item.

[0026] Furthermore, the encryption method includes:

[0027] X1: Change threshold setting. By setting the change threshold, the key is changed based on the change threshold during key transmission to obtain a key change set.

[0028] X2: Determine item setting, set the determined item, set the item as the target serial number, and according to the determined item, select the key corresponding to the determined item from the key change set as the target key.

[0029] Furthermore, the encryption method also includes: assigning a determined value, obtaining the number of base stations in the base station path set, obtaining specific data of the selected base station set, and assigning a determined value to the determined item based on the number information of the base stations in the selected base station set.

[0030] Compared with the prior art, the present invention has the following beneficial effects:

[0031] The dynamic key management method and system in the 5G network respectively obtain the location information of the sender and the receiver, and obtain the path between the sending location and the receiving location, and set the coverage range threshold. Based on the coverage range threshold, the base station is searched from the coverage range threshold of the sending location and the receiving location respectively, and the base station is searched based on the coverage range threshold of the sending path, so as to obtain the total set of base stations, and the base stations are screened and determined so that a sending path is formed between the sending location and the receiving location. Since the signal strength of the base station signal changes in different time periods, the selection of the first screened base station set and the second screened base station set will be full of uncertainty, so that the signal transmission path can be uncertain, thereby improving the security transmission effect of the key, and taking the base station with the best signal as the elimination item can be used to confuse interceptors and reduce the possibility of base stations being intercepted.

[0032] At the same time, during the key transmission process, a change threshold and a determination item are set, where the determination item is the number of base stations selected during the transmission process. The security key is changed according to the change threshold until the security key reaches the receiving position item, and a security key set is obtained. The security key at the corresponding position is selected according to the determination item, thereby further improving the security of the security key.

[0033] In addition, the determined items are determined according to the total number of base stations selected during the key transmission process. Since the selection of base stations is full of uncertainty, the determined items are also changing, which further improves the protection effect of the key. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] Figure 1 It is a schematic diagram of the process flow of location acquisition, base station acquisition, base station search and transmission encryption relationship of the present invention;

[0035] Figure 2 A schematic diagram of the search method of the present invention;

[0036] Figure 3 A schematic diagram of the relationship between the sending location item and the receiving location item of the present invention;

[0037] Figure 4 A schematic diagram of the relationship between the first screening base station set and the first target base station set of the present invention;

[0038] Figure 5 A schematic diagram of a method for eliminating base stations according to the present invention;

[0039] Figure 6 A schematic diagram of the transmission threshold judgment relationship of the present invention;

[0040] Figure 7 The present invention is a schematic diagram for obtaining a target key. DETAILED DESCRIPTION

[0041] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0042] The interception of dynamic keys during transmission can occur in multiple links, mainly including base station interception and interception during transmission. Base station interception includes man-in-the-middle attacks. If an attacker can control or disguise himself as a base station, the transmission of dynamic keys may be intercepted and tampered with. This usually occurs when the attacker can access the network or interfere between the user device and the base station. If the base station itself has security vulnerabilities, the attacker may use these vulnerabilities to obtain the dynamic keys in transmission. The transmission process interception includes network monitoring. During data transmission, especially in an insecure network environment such as public Wi-Fi, the attacker can use network monitoring tools to capture the transmitted data, including dynamic keys. The technical solution provided in this application obtains the location information of the sender and the receiver respectively, obtains the path between the sending location and the receiving location, and sets a coverage range threshold. Based on the coverage range threshold, the sending location and the receiving location are respectively intercepted. The base station is searched within the coverage threshold set, and the base station is searched within the coverage threshold based on the sending path, so as to obtain the total set of base stations. The base stations are screened and determined so that a sending path is formed between the sending position and the receiving position. Since the signal strength of the base station signal changes in different time periods, the selection of the first screened base station set and the second screened base station set will be full of uncertainty, so that the signal transmission path has uncertainty, which improves the security transmission effect of the key, and the base station with the best signal is used as a rejection item, which can be used to confuse the interceptor and reduce the possibility of the base station being intercepted. At the same time, in the process of key transmission, a change threshold and a determination item are set, wherein the determination item is the number of base stations selected during the transmission process, and the security key is changed according to the change threshold until the security key reaches the receiving position item, so as to obtain a security key set, and the security key of the corresponding position is selected according to the determination item, which further improves the security of the security key.

[0043] like Figure 1-Figure 4As shown, the present invention provides a technical solution: a dynamic key management method and system in a 5G network, including: position acquisition: respectively acquiring the positions of a key sender and a key receiver, obtaining a sending position item and a receiving position item, and obtaining a sending path item based on the connection between the sending position item and the receiving position item; base station acquisition: setting a coverage range threshold, based on the coverage range threshold, searching for base stations from the coverage range threshold of the sending position item and the receiving position item respectively, obtaining a sending base station set and a receiving base station set, and searching for base stations based on the coverage range threshold of the sending path item to obtain a path base station set, and then obtaining a total base station set based on the sending base station set, the receiving base station set and the path base station set; base station search: based on the search method, acquiring base stations from the total base station set, so that a base station coverage path is formed between the sending position item and the receiving position item, and a base station path item is obtained, the base station path item includes at least two base stations, and a selected base station set is obtained. According to different selected base station sets, the base station path items are different, and the transmission path of the key will be It is full of randomness and uncertainty, which strengthens the guarantee of key security; transmission encryption: the key is encrypted and protected based on the encryption method until the security key reaches the receiving position item, which further improves the security of the security key; the search method includes: step one: signal sorting, based on the sending base station set, the base station signals in the sending base station set are acquired and sorted to obtain the first signal sorting item; step two: base station elimination, based on the first signal sorting item, the first and the end of the first signal sorting item are eliminated to obtain the first screening base station set; step three: base station determination, based on the first screening base station set, the base station closest to the receiving position item is selected as the first target base station, and the first target base station is used as the starting point to sort the signals of the base stations within the signal range of the first target base station and in the total set of base stations to obtain the second signal sorting item, and repeat step two to obtain the second screening base station set, repeat step three to obtain the second target base station, repeat steps one to three until a base station coverage path is formed with the receiving position item to obtain a base station path item.

[0044] It should be noted that, according to the acquired positions of the key sender and the key receiver, and the set coverage range threshold, the coverage range threshold is the signal range of the conventional base station. At this time, the sending position item, the receiving position item and the entire sending path item are used as the basis, and a range is divided based on the coverage range threshold. The base station information within the range is obtained, and the sending base station set, the receiving base station set and the path base station set are obtained respectively. According to the acquired base station information, the sending position item is used as the starting point to obtain and sort the base station signal conditions in the sending base station set. According to the sorting order, the base stations with the best and the worst signals are eliminated respectively. The base station with the best signal is eliminated in order to confuse possible interceptors, and the base station with the best signal is discarded to ensure the security of the selected base station as much as possible. The base station with the worst signal is eliminated in order to ensure the basic transmission stability of the key, thereby obtaining the first screening base station set. According to the first screening base station set, the base station closest to the receiving position is selected as the next target base station, and the whole step is repeated until the sending position item and the receiving position item form a base station coverage path.

[0045] In the specific implementation process, it is now necessary to transmit the key. First, the specific positions of the key sender and the key receiver are obtained, so as to determine the connection between the two. Based on the set coverage range threshold, there are many base stations between the key sender, the key receiver and the connection between the two. First, the position of the key sender is used as the starting point to search for the base station information within the coverage range threshold of the key sender. Three base stations are searched, namely base station 1, base station 2 and base station 3. Among them, base station 1 has the best signal, base station 2 is second, and base station 3 has the worst signal. According to the screening principle, base station 1 and base station 3 are eliminated, and base station 2 is selected as the next target base station. Taking base station 2 as the starting point, the base station information within the coverage range threshold is searched again, and four base stations are searched, namely base station 4, base station 5, base station 6 and base station 7. Among them, base station 4 has the best signal, base station 5 is second, then base station 6, and finally base station 7. According to the screening principle again, base station 4 and base station 7 are eliminated. Among base stations 5 and 6, base station 6 is closest to the position of the key receiver. Therefore, base station 6 is selected as the next target base station. Repeat the whole step to finally form a base station coverage path between the key sender and the key receiver.

[0046] It should be noted that the signal strength of the base station will change in different time periods. For example, during peak usage, when there are a lot of people, the signal load rate of the base station will become higher. Therefore, according to the screening principle, the screening of base stations will be full of uncertainty, which can make the signal transmission path uncertain, thereby improving the security transmission effect of the key.

[0047] The signal sorting method includes: S1: signal acquisition, acquiring the load conditions of each base station in the sending base station set to obtain a base station load set, and the base station load set includes at least one base station load item; S2: base station sorting, based on the base station load set, according to the load conditions of the base stations, the base stations are sorted from low to high according to the load rate to obtain the first signal sorting item.

[0048] It should be noted that according to the base station load conditions obtained in real time, the base station load rates are sorted from low to high. At this time, the base station ranked first has the lowest load rate, so the signal is the strongest.

[0049] The method for eliminating base stations includes: quantity judgment, based on the first signal ranking item, judging the number of the first signal ranking items, setting a judgment threshold, when the first signal ranking item is lower than the judgment threshold, eliminating the end of the first signal ranking item, when the first signal ranking item is higher than the judgment threshold, eliminating the first and the end of the first signal ranking item to obtain a first screening base station set.

[0050] It should be noted that the judgment threshold is set to 3. When the number of base stations to be sorted is lower than the judgment threshold, only the base stations at the end of the sorted base stations are eliminated. Conversely, when the number of base stations to be sorted is higher than the judgment threshold, the first and last base stations in the sorted base stations are eliminated according to the normal screening principle.

[0051] like Figure 5 As shown, in the specific implementation process, a base station needs to find the next target base station. Two base stations are searched within the coverage range threshold, namely base station 1 and base station 2. The signal strength of base station 1 is greater than that of base station 2. Since the number of base stations to be sorted at this time is lower than the judgment threshold, only the base stations at the end of the sorting ranking are eliminated at this time, and base station 1 is retained as the first screening base station set and as the next target base station.

[0052] The method for eliminating base stations also includes: threshold judgment, setting a transmission threshold, when the first signal sorting item is higher than the judgment threshold, judging the load rates of the remaining base stations excluding the first and last base stations in the first signal sorting item, when there is no base station with a load rate higher than the judgment threshold among the remaining base stations excluding the first and last base stations, selecting the first base station in the first signal sorting item as the first screening base station set, when there is a base station with a load rate higher than the judgment threshold among the remaining base stations excluding the first and last base stations, eliminating the first and last base stations in the first signal sorting item to obtain the first screening base station set.

[0053] It should be noted that the transmission threshold is set, and the transmission threshold is the signal occupancy required for the key to maintain stable transmission, which is 30% of the idle load of the base station. When there is no base station with 30% idle load in the remaining base station load rates excluding the first and the last, the first base station in the first signal ranking item is selected as the first screening base station set. When there is a base station with 30% idle load in the remaining base station load rates excluding the first and the last, the first and the last of the first signal ranking item are eliminated to obtain the first screening base station set.

[0054] like Figure 6 As shown, in the specific implementation process, a base station needs to find the next target base station. Three base stations are searched within the coverage range threshold, namely base station 1, base station 2 and base station 3. The signal strength of base station 1 is the largest, base station 2 is the second, and base station 3 is the smallest. At this time, the first and last base stations are removed and base station 2 is selected as the remaining base station. Base station 2 only has 20% idle load and has not reached the transmission threshold of 30% idle load. At this time, base station 1 is still selected as the first screening base station set.

[0055] The method for determining the first target base station includes: M1: information acquisition, based on the first screening base station set, acquiring the location information of the base stations in the first screening base station set, and obtaining the first screening location set, the first screening location set includes at least one first screening location item; M2: connection determination, based on the first screening location set and the received location item, performing connection determination to obtain the first screening connection set, the first screening connection set includes at least one first screening connection item, sorting the connection lengths based on the first screening connection set, and selecting the first screening connection item with the shortest connection as the target connection, thereby obtaining the first target base station.

[0056] It should be noted that all base stations in the first screening base station set are connected to the receiving location item, and the base station with the shortest connection is selected as the first target base station. At this time, the base station with the shortest connection is closest to the receiving location item.

[0057] The method for determining the first target base station also includes: M3: storage information establishment, based on the previous sending position item and the receiving position item, the information of the previous sending position item and the receiving position item is stored and recorded to obtain the recorded information item, and the previous first selected target base station is obtained according to the recorded information item; M4: information matching, based on the real-time sending position item and the real-time receiving position item, the recorded information item is matched to determine whether the real-time sending position item and the real-time receiving position item are consistent with the recorded information item. When the real-time sending position item and the real-time receiving position item are consistent with the recorded information item, the previous first target base station is used as an excluded base station, and steps M1-M2 are repeated to obtain the first target base station, and M3 is repeated to replace the recorded information item with the real-time sending position item and the real-time receiving position item.

[0058] It should be noted that based on the information of previous sending location items and receiving location items, the last sending location item and receiving location item are recorded, and the sending location item and receiving location item obtained in real time are compared with the previous sending location item and receiving location item. When the comparison information is consistent, the base station selected by the previous sending location item and receiving location item is used as an excluded base station.

[0059] In the specific implementation process, it is now necessary to transmit the key. First, the specific locations of the key sender and the key receiver are obtained. When it is found that the specific locations of the key sender and the key receiver this time are consistent with the specific locations of the key sender and the key receiver last time, four base stations were searched based on the location of the key sender last time by searching the base station information within the coverage range threshold, namely base station 4, base station 5, base station 6 and base station 7. Among them, base station 4 has the best signal, base station 5 is second, then base station 6, and finally base station 7. Based on the screening principle again, base station 4 and base station 7 are eliminated. Among base stations 5 and 6, base station 6 is closest to the location of the key receiver, so base station 6 is selected as the next target base station. Since the comparison information is consistent this time, under the same circumstances, base station 6 is excluded and base station 5 is selected as the next target base station.

[0060] The encryption method includes: X1: change threshold setting, by setting the change threshold, during the key transmission process, the key is changed based on the change threshold to obtain a key change set; X2: determination item setting, setting the determination item, setting the item as the target serial number, according to the determination item, select the key corresponding to the determination item from the key change set as the target key.

[0061] It should be noted that during the key transmission process, the key is changed by setting a change threshold, which is the number of changes, which is 20 times, and by setting a determination item, which is a specific number, usually transmitted by the key sender to the key receiver. Therefore, when the key receiver receives the specific key, the correct key is selected according to the determination item based on all changes in the key during the transmission process.

[0062] like Figure 7 As shown, in the specific implementation process, the key needs to be transmitted. During the key transmission process, it has undergone 20 changes. When the key receiver receives 20 keys, the key sender gives the key receiver a confirmation item of 10, so the key receiver selects the tenth key as the target key.

[0063] The encryption method also includes: assigning a determined value, obtaining the number of base stations in the base station path set, obtaining specific data of the selected base station set, and assigning a determined value to the determined item based on the number information of the base stations in the selected base station set.

[0064] It should be noted that the determination items are determined based on the total number of base stations selected during the key transmission process. Since the selection of base stations is full of uncertainty, the determination items are also in a state of change, which further improves the protection effect of the key.

[0065] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is limited by the attached embodiments and their equivalents.

Claims

1. A dynamic key management method in a 5G network, characterized in that: include: Position acquisition: respectively acquiring the positions of the key sender and the key receiver, obtaining a sending position item and a receiving position item, and obtaining a sending path item based on the connection between the sending position item and the receiving position item; Base station acquisition: Set a coverage threshold, and based on the coverage threshold, search for base stations within the coverage threshold of the sending position item and the receiving position item respectively to obtain a sending base station set and a receiving base station set. At the same time, search for base stations within the coverage threshold of the sending path item to obtain a path base station set, and then obtain a total base station set based on the sending base station set, the receiving base station set and the path base station set; Base station search: Based on the search method, base stations are obtained from the total base station set, so that a base station coverage path is formed between the sending position item and the receiving position item, and a base station path item is obtained. The base station path item includes at least two base stations, and a selected base station set is obtained. According to different selected base station sets, the base station path item is different, and the transmission path of the key will be full of randomness and uncertainty, which strengthens the guarantee of key security; Transmission encryption: Encrypt the key based on the encryption method until the security key reaches the receiving location, further improving the security of the security key; The search method comprises: Step 1: signal sorting: based on the sending base station set, base station signals in the sending base station set are acquired and sorted to obtain a first signal sorting item, and the signal conditions of the base stations in the sending base station set are acquired and sorted starting from the sending position item; Step 2: Eliminate base stations: based on the first signal ranking item, eliminate the first and last base stations in the first signal ranking item to obtain a first screening base station set; Step 3: Determine the base station. Based on the first screened base station set, select the base station closest to the receiving position item as the first target base station. Starting from the first target base station, perform signal sorting on the base stations within the signal range of the first target base station and in the total set of base stations to obtain a second signal sorting item. Repeat step 2 to obtain the second screened base station set. Repeat step 3 to obtain the second target base station. Repeat steps 1 to 3 until a base station coverage path is formed with the receiving position item to obtain a base station path item. The encryption methods include: X1: Change threshold setting. By setting the change threshold, the key is changed based on the change threshold during key transmission to obtain a key change set. The change threshold is the number of changes. X2: Determine item setting, set the determine item, the determine item is a specific number, the set item is the target sequence number, according to the determine item, the key sender transmits it to the key receiver, and selects the key corresponding to the determine item from the key change set as the target key; The signal sorting method includes: S1: signal acquisition, obtaining the load status of each base station in the sending base station set, and obtaining a base station load set, which includes at least one base station load item; S2: sorting the base stations, based on the base station load set and according to the load conditions of the base stations, sorting the base stations from low to high according to the load rates to obtain a first signal sorting item.

2. The method for dynamic key management in a 5G network according to claim 1, characterized in that: The method for eliminating base stations includes: quantity judgment, based on the first signal ranking item, judging the quantity of the first signal ranking item, setting a judgment threshold, when the first signal ranking item is lower than the judgment threshold, eliminating the end of the first signal ranking item, when the first signal ranking item is higher than the judgment threshold, eliminating the first and the end of the first signal ranking item to obtain a first screening base station set.

3. The method for dynamic key management in a 5G network according to claim 2, characterized in that: The method for eliminating base stations also includes: threshold judgment, setting a transmission threshold, when the first signal sorting item is higher than the judgment threshold, judging the load rates of the remaining base stations excluding the first and last base stations in the first signal sorting item, when there is no base station with a load rate higher than the judgment threshold among the remaining base stations excluding the first and last base stations, selecting the first base station in the first signal sorting item as the first screening base station set, when there is a base station with a load rate higher than the judgment threshold among the remaining base stations excluding the first and last base stations, eliminating the first and last base stations in the first signal sorting item to obtain the first screening base station set.

4. The method for dynamic key management in a 5G network according to claim 1, characterized in that: The method for determining the first target base station includes: M1: information acquisition, based on the first screening base station set, acquiring the location information of the base stations in the first screening base station set to obtain a first screening location set, the first screening location set including at least one first screening location item; M2: Connection determination: Based on the first filtering position set and the receiving position item, the connection is determined to obtain a first filtering connection set, the first filtering connection set includes at least one first filtering connection item, and the connection lengths are sorted based on the first filtering connection set, and the first filtering connection item with the shortest connection is selected as the target connection, thereby obtaining the first target base station.

5. The method for dynamic key management in a 5G network according to claim 4, characterized in that: The method for determining the first target base station also includes: M3: establishing storage information, based on the previous sending location item and the receiving location item, storing and recording the information of the previous sending location item and the receiving location item to obtain a record information item, and obtaining the previous first selected target base station according to the record information item; M4: Information matching, based on matching the real-time sending location item and the real-time receiving location item with the recorded information item, determine whether the real-time sending location item and the real-time receiving location item are consistent with the recorded information item. When the real-time sending location item and the real-time receiving location item are consistent with the recorded information item, take the previous first target base station as an excluded base station, repeat steps M1-M2 to obtain the first target base station, and repeat M3 to replace the recorded information item with the real-time sending location item and the real-time receiving location item.

6. The method for dynamic key management in a 5G network according to claim 1, characterized in that: The encryption method also includes: assigning a determined value, obtaining the number of base stations in the base station path set, obtaining specific data of the selected base station set, and assigning a determined value to the determined item based on the number information of the base stations in the selected base station set.

7. A dynamic key management system in a 5G network, characterized in that: A dynamic key management method in a 5G network as described in any one of claims 1-6 is used.

Images